Stop clicking and start committing: a GitOps workflow for endpoint management
summary
Argues that moving MDM configs into a Git repo eliminates ClickOps by showing a working GitOps pipeline: configs in version control, CI (GitHub Actions) as the only writer, sandbox branches promoted by merge, and secrets kept in 1Password. Demonstration uses Fleet with a live repo, automated dry‑run checks, required code reviews and revert pull requests that successfully undo changes, plus AI producing AI‑generated PRs to author policies and a fast apply step via GitHub Actions — it works end‑to‑end.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 2:34Endpoint management in GUI era
- 7:27Endpoint config maturity model
- 10:17GitOps core principles
- 12:23AI and config authoring cost
- 15:50Security for AI endpoints
- 16:30Live GitOps demo with Fleet
- 29:21Git skill gaps solutions
- 31:52Call to action
related talks
31mGitOps, the Final Frontier: Proposing, Promoting, and Reverting
24mWhen Git Push Meets Human Pushback: The Culture of GitOpS
30mThe Intersection of CD Gates and GitOps: A Match Made in Deployment Heaven
27mSecure by Design: Embedding DevSecOps into Your GitOps Workflows
06mGitOps - At a Glance
55mGitOps, Fostering Next-Generation Operations Teams
35mGitOps - the holy grail of devops
35mGitOps - Operations by Pull Request