prisma-cloud-compute-operator
prisma-cloud-compute-operator copied to clipboard
Add ability to configure policies with operator
Is your feature request related to a problem?
Currently there is no way to deploy PCC with a set of rules via the operator. It would be ideal if this were possible to have a repeatable way of deploying PCC with pre-set rules.
Describe the solution you'd like
Provide a way via the spec for the console/consoledefender to supply rules that the operator will pre-configure the PCC instance with. I'm not sure of the best way to do this, but perhaps there would be a way to do one of the following:
- Point at a repo containing a "base configuration" with JSON files to import
- Point at a configmap/secret that has these JSON files already in the cluster
Additional context
Without this ability there is a lot of manual work to spin up a "clean install" with the same PCC rules each time.
@mjnagel you can look into https://github.com/PaloAltoNetworks/terraform-provider-prismacloudcompute as an alternative