Blog

Releasev0.3.0

FleetOps 0.3: backup and restore, single sign-on and LDAP

The whole server in one sealed backup file, free in Community. Enterprise adds single sign-on with Microsoft, Google, GitHub, any OIDC provider or LDAP, and scheduled backups to S3 or a folder.

0.3.0 makes a FleetOps server easy to move and recover, and lets people sign in with the accounts they already have. Update the image tag and restart; the database migrates on start.

Backup and restore

In Admin → Backup, choose Download backup and set a passphrase. One file holds everything the server keeps: users, environments and their credentials, grants, teams, roles, single sign-on, the license, settings and the audit log. The file is sealed with the passphrase, and FleetOps can’t recover a lost one.

To move or recover a server, start the new one and choose Restore from backup on its first screen, within 10 minutes of starting it. You can also restore over a running server from Admin → Backup: everything there is replaced, everyone is signed out, and the previous data is kept in <data>/pre-restore/. The new server keeps its own secret key and re-encrypts secrets with it.

Environment variables and command-line settings are not part of the backup, and agents enrolled after the backup was made need enrolling again. Backup and restore is free in Community.

Single sign-on (Enterprise)

In Admin → Single sign-on an admin connects Microsoft Entra ID, Google Workspace, GitHub or any OpenID Connect provider, and maps the provider’s groups to teams or to the admin role. People then use the Sign in with … button on the login page. FleetOps creates their account on first sign-in, and every sign-in brings their teams and role in line with their groups.

Local admins always keep their passwords, as the way in if the provider is down; an admin can limit password login to them. Set FLEETOPS_PUBLIC_URL so the provider can send people back. Setup for each provider is in the single sign-on guide.

LDAP sign-in (Enterprise)

Active Directory and OpenLDAP connect the same way, with the same group-to-team mapping. People sign in with their directory username and password on the normal login form.

Scheduled backups (Enterprise)

With a license, FleetOps backs up daily to S3-compatible storage (AWS S3, MinIO, Cloudflare R2 and others), a local directory such as a mounted volume, or both. It keeps the last N backups or N days of them, and Admin → Backup lists the five most recent with a Restore button each. Without a license, scheduled backups pause with a banner for admins and resume once one is installed.

Next

Stacks and GitOps, port-forward, and API tokens for Enterprise. See the roadmap.