enforcementMode property

String? enforcementMode
getter/setter pair

The action when a pod creation is denied by the admission rule.

Required. Possible string values are:

  • "ENFORCEMENT_MODE_UNSPECIFIED" : Do not use.
  • "ENFORCED_BLOCK_AND_AUDIT_LOG" : Enforce the admission rule by blocking the pod creation.
  • "DRYRUN_AUDIT_LOG_ONLY" : Dryrun mode: Audit logging only. This will allow the pod creation as if the admission request had specified break-glass.

Implementation

core.String? enforcementMode;