public static final class Resources.AdmissionRule.Builder extends com.google.protobuf.GeneratedMessageV3.Builder<Resources.AdmissionRule.Builder> implements Resources.AdmissionRuleOrBuilder
An [admission rule][google.cloud.binaryauthorization.v1.AdmissionRule] specifies either that all container images used in a pod creation request must be attested to by one or more [attestors][google.cloud.binaryauthorization.v1.Attestor], that all pod creations will be allowed, or that all pod creations will be denied. Images matching an [admission allowlist pattern][google.cloud.binaryauthorization.v1.AdmissionWhitelistPattern] are exempted from admission rules and will never block a pod creation.Protobuf type
google.cloud.binaryauthorization.v1.AdmissionRulegetAllFields, getField, getFieldBuilder, getOneofFieldDescriptor, getParentForChildren, getRepeatedField, getRepeatedFieldBuilder, getRepeatedFieldCount, getUnknownFields, getUnknownFieldSetBuilder, hasField, hasOneof, internalGetMapField, internalGetMapFieldReflection, internalGetMutableMapField, internalGetMutableMapFieldReflection, isClean, markClean, mergeUnknownLengthDelimitedField, mergeUnknownVarintField, newBuilderForField, onBuilt, onChanged, parseUnknownField, setUnknownFieldSetBuilder, setUnknownFieldsProto3findInitializationErrors, getInitializationErrorString, internalMergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, newUninitializedMessageException, toStringaddAll, addAll, mergeDelimitedFrom, mergeDelimitedFrom, newUninitializedMessageExceptionequals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, waitpublic static final com.google.protobuf.Descriptors.Descriptor getDescriptor()
protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()
internalGetFieldAccessorTable in class com.google.protobuf.GeneratedMessageV3.Builder<Resources.AdmissionRule.Builder>public Resources.AdmissionRule.Builder clear()
clear in interface com.google.protobuf.Message.Builderclear in interface com.google.protobuf.MessageLite.Builderclear in class com.google.protobuf.GeneratedMessageV3.Builder<Resources.AdmissionRule.Builder>public com.google.protobuf.Descriptors.Descriptor getDescriptorForType()
getDescriptorForType in interface com.google.protobuf.Message.BuildergetDescriptorForType in interface com.google.protobuf.MessageOrBuildergetDescriptorForType in class com.google.protobuf.GeneratedMessageV3.Builder<Resources.AdmissionRule.Builder>public Resources.AdmissionRule getDefaultInstanceForType()
getDefaultInstanceForType in interface com.google.protobuf.MessageLiteOrBuildergetDefaultInstanceForType in interface com.google.protobuf.MessageOrBuilderpublic Resources.AdmissionRule build()
build in interface com.google.protobuf.Message.Builderbuild in interface com.google.protobuf.MessageLite.Builderpublic Resources.AdmissionRule buildPartial()
buildPartial in interface com.google.protobuf.Message.BuilderbuildPartial in interface com.google.protobuf.MessageLite.Builderpublic Resources.AdmissionRule.Builder clone()
clone in interface com.google.protobuf.Message.Builderclone in interface com.google.protobuf.MessageLite.Builderclone in class com.google.protobuf.GeneratedMessageV3.Builder<Resources.AdmissionRule.Builder>public Resources.AdmissionRule.Builder setField(com.google.protobuf.Descriptors.FieldDescriptor field, Object value)
setField in interface com.google.protobuf.Message.BuildersetField in class com.google.protobuf.GeneratedMessageV3.Builder<Resources.AdmissionRule.Builder>public Resources.AdmissionRule.Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field)
clearField in interface com.google.protobuf.Message.BuilderclearField in class com.google.protobuf.GeneratedMessageV3.Builder<Resources.AdmissionRule.Builder>public Resources.AdmissionRule.Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof)
clearOneof in interface com.google.protobuf.Message.BuilderclearOneof in class com.google.protobuf.GeneratedMessageV3.Builder<Resources.AdmissionRule.Builder>public Resources.AdmissionRule.Builder setRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field, int index, Object value)
setRepeatedField in interface com.google.protobuf.Message.BuildersetRepeatedField in class com.google.protobuf.GeneratedMessageV3.Builder<Resources.AdmissionRule.Builder>public Resources.AdmissionRule.Builder addRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field, Object value)
addRepeatedField in interface com.google.protobuf.Message.BuilderaddRepeatedField in class com.google.protobuf.GeneratedMessageV3.Builder<Resources.AdmissionRule.Builder>public Resources.AdmissionRule.Builder mergeFrom(com.google.protobuf.Message other)
mergeFrom in interface com.google.protobuf.Message.BuildermergeFrom in class com.google.protobuf.AbstractMessage.Builder<Resources.AdmissionRule.Builder>public Resources.AdmissionRule.Builder mergeFrom(Resources.AdmissionRule other)
public final boolean isInitialized()
isInitialized in interface com.google.protobuf.MessageLiteOrBuilderisInitialized in class com.google.protobuf.GeneratedMessageV3.Builder<Resources.AdmissionRule.Builder>public Resources.AdmissionRule.Builder mergeFrom(com.google.protobuf.CodedInputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws IOException
mergeFrom in interface com.google.protobuf.Message.BuildermergeFrom in interface com.google.protobuf.MessageLite.BuildermergeFrom in class com.google.protobuf.AbstractMessage.Builder<Resources.AdmissionRule.Builder>IOExceptionpublic int getEvaluationModeValue()
Required. How this admission rule will be evaluated.
