Skip to content

Support falco rules variants #73

New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Merged
merged 2 commits into from
Jan 29, 2019
Merged

Support falco rules variants #73

merged 2 commits into from
Jan 29, 2019

Conversation

mstemm
Copy link
Contributor

@mstemm mstemm commented Jan 29, 2019

No description provided.

Remove support for endpoints that managed the pre-secure integration of
falco rules into the agent. This was removed from the agent in 0.70.0.
Add the following methods to the python client:

 - {get,set}_default_falco_rules_files: a wrapper around the api endpoint
   /api/settings/defaultRulesFiles, handling PUT and GET.
 - load_default_falco_rules_files: load a collection of files on disk
   with a documented structure, returning a dict suitable for use in
   set_default_falco_rules_files()
 - save_default_falco_rules_files: given a dict from
   get_default_falco_rules_files, save it to a collection of files on disk
   with a documented structure

Also add example programs
{set,get}_secure_default_falco_rules.py. get_... has the ability to
either print the returned set of files directly or save them using a
--save <root dir path> option. Similarly, set_ has a --load <root dir
path> option to load files from disk to a dict for the PUT
/api/settings/defaultRulesFiles.

set_ also has some easier-to-use command line options that allow
setting a single file and tag.
@mstemm mstemm force-pushed the support-falco-rules-variants branch from 2567899 to ce6923b Compare January 29, 2019 22:09
@mstemm mstemm merged commit e90a896 into master Jan 29, 2019
@mstemm mstemm deleted the support-falco-rules-variants branch January 29, 2019 22:57
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant