- 1.59.0 (latest)
- 1.58.0
- 1.57.0
- 1.56.0
- 1.55.0
- 1.54.0
- 1.53.0
- 1.52.0
- 1.51.0
- 1.50.0
- 1.48.0
- 1.47.0
- 1.46.0
- 1.45.0
- 1.44.0
- 1.43.0
- 1.42.0
- 1.41.0
- 1.40.0
- 1.39.0
- 1.38.0
- 1.36.0
- 1.35.0
- 1.34.0
- 1.33.0
- 1.32.0
- 1.31.0
- 1.30.0
- 1.29.0
- 1.28.0
- 1.27.0
- 1.26.0
- 1.23.0
- 1.22.0
- 1.21.0
- 1.20.0
- 1.19.0
- 1.18.0
- 1.17.0
- 1.16.0
- 1.15.0
- 1.14.0
- 1.13.0
- 1.12.0
- 1.11.0
- 1.10.0
- 1.9.0
- 1.8.0
- 1.7.0
- 1.6.0
- 1.5.0
- 1.4.0
- 1.3.0
- 1.0.6
publicstaticfinalclassPolicy.BuilderextendsGeneratedMessageV3.Builder<Policy.Builder>implementsPolicyOrBuilderA policy for Binary Authorization.
Protobuf type google.cloud.binaryauthorization.v1beta1.Policy
Inheritance
Object > AbstractMessageLite.Builder<MessageType,BuilderType> > AbstractMessage.Builder<BuilderType> > GeneratedMessageV3.Builder > Policy.BuilderImplements
PolicyOrBuilderStatic Methods
getDescriptor()
publicstaticfinalDescriptors.DescriptorgetDescriptor()| Returns | |
|---|---|
| Type | Description |
Descriptor | |
Methods
addAdmissionWhitelistPatterns(AdmissionWhitelistPattern value)
publicPolicy.BuilderaddAdmissionWhitelistPatterns(AdmissionWhitelistPatternvalue)Optional. Admission policy allowlisting. A matching admission request will always be permitted. This feature is typically used to exclude Google or third-party infrastructure images from Binary Authorization policies.
repeated .google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
value | AdmissionWhitelistPattern |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
addAdmissionWhitelistPatterns(AdmissionWhitelistPattern.Builder builderForValue)
publicPolicy.BuilderaddAdmissionWhitelistPatterns(AdmissionWhitelistPattern.BuilderbuilderForValue)Optional. Admission policy allowlisting. A matching admission request will always be permitted. This feature is typically used to exclude Google or third-party infrastructure images from Binary Authorization policies.
repeated .google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
builderForValue | AdmissionWhitelistPattern.Builder |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
addAdmissionWhitelistPatterns(int index, AdmissionWhitelistPattern value)
publicPolicy.BuilderaddAdmissionWhitelistPatterns(intindex,AdmissionWhitelistPatternvalue)Optional. Admission policy allowlisting. A matching admission request will always be permitted. This feature is typically used to exclude Google or third-party infrastructure images from Binary Authorization policies.
repeated .google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];
| Parameters | |
|---|---|
| Name | Description |
index | int |
value | AdmissionWhitelistPattern |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
addAdmissionWhitelistPatterns(int index, AdmissionWhitelistPattern.Builder builderForValue)
publicPolicy.BuilderaddAdmissionWhitelistPatterns(intindex,AdmissionWhitelistPattern.BuilderbuilderForValue)Optional. Admission policy allowlisting. A matching admission request will always be permitted. This feature is typically used to exclude Google or third-party infrastructure images from Binary Authorization policies.
repeated .google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];
| Parameters | |
|---|---|
| Name | Description |
index | int |
builderForValue | AdmissionWhitelistPattern.Builder |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
addAdmissionWhitelistPatternsBuilder()
publicAdmissionWhitelistPattern.BuilderaddAdmissionWhitelistPatternsBuilder()Optional. Admission policy allowlisting. A matching admission request will always be permitted. This feature is typically used to exclude Google or third-party infrastructure images from Binary Authorization policies.
repeated .google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];
| Returns | |
|---|---|
| Type | Description |
AdmissionWhitelistPattern.Builder | |
addAdmissionWhitelistPatternsBuilder(int index)
publicAdmissionWhitelistPattern.BuilderaddAdmissionWhitelistPatternsBuilder(intindex)Optional. Admission policy allowlisting. A matching admission request will always be permitted. This feature is typically used to exclude Google or third-party infrastructure images from Binary Authorization policies.
repeated .google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
index | int |
| Returns | |
|---|---|
| Type | Description |
AdmissionWhitelistPattern.Builder | |
addAllAdmissionWhitelistPatterns(Iterable<? extends AdmissionWhitelistPattern> values)
publicPolicy.BuilderaddAllAdmissionWhitelistPatterns(Iterable<?extendsAdmissionWhitelistPattern>values)Optional. Admission policy allowlisting. A matching admission request will always be permitted. This feature is typically used to exclude Google or third-party infrastructure images from Binary Authorization policies.
repeated .google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
values | Iterable<? extends com.google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern> |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
addRepeatedField(Descriptors.FieldDescriptor field, Object value)
publicPolicy.BuilderaddRepeatedField(Descriptors.FieldDescriptorfield,Objectvalue)| Parameters | |
|---|---|
| Name | Description |
field | FieldDescriptor |
value | Object |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
build()
publicPolicybuild()| Returns | |
|---|---|
| Type | Description |
Policy | |
buildPartial()
publicPolicybuildPartial()| Returns | |
|---|---|
| Type | Description |
Policy | |
clear()
publicPolicy.Builderclear()| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
clearAdmissionWhitelistPatterns()
publicPolicy.BuilderclearAdmissionWhitelistPatterns()Optional. Admission policy allowlisting. A matching admission request will always be permitted. This feature is typically used to exclude Google or third-party infrastructure images from Binary Authorization policies.
repeated .google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
clearClusterAdmissionRules()
publicPolicy.BuilderclearClusterAdmissionRules()| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
clearDefaultAdmissionRule()
publicPolicy.BuilderclearDefaultAdmissionRule()Required. Default admission rule for a cluster without a per-cluster, per- kubernetes-service-account, or per-istio-service-identity admission rule.
.google.cloud.binaryauthorization.v1beta1.AdmissionRule default_admission_rule = 4 [(.google.api.field_behavior) = REQUIRED];
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
clearDescription()
publicPolicy.BuilderclearDescription()Optional. A descriptive comment.
string description = 6 [(.google.api.field_behavior) = OPTIONAL];
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | This builder for chaining. |
clearField(Descriptors.FieldDescriptor field)
publicPolicy.BuilderclearField(Descriptors.FieldDescriptorfield)| Parameter | |
|---|---|
| Name | Description |
field | FieldDescriptor |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
clearGlobalPolicyEvaluationMode()
publicPolicy.BuilderclearGlobalPolicyEvaluationMode()Optional. Controls the evaluation of a Google-maintained global admission policy for common system-level images. Images not covered by the global policy will be subject to the project admission policy. This setting has no effect when specified inside a global admission policy.
.google.cloud.binaryauthorization.v1beta1.Policy.GlobalPolicyEvaluationMode global_policy_evaluation_mode = 7 [(.google.api.field_behavior) = OPTIONAL];
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | This builder for chaining. |
clearIstioServiceIdentityAdmissionRules()
publicPolicy.BuilderclearIstioServiceIdentityAdmissionRules()| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
clearKubernetesNamespaceAdmissionRules()
publicPolicy.BuilderclearKubernetesNamespaceAdmissionRules()| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
clearKubernetesServiceAccountAdmissionRules()
publicPolicy.BuilderclearKubernetesServiceAccountAdmissionRules()| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
clearName()
publicPolicy.BuilderclearName() Output only. The resource name, in the format projects/*/policy. There is at most one policy per project.
string name = 1 [(.google.api.field_behavior) = OUTPUT_ONLY];
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | This builder for chaining. |
clearOneof(Descriptors.OneofDescriptor oneof)
publicPolicy.BuilderclearOneof(Descriptors.OneofDescriptoroneof)| Parameter | |
|---|---|
| Name | Description |
oneof | OneofDescriptor |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
clearUpdateTime()
publicPolicy.BuilderclearUpdateTime()Output only. Time when the policy was last updated.
.google.protobuf.Timestamp update_time = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
clone()
publicPolicy.Builderclone()| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
containsClusterAdmissionRules(String key)
publicbooleancontainsClusterAdmissionRules(Stringkey) Optional. Per-cluster admission rules. Cluster spec format: location.clusterId. There can be at most one admission rule per cluster spec. A location is either a compute zone (e.g. us-central1-a) or a region (e.g. us-central1). For clusterId syntax restrictions see https://cloud.google.com/container-engine/reference/rest/v1/projects.zones.clusters.
map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> cluster_admission_rules = 3 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
key | String |
| Returns | |
|---|---|
| Type | Description |
boolean | |
containsIstioServiceIdentityAdmissionRules(String key)
publicbooleancontainsIstioServiceIdentityAdmissionRules(Stringkey) Optional. Per-istio-service-identity admission rules. Istio service identity spec format: spiffe://<domain>/ns/<namespace>/sa/<serviceaccount> or <domain>/ns/<namespace>/sa/<serviceaccount> e.g. spiffe://example.com/ns/test-ns/sa/default
map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> istio_service_identity_admission_rules = 9 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
key | String |
| Returns | |
|---|---|
| Type | Description |
boolean | |
containsKubernetesNamespaceAdmissionRules(String key)
publicbooleancontainsKubernetesNamespaceAdmissionRules(Stringkey) Optional. Per-kubernetes-namespace admission rules. K8s namespace spec format: [a-z.-]+, e.g. some-namespace
map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> kubernetes_namespace_admission_rules = 10 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
key | String |
| Returns | |
|---|---|
| Type | Description |
boolean | |
containsKubernetesServiceAccountAdmissionRules(String key)
publicbooleancontainsKubernetesServiceAccountAdmissionRules(Stringkey) Optional. Per-kubernetes-service-account admission rules. Service account spec format: namespace:serviceaccount. e.g. test-ns:default
map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> kubernetes_service_account_admission_rules = 8 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
key | String |
| Returns | |
|---|---|
| Type | Description |
boolean | |
getAdmissionWhitelistPatterns(int index)
publicAdmissionWhitelistPatterngetAdmissionWhitelistPatterns(intindex)Optional. Admission policy allowlisting. A matching admission request will always be permitted. This feature is typically used to exclude Google or third-party infrastructure images from Binary Authorization policies.
repeated .google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
index | int |
| Returns | |
|---|---|
| Type | Description |
AdmissionWhitelistPattern | |
getAdmissionWhitelistPatternsBuilder(int index)
publicAdmissionWhitelistPattern.BuildergetAdmissionWhitelistPatternsBuilder(intindex)Optional. Admission policy allowlisting. A matching admission request will always be permitted. This feature is typically used to exclude Google or third-party infrastructure images from Binary Authorization policies.
repeated .google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
index | int |
| Returns | |
|---|---|
| Type | Description |
AdmissionWhitelistPattern.Builder | |
getAdmissionWhitelistPatternsBuilderList()
publicList<AdmissionWhitelistPattern.Builder>getAdmissionWhitelistPatternsBuilderList()Optional. Admission policy allowlisting. A matching admission request will always be permitted. This feature is typically used to exclude Google or third-party infrastructure images from Binary Authorization policies.
repeated .google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];
| Returns | |
|---|---|
| Type | Description |
List<Builder> | |
getAdmissionWhitelistPatternsCount()
publicintgetAdmissionWhitelistPatternsCount()Optional. Admission policy allowlisting. A matching admission request will always be permitted. This feature is typically used to exclude Google or third-party infrastructure images from Binary Authorization policies.
repeated .google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];
| Returns | |
|---|---|
| Type | Description |
int | |
getAdmissionWhitelistPatternsList()
publicList<AdmissionWhitelistPattern>getAdmissionWhitelistPatternsList()Optional. Admission policy allowlisting. A matching admission request will always be permitted. This feature is typically used to exclude Google or third-party infrastructure images from Binary Authorization policies.
repeated .google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];
| Returns | |
|---|---|
| Type | Description |
List<AdmissionWhitelistPattern> | |
getAdmissionWhitelistPatternsOrBuilder(int index)
publicAdmissionWhitelistPatternOrBuildergetAdmissionWhitelistPatternsOrBuilder(intindex)Optional. Admission policy allowlisting. A matching admission request will always be permitted. This feature is typically used to exclude Google or third-party infrastructure images from Binary Authorization policies.
repeated .google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
index | int |
| Returns | |
|---|---|
| Type | Description |
AdmissionWhitelistPatternOrBuilder | |
getAdmissionWhitelistPatternsOrBuilderList()
publicList<?extendsAdmissionWhitelistPatternOrBuilder>getAdmissionWhitelistPatternsOrBuilderList()Optional. Admission policy allowlisting. A matching admission request will always be permitted. This feature is typically used to exclude Google or third-party infrastructure images from Binary Authorization policies.
repeated .google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];
| Returns | |
|---|---|
| Type | Description |
List<? extends com.google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPatternOrBuilder> | |
getClusterAdmissionRules() (deprecated)
publicMap<String,AdmissionRule>getClusterAdmissionRules()Use #getClusterAdmissionRulesMap() instead.
| Returns | |
|---|---|
| Type | Description |
Map<String,AdmissionRule> | |
getClusterAdmissionRulesCount()
publicintgetClusterAdmissionRulesCount() Optional. Per-cluster admission rules. Cluster spec format: location.clusterId. There can be at most one admission rule per cluster spec. A location is either a compute zone (e.g. us-central1-a) or a region (e.g. us-central1). For clusterId syntax restrictions see https://cloud.google.com/container-engine/reference/rest/v1/projects.zones.clusters.
map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> cluster_admission_rules = 3 [(.google.api.field_behavior) = OPTIONAL];
| Returns | |
|---|---|
| Type | Description |
int | |
getClusterAdmissionRulesMap()
publicMap<String,AdmissionRule>getClusterAdmissionRulesMap() Optional. Per-cluster admission rules. Cluster spec format: location.clusterId. There can be at most one admission rule per cluster spec. A location is either a compute zone (e.g. us-central1-a) or a region (e.g. us-central1). For clusterId syntax restrictions see https://cloud.google.com/container-engine/reference/rest/v1/projects.zones.clusters.
map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> cluster_admission_rules = 3 [(.google.api.field_behavior) = OPTIONAL];
| Returns | |
|---|---|
| Type | Description |
Map<String,AdmissionRule> | |
getClusterAdmissionRulesOrDefault(String key, AdmissionRule defaultValue)
publicAdmissionRulegetClusterAdmissionRulesOrDefault(Stringkey,AdmissionRuledefaultValue) Optional. Per-cluster admission rules. Cluster spec format: location.clusterId. There can be at most one admission rule per cluster spec. A location is either a compute zone (e.g. us-central1-a) or a region (e.g. us-central1). For clusterId syntax restrictions see https://cloud.google.com/container-engine/reference/rest/v1/projects.zones.clusters.
map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> cluster_admission_rules = 3 [(.google.api.field_behavior) = OPTIONAL];
| Parameters | |
|---|---|
| Name | Description |
key | String |
defaultValue | AdmissionRule |
| Returns | |
|---|---|
| Type | Description |
AdmissionRule | |
getClusterAdmissionRulesOrThrow(String key)
publicAdmissionRulegetClusterAdmissionRulesOrThrow(Stringkey) Optional. Per-cluster admission rules. Cluster spec format: location.clusterId. There can be at most one admission rule per cluster spec. A location is either a compute zone (e.g. us-central1-a) or a region (e.g. us-central1). For clusterId syntax restrictions see https://cloud.google.com/container-engine/reference/rest/v1/projects.zones.clusters.
map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> cluster_admission_rules = 3 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
key | String |
| Returns | |
|---|---|
| Type | Description |
AdmissionRule | |
getDefaultAdmissionRule()
publicAdmissionRulegetDefaultAdmissionRule()Required. Default admission rule for a cluster without a per-cluster, per- kubernetes-service-account, or per-istio-service-identity admission rule.
.google.cloud.binaryauthorization.v1beta1.AdmissionRule default_admission_rule = 4 [(.google.api.field_behavior) = REQUIRED];
| Returns | |
|---|---|
| Type | Description |
AdmissionRule | The defaultAdmissionRule. |
getDefaultAdmissionRuleBuilder()
publicAdmissionRule.BuildergetDefaultAdmissionRuleBuilder()Required. Default admission rule for a cluster without a per-cluster, per- kubernetes-service-account, or per-istio-service-identity admission rule.
.google.cloud.binaryauthorization.v1beta1.AdmissionRule default_admission_rule = 4 [(.google.api.field_behavior) = REQUIRED];
| Returns | |
|---|---|
| Type | Description |
AdmissionRule.Builder | |
getDefaultAdmissionRuleOrBuilder()
publicAdmissionRuleOrBuildergetDefaultAdmissionRuleOrBuilder()Required. Default admission rule for a cluster without a per-cluster, per- kubernetes-service-account, or per-istio-service-identity admission rule.
.google.cloud.binaryauthorization.v1beta1.AdmissionRule default_admission_rule = 4 [(.google.api.field_behavior) = REQUIRED];
| Returns | |
|---|---|
| Type | Description |
AdmissionRuleOrBuilder | |
getDefaultInstanceForType()
publicPolicygetDefaultInstanceForType()| Returns | |
|---|---|
| Type | Description |
Policy | |
getDescription()
publicStringgetDescription()Optional. A descriptive comment.
string description = 6 [(.google.api.field_behavior) = OPTIONAL];
| Returns | |
|---|---|
| Type | Description |
String | The description. |
getDescriptionBytes()
publicByteStringgetDescriptionBytes()Optional. A descriptive comment.
string description = 6 [(.google.api.field_behavior) = OPTIONAL];
| Returns | |
|---|---|
| Type | Description |
ByteString | The bytes for description. |
getDescriptorForType()
publicDescriptors.DescriptorgetDescriptorForType()| Returns | |
|---|---|
| Type | Description |
Descriptor | |
getGlobalPolicyEvaluationMode()
publicPolicy.GlobalPolicyEvaluationModegetGlobalPolicyEvaluationMode()Optional. Controls the evaluation of a Google-maintained global admission policy for common system-level images. Images not covered by the global policy will be subject to the project admission policy. This setting has no effect when specified inside a global admission policy.
.google.cloud.binaryauthorization.v1beta1.Policy.GlobalPolicyEvaluationMode global_policy_evaluation_mode = 7 [(.google.api.field_behavior) = OPTIONAL];
| Returns | |
|---|---|
| Type | Description |
Policy.GlobalPolicyEvaluationMode | The globalPolicyEvaluationMode. |
getGlobalPolicyEvaluationModeValue()
publicintgetGlobalPolicyEvaluationModeValue()Optional. Controls the evaluation of a Google-maintained global admission policy for common system-level images. Images not covered by the global policy will be subject to the project admission policy. This setting has no effect when specified inside a global admission policy.
.google.cloud.binaryauthorization.v1beta1.Policy.GlobalPolicyEvaluationMode global_policy_evaluation_mode = 7 [(.google.api.field_behavior) = OPTIONAL];
| Returns | |
|---|---|
| Type | Description |
int | The enum numeric value on the wire for globalPolicyEvaluationMode. |
getIstioServiceIdentityAdmissionRules() (deprecated)
publicMap<String,AdmissionRule>getIstioServiceIdentityAdmissionRules()Use #getIstioServiceIdentityAdmissionRulesMap() instead.
| Returns | |
|---|---|
| Type | Description |
Map<String,AdmissionRule> | |
getIstioServiceIdentityAdmissionRulesCount()
publicintgetIstioServiceIdentityAdmissionRulesCount() Optional. Per-istio-service-identity admission rules. Istio service identity spec format: spiffe://<domain>/ns/<namespace>/sa/<serviceaccount> or <domain>/ns/<namespace>/sa/<serviceaccount> e.g. spiffe://example.com/ns/test-ns/sa/default
map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> istio_service_identity_admission_rules = 9 [(.google.api.field_behavior) = OPTIONAL];
| Returns | |
|---|---|
| Type | Description |
int | |
getIstioServiceIdentityAdmissionRulesMap()
publicMap<String,AdmissionRule>getIstioServiceIdentityAdmissionRulesMap() Optional. Per-istio-service-identity admission rules. Istio service identity spec format: spiffe://<domain>/ns/<namespace>/sa/<serviceaccount> or <domain>/ns/<namespace>/sa/<serviceaccount> e.g. spiffe://example.com/ns/test-ns/sa/default
map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> istio_service_identity_admission_rules = 9 [(.google.api.field_behavior) = OPTIONAL];
| Returns | |
|---|---|
| Type | Description |
Map<String,AdmissionRule> | |
getIstioServiceIdentityAdmissionRulesOrDefault(String key, AdmissionRule defaultValue)
publicAdmissionRulegetIstioServiceIdentityAdmissionRulesOrDefault(Stringkey,AdmissionRuledefaultValue) Optional. Per-istio-service-identity admission rules. Istio service identity spec format: spiffe://<domain>/ns/<namespace>/sa/<serviceaccount> or <domain>/ns/<namespace>/sa/<serviceaccount> e.g. spiffe://example.com/ns/test-ns/sa/default
map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> istio_service_identity_admission_rules = 9 [(.google.api.field_behavior) = OPTIONAL];
| Parameters | |
|---|---|
| Name | Description |
key | String |
defaultValue | AdmissionRule |
| Returns | |
|---|---|
| Type | Description |
AdmissionRule | |
getIstioServiceIdentityAdmissionRulesOrThrow(String key)
publicAdmissionRulegetIstioServiceIdentityAdmissionRulesOrThrow(Stringkey) Optional. Per-istio-service-identity admission rules. Istio service identity spec format: spiffe://<domain>/ns/<namespace>/sa/<serviceaccount> or <domain>/ns/<namespace>/sa/<serviceaccount> e.g. spiffe://example.com/ns/test-ns/sa/default
map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> istio_service_identity_admission_rules = 9 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
key | String |
| Returns | |
|---|---|
| Type | Description |
AdmissionRule | |
getKubernetesNamespaceAdmissionRules() (deprecated)
publicMap<String,AdmissionRule>getKubernetesNamespaceAdmissionRules()Use #getKubernetesNamespaceAdmissionRulesMap() instead.
| Returns | |
|---|---|
| Type | Description |
Map<String,AdmissionRule> | |
getKubernetesNamespaceAdmissionRulesCount()
publicintgetKubernetesNamespaceAdmissionRulesCount() Optional. Per-kubernetes-namespace admission rules. K8s namespace spec format: [a-z.-]+, e.g. some-namespace
map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> kubernetes_namespace_admission_rules = 10 [(.google.api.field_behavior) = OPTIONAL];
| Returns | |
|---|---|
| Type | Description |
int | |
getKubernetesNamespaceAdmissionRulesMap()
publicMap<String,AdmissionRule>getKubernetesNamespaceAdmissionRulesMap() Optional. Per-kubernetes-namespace admission rules. K8s namespace spec format: [a-z.-]+, e.g. some-namespace
map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> kubernetes_namespace_admission_rules = 10 [(.google.api.field_behavior) = OPTIONAL];
| Returns | |
|---|---|
| Type | Description |
Map<String,AdmissionRule> | |
getKubernetesNamespaceAdmissionRulesOrDefault(String key, AdmissionRule defaultValue)
publicAdmissionRulegetKubernetesNamespaceAdmissionRulesOrDefault(Stringkey,AdmissionRuledefaultValue) Optional. Per-kubernetes-namespace admission rules. K8s namespace spec format: [a-z.-]+, e.g. some-namespace
map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> kubernetes_namespace_admission_rules = 10 [(.google.api.field_behavior) = OPTIONAL];
| Parameters | |
|---|---|
| Name | Description |
key | String |
defaultValue | AdmissionRule |
| Returns | |
|---|---|
| Type | Description |
AdmissionRule | |
getKubernetesNamespaceAdmissionRulesOrThrow(String key)
publicAdmissionRulegetKubernetesNamespaceAdmissionRulesOrThrow(Stringkey) Optional. Per-kubernetes-namespace admission rules. K8s namespace spec format: [a-z.-]+, e.g. some-namespace
map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> kubernetes_namespace_admission_rules = 10 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
key | String |
| Returns | |
|---|---|
| Type | Description |
AdmissionRule | |
getKubernetesServiceAccountAdmissionRules() (deprecated)
publicMap<String,AdmissionRule>getKubernetesServiceAccountAdmissionRules()Use #getKubernetesServiceAccountAdmissionRulesMap() instead.
| Returns | |
|---|---|
| Type | Description |
Map<String,AdmissionRule> | |
getKubernetesServiceAccountAdmissionRulesCount()
publicintgetKubernetesServiceAccountAdmissionRulesCount() Optional. Per-kubernetes-service-account admission rules. Service account spec format: namespace:serviceaccount. e.g. test-ns:default
map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> kubernetes_service_account_admission_rules = 8 [(.google.api.field_behavior) = OPTIONAL];
| Returns | |
|---|---|
| Type | Description |
int | |
getKubernetesServiceAccountAdmissionRulesMap()
publicMap<String,AdmissionRule>getKubernetesServiceAccountAdmissionRulesMap() Optional. Per-kubernetes-service-account admission rules. Service account spec format: namespace:serviceaccount. e.g. test-ns:default
map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> kubernetes_service_account_admission_rules = 8 [(.google.api.field_behavior) = OPTIONAL];
| Returns | |
|---|---|
| Type | Description |
Map<String,AdmissionRule> | |
getKubernetesServiceAccountAdmissionRulesOrDefault(String key, AdmissionRule defaultValue)
publicAdmissionRulegetKubernetesServiceAccountAdmissionRulesOrDefault(Stringkey,AdmissionRuledefaultValue) Optional. Per-kubernetes-service-account admission rules. Service account spec format: namespace:serviceaccount. e.g. test-ns:default
map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> kubernetes_service_account_admission_rules = 8 [(.google.api.field_behavior) = OPTIONAL];
| Parameters | |
|---|---|
| Name | Description |
key | String |
defaultValue | AdmissionRule |
| Returns | |
|---|---|
| Type | Description |
AdmissionRule | |
getKubernetesServiceAccountAdmissionRulesOrThrow(String key)
publicAdmissionRulegetKubernetesServiceAccountAdmissionRulesOrThrow(Stringkey) Optional. Per-kubernetes-service-account admission rules. Service account spec format: namespace:serviceaccount. e.g. test-ns:default
map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> kubernetes_service_account_admission_rules = 8 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
key | String |
| Returns | |
|---|---|
| Type | Description |
AdmissionRule | |
getMutableClusterAdmissionRules() (deprecated)
publicMap<String,AdmissionRule>getMutableClusterAdmissionRules()Use alternate mutation accessors instead.
| Returns | |
|---|---|
| Type | Description |
Map<String,AdmissionRule> | |
getMutableIstioServiceIdentityAdmissionRules() (deprecated)
publicMap<String,AdmissionRule>getMutableIstioServiceIdentityAdmissionRules()Use alternate mutation accessors instead.
| Returns | |
|---|---|
| Type | Description |
Map<String,AdmissionRule> | |
getMutableKubernetesNamespaceAdmissionRules() (deprecated)
publicMap<String,AdmissionRule>getMutableKubernetesNamespaceAdmissionRules()Use alternate mutation accessors instead.
| Returns | |
|---|---|
| Type | Description |
Map<String,AdmissionRule> | |
getMutableKubernetesServiceAccountAdmissionRules() (deprecated)
publicMap<String,AdmissionRule>getMutableKubernetesServiceAccountAdmissionRules()Use alternate mutation accessors instead.
| Returns | |
|---|---|
| Type | Description |
Map<String,AdmissionRule> | |
getName()
publicStringgetName() Output only. The resource name, in the format projects/*/policy. There is at most one policy per project.
string name = 1 [(.google.api.field_behavior) = OUTPUT_ONLY];
| Returns | |
|---|---|
| Type | Description |
String | The name. |
getNameBytes()
publicByteStringgetNameBytes() Output only. The resource name, in the format projects/*/policy. There is at most one policy per project.
string name = 1 [(.google.api.field_behavior) = OUTPUT_ONLY];
| Returns | |
|---|---|
| Type | Description |
ByteString | The bytes for name. |
getUpdateTime()
publicTimestampgetUpdateTime()Output only. Time when the policy was last updated.
.google.protobuf.Timestamp update_time = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];
| Returns | |
|---|---|
| Type | Description |
Timestamp | The updateTime. |
getUpdateTimeBuilder()
publicTimestamp.BuildergetUpdateTimeBuilder()Output only. Time when the policy was last updated.
.google.protobuf.Timestamp update_time = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];
| Returns | |
|---|---|
| Type | Description |
Builder | |
getUpdateTimeOrBuilder()
publicTimestampOrBuildergetUpdateTimeOrBuilder()Output only. Time when the policy was last updated.
.google.protobuf.Timestamp update_time = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];
| Returns | |
|---|---|
| Type | Description |
TimestampOrBuilder | |
hasDefaultAdmissionRule()
publicbooleanhasDefaultAdmissionRule()Required. Default admission rule for a cluster without a per-cluster, per- kubernetes-service-account, or per-istio-service-identity admission rule.
