Package com.google.protos.google.cloud.binaryauthorization.v1

Class Resources.AdmissionRule

java.lang.Object
com.google.protobuf.AbstractMessageLite
com.google.protobuf.AbstractMessage
com.google.protobuf.GeneratedMessage
com.google.protos.google.cloud.binaryauthorization.v1.Resources.AdmissionRule
All Implemented Interfaces:
com.google.protobuf.Message, com.google.protobuf.MessageLite, com.google.protobuf.MessageLiteOrBuilder, com.google.protobuf.MessageOrBuilder, Resources.AdmissionRuleOrBuilder, Serializable
Enclosing class:
Resources
public static final class Resources.AdmissionRule extends com.google.protobuf.GeneratedMessage implements Resources.AdmissionRuleOrBuilder
 An [admission rule][google.cloud.binaryauthorization.v1.AdmissionRule] specifies either that all container images
 used in a pod creation request must be attested to by one or more
 [attestors][google.cloud.binaryauthorization.v1.Attestor], that all pod creations will be allowed, or that all
 pod creations will be denied.

 Images matching an [admission allowlist pattern][google.cloud.binaryauthorization.v1.AdmissionWhitelistPattern]
 are exempted from admission rules and will never block a pod creation.
Protobuf type google.cloud.binaryauthorization.v1.AdmissionRule
See Also:

  • Field Details

    • EVALUATION_MODE_FIELD_NUMBER

      public static final int EVALUATION_MODE_FIELD_NUMBER
      See Also:

    • REQUIRE_ATTESTATIONS_BY_FIELD_NUMBER

      public static final int REQUIRE_ATTESTATIONS_BY_FIELD_NUMBER
      See Also:

    • ENFORCEMENT_MODE_FIELD_NUMBER

      public static final int ENFORCEMENT_MODE_FIELD_NUMBER
      See Also:

  • Method Details

    • getDescriptor

      public static final com.google.protobuf.Descriptors.Descriptor getDescriptor()

    • internalGetFieldAccessorTable

      protected com.google.protobuf.GeneratedMessage.FieldAccessorTable internalGetFieldAccessorTable()
      Specified by:
      internalGetFieldAccessorTable in class com.google.protobuf.GeneratedMessage

    • getEvaluationModeValue

      public int getEvaluationModeValue()
       Required. How this admission rule will be evaluated.
      .google.cloud.binaryauthorization.v1.AdmissionRule.EvaluationMode evaluation_mode = 1 [(.google.api.field_behavior) = REQUIRED];
      Specified by:
      getEvaluationModeValue in interface Resources.AdmissionRuleOrBuilder
      Returns:
      The enum numeric value on the wire for evaluationMode.

    • getEvaluationMode

      public Resources.AdmissionRule.EvaluationMode getEvaluationMode()
       Required. How this admission rule will be evaluated.
      .google.cloud.binaryauthorization.v1.AdmissionRule.EvaluationMode evaluation_mode = 1 [(.google.api.field_behavior) = REQUIRED];
      Specified by:
      getEvaluationMode in interface Resources.AdmissionRuleOrBuilder
      Returns:
      The evaluationMode.

    • getRequireAttestationsByList

      public com.google.protobuf.ProtocolStringList getRequireAttestationsByList()
       Optional. The resource names of the attestors that must attest to
 a container image, in the format `projects/*/attestors/*`. Each
 attestor must exist before a policy can reference it.  To add an attestor
 to a policy the principal issuing the policy change request must be able
 to read the attestor resource.

 Note: this field must be non-empty when the evaluation_mode field specifies
 REQUIRE_ATTESTATION, otherwise it must be empty.
      repeated string require_attestations_by = 2 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getRequireAttestationsByList in interface Resources.AdmissionRuleOrBuilder
      Returns:
      A list containing the requireAttestationsBy.

