Class AdmissionRule
An admission rule specifies either that all container images used in a pod creation request must be attested to by one or more attestors, that all pod creations will be allowed, or that all pod creations will be denied. Images matching an admission allowlist pattern are exempted from admission rules and will never block a pod creation.
Implements
Inherited Members
Namespace: Google.Apis.BinaryAuthorization.v1beta1.Data
Assembly: Google.Apis.BinaryAuthorization.v1beta1.dll
Syntax
public class AdmissionRule : IDirectResponseSchema
Properties
ETag
The ETag of the item.
Declaration
public virtual string ETag { get; set; }
Property Value
Type | Description |
---|---|
string |
EnforcementMode
Required. The action when a pod creation is denied by the admission rule.
Declaration
[JsonProperty("enforcementMode")]
public virtual string EnforcementMode { get; set; }
Property Value
Type | Description |
---|---|
string |
EvaluationMode
Required. How this admission rule will be evaluated.
Declaration
[JsonProperty("evaluationMode")]
public virtual string EvaluationMode { get; set; }
Property Value
Type | Description |
---|---|
string |
RequireAttestationsBy
Declaration
[JsonProperty("requireAttestationsBy")]
public virtual IList<string> RequireAttestationsBy { get; set; }
Property Value
Type | Description |
---|---|
IList<string> |