From 7b65661d427ba512172bcdc768330f8c999eafbd Mon Sep 17 00:00:00 2001 From: Allen Houchins Date: Wed, 1 Jul 2026 13:17:38 -0500 Subject: [PATCH] Dogfood: force-install 1Password patches on Workstations Switch the 1Password patch automation on the Workstations fleet from calendar-event-driven to forced install on both macOS and Windows. Sets install_software: true, removes calendar_events_enabled, and updates the resolution text to match the other IT-managed forced-install policies. --- .../lib/macos/policies/patch-fleet-maintained-apps.yml | 5 ++--- .../lib/windows/policies/patch-fleet-maintained-apps.yml | 5 ++--- 2 files changed, 4 insertions(+), 6 deletions(-) diff --git a/it-and-security/lib/macos/policies/patch-fleet-maintained-apps.yml b/it-and-security/lib/macos/policies/patch-fleet-maintained-apps.yml index d2a45fdf1fd..62ea0aa8d81 100644 --- a/it-and-security/lib/macos/policies/patch-fleet-maintained-apps.yml +++ b/it-and-security/lib/macos/policies/patch-fleet-maintained-apps.yml @@ -8,11 +8,10 @@ - Macs with Google Chrome installed - name: macOS - 1Password up to date description: This device may have an outdated version of 1Password, potentially risking security vulnerabilities or compatibility issues. - resolution: "Download the latest version from Self-service, otherwise the update will automatically install during an upcoming scheduled maintenance window. Check your calendar for details." + resolution: "1Password is managed by IT and should be updated automatically. If you are failing this policy, install the latest version from Self-service. If you are still failing after Refetch completes, drop a note in #help-it." type: patch fleet_maintained_app_slug: 1password/darwin - install_software: false - calendar_events_enabled: true + install_software: true labels_include_any: - Macs with 1Password installed - name: macOS - Brave Browser up to date diff --git a/it-and-security/lib/windows/policies/patch-fleet-maintained-apps.yml b/it-and-security/lib/windows/policies/patch-fleet-maintained-apps.yml index 13550ae80b1..96c71447a41 100644 --- a/it-and-security/lib/windows/policies/patch-fleet-maintained-apps.yml +++ b/it-and-security/lib/windows/policies/patch-fleet-maintained-apps.yml @@ -8,11 +8,10 @@ - x86 Windows hosts with Slack installed - name: Windows - 1Password up to date description: This device may have an outdated version of 1Password, potentially risking security vulnerabilities or compatibility issues. - resolution: "Download the latest version from Self-service, otherwise the update will automatically install during an upcoming scheduled maintenance window. Check your calendar for details." + resolution: "1Password is managed by IT and should be updated automatically. If you are failing this policy, install the latest version from Self-service. If you are still failing after Refetch completes, drop a note in #help-it." type: patch fleet_maintained_app_slug: 1password/windows - install_software: false - calendar_events_enabled: true + install_software: true labels_include_any: - x86 Windows hosts with 1Password installed - name: Windows - Claude up to date