    • getRequireAttestationsByCount

      public int getRequireAttestationsByCount()
       Optional. The resource names of the attestors that must attest to
 a container image, in the format `projects/*/attestors/*`. Each
 attestor must exist before a policy can reference it.  To add an attestor
 to a policy the principal issuing the policy change request must be able
 to read the attestor resource.

 Note: this field must be non-empty when the evaluation_mode field specifies
 REQUIRE_ATTESTATION, otherwise it must be empty.
      repeated string require_attestations_by = 2 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getRequireAttestationsByCount in interface Resources.AdmissionRuleOrBuilder
      Returns:
      The count of requireAttestationsBy.

    • getRequireAttestationsBy

      public String getRequireAttestationsBy(int index)
       Optional. The resource names of the attestors that must attest to
 a container image, in the format `projects/*/attestors/*`. Each
 attestor must exist before a policy can reference it.  To add an attestor
 to a policy the principal issuing the policy change request must be able
 to read the attestor resource.

 Note: this field must be non-empty when the evaluation_mode field specifies
 REQUIRE_ATTESTATION, otherwise it must be empty.
      repeated string require_attestations_by = 2 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getRequireAttestationsBy in interface Resources.AdmissionRuleOrBuilder
      Parameters:
      index - The index of the element to return.
      Returns:
      The requireAttestationsBy at the given index.

    • getRequireAttestationsByBytes

      public com.google.protobuf.ByteString getRequireAttestationsByBytes(int index)
       Optional. The resource names of the attestors that must attest to
 a container image, in the format `projects/*/attestors/*`. Each
 attestor must exist before a policy can reference it.  To add an attestor
 to a policy the principal issuing the policy change request must be able
 to read the attestor resource.

 Note: this field must be non-empty when the evaluation_mode field specifies
 REQUIRE_ATTESTATION, otherwise it must be empty.
      repeated string require_attestations_by = 2 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getRequireAttestationsByBytes in interface Resources.AdmissionRuleOrBuilder
      Parameters:
      index - The index of the value to return.
      Returns:
      The bytes of the requireAttestationsBy at the given index.

    • getEnforcementModeValue

      public int getEnforcementModeValue()
       Required. The action when a pod creation is denied by the admission rule.
      .google.cloud.binaryauthorization.v1.AdmissionRule.EnforcementMode enforcement_mode = 3 [(.google.api.field_behavior) = REQUIRED];
      Specified by:
      getEnforcementModeValue in interface Resources.AdmissionRuleOrBuilder
      Returns:
      The enum numeric value on the wire for enforcementMode.

    • getEnforcementMode

      public Resources.AdmissionRule.EnforcementMode getEnforcementMode()
       Required. The action when a pod creation is denied by the admission rule.
      .google.cloud.binaryauthorization.v1.AdmissionRule.EnforcementMode enforcement_mode = 3 [(.google.api.field_behavior) = REQUIRED];
      Specified by:
      getEnforcementMode in interface Resources.AdmissionRuleOrBuilder
      Returns:
      The enforcementMode.

    • isInitialized

      public final boolean isInitialized()
      Specified by:
      isInitialized in interface com.google.protobuf.MessageLiteOrBuilder
      Overrides:
      isInitialized in class com.google.protobuf.GeneratedMessage

    • writeTo

      public void writeTo(com.google.protobuf.CodedOutputStream output) throws IOException
      Specified by:
      writeTo in interface com.google.protobuf.MessageLite
      Overrides:
      writeTo in class com.google.protobuf.GeneratedMessage
      Throws:
      IOException

    • getSerializedSize

      public int getSerializedSize()
      Specified by:
      getSerializedSize in interface com.google.protobuf.MessageLite
      Overrides:
      getSerializedSize in class com.google.protobuf.GeneratedMessage

    • equals

      public boolean equals(Object obj)
      Specified by:
      equals in interface com.google.protobuf.Message
      Overrides:
      equals in class com.google.protobuf.AbstractMessage

    • hashCode

      public int hashCode()
      Specified by:
      hashCode in interface com.google.protobuf.Message
      Overrides:
      hashCode in class com.google.protobuf.AbstractMessage

