sysdiglabs/sysdig-sdk-python

Add commands to manage policies/falco rules

mstemm opened this issue · 0 comments

Add commands to manage policies and falco rules for new secure product.

We should support the following new admin actions:

  • update system falco rules for all customers
  • update system falco rules for a given customer
  • revert a given customer's falco rules to the version for all customers
  • revert the system falco rules for all customers to the version originally shipped with the product
  • update user falco rules for a given customer
  • get the falco rules file that shipped with the product
  • get the global falco rules file for all customers
  • get a specific customer's system falco rules file
  • get a specific customer's user rules file
  • fetch all policy events for a given customer in the last N hours
  • create the default set of policies from the current system falco rules file

In addition, add "meta" commands that perform the following:

  • "Initialize" a customer's policies and falco rules for secure. This includes setting up their system rules file, initializing their policies, etc.