com.google.protos.google.cloud.binaryauthorization.v1

Class Resources.Policy

java.lang.Object

com.google.protobuf.AbstractMessageLite

com.google.protobuf.AbstractMessage

com.google.protobuf.GeneratedMessageV3

com.google.protos.google.cloud.binaryauthorization.v1.Resources.Policy

All Implemented Interfaces:

com.google.protobuf.Message, com.google.protobuf.MessageLite, com.google.protobuf.MessageLiteOrBuilder, com.google.protobuf.MessageOrBuilder, Resources.PolicyOrBuilder, Serializable

Enclosing class:

Resources

public static final class Resources.Policy
extends com.google.protobuf.GeneratedMessageV3
implements Resources.PolicyOrBuilder

 A [policy][google.cloud.binaryauthorization.v1.Policy] for container image binary authorization.
 

Protobuf type google.cloud.binaryauthorization.v1.Policy

See Also:

Serialized Form

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	Resources.Policy.Builder A [policy][google.cloud.binaryauthorization.v1.Policy] for container image binary authorization.
static class	Resources.Policy.GlobalPolicyEvaluationMode Protobuf enum google.cloud.binaryauthorization.v1.Policy.GlobalPolicyEvaluationMode

Nested classes/interfaces inherited from class com.google.protobuf.GeneratedMessageV3

com.google.protobuf.GeneratedMessageV3.BuilderParent, com.google.protobuf.GeneratedMessageV3.ExtendableBuilder<MessageT extends com.google.protobuf.GeneratedMessageV3.ExtendableMessage<MessageT>,BuilderT extends com.google.protobuf.GeneratedMessageV3.ExtendableBuilder<MessageT,BuilderT>>, com.google.protobuf.GeneratedMessageV3.ExtendableMessage<MessageT extends com.google.protobuf.GeneratedMessageV3.ExtendableMessage<MessageT>>, com.google.protobuf.GeneratedMessageV3.ExtendableMessageOrBuilder<MessageT extends com.google.protobuf.GeneratedMessageV3.ExtendableMessage<MessageT>>, com.google.protobuf.GeneratedMessageV3.FieldAccessorTable, com.google.protobuf.GeneratedMessageV3.UnusedPrivateParameter

Nested classes/interfaces inherited from class com.google.protobuf.AbstractMessageLite

com.google.protobuf.AbstractMessageLite.InternalOneOfEnum

Field Summary

Fields

Modifier and Type	Field and Description
static int	ADMISSION_WHITELIST_PATTERNS_FIELD_NUMBER
static int	CLUSTER_ADMISSION_RULES_FIELD_NUMBER
static int	DEFAULT_ADMISSION_RULE_FIELD_NUMBER
static int	DESCRIPTION_FIELD_NUMBER
static int	GLOBAL_POLICY_EVALUATION_MODE_FIELD_NUMBER
static int	ISTIO_SERVICE_IDENTITY_ADMISSION_RULES_FIELD_NUMBER
static int	KUBERNETES_NAMESPACE_ADMISSION_RULES_FIELD_NUMBER
static int	KUBERNETES_SERVICE_ACCOUNT_ADMISSION_RULES_FIELD_NUMBER
static int	NAME_FIELD_NUMBER
static int	UPDATE_TIME_FIELD_NUMBER

Fields inherited from class com.google.protobuf.GeneratedMessageV3

alwaysUseFieldBuilders, unknownFields

Fields inherited from class com.google.protobuf.AbstractMessage

memoizedSize

Fields inherited from class com.google.protobuf.AbstractMessageLite

memoizedHashCode

Method Summary

Modifier and Type	Method and Description
boolean	containsClusterAdmissionRules(String key) Optional.
boolean	containsIstioServiceIdentityAdmissionRules(String key) Optional.
boolean	containsKubernetesNamespaceAdmissionRules(String key) Optional.
boolean	containsKubernetesServiceAccountAdmissionRules(String key) Optional.
boolean	equals(Object obj)
Resources.AdmissionWhitelistPattern	getAdmissionWhitelistPatterns(int index) Optional.
int	getAdmissionWhitelistPatternsCount() Optional.
List<Resources.AdmissionWhitelistPattern>	getAdmissionWhitelistPatternsList() Optional.
Resources.AdmissionWhitelistPatternOrBuilder	getAdmissionWhitelistPatternsOrBuilder(int index) Optional.
List<? extends Resources.AdmissionWhitelistPatternOrBuilder>	getAdmissionWhitelistPatternsOrBuilderList() Optional.
Map<String,Resources.AdmissionRule>	getClusterAdmissionRules() Deprecated.
int	getClusterAdmissionRulesCount() Optional.
Map<String,Resources.AdmissionRule>	getClusterAdmissionRulesMap() Optional.
Resources.AdmissionRule	getClusterAdmissionRulesOrDefault(String key, Resources.AdmissionRule defaultValue) Optional.
Resources.AdmissionRule	getClusterAdmissionRulesOrThrow(String key) Optional.
Resources.AdmissionRule	getDefaultAdmissionRule() Required.
Resources.AdmissionRuleOrBuilder	getDefaultAdmissionRuleOrBuilder() Required.
static Resources.Policy	getDefaultInstance()
Resources.Policy	getDefaultInstanceForType()
String	getDescription() Optional.
com.google.protobuf.ByteString	getDescriptionBytes() Optional.
static com.google.protobuf.Descriptors.Descriptor	getDescriptor()
Resources.Policy.GlobalPolicyEvaluationMode	getGlobalPolicyEvaluationMode() Optional.
int	getGlobalPolicyEvaluationModeValue() Optional.
Map<String,Resources.AdmissionRule>	getIstioServiceIdentityAdmissionRules() Deprecated.
int	getIstioServiceIdentityAdmissionRulesCount() Optional.
Map<String,Resources.AdmissionRule>	getIstioServiceIdentityAdmissionRulesMap() Optional.
Resources.AdmissionRule	getIstioServiceIdentityAdmissionRulesOrDefault(String key, Resources.AdmissionRule defaultValue) Optional.
Resources.AdmissionRule	getIstioServiceIdentityAdmissionRulesOrThrow(String key) Optional.
Map<String,Resources.AdmissionRule>	getKubernetesNamespaceAdmissionRules() Deprecated.
int	getKubernetesNamespaceAdmissionRulesCount() Optional.
Map<String,Resources.AdmissionRule>	getKubernetesNamespaceAdmissionRulesMap() Optional.
Resources.AdmissionRule	getKubernetesNamespaceAdmissionRulesOrDefault(String key, Resources.AdmissionRule defaultValue) Optional.
Resources.AdmissionRule	getKubernetesNamespaceAdmissionRulesOrThrow(String key) Optional.
Map<String,Resources.AdmissionRule>	getKubernetesServiceAccountAdmissionRules() Deprecated.
int	getKubernetesServiceAccountAdmissionRulesCount() Optional.
Map<String,Resources.AdmissionRule>	getKubernetesServiceAccountAdmissionRulesMap() Optional.
Resources.AdmissionRule	getKubernetesServiceAccountAdmissionRulesOrDefault(String key, Resources.AdmissionRule defaultValue) Optional.
Resources.AdmissionRule	getKubernetesServiceAccountAdmissionRulesOrThrow(String key) Optional.
String	getName() Output only.
com.google.protobuf.ByteString	getNameBytes() Output only.
com.google.protobuf.Parser<Resources.Policy>	getParserForType()
int	getSerializedSize()
com.google.protobuf.Timestamp	getUpdateTime() Output only.
com.google.protobuf.TimestampOrBuilder	getUpdateTimeOrBuilder() Output only.
boolean	hasDefaultAdmissionRule() Required.
int	hashCode()
boolean	hasUpdateTime() Output only.
protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable	internalGetFieldAccessorTable()
protected com.google.protobuf.MapFieldReflectionAccessor	internalGetMapFieldReflection(int number)
boolean	isInitialized()
static Resources.Policy.Builder	newBuilder()
static Resources.Policy.Builder	newBuilder(Resources.Policy prototype)
Resources.Policy.Builder	newBuilderForType()
protected Resources.Policy.Builder	newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent)
protected Object	newInstance(com.google.protobuf.GeneratedMessageV3.UnusedPrivateParameter unused)
static Resources.Policy	parseDelimitedFrom(InputStream input)
static Resources.Policy	parseDelimitedFrom(InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
static Resources.Policy	parseFrom(byte[] data)
static Resources.Policy	parseFrom(byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
static Resources.Policy	parseFrom(ByteBuffer data)
static Resources.Policy	parseFrom(ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
static Resources.Policy	parseFrom(com.google.protobuf.ByteString data)
static Resources.Policy	parseFrom(com.google.protobuf.ByteString data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
static Resources.Policy	parseFrom(com.google.protobuf.CodedInputStream input)
static Resources.Policy	parseFrom(com.google.protobuf.CodedInputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
static Resources.Policy	parseFrom(InputStream input)
static Resources.Policy	parseFrom(InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
static com.google.protobuf.Parser<Resources.Policy>	parser()
Resources.Policy.Builder	toBuilder()
void	writeTo(com.google.protobuf.CodedOutputStream output)

Methods inherited from class com.google.protobuf.GeneratedMessageV3

canUseUnsafe, computeStringSize, computeStringSizeNoTag, emptyBooleanList, emptyDoubleList, emptyFloatList, emptyIntList, emptyList, emptyLongList, getAllFields, getDescriptorForType, getField, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, getUnknownFields, hasField, hasOneof, internalGetMapField, isStringEmpty, makeExtensionsImmutable, makeMutableCopy, makeMutableCopy, mergeFromAndMakeImmutableInternal, mutableCopy, mutableCopy, mutableCopy, mutableCopy, mutableCopy, newBooleanList, newBuilderForType, newDoubleList, newFloatList, newIntList, newLongList, parseDelimitedWithIOException, parseDelimitedWithIOException, parseUnknownField, parseUnknownFieldProto3, parseWithIOException, parseWithIOException, parseWithIOException, parseWithIOException, serializeBooleanMapTo, serializeIntegerMapTo, serializeLongMapTo, serializeStringMapTo, writeReplace, writeString, writeStringNoTag

Methods inherited from class com.google.protobuf.AbstractMessage

findInitializationErrors, getInitializationErrorString, hashBoolean, hashEnum, hashEnumList, hashFields, hashLong, toString

Methods inherited from class com.google.protobuf.AbstractMessageLite

addAll, addAll, checkByteStringIsUtf8, toByteArray, toByteString, writeDelimitedTo, writeTo

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, wait, wait, wait

Methods inherited from interface com.google.protobuf.MessageOrBuilder

findInitializationErrors, getAllFields, getDescriptorForType, getField, getInitializationErrorString, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, getUnknownFields, hasField, hasOneof

Methods inherited from interface com.google.protobuf.MessageLite

toByteArray, toByteString, writeDelimitedTo, writeTo

Field Detail

NAME_FIELD_NUMBER

public static final int NAME_FIELD_NUMBER

See Also:

Constant Field Values

DESCRIPTION_FIELD_NUMBER

public static final int DESCRIPTION_FIELD_NUMBER

See Also:

Constant Field Values

GLOBAL_POLICY_EVALUATION_MODE_FIELD_NUMBER

public static final int GLOBAL_POLICY_EVALUATION_MODE_FIELD_NUMBER

See Also:

Constant Field Values

ADMISSION_WHITELIST_PATTERNS_FIELD_NUMBER

public static final int ADMISSION_WHITELIST_PATTERNS_FIELD_NUMBER

See Also:

Constant Field Values

CLUSTER_ADMISSION_RULES_FIELD_NUMBER

public static final int CLUSTER_ADMISSION_RULES_FIELD_NUMBER

See Also:

Constant Field Values

KUBERNETES_NAMESPACE_ADMISSION_RULES_FIELD_NUMBER

public static final int KUBERNETES_NAMESPACE_ADMISSION_RULES_FIELD_NUMBER

See Also:

Constant Field Values

KUBERNETES_SERVICE_ACCOUNT_ADMISSION_RULES_FIELD_NUMBER

public static final int KUBERNETES_SERVICE_ACCOUNT_ADMISSION_RULES_FIELD_NUMBER

See Also:

Constant Field Values

ISTIO_SERVICE_IDENTITY_ADMISSION_RULES_FIELD_NUMBER

public static final int ISTIO_SERVICE_IDENTITY_ADMISSION_RULES_FIELD_NUMBER

See Also:

Constant Field Values

DEFAULT_ADMISSION_RULE_FIELD_NUMBER

public static final int DEFAULT_ADMISSION_RULE_FIELD_NUMBER

See Also:

Constant Field Values

UPDATE_TIME_FIELD_NUMBER

public static final int UPDATE_TIME_FIELD_NUMBER

See Also:

Constant Field Values

Method Detail

newInstance

protected Object newInstance(com.google.protobuf.GeneratedMessageV3.UnusedPrivateParameter unused)

Overrides:

newInstance in class com.google.protobuf.GeneratedMessageV3

getDescriptor

public static final com.google.protobuf.Descriptors.Descriptor getDescriptor()

internalGetMapFieldReflection

protected com.google.protobuf.MapFieldReflectionAccessor internalGetMapFieldReflection(int number)

Overrides:

internalGetMapFieldReflection in class com.google.protobuf.GeneratedMessageV3

internalGetFieldAccessorTable

protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()

Specified by:

internalGetFieldAccessorTable in class com.google.protobuf.GeneratedMessageV3

getName

public String getName()

 Output only. The resource name, in the format `projects/*/policy`. There is
 at most one policy per project.
 

string name = 1 [(.google.api.field_behavior) = OUTPUT_ONLY];

Specified by:

getName in interface Resources.PolicyOrBuilder

Returns:

The name.

getNameBytes

public com.google.protobuf.ByteString getNameBytes()

 Output only. The resource name, in the format `projects/*/policy`. There is
 at most one policy per project.
 

string name = 1 [(.google.api.field_behavior) = OUTPUT_ONLY];

Specified by:

getNameBytes in interface Resources.PolicyOrBuilder

Returns:

The bytes for name.

getDescription

public String getDescription()

 Optional. A descriptive comment.
 

string description = 6 [(.google.api.field_behavior) = OPTIONAL];

Specified by:

getDescription in interface Resources.PolicyOrBuilder

Returns:

The description.

getDescriptionBytes

public com.google.protobuf.ByteString getDescriptionBytes()

 Optional. A descriptive comment.
 

string description = 6 [(.google.api.field_behavior) = OPTIONAL];

Specified by:

getDescriptionBytes in interface Resources.PolicyOrBuilder

Returns:

The bytes for description.

getGlobalPolicyEvaluationModeValue

public int getGlobalPolicyEvaluationModeValue()

 Optional. Controls the evaluation of a Google-maintained global admission
 policy for common system-level images. Images not covered by the global
 policy will be subject to the project admission policy. This setting
 has no effect when specified inside a global admission policy.
 

.google.cloud.binaryauthorization.v1.Policy.GlobalPolicyEvaluationMode global_policy_evaluation_mode = 7 [(.google.api.field_behavior) = OPTIONAL];

Specified by:

getGlobalPolicyEvaluationModeValue in interface Resources.PolicyOrBuilder

Returns:

The enum numeric value on the wire for globalPolicyEvaluationMode.

getGlobalPolicyEvaluationMode

public Resources.Policy.GlobalPolicyEvaluationMode getGlobalPolicyEvaluationMode()

 Optional. Controls the evaluation of a Google-maintained global admission
 policy for common system-level images. Images not covered by the global
 policy will be subject to the project admission policy. This setting
 has no effect when specified inside a global admission policy.
 

.google.cloud.binaryauthorization.v1.Policy.GlobalPolicyEvaluationMode global_policy_evaluation_mode = 7 [(.google.api.field_behavior) = OPTIONAL];

Specified by:

getGlobalPolicyEvaluationMode in interface Resources.PolicyOrBuilder

Returns:

The globalPolicyEvaluationMode.

getAdmissionWhitelistPatternsList

public List<Resources.AdmissionWhitelistPattern> getAdmissionWhitelistPatternsList()

 Optional. Admission policy allowlisting. A matching admission request will
 always be permitted. This feature is typically used to exclude Google or
 third-party infrastructure images from Binary Authorization policies.
 

repeated .google.cloud.binaryauthorization.v1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];

Specified by:

getAdmissionWhitelistPatternsList in interface Resources.PolicyOrBuilder

getAdmissionWhitelistPatternsOrBuilderList

public List<? extends Resources.AdmissionWhitelistPatternOrBuilder> getAdmissionWhitelistPatternsOrBuilderList()

 Optional. Admission policy allowlisting. A matching admission request will
 always be permitted. This feature is typically used to exclude Google or
 third-party infrastructure images from Binary Authorization policies.
 

repeated .google.cloud.binaryauthorization.v1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];

Specified by:

getAdmissionWhitelistPatternsOrBuilderList in interface Resources.PolicyOrBuilder

getAdmissionWhitelistPatternsCount

public int getAdmissionWhitelistPatternsCount()

 Optional. Admission policy allowlisting. A matching admission request will
 always be permitted. This feature is typically used to exclude Google or
 third-party infrastructure images from Binary Authorization policies.
 

repeated .google.cloud.binaryauthorization.v1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];

Specified by:

getAdmissionWhitelistPatternsCount in interface Resources.PolicyOrBuilder

getAdmissionWhitelistPatterns

public Resources.AdmissionWhitelistPattern getAdmissionWhitelistPatterns(int index)

 Optional. Admission policy allowlisting. A matching admission request will
 always be permitted. This feature is typically used to exclude Google or
 third-party infrastructure images from Binary Authorization policies.
 

repeated .google.cloud.binaryauthorization.v1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];

Specified by:

getAdmissionWhitelistPatterns in interface Resources.PolicyOrBuilder

getAdmissionWhitelistPatternsOrBuilder

public Resources.AdmissionWhitelistPatternOrBuilder getAdmissionWhitelistPatternsOrBuilder(int index)

 Optional. Admission policy allowlisting. A matching admission request will
 always be permitted. This feature is typically used to exclude Google or
 third-party infrastructure images from Binary Authorization policies.
 

repeated .google.cloud.binaryauthorization.v1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];

Specified by:

getAdmissionWhitelistPatternsOrBuilder in interface Resources.PolicyOrBuilder

getClusterAdmissionRulesCount

public int getClusterAdmissionRulesCount()

Description copied from interface: Resources.PolicyOrBuilder

 Optional. Per-cluster admission rules. Cluster spec format:
 `location.clusterId`. There can be at most one admission rule per cluster
 spec.
 A `location` is either a compute zone (e.g. us-central1-a) or a region
 (e.g. us-central1).
 For `clusterId` syntax restrictions see
 https://cloud.google.com/container-engine/reference/rest/v1/projects.zones.clusters.
 

map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> cluster_admission_rules = 3 [(.google.api.field_behavior) = OPTIONAL];

Specified by:

getClusterAdmissionRulesCount in interface Resources.PolicyOrBuilder

containsClusterAdmissionRules

public boolean containsClusterAdmissionRules(String key)

 Optional. Per-cluster admission rules. Cluster spec format:
 `location.clusterId`. There can be at most one admission rule per cluster
 spec.
 A `location` is either a compute zone (e.g. us-central1-a) or a region
 (e.g. us-central1).
 For `clusterId` syntax restrictions see
 https://cloud.google.com/container-engine/reference/rest/v1/projects.zones.clusters.
 

map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> cluster_admission_rules = 3 [(.google.api.field_behavior) = OPTIONAL];

Specified by:

containsClusterAdmissionRules in interface Resources.PolicyOrBuilder

getClusterAdmissionRules

@Deprecated
public Map<String,Resources.AdmissionRule> getClusterAdmissionRules()

Deprecated.

Use getClusterAdmissionRulesMap() instead.

Specified by:

getClusterAdmissionRules in interface Resources.PolicyOrBuilder

getClusterAdmissionRulesMap

public Map<String,Resources.AdmissionRule> getClusterAdmissionRulesMap()

 Optional. Per-cluster admission rules. Cluster spec format:
 `location.clusterId`. There can be at most one admission rule per cluster
 spec.
 A `location` is either a compute zone (e.g. us-central1-a) or a region
 (e.g. us-central1).
 For `clusterId` syntax restrictions see
 https://cloud.google.com/container-engine/reference/rest/v1/projects.zones.clusters.
 

map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> cluster_admission_rules = 3 [(.google.api.field_behavior) = OPTIONAL];

Specified by:

getClusterAdmissionRulesMap in interface Resources.PolicyOrBuilder

getClusterAdmissionRulesOrDefault

public Resources.AdmissionRule getClusterAdmissionRulesOrDefault(String key,
                                                                 Resources.AdmissionRule defaultValue)

 Optional. Per-cluster admission rules. Cluster spec format:
 `location.clusterId`. There can be at most one admission rule per cluster
 spec.
 A `location` is either a compute zone (e.g. us-central1-a) or a region
 (e.g. us-central1).
 For `clusterId` syntax restrictions see
 https://cloud.google.com/container-engine/reference/rest/v1/projects.zones.clusters.
 

map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> cluster_admission_rules = 3 [(.google.api.field_behavior) = OPTIONAL];

Specified by:

getClusterAdmissionRulesOrDefault in interface Resources.PolicyOrBuilder

getClusterAdmissionRulesOrThrow

public Resources.AdmissionRule getClusterAdmissionRulesOrThrow(String key)

 Optional. Per-cluster admission rules. Cluster spec format:
 `location.clusterId`. There can be at most one admission rule per cluster
 spec.
 A `location` is either a compute zone (e.g. us-central1-a) or a region
 (e.g. us-central1).
 For `clusterId` syntax restrictions see
 https://cloud.google.com/container-engine/reference/rest/v1/projects.zones.clusters.
 

map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> cluster_admission_rules = 3 [(.google.api.field_behavior) = OPTIONAL];

Specified by:

getClusterAdmissionRulesOrThrow in interface Resources.PolicyOrBuilder

getKubernetesNamespaceAdmissionRulesCount

public int getKubernetesNamespaceAdmissionRulesCount()

Description copied from interface: Resources.PolicyOrBuilder

 Optional. Per-kubernetes-namespace admission rules. K8s namespace spec format:
 [a-z.-]+, e.g. 'some-namespace'
 

map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> kubernetes_namespace_admission_rules = 10 [(.google.api.field_behavior) = OPTIONAL];

Specified by:

getKubernetesNamespaceAdmissionRulesCount in interface Resources.PolicyOrBuilder

containsKubernetesNamespaceAdmissionRules

public boolean containsKubernetesNamespaceAdmissionRules(String key)

 Optional. Per-kubernetes-namespace admission rules. K8s namespace spec format:
 [a-z.-]+, e.g. 'some-namespace'
 

map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> kubernetes_namespace_admission_rules = 10 [(.google.api.field_behavior) = OPTIONAL];

Specified by:

containsKubernetesNamespaceAdmissionRules in interface Resources.PolicyOrBuilder

getKubernetesNamespaceAdmissionRules

@Deprecated
public Map<String,Resources.AdmissionRule> getKubernetesNamespaceAdmissionRules()

Deprecated.

Use getKubernetesNamespaceAdmissionRulesMap() instead.

Specified by:

getKubernetesNamespaceAdmissionRules in interface Resources.PolicyOrBuilder

getKubernetesNamespaceAdmissionRulesMap

public Map<String,Resources.AdmissionRule> getKubernetesNamespaceAdmissionRulesMap()

 Optional. Per-kubernetes-namespace admission rules. K8s namespace spec format:
 [a-z.-]+, e.g. 'some-namespace'
 

map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> kubernetes_namespace_admission_rules = 10 [(.google.api.field_behavior) = OPTIONAL];

Specified by:

getKubernetesNamespaceAdmissionRulesMap in interface Resources.PolicyOrBuilder

getKubernetesNamespaceAdmissionRulesOrDefault

public Resources.AdmissionRule getKubernetesNamespaceAdmissionRulesOrDefault(String key,
                                                                             Resources.AdmissionRule defaultValue)

 Optional. Per-kubernetes-namespace admission rules. K8s namespace spec format:
 [a-z.-]+, e.g. 'some-namespace'
 

map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> kubernetes_namespace_admission_rules = 10 [(.google.api.field_behavior) = OPTIONAL];

Specified by:

getKubernetesNamespaceAdmissionRulesOrDefault in interface Resources.PolicyOrBuilder

getKubernetesNamespaceAdmissionRulesOrThrow

public Resources.AdmissionRule getKubernetesNamespaceAdmissionRulesOrThrow(String key)

 Optional. Per-kubernetes-namespace admission rules. K8s namespace spec format:
 [a-z.-]+, e.g. 'some-namespace'
 

map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> kubernetes_namespace_admission_rules = 10 [(.google.api.field_behavior) = OPTIONAL];

Specified by:

getKubernetesNamespaceAdmissionRulesOrThrow in interface Resources.PolicyOrBuilder

getKubernetesServiceAccountAdmissionRulesCount

public int getKubernetesServiceAccountAdmissionRulesCount()

Description copied from interface: Resources.PolicyOrBuilder

 Optional. Per-kubernetes-service-account admission rules. Service account
 spec format: `namespace:serviceaccount`. e.g. 'test-ns:default'
 

map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> kubernetes_service_account_admission_rules = 8 [(.google.api.field_behavior) = OPTIONAL];

Specified by:

getKubernetesServiceAccountAdmissionRulesCount in interface Resources.PolicyOrBuilder

containsKubernetesServiceAccountAdmissionRules

public boolean containsKubernetesServiceAccountAdmissionRules(String key)

 Optional. Per-kubernetes-service-account admission rules. Service account
 spec format: `namespace:serviceaccount`. e.g. 'test-ns:default'
 

map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> kubernetes_service_account_admission_rules = 8 [(.google.api.field_behavior) = OPTIONAL];

Specified by:

containsKubernetesServiceAccountAdmissionRules in interface Resources.PolicyOrBuilder

getKubernetesServiceAccountAdmissionRules

@Deprecated
public Map<String,Resources.AdmissionRule> getKubernetesServiceAccountAdmissionRules()

Deprecated.

Use getKubernetesServiceAccountAdmissionRulesMap() instead.

Specified by:

getKubernetesServiceAccountAdmissionRules in interface Resources.PolicyOrBuilder

getKubernetesServiceAccountAdmissionRulesMap

public Map<String,Resources.AdmissionRule> getKubernetesServiceAccountAdmissionRulesMap()

 Optional. Per-kubernetes-service-account admission rules. Service account
 spec format: `namespace:serviceaccount`. e.g. 'test-ns:default'
 

map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> kubernetes_service_account_admission_rules = 8 [(.google.api.field_behavior) = OPTIONAL];

Specified by:

getKubernetesServiceAccountAdmissionRulesMap in interface Resources.PolicyOrBuilder

getKubernetesServiceAccountAdmissionRulesOrDefault

public Resources.AdmissionRule getKubernetesServiceAccountAdmissionRulesOrDefault(String key,
                                                                                  Resources.AdmissionRule defaultValue)

 Optional. Per-kubernetes-service-account admission rules. Service account
 spec format: `namespace:serviceaccount`. e.g. 'test-ns:default'
 

map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> kubernetes_service_account_admission_rules = 8 [(.google.api.field_behavior) = OPTIONAL];

Specified by:

getKubernetesServiceAccountAdmissionRulesOrDefault in interface Resources.PolicyOrBuilder

getKubernetesServiceAccountAdmissionRulesOrThrow

public Resources.AdmissionRule getKubernetesServiceAccountAdmissionRulesOrThrow(String key)

 Optional. Per-kubernetes-service-account admission rules. Service account
 spec format: `namespace:serviceaccount`. e.g. 'test-ns:default'
 

map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> kubernetes_service_account_admission_rules = 8 [(.google.api.field_behavior) = OPTIONAL];

Specified by:

getKubernetesServiceAccountAdmissionRulesOrThrow in interface Resources.PolicyOrBuilder

getIstioServiceIdentityAdmissionRulesCount

public int getIstioServiceIdentityAdmissionRulesCount()

Description copied from interface: Resources.PolicyOrBuilder

 Optional. Per-istio-service-identity admission rules. Istio service
 identity spec format:
 spiffe://<domain>/ns/<namespace>/sa/<serviceaccount> or
 <domain>/ns/<namespace>/sa/<serviceaccount>
 e.g. spiffe://example.com/ns/test-ns/sa/default
 

map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> istio_service_identity_admission_rules = 9 [(.google.api.field_behavior) = OPTIONAL];

Specified by:

getIstioServiceIdentityAdmissionRulesCount in interface Resources.PolicyOrBuilder

containsIstioServiceIdentityAdmissionRules

public boolean containsIstioServiceIdentityAdmissionRules(String key)

 Optional. Per-istio-service-identity admission rules. Istio service
 identity spec format:
 spiffe://<domain>/ns/<namespace>/sa/<serviceaccount> or
 <domain>/ns/<namespace>/sa/<serviceaccount>
 e.g. spiffe://example.com/ns/test-ns/sa/default
 

map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> istio_service_identity_admission_rules = 9 [(.google.api.field_behavior) = OPTIONAL];

Specified by:

containsIstioServiceIdentityAdmissionRules in interface Resources.PolicyOrBuilder

getIstioServiceIdentityAdmissionRules

@Deprecated
public Map<String,Resources.AdmissionRule> getIstioServiceIdentityAdmissionRules()

Deprecated.

Use getIstioServiceIdentityAdmissionRulesMap() instead.

Specified by:

getIstioServiceIdentityAdmissionRules in interface Resources.PolicyOrBuilder

getIstioServiceIdentityAdmissionRulesMap

public Map<String,Resources.AdmissionRule> getIstioServiceIdentityAdmissionRulesMap()

 Optional. Per-istio-service-identity admission rules. Istio service
 identity spec format:
 spiffe://<domain>/ns/<namespace>/sa/<serviceaccount> or
 <domain>/ns/<namespace>/sa/<serviceaccount>
 e.g. spiffe://example.com/ns/test-ns/sa/default
 

map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> istio_service_identity_admission_rules = 9 [(.google.api.field_behavior) = OPTIONAL];

Specified by:

getIstioServiceIdentityAdmissionRulesMap in interface Resources.PolicyOrBuilder

getIstioServiceIdentityAdmissionRulesOrDefault

public Resources.AdmissionRule getIstioServiceIdentityAdmissionRulesOrDefault(String key,
                                                                              Resources.AdmissionRule defaultValue)

 Optional. Per-istio-service-identity admission rules. Istio service
 identity spec format:
 spiffe://<domain>/ns/<namespace>/sa/<serviceaccount> or
 <domain>/ns/<namespace>/sa/<serviceaccount>
 e.g. spiffe://example.com/ns/test-ns/sa/default
 

map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> istio_service_identity_admission_rules = 9 [(.google.api.field_behavior) = OPTIONAL];

Specified by:

getIstioServiceIdentityAdmissionRulesOrDefault in interface Resources.PolicyOrBuilder

getIstioServiceIdentityAdmissionRulesOrThrow

public Resources.AdmissionRule getIstioServiceIdentityAdmissionRulesOrThrow(String key)

 Optional. Per-istio-service-identity admission rules. Istio service
 identity spec format:
 spiffe://<domain>/ns/<namespace>/sa/<serviceaccount> or
 <domain>/ns/<namespace>/sa/<serviceaccount>
 e.g. spiffe://example.com/ns/test-ns/sa/default
 

map<string, .google.cloud.binaryauthorization.v1.AdmissionRule> istio_service_identity_admission_rules = 9 [(.google.api.field_behavior) = OPTIONAL];

Specified by:

getIstioServiceIdentityAdmissionRulesOrThrow in interface Resources.PolicyOrBuilder

hasDefaultAdmissionRule

public boolean hasDefaultAdmissionRule()

 Required. Default admission rule for a cluster without a per-cluster, per-
 kubernetes-service-account, or per-istio-service-identity admission rule.
 

.google.cloud.binaryauthorization.v1.AdmissionRule default_admission_rule = 4 [(.google.api.field_behavior) = REQUIRED];

Specified by:

hasDefaultAdmissionRule in interface Resources.PolicyOrBuilder

Returns:

Whether the defaultAdmissionRule field is set.

getDefaultAdmissionRule

public Resources.AdmissionRule getDefaultAdmissionRule()

 Required. Default admission rule for a cluster without a per-cluster, per-
 kubernetes-service-account, or per-istio-service-identity admission rule.
 

.google.cloud.binaryauthorization.v1.AdmissionRule default_admission_rule = 4 [(.google.api.field_behavior) = REQUIRED];

Specified by:

getDefaultAdmissionRule in interface Resources.PolicyOrBuilder

Returns:

The defaultAdmissionRule.

getDefaultAdmissionRuleOrBuilder

public Resources.AdmissionRuleOrBuilder getDefaultAdmissionRuleOrBuilder()

 Required. Default admission rule for a cluster without a per-cluster, per-
 kubernetes-service-account, or per-istio-service-identity admission rule.
 

.google.cloud.binaryauthorization.v1.AdmissionRule default_admission_rule = 4 [(.google.api.field_behavior) = REQUIRED];

Specified by:

getDefaultAdmissionRuleOrBuilder in interface Resources.PolicyOrBuilder

hasUpdateTime

public boolean hasUpdateTime()

 Output only. Time when the policy was last updated.
 

.google.protobuf.Timestamp update_time = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];

Specified by:

hasUpdateTime in interface Resources.PolicyOrBuilder

Returns:

Whether the updateTime field is set.

getUpdateTime

public com.google.protobuf.Timestamp getUpdateTime()

 Output only. Time when the policy was last updated.
 

.google.protobuf.Timestamp update_time = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];

Specified by:

getUpdateTime in interface Resources.PolicyOrBuilder

Returns:

The updateTime.

getUpdateTimeOrBuilder

public com.google.protobuf.TimestampOrBuilder getUpdateTimeOrBuilder()

 Output only. Time when the policy was last updated.
 

.google.protobuf.Timestamp update_time = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];

Specified by:

getUpdateTimeOrBuilder in interface Resources.PolicyOrBuilder

isInitialized

public final boolean isInitialized()

Specified by:

isInitialized in interface com.google.protobuf.MessageLiteOrBuilder

Overrides:

isInitialized in class com.google.protobuf.GeneratedMessageV3

writeTo

public void writeTo(com.google.protobuf.CodedOutputStream output)
             throws IOException

Specified by:

writeTo in interface com.google.protobuf.MessageLite

Overrides:

writeTo in class com.google.protobuf.GeneratedMessageV3

Throws:

IOException

getSerializedSize

public int getSerializedSize()

Specified by:

getSerializedSize in interface com.google.protobuf.MessageLite

Overrides:

getSerializedSize in class com.google.protobuf.GeneratedMessageV3

equals

public boolean equals(Object obj)

Specified by:

equals in interface com.google.protobuf.Message

Overrides:

equals in class com.google.protobuf.AbstractMessage

hashCode

public int hashCode()

Specified by:

hashCode in interface com.google.protobuf.Message

Overrides:

hashCode in class com.google.protobuf.AbstractMessage

parseFrom

public static Resources.Policy parseFrom(ByteBuffer data)
                                  throws com.google.protobuf.InvalidProtocolBufferException

Throws:

com.google.protobuf.InvalidProtocolBufferException

parseFrom

public static Resources.Policy parseFrom(ByteBuffer data,
                                         com.google.protobuf.ExtensionRegistryLite extensionRegistry)
                                  throws com.google.protobuf.InvalidProtocolBufferException

Throws:

com.google.protobuf.InvalidProtocolBufferException

parseFrom

public static Resources.Policy parseFrom(com.google.protobuf.ByteString data)
                                  throws com.google.protobuf.InvalidProtocolBufferException

Throws:

com.google.protobuf.InvalidProtocolBufferException

parseFrom

public static Resources.Policy parseFrom(com.google.protobuf.ByteString data,
                                         com.google.protobuf.ExtensionRegistryLite extensionRegistry)
                                  throws com.google.protobuf.InvalidProtocolBufferException

Throws:

com.google.protobuf.InvalidProtocolBufferException

parseFrom

public static Resources.Policy parseFrom(byte[] data)
                                  throws com.google.protobuf.InvalidProtocolBufferException

Throws:

com.google.protobuf.InvalidProtocolBufferException

parseFrom

public static Resources.Policy parseFrom(byte[] data,
                                         com.google.protobuf.ExtensionRegistryLite extensionRegistry)
                                  throws com.google.protobuf.InvalidProtocolBufferException

Throws:

com.google.protobuf.InvalidProtocolBufferException

parseFrom

public static Resources.Policy parseFrom(InputStream input)
                                  throws IOException

Throws:

IOException

parseFrom

public static Resources.Policy parseFrom(InputStream input,
                                         com.google.protobuf.ExtensionRegistryLite extensionRegistry)
                                  throws IOException

Throws:

IOException

parseDelimitedFrom

public static Resources.Policy parseDelimitedFrom(InputStream input)
                                           throws IOException

Throws:

IOException

parseDelimitedFrom

public static Resources.Policy parseDelimitedFrom(InputStream input,
                                                  com.google.protobuf.ExtensionRegistryLite extensionRegistry)
                                           throws IOException

Throws:

IOException

parseFrom

public static Resources.Policy parseFrom(com.google.protobuf.CodedInputStream input)
                                  throws IOException

Throws:

IOException

parseFrom

public static Resources.Policy parseFrom(com.google.protobuf.CodedInputStream input,
                                         com.google.protobuf.ExtensionRegistryLite extensionRegistry)
                                  throws IOException

Throws:

IOException

newBuilderForType

public Resources.Policy.Builder newBuilderForType()

Specified by:

newBuilderForType in interface com.google.protobuf.Message

Specified by:

newBuilderForType in interface com.google.protobuf.MessageLite

newBuilder

public static Resources.Policy.Builder newBuilder()

newBuilder

public static Resources.Policy.Builder newBuilder(Resources.Policy prototype)

toBuilder

public Resources.Policy.Builder toBuilder()

Specified by:

toBuilder in interface com.google.protobuf.Message

Specified by:

toBuilder in interface com.google.protobuf.MessageLite

newBuilderForType

protected Resources.Policy.Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent)

Specified by:

newBuilderForType in class com.google.protobuf.GeneratedMessageV3

getDefaultInstance

public static Resources.Policy getDefaultInstance()

parser

public static com.google.protobuf.Parser<Resources.Policy> parser()

getParserForType

public com.google.protobuf.Parser<Resources.Policy> getParserForType()

Specified by:

getParserForType in interface com.google.protobuf.Message

Specified by:

getParserForType in interface com.google.protobuf.MessageLite

Overrides:

getParserForType in class com.google.protobuf.GeneratedMessageV3

getDefaultInstanceForType

public Resources.Policy getDefaultInstanceForType()

Specified by:

getDefaultInstanceForType in interface com.google.protobuf.MessageLiteOrBuilder

Specified by:

getDefaultInstanceForType in interface com.google.protobuf.MessageOrBuilder