PