Package com.google.protos.google.cloud.binaryauthorization.v1

Class Resources.Policy

java.lang.Object
com.google.protobuf.AbstractMessageLite
com.google.protobuf.AbstractMessage
com.google.protobuf.GeneratedMessage
com.google.protos.google.cloud.binaryauthorization.v1.Resources.Policy
All Implemented Interfaces:
com.google.protobuf.Message, com.google.protobuf.MessageLite, com.google.protobuf.MessageLiteOrBuilder, com.google.protobuf.MessageOrBuilder, Resources.PolicyOrBuilder, Serializable
Enclosing class:
Resources
public static final class Resources.Policy extends com.google.protobuf.GeneratedMessage implements Resources.PolicyOrBuilder
 A [policy][google.cloud.binaryauthorization.v1.Policy] for container image binary authorization.
Protobuf type google.cloud.binaryauthorization.v1.Policy
See Also:

  • Field Details

    • NAME_FIELD_NUMBER

      public static final int NAME_FIELD_NUMBER
      See Also:

    • DESCRIPTION_FIELD_NUMBER

      public static final int DESCRIPTION_FIELD_NUMBER
      See Also:

    • GLOBAL_POLICY_EVALUATION_MODE_FIELD_NUMBER

      public static final int GLOBAL_POLICY_EVALUATION_MODE_FIELD_NUMBER
      See Also:

    • ADMISSION_WHITELIST_PATTERNS_FIELD_NUMBER

      public static final int ADMISSION_WHITELIST_PATTERNS_FIELD_NUMBER
      See Also:

    • CLUSTER_ADMISSION_RULES_FIELD_NUMBER

      public static final int CLUSTER_ADMISSION_RULES_FIELD_NUMBER
      See Also:

    • KUBERNETES_NAMESPACE_ADMISSION_RULES_FIELD_NUMBER

      public static final int KUBERNETES_NAMESPACE_ADMISSION_RULES_FIELD_NUMBER
      See Also:

    • KUBERNETES_SERVICE_ACCOUNT_ADMISSION_RULES_FIELD_NUMBER

      public static final int KUBERNETES_SERVICE_ACCOUNT_ADMISSION_RULES_FIELD_NUMBER
      See Also:

    • ISTIO_SERVICE_IDENTITY_ADMISSION_RULES_FIELD_NUMBER

      public static final int ISTIO_SERVICE_IDENTITY_ADMISSION_RULES_FIELD_NUMBER
      See Also:

    • DEFAULT_ADMISSION_RULE_FIELD_NUMBER

      public static final int DEFAULT_ADMISSION_RULE_FIELD_NUMBER
      See Also:

    • UPDATE_TIME_FIELD_NUMBER

      public static final int UPDATE_TIME_FIELD_NUMBER
      See Also:

  • Method Details

    • getDescriptor

      public static final com.google.protobuf.Descriptors.Descriptor getDescriptor()

    • internalGetMapFieldReflection

      protected com.google.protobuf.MapFieldReflectionAccessor internalGetMapFieldReflection(int number)
      Overrides:
      internalGetMapFieldReflection in class com.google.protobuf.GeneratedMessage

    • internalGetFieldAccessorTable

      protected com.google.protobuf.GeneratedMessage.FieldAccessorTable internalGetFieldAccessorTable()
      Specified by:
      internalGetFieldAccessorTable in class com.google.protobuf.GeneratedMessage

    • getName

      public String getName()
       Output only. The resource name, in the format `projects/*/policy`. There is
 at most one policy per project.
      string name = 1 [(.google.api.field_behavior) = OUTPUT_ONLY];
      Specified by:
      getName in interface Resources.PolicyOrBuilder
      Returns:
      The name.

    • getNameBytes

      public com.google.protobuf.ByteString getNameBytes()
       Output only. The resource name, in the format `projects/*/policy`. There is
 at most one policy per project.
      string name = 1 [(.google.api.field_behavior) = OUTPUT_ONLY];
      Specified by:
      getNameBytes in interface Resources.PolicyOrBuilder
      Returns:
      The bytes for name.

