PolicyArgs class - binaryauthorization library

Constructors

PolicyArgs({Input<List<PolicyAdmissionWhitelistPattern>?>? admissionWhitelistPatterns, Input<List<PolicyClusterAdmissionRule>?>? clusterAdmissionRules, required Input<PolicyDefaultAdmissionRule> defaultAdmissionRule, Input<String?>? deletionPolicy, Input<String?>? description, Input<String?>? globalPolicyEvaluationMode, Input<String?>? project}): Creates a new PolicyArgs. admissionWhitelistPatterns A whitelist of image patterns to exclude from admission rules. If an clusterAdmissionRules Per-cluster admission rules. An admission rule specifies either that defaultAdmissionRule Default admission rule for a cluster without a per-cluster admission deletionPolicy Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. description A descriptive comment. globalPolicyEvaluationMode Controls the evaluation of a Google-maintained global admission policy project The ID of the project in which the resource belongs.
const
PolicyArgs.fromMap(Map<String, dynamic> map): factory

Properties

admissionWhitelistPatterns → Input<List<PolicyAdmissionWhitelistPattern>?>?: A whitelist of image patterns to exclude from admission rules. If an image's name matches a whitelist pattern, the image's admission requests will always be permitted regardless of your admission rules. Structure is documented below.
final
clusterAdmissionRules → Input<List<PolicyClusterAdmissionRule>?>?: Per-cluster admission rules. An admission rule specifies either that all container images used in a pod creation request must be attested to by one or more attestors, that all pod creations will be allowed, or that all pod creations will be denied. There can be at most one admission rule per cluster spec. Identifier format: {{location}}.{{clusterId}}. A location is either a compute zone (e.g. us-central1-a) or a region (e.g. us-central1). Structure is documented below.
final
defaultAdmissionRule → Input<PolicyDefaultAdmissionRule>: Default admission rule for a cluster without a per-cluster admission rule. Structure is documented below.
final
deletionPolicy → Input<String?>?: Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
final
description → Input<String?>?: A descriptive comment.
final
globalPolicyEvaluationMode → Input<String?>?: Controls the evaluation of a Google-maintained global admission policy for common system-level images. Images not covered by the global policy will be subject to the project admission policy. Possible values are: ENABLE, DISABLE.
final
hashCode → int: The hash code for this object.
no setterinherited
project → Input<String?>?: The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
final
runtimeType → Type: A representation of the runtime type of the object.
no setterinherited

Methods

noSuchMethod(Invocation invocation) → dynamic: Invoked when a nonexistent method or property is accessed.
inherited
toMap() → Map<String, dynamic>
toString() → String: A string representation of this object.
inherited

Operators

operator ==(Object other) → bool: The equality operator.
inherited