Scoping Nudge to all workstations (#32909)

- Prep for scoping Nudge and all related files to all workstations
- Disabling Software Update notifications to rely more on Nudge notifications

it-and-security/lib/macos/configuration-profiles/nudge-configuration.mobileconfig

@@ -125,10 +125,6 @@
 						<string>en</string>
 						<key>actionButtonText</key>
 						<string>Update</string>
-						<key>customDeferralButtonText</key>
-						<string>Custom</string>
-						<key>customDeferralDropdownText</key>
-						<string>Defer</string>
 						<key>informationButtonText</key>
 						<string>More Info</string>
 						<key>mainContentHeader</key>
@@ -147,14 +143,18 @@ If you fail to update by the deadline, access and functionality may be limited.
 If you have any questions or need any assistance, please reach out via #help-it-and-enablement in Slack.</string>
 						<key>mainHeader</key>
 						<string>Required software update now available</string>
+						<key>subHeader</key>
+						<string>A friendly reminder from the IT &amp; Enablement team</string>
+						<key>customDeferralButtonText</key>
+						<string>Custom</string>
+						<key>customDeferralDropdownText</key>
+						<string>Defer</string>
 						<key>oneDayDeferralButtonText</key>
 						<string>One Day</string>
 						<key>oneHourDeferralButtonText</key>
 						<string>One Hour</string>
 						<key>primaryQuitButtonText</key>
 						<string>Later</string>
-						<key>subHeader</key>
-						<string>A friendly reminder from the IT &amp; Enablement team</string>
 					</dict>
 				</array>
 			</dict>

it-and-security/lib/macos/declaration-profiles/Software Update settings.json

@@ -8,7 +8,7 @@
             "InstallOSUpdates": "Allowed",
             "InstallSecurityUpdate": "AlwaysOn"
         },
-        "Notifications": true,
+        "Notifications": false,
         "RapidSecurityResponse": {
             "Enabled": true
         }

it-and-security/lib/macos/software/nudge-assets.yml

@@ -3,5 +3,3 @@ self_service: false
 categories:
 post_install_script:
   path: ../scripts/nudge-postinstall.sh
-labels_include_any:
-  - "Nudge test devices"

it-and-security/lib/macos/software/nudge.yml

@@ -1,5 +1,3 @@
 url: https://github.com/macadmins/nudge/releases/download/v2.0.12.81807/Nudge-2.0.12.81807.pkg
 self_service: false
 categories:
-labels_include_any:
-  - "Nudge test devices"

it-and-security/teams/workstations-canary.yml

@@ -124,8 +124,6 @@ controls:
         labels_include_any:
           - "Santa test devices"
       - path: ../lib/macos/configuration-profiles/nudge-configuration.mobileconfig
-        labels_include_any:
-          - "Nudge test devices"
   macos_setup:
     bootstrap_package: ""
     enable_end_user_authentication: false

it-and-security/teams/workstations.yml

@@ -71,6 +71,7 @@ controls:
       - path: ../lib/macos/configuration-profiles/1password-managed-settings.mobileconfig
         labels_include_any:
           - "Macs with 1Password installed"
+      - path: ../lib/macos/configuration-profiles/nudge-configuration.mobileconfig
   macos_setup:
     bootstrap_package: ""
     enable_end_user_authentication: true
@@ -105,6 +106,7 @@ controls:
     - path: ../lib/windows/scripts/create-admin-user.ps1
     - path: ../lib/linux/scripts/uninstall-fleetd-linux.sh
     - path: ../lib/macos/scripts/install-macos-compatibility-extension.sh
+    - path: ../lib/macos/scripts/install-nudge.sh
     - path: ../lib/linux/scripts/install-fleet-desktop-required-extension.sh
 policies:
   - path: ../lib/macos/policies/1password-emergency-kit-check.yml
@@ -116,6 +118,7 @@ policies:
   - path: ../lib/macos/policies/enrollment-profile-up-to-date.yml
   - path: ../lib/macos/policies/disk-encryption-check.yml
   - path: ../lib/macos/policies/1password-installed.yml
+  - path: ../lib/macos/policies/install-nudge.yml
   - path: ../lib/windows/policies/antivirus-signatures-up-to-date.yml
   - path: ../lib/windows/policies/all-windows-updates-installed.yml
   - path: ../lib/windows/policies/disk-encryption-check.yml
@@ -134,6 +137,8 @@ software:
     - path: ../lib/macos/software/santa.yml # Santa for macOS
     - path: ../lib/macos/software/zoom.yml # Zoom for macOS
     - path: ../lib/macos/software/fleet-keynote-theme.yml # Fleet Keynote theme for macOS
+    - path: ../lib/macos/software/nudge.yml # Nudge for macOS 
+    - path: ../lib/macos/software/nudge-assets.yml # Nudge assets for macOS
     - path: ../lib/linux/software/zoom-deb.yml # Zoom for Ubuntu
     - path: ../lib/linux/software/zoom-rpm.yml # Zoom for RedHat
     - path: ../lib/linux/software/slack-deb.yml # Slack for Ubuntu