Class: Google::Apis::BinaryauthorizationV1beta1::Policy
- Inherits:
-
Object
- Object
- Google::Apis::BinaryauthorizationV1beta1::Policy
- Includes:
- Core::Hashable, Core::JsonObjectSupport
- Defined in:
- generated/google/apis/binaryauthorization_v1beta1/classes.rb,
generated/google/apis/binaryauthorization_v1beta1/representations.rb,
generated/google/apis/binaryauthorization_v1beta1/representations.rb
Overview
A policy for container image binary authorization.
Instance Attribute Summary collapse
-
#admission_whitelist_patterns ⇒ Array<Google::Apis::BinaryauthorizationV1beta1::AdmissionWhitelistPattern>
Optional.
-
#cluster_admission_rules ⇒ Hash<String,Google::Apis::BinaryauthorizationV1beta1::AdmissionRule>
Optional.
-
#default_admission_rule ⇒ Google::Apis::BinaryauthorizationV1beta1::AdmissionRule
An admission rule specifies either that all container images used in a pod creation request must be attested to by one or more attestors, that all pod creations will be allowed, or that all pod creations will be denied.
-
#description ⇒ String
Optional.
-
#global_policy_evaluation_mode ⇒ String
Optional.
-
#name ⇒ String
Output only.
-
#update_time ⇒ String
Output only.
Instance Method Summary collapse
-
#initialize(**args) ⇒ Policy
constructor
A new instance of Policy.
-
#update!(**args) ⇒ Object
Update properties of this object.
Methods included from Core::JsonObjectSupport
Methods included from Core::Hashable
Constructor Details
#initialize(**args) ⇒ Policy
Returns a new instance of Policy.
581 582 583 |
# File 'generated/google/apis/binaryauthorization_v1beta1/classes.rb', line 581 def initialize(**args) update!(**args) end |
Instance Attribute Details
#admission_whitelist_patterns ⇒ Array<Google::Apis::BinaryauthorizationV1beta1::AdmissionWhitelistPattern>
Optional. Admission policy whitelisting. A matching admission request will
always be permitted. This feature is typically used to exclude Google or
third-party infrastructure images from Binary Authorization policies.
Corresponds to the JSON property admissionWhitelistPatterns
533 534 535 |
# File 'generated/google/apis/binaryauthorization_v1beta1/classes.rb', line 533 def admission_whitelist_patterns @admission_whitelist_patterns end |
#cluster_admission_rules ⇒ Hash<String,Google::Apis::BinaryauthorizationV1beta1::AdmissionRule>
Optional. Per-cluster admission rules. Cluster spec format:
location.clusterId
. There can be at most one admission rule per cluster
spec.
A location
is either a compute zone (e.g. us-central1-a) or a region
(e.g. us-central1).
For clusterId
syntax restrictions see
https://cloud.google.com/container-engine/reference/rest/v1/projects.zones.
clusters.
Corresponds to the JSON property clusterAdmissionRules
545 546 547 |
# File 'generated/google/apis/binaryauthorization_v1beta1/classes.rb', line 545 def cluster_admission_rules @cluster_admission_rules end |
#default_admission_rule ⇒ Google::Apis::BinaryauthorizationV1beta1::AdmissionRule
An admission rule specifies either that all container images
used in a pod creation request must be attested to by one or more
attestors, that all pod creations will be allowed, or that all
pod creations will be denied.
Images matching an admission whitelist pattern
are exempted from admission rules and will never block a pod creation.
Corresponds to the JSON property defaultAdmissionRule
555 556 557 |
# File 'generated/google/apis/binaryauthorization_v1beta1/classes.rb', line 555 def default_admission_rule @default_admission_rule end |
#description ⇒ String
Optional. A descriptive comment.
Corresponds to the JSON property description
560 561 562 |
# File 'generated/google/apis/binaryauthorization_v1beta1/classes.rb', line 560 def description @description end |
#global_policy_evaluation_mode ⇒ String
Optional. Controls the evaluation of a Google-maintained global admission
policy for common system-level images. Images not covered by the global
policy will be subject to the project admission policy. This setting
has no effect when specified inside a global admission policy.
Corresponds to the JSON property globalPolicyEvaluationMode
568 569 570 |
# File 'generated/google/apis/binaryauthorization_v1beta1/classes.rb', line 568 def global_policy_evaluation_mode @global_policy_evaluation_mode end |
#name ⇒ String
Output only. The resource name, in the format projects/*/policy
. There is
at most one policy per project.
Corresponds to the JSON property name
574 575 576 |
# File 'generated/google/apis/binaryauthorization_v1beta1/classes.rb', line 574 def name @name end |
#update_time ⇒ String
Output only. Time when the policy was last updated.
Corresponds to the JSON property updateTime
579 580 581 |
# File 'generated/google/apis/binaryauthorization_v1beta1/classes.rb', line 579 def update_time @update_time end |
Instance Method Details
#update!(**args) ⇒ Object
Update properties of this object
586 587 588 589 590 591 592 593 594 |
# File 'generated/google/apis/binaryauthorization_v1beta1/classes.rb', line 586 def update!(**args) @admission_whitelist_patterns = args[:admission_whitelist_patterns] if args.key?(:admission_whitelist_patterns) @cluster_admission_rules = args[:cluster_admission_rules] if args.key?(:cluster_admission_rules) @default_admission_rule = args[:default_admission_rule] if args.key?(:default_admission_rule) @description = args[:description] if args.key?(:description) @global_policy_evaluation_mode = args[:global_policy_evaluation_mode] if args.key?(:global_policy_evaluation_mode) @name = args[:name] if args.key?(:name) @update_time = args[:update_time] if args.key?(:update_time) end |