Skip to content

Conversation

@iansltx
Copy link
Member

@iansltx iansltx commented Jan 7, 2026

Resolves #32481 for Fleet server-side work.

Checklist for submitter

If some of the following don't apply, delete the relevant line.

  • Changes file added for user-visible changes in changes/, orbit/changes/ or ee/fleetd-chrome/changes.
    See Changes files for more information.

  • Input data is properly validated, SELECT * is avoided, SQL injection is prevented (using placeholders for values in statements)

Testing

  • Added/updated automated tests

  • QA'd all new/changed functionality manually

Next up: wire up environment override on bearer token pull to allow that to work, test end-to-end against Apple API
Next steps:

1. Fix tests
2. Make sure setting apps via GitOps works properly
3. Implement proxy auth management/persistence
Next up: manual testing against fake proxy, automated test updates
…tries

Licensing wasn't picking up license keys for dev/expired licenses to pass on to the proxy because licenses weren't passed by ref.

Still need to figure out what's wrong with the auth-expired case
…n leaving them after soft-deleting them

This has now been end-to-end validated. Just need to write tests now.
@codecov
Copy link

codecov bot commented Jan 7, 2026

Codecov Report

❌ Patch coverage is 80.00000% with 54 lines in your changes missing coverage. Please review.
✅ Project coverage is 65.83%. Comparing base (bc0c7f1) to head (9eac176).

Files with missing lines Patch % Lines
server/mdm/apple/apple_apps/api.go 75.60% 21 Missing and 19 partials ⚠️
...d/fleetctl/fleetctl/testing_utils/testing_utils.go 92.98% 3 Missing and 1 partial ⚠️
cmd/fleet/serve.go 0.00% 3 Missing ⚠️
server/mdm/apple/vpp/refresh.go 83.33% 2 Missing and 1 partial ⚠️
ee/server/service/vpp.go 92.30% 1 Missing and 1 partial ⚠️
cmd/fleet/cron.go 0.00% 1 Missing ⚠️
cmd/fleet/vuln_process.go 0.00% 1 Missing ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##             main   #37969      +/-   ##
==========================================
+ Coverage   65.82%   65.83%   +0.01%     
==========================================
  Files        2387     2387              
  Lines      190158   190304     +146     
  Branches     8428     8428              
==========================================
+ Hits       125168   125285     +117     
- Misses      53609    53623      +14     
- Partials    11381    11396      +15     
Flag Coverage Δ
backend 67.67% <80.00%> (+0.01%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Zed + Opus 4.5; prompt: Fix broken fleetctl tests in https://github.com/fleetdm/fleet/actions/runs/20772756036/job/59652047015. This almost certainly involves replacing the fake iTunes server with a fake VPP apps proxy server, setting env vars appropriately to point at that server.
…with hardcoded bearer tokens

Also fixes expected retry logic in the apple_apps API test since we're doing that one level up now
Zed + Opus 4.5; prompt: Replace the TODOs in server/mdm/apple/apple_apps/api_test.go with appropriate tests.
@iansltx iansltx marked this pull request as ready for review January 8, 2026 05:23
@iansltx iansltx requested a review from a team as a code owner January 8, 2026 05:23
Zed + Opus 4.5; prompt: Add a test for 429s/retry-after to TestDoRetries in server/mdm/apple/apple_apps/api_test.go
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants