Policy (Binary Authorization API v1beta1-rev20241018-2.0.0)

java.lang.Object
- java.util.AbstractMap<String,Object>
- - com.google.api.client.util.GenericData
  - - com.google.api.client.json.GenericJson
    - - com.google.api.services.binaryauthorization.v1beta1.model.Policy

All Implemented Interfaces:

Cloneable, Map<String,Object>
```
public final class Policy
extends com.google.api.client.json.GenericJson
```
A policy for Binary Authorization.
This is the Java data model class that specifies how to parse/serialize into the JSON that is transmitted over HTTP when working with the Binary Authorization API. For a detailed explanation see: https://developers.google.com/api-client-library/java/google-http-java-client/json

Author:

Google, Inc.

Nested Class Summary
- Nested classes/interfaces inherited from class com.google.api.client.util.GenericData
  com.google.api.client.util.GenericData.Flags
- Nested classes/interfaces inherited from class java.util.AbstractMap
  AbstractMap.SimpleEntry<K,V>, AbstractMap.SimpleImmutableEntry<K,V>
- Nested classes/interfaces inherited from interface java.util.Map
  Map.Entry<K,V>

Constructor Summary

Constructors
Constructor and Description

Policy()

Constructors
Constructor and Description
`Policy()`

Method Summary

All Methods Instance Methods Concrete Methods
Modifier and Type	Method and Description
`Policy`	`clone()`
`List<AdmissionWhitelistPattern>`	`getAdmissionWhitelistPatterns()` Optional.
`Map<String,AdmissionRule>`	`getClusterAdmissionRules()` Optional.
`AdmissionRule`	`getDefaultAdmissionRule()` Required.
`String`	`getDescription()` Optional.
`String`	`getEtag()` Optional.
`String`	`getGlobalPolicyEvaluationMode()` Optional.
`Map<String,AdmissionRule>`	`getIstioServiceIdentityAdmissionRules()` Optional.
`Map<String,AdmissionRule>`	`getKubernetesNamespaceAdmissionRules()` Optional.
`Map<String,AdmissionRule>`	`getKubernetesServiceAccountAdmissionRules()` Optional.
`String`	`getName()` Output only.
`String`	`getUpdateTime()` Output only.
`Policy`	`set(String fieldName, Object value)`
`Policy`	`setAdmissionWhitelistPatterns(List<AdmissionWhitelistPattern> admissionWhitelistPatterns)` Optional.
`Policy`	`setClusterAdmissionRules(Map<String,AdmissionRule> clusterAdmissionRules)` Optional.
`Policy`	`setDefaultAdmissionRule(AdmissionRule defaultAdmissionRule)` Required.
`Policy`	`setDescription(String description)` Optional.
`Policy`	`setEtag(String etag)` Optional.
`Policy`	`setGlobalPolicyEvaluationMode(String globalPolicyEvaluationMode)` Optional.
`Policy`	`setIstioServiceIdentityAdmissionRules(Map<String,AdmissionRule> istioServiceIdentityAdmissionRules)` Optional.
`Policy`	`setKubernetesNamespaceAdmissionRules(Map<String,AdmissionRule> kubernetesNamespaceAdmissionRules)` Optional.
`Policy`	`setKubernetesServiceAccountAdmissionRules(Map<String,AdmissionRule> kubernetesServiceAccountAdmissionRules)` Optional.
`Policy`	`setName(String name)` Output only.
`Policy`	`setUpdateTime(String updateTime)` Output only.

Methods inherited from class com.google.api.client.json.GenericJson
getFactory, setFactory, toPrettyString, toString

Methods inherited from class com.google.api.client.util.GenericData
entrySet, equals, get, getClassInfo, getUnknownKeys, hashCode, put, putAll, remove, setUnknownKeys

Methods inherited from class java.util.AbstractMap
clear, containsKey, containsValue, isEmpty, keySet, size, values

Methods inherited from class java.lang.Object
finalize, getClass, notify, notifyAll, wait, wait, wait

Methods inherited from interface java.util.Map
compute, computeIfAbsent, computeIfPresent, forEach, getOrDefault, merge, putIfAbsent, remove, replace, replace, replaceAll

- Constructor Detail
  - Policy
```
public Policy()
```
- Method Detail
  - getAdmissionWhitelistPatterns
```
public List<AdmissionWhitelistPattern> getAdmissionWhitelistPatterns()
```
    Optional. Admission policy allowlisting. A matching admission request will always be permitted. This feature is typically used to exclude Google or third-party infrastructure images from Binary Authorization policies.
    