.google.cloud.binaryauthorization.v1beta1.AdmissionRule default_admission_rule = 4 [(.google.api.field_behavior) = REQUIRED];
| Returns | |
|---|---|
| Type | Description |
boolean | Whether the defaultAdmissionRule field is set. |
hasUpdateTime()
publicbooleanhasUpdateTime()Output only. Time when the policy was last updated.
.google.protobuf.Timestamp update_time = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];
| Returns | |
|---|---|
| Type | Description |
boolean | Whether the updateTime field is set. |
internalGetFieldAccessorTable()
protectedGeneratedMessageV3.FieldAccessorTableinternalGetFieldAccessorTable()| Returns | |
|---|---|
| Type | Description |
FieldAccessorTable | |
internalGetMapFieldReflection(int number)
protectedMapFieldReflectionAccessorinternalGetMapFieldReflection(intnumber)| Parameter | |
|---|---|
| Name | Description |
number | int |
| Returns | |
|---|---|
| Type | Description |
com.google.protobuf.MapFieldReflectionAccessor | |
internalGetMutableMapFieldReflection(int number)
protectedMapFieldReflectionAccessorinternalGetMutableMapFieldReflection(intnumber)| Parameter | |
|---|---|
| Name | Description |
number | int |
| Returns | |
|---|---|
| Type | Description |
com.google.protobuf.MapFieldReflectionAccessor | |
isInitialized()
publicfinalbooleanisInitialized()| Returns | |
|---|---|
| Type | Description |
boolean | |
mergeDefaultAdmissionRule(AdmissionRule value)
publicPolicy.BuildermergeDefaultAdmissionRule(AdmissionRulevalue)Required. Default admission rule for a cluster without a per-cluster, per- kubernetes-service-account, or per-istio-service-identity admission rule.
.google.cloud.binaryauthorization.v1beta1.AdmissionRule default_admission_rule = 4 [(.google.api.field_behavior) = REQUIRED];
| Parameter | |
|---|---|
| Name | Description |
value | AdmissionRule |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
mergeFrom(Policy other)
publicPolicy.BuildermergeFrom(Policyother)| Parameter | |
|---|---|
| Name | Description |
other | Policy |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
mergeFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)
publicPolicy.BuildermergeFrom(CodedInputStreaminput,ExtensionRegistryLiteextensionRegistry)| Parameters | |
|---|---|
| Name | Description |
input | CodedInputStream |
extensionRegistry | ExtensionRegistryLite |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
| Exceptions | |
|---|---|
| Type | Description |
IOException | |
mergeFrom(Message other)
publicPolicy.BuildermergeFrom(Messageother)| Parameter | |
|---|---|
| Name | Description |
other | Message |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
mergeUnknownFields(UnknownFieldSet unknownFields)
publicfinalPolicy.BuildermergeUnknownFields(UnknownFieldSetunknownFields)| Parameter | |
|---|---|
| Name | Description |
unknownFields | UnknownFieldSet |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
mergeUpdateTime(Timestamp value)
publicPolicy.BuildermergeUpdateTime(Timestampvalue)Output only. Time when the policy was last updated.
.google.protobuf.Timestamp update_time = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];
| Parameter | |
|---|---|
| Name | Description |
value | Timestamp |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
putAllClusterAdmissionRules(Map<String,AdmissionRule> values)
publicPolicy.BuilderputAllClusterAdmissionRules(Map<String,AdmissionRule>values) Optional. Per-cluster admission rules. Cluster spec format: location.clusterId. There can be at most one admission rule per cluster spec. A location is either a compute zone (e.g. us-central1-a) or a region (e.g. us-central1). For clusterId syntax restrictions see https://cloud.google.com/container-engine/reference/rest/v1/projects.zones.clusters.
map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> cluster_admission_rules = 3 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
values | Map<String,AdmissionRule> |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
putAllIstioServiceIdentityAdmissionRules(Map<String,AdmissionRule> values)
publicPolicy.BuilderputAllIstioServiceIdentityAdmissionRules(Map<String,AdmissionRule>values) Optional. Per-istio-service-identity admission rules. Istio service identity spec format: spiffe://<domain>/ns/<namespace>/sa/<serviceaccount> or <domain>/ns/<namespace>/sa/<serviceaccount> e.g. spiffe://example.com/ns/test-ns/sa/default
map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> istio_service_identity_admission_rules = 9 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
values | Map<String,AdmissionRule> |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
putAllKubernetesNamespaceAdmissionRules(Map<String,AdmissionRule> values)
publicPolicy.BuilderputAllKubernetesNamespaceAdmissionRules(Map<String,AdmissionRule>values) Optional. Per-kubernetes-namespace admission rules. K8s namespace spec format: [a-z.-]+, e.g. some-namespace
map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> kubernetes_namespace_admission_rules = 10 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
values | Map<String,AdmissionRule> |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
putAllKubernetesServiceAccountAdmissionRules(Map<String,AdmissionRule> values)
publicPolicy.BuilderputAllKubernetesServiceAccountAdmissionRules(Map<String,AdmissionRule>values) Optional. Per-kubernetes-service-account admission rules. Service account spec format: namespace:serviceaccount. e.g. test-ns:default
map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> kubernetes_service_account_admission_rules = 8 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
values | Map<String,AdmissionRule> |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
putClusterAdmissionRules(String key, AdmissionRule value)
publicPolicy.BuilderputClusterAdmissionRules(Stringkey,AdmissionRulevalue) Optional. Per-cluster admission rules. Cluster spec format: location.clusterId. There can be at most one admission rule per cluster spec. A location is either a compute zone (e.g. us-central1-a) or a region (e.g. us-central1). For clusterId syntax restrictions see https://cloud.google.com/container-engine/reference/rest/v1/projects.zones.clusters.
