No dedicated repository. Endpoint constellation is documented here; service identity and trust boundaries continue in the Zero Trust mesh case.
Case 22 · Pattern
FleetDM Endpoint Visibility
Endpoints as a constellation: enroll, inventory, query posture, and connect laptop/server truth into the same infra story — not a security island.
00
Evidence home
Pattern case — proof lives next door.
01
How it works
Every endpoint is a star you can query.
FleetDM Endpoint Visibility by Andrey Lesnikov — fleet enrollment and posture that joins the broader infrastructure picture.
-
01
Enroll the fleet
Laptops and servers join as queryable nodes — inventory stops living in a spreadsheet.
-
02
Inventory continuously
osquery-style facts stay fresh so posture is evidence, not last quarter's export.
-
03
Ask posture questions
Targeted queries answer security and ownership questions without a separate island console.
-
04
Connect to infra ownership
Endpoint truth tags into the same ownership model as clusters and services.
02
Evidence
From problem to proof.
How the system is framed, operated, and proven — not a slide deck summary.
01
Endpoint inventory is a security island — device posture never joins cluster and service ownership stories.
02
You need service-mesh identity or secret lifecycle more than device constellation — see Zero Trust and Secrets automation.
03
Zero Trust Service Mesh and Secrets / Certificate Automation close identity gaps. SLO-Driven Monitoring can include endpoint-backed dependency health.
Constraints
Device inventory, query safety, rollout control, privacy, vulnerability context, and integration with existing operations.
03
Related
Nearby systems.
Zero Trust Service Mesh
Internal traffic is often trusted by default, making lateral movement and policy gaps hard to see
East-west mTLS by default
Secrets and Certificate Automation
Manual secret rotation and certificate handling create outage risk and hidden operational debt
Secrets + TLS with a real lifecycle
SLO-Driven Monitoring
Dashboards can look healthy while users experience latency, errors, or degraded workflows
Alerts from SLO burn, not chart noise
Available for meaningful infrastructure conversations