Set the security baseline policy mode (audit or enforce) (browser session)

Switches the security baseline’s Kyverno policies between audit and enforce on one cluster by updating the policy add-on’s configuration through GitOps, and returns the resulting commit. Requires security.triage or security.manage; returns 404 when the baseline policy add-on is not installed.

POST /org/clusters/imported/{cluster_id}/security/policy-mode

Set the security baseline policy mode (audit or enforce) (browser session)

Python

import requests

url = "https://api.platform.ankra.app/org/clusters/imported/{cluster_id}/security/policy-mode"

payload = {}
headers = {
    "cookie": "ankra_session=",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

200

{
  "commit_sha": "<string>",
  "commit_url": "<string>",
  "mode": "audit",
  "valid": true
}

Authorizations

ankra_session · string · cookie · required

Browser session. Mutations also require X-Ankra-CSRF.

Path Parameters

cluster_id · string<uuid> · required

Body

application/json

mode · enum<string> · required

Available options: audit, enforce, off

Response

200

application/json

The kyverno-policies addon values were updated with the requested validationFailureAction; the reconciler applies the release.

commit_sha · string | null · required

commit_url · string | null · required

mode · enum<string> · required

Available options: audit, enforce

valid · boolean · required