map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> cluster_admission_rules = 3 [(.google.api.field_behavior) = OPTIONAL];
| Parameters | |
|---|---|
| Name | Description |
key | String |
value | AdmissionRule |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
putClusterAdmissionRulesBuilderIfAbsent(String key)
publicAdmissionRule.BuilderputClusterAdmissionRulesBuilderIfAbsent(Stringkey) Optional. Per-cluster admission rules. Cluster spec format: location.clusterId. There can be at most one admission rule per cluster spec. A location is either a compute zone (e.g. us-central1-a) or a region (e.g. us-central1). For clusterId syntax restrictions see https://cloud.google.com/container-engine/reference/rest/v1/projects.zones.clusters.
map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> cluster_admission_rules = 3 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
key | String |
| Returns | |
|---|---|
| Type | Description |
AdmissionRule.Builder | |
putIstioServiceIdentityAdmissionRules(String key, AdmissionRule value)
publicPolicy.BuilderputIstioServiceIdentityAdmissionRules(Stringkey,AdmissionRulevalue) Optional. Per-istio-service-identity admission rules. Istio service identity spec format: spiffe://<domain>/ns/<namespace>/sa/<serviceaccount> or <domain>/ns/<namespace>/sa/<serviceaccount> e.g. spiffe://example.com/ns/test-ns/sa/default
map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> istio_service_identity_admission_rules = 9 [(.google.api.field_behavior) = OPTIONAL];
| Parameters | |
|---|---|
| Name | Description |
key | String |
value | AdmissionRule |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
putIstioServiceIdentityAdmissionRulesBuilderIfAbsent(String key)
publicAdmissionRule.BuilderputIstioServiceIdentityAdmissionRulesBuilderIfAbsent(Stringkey) Optional. Per-istio-service-identity admission rules. Istio service identity spec format: spiffe://<domain>/ns/<namespace>/sa/<serviceaccount> or <domain>/ns/<namespace>/sa/<serviceaccount> e.g. spiffe://example.com/ns/test-ns/sa/default
map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> istio_service_identity_admission_rules = 9 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
key | String |
| Returns | |
|---|---|
| Type | Description |
AdmissionRule.Builder | |
putKubernetesNamespaceAdmissionRules(String key, AdmissionRule value)
publicPolicy.BuilderputKubernetesNamespaceAdmissionRules(Stringkey,AdmissionRulevalue) Optional. Per-kubernetes-namespace admission rules. K8s namespace spec format: [a-z.-]+, e.g. some-namespace
map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> kubernetes_namespace_admission_rules = 10 [(.google.api.field_behavior) = OPTIONAL];
| Parameters | |
|---|---|
| Name | Description |
key | String |
value | AdmissionRule |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
putKubernetesNamespaceAdmissionRulesBuilderIfAbsent(String key)
publicAdmissionRule.BuilderputKubernetesNamespaceAdmissionRulesBuilderIfAbsent(Stringkey) Optional. Per-kubernetes-namespace admission rules. K8s namespace spec format: [a-z.-]+, e.g. some-namespace
map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> kubernetes_namespace_admission_rules = 10 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
key | String |
| Returns | |
|---|---|
| Type | Description |
AdmissionRule.Builder | |
putKubernetesServiceAccountAdmissionRules(String key, AdmissionRule value)
publicPolicy.BuilderputKubernetesServiceAccountAdmissionRules(Stringkey,AdmissionRulevalue) Optional. Per-kubernetes-service-account admission rules. Service account spec format: namespace:serviceaccount. e.g. test-ns:default
map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> kubernetes_service_account_admission_rules = 8 [(.google.api.field_behavior) = OPTIONAL];
| Parameters | |
|---|---|
| Name | Description |
key | String |
value | AdmissionRule |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
putKubernetesServiceAccountAdmissionRulesBuilderIfAbsent(String key)
publicAdmissionRule.BuilderputKubernetesServiceAccountAdmissionRulesBuilderIfAbsent(Stringkey) Optional. Per-kubernetes-service-account admission rules. Service account spec format: namespace:serviceaccount. e.g. test-ns:default
map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> kubernetes_service_account_admission_rules = 8 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
key | String |
| Returns | |
|---|---|
| Type | Description |
AdmissionRule.Builder | |
removeAdmissionWhitelistPatterns(int index)
publicPolicy.BuilderremoveAdmissionWhitelistPatterns(intindex)Optional. Admission policy allowlisting. A matching admission request will always be permitted. This feature is typically used to exclude Google or third-party infrastructure images from Binary Authorization policies.
repeated .google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
index | int |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
removeClusterAdmissionRules(String key)
publicPolicy.BuilderremoveClusterAdmissionRules(Stringkey) Optional. Per-cluster admission rules. Cluster spec format: location.clusterId. There can be at most one admission rule per cluster spec. A location is either a compute zone (e.g. us-central1-a) or a region (e.g. us-central1). For clusterId syntax restrictions see https://cloud.google.com/container-engine/reference/rest/v1/projects.zones.clusters.
map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> cluster_admission_rules = 3 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
key | String |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
removeIstioServiceIdentityAdmissionRules(String key)
publicPolicy.BuilderremoveIstioServiceIdentityAdmissionRules(Stringkey) Optional. Per-istio-service-identity admission rules. Istio service identity spec format: spiffe://<domain>/ns/<namespace>/sa/<serviceaccount> or <domain>/ns/<namespace>/sa/<serviceaccount> e.g. spiffe://example.com/ns/test-ns/sa/default
map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> istio_service_identity_admission_rules = 9 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
key | String |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
removeKubernetesNamespaceAdmissionRules(String key)
publicPolicy.BuilderremoveKubernetesNamespaceAdmissionRules(Stringkey) Optional. Per-kubernetes-namespace admission rules. K8s namespace spec format: [a-z.-]+, e.g. some-namespace
map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> kubernetes_namespace_admission_rules = 10 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
key | String |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
removeKubernetesServiceAccountAdmissionRules(String key)
publicPolicy.BuilderremoveKubernetesServiceAccountAdmissionRules(Stringkey) Optional. Per-kubernetes-service-account admission rules. Service account spec format: namespace:serviceaccount. e.g. test-ns:default
map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> kubernetes_service_account_admission_rules = 8 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
key | String |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
setAdmissionWhitelistPatterns(int index, AdmissionWhitelistPattern value)
publicPolicy.BuildersetAdmissionWhitelistPatterns(intindex,AdmissionWhitelistPatternvalue)Optional. Admission policy allowlisting. A matching admission request will always be permitted. This feature is typically used to exclude Google or third-party infrastructure images from Binary Authorization policies.