.google.cloud.binaryauthorization.v1.AdmissionRule.EvaluationMode evaluation_mode = 1 [(.google.api.field_behavior) = REQUIRED];
getEvaluationModeValue in interface Resources.AdmissionRuleOrBuilderpublic Resources.AdmissionRule.Builder setEvaluationModeValue(int value)
Required. How this admission rule will be evaluated.
.google.cloud.binaryauthorization.v1.AdmissionRule.EvaluationMode evaluation_mode = 1 [(.google.api.field_behavior) = REQUIRED];
value - The enum numeric value on the wire for evaluationMode to set.public Resources.AdmissionRule.EvaluationMode getEvaluationMode()
Required. How this admission rule will be evaluated.
.google.cloud.binaryauthorization.v1.AdmissionRule.EvaluationMode evaluation_mode = 1 [(.google.api.field_behavior) = REQUIRED];
getEvaluationMode in interface Resources.AdmissionRuleOrBuilderpublic Resources.AdmissionRule.Builder setEvaluationMode(Resources.AdmissionRule.EvaluationMode value)
Required. How this admission rule will be evaluated.
.google.cloud.binaryauthorization.v1.AdmissionRule.EvaluationMode evaluation_mode = 1 [(.google.api.field_behavior) = REQUIRED];
value - The evaluationMode to set.public Resources.AdmissionRule.Builder clearEvaluationMode()
Required. How this admission rule will be evaluated.
.google.cloud.binaryauthorization.v1.AdmissionRule.EvaluationMode evaluation_mode = 1 [(.google.api.field_behavior) = REQUIRED];
public com.google.protobuf.ProtocolStringList getRequireAttestationsByList()
Optional. The resource names of the attestors that must attest to a container image, in the format `projects/*/attestors/*`. Each attestor must exist before a policy can reference it. To add an attestor to a policy the principal issuing the policy change request must be able to read the attestor resource. Note: this field must be non-empty when the evaluation_mode field specifies REQUIRE_ATTESTATION, otherwise it must be empty.
repeated string require_attestations_by = 2 [(.google.api.field_behavior) = OPTIONAL];
getRequireAttestationsByList in interface Resources.AdmissionRuleOrBuilderpublic int getRequireAttestationsByCount()
Optional. The resource names of the attestors that must attest to a container image, in the format `projects/*/attestors/*`. Each attestor must exist before a policy can reference it. To add an attestor to a policy the principal issuing the policy change request must be able to read the attestor resource. Note: this field must be non-empty when the evaluation_mode field specifies REQUIRE_ATTESTATION, otherwise it must be empty.
repeated string require_attestations_by = 2 [(.google.api.field_behavior) = OPTIONAL];
getRequireAttestationsByCount in interface Resources.AdmissionRuleOrBuilderpublic String getRequireAttestationsBy(int index)
Optional. The resource names of the attestors that must attest to a container image, in the format `projects/*/attestors/*`. Each attestor must exist before a policy can reference it. To add an attestor to a policy the principal issuing the policy change request must be able to read the attestor resource. Note: this field must be non-empty when the evaluation_mode field specifies REQUIRE_ATTESTATION, otherwise it must be empty.
repeated string require_attestations_by = 2 [(.google.api.field_behavior) = OPTIONAL];
getRequireAttestationsBy in interface Resources.AdmissionRuleOrBuilderindex - The index of the element to return.public com.google.protobuf.ByteString getRequireAttestationsByBytes(int index)
Optional. The resource names of the attestors that must attest to a container image, in the format `projects/*/attestors/*`. Each attestor must exist before a policy can reference it. To add an attestor to a policy the principal issuing the policy change request must be able to read the attestor resource. Note: this field must be non-empty when the evaluation_mode field specifies REQUIRE_ATTESTATION, otherwise it must be empty.
repeated string require_attestations_by = 2 [(.google.api.field_behavior) = OPTIONAL];
getRequireAttestationsByBytes in interface Resources.AdmissionRuleOrBuilderindex - The index of the value to return.public Resources.AdmissionRule.Builder setRequireAttestationsBy(int index, String value)
Optional. The resource names of the attestors that must attest to a container image, in the format `projects/*/attestors/*`. Each attestor must exist before a policy can reference it. To add an attestor to a policy the principal issuing the policy change request must be able to read the attestor resource. Note: this field must be non-empty when the evaluation_mode field specifies REQUIRE_ATTESTATION, otherwise it must be empty.
repeated string require_attestations_by = 2 [(.google.api.field_behavior) = OPTIONAL];
index - The index to set the value at.value - The requireAttestationsBy to set.public Resources.AdmissionRule.Builder addRequireAttestationsBy(String value)
Optional. The resource names of the attestors that must attest to a container image, in the format `projects/*/attestors/*`. Each attestor must exist before a policy can reference it. To add an attestor to a policy the principal issuing the policy change request must be able to read the attestor resource. Note: this field must be non-empty when the evaluation_mode field specifies REQUIRE_ATTESTATION, otherwise it must be empty.
repeated string require_attestations_by = 2 [(.google.api.field_behavior) = OPTIONAL];
value - The requireAttestationsBy to add.public Resources.AdmissionRule.Builder addAllRequireAttestationsBy(Iterable<String> values)
Optional. The resource names of the attestors that must attest to a container image, in the format `projects/*/attestors/*`. Each attestor must exist before a policy can reference it. To add an attestor to a policy the principal issuing the policy change request must be able to read the attestor resource. Note: this field must be non-empty when the evaluation_mode field specifies REQUIRE_ATTESTATION, otherwise it must be empty.
repeated string require_attestations_by = 2 [(.google.api.field_behavior) = OPTIONAL];
values - The requireAttestationsBy to add.public Resources.AdmissionRule.Builder clearRequireAttestationsBy()
Optional. The resource names of the attestors that must attest to a container image, in the format `projects/*/attestors/*`. Each attestor must exist before a policy can reference it. To add an attestor to a policy the principal issuing the policy change request must be able to read the attestor resource. Note: this field must be non-empty when the evaluation_mode field specifies REQUIRE_ATTESTATION, otherwise it must be empty.
repeated string require_attestations_by = 2 [(.google.api.field_behavior) = OPTIONAL];
public Resources.AdmissionRule.Builder addRequireAttestationsByBytes(com.google.protobuf.ByteString value)
Optional. The resource names of the attestors that must attest to a container image, in the format `projects/*/attestors/*`. Each attestor must exist before a policy can reference it. To add an attestor to a policy the principal issuing the policy change request must be able to read the attestor resource. Note: this field must be non-empty when the evaluation_mode field specifies REQUIRE_ATTESTATION, otherwise it must be empty.
repeated string require_attestations_by = 2 [(.google.api.field_behavior) = OPTIONAL];
value - The bytes of the requireAttestationsBy to add.public int getEnforcementModeValue()
Required. The action when a pod creation is denied by the admission rule.
.google.cloud.binaryauthorization.v1.AdmissionRule.EnforcementMode enforcement_mode = 3 [(.google.api.field_behavior) = REQUIRED];
getEnforcementModeValue in interface Resources.AdmissionRuleOrBuilderpublic Resources.AdmissionRule.Builder setEnforcementModeValue(int value)
Required. The action when a pod creation is denied by the admission rule.
.google.cloud.binaryauthorization.v1.AdmissionRule.EnforcementMode enforcement_mode = 3 [(.google.api.field_behavior) = REQUIRED];
value - The enum numeric value on the wire for enforcementMode to set.public Resources.AdmissionRule.EnforcementMode getEnforcementMode()
Required. The action when a pod creation is denied by the admission rule.
.google.cloud.binaryauthorization.v1.AdmissionRule.EnforcementMode enforcement_mode = 3 [(.google.api.field_behavior) = REQUIRED];
getEnforcementMode in interface Resources.AdmissionRuleOrBuilderpublic Resources.AdmissionRule.Builder setEnforcementMode(Resources.AdmissionRule.EnforcementMode value)
Required. The action when a pod creation is denied by the admission rule.
.google.cloud.binaryauthorization.v1.AdmissionRule.EnforcementMode enforcement_mode = 3 [(.google.api.field_behavior) = REQUIRED];
value - The enforcementMode to set.public Resources.AdmissionRule.Builder clearEnforcementMode()
Required. The action when a pod creation is denied by the admission rule.
.google.cloud.binaryauthorization.v1.AdmissionRule.EnforcementMode enforcement_mode = 3 [(.google.api.field_behavior) = REQUIRED];
public final Resources.AdmissionRule.Builder setUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields)
setUnknownFields in interface com.google.protobuf.Message.BuildersetUnknownFields in class com.google.protobuf.GeneratedMessageV3.Builder<Resources.AdmissionRule.Builder>public final Resources.AdmissionRule.Builder mergeUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields)
mergeUnknownFields in interface com.google.protobuf.Message.BuildermergeUnknownFields in class com.google.protobuf.GeneratedMessageV3.Builder<Resources.AdmissionRule.Builder>Copyright © 2023 Google LLC. All rights reserved.