publicstaticfinalclass Resources.AdmissionRuleextendsGeneratedMessageV3implementsResources.AdmissionRuleOrBuilder
An admission rule specifies either that all container images
used in a pod creation request must be attested to by one or more
attestors, that all pod creations will be allowed, or that all
pod creations will be denied.
Images matching an admission allowlist pattern
are exempted from admission rules and will never block a pod creation.
Protobuf type google.cloud.binaryauthorization.v1.AdmissionRule
Inherited Members
com.google.protobuf.GeneratedMessageV3.<ListT>makeMutableCopy(ListT)
com.google.protobuf.GeneratedMessageV3.<ListT>makeMutableCopy(ListT,int)
com.google.protobuf.GeneratedMessageV3.<T>emptyList(java.lang.Class<T>)
com.google.protobuf.GeneratedMessageV3.internalGetMapFieldReflection(int)
Static Fields
ENFORCEMENT_MODE_FIELD_NUMBER
publicstaticfinalintENFORCEMENT_MODE_FIELD_NUMBER
| Field Value |
| Type |
Description |
int |
EVALUATION_MODE_FIELD_NUMBER
publicstaticfinalintEVALUATION_MODE_FIELD_NUMBER
| Field Value |
| Type |
Description |
int |
REQUIRE_ATTESTATIONS_BY_FIELD_NUMBER
publicstaticfinalintREQUIRE_ATTESTATIONS_BY_FIELD_NUMBER
| Field Value |
| Type |
Description |
int |
Static Methods
getDefaultInstance()
publicstaticResources.AdmissionRulegetDefaultInstance()
getDescriptor()
publicstaticfinalDescriptors.DescriptorgetDescriptor()
newBuilder()
publicstaticResources.AdmissionRule.BuildernewBuilder()
newBuilder(Resources.AdmissionRule prototype)
publicstaticResources.AdmissionRule.BuildernewBuilder(Resources.AdmissionRuleprototype)
publicstaticResources.AdmissionRuleparseDelimitedFrom(InputStreaminput)
publicstaticResources.AdmissionRuleparseDelimitedFrom(InputStreaminput,ExtensionRegistryLiteextensionRegistry)
parseFrom(byte[] data)
publicstaticResources.AdmissionRuleparseFrom(byte[]data)
| Parameter |
| Name |
Description |
data |
byte[]
|
parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)
publicstaticResources.AdmissionRuleparseFrom(byte[]data,ExtensionRegistryLiteextensionRegistry)
parseFrom(ByteString data)
publicstaticResources.AdmissionRuleparseFrom(ByteStringdata)
parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)
publicstaticResources.AdmissionRuleparseFrom(ByteStringdata,ExtensionRegistryLiteextensionRegistry)
publicstaticResources.AdmissionRuleparseFrom(CodedInputStreaminput)
publicstaticResources.AdmissionRuleparseFrom(CodedInputStreaminput,ExtensionRegistryLiteextensionRegistry)
publicstaticResources.AdmissionRuleparseFrom(InputStreaminput)
publicstaticResources.AdmissionRuleparseFrom(InputStreaminput,ExtensionRegistryLiteextensionRegistry)
parseFrom(ByteBuffer data)
publicstaticResources.AdmissionRuleparseFrom(ByteBufferdata)
parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)
publicstaticResources.AdmissionRuleparseFrom(ByteBufferdata,ExtensionRegistryLiteextensionRegistry)
parser()
publicstaticParser<Resources.AdmissionRule>parser()
Methods
equals(Object obj)
publicbooleanequals(Objectobj)
| Parameter |
| Name |
Description |
obj |
Object
|
Overrides
getDefaultInstanceForType()
publicResources.AdmissionRulegetDefaultInstanceForType()
getEnforcementMode()
publicResources.AdmissionRule.EnforcementModegetEnforcementMode()
Required. The action when a pod creation is denied by the admission rule.
.google.cloud.binaryauthorization.v1.AdmissionRule.EnforcementMode enforcement_mode = 3 [(.google.api.field_behavior) = REQUIRED];
getEnforcementModeValue()
publicintgetEnforcementModeValue()
Required. The action when a pod creation is denied by the admission rule.
.google.cloud.binaryauthorization.v1.AdmissionRule.EnforcementMode enforcement_mode = 3 [(.google.api.field_behavior) = REQUIRED];
| Returns |
| Type |
Description |
int |
The enum numeric value on the wire for enforcementMode.
|
getEvaluationMode()
publicResources.AdmissionRule.EvaluationModegetEvaluationMode()
Required. How this admission rule will be evaluated.