repeated .google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];
| Parameters | |
|---|---|
| Name | Description |
index | int |
value | AdmissionWhitelistPattern |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
setAdmissionWhitelistPatterns(int index, AdmissionWhitelistPattern.Builder builderForValue)
publicPolicy.BuildersetAdmissionWhitelistPatterns(intindex,AdmissionWhitelistPattern.BuilderbuilderForValue)Optional. Admission policy allowlisting. A matching admission request will always be permitted. This feature is typically used to exclude Google or third-party infrastructure images from Binary Authorization policies.
repeated .google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];
| Parameters | |
|---|---|
| Name | Description |
index | int |
builderForValue | AdmissionWhitelistPattern.Builder |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
setDefaultAdmissionRule(AdmissionRule value)
publicPolicy.BuildersetDefaultAdmissionRule(AdmissionRulevalue)Required. Default admission rule for a cluster without a per-cluster, per- kubernetes-service-account, or per-istio-service-identity admission rule.
.google.cloud.binaryauthorization.v1beta1.AdmissionRule default_admission_rule = 4 [(.google.api.field_behavior) = REQUIRED];
| Parameter | |
|---|---|
| Name | Description |
value | AdmissionRule |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
setDefaultAdmissionRule(AdmissionRule.Builder builderForValue)
publicPolicy.BuildersetDefaultAdmissionRule(AdmissionRule.BuilderbuilderForValue)Required. Default admission rule for a cluster without a per-cluster, per- kubernetes-service-account, or per-istio-service-identity admission rule.
.google.cloud.binaryauthorization.v1beta1.AdmissionRule default_admission_rule = 4 [(.google.api.field_behavior) = REQUIRED];
| Parameter | |
|---|---|
| Name | Description |
builderForValue | AdmissionRule.Builder |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
setDescription(String value)
publicPolicy.BuildersetDescription(Stringvalue)Optional. A descriptive comment.
string description = 6 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
value | StringThe description to set. |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | This builder for chaining. |
setDescriptionBytes(ByteString value)
publicPolicy.BuildersetDescriptionBytes(ByteStringvalue)Optional. A descriptive comment.
string description = 6 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
value | ByteStringThe bytes for description to set. |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | This builder for chaining. |
setField(Descriptors.FieldDescriptor field, Object value)
publicPolicy.BuildersetField(Descriptors.FieldDescriptorfield,Objectvalue)| Parameters | |
|---|---|
| Name | Description |
field | FieldDescriptor |
value | Object |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
setGlobalPolicyEvaluationMode(Policy.GlobalPolicyEvaluationMode value)
publicPolicy.BuildersetGlobalPolicyEvaluationMode(Policy.GlobalPolicyEvaluationModevalue)Optional. Controls the evaluation of a Google-maintained global admission policy for common system-level images. Images not covered by the global policy will be subject to the project admission policy. This setting has no effect when specified inside a global admission policy.
.google.cloud.binaryauthorization.v1beta1.Policy.GlobalPolicyEvaluationMode global_policy_evaluation_mode = 7 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
value | Policy.GlobalPolicyEvaluationModeThe globalPolicyEvaluationMode to set. |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | This builder for chaining. |
setGlobalPolicyEvaluationModeValue(int value)
publicPolicy.BuildersetGlobalPolicyEvaluationModeValue(intvalue)Optional. Controls the evaluation of a Google-maintained global admission policy for common system-level images. Images not covered by the global policy will be subject to the project admission policy. This setting has no effect when specified inside a global admission policy.
.google.cloud.binaryauthorization.v1beta1.Policy.GlobalPolicyEvaluationMode global_policy_evaluation_mode = 7 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
value | intThe enum numeric value on the wire for globalPolicyEvaluationMode to set. |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | This builder for chaining. |
setName(String value)
publicPolicy.BuildersetName(Stringvalue) Output only. The resource name, in the format projects/*/policy. There is at most one policy per project.
string name = 1 [(.google.api.field_behavior) = OUTPUT_ONLY];
| Parameter | |
|---|---|
| Name | Description |
value | StringThe name to set. |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | This builder for chaining. |
setNameBytes(ByteString value)
publicPolicy.BuildersetNameBytes(ByteStringvalue) Output only. The resource name, in the format projects/*/policy. There is at most one policy per project.
string name = 1 [(.google.api.field_behavior) = OUTPUT_ONLY];
| Parameter | |
|---|---|
| Name | Description |
value | ByteStringThe bytes for name to set. |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | This builder for chaining. |
setRepeatedField(Descriptors.FieldDescriptor field, int index, Object value)
publicPolicy.BuildersetRepeatedField(Descriptors.FieldDescriptorfield,intindex,Objectvalue)| Parameters | |
|---|---|
| Name | Description |
field | FieldDescriptor |
index | int |
value | Object |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
setUnknownFields(UnknownFieldSet unknownFields)
publicfinalPolicy.BuildersetUnknownFields(UnknownFieldSetunknownFields)| Parameter | |
|---|---|
| Name | Description |
unknownFields | UnknownFieldSet |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
setUpdateTime(Timestamp value)
publicPolicy.BuildersetUpdateTime(Timestampvalue)Output only. Time when the policy was last updated.
.google.protobuf.Timestamp update_time = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];
| Parameter | |
|---|---|
| Name | Description |
value | Timestamp |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
setUpdateTime(Timestamp.Builder builderForValue)
publicPolicy.BuildersetUpdateTime(Timestamp.BuilderbuilderForValue)Output only. Time when the policy was last updated.
.google.protobuf.Timestamp update_time = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];
| Parameter | |
|---|---|
| Name | Description |
builderForValue | Builder |
| Returns | |
|---|---|
| Type | Description |
Policy.Builder | |
