Interface Resources.PolicyOrBuilder (1.79.0)
Stay organized with collections
Save and categorize content based on your preferences.
- 1.79.0 (latest)
- 1.77.0
- 1.75.0
- 1.74.0
- 1.73.0
- 1.72.0
- 1.71.0
- 1.69.0
- 1.67.0
- 1.66.0
- 1.63.0
- 1.62.0
- 1.61.0
- 1.59.0
- 1.58.0
- 1.57.0
- 1.56.0
- 1.55.0
- 1.54.0
- 1.53.0
- 1.52.0
- 1.51.0
- 1.50.0
- 1.48.0
- 1.47.0
- 1.46.0
- 1.45.0
- 1.44.0
- 1.43.0
- 1.42.0
- 1.41.0
- 1.40.0
- 1.39.0
- 1.38.0
- 1.36.0
- 1.35.0
- 1.34.0
- 1.33.0
- 1.32.0
- 1.31.0
- 1.30.0
- 1.29.0
- 1.28.0
- 1.27.0
- 1.26.0
- 1.23.0
- 1.22.0
- 1.21.0
- 1.20.0
- 1.19.0
- 1.18.0
- 1.17.0
- 1.16.0
- 1.15.0
- 1.14.0
- 1.13.0
- 1.12.0
- 1.11.0
- 1.10.0
- 1.9.0
- 1.8.0
- 1.7.0
- 1.6.0
- 1.5.0
- 1.4.0
- 1.3.0
- 1.0.6
publicstaticinterface Resources.PolicyOrBuilderextendsMessageOrBuilderImplements
MessageOrBuilderMethods
containsClusterAdmissionRules(String key)
publicabstractbooleancontainsClusterAdmissionRules(Stringkey) Optional. Per-cluster admission rules. Cluster spec format:
location.clusterId. There can be at most one admission rule per cluster
spec.
A location is either a compute zone (e.g. us-central1-a) or a region
(e.g. us-central1).
For clusterId syntax restrictions see
https://cloud.google.com/container-engine/reference/rest/v1/projects.zones.clusters.
map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> cluster_admission_rules = 3 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
key |
String |
| Returns | |
|---|---|
| Type | Description |
boolean |
|
containsIstioServiceIdentityAdmissionRules(String key)
publicabstractbooleancontainsIstioServiceIdentityAdmissionRules(Stringkey)Optional. Per-istio-service-identity admission rules. Istio service identity spec format: spiffe://<domain>/ns/<namespace>/sa/<serviceaccount> or <domain>/ns/<namespace>/sa/<serviceaccount> e.g. spiffe://example.com/ns/test-ns/sa/default
map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> istio_service_identity_admission_rules = 9 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
key |
String |
| Returns | |
|---|---|
| Type | Description |
boolean |
|
containsKubernetesNamespaceAdmissionRules(String key)
publicabstractbooleancontainsKubernetesNamespaceAdmissionRules(Stringkey)Optional. Per-kubernetes-namespace admission rules. K8s namespace spec format: [a-z.-]+, e.g. 'some-namespace'
map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> kubernetes_namespace_admission_rules = 10 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
key |
String |
| Returns | |
|---|---|
| Type | Description |
boolean |
|
containsKubernetesServiceAccountAdmissionRules(String key)
publicabstractbooleancontainsKubernetesServiceAccountAdmissionRules(Stringkey) Optional. Per-kubernetes-service-account admission rules. Service account
spec format: namespace:serviceaccount. e.g. 'test-ns:default'
map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> kubernetes_service_account_admission_rules = 8 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
key |
String |
| Returns | |
|---|---|
| Type | Description |
boolean |
|
getAdmissionWhitelistPatterns(int index)
publicabstractResources.AdmissionWhitelistPatterngetAdmissionWhitelistPatterns(intindex)Optional. Admission policy allowlisting. A matching admission request will always be permitted. This feature is typically used to exclude Google or third-party infrastructure images from Binary Authorization policies.
repeated .google.cloud.binaryauthorization.v1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
index |
int |
| Returns | |
|---|---|
| Type | Description |
Resources.AdmissionWhitelistPattern |
|
getAdmissionWhitelistPatternsCount()
publicabstractintgetAdmissionWhitelistPatternsCount()Optional. Admission policy allowlisting. A matching admission request will always be permitted. This feature is typically used to exclude Google or third-party infrastructure images from Binary Authorization policies.