    • getDescription

      public String getDescription()
       Optional. A descriptive comment.
      string description = 6 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getDescription in interface Resources.PolicyOrBuilder
      Returns:
      The description.

    • getDescriptionBytes

      public com.google.protobuf.ByteString getDescriptionBytes()
       Optional. A descriptive comment.
      string description = 6 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getDescriptionBytes in interface Resources.PolicyOrBuilder
      Returns:
      The bytes for description.

    • getGlobalPolicyEvaluationModeValue

      public int getGlobalPolicyEvaluationModeValue()
       Optional. Controls the evaluation of a Google-maintained global admission
 policy for common system-level images. Images not covered by the global
 policy will be subject to the project admission policy. This setting
 has no effect when specified inside a global admission policy.
      .google.cloud.binaryauthorization.v1.Policy.GlobalPolicyEvaluationMode global_policy_evaluation_mode = 7 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getGlobalPolicyEvaluationModeValue in interface Resources.PolicyOrBuilder
      Returns:
      The enum numeric value on the wire for globalPolicyEvaluationMode.

    • getGlobalPolicyEvaluationMode

      public Resources.Policy.GlobalPolicyEvaluationMode getGlobalPolicyEvaluationMode()
       Optional. Controls the evaluation of a Google-maintained global admission
 policy for common system-level images. Images not covered by the global
 policy will be subject to the project admission policy. This setting
 has no effect when specified inside a global admission policy.
      .google.cloud.binaryauthorization.v1.Policy.GlobalPolicyEvaluationMode global_policy_evaluation_mode = 7 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getGlobalPolicyEvaluationMode in interface Resources.PolicyOrBuilder
      Returns:
      The globalPolicyEvaluationMode.

    • getAdmissionWhitelistPatternsList

      public List<Resources.AdmissionWhitelistPattern> getAdmissionWhitelistPatternsList()
       Optional. Admission policy allowlisting. A matching admission request will
 always be permitted. This feature is typically used to exclude Google or
 third-party infrastructure images from Binary Authorization policies.
      repeated .google.cloud.binaryauthorization.v1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getAdmissionWhitelistPatternsList in interface Resources.PolicyOrBuilder

    • getAdmissionWhitelistPatternsOrBuilderList

      public List<? extends Resources.AdmissionWhitelistPatternOrBuilder> getAdmissionWhitelistPatternsOrBuilderList()
       Optional. Admission policy allowlisting. A matching admission request will
 always be permitted. This feature is typically used to exclude Google or
 third-party infrastructure images from Binary Authorization policies.
      repeated .google.cloud.binaryauthorization.v1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getAdmissionWhitelistPatternsOrBuilderList in interface Resources.PolicyOrBuilder

    • getAdmissionWhitelistPatternsCount

      public int getAdmissionWhitelistPatternsCount()
       Optional. Admission policy allowlisting. A matching admission request will
 always be permitted. This feature is typically used to exclude Google or
 third-party infrastructure images from Binary Authorization policies.
      repeated .google.cloud.binaryauthorization.v1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getAdmissionWhitelistPatternsCount in interface Resources.PolicyOrBuilder

    • getAdmissionWhitelistPatterns

      public Resources.AdmissionWhitelistPattern getAdmissionWhitelistPatterns(int index)
       Optional. Admission policy allowlisting. A matching admission request will
 always be permitted. This feature is typically used to exclude Google or
 third-party infrastructure images from Binary Authorization policies.
      repeated .google.cloud.binaryauthorization.v1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getAdmissionWhitelistPatterns in interface Resources.PolicyOrBuilder

    • getAdmissionWhitelistPatternsOrBuilder

      public Resources.AdmissionWhitelistPatternOrBuilder getAdmissionWhitelistPatternsOrBuilder(int index)
       Optional. Admission policy allowlisting. A matching admission request will
 always be permitted. This feature is typically used to exclude Google or
 third-party infrastructure images from Binary Authorization policies.
      repeated .google.cloud.binaryauthorization.v1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getAdmissionWhitelistPatternsOrBuilder in interface Resources.PolicyOrBuilder

    • getClusterAdmissionRulesCount

      public int getClusterAdmissionRulesCount()
      Description copied from interface: Resources.PolicyOrBuilder
       Optional. Per-cluster admission rules. Cluster spec format:
 `location.clusterId`. There can be at most one admission rule per cluster
 spec.
 A `location` is either a compute zone (e.g. us-central1-a) or a region
 (e.g. us-central1).
 For `clusterId` syntax restrictions see
 https://cloud.google.com/container-engine/reference/rest/v1/projects.zones.clusters.
      map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> cluster_admission_rules = 3 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getClusterAdmissionRulesCount in interface Resources.PolicyOrBuilder

    • containsClusterAdmissionRules

      public boolean containsClusterAdmissionRules(String key)
       Optional. Per-cluster admission rules. Cluster spec format:
 `location.clusterId`. There can be at most one admission rule per cluster
 spec.
 A `location` is either a compute zone (e.g. us-central1-a) or a region
 (e.g. us-central1).
 For `clusterId` syntax restrictions see
 https://cloud.google.com/container-engine/reference/rest/v1/projects.zones.clusters.
      map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> cluster_admission_rules = 3 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      containsClusterAdmissionRules in interface Resources.PolicyOrBuilder

    • getClusterAdmissionRules

      @Deprecated public Map<String,Resources.AdmissionRule> getClusterAdmissionRules()
      Deprecated.
      Use getClusterAdmissionRulesMap() instead.
      Specified by:
      getClusterAdmissionRules in interface Resources.PolicyOrBuilder

    • getClusterAdmissionRulesMap

      public Map<String,Resources.AdmissionRule> getClusterAdmissionRulesMap()
       Optional. Per-cluster admission rules. Cluster spec format:
 `location.clusterId`. There can be at most one admission rule per cluster
 spec.
 A `location` is either a compute zone (e.g. us-central1-a) or a region
 (e.g. us-central1).
 For `clusterId` syntax restrictions see
 https://cloud.google.com/container-engine/reference/rest/v1/projects.zones.clusters.
      map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> cluster_admission_rules = 3 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getClusterAdmissionRulesMap in interface Resources.PolicyOrBuilder

    • getClusterAdmissionRulesOrDefault

      public Resources.AdmissionRule getClusterAdmissionRulesOrDefault(String key, Resources.AdmissionRule defaultValue)
       Optional. Per-cluster admission rules. Cluster spec format:
 `location.clusterId`. There can be at most one admission rule per cluster
 spec.
 A `location` is either a compute zone (e.g. us-central1-a) or a region
 (e.g. us-central1).
 For `clusterId` syntax restrictions see
 https://cloud.google.com/container-engine/reference/rest/v1/projects.zones.clusters.
      map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> cluster_admission_rules = 3 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getClusterAdmissionRulesOrDefault in interface Resources.PolicyOrBuilder

    • getClusterAdmissionRulesOrThrow

      public Resources.AdmissionRule getClusterAdmissionRulesOrThrow(String key)
       Optional. Per-cluster admission rules. Cluster spec format:
 `location.clusterId`. There can be at most one admission rule per cluster
 spec.
 A `location` is either a compute zone (e.g. us-central1-a) or a region
 (e.g. us-central1).
 For `clusterId` syntax restrictions see
 https://cloud.google.com/container-engine/reference/rest/v1/projects.zones.clusters.
      map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> cluster_admission_rules = 3 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getClusterAdmissionRulesOrThrow in interface Resources.PolicyOrBuilder

    • getKubernetesNamespaceAdmissionRulesCount

      public int getKubernetesNamespaceAdmissionRulesCount()
      Description copied from interface: Resources.PolicyOrBuilder
       Optional. Per-kubernetes-namespace admission rules. K8s namespace spec format:
 [a-z.-]+, e.g. 'some-namespace'
      map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> kubernetes_namespace_admission_rules = 10 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getKubernetesNamespaceAdmissionRulesCount in interface Resources.PolicyOrBuilder

    • containsKubernetesNamespaceAdmissionRules

      public boolean containsKubernetesNamespaceAdmissionRules(String key)
       Optional. Per-kubernetes-namespace admission rules. K8s namespace spec format:
 [a-z.-]+, e.g. 'some-namespace'
      map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> kubernetes_namespace_admission_rules = 10 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      containsKubernetesNamespaceAdmissionRules in interface Resources.PolicyOrBuilder

    • getKubernetesNamespaceAdmissionRules

      @Deprecated public Map<String,Resources.AdmissionRule> getKubernetesNamespaceAdmissionRules()
      Deprecated.
      Use getKubernetesNamespaceAdmissionRulesMap() instead.
      Specified by:
      getKubernetesNamespaceAdmissionRules in interface Resources.PolicyOrBuilder

    • getKubernetesNamespaceAdmissionRulesMap

      public Map<String,Resources.AdmissionRule> getKubernetesNamespaceAdmissionRulesMap()
       Optional. Per-kubernetes-namespace admission rules. K8s namespace spec format:
 [a-z.-]+, e.g. 'some-namespace'
      map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> kubernetes_namespace_admission_rules = 10 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getKubernetesNamespaceAdmissionRulesMap in interface Resources.PolicyOrBuilder

    • getKubernetesNamespaceAdmissionRulesOrDefault

      public Resources.AdmissionRule getKubernetesNamespaceAdmissionRulesOrDefault(String key, Resources.AdmissionRule defaultValue)
       Optional. Per-kubernetes-namespace admission rules. K8s namespace spec format:
 [a-z.-]+, e.g. 'some-namespace'
      map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> kubernetes_namespace_admission_rules = 10 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getKubernetesNamespaceAdmissionRulesOrDefault in interface Resources.PolicyOrBuilder

    • getKubernetesNamespaceAdmissionRulesOrThrow

      public Resources.AdmissionRule getKubernetesNamespaceAdmissionRulesOrThrow(String key)
       Optional. Per-kubernetes-namespace admission rules. K8s namespace spec format:
 [a-z.-]+, e.g. 'some-namespace'
      map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> kubernetes_namespace_admission_rules = 10 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getKubernetesNamespaceAdmissionRulesOrThrow in interface Resources.PolicyOrBuilder

    • getKubernetesServiceAccountAdmissionRulesCount

      public int getKubernetesServiceAccountAdmissionRulesCount()
      Description copied from interface: Resources.PolicyOrBuilder
       Optional. Per-kubernetes-service-account admission rules. Service account
 spec format: `namespace:serviceaccount`. e.g. 'test-ns:default'
      map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> kubernetes_service_account_admission_rules = 8 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getKubernetesServiceAccountAdmissionRulesCount in interface Resources.PolicyOrBuilder

    • containsKubernetesServiceAccountAdmissionRules

      public boolean containsKubernetesServiceAccountAdmissionRules(String key)
       Optional. Per-kubernetes-service-account admission rules. Service account
 spec format: `namespace:serviceaccount`. e.g. 'test-ns:default'
      map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> kubernetes_service_account_admission_rules = 8 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      containsKubernetesServiceAccountAdmissionRules in interface Resources.PolicyOrBuilder

    • getKubernetesServiceAccountAdmissionRules

      @Deprecated public Map<String,Resources.AdmissionRule> getKubernetesServiceAccountAdmissionRules()
      Deprecated.
      Use getKubernetesServiceAccountAdmissionRulesMap() instead.
      Specified by:
      getKubernetesServiceAccountAdmissionRules in interface Resources.PolicyOrBuilder

    • getKubernetesServiceAccountAdmissionRulesMap

      public Map<String,Resources.AdmissionRule> getKubernetesServiceAccountAdmissionRulesMap()
       Optional. Per-kubernetes-service-account admission rules. Service account
 spec format: `namespace:serviceaccount`. e.g. 'test-ns:default'
      map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> kubernetes_service_account_admission_rules = 8 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getKubernetesServiceAccountAdmissionRulesMap in interface Resources.PolicyOrBuilder

    • getKubernetesServiceAccountAdmissionRulesOrDefault

      public Resources.AdmissionRule getKubernetesServiceAccountAdmissionRulesOrDefault(String key, Resources.AdmissionRule defaultValue)
       Optional. Per-kubernetes-service-account admission rules. Service account
 spec format: `namespace:serviceaccount`. e.g. 'test-ns:default'
      map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> kubernetes_service_account_admission_rules = 8 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getKubernetesServiceAccountAdmissionRulesOrDefault in interface Resources.PolicyOrBuilder

    • getKubernetesServiceAccountAdmissionRulesOrThrow

      public Resources.AdmissionRule getKubernetesServiceAccountAdmissionRulesOrThrow(String key)
       Optional. Per-kubernetes-service-account admission rules. Service account
 spec format: `namespace:serviceaccount`. e.g. 'test-ns:default'
      map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> kubernetes_service_account_admission_rules = 8 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getKubernetesServiceAccountAdmissionRulesOrThrow in interface Resources.PolicyOrBuilder

    • getIstioServiceIdentityAdmissionRulesCount

      public int getIstioServiceIdentityAdmissionRulesCount()
      Description copied from interface: Resources.PolicyOrBuilder
       Optional. Per-istio-service-identity admission rules. Istio service
 identity spec format:
 spiffe://<domain>/ns/<namespace>/sa/<serviceaccount> or
 <domain>/ns/<namespace>/sa/<serviceaccount>
 e.g. spiffe://example.com/ns/test-ns/sa/default
      map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> istio_service_identity_admission_rules = 9 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getIstioServiceIdentityAdmissionRulesCount in interface Resources.PolicyOrBuilder

    • containsIstioServiceIdentityAdmissionRules

      public boolean containsIstioServiceIdentityAdmissionRules(String key)
       Optional. Per-istio-service-identity admission rules. Istio service
 identity spec format:
 spiffe://<domain>/ns/<namespace>/sa/<serviceaccount> or
 <domain>/ns/<namespace>/sa/<serviceaccount>
 e.g. spiffe://example.com/ns/test-ns/sa/default
      map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> istio_service_identity_admission_rules = 9 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      containsIstioServiceIdentityAdmissionRules in interface Resources.PolicyOrBuilder

    • getIstioServiceIdentityAdmissionRules

      @Deprecated public Map<String,Resources.AdmissionRule> getIstioServiceIdentityAdmissionRules()
      Deprecated.
      Use getIstioServiceIdentityAdmissionRulesMap() instead.
      Specified by:
      getIstioServiceIdentityAdmissionRules in interface Resources.PolicyOrBuilder

    • getIstioServiceIdentityAdmissionRulesMap

      public Map<String,Resources.AdmissionRule> getIstioServiceIdentityAdmissionRulesMap()
       Optional. Per-istio-service-identity admission rules. Istio service
 identity spec format:
 spiffe://<domain>/ns/<namespace>/sa/<serviceaccount> or
 <domain>/ns/<namespace>/sa/<serviceaccount>
 e.g. spiffe://example.com/ns/test-ns/sa/default
      map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> istio_service_identity_admission_rules = 9 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getIstioServiceIdentityAdmissionRulesMap in interface Resources.PolicyOrBuilder

    • getIstioServiceIdentityAdmissionRulesOrDefault

      public Resources.AdmissionRule getIstioServiceIdentityAdmissionRulesOrDefault(String key, Resources.AdmissionRule defaultValue)
       Optional. Per-istio-service-identity admission rules. Istio service
 identity spec format:
 spiffe://<domain>/ns/<namespace>/sa/<serviceaccount> or
 <domain>/ns/<namespace>/sa/<serviceaccount>
 e.g. spiffe://example.com/ns/test-ns/sa/default
      map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> istio_service_identity_admission_rules = 9 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getIstioServiceIdentityAdmissionRulesOrDefault in interface Resources.PolicyOrBuilder

