evaluationMode property
How this admission rule will be evaluated.
Required. Possible string values are:
- "EVALUATION_MODE_UNSPECIFIED" : Do not use.
- "ALWAYS_ALLOW" : This rule allows all pod creations.
- "REQUIRE_ATTESTATION" : This rule allows a pod creation if all the
attestors listed in
require_attestations_by
have valid attestations for all of the images in the pod spec. - "ALWAYS_DENY" : This rule denies all pod creations.
Implementation
core.String? evaluationMode;