repeated .google.cloud.binaryauthorization.v1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];
| Returns | |
|---|---|
| Type | Description |
int |
|
getAdmissionWhitelistPatternsList()
publicabstractList<Resources.AdmissionWhitelistPattern>getAdmissionWhitelistPatternsList()Optional. Admission policy allowlisting. A matching admission request will always be permitted. This feature is typically used to exclude Google or third-party infrastructure images from Binary Authorization policies.
repeated .google.cloud.binaryauthorization.v1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];
| Returns | |
|---|---|
| Type | Description |
List<AdmissionWhitelistPattern> |
|
getAdmissionWhitelistPatternsOrBuilder(int index)
publicabstractResources.AdmissionWhitelistPatternOrBuildergetAdmissionWhitelistPatternsOrBuilder(intindex)Optional. Admission policy allowlisting. A matching admission request will always be permitted. This feature is typically used to exclude Google or third-party infrastructure images from Binary Authorization policies.
repeated .google.cloud.binaryauthorization.v1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
index |
int |
| Returns | |
|---|---|
| Type | Description |
Resources.AdmissionWhitelistPatternOrBuilder |
|
getAdmissionWhitelistPatternsOrBuilderList()
publicabstractList<?extendsResources.AdmissionWhitelistPatternOrBuilder>getAdmissionWhitelistPatternsOrBuilderList()Optional. Admission policy allowlisting. A matching admission request will always be permitted. This feature is typically used to exclude Google or third-party infrastructure images from Binary Authorization policies.
repeated .google.cloud.binaryauthorization.v1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];
| Returns | |
|---|---|
| Type | Description |
List<? extends com.google.protos.google.cloud.binaryauthorization.v1.Resources.AdmissionWhitelistPatternOrBuilder> |
|
getClusterAdmissionRules() (deprecated)
publicabstractMap<String,Resources.AdmissionRule>getClusterAdmissionRules()Use #getClusterAdmissionRulesMap() instead.
| Returns | |
|---|---|
| Type | Description |
Map<String,AdmissionRule> |
|
getClusterAdmissionRulesCount()
publicabstractintgetClusterAdmissionRulesCount() Optional. Per-cluster admission rules. Cluster spec format:
location.clusterId. There can be at most one admission rule per cluster
spec.
A location is either a compute zone (e.g. us-central1-a) or a region
(e.g. us-central1).
For clusterId syntax restrictions see
https://cloud.google.com/container-engine/reference/rest/v1/projects.zones.clusters.
map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> cluster_admission_rules = 3 [(.google.api.field_behavior) = OPTIONAL];
| Returns | |
|---|---|
| Type | Description |
int |
|
getClusterAdmissionRulesMap()
publicabstractMap<String,Resources.AdmissionRule>getClusterAdmissionRulesMap() Optional. Per-cluster admission rules. Cluster spec format:
location.clusterId. There can be at most one admission rule per cluster
spec.
A location is either a compute zone (e.g. us-central1-a) or a region
(e.g. us-central1).
For clusterId syntax restrictions see
https://cloud.google.com/container-engine/reference/rest/v1/projects.zones.clusters.
map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> cluster_admission_rules = 3 [(.google.api.field_behavior) = OPTIONAL];
| Returns | |
|---|---|
| Type | Description |
Map<String,AdmissionRule> |
|
getClusterAdmissionRulesOrDefault(String key, Resources.AdmissionRule defaultValue)
publicabstractResources.AdmissionRulegetClusterAdmissionRulesOrDefault(Stringkey,Resources.AdmissionRuledefaultValue) Optional. Per-cluster admission rules. Cluster spec format:
location.clusterId. There can be at most one admission rule per cluster
spec.
A location is either a compute zone (e.g. us-central1-a) or a region
(e.g. us-central1).
For clusterId syntax restrictions see
https://cloud.google.com/container-engine/reference/rest/v1/projects.zones.clusters.
map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> cluster_admission_rules = 3 [(.google.api.field_behavior) = OPTIONAL];
| Parameters | |
|---|---|
| Name | Description |
key |
String |
defaultValue |
Resources.AdmissionRule |
| Returns | |
|---|---|
| Type | Description |
Resources.AdmissionRule |
|
getClusterAdmissionRulesOrThrow(String key)
publicabstractResources.AdmissionRulegetClusterAdmissionRulesOrThrow(Stringkey) Optional. Per-cluster admission rules. Cluster spec format:
location.clusterId. There can be at most one admission rule per cluster
spec.
