Class: Google::Apis::BinaryauthorizationV1::CheckSet

Inherits:
Object
  • Object
show all
Includes:
Core::Hashable, Core::JsonObjectSupport
Defined in:
lib/google/apis/binaryauthorization_v1/classes.rb,
lib/google/apis/binaryauthorization_v1/representations.rb,
lib/google/apis/binaryauthorization_v1/representations.rb

Overview

A conjunction of policy checks, scoped to a particular namespace or Kubernetes service account. In order for evaluation of a CheckSet to return "allowed" for a given image in a given Pod, one of the following conditions must be satisfied: * The image is explicitly exempted by an entry in image_allowlist, OR * ALL of the checks evaluate to "allowed".

Instance Attribute Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(**args) ⇒ CheckSet

Returns a new instance of CheckSet.



470
471
472
 
# File 'lib/google/apis/binaryauthorization_v1/classes.rb', line 470

def initialize(**args)
   update!(**args)
end

Instance Attribute Details

#checks ⇒ Array<Google::Apis::BinaryauthorizationV1::Check>

Optional. The checks to apply. The ultimate result of evaluating the check set will be "allow" if and only if every check in checks evaluates to "allow". If checks is empty, the default behavior is "always allow". Corresponds to the JSON property checks

Returns:



451
452
453
 
# File 'lib/google/apis/binaryauthorization_v1/classes.rb', line 451

def checks
  @checks
end

#display_name ⇒ String

Optional. A user-provided name for this CheckSet. This field has no effect on the policy evaluation behavior except to improve readability of messages in evaluation results. Corresponds to the JSON property displayName

Returns:

  • (String) 


458
459
460
 
# File 'lib/google/apis/binaryauthorization_v1/classes.rb', line 458

def display_name
  @display_name
end

#image_allowlist ⇒ Google::Apis::BinaryauthorizationV1::ImageAllowlist

Images that are exempted from normal checks based on name pattern only. Corresponds to the JSON property imageAllowlist

Returns:



463
464
465
 
# File 'lib/google/apis/binaryauthorization_v1/classes.rb', line 463

def image_allowlist
  @image_allowlist
end

#scope ⇒ Google::Apis::BinaryauthorizationV1::Scope

A scope specifier for CheckSet objects. Corresponds to the JSON property scope

Returns:



468
469
470
 
# File 'lib/google/apis/binaryauthorization_v1/classes.rb', line 468

def scope
  @scope
end

Instance Method Details

#update!(**args) ⇒ Object

Update properties of this object



475
476
477
478
479
480
 
# File 'lib/google/apis/binaryauthorization_v1/classes.rb', line 475

def update!(**args)
  @checks = args[:checks] if args.key?(:checks)
  @display_name = args[:display_name] if args.key?(:display_name)
  @image_allowlist = args[:image_allowlist] if args.key?(:image_allowlist)
  @scope = args[:scope] if args.key?(:scope)
end