Automatically install and scope software with labels

[nonpunctual]

• @noahtalerman: Chatted w/ customer-preston (Gong recording here) and learned that "Automatic install" might be covered by work we're doing in the "Automatically install" story (Custom packages: set minimum version and automatic install #22076)
  • Scoping software w/ labels is still needed for customer's "Profiles" feature

---

Re-creating the original issue per customer-preston request as #19551 was de-scoped

Organizations may have the need to install applications based on:

• role
• persona
• job title
• department
• organizational unit
• LDAP group
• etc...

i.e., a grouping of Hosts or end users that does not align to a Team in Fleet.

Scenario:

• Customer-preston does not or can't use Teams in Fleet
  • They would like applications to be assigned to "No Team"
  • (see: Add software to "No Team" #19550)

If we do this, the only options for application install in the case where a customer does not use Teams would be:

• install apps for every device in the fleet (i.e., "No Team")
• install apps for 0 devices in the fleet (i.e., applications would not be assignable)

Problem

• If applications can only be assigned to a Team, multiple Teams, "All Teams" or "No Team", how would a Fleet customer make an application assignment from the list above that is not aligned with a Team?

Potential solutions

1. Allow applications to be assigned to Hosts that match a Label.

[noahtalerman]

Thanks for tracking this @nonpunctual.

Heads up that when we ship the new policy automation (#19551), for some scoping software use cases, there's a workaround: add scoping to the policy's query.

For example, I could write a policy's query to fail (not return results) only for specific serial numbers (w/ hardware_serial in system_info table here).

Using the new policy automation, this would scope a software install only to those specific serial numbers.

cc @dherder @ddribeiro @pintomi1989 @zayhanlon

[nonpunctual]

Thanks for explaining the workaround. The original customer feature request is to scope using labels.

[noahtalerman]

Hey @zayhanlon, I think let's start by taking this one one as an air guitar.

When you get the chance, can you please help me set up discovery calls w/ customer-preston and customer-rosner? The fewer attendees the better! Thank you :)

[noahtalerman]

• @noahtalerman: Chatted w/ customer-preston (Gong recording here) and learned that "Automatic install" might be covered by work we're doing in the "Automatically install" story (Custom packages: set minimum version and automatic install #22076)
  • Scoping software w/ labels is still needed for customer's "Profiles" feature

Hey @zayhanlon we learned the above during today's call w/ customer-preston.

I think it makes sense to bring in a user story for scoping software w/ labels next design sprint (we're at capacity this sprint). Or we can pull something out of the current design sprint.

If it's the latter, please schedule 15 mins w/ me ASAP so we can jump on a call what you think we could bring out. Happy to jump on chat about what to pull out.

[zayhanlon]

@noahtalerman let's take it next design sprint. i don't think there's anything on the board that i would be able to pull off (all prospect things so i can't make that call). lets focus on 'labels any' for them for the current design sprint

[noahtalerman]

@zayhanlon sounds good. I pulled this issue off the drafting board (removed air guitar).

I'll leave it up to you (as Customer support DRI) to bring this back to the next feature fest.

[valentinpezon-primo]

Adding additional info about this FR :

• Automatically install software is going to be done in Custom packages: set minimum version and automatic install #22076
• Since Add support for "include any" for custom settings label target #22028 is going to be release before this one, the scoping of software install by label should also include the "OR" from Add support for "include any" for custom settings label target #22028