@@ -7375,6 +7375,8 @@ components:
73757375 CloudWorkloadSecurityAgentPolicyCreateAttributes:
73767376 description: Create a new Cloud Workload Security Agent policy
73777377 properties:
7378+ actions:
7379+ $ref: '#/components/schemas/CloudWorkloadSecurityAgentRuleActions'
73787380 description:
73797381 description: The description of the policy
73807382 example: My agent policy
@@ -7456,6 +7458,8 @@ components:
74567458 CloudWorkloadSecurityAgentPolicyUpdateAttributes:
74577459 description: Update an existing Cloud Workload Security Agent policy
74587460 properties:
7461+ actions:
7462+ $ref: '#/components/schemas/CloudWorkloadSecurityAgentRuleActions'
74597463 description:
74607464 description: The description of the policy
74617465 example: My agent policy
@@ -7526,6 +7530,50 @@ components:
75267530 type: string
75277531 kill:
75287532 $ref: '#/components/schemas/CloudWorkloadSecurityAgentRuleKill'
7533+ metadata:
7534+ $ref: '#/components/schemas/CloudWorkloadSecurityAgentRuleActionMetadata'
7535+ set:
7536+ $ref: '#/components/schemas/CloudWorkloadSecurityAgentRuleActionSet'
7537+ type: object
7538+ CloudWorkloadSecurityAgentRuleActionMetadata:
7539+ description: The metadata action applied on the scope matching the rule
7540+ properties:
7541+ image_tag:
7542+ description: The image tag of the metadata action
7543+ type: string
7544+ service:
7545+ description: The service of the metadata action
7546+ type: string
7547+ short_image:
7548+ description: The short image of the metadata action
7549+ type: string
7550+ type: object
7551+ CloudWorkloadSecurityAgentRuleActionSet:
7552+ description: The set action applied on the scope matching the rule
7553+ properties:
7554+ append:
7555+ description: Whether the value should be appended to the field
7556+ type: boolean
7557+ field:
7558+ description: The field of the set action
7559+ type: string
7560+ name:
7561+ description: The name of the set action
7562+ type: string
7563+ scope:
7564+ description: The scope of the set action
7565+ type: string
7566+ size:
7567+ description: The size of the set action
7568+ format: int64
7569+ type: integer
7570+ ttl:
7571+ description: The time to live of the set action
7572+ format: int64
7573+ type: integer
7574+ value:
7575+ description: The value of the set action
7576+ type: string
75297577 type: object
75307578 CloudWorkloadSecurityAgentRuleActions:
75317579 description: The array of actions the rule can perform if triggered
@@ -7541,6 +7589,11 @@ components:
75417589 agentConstraint:
75427590 description: The version of the Agent
75437591 type: string
7592+ blocking:
7593+ description: The blocking policies that the rule belongs to
7594+ items:
7595+ type: string
7596+ type: array
75447597 category:
75457598 description: The category of the Agent rule
75467599 example: Process Activity
@@ -7564,6 +7617,11 @@ components:
75647617 description: The description of the Agent rule
75657618 example: My Agent rule
75667619 type: string
7620+ disabled:
7621+ description: The disabled policies that the rule belongs to
7622+ items:
7623+ type: string
7624+ type: array
75677625 enabled:
75687626 description: Whether the Agent rule is enabled
75697627 example: true
@@ -7577,6 +7635,11 @@ components:
75777635 items:
75787636 type: string
75797637 type: array
7638+ monitoring:
7639+ description: The monitoring policies that the rule belongs to
7640+ items:
7641+ type: string
7642+ type: array
75807643 name:
75817644 description: The name of the Agent rule
75827645 example: my_agent_rule
@@ -7611,10 +7674,22 @@ components:
76117674 CloudWorkloadSecurityAgentRuleCreateAttributes:
76127675 description: Create a new Cloud Workload Security Agent rule.
76137676 properties:
7677+ actions:
7678+ $ref: '#/components/schemas/CloudWorkloadSecurityAgentRuleActions'
7679+ blocking:
7680+ description: The blocking policies that the rule belongs to
7681+ items:
7682+ type: string
7683+ type: array
76147684 description:
76157685 description: The description of the Agent rule.
76167686 example: My Agent rule
76177687 type: string
7688+ disabled:
7689+ description: The disabled policies that the rule belongs to
7690+ items:
7691+ type: string
7692+ type: array
76187693 enabled:
76197694 description: Whether the Agent rule is enabled
76207695 example: true
@@ -7628,6 +7703,11 @@ components:
76287703 items:
76297704 type: string
76307705 type: array
7706+ monitoring:
7707+ description: The monitoring policies that the rule belongs to
7708+ items:
7709+ type: string
7710+ type: array
76317711 name:
76327712 description: The name of the Agent rule.
76337713 example: my_agent_rule
@@ -7718,10 +7798,20 @@ components:
77187798 CloudWorkloadSecurityAgentRuleUpdateAttributes:
77197799 description: Update an existing Cloud Workload Security Agent rule
77207800 properties:
7801+ blocking:
7802+ description: The blocking policies that the rule belongs to
7803+ items:
7804+ type: string
7805+ type: array
77217806 description:
77227807 description: The description of the Agent rule
77237808 example: My Agent rule
77247809 type: string
7810+ disabled:
7811+ description: The disabled policies that the rule belongs to
7812+ items:
7813+ type: string
7814+ type: array
77257815 enabled:
77267816 description: Whether the Agent rule is enabled
77277817 example: true
@@ -7730,6 +7820,11 @@ components:
77307820 description: The SECL expression of the Agent rule
77317821 example: exec.file.name == "sh"
77327822 type: string
7823+ monitoring:
7824+ description: The monitoring policies that the rule belongs to
7825+ items:
7826+ type: string
7827+ type: array
77337828 policy_id:
77347829 description: The ID of the policy where the Agent rule is saved
77357830 example: a8c8e364-6556-434d-b798-a4c23de29c0b
0 commit comments