How to get/set tracee policy CRD using kube-api endpoint

[hammadahmed1985]

Hi,
I am trying to get and set the tracee policy using the kube-api. I am running a simple tracee in a simple minikube cluster. I use kubectl proxy --port=8080 and want to then list the default policy. Then I want to push a new default policy using the API as well. Is that possible?

[josedonizetti]

@hammadahmed1985 sure, you mean like?

// get the defaul policy
curl http://localhost:8080/apis/tracee.aquasec.com/v1beta1/policies/default-policy

// delete it
curl -XDELETE http://localhost:8080/apis/tracee.aquasec.com/v1beta1/policies/default-policy

// create a new one
curl -XPOST \
-H 'Content-type: application/yaml'\
--data-binary @path/to/policy.yaml \
http://localhost:8080/apis/tracee.aquasec.com/v1beta1/policies

[hammadahmed1985]

This is exactly what I was looking for. Thanks!!

[hammadahmed1985]

@josedonizetti Do you know how the namespace plays in this? This obviously works but does it mean that these policy have a global scope? My tracee is installed in the tracee namespace. Thanks!

[josedonizetti]

yeah, currently policies are not namespaced, because the idea is that you should have only one tracee running per cluster. Perhaps in the future we might review to support a namespaced one, but currently they are not.

[hammadahmed1985]

Thanks @josedonizetti