crowdstrike.falcon.sensor_update_builds_info module – Get a list of available sensor build versions

Note

This module is part of the crowdstrike.falcon collection (version 4.7.0).

To install it, use: ansible-galaxy collection install crowdstrike.falcon. You need further requirements to be able to use this module, see Requirements for details.

To use it in a playbook, specify: crowdstrike.falcon.sensor_update_builds_info.

New in crowdstrike.falcon 4.4.0

Synopsis

  • Returns a list of the available sensor build versions that you can use in your policies.

Requirements

The below requirements are needed on the host that executes this module.

  • Sensor update policies [READ] API scope

  • crowdstrike-falconpy >= 1.3.0

  • python >= 3.6

Parameters

Parameter

Comments

auth

dictionary

The registered result of the crowdstrike.falcon.auth module, or a dictionary containing the access_token and cloud keys.

If provided, the client_id, client_secret, member_cid, and cloud options are ignored.

Useful when needing to make multiple API calls to avoid rate limiting issues.

access_token

string

The OAuth2 access token to use for authentication.

cloud

string

The CrowdStrike cloud region to use.

This can differ from the module’s cloud argument due to autodiscovery.

client_id

aliases: falcon_client_id

string

The CrowdStrike API client ID to use.

See the Falcon documentation for more information about API clients.

The FALCON_CLIENT_ID environment variable can also be used.

client_secret

aliases: falcon_client_secret

string

The CrowdStrike API secret that corresponds to the client ID.

See the Falcon documentation for more information about API clients.

The FALCON_CLIENT_SECRET environment variable can also be used.

cloud

string

The CrowdStrike cloud region to use.

All clouds are automatically discovered if not specified, except for the us-gov-1 cloud.

The FALCON_CLOUD environment variable can also be used.

Choices:

  • "us-1" ← (default)

  • "us-2"

  • "us-gov-1"

  • "eu-1"

ext_headers

dictionary

Extended headers that are prepended to the default headers dictionary.

member_cid

string

The CrowdStrike member CID for MSSP authentication.

See the Falcon documentation for more information about API clients.

The FALCON_MEMBER_CID environment variable can also be used.

platform

string

Limit the results to a specific platform.

If not specified, builds for all platforms are returned.

Choices:

  • "windows"

  • "linux"

  • "linuxarm64"

  • "zlinux"

  • "mac"

stage

string

Limit the results to a specific stage.

If not specified, only builds in the prod stage are returned.

Choices:

  • "prod" ← (default)

  • "early_adopter"

user_agent

string

Custom User-Agent string to use for requests to the API.

The user agent string is prepended to the default user agent string (crowdstrike-ansible/<version>).

See RFC 7231 for more information.

The FALCON_USER_AGENT environment variable can also be used.

Examples

- name: Get all sensor build versions
  crowdstrike.falcon.sensor_update_builds_info:

- name: Get all sensor build versions for the Windows platform
  crowdstrike.falcon.sensor_update_builds_info:
    platform: windows

Return Values

Common return values are documented here, the following are the fields unique to this module:

Key

Description

builds

list / elements=dictionary

A list of available sensor build versions.

Returned: success

build

string

The complete build version value.

For automatic builds, this can include build stage and tagged identifiers.

Returned: success

Sample: "16410|n|tagged|11"

platform

string

The platform for which the build is available.

Returned: success

Sample: "Windows"

sensor_version

string

The version of the sensor associated with the build.

Returned: success

Sample: "6.49.16303"

stage

string

The stage of the build.

Returned: success

Sample: "prod"

Authors

  • Carlos Matos (@carlosmmatos)