Add commands to manage policies/falco rules
mstemm opened this issue · 0 comments
mstemm commented
Add commands to manage policies and falco rules for new secure product.
We should support the following new admin actions:
- update system falco rules for all customers
- update system falco rules for a given customer
- revert a given customer's falco rules to the version for all customers
- revert the system falco rules for all customers to the version originally shipped with the product
- update user falco rules for a given customer
- get the falco rules file that shipped with the product
- get the global falco rules file for all customers
- get a specific customer's system falco rules file
- get a specific customer's user rules file
- fetch all policy events for a given customer in the last N hours
- create the default set of policies from the current system falco rules file
In addition, add "meta" commands that perform the following:
- "Initialize" a customer's policies and falco rules for secure. This includes setting up their system rules file, initializing their policies, etc.