.google.cloud.binaryauthorization.v1.AdmissionRule.EvaluationMode evaluation_mode = 1 [(.google.api.field_behavior) = REQUIRED];
getEvaluationModeValue()
publicintgetEvaluationModeValue()
Required. How this admission rule will be evaluated.
.google.cloud.binaryauthorization.v1.AdmissionRule.EvaluationMode evaluation_mode = 1 [(.google.api.field_behavior) = REQUIRED];
| Returns |
| Type |
Description |
int |
The enum numeric value on the wire for evaluationMode.
|
getParserForType()
publicParser<Resources.AdmissionRule>getParserForType()
Overrides
getRequireAttestationsBy(int index)
publicStringgetRequireAttestationsBy(intindex)
Optional. The resource names of the attestors that must attest to
a container image, in the format projects/*/attestors/*. Each
attestor must exist before a policy can reference it. To add an attestor
to a policy the principal issuing the policy change request must be able
to read the attestor resource.
Note: this field must be non-empty when the evaluation_mode field specifies
REQUIRE_ATTESTATION, otherwise it must be empty.
repeated string require_attestations_by = 2 [(.google.api.field_behavior) = OPTIONAL];
| Parameter |
| Name |
Description |
index |
int
The index of the element to return.
|
| Returns |
| Type |
Description |
String |
The requireAttestationsBy at the given index.
|
getRequireAttestationsByBytes(int index)
publicByteStringgetRequireAttestationsByBytes(intindex)
Optional. The resource names of the attestors that must attest to
a container image, in the format projects/*/attestors/*. Each
attestor must exist before a policy can reference it. To add an attestor
to a policy the principal issuing the policy change request must be able
to read the attestor resource.
Note: this field must be non-empty when the evaluation_mode field specifies
REQUIRE_ATTESTATION, otherwise it must be empty.
repeated string require_attestations_by = 2 [(.google.api.field_behavior) = OPTIONAL];
| Parameter |
| Name |
Description |
index |
int
The index of the value to return.
|
| Returns |
| Type |
Description |
ByteString |
The bytes of the requireAttestationsBy at the given index.
|
getRequireAttestationsByCount()
publicintgetRequireAttestationsByCount()
Optional. The resource names of the attestors that must attest to
a container image, in the format projects/*/attestors/*. Each
attestor must exist before a policy can reference it. To add an attestor
to a policy the principal issuing the policy change request must be able
to read the attestor resource.
Note: this field must be non-empty when the evaluation_mode field specifies
REQUIRE_ATTESTATION, otherwise it must be empty.
repeated string require_attestations_by = 2 [(.google.api.field_behavior) = OPTIONAL];
| Returns |
| Type |
Description |
int |
The count of requireAttestationsBy.
|
getRequireAttestationsByList()
publicProtocolStringListgetRequireAttestationsByList()
Optional. The resource names of the attestors that must attest to
a container image, in the format projects/*/attestors/*. Each
attestor must exist before a policy can reference it. To add an attestor
to a policy the principal issuing the policy change request must be able
to read the attestor resource.
Note: this field must be non-empty when the evaluation_mode field specifies
REQUIRE_ATTESTATION, otherwise it must be empty.
repeated string require_attestations_by = 2 [(.google.api.field_behavior) = OPTIONAL];
getSerializedSize()
publicintgetSerializedSize()
| Returns |
| Type |
Description |
int |
Overrides
hashCode()
| Returns |
| Type |
Description |
int |
Overrides
internalGetFieldAccessorTable()
protectedGeneratedMessageV3.FieldAccessorTableinternalGetFieldAccessorTable()
Overrides
isInitialized()
publicfinalbooleanisInitialized()
Overrides
newBuilderForType()
publicResources.AdmissionRule.BuildernewBuilderForType()
newBuilderForType(GeneratedMessageV3.BuilderParent parent)
protectedResources.AdmissionRule.BuildernewBuilderForType(GeneratedMessageV3.BuilderParentparent)
Overrides
newInstance(GeneratedMessageV3.UnusedPrivateParameter unused)
protectedObjectnewInstance(GeneratedMessageV3.UnusedPrivateParameterunused)
| Returns |
| Type |
Description |
Object |
Overrides
toBuilder()
publicResources.AdmissionRule.BuildertoBuilder()
writeTo(CodedOutputStream output)
publicvoidwriteTo(CodedOutputStreamoutput)
Overrides