Enable Nudge auto-install and comment policy

[allenhouchins]

Comment out the nudge-installed policy in it-and-security/fleets/workstations.yml and set install_software: true for the Nudge fleet-maintained app in it-and-security/lib/macos/policies/patch-fleet-maintained-apps.yml. This ensures Fleet will automatically install/patch Nudge on matching Macs (using the existing install-nudge-assets policy) rather than relying on the nudge-installed enforcement entry.

Summary by CodeRabbit

• Bug Fixes
  • Disabled a macOS policy for workstations, removing it from policy evaluation.
  • Enabled software installation in the macOS update policy, allowing updates to proceed instead of being blocked.

[claude]

Claude Code Review

This repository is configured for manual code reviews. Comment @claude review to trigger a review and subscribe this PR to future pushes, or @claude review once for a one-time review.

_{Tip: disable this comment in your organization's Code Review settings.}

[Copilot]

Copilot wasn't able to review any files in this pull request.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 46c507b2-e6b2-43ee-bdcb-deb05e367c97

📥 Commits

Reviewing files that changed from the base of the PR and between 7fde291 and e01104e.

📒 Files selected for processing (2)

• it-and-security/fleets/workstations.yml
• it-and-security/lib/macos/policies/patch-fleet-maintained-apps.yml

---

Walkthrough

The changes disable the nudge macOS policy by commenting out the nudge-installed.yml entry in the workstations policy configuration file. Simultaneously, the install_software setting is toggled from false to true in the patch-fleet-maintained-apps policy configuration, enabling software installation for that policy. The modifications affect fleet workstation policy management without altering policy ordering or other policy entries.

Possibly related PRs

• Revert "Temporarily disable FMA patch policies" #43612: Directly modifies workstation policy configuration for fleet-managed patch policies and toggled install behavior for nudge-related policies
• Update patch-fleet-maintained-apps.yml #43618: Updates the macOS patch-fleet-maintained-apps.yml policy file with changes to patch-type entries and the install_software field
• Update patch-fleet-maintained-apps.yml #43615: Modifies macOS patch policy definitions in patch-fleet-maintained-apps.yml by adding new patch policy entries alongside the install_software flag changes

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch allenhouchins-fix-nudge-policies

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}