Class AdmissionRule

An admission rule specifies either that all container images used in a pod creation request must be attested to by one or more attestors, that all pod creations will be allowed, or that all pod creations will be denied. Images matching an admission allowlist pattern are exempted from admission rules and will never block a pod creation.

Inheritance

object

AdmissionRule

Implements

IDirectResponseSchema

Inherited Members

object.Equals(object)

object.Equals(object, object)

object.GetHashCode()

object.GetType()

object.MemberwiseClone()

object.ReferenceEquals(object, object)

object.ToString()

Namespace: Google.Apis.BinaryAuthorization.v1.Data

Assembly: Google.Apis.BinaryAuthorization.v1.dll

Syntax

public class AdmissionRule : IDirectResponseSchema

Properties

ETag

The ETag of the item.

Declaration

public virtual string ETag { get; set; }

Property Value

Type	Description
string

EnforcementMode

Required. The action when a pod creation is denied by the admission rule.

Declaration

[JsonProperty("enforcementMode")]
public virtual string EnforcementMode { get; set; }

Property Value

Type	Description
string

EvaluationMode

Required. How this admission rule will be evaluated.

Declaration

[JsonProperty("evaluationMode")]
public virtual string EvaluationMode { get; set; }

Property Value

Type	Description
string

RequireAttestationsBy

Optional. The resource names of the attestors that must attest to a container image, in the format projects/*/attestors/*. Each attestor must exist before a policy can reference it. To add an attestor to a policy the principal issuing the policy change request must be able to read the attestor resource. Note: this field must be non-empty when the evaluation_mode field specifies REQUIRE_ATTESTATION, otherwise it must be empty.

Declaration

[JsonProperty("requireAttestationsBy")]
public virtual IList<string> RequireAttestationsBy { get; set; }

Property Value

Type	Description
IList<string>

Implements

IDirectResponseSchema