Changing platform of a label via GitOps does not work

[allenhouchins]

Fleet version: 4.68.0
Web browser and operating system: Any

---

💥  Actual behavior

I noticed a few of my labels in dogfood were being applied erroneously to some devices. Upon investigation, what I think happened is the platform scope had changed. Knowing that labels are immutable in the UI, it seems GitOps can lead an admin to a tough position if the scope is changed via GitOps but things aren't updated retroactively as a result.

🛠️ To fix

When label platforms are updated in GitOps, remove label from hosts on different platforms.

🧑‍💻  Steps to reproduce

1. Create a label via GitOps and assign it to all platforms or a specific platform (darwin for example)
2. Observe the label in the UI and ensure it is applied to the correct devices
3. Edit the label via GitOps and change the platform (to windows for example)
4. Notice your Mac devices will have the label applied and that the labels UI shows the correct scope

🕯️ More info (optional)

[lucasmrod]

Once we fix this bug #29767 won't happen again.
For fixing Dogfood, the IT admin will still need to remove the label and apply it again because we cannot retro-actively fix the bug. (Let me know if it makes sense.)

/cc @getvictor