MDM Deployment / Automated Config of CloudFlare WARP

[ProfessorManhattan]

trafficstars

💡 Feature/Idea

It might make things smoother if we can leverage managed deployments so that machines can automatically join CF Teams via WARP. Here are the details:

• https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/

Also, here is the service we would be using for macOS / Windows support: https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/partners/jumpcloud/

We should deploy like this so that the end-user does not have to login each time. We have to provide the CF Teams client ID and secret in a mdm file on macOS for instance. This needs to be done for Linux / Windows as well.

[ProfessorManhattan]

Hey, I ended up doing a bit of work to the home/.chezmoiscripts/universal/*warp*.tmpl file. If you can think of way we can improve the work flow, let me know... I basically just ran through the docs and integrated their recommendations.

[ProfessorManhattan]

We still need the code for Windows though..

[enggnr]

@ProfessorManhattan, the template file has the config needed to complete registering the client using the ID and secrets (per the docs). The linux template file can be used for configuring Windows also.

Installation of the WARP client on windows is configured to be performed using choco in the Software.yml file. Do we need to add a step for windows (in its own script) to check and install like how it is done for the sh template?

About MDM deployment using JumpCloud, I found a couple of CLI tools to interact with JumpCloud - this and this. These can be used to configure before hand but not during the automation I believe. Like it is mentioned in the docs (and the tmpl file), MDM config file on Mac needs to be pushed by a MDM tool. Are we looking to automate anything related to MDM configuration?

Yes, we need code for setting up on Windows (for most of the apps?).