Discharge7443/fleet
1
0
Fork 0
Code Issues Pull Requests Actions 5 Packages Projects Releases Wiki Activity

Docs v4.75.0 (#34443)

Browse Source 
Documentation changes for the 4.75 release

---------

Co-authored-by: Marko Lisica <83164494+marko-lisica@users.noreply.github.com>
Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
Co-authored-by: Victor Lyuboslavsky <2685025+getvictor@users.noreply.github.com>
Co-authored-by: Ian Littman <iansltx@gmail.com>
Co-authored-by: Noah Talerman <noahtal@umich.edu>
Co-authored-by: Lucas Manuel Rodriguez <lucas@fleetdm.com>
Co-authored-by: Magnus Jensen <magnus@fleetdm.com>
Co-authored-by: Jordan Montgomery <elijah.jordan.montgomery@gmail.com>
Co-authored-by: Tim Lee <timlee@fleetdm.com>
Co-authored-by: Janis Watts <184028114+jmwatts@users.noreply.github.com>
Co-authored-by: Sarah Gillespie <73313222+gillespi314@users.noreply.github.com>
Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
This commit is contained in:
Rachael Shaw
2025-10-17 17:45:52 -05:00
committed by GitHub
co-authored by Marko Lisica Noah Talerman Victor Lyuboslavsky Ian Littman Noah Talerman Lucas Manuel Rodriguez Magnus Jensen Jordan Montgomery Tim Lee Janis Watts Sarah Gillespie Mike Thomas
parent c9a14d5038
commit 7ed4aac2b8
18 changed files with 1026 additions and 240 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/Configuration/fleet-server-configuration.md
+50
View File
@@ -728,6 +728,56 @@ The key must be at least 32 bytes long. Run `openssl rand -base64 32` in the Ter
private_key: 72414F4A688151F75D032F5CDA095FC4
```
### server_private_key_region
AWS region to use for Identity and Access Management (IAM) authentication. This flag only has effect if `server_private_key` is not set.
- Default value: none
- Environment variable: `FLEET_SERVER_PRIVATE_KEY_REGION`
- Config file format:
```yaml
server:
private_key_region: ca-central-1
```
### server_private_key_arn
Optionally, when using Identity and Access Management (IAM) authentication, this is the Amazon Resource Name (ARN) of the server private key.
If set, Fleet reads the private key from AWS Secrets Manager instead of directly from `server_private_key`.
- Default value: `""`
- Environment variable: `FLEET_SERVER_PRIVATE_KEY_STS_ASSUME_ROLE_ARN`
- Config file format:
```yaml
server:
server_private_key_arn: arn:aws:secretsmanager:us-east-1:123456789012:secret:SecretName-473945
```
### server_private_key_sts_assume_role_arn
Optionally, when using Identity and Access Management (IAM) authentication, this is the Amazon Resource Name (ARN) of the AWS Security Token Service (STS) role to assume.
- Default value: `""`
- Environment variable: `FLEET_SERVER_PRIVATE_KEY_STS_ASSUME_ROLE_ARN`
- Config file format:
```yaml
server:
private_key_sts_assume_role_arn: arn:aws:iam::1234567890:role/rds-auth-role
```
### server_private_key_sts_external_id
Optionally, if you're using a third-party to manage AWS resources, this is the AWS Security Token Service (STS) External ID to use for MySQL authentication. Specify this with `server_private_key_arn` and `server_private_key_sts_assume_role_arn`.
- Default value: `""`
- Environment variable: `FLEET_SERVER_PRIVATE_KEY_EXTERNAL_ID`
- Config file format:
```yaml
server:
private_key_sts_external_id: your_unique_id
```
## Auth
### auth_sso_session_validity_period