A location is either a compute zone (e.g. us-central1-a) or a region
(e.g. us-central1).
For clusterId syntax restrictions see
https://cloud.google.com/container-engine/reference/rest/v1/projects.zones.clusters.
map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> cluster_admission_rules = 3 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
key |
String |
| Returns | |
|---|---|
| Type | Description |
Resources.AdmissionRule |
|
getDefaultAdmissionRule()
publicabstractResources.AdmissionRulegetDefaultAdmissionRule()Required. Default admission rule for a cluster without a per-cluster, per- kubernetes-service-account, or per-istio-service-identity admission rule.
.google.cloud.binaryauthorization.v1.AdmissionRule default_admission_rule = 4 [(.google.api.field_behavior) = REQUIRED];
| Returns | |
|---|---|
| Type | Description |
Resources.AdmissionRule |
The defaultAdmissionRule. |
getDefaultAdmissionRuleOrBuilder()
publicabstractResources.AdmissionRuleOrBuildergetDefaultAdmissionRuleOrBuilder()Required. Default admission rule for a cluster without a per-cluster, per- kubernetes-service-account, or per-istio-service-identity admission rule.
.google.cloud.binaryauthorization.v1.AdmissionRule default_admission_rule = 4 [(.google.api.field_behavior) = REQUIRED];
| Returns | |
|---|---|
| Type | Description |
Resources.AdmissionRuleOrBuilder |
|
getDescription()
publicabstractStringgetDescription()Optional. A descriptive comment.
string description = 6 [(.google.api.field_behavior) = OPTIONAL];
| Returns | |
|---|---|
| Type | Description |
String |
The description. |
getDescriptionBytes()
publicabstractByteStringgetDescriptionBytes()Optional. A descriptive comment.
string description = 6 [(.google.api.field_behavior) = OPTIONAL];
| Returns | |
|---|---|
| Type | Description |
ByteString |
The bytes for description. |
getGlobalPolicyEvaluationMode()
publicabstractResources.Policy.GlobalPolicyEvaluationModegetGlobalPolicyEvaluationMode()Optional. Controls the evaluation of a Google-maintained global admission policy for common system-level images. Images not covered by the global policy will be subject to the project admission policy. This setting has no effect when specified inside a global admission policy.
.google.cloud.binaryauthorization.v1.Policy.GlobalPolicyEvaluationMode global_policy_evaluation_mode = 7 [(.google.api.field_behavior) = OPTIONAL];
| Returns | |
|---|---|
| Type | Description |
Resources.Policy.GlobalPolicyEvaluationMode |
The globalPolicyEvaluationMode. |
getGlobalPolicyEvaluationModeValue()
publicabstractintgetGlobalPolicyEvaluationModeValue()Optional. Controls the evaluation of a Google-maintained global admission policy for common system-level images. Images not covered by the global policy will be subject to the project admission policy. This setting has no effect when specified inside a global admission policy.
.google.cloud.binaryauthorization.v1.Policy.GlobalPolicyEvaluationMode global_policy_evaluation_mode = 7 [(.google.api.field_behavior) = OPTIONAL];
| Returns | |
|---|---|
| Type | Description |
int |
The enum numeric value on the wire for globalPolicyEvaluationMode. |
getIstioServiceIdentityAdmissionRules() (deprecated)
publicabstractMap<String,Resources.AdmissionRule>getIstioServiceIdentityAdmissionRules()Use #getIstioServiceIdentityAdmissionRulesMap() instead.
