Class: Google::Apis::GkehubV1alpha::ConfigManagementPolicyController

Inherits:
Object
  • Object
show all
Includes:
Core::Hashable, Core::JsonObjectSupport
Defined in:
lib/google/apis/gkehub_v1alpha/classes.rb,
lib/google/apis/gkehub_v1alpha/representations.rb,
lib/google/apis/gkehub_v1alpha/representations.rb

Overview

Configuration for Policy Controller

Instance Attribute Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(**args) ⇒ ConfigManagementPolicyController

Returns a new instance of ConfigManagementPolicyController.



1380
1381
1382
 
# File 'lib/google/apis/gkehub_v1alpha/classes.rb', line 1380

def initialize(**args)
   update!(**args)
end

Instance Attribute Details

#audit_interval_seconds ⇒ Fixnum

Sets the interval for Policy Controller Audit Scans (in seconds). When set to 0, this disables audit functionality altogether. Corresponds to the JSON property auditIntervalSeconds

Returns:

  • (Fixnum) 


1332
1333
1334
 
# File 'lib/google/apis/gkehub_v1alpha/classes.rb', line 1332

def audit_interval_seconds
  @audit_interval_seconds
end

#enabled ⇒ Boolean Also known as: enabled?

Enables the installation of Policy Controller. If false, the rest of PolicyController fields take no effect. Corresponds to the JSON property enabled

Returns:

  • (Boolean) 


1338
1339
1340
 
# File 'lib/google/apis/gkehub_v1alpha/classes.rb', line 1338

def enabled
  @enabled
end

#exemptable_namespaces ⇒ Array<String>

The set of namespaces that are excluded from Policy Controller checks. Namespaces do not need to currently exist on the cluster. Corresponds to the JSON property exemptableNamespaces

Returns:

  • (Array<String>) 


1345
1346
1347
 
# File 'lib/google/apis/gkehub_v1alpha/classes.rb', line 1345

def exemptable_namespaces
  @exemptable_namespaces
end

#log_denies_enabled ⇒ Boolean Also known as: log_denies_enabled?

Logs all denies and dry run failures. Corresponds to the JSON property logDeniesEnabled

Returns:

  • (Boolean) 


1350
1351
1352
 
# File 'lib/google/apis/gkehub_v1alpha/classes.rb', line 1350

def log_denies_enabled
  @log_denies_enabled
end

#monitoring ⇒ Google::Apis::GkehubV1alpha::ConfigManagementPolicyControllerMonitoring

PolicyControllerMonitoring specifies the backends Policy Controller should export metrics to. For example, to specify metrics should be exported to Cloud Monitoring and Prometheus, specify backends: ["cloudmonitoring", "prometheus"] Corresponds to the JSON property monitoring

Returns:



1358
1359
1360
 
# File 'lib/google/apis/gkehub_v1alpha/classes.rb', line 1358

def monitoring
  @monitoring
end

#mutation_enabled ⇒ Boolean Also known as: mutation_enabled?

Enable or disable mutation in policy controller. If true, mutation CRDs, webhook and controller deployment will be deployed to the cluster. Corresponds to the JSON property mutationEnabled

Returns:

  • (Boolean) 


1364
1365
1366
 
# File 'lib/google/apis/gkehub_v1alpha/classes.rb', line 1364

def mutation_enabled
  @mutation_enabled
end

#referential_rules_enabled ⇒ Boolean Also known as: referential_rules_enabled?

Enables the ability to use Constraint Templates that reference to objects other than the object currently being evaluated. Corresponds to the JSON property referentialRulesEnabled

Returns:

  • (Boolean) 


1371
1372
1373
 
# File 'lib/google/apis/gkehub_v1alpha/classes.rb', line 1371

def referential_rules_enabled
  @referential_rules_enabled
end

#template_library_installed ⇒ Boolean Also known as: template_library_installed?

Installs the default template library along with Policy Controller. Corresponds to the JSON property templateLibraryInstalled

Returns:

  • (Boolean) 


1377
1378
1379
 
# File 'lib/google/apis/gkehub_v1alpha/classes.rb', line 1377

def template_library_installed
  @template_library_installed
end

Instance Method Details

#update!(**args) ⇒ Object

Update properties of this object



1385
1386
1387
1388
1389
1390
1391
1392
1393
1394
 
# File 'lib/google/apis/gkehub_v1alpha/classes.rb', line 1385

def update!(**args)
  @audit_interval_seconds = args[:audit_interval_seconds] if args.key?(:audit_interval_seconds)
  @enabled = args[:enabled] if args.key?(:enabled)
  @exemptable_namespaces = args[:exemptable_namespaces] if args.key?(:exemptable_namespaces)
  @log_denies_enabled = args[:log_denies_enabled] if args.key?(:log_denies_enabled)
  @monitoring = args[:monitoring] if args.key?(:monitoring)
  @mutation_enabled = args[:mutation_enabled] if args.key?(:mutation_enabled)
  @referential_rules_enabled = args[:referential_rules_enabled] if args.key?(:referential_rules_enabled)
  @template_library_installed = args[:template_library_installed] if args.key?(:template_library_installed)
end