    • getIstioServiceIdentityAdmissionRulesOrThrow

      public Resources.AdmissionRule getIstioServiceIdentityAdmissionRulesOrThrow(String key)
       Optional. Per-istio-service-identity admission rules. Istio service
 identity spec format:
 spiffe://<domain>/ns/<namespace>/sa/<serviceaccount> or
 <domain>/ns/<namespace>/sa/<serviceaccount>
 e.g. spiffe://example.com/ns/test-ns/sa/default
      map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> istio_service_identity_admission_rules = 9 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getIstioServiceIdentityAdmissionRulesOrThrow in interface Resources.PolicyOrBuilder

    • hasDefaultAdmissionRule

      public boolean hasDefaultAdmissionRule()
       Required. Default admission rule for a cluster without a per-cluster, per-
 kubernetes-service-account, or per-istio-service-identity admission rule.
      .google.cloud.binaryauthorization.v1.AdmissionRule default_admission_rule = 4 [(.google.api.field_behavior) = REQUIRED];
      Specified by:
      hasDefaultAdmissionRule in interface Resources.PolicyOrBuilder
      Returns:
      Whether the defaultAdmissionRule field is set.

    • getDefaultAdmissionRule

      public Resources.AdmissionRule getDefaultAdmissionRule()
       Required. Default admission rule for a cluster without a per-cluster, per-
 kubernetes-service-account, or per-istio-service-identity admission rule.
      .google.cloud.binaryauthorization.v1.AdmissionRule default_admission_rule = 4 [(.google.api.field_behavior) = REQUIRED];
      Specified by:
      getDefaultAdmissionRule in interface Resources.PolicyOrBuilder
      Returns:
      The defaultAdmissionRule.

    • getDefaultAdmissionRuleOrBuilder

      public Resources.AdmissionRuleOrBuilder getDefaultAdmissionRuleOrBuilder()
       Required. Default admission rule for a cluster without a per-cluster, per-
 kubernetes-service-account, or per-istio-service-identity admission rule.
      .google.cloud.binaryauthorization.v1.AdmissionRule default_admission_rule = 4 [(.google.api.field_behavior) = REQUIRED];
      Specified by:
      getDefaultAdmissionRuleOrBuilder in interface Resources.PolicyOrBuilder

    • hasUpdateTime

      public boolean hasUpdateTime()
       Output only. Time when the policy was last updated.
      .google.protobuf.Timestamp update_time = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];
      Specified by:
      hasUpdateTime in interface Resources.PolicyOrBuilder
      Returns:
      Whether the updateTime field is set.

    • getUpdateTime

      public com.google.protobuf.Timestamp getUpdateTime()
       Output only. Time when the policy was last updated.
      .google.protobuf.Timestamp update_time = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];
      Specified by:
      getUpdateTime in interface Resources.PolicyOrBuilder
      Returns:
      The updateTime.

    • getUpdateTimeOrBuilder

      public com.google.protobuf.TimestampOrBuilder getUpdateTimeOrBuilder()
       Output only. Time when the policy was last updated.
      .google.protobuf.Timestamp update_time = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];
      Specified by:
      getUpdateTimeOrBuilder in interface Resources.PolicyOrBuilder

    • isInitialized

      public final boolean isInitialized()
      Specified by:
      isInitialized in interface com.google.protobuf.MessageLiteOrBuilder
      Overrides:
      isInitialized in class com.google.protobuf.GeneratedMessage

    • writeTo

      public void writeTo(com.google.protobuf.CodedOutputStream output) throws IOException
      Specified by:
      writeTo in interface com.google.protobuf.MessageLite
      Overrides:
      writeTo in class com.google.protobuf.GeneratedMessage
      Throws:
      IOException

    • getSerializedSize

      public int getSerializedSize()
      Specified by:
      getSerializedSize in interface com.google.protobuf.MessageLite
      Overrides:
      getSerializedSize in class com.google.protobuf.GeneratedMessage

    • equals

      public boolean equals(Object obj)
      Specified by:
      equals in interface com.google.protobuf.Message
      Overrides:
      equals in class com.google.protobuf.AbstractMessage

    • hashCode

      public int hashCode()
      Specified by:
      hashCode in interface com.google.protobuf.Message
      Overrides:
      hashCode in class com.google.protobuf.AbstractMessage

    • parseFrom

      public static Resources.Policy parseFrom(ByteBuffer data) throws com.google.protobuf.InvalidProtocolBufferException
      Throws:
      com.google.protobuf.InvalidProtocolBufferException

    • parseFrom

      public static Resources.Policy parseFrom(ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws com.google.protobuf.InvalidProtocolBufferException
      Throws:
      com.google.protobuf.InvalidProtocolBufferException

    • parseFrom

      public static Resources.Policy parseFrom(com.google.protobuf.ByteString data) throws com.google.protobuf.InvalidProtocolBufferException
      Throws:
      com.google.protobuf.InvalidProtocolBufferException

    • parseFrom

      public static Resources.Policy parseFrom(com.google.protobuf.ByteString data, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws com.google.protobuf.InvalidProtocolBufferException
      Throws:
      com.google.protobuf.InvalidProtocolBufferException

    • parseFrom

      public static Resources.Policy parseFrom(byte[] data) throws com.google.protobuf.InvalidProtocolBufferException
      Throws:
      com.google.protobuf.InvalidProtocolBufferException

    • parseFrom

      public static Resources.Policy parseFrom(byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws com.google.protobuf.InvalidProtocolBufferException
      Throws:
      com.google.protobuf.InvalidProtocolBufferException

    • parseFrom

      public static Resources.Policy parseFrom(InputStream input) throws IOException
      Throws:
      IOException

    • parseFrom

      public static Resources.Policy parseFrom(InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws IOException
      Throws:
      IOException

    • parseDelimitedFrom

      public static Resources.Policy parseDelimitedFrom(InputStream input) throws IOException
      Throws:
      IOException

    • parseDelimitedFrom

      public static Resources.Policy parseDelimitedFrom(InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws IOException
      Throws:
      IOException

    • parseFrom

      public static Resources.Policy parseFrom(com.google.protobuf.CodedInputStream input) throws IOException
      Throws:
      IOException

    • parseFrom

      public static Resources.Policy parseFrom(com.google.protobuf.CodedInputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws IOException
      Throws:
      IOException

    • newBuilderForType

      public Resources.Policy.Builder newBuilderForType()
      Specified by:
      newBuilderForType in interface com.google.protobuf.Message
      Specified by:
      newBuilderForType in interface com.google.protobuf.MessageLite

    • newBuilder

      public static Resources.Policy.Builder newBuilder()

    • newBuilder

      public static Resources.Policy.Builder newBuilder(Resources.Policy prototype)

    • toBuilder

      public Resources.Policy.Builder toBuilder()
      Specified by:
      toBuilder in interface com.google.protobuf.Message
      Specified by:
      toBuilder in interface com.google.protobuf.MessageLite

    • newBuilderForType

      protected Resources.Policy.Builder newBuilderForType(com.google.protobuf.AbstractMessage.BuilderParent parent)
      Overrides:
      newBuilderForType in class com.google.protobuf.AbstractMessage

    • getDefaultInstance

      public static Resources.Policy getDefaultInstance()

    • parser

      public static com.google.protobuf.Parser<Resources.Policy> parser()

    • getParserForType

      public com.google.protobuf.Parser<Resources.Policy> getParserForType()
      Specified by:
      getParserForType in interface com.google.protobuf.Message
      Specified by:
      getParserForType in interface com.google.protobuf.MessageLite
      Overrides:
      getParserForType in class com.google.protobuf.GeneratedMessage

    • getDefaultInstanceForType

      public Resources.Policy getDefaultInstanceForType()
      Specified by:
      getDefaultInstanceForType in interface com.google.protobuf.MessageLiteOrBuilder
      Specified by:
      getDefaultInstanceForType in interface com.google.protobuf.MessageOrBuilder