| Returns | |
|---|---|
| Type | Description |
Map<String,AdmissionRule> |
|
getIstioServiceIdentityAdmissionRulesCount()
publicabstractintgetIstioServiceIdentityAdmissionRulesCount()Optional. Per-istio-service-identity admission rules. Istio service identity spec format: spiffe://<domain>/ns/<namespace>/sa/<serviceaccount> or <domain>/ns/<namespace>/sa/<serviceaccount> e.g. spiffe://example.com/ns/test-ns/sa/default
map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> istio_service_identity_admission_rules = 9 [(.google.api.field_behavior) = OPTIONAL];
| Returns | |
|---|---|
| Type | Description |
int |
|
getIstioServiceIdentityAdmissionRulesMap()
publicabstractMap<String,Resources.AdmissionRule>getIstioServiceIdentityAdmissionRulesMap()Optional. Per-istio-service-identity admission rules. Istio service identity spec format: spiffe://<domain>/ns/<namespace>/sa/<serviceaccount> or <domain>/ns/<namespace>/sa/<serviceaccount> e.g. spiffe://example.com/ns/test-ns/sa/default
map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> istio_service_identity_admission_rules = 9 [(.google.api.field_behavior) = OPTIONAL];
| Returns | |
|---|---|
| Type | Description |
Map<String,AdmissionRule> |
|
getIstioServiceIdentityAdmissionRulesOrDefault(String key, Resources.AdmissionRule defaultValue)
publicabstractResources.AdmissionRulegetIstioServiceIdentityAdmissionRulesOrDefault(Stringkey,Resources.AdmissionRuledefaultValue)Optional. Per-istio-service-identity admission rules. Istio service identity spec format: spiffe://<domain>/ns/<namespace>/sa/<serviceaccount> or <domain>/ns/<namespace>/sa/<serviceaccount> e.g. spiffe://example.com/ns/test-ns/sa/default
map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> istio_service_identity_admission_rules = 9 [(.google.api.field_behavior) = OPTIONAL];
| Parameters | |
|---|---|
| Name | Description |
key |
String |
defaultValue |
Resources.AdmissionRule |
| Returns | |
|---|---|
| Type | Description |
Resources.AdmissionRule |
|
getIstioServiceIdentityAdmissionRulesOrThrow(String key)
publicabstractResources.AdmissionRulegetIstioServiceIdentityAdmissionRulesOrThrow(Stringkey)Optional. Per-istio-service-identity admission rules. Istio service identity spec format: spiffe://<domain>/ns/<namespace>/sa/<serviceaccount> or <domain>/ns/<namespace>/sa/<serviceaccount> e.g. spiffe://example.com/ns/test-ns/sa/default
map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> istio_service_identity_admission_rules = 9 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
key |
String |
| Returns | |
|---|---|
| Type | Description |
Resources.AdmissionRule |
|
getKubernetesNamespaceAdmissionRules() (deprecated)
publicabstractMap<String,Resources.AdmissionRule>getKubernetesNamespaceAdmissionRules()Use #getKubernetesNamespaceAdmissionRulesMap() instead.
| Returns | |
|---|---|
| Type | Description |
Map<String,AdmissionRule> |
|
getKubernetesNamespaceAdmissionRulesCount()
publicabstractintgetKubernetesNamespaceAdmissionRulesCount()Optional. Per-kubernetes-namespace admission rules. K8s namespace spec format: [a-z.-]+, e.g. 'some-namespace'
map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> kubernetes_namespace_admission_rules = 10 [(.google.api.field_behavior) = OPTIONAL];
| Returns | |
|---|---|
| Type | Description |
int |
|
getKubernetesNamespaceAdmissionRulesMap()
publicabstractMap<String,Resources.AdmissionRule>getKubernetesNamespaceAdmissionRulesMap()Optional. Per-kubernetes-namespace admission rules. K8s namespace spec format: [a-z.-]+, e.g. 'some-namespace'
map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> kubernetes_namespace_admission_rules = 10 [(.google.api.field_behavior) = OPTIONAL];
| Returns | |
|---|---|
| Type | Description |
Map<String,AdmissionRule> |
|
getKubernetesNamespaceAdmissionRulesOrDefault(String key, Resources.AdmissionRule defaultValue)
publicabstractResources.AdmissionRulegetKubernetesNamespaceAdmissionRulesOrDefault(Stringkey,Resources.AdmissionRuledefaultValue)Optional. Per-kubernetes-namespace admission rules. K8s namespace spec format: [a-z.-]+, e.g. 'some-namespace'
map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> kubernetes_namespace_admission_rules = 10 [(.google.api.field_behavior) = OPTIONAL];
| Parameters | |
|---|---|
| Name | Description |
key |
String |
defaultValue |
Resources.AdmissionRule |
| Returns | |
|---|---|
| Type | Description |
Resources.AdmissionRule |
|
getKubernetesNamespaceAdmissionRulesOrThrow(String key)
publicabstractResources.AdmissionRulegetKubernetesNamespaceAdmissionRulesOrThrow(Stringkey)Optional. Per-kubernetes-namespace admission rules. K8s namespace spec format: [a-z.-]+, e.g. 'some-namespace'
map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> kubernetes_namespace_admission_rules = 10 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
key |
String |
| Returns | |
|---|---|
| Type | Description |
Resources.AdmissionRule |
|
getKubernetesServiceAccountAdmissionRules() (deprecated)
publicabstractMap<String,Resources.AdmissionRule>getKubernetesServiceAccountAdmissionRules()Use #getKubernetesServiceAccountAdmissionRulesMap() instead.
| Returns | |
|---|---|
| Type | Description |
Map<String,AdmissionRule> |
|
getKubernetesServiceAccountAdmissionRulesCount()
publicabstractintgetKubernetesServiceAccountAdmissionRulesCount() Optional. Per-kubernetes-service-account admission rules. Service account
spec format: namespace:serviceaccount. e.g. 'test-ns:default'
map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> kubernetes_service_account_admission_rules = 8 [(.google.api.field_behavior) = OPTIONAL];
| Returns | |
|---|---|
| Type | Description |
int |
|
getKubernetesServiceAccountAdmissionRulesMap()
publicabstractMap<String,Resources.AdmissionRule>getKubernetesServiceAccountAdmissionRulesMap() Optional. Per-kubernetes-service-account admission rules. Service account
spec format: namespace:serviceaccount. e.g. 'test-ns:default'
map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> kubernetes_service_account_admission_rules = 8 [(.google.api.field_behavior) = OPTIONAL];
| Returns | |
|---|---|
| Type | Description |
Map<String,AdmissionRule> |
|
getKubernetesServiceAccountAdmissionRulesOrDefault(String key, Resources.AdmissionRule defaultValue)
publicabstractResources.AdmissionRulegetKubernetesServiceAccountAdmissionRulesOrDefault(Stringkey,Resources.AdmissionRuledefaultValue) Optional. Per-kubernetes-service-account admission rules. Service account
spec format: namespace:serviceaccount. e.g. 'test-ns:default'
map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> kubernetes_service_account_admission_rules = 8 [(.google.api.field_behavior) = OPTIONAL];
| Parameters | |
|---|---|
| Name | Description |
key |
String |
defaultValue |
Resources.AdmissionRule |
| Returns | |
|---|---|
| Type | Description |
Resources.AdmissionRule |
|
getKubernetesServiceAccountAdmissionRulesOrThrow(String key)
publicabstractResources.AdmissionRulegetKubernetesServiceAccountAdmissionRulesOrThrow(Stringkey) Optional. Per-kubernetes-service-account admission rules. Service account
spec format: namespace:serviceaccount. e.g. 'test-ns:default'
map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> kubernetes_service_account_admission_rules = 8 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
key |
String |
| Returns | |
|---|---|
| Type | Description |
Resources.AdmissionRule |
|
getName()
publicabstractStringgetName() Output only. The resource name, in the format projects/*/policy. There is
at most one policy per project.
string name = 1 [(.google.api.field_behavior) = OUTPUT_ONLY];
| Returns | |
|---|---|
| Type | Description |
String |
The name. |
getNameBytes()
publicabstractByteStringgetNameBytes() Output only. The resource name, in the format projects/*/policy. There is
at most one policy per project.
string name = 1 [(.google.api.field_behavior) = OUTPUT_ONLY];
| Returns | |
|---|---|
| Type | Description |
ByteString |
The bytes for name. |
getUpdateTime()
publicabstractTimestampgetUpdateTime()Output only. Time when the policy was last updated.
.google.protobuf.Timestamp update_time = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];
| Returns | |
|---|---|
| Type | Description |
Timestamp |
The updateTime. |
getUpdateTimeOrBuilder()
publicabstractTimestampOrBuildergetUpdateTimeOrBuilder()Output only. Time when the policy was last updated.
.google.protobuf.Timestamp update_time = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];
| Returns | |
|---|---|
| Type | Description |
TimestampOrBuilder |
|
hasDefaultAdmissionRule()
publicabstractbooleanhasDefaultAdmissionRule()Required. Default admission rule for a cluster without a per-cluster, per- kubernetes-service-account, or per-istio-service-identity admission rule.
.google.cloud.binaryauthorization.v1.AdmissionRule default_admission_rule = 4 [(.google.api.field_behavior) = REQUIRED];
| Returns | |
|---|---|
| Type | Description |
boolean |
Whether the defaultAdmissionRule field is set. |
hasUpdateTime()
publicabstractbooleanhasUpdateTime()Output only. Time when the policy was last updated.
.google.protobuf.Timestamp update_time = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];
| Returns | |
|---|---|
| Type | Description |
boolean |
Whether the updateTime field is set. |