Skip to content

Support falco rules variants #73

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Jan 29, 2019
Merged

Support falco rules variants #73

merged 2 commits into from
Jan 29, 2019

Conversation

mstemm
Copy link
Contributor

@mstemm mstemm commented Jan 29, 2019

No description provided.

Remove support for endpoints that managed the pre-secure integration of
falco rules into the agent. This was removed from the agent in 0.70.0.
Add the following methods to the python client:

 - {get,set}_default_falco_rules_files: a wrapper around the api endpoint
   /api/settings/defaultRulesFiles, handling PUT and GET.
 - load_default_falco_rules_files: load a collection of files on disk
   with a documented structure, returning a dict suitable for use in
   set_default_falco_rules_files()
 - save_default_falco_rules_files: given a dict from
   get_default_falco_rules_files, save it to a collection of files on disk
   with a documented structure

Also add example programs
{set,get}_secure_default_falco_rules.py. get_... has the ability to
either print the returned set of files directly or save them using a
--save <root dir path> option. Similarly, set_ has a --load <root dir
path> option to load files from disk to a dict for the PUT
/api/settings/defaultRulesFiles.

set_ also has some easier-to-use command line options that allow
setting a single file and tag.
@mstemm mstemm force-pushed the support-falco-rules-variants branch from 2567899 to ce6923b Compare January 29, 2019 22:09
@mstemm mstemm merged commit e90a896 into master Jan 29, 2019
@mstemm mstemm deleted the support-falco-rules-variants branch January 29, 2019 22:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant