2023-04-12 11:32:14 +00:00
|
|
|
package main
|
|
|
|
|
|
|
|
import (
|
|
|
|
log "github.com/sirupsen/logrus"
|
|
|
|
"github.com/spf13/cobra"
|
|
|
|
|
2023-10-19 10:18:16 +00:00
|
|
|
"github.com/crowdsecurity/crowdsec/cmd/crowdsec-cli/require"
|
2023-04-12 11:32:14 +00:00
|
|
|
"github.com/crowdsecurity/crowdsec/pkg/cwhub"
|
|
|
|
)
|
|
|
|
|
2023-10-19 10:18:16 +00:00
|
|
|
func NewWaapRulesCmd() *cobra.Command {
|
|
|
|
cmdWaapRules := &cobra.Command{
|
|
|
|
Use: "waap-rules <action> [waap-rule]...",
|
|
|
|
Short: "Manage hub waap rules",
|
|
|
|
Example: `cscli waap-rules list -a
|
|
|
|
cscli waap-rules install crowdsecurity/crs
|
|
|
|
cscli waap-rules inspect crowdsecurity/crs
|
|
|
|
cscli waap-rules upgrade crowdsecurity/crs
|
|
|
|
cscli waap-rules remove crowdsecurity/crs
|
2023-04-12 11:32:14 +00:00
|
|
|
`,
|
|
|
|
Args: cobra.MinimumNArgs(1),
|
2023-10-18 15:17:57 +00:00
|
|
|
Aliases: []string{"waap-rule"},
|
2023-04-12 11:32:14 +00:00
|
|
|
DisableAutoGenTag: true,
|
|
|
|
PersistentPreRunE: func(cmd *cobra.Command, args []string) error {
|
2023-11-06 14:02:11 +00:00
|
|
|
if _, err := require.Hub(csConfig, require.RemoteHub(csConfig)); err != nil {
|
2023-10-19 10:18:16 +00:00
|
|
|
return err
|
2023-04-12 11:32:14 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
return nil
|
|
|
|
},
|
|
|
|
PersistentPostRun: func(cmd *cobra.Command, args []string) {
|
|
|
|
if cmd.Name() == "inspect" || cmd.Name() == "list" {
|
|
|
|
return
|
|
|
|
}
|
|
|
|
log.Infof(ReloadMessage())
|
|
|
|
},
|
|
|
|
}
|
|
|
|
|
2023-10-19 10:18:16 +00:00
|
|
|
cmdWaapRules.AddCommand(NewCmdWaapRulesInstall())
|
|
|
|
cmdWaapRules.AddCommand(NewCmdWaapRulesRemove())
|
|
|
|
cmdWaapRules.AddCommand(NewCmdWaapRulesUpgrade())
|
|
|
|
cmdWaapRules.AddCommand(NewCmdWaapRulesInspect())
|
|
|
|
cmdWaapRules.AddCommand(NewCmdWaapRulesList())
|
2023-04-12 11:32:14 +00:00
|
|
|
|
2023-10-19 10:18:16 +00:00
|
|
|
return cmdWaapRules
|
2023-04-12 11:32:14 +00:00
|
|
|
}
|
|
|
|
|
2023-10-19 10:18:16 +00:00
|
|
|
func NewCmdWaapRulesInstall() *cobra.Command {
|
|
|
|
cmdWaapRulesInstall := &cobra.Command{
|
|
|
|
Use: "install <waap-rule>...",
|
|
|
|
Short: "Install given waap rule(s)",
|
|
|
|
Long: `Fetch and install one or more waap rules from the hub`,
|
|
|
|
Example: `cscli waap-rules install crowdsecurity/crs`,
|
2023-04-12 11:32:14 +00:00
|
|
|
Args: cobra.MinimumNArgs(1),
|
|
|
|
DisableAutoGenTag: true,
|
|
|
|
ValidArgsFunction: func(cmd *cobra.Command, args []string, toComplete string) ([]string, cobra.ShellCompDirective) {
|
2023-10-18 15:11:43 +00:00
|
|
|
return compAllItems(cwhub.WAAP_RULES, args, toComplete)
|
2023-04-12 11:32:14 +00:00
|
|
|
},
|
2023-11-06 14:02:11 +00:00
|
|
|
RunE: itemsInstallRunner(hubItemTypes[cwhub.WAAP_RULES]),
|
2023-10-19 10:18:16 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
flags := cmdWaapRulesInstall.Flags()
|
|
|
|
flags.BoolP("download-only", "d", false, "Only download packages, don't enable")
|
|
|
|
flags.Bool("force", false, "Force install: overwrite tainted and outdated files")
|
|
|
|
flags.Bool("ignore", false, "Ignore errors when installing multiple waap rules")
|
|
|
|
|
|
|
|
return cmdWaapRulesInstall
|
|
|
|
}
|
|
|
|
|
|
|
|
func NewCmdWaapRulesRemove() *cobra.Command {
|
|
|
|
cmdWaapRulesRemove := &cobra.Command{
|
|
|
|
Use: "remove <waap-rule>...",
|
|
|
|
Short: "Remove given waap rule(s)",
|
|
|
|
Long: `remove one or more waap rules`,
|
|
|
|
Example: `cscli waap-rules remove crowdsecurity/crs`,
|
2023-04-12 11:32:14 +00:00
|
|
|
Aliases: []string{"delete"},
|
|
|
|
DisableAutoGenTag: true,
|
|
|
|
ValidArgsFunction: func(cmd *cobra.Command, args []string, toComplete string) ([]string, cobra.ShellCompDirective) {
|
2023-10-18 15:11:43 +00:00
|
|
|
return compInstalledItems(cwhub.WAAP_RULES, args, toComplete)
|
2023-04-12 11:32:14 +00:00
|
|
|
},
|
2023-11-06 14:02:11 +00:00
|
|
|
RunE: itemsRemoveRunner(hubItemTypes[cwhub.WAAP_RULES]),
|
2023-10-19 10:18:16 +00:00
|
|
|
}
|
2023-04-12 11:32:14 +00:00
|
|
|
|
2023-10-19 10:18:16 +00:00
|
|
|
flags := cmdWaapRulesRemove.Flags()
|
|
|
|
flags.Bool("purge", false, "Delete source file too")
|
|
|
|
flags.Bool("force", false, "Force remove: remove tainted and outdated files")
|
|
|
|
flags.Bool("all", false, "Remove all the waap rules")
|
2023-04-12 11:32:14 +00:00
|
|
|
|
2023-10-19 10:18:16 +00:00
|
|
|
return cmdWaapRulesRemove
|
|
|
|
}
|
|
|
|
|
|
|
|
func NewCmdWaapRulesUpgrade() *cobra.Command {
|
|
|
|
cmdWaapRulesUpgrade := &cobra.Command{
|
|
|
|
Use: "upgrade <waap-rule>...",
|
|
|
|
Short: "Upgrade given waap rule(s)",
|
|
|
|
Long: `Fetch and upgrade one or more waap rules from the hub`,
|
|
|
|
Example: `cscli waap-rules upgrade crowdsecurity/crs`,
|
2023-04-12 11:32:14 +00:00
|
|
|
DisableAutoGenTag: true,
|
|
|
|
ValidArgsFunction: func(cmd *cobra.Command, args []string, toComplete string) ([]string, cobra.ShellCompDirective) {
|
2023-10-18 15:11:43 +00:00
|
|
|
return compInstalledItems(cwhub.WAAP_RULES, args, toComplete)
|
2023-04-12 11:32:14 +00:00
|
|
|
},
|
2023-11-06 14:02:11 +00:00
|
|
|
RunE: itemsUpgradeRunner(hubItemTypes[cwhub.WAAP_RULES]),
|
2023-04-12 11:32:14 +00:00
|
|
|
}
|
|
|
|
|
2023-10-19 10:18:16 +00:00
|
|
|
flags := cmdWaapRulesUpgrade.Flags()
|
|
|
|
flags.BoolP("all", "a", false, "Upgrade all the waap rules")
|
|
|
|
flags.Bool("force", false, "Force upgrade: overwrite tainted and outdated files")
|
|
|
|
|
|
|
|
return cmdWaapRulesUpgrade
|
2023-04-12 11:32:14 +00:00
|
|
|
}
|
|
|
|
|
2023-10-19 10:18:16 +00:00
|
|
|
func NewCmdWaapRulesInspect() *cobra.Command {
|
2023-11-06 14:02:11 +00:00
|
|
|
//FIXME; show the "compiled" rule
|
2023-10-19 10:18:16 +00:00
|
|
|
cmdWaapRulesInspect := &cobra.Command{
|
|
|
|
Use: "inspect <waap-rule>",
|
|
|
|
Short: "Inspect a waap rule",
|
|
|
|
Long: `Inspect a waap rule`,
|
|
|
|
Example: `cscli waap-rules inspect crowdsecurity/crs`,
|
2023-04-12 11:32:14 +00:00
|
|
|
Args: cobra.MinimumNArgs(1),
|
2023-10-19 10:18:16 +00:00
|
|
|
DisableAutoGenTag: true,
|
2023-04-12 11:32:14 +00:00
|
|
|
ValidArgsFunction: func(cmd *cobra.Command, args []string, toComplete string) ([]string, cobra.ShellCompDirective) {
|
2023-10-18 15:11:43 +00:00
|
|
|
return compInstalledItems(cwhub.WAAP_RULES, args, toComplete)
|
2023-04-12 11:32:14 +00:00
|
|
|
},
|
2023-11-06 14:02:11 +00:00
|
|
|
RunE: itemsInspectRunner(hubItemTypes[cwhub.WAAP_RULES]),
|
2023-04-12 11:32:14 +00:00
|
|
|
}
|
|
|
|
|
2023-10-19 10:18:16 +00:00
|
|
|
flags := cmdWaapRulesInspect.Flags()
|
|
|
|
flags.StringP("url", "u", "", "Prometheus url")
|
|
|
|
flags.Bool("no-metrics", false, "Don't show metrics (when cscli.output=human)")
|
|
|
|
|
|
|
|
return cmdWaapRulesInspect
|
2023-04-12 11:32:14 +00:00
|
|
|
}
|
|
|
|
|
2023-10-19 10:18:16 +00:00
|
|
|
func NewCmdWaapRulesList() *cobra.Command {
|
|
|
|
cmdWaapRulesList := &cobra.Command{
|
|
|
|
Use: "list [waap-rule]...",
|
|
|
|
Short: "List waap rules",
|
|
|
|
Long: `List of installed/available/specified waap rules`,
|
2023-10-18 15:17:57 +00:00
|
|
|
Example: `cscli waap-rules list
|
2023-10-19 10:18:16 +00:00
|
|
|
cscli waap-rules list -a
|
|
|
|
cscli waap-rules list crowdsecurity/crs`,
|
2023-04-12 11:32:14 +00:00
|
|
|
DisableAutoGenTag: true,
|
2023-11-06 14:02:11 +00:00
|
|
|
RunE: itemsListRunner(hubItemTypes[cwhub.WAAP_RULES]),
|
2023-04-12 11:32:14 +00:00
|
|
|
}
|
|
|
|
|
2023-10-19 10:18:16 +00:00
|
|
|
flags := cmdWaapRulesList.Flags()
|
|
|
|
flags.BoolP("all", "a", false, "List disabled items as well")
|
|
|
|
|
|
|
|
return cmdWaapRulesList
|
2023-04-12 11:32:14 +00:00
|
|
|
}
|