As a Fleet user I'd like to be able to be able to filter policies based on some arbitrary criteria defined by my organization.
For example, "Show me all the level-1 CIS policies applied to team T", or "show me all the mycorp-thingy policies applied to any team", etc.
I noticed that the policies YAML files have a "tags" field. This looks like what I'm after, but it doesn't appear to be used anywhere in the product - at least it's not exposed to the user/admin. (https://github.com/fleetdm/fleet/blob/main/ee/cis/win-10/cis-policy-queries.yml)
I should be able to filter policies based on tags in the UI and they should appear in results from the API (i.e. when I list policies via API calls the returned data should include a tag list for each policy)
Potential solutions
How do you accomplish this now (might include workarounds, other tools)
Outside Fleet via ad-hoc manual means or scripts that contain mappings of "tags" to policy names.
What problems result from not having this feature?
Cant easily pivot policies on arbitrary groupings of policies for reporting purposes.
Resorting to policy names that include what are effectively tags.
What are you asking fleet to do?
Implement features that enable the functionality described above.
JoStableford
commented
9 months ago
What is the priority of your request
Low
Problem
As a Fleet user I'd like to be able to be able to filter policies based on some arbitrary criteria defined by my organization. For example, "Show me all the level-1 CIS policies applied to team T", or "show me all the mycorp-thingy policies applied to any team", etc. I noticed that the policies YAML files have a "tags" field. This looks like what I'm after, but it doesn't appear to be used anywhere in the product - at least it's not exposed to the user/admin. (https://github.com/fleetdm/fleet/blob/main/ee/cis/win-10/cis-policy-queries.yml) I should be able to filter policies based on tags in the UI and they should appear in results from the API (i.e. when I list policies via API calls the returned data should include a tag list for each policy)
Potential solutions
How do you accomplish this now (might include workarounds, other tools) Outside Fleet via ad-hoc manual means or scripts that contain mappings of "tags" to policy names. What problems result from not having this feature? Cant easily pivot policies on arbitrary groupings of policies for reporting purposes. Resorting to policy names that include what are effectively tags. What are you asking fleet to do? Implement features that enable the functionality described above.
Ties into other FR - https://github.com/fleetdm/fleet/issues/15605 Related FR- https://github.com/fleetdm/fleet/issues/12292