    Returns:
    
    value or null for none
  - setAdmissionWhitelistPatterns
```
public Policy setAdmissionWhitelistPatterns(List<AdmissionWhitelistPattern> admissionWhitelistPatterns)
```
    Optional. Admission policy allowlisting. A matching admission request will always be permitted. This feature is typically used to exclude Google or third-party infrastructure images from Binary Authorization policies.
    
    Parameters:
    
    admissionWhitelistPatterns - admissionWhitelistPatterns or null for none
  - getClusterAdmissionRules
```
public Map<String,AdmissionRule> getClusterAdmissionRules()
```
    Optional. Per-cluster admission rules. Cluster spec format: `location.clusterId`. There can be at most one admission rule per cluster spec. A `location` is either a compute zone (e.g. us- central1-a) or a region (e.g. us-central1). For `clusterId` syntax restrictions see https://cloud.google.com/container-engine/reference/rest/v1/projects.zones.clusters.
    
    Returns:
    
    value or null for none
  - setClusterAdmissionRules
```
public Policy setClusterAdmissionRules(Map<String,AdmissionRule> clusterAdmissionRules)
```
    Optional. Per-cluster admission rules. Cluster spec format: `location.clusterId`. There can be at most one admission rule per cluster spec. A `location` is either a compute zone (e.g. us- central1-a) or a region (e.g. us-central1). For `clusterId` syntax restrictions see https://cloud.google.com/container-engine/reference/rest/v1/projects.zones.clusters.
    
    Parameters:
    
    clusterAdmissionRules - clusterAdmissionRules or null for none
  - getDefaultAdmissionRule
```
public AdmissionRule getDefaultAdmissionRule()
```
    Required. Default admission rule for a cluster without a per-cluster, per- kubernetes-service- account, or per-istio-service-identity admission rule.
    
    Returns:
    
    value or null for none
  - setDefaultAdmissionRule
```
public Policy setDefaultAdmissionRule(AdmissionRule defaultAdmissionRule)
```
    Required. Default admission rule for a cluster without a per-cluster, per- kubernetes-service- account, or per-istio-service-identity admission rule.
    
    Parameters:
    
    defaultAdmissionRule - defaultAdmissionRule or null for none
  - getDescription
```
public String getDescription()
```
    Optional. A descriptive comment.
    
    Returns:
    
    value or null for none
  - setDescription
```
public Policy setDescription(String description)
```
    Optional. A descriptive comment.
    
    Parameters:
    
    description - description or null for none
  - getEtag
```
public String getEtag()
```
    Optional. A checksum, returned by the server, that can be sent on update requests to ensure the policy has an up-to-date value before attempting to update it. See https://google.aip.dev/154.
    
    Returns:
    
    value or null for none
  - setEtag
```
public Policy setEtag(String etag)
```
    Optional. A checksum, returned by the server, that can be sent on update requests to ensure the policy has an up-to-date value before attempting to update it. See https://google.aip.dev/154.
    
    Parameters:
    
    etag - etag or null for none
  - getGlobalPolicyEvaluationMode
```
public String getGlobalPolicyEvaluationMode()
```
    Optional. Controls the evaluation of a Google-maintained global admission policy for common system-level images. Images not covered by the global policy will be subject to the project admission policy. This setting has no effect when specified inside a global admission policy.
    
    Returns:
    
    value or null for none
  - setGlobalPolicyEvaluationMode
```
public Policy setGlobalPolicyEvaluationMode(String globalPolicyEvaluationMode)
```
    Optional. Controls the evaluation of a Google-maintained global admission policy for common system-level images. Images not covered by the global policy will be subject to the project admission policy. This setting has no effect when specified inside a global admission policy.
    