    • parseFrom

      public static Resources.AdmissionRule parseFrom(ByteBuffer data) throws com.google.protobuf.InvalidProtocolBufferException
      Throws:
      com.google.protobuf.InvalidProtocolBufferException

    • parseFrom

      public static Resources.AdmissionRule parseFrom(ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws com.google.protobuf.InvalidProtocolBufferException
      Throws:
      com.google.protobuf.InvalidProtocolBufferException

    • parseFrom

      public static Resources.AdmissionRule parseFrom(com.google.protobuf.ByteString data) throws com.google.protobuf.InvalidProtocolBufferException
      Throws:
      com.google.protobuf.InvalidProtocolBufferException

    • parseFrom

      public static Resources.AdmissionRule parseFrom(com.google.protobuf.ByteString data, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws com.google.protobuf.InvalidProtocolBufferException
      Throws:
      com.google.protobuf.InvalidProtocolBufferException

    • parseFrom

      public static Resources.AdmissionRule parseFrom(byte[] data) throws com.google.protobuf.InvalidProtocolBufferException
      Throws:
      com.google.protobuf.InvalidProtocolBufferException

    • parseFrom

      public static Resources.AdmissionRule parseFrom(byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws com.google.protobuf.InvalidProtocolBufferException
      Throws:
      com.google.protobuf.InvalidProtocolBufferException

    • parseFrom

      public static Resources.AdmissionRule parseFrom(InputStream input) throws IOException
      Throws:
      IOException

    • parseFrom

      public static Resources.AdmissionRule parseFrom(InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws IOException
      Throws:
      IOException

    • parseDelimitedFrom

      public static Resources.AdmissionRule parseDelimitedFrom(InputStream input) throws IOException
      Throws:
      IOException

    • parseDelimitedFrom

      public static Resources.AdmissionRule parseDelimitedFrom(InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws IOException
      Throws:
      IOException

    • parseFrom

      public static Resources.AdmissionRule parseFrom(com.google.protobuf.CodedInputStream input) throws IOException
      Throws:
      IOException

    • parseFrom

      public static Resources.AdmissionRule parseFrom(com.google.protobuf.CodedInputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws IOException
      Throws:
      IOException

    • newBuilderForType

      public Resources.AdmissionRule.Builder newBuilderForType()
      Specified by:
      newBuilderForType in interface com.google.protobuf.Message
      Specified by:
      newBuilderForType in interface com.google.protobuf.MessageLite

    • newBuilder

      public static Resources.AdmissionRule.Builder newBuilder()

    • newBuilder

      public static Resources.AdmissionRule.Builder newBuilder(Resources.AdmissionRule prototype)

    • toBuilder

      public Resources.AdmissionRule.Builder toBuilder()
      Specified by:
      toBuilder in interface com.google.protobuf.Message
      Specified by:
      toBuilder in interface com.google.protobuf.MessageLite

    • newBuilderForType

      protected Resources.AdmissionRule.Builder newBuilderForType(com.google.protobuf.AbstractMessage.BuilderParent parent)
      Overrides:
      newBuilderForType in class com.google.protobuf.AbstractMessage

    • getDefaultInstance

      public static Resources.AdmissionRule getDefaultInstance()

    • parser

      public static com.google.protobuf.Parser<Resources.AdmissionRule> parser()

    • getParserForType

      public com.google.protobuf.Parser<Resources.AdmissionRule> getParserForType()
      Specified by:
      getParserForType in interface com.google.protobuf.Message
      Specified by:
      getParserForType in interface com.google.protobuf.MessageLite
      Overrides:
      getParserForType in class com.google.protobuf.GeneratedMessage

    • getDefaultInstanceForType

      public Resources.AdmissionRule getDefaultInstanceForType()
      Specified by:
      getDefaultInstanceForType in interface com.google.protobuf.MessageLiteOrBuilder
      Specified by:
      getDefaultInstanceForType in interface com.google.protobuf.MessageOrBuilder