Upload cnquery pack with cnquery

[kmf]

I’m trying to upload a cnquery pack with cnquery getting an error …

FTL could not add query packs error="rpc error: code = PermissionDenied desc = no valid permissions to access the resource"

Any idea where I can get a token for this or set the token?

[kvivek1115]

Hope you have gone through https://mondoo.com/docs/tutorials/mondoo/account-setup/

[kmf]

Yes.

cat ~/.config/mondoo/mondoo.yml

agent_mrn: //agents.api.mondoo.app/spaces/eu-NOPE-728568/agents/NOPE
api_endpoint: https://eu.api.mondoo.com
certificate: |
    -----BEGIN CERTIFICATE-----
NOPE
    -----END CERTIFICATE-----
force: false
log-level: info
mrn: //agents.api.mondoo.app/spaces/eu-NOPE-728568/serviceaccounts/NOPE
name: ""
private_key: |
    -----BEGIN PRIVATE KEY-----
NOPE
    -----END PRIVATE KEY-----
space_mrn: //captain.api.mondoo.app/spaces/eu-NOPE-NOPE
verbose: false

[kmf]

mondoo register --token $MONDOO_REGISTRATION_TOKEN;
→ token will expire at Sat, ** Aug **** 10:59:47 SAST
→ start managed client registration
→ saving mondoo config path=/Users/kmf/.config/mondoo/mondoo.yml
→ client //agents.api.mondoo.app/spaces/NOPE/agents/NOPE is registered successfully

~/test/mql on ☁️ (eu-west-1) took 1s
❯ cnquery pack upload mondoo-linux-inventory.mql.yaml
→ loaded configuration from /Users/kmf/.config/mondoo/mondoo.yml using source default
→ load query pack bundle file=mondoo-linux-inventory.mql.yaml
→ valid query pack
→ add query pack bundle to space space=//captain.api.mondoo.app/spaces/eu-NOPE-NOPE-NOPE
FTL could not add query packs error="rpc error: code = PermissionDenied desc = no valid permissions to access the resource"

[czunker]

Hi @kmf ,

looks like the Service Account you are using has the wrong role assigned. I assume it has the default role of "Space Agent".

To upload a policy, you have to change the role of your Service Account. On the Settings page under Service Accounts, you can expand the Service Account:

Then click on "PERMISSIONS" and assign "Space Editor" to your Service Account:

Please wait a moment before you retry, the permissions are cached.

[kmf]

~/test/mql on ☁️ (eu-west-1)
❯ cnquery pack upload mondoo-linux-inventory.mql.yaml
→ loaded configuration from /Users/kmf/.config/mondoo/mondoo.yml using source default
→ load query pack bundle file=mondoo-linux-inventory.mql.yaml
→ valid query pack
→ add query pack bundle to space space=//captain.api.mondoo.app/spaces/eu-NOPE
→ successfully added query packs

Working