Class AdmissionRule (1.7.0)

publicfinalclass AdmissionRuleextendsGeneratedMessageV3implementsAdmissionRuleOrBuilder

An admission rule specifies either that all container images used in a pod creation request must be attested to by one or more attestors, that all pod creations will be allowed, or that all pod creations will be denied. Images matching an admission allowlist pattern are exempted from admission rules and will never block a pod creation.

Protobuf type google.cloud.binaryauthorization.v1beta1.AdmissionRule

Inheritance

Object > AbstractMessageLite<MessageType,BuilderType> > AbstractMessage > GeneratedMessageV3 > AdmissionRule

Implements

AdmissionRuleOrBuilder

Inherited Members

publicstaticfinalintENFORCEMENT_MODE_FIELD_NUMBER

publicstaticfinalintEVALUATION_MODE_FIELD_NUMBER

publicstaticfinalintREQUIRE_ATTESTATIONS_BY_FIELD_NUMBER

publicstaticAdmissionRulegetDefaultInstance()

publicstaticfinalDescriptors.DescriptorgetDescriptor()

publicstaticAdmissionRule.BuildernewBuilder()

publicstaticAdmissionRule.BuildernewBuilder(AdmissionRuleprototype)

publicstaticAdmissionRuleparseDelimitedFrom(InputStreaminput)

publicstaticAdmissionRuleparseDelimitedFrom(InputStreaminput,ExtensionRegistryLiteextensionRegistry)

publicstaticAdmissionRuleparseFrom(byte[]data)

publicstaticAdmissionRuleparseFrom(byte[]data,ExtensionRegistryLiteextensionRegistry)

publicstaticAdmissionRuleparseFrom(ByteStringdata)

publicstaticAdmissionRuleparseFrom(ByteStringdata,ExtensionRegistryLiteextensionRegistry)

publicstaticAdmissionRuleparseFrom(CodedInputStreaminput)

publicstaticAdmissionRuleparseFrom(CodedInputStreaminput,ExtensionRegistryLiteextensionRegistry)

publicstaticAdmissionRuleparseFrom(InputStreaminput)

publicstaticAdmissionRuleparseFrom(InputStreaminput,ExtensionRegistryLiteextensionRegistry)

publicstaticAdmissionRuleparseFrom(ByteBufferdata)

publicstaticAdmissionRuleparseFrom(ByteBufferdata,ExtensionRegistryLiteextensionRegistry)

publicstaticParser<AdmissionRule>parser()

publicbooleanequals(Objectobj)

AbstractMessage.equals(Object other)

publicAdmissionRulegetDefaultInstanceForType()

publicAdmissionRule.EnforcementModegetEnforcementMode()

Required. The action when a pod creation is denied by the admission rule.

.google.cloud.binaryauthorization.v1beta1.AdmissionRule.EnforcementMode enforcement_mode = 3 [(.google.api.field_behavior) = REQUIRED];

publicintgetEnforcementModeValue()

Required. The action when a pod creation is denied by the admission rule.

.google.cloud.binaryauthorization.v1beta1.AdmissionRule.EnforcementMode enforcement_mode = 3 [(.google.api.field_behavior) = REQUIRED];

publicAdmissionRule.EvaluationModegetEvaluationMode()

Required. How this admission rule will be evaluated.

.google.cloud.binaryauthorization.v1beta1.AdmissionRule.EvaluationMode evaluation_mode = 1 [(.google.api.field_behavior) = REQUIRED];

publicintgetEvaluationModeValue()

Required. How this admission rule will be evaluated.

.google.cloud.binaryauthorization.v1beta1.AdmissionRule.EvaluationMode evaluation_mode = 1 [(.google.api.field_behavior) = REQUIRED];

publicParser<AdmissionRule>getParserForType()

GeneratedMessageV3.getParserForType()

publicStringgetRequireAttestationsBy(intindex)

Optional. The resource names of the attestors that must attest to a container image, in the format projects/*/attestors/*. Each attestor must exist before a policy can reference it. To add an attestor to a policy the principal issuing the policy change request must be able to read the attestor resource. Note: this field must be non-empty when the evaluation_mode field specifies REQUIRE_ATTESTATION, otherwise it must be empty.

repeated string require_attestations_by = 2 [(.google.api.field_behavior) = OPTIONAL];

publicByteStringgetRequireAttestationsByBytes(intindex)

Optional. The resource names of the attestors that must attest to a container image, in the format projects/*/attestors/*. Each attestor must exist before a policy can reference it. To add an attestor to a policy the principal issuing the policy change request must be able to read the attestor resource. Note: this field must be non-empty when the evaluation_mode field specifies REQUIRE_ATTESTATION, otherwise it must be empty.

repeated string require_attestations_by = 2 [(.google.api.field_behavior) = OPTIONAL];

publicintgetRequireAttestationsByCount()

Optional. The resource names of the attestors that must attest to a container image, in the format projects/*/attestors/*. Each attestor must exist before a policy can reference it. To add an attestor to a policy the principal issuing the policy change request must be able to read the attestor resource. Note: this field must be non-empty when the evaluation_mode field specifies REQUIRE_ATTESTATION, otherwise it must be empty.

repeated string require_attestations_by = 2 [(.google.api.field_behavior) = OPTIONAL];

publicProtocolStringListgetRequireAttestationsByList()

Optional. The resource names of the attestors that must attest to a container image, in the format projects/*/attestors/*. Each attestor must exist before a policy can reference it. To add an attestor to a policy the principal issuing the policy change request must be able to read the attestor resource. Note: this field must be non-empty when the evaluation_mode field specifies REQUIRE_ATTESTATION, otherwise it must be empty.

repeated string require_attestations_by = 2 [(.google.api.field_behavior) = OPTIONAL];

publicintgetSerializedSize()

GeneratedMessageV3.getSerializedSize()

publicfinalUnknownFieldSetgetUnknownFields()

GeneratedMessageV3.getUnknownFields()

publicinthashCode()

AbstractMessage.hashCode()

protectedGeneratedMessageV3.FieldAccessorTableinternalGetFieldAccessorTable()

GeneratedMessageV3.internalGetFieldAccessorTable()

publicfinalbooleanisInitialized()

GeneratedMessageV3.isInitialized()

publicAdmissionRule.BuildernewBuilderForType()

protectedAdmissionRule.BuildernewBuilderForType(GeneratedMessageV3.BuilderParentparent)

GeneratedMessageV3.newBuilderForType(GeneratedMessageV3.BuilderParent parent)

protectedObjectnewInstance(GeneratedMessageV3.UnusedPrivateParameterunused)

GeneratedMessageV3.newInstance(GeneratedMessageV3.UnusedPrivateParameter unused)

publicAdmissionRule.BuildertoBuilder()

publicvoidwriteTo(CodedOutputStreamoutput)

GeneratedMessageV3.writeTo(CodedOutputStream output)