Class: Google::Apis::BinaryauthorizationV1beta1::Policy
- Inherits:
-
Object
- Object
- Google::Apis::BinaryauthorizationV1beta1::Policy
- Includes:
- Core::Hashable, Core::JsonObjectSupport
- Defined in:
- generated/google/apis/binaryauthorization_v1beta1/classes.rb,
generated/google/apis/binaryauthorization_v1beta1/representations.rb,
generated/google/apis/binaryauthorization_v1beta1/representations.rb
Overview
A policy for container image binary authorization.
Instance Attribute Summary collapse
-
#admission_whitelist_patterns ⇒ Array<Google::Apis::BinaryauthorizationV1beta1::AdmissionWhitelistPattern>
Optional.
-
#cluster_admission_rules ⇒ Hash<String,Google::Apis::BinaryauthorizationV1beta1::AdmissionRule>
Optional.
-
#default_admission_rule ⇒ Google::Apis::BinaryauthorizationV1beta1::AdmissionRule
An admission rule specifies either that all container images used in a pod creation request must be attested to by one or more attestors, that all pod creations will be allowed, or that all pod creations will be denied.
-
#description ⇒ String
Optional.
-
#global_policy_evaluation_mode ⇒ String
Optional.
-
#name ⇒ String
Output only.
-
#update_time ⇒ String
Output only.
Instance Method Summary collapse
-
#initialize(**args) ⇒ Policy
constructor
A new instance of Policy.
-
#update!(**args) ⇒ Object
Update properties of this object.
Methods included from Core::JsonObjectSupport
Methods included from Core::Hashable
Constructor Details
#initialize(**args) ⇒ Policy
Returns a new instance of Policy
493 494 495 |
# File 'generated/google/apis/binaryauthorization_v1beta1/classes.rb', line 493 def initialize(**args) update!(**args) end |
Instance Attribute Details
#admission_whitelist_patterns ⇒ Array<Google::Apis::BinaryauthorizationV1beta1::AdmissionWhitelistPattern>
Optional. Admission policy whitelisting. A matching admission request will
always be permitted. This feature is typically used to exclude Google or
third-party infrastructure images from Binary Authorization policies.
Corresponds to the JSON property admissionWhitelistPatterns
445 446 447 |
# File 'generated/google/apis/binaryauthorization_v1beta1/classes.rb', line 445 def admission_whitelist_patterns @admission_whitelist_patterns end |
#cluster_admission_rules ⇒ Hash<String,Google::Apis::BinaryauthorizationV1beta1::AdmissionRule>
Optional. Per-cluster admission rules. Cluster spec format:
location.clusterId
. There can be at most one admission rule per cluster
spec.
A location
is either a compute zone (e.g. us-central1-a) or a region
(e.g. us-central1).
For clusterId
syntax restrictions see
https://cloud.google.com/container-engine/reference/rest/v1/projects.zones.
clusters.
Corresponds to the JSON property clusterAdmissionRules
457 458 459 |
# File 'generated/google/apis/binaryauthorization_v1beta1/classes.rb', line 457 def cluster_admission_rules @cluster_admission_rules end |
#default_admission_rule ⇒ Google::Apis::BinaryauthorizationV1beta1::AdmissionRule
An admission rule specifies either that all container images
used in a pod creation request must be attested to by one or more
attestors, that all pod creations will be allowed, or that all
pod creations will be denied.
Images matching an admission whitelist pattern
are exempted from admission rules and will never block a pod creation.
Corresponds to the JSON property defaultAdmissionRule
467 468 469 |
# File 'generated/google/apis/binaryauthorization_v1beta1/classes.rb', line 467 def default_admission_rule @default_admission_rule end |
#description ⇒ String
Optional. A descriptive comment.
Corresponds to the JSON property description
472 473 474 |
# File 'generated/google/apis/binaryauthorization_v1beta1/classes.rb', line 472 def description @description end |
#global_policy_evaluation_mode ⇒ String
Optional. Controls the evaluation of a Google-maintained global admission
policy for common system-level images. Images not covered by the global
policy will be subject to the project admission policy. This setting
has no effect when specified inside a global admission policy.
Corresponds to the JSON property globalPolicyEvaluationMode
480 481 482 |
# File 'generated/google/apis/binaryauthorization_v1beta1/classes.rb', line 480 def global_policy_evaluation_mode @global_policy_evaluation_mode end |
#name ⇒ String
Output only. The resource name, in the format projects/*/policy
. There is
at most one policy per project.
Corresponds to the JSON property name
486 487 488 |
# File 'generated/google/apis/binaryauthorization_v1beta1/classes.rb', line 486 def name @name end |
#update_time ⇒ String
Output only. Time when the policy was last updated.
Corresponds to the JSON property updateTime
491 492 493 |
# File 'generated/google/apis/binaryauthorization_v1beta1/classes.rb', line 491 def update_time @update_time end |
Instance Method Details
#update!(**args) ⇒ Object
Update properties of this object
498 499 500 501 502 503 504 505 506 |
# File 'generated/google/apis/binaryauthorization_v1beta1/classes.rb', line 498 def update!(**args) @admission_whitelist_patterns = args[:admission_whitelist_patterns] if args.key?(:admission_whitelist_patterns) @cluster_admission_rules = args[:cluster_admission_rules] if args.key?(:cluster_admission_rules) @default_admission_rule = args[:default_admission_rule] if args.key?(:default_admission_rule) @description = args[:description] if args.key?(:description) @global_policy_evaluation_mode = args[:global_policy_evaluation_mode] if args.key?(:global_policy_evaluation_mode) @name = args[:name] if args.key?(:name) @update_time = args[:update_time] if args.key?(:update_time) end |