- 1.59.0 (latest)
- 1.58.0
- 1.57.0
- 1.56.0
- 1.55.0
- 1.54.0
- 1.53.0
- 1.52.0
- 1.51.0
- 1.50.0
- 1.48.0
- 1.47.0
- 1.46.0
- 1.45.0
- 1.44.0
- 1.43.0
- 1.42.0
- 1.41.0
- 1.40.0
- 1.39.0
- 1.38.0
- 1.36.0
- 1.35.0
- 1.34.0
- 1.33.0
- 1.32.0
- 1.31.0
- 1.30.0
- 1.29.0
- 1.28.0
- 1.27.0
- 1.26.0
- 1.23.0
- 1.22.0
- 1.21.0
- 1.20.0
- 1.19.0
- 1.18.0
- 1.17.0
- 1.16.0
- 1.15.0
- 1.14.0
- 1.13.0
- 1.12.0
- 1.11.0
- 1.10.0
- 1.9.0
- 1.8.0
- 1.7.0
- 1.6.0
- 1.5.0
- 1.4.0
- 1.3.0
- 1.0.6
publicstaticfinalclassAdmissionRule.BuilderextendsGeneratedMessageV3.Builder<AdmissionRule.Builder>implementsAdmissionRuleOrBuilderAn admission rule specifies either that all container images used in a pod creation request must be attested to by one or more attestors, that all pod creations will be allowed, or that all pod creations will be denied.
Images matching an admission allowlist pattern are exempted from admission rules and will never block a pod creation.
Protobuf type google.cloud.binaryauthorization.v1beta1.AdmissionRule
Inheritance
Object > AbstractMessageLite.Builder<MessageType,BuilderType> > AbstractMessage.Builder<BuilderType> > GeneratedMessageV3.Builder > AdmissionRule.BuilderImplements
AdmissionRuleOrBuilderStatic Methods
getDescriptor()
publicstaticfinalDescriptors.DescriptorgetDescriptor()| Returns | |
|---|---|
| Type | Description |
Descriptor | |
Methods
addAllRequireAttestationsBy(Iterable<String> values)
publicAdmissionRule.BuilderaddAllRequireAttestationsBy(Iterable<String>values) Optional. The resource names of the attestors that must attest to a container image, in the format projects/*/attestors/*. Each attestor must exist before a policy can reference it. To add an attestor to a policy the principal issuing the policy change request must be able to read the attestor resource.
Note: this field must be non-empty when the evaluation_mode field specifies REQUIRE_ATTESTATION, otherwise it must be empty.
repeated string require_attestations_by = 2 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
values | Iterable<String>The requireAttestationsBy to add. |
| Returns | |
|---|---|
| Type | Description |
AdmissionRule.Builder | This builder for chaining. |
addRepeatedField(Descriptors.FieldDescriptor field, Object value)
publicAdmissionRule.BuilderaddRepeatedField(Descriptors.FieldDescriptorfield,Objectvalue)| Parameters | |
|---|---|
| Name | Description |
field | FieldDescriptor |
value | Object |
| Returns | |
|---|---|
| Type | Description |
AdmissionRule.Builder | |
addRequireAttestationsBy(String value)
publicAdmissionRule.BuilderaddRequireAttestationsBy(Stringvalue) Optional. The resource names of the attestors that must attest to a container image, in the format projects/*/attestors/*. Each attestor must exist before a policy can reference it. To add an attestor to a policy the principal issuing the policy change request must be able to read the attestor resource.
Note: this field must be non-empty when the evaluation_mode field specifies REQUIRE_ATTESTATION, otherwise it must be empty.
repeated string require_attestations_by = 2 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
value | StringThe requireAttestationsBy to add. |
| Returns | |
|---|---|
| Type | Description |
AdmissionRule.Builder | This builder for chaining. |
addRequireAttestationsByBytes(ByteString value)
publicAdmissionRule.BuilderaddRequireAttestationsByBytes(ByteStringvalue) Optional. The resource names of the attestors that must attest to a container image, in the format projects/*/attestors/*. Each attestor must exist before a policy can reference it. To add an attestor to a policy the principal issuing the policy change request must be able to read the attestor resource.
Note: this field must be non-empty when the evaluation_mode field specifies REQUIRE_ATTESTATION, otherwise it must be empty.
repeated string require_attestations_by = 2 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
value | ByteStringThe bytes of the requireAttestationsBy to add. |
| Returns | |
|---|---|
| Type | Description |
AdmissionRule.Builder | This builder for chaining. |
build()
publicAdmissionRulebuild()| Returns | |
|---|---|
| Type | Description |
AdmissionRule | |
buildPartial()
publicAdmissionRulebuildPartial()| Returns | |
|---|---|
| Type | Description |
AdmissionRule | |
clear()
publicAdmissionRule.Builderclear()| Returns | |
|---|---|
| Type | Description |
AdmissionRule.Builder | |
clearEnforcementMode()
publicAdmissionRule.BuilderclearEnforcementMode()Required. The action when a pod creation is denied by the admission rule.
.google.cloud.binaryauthorization.v1beta1.AdmissionRule.EnforcementMode enforcement_mode = 3 [(.google.api.field_behavior) = REQUIRED];
| Returns | |
|---|---|
| Type | Description |
AdmissionRule.Builder | This builder for chaining. |
clearEvaluationMode()
publicAdmissionRule.BuilderclearEvaluationMode()Required. How this admission rule will be evaluated.
.google.cloud.binaryauthorization.v1beta1.AdmissionRule.EvaluationMode evaluation_mode = 1 [(.google.api.field_behavior) = REQUIRED];
| Returns | |
|---|---|
| Type | Description |
AdmissionRule.Builder | This builder for chaining. |
clearField(Descriptors.FieldDescriptor field)
publicAdmissionRule.BuilderclearField(Descriptors.FieldDescriptorfield)| Parameter | |
|---|---|
| Name | Description |
field | FieldDescriptor |
| Returns | |
|---|---|
| Type | Description |
AdmissionRule.Builder | |
clearOneof(Descriptors.OneofDescriptor oneof)
publicAdmissionRule.BuilderclearOneof(Descriptors.OneofDescriptoroneof)| Parameter | |
|---|---|
| Name | Description |
oneof | OneofDescriptor |
| Returns | |
|---|---|
| Type | Description |
AdmissionRule.Builder | |
clearRequireAttestationsBy()
publicAdmissionRule.BuilderclearRequireAttestationsBy() Optional. The resource names of the attestors that must attest to a container image, in the format projects/*/attestors/*. Each attestor must exist before a policy can reference it. To add an attestor to a policy the principal issuing the policy change request must be able to read the attestor resource.
Note: this field must be non-empty when the evaluation_mode field specifies REQUIRE_ATTESTATION, otherwise it must be empty.
repeated string require_attestations_by = 2 [(.google.api.field_behavior) = OPTIONAL];
| Returns | |
|---|---|
| Type | Description |
AdmissionRule.Builder | This builder for chaining. |
clone()
publicAdmissionRule.Builderclone()| Returns | |
|---|---|
| Type | Description |
AdmissionRule.Builder | |
getDefaultInstanceForType()
publicAdmissionRulegetDefaultInstanceForType()| Returns | |
|---|---|
| Type | Description |
AdmissionRule | |
getDescriptorForType()
publicDescriptors.DescriptorgetDescriptorForType()| Returns | |
|---|---|
| Type | Description |
Descriptor | |
getEnforcementMode()
publicAdmissionRule.EnforcementModegetEnforcementMode()Required. The action when a pod creation is denied by the admission rule.
.google.cloud.binaryauthorization.v1beta1.AdmissionRule.EnforcementMode enforcement_mode = 3 [(.google.api.field_behavior) = REQUIRED];
| Returns | |
|---|---|
| Type | Description |
AdmissionRule.EnforcementMode | The enforcementMode. |
getEnforcementModeValue()
publicintgetEnforcementModeValue()Required. The action when a pod creation is denied by the admission rule.
.google.cloud.binaryauthorization.v1beta1.AdmissionRule.EnforcementMode enforcement_mode = 3 [(.google.api.field_behavior) = REQUIRED];
| Returns | |
|---|---|
| Type | Description |
int | The enum numeric value on the wire for enforcementMode. |
getEvaluationMode()
publicAdmissionRule.EvaluationModegetEvaluationMode()Required. How this admission rule will be evaluated.
.google.cloud.binaryauthorization.v1beta1.AdmissionRule.EvaluationMode evaluation_mode = 1 [(.google.api.field_behavior) = REQUIRED];
| Returns | |
|---|---|
| Type | Description |
AdmissionRule.EvaluationMode | The evaluationMode. |
getEvaluationModeValue()
publicintgetEvaluationModeValue()Required. How this admission rule will be evaluated.
.google.cloud.binaryauthorization.v1beta1.AdmissionRule.EvaluationMode evaluation_mode = 1 [(.google.api.field_behavior) = REQUIRED];
| Returns | |
|---|---|
| Type | Description |
int | The enum numeric value on the wire for evaluationMode. |
getRequireAttestationsBy(int index)
publicStringgetRequireAttestationsBy(intindex) Optional. The resource names of the attestors that must attest to a container image, in the format projects/*/attestors/*. Each attestor must exist before a policy can reference it. To add an attestor to a policy the principal issuing the policy change request must be able to read the attestor resource.
Note: this field must be non-empty when the evaluation_mode field specifies REQUIRE_ATTESTATION, otherwise it must be empty.
repeated string require_attestations_by = 2 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
index | intThe index of the element to return. |
| Returns | |
|---|---|
| Type | Description |
String | The requireAttestationsBy at the given index. |
getRequireAttestationsByBytes(int index)
publicByteStringgetRequireAttestationsByBytes(intindex) Optional. The resource names of the attestors that must attest to a container image, in the format projects/*/attestors/*. Each attestor must exist before a policy can reference it. To add an attestor to a policy the principal issuing the policy change request must be able to read the attestor resource.
Note: this field must be non-empty when the evaluation_mode field specifies REQUIRE_ATTESTATION, otherwise it must be empty.
repeated string require_attestations_by = 2 [(.google.api.field_behavior) = OPTIONAL];
| Parameter | |
|---|---|
| Name | Description |
index | intThe index of the value to return. |
| Returns | |
|---|---|
| Type | Description |
ByteString | The bytes of the requireAttestationsBy at the given index. |
getRequireAttestationsByCount()
publicintgetRequireAttestationsByCount() Optional. The resource names of the attestors that must attest to a container image, in the format projects/*/attestors/*. Each attestor must exist before a policy can reference it. To add an attestor to a policy the principal issuing the policy change request must be able to read the attestor resource.
Note: this field must be non-empty when the evaluation_mode field specifies REQUIRE_ATTESTATION, otherwise it must be empty.
repeated string require_attestations_by = 2 [(.google.api.field_behavior) = OPTIONAL];
| Returns | |
|---|---|
| Type | Description |
int | The count of requireAttestationsBy. |
getRequireAttestationsByList()
publicProtocolStringListgetRequireAttestationsByList() Optional. The resource names of the attestors that must attest to a container image, in the format projects/*/attestors/*. Each attestor must exist before a policy can reference it. To add an attestor to a policy the principal issuing the policy change request must be able to read the attestor resource.
Note: this field must be non-empty when the evaluation_mode field specifies REQUIRE_ATTESTATION, otherwise it must be empty.
repeated string require_attestations_by = 2 [(.google.api.field_behavior) = OPTIONAL];
| Returns | |
|---|---|
| Type | Description |
ProtocolStringList | A list containing the requireAttestationsBy. |
internalGetFieldAccessorTable()
protectedGeneratedMessageV3.FieldAccessorTableinternalGetFieldAccessorTable()| Returns | |
|---|---|
| Type | Description |
FieldAccessorTable | |
isInitialized()
publicfinalbooleanisInitialized()| Returns | |
|---|---|
| Type | Description |
boolean | |
mergeFrom(AdmissionRule other)
publicAdmissionRule.BuildermergeFrom(AdmissionRuleother)| Parameter | |
|---|---|
| Name | Description |
other | AdmissionRule |
| Returns | |
|---|---|
| Type | Description |
AdmissionRule.Builder | |
mergeFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)
publicAdmissionRule.BuildermergeFrom(CodedInputStreaminput,ExtensionRegistryLiteextensionRegistry)| Parameters | |
|---|---|
| Name | Description |
input | CodedInputStream |
extensionRegistry | ExtensionRegistryLite |
| Returns | |
|---|---|
| Type | Description |
AdmissionRule.Builder | |
| Exceptions | |
|---|---|
| Type | Description |
IOException | |
mergeFrom(Message other)
publicAdmissionRule.BuildermergeFrom(Messageother)| Parameter | |
|---|---|
| Name | Description |
other | Message |
| Returns | |
|---|---|
| Type | Description |
AdmissionRule.Builder | |
mergeUnknownFields(UnknownFieldSet unknownFields)
publicfinalAdmissionRule.BuildermergeUnknownFields(UnknownFieldSetunknownFields)| Parameter | |
|---|---|
| Name | Description |
unknownFields | UnknownFieldSet |
| Returns | |
|---|---|
| Type | Description |
AdmissionRule.Builder | |
setEnforcementMode(AdmissionRule.EnforcementMode value)
publicAdmissionRule.BuildersetEnforcementMode(AdmissionRule.EnforcementModevalue)Required. The action when a pod creation is denied by the admission rule.
.google.cloud.binaryauthorization.v1beta1.AdmissionRule.EnforcementMode enforcement_mode = 3 [(.google.api.field_behavior) = REQUIRED];
| Parameter | |
|---|---|
| Name | Description |
value | AdmissionRule.EnforcementModeThe enforcementMode to set. |
| Returns | |
|---|---|
| Type | Description |
AdmissionRule.Builder | This builder for chaining. |
setEnforcementModeValue(int value)
publicAdmissionRule.BuildersetEnforcementModeValue(intvalue)Required. The action when a pod creation is denied by the admission rule.
.google.cloud.binaryauthorization.v1beta1.AdmissionRule.EnforcementMode enforcement_mode = 3 [(.google.api.field_behavior) = REQUIRED];
| Parameter | |
|---|---|
| Name | Description |
value | intThe enum numeric value on the wire for enforcementMode to set. |
| Returns | |
|---|---|
| Type | Description |
AdmissionRule.Builder | This builder for chaining. |
setEvaluationMode(AdmissionRule.EvaluationMode value)
publicAdmissionRule.BuildersetEvaluationMode(AdmissionRule.EvaluationModevalue)Required. How this admission rule will be evaluated.
.google.cloud.binaryauthorization.v1beta1.AdmissionRule.EvaluationMode evaluation_mode = 1 [(.google.api.field_behavior) = REQUIRED];
| Parameter | |
|---|---|
| Name | Description |
value | AdmissionRule.EvaluationModeThe evaluationMode to set. |
| Returns | |
|---|---|
| Type | Description |
AdmissionRule.Builder | This builder for chaining. |
setEvaluationModeValue(int value)
publicAdmissionRule.BuildersetEvaluationModeValue(intvalue)Required. How this admission rule will be evaluated.
.google.cloud.binaryauthorization.v1beta1.AdmissionRule.EvaluationMode evaluation_mode = 1 [(.google.api.field_behavior) = REQUIRED];
| Parameter | |
|---|---|
| Name | Description |
value | intThe enum numeric value on the wire for evaluationMode to set. |
| Returns | |
|---|---|
| Type | Description |
AdmissionRule.Builder | This builder for chaining. |
setField(Descriptors.FieldDescriptor field, Object value)
publicAdmissionRule.BuildersetField(Descriptors.FieldDescriptorfield,Objectvalue)| Parameters | |
|---|---|
| Name | Description |
field | FieldDescriptor |
value | Object |
| Returns | |
|---|---|
| Type | Description |
AdmissionRule.Builder | |
setRepeatedField(Descriptors.FieldDescriptor field, int index, Object value)
publicAdmissionRule.BuildersetRepeatedField(Descriptors.FieldDescriptorfield,intindex,Objectvalue)| Parameters | |
|---|---|
| Name | Description |
field | FieldDescriptor |
index | int |
value | Object |
| Returns | |
|---|---|
| Type | Description |
AdmissionRule.Builder | |
setRequireAttestationsBy(int index, String value)
publicAdmissionRule.BuildersetRequireAttestationsBy(intindex,Stringvalue) Optional. The resource names of the attestors that must attest to a container image, in the format projects/*/attestors/*. Each attestor must exist before a policy can reference it. To add an attestor to a policy the principal issuing the policy change request must be able to read the attestor resource.
Note: this field must be non-empty when the evaluation_mode field specifies REQUIRE_ATTESTATION, otherwise it must be empty.
repeated string require_attestations_by = 2 [(.google.api.field_behavior) = OPTIONAL];
| Parameters | |
|---|---|
| Name | Description |
index | intThe index to set the value at. |
value | StringThe requireAttestationsBy to set. |
| Returns | |
|---|---|
| Type | Description |
AdmissionRule.Builder | This builder for chaining. |
setUnknownFields(UnknownFieldSet unknownFields)
publicfinalAdmissionRule.BuildersetUnknownFields(UnknownFieldSetunknownFields)| Parameter | |
|---|---|
| Name | Description |
unknownFields | UnknownFieldSet |
| Returns | |
|---|---|
| Type | Description |
AdmissionRule.Builder | |
