extensionIntegrations
Connect the fleet to NetBird, your directory and Wazuh. These are device-side options the overlay publishes in the catalog; set them once at the organisation and they flow down to every device. Secret values are stored as references (never the secret itself).
NetBird VPN
not publishedZero-config mesh VPN. Devices join with a setup key delivered as a secret reference.
netbird.* options yet. Add the module to the overlay and export the catalog to configure it here.
Directory login (LDAP)
not publishedDevice login against your directory (SSSD/LDAP): domain, server and a bind secret.
identity.* options yet. Add the module to the overlay and export the catalog to configure it here.
Wazuh SIEM
not publishedEndpoint security agent reporting to a Wazuh manager.
wazuh.* options yet. Add the module to the overlay and export the catalog to configure it here.
OpenBao vault
not publishedCentral secret store (open-source Vault). Devices fetch named secrets over the API; rotation needs no configuration change.
openbao.* options yet. Add the module to the overlay and export the catalog to configure it here.
Fleet inventory (osquery)
not publishedReports this device to a Fleet server so one console covers the whole estate, whatever it runs. The device enrols itself and answers queries; nothing is pushed back at it, and configuration stays here. Note that osquery cannot see the Nix store, so software inventory is empty for now.
osquery.* options yet. Add the module to the overlay and export the catalog to configure it here.
Local admin account
not publishedAn administrator who can sign in when the directory or the network is unreachable. Choose the name; the password is delivered as a secret reference, so no credential is shared between fleets. Off locks the account on every device.
localAdmin.* options yet. Add the module to the overlay and export the catalog to configure it here.