    Parameters:
    
    globalPolicyEvaluationMode - globalPolicyEvaluationMode or null for none
  - getIstioServiceIdentityAdmissionRules
```
public Map<String,AdmissionRule> getIstioServiceIdentityAdmissionRules()
```
    Optional. Per-istio-service-identity admission rules. Istio service identity spec format: `spiffe:ns//sa/` or `/ns//sa/` e.g. `spiffe://example.com/ns/test-ns/sa/default`
    
    Returns:
    
    value or null for none
  - setIstioServiceIdentityAdmissionRules
```
public Policy setIstioServiceIdentityAdmissionRules(Map<String,AdmissionRule> istioServiceIdentityAdmissionRules)
```
    Optional. Per-istio-service-identity admission rules. Istio service identity spec format: `spiffe:ns//sa/` or `/ns//sa/` e.g. `spiffe://example.com/ns/test-ns/sa/default`
    
    Parameters:
    
    istioServiceIdentityAdmissionRules - istioServiceIdentityAdmissionRules or null for none
  - getKubernetesNamespaceAdmissionRules
```
public Map<String,AdmissionRule> getKubernetesNamespaceAdmissionRules()
```
    Optional. Per-kubernetes-namespace admission rules. K8s namespace spec format: `[a-z.-]+`, e.g. `some-namespace`
    
    Returns:
    
    value or null for none
  - setKubernetesNamespaceAdmissionRules
```
public Policy setKubernetesNamespaceAdmissionRules(Map<String,AdmissionRule> kubernetesNamespaceAdmissionRules)
```
    Optional. Per-kubernetes-namespace admission rules. K8s namespace spec format: `[a-z.-]+`, e.g. `some-namespace`
    
    Parameters:
    
    kubernetesNamespaceAdmissionRules - kubernetesNamespaceAdmissionRules or null for none
  - getKubernetesServiceAccountAdmissionRules
```
public Map<String,AdmissionRule> getKubernetesServiceAccountAdmissionRules()
```
    Optional. Per-kubernetes-service-account admission rules. Service account spec format: `namespace:serviceaccount`. e.g. `test-ns:default`
    
    Returns:
    
    value or null for none
  - setKubernetesServiceAccountAdmissionRules
```
public Policy setKubernetesServiceAccountAdmissionRules(Map<String,AdmissionRule> kubernetesServiceAccountAdmissionRules)
```
    Optional. Per-kubernetes-service-account admission rules. Service account spec format: `namespace:serviceaccount`. e.g. `test-ns:default`
    
    Parameters:
    
    kubernetesServiceAccountAdmissionRules - kubernetesServiceAccountAdmissionRules or null for none
  - getName
```
public String getName()
```
    Output only. The resource name, in the format `projects/policy`. There is at most one policy per project.
    
    Returns:
    
    value or null for none
  - setName
```
public Policy setName(String name)
```
    Output only. The resource name, in the format `projects/policy`. There is at most one policy per project.
    
    Parameters:
    
    name - name or null for none
  - getUpdateTime
```
public String getUpdateTime()
```
    Output only. Time when the policy was last updated.
    
    Returns:
    
    value or null for none
  - setUpdateTime
```
public Policy setUpdateTime(String updateTime)
```
    Output only. Time when the policy was last updated.
    
    Parameters:
    
    updateTime - updateTime or null for none
  - set
```
public Policy set(String fieldName,
                  Object value)
```
    Overrides:
    
    set in class com.google.api.client.json.GenericJson
  - clone
```
public Policy clone()
```
    Overrides:
    
    clone in class com.google.api.client.json.GenericJson

Class Policy

Nested Class Summary

Nested classes/interfaces inherited from class com.google.api.client.util.GenericData

Nested classes/interfaces inherited from class java.util.AbstractMap

Nested classes/interfaces inherited from interface java.util.Map

Constructor Summary

Method Summary

Methods inherited from class com.google.api.client.json.GenericJson

Methods inherited from class com.google.api.client.util.GenericData

Methods inherited from class java.util.AbstractMap

Methods inherited from class java.lang.Object

Methods inherited from interface java.util.Map

Constructor Detail

Policy

Method Detail

getAdmissionWhitelistPatterns

setAdmissionWhitelistPatterns

getClusterAdmissionRules

setClusterAdmissionRules

getDefaultAdmissionRule

setDefaultAdmissionRule

getDescription

setDescription

getEtag

setEtag

getGlobalPolicyEvaluationMode

setGlobalPolicyEvaluationMode

getIstioServiceIdentityAdmissionRules

setIstioServiceIdentityAdmissionRules

getKubernetesNamespaceAdmissionRules

setKubernetesNamespaceAdmissionRules

getKubernetesServiceAccountAdmissionRules

setKubernetesServiceAccountAdmissionRules

getName

setName

getUpdateTime

setUpdateTime

set

clone