Class: Google::Apis::BinaryauthorizationV1::CheckSet

Inherits:
Object
  • Object
show all
Includes:
Core::Hashable, Core::JsonObjectSupport
Defined in:
lib/google/apis/binaryauthorization_v1/classes.rb,
lib/google/apis/binaryauthorization_v1/representations.rb,
lib/google/apis/binaryauthorization_v1/representations.rb

Overview

A conjunction of policy checks, scoped to a particular namespace or Kubernetes service account. In order for evaluation of a CheckSet to return "allowed" for a given image in a given Pod, one of the following conditions must be satisfied: * The image is explicitly exempted by an entry in image_allowlist, OR * ALL of the checks evaluate to "allowed".

Instance Attribute Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(**args) ⇒ CheckSet

Returns a new instance of CheckSet.



504
505
506
 
# File 'lib/google/apis/binaryauthorization_v1/classes.rb', line 504

def initialize(**args)
   update!(**args)
end

Instance Attribute Details

#checks ⇒ Array<Google::Apis::BinaryauthorizationV1::Check>

Optional. The checks to apply. The ultimate result of evaluating the check set will be "allow" if and only if every check in checks evaluates to "allow". If checks is empty, the default behavior is "always allow". Corresponds to the JSON property checks

Returns:



485
486
487
 
# File 'lib/google/apis/binaryauthorization_v1/classes.rb', line 485

def checks
  @checks
end

#display_name ⇒ String

Optional. A user-provided name for this CheckSet. This field has no effect on the policy evaluation behavior except to improve readability of messages in evaluation results. Corresponds to the JSON property displayName

Returns:

  • (String) 


492
493
494
 
# File 'lib/google/apis/binaryauthorization_v1/classes.rb', line 492

def display_name
  @display_name
end

#image_allowlist ⇒ Google::Apis::BinaryauthorizationV1::ImageAllowlist

Images that are exempted from normal checks based on name pattern only. Corresponds to the JSON property imageAllowlist

Returns:



497
498
499
 
# File 'lib/google/apis/binaryauthorization_v1/classes.rb', line 497

def image_allowlist
  @image_allowlist
end

#scope ⇒ Google::Apis::BinaryauthorizationV1::Scope

A scope specifier for CheckSet objects. Corresponds to the JSON property scope

Returns:



502
503
504
 
# File 'lib/google/apis/binaryauthorization_v1/classes.rb', line 502

def scope
  @scope
end

Instance Method Details

#update!(**args) ⇒ Object

Update properties of this object



509
510
511
512
513
514
 
# File 'lib/google/apis/binaryauthorization_v1/classes.rb', line 509

def update!(**args)
  @checks = args[:checks] if args.key?(:checks)
  @display_name = args[:display_name] if args.key?(:display_name)
  @image_allowlist = args[:image_allowlist] if args.key?(:image_allowlist)
  @scope = args[:scope] if args.key?(:scope)
end