Configuration endpoints to receive osquery configuration from gitOps

[javuto]

Implementation of #746 and adding configuration endpoints to osctrl-tls to receive osquery configuration per environment, so it can be integrated in a gitOps flow. It disables the ability to edit configurations via osctrl-admin.

[Copilot]

Pull request overview

Adds GitOps-oriented configuration ingestion to osctrl-tls by introducing dedicated configuration update endpoints and a “read-only configuration” mode that prevents edits through osctrl-admin.

Changes:

• Introduces a new TLS POST endpoint (/{env}/{secret}/osquery-config) to push osquery configuration updates (optionally with integrity checking).
• Extends TLS YAML/flag configuration to define config endpoints and adds an osquery.readOnly flag to disable configuration edits via admin.
• Updates the admin configuration UI/POST handler to enforce read-only mode.

Reviewed changes

Copilot reviewed 12 out of 12 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
pkg/types/types.go	Adds request type for config endpoint payloads.
pkg/environments/environments.go	Adds default path constant for the new config endpoint.
pkg/config/utils.go	Includes config endpoints in generated TLS example config output.
pkg/config/types.go	Adds configEndpoints config and osquery.readOnly flag in config types.
pkg/config/flags.go	Adds CLI/env flag to enable read-only configuration mode.
cmd/tls/utils.go	Wires loaded YAML configEndpoints into runtime params.
cmd/tls/main.go	Registers the new TLS config endpoint when configured; wires handler options.
cmd/tls/handlers/post.go	Implements the new config ingestion endpoint (base64+gzip + optional integrity).
cmd/tls/handlers/handlers.go	Adds handler option/storage for configured endpoints.
cmd/admin/templates/conf.html	Makes config editors read-only in the UI and disables actions when configured.
cmd/admin/handlers/post.go	Blocks configuration updates when read-only mode is enabled.
.pre-commit-config.yaml	Updates golangci-lint pre-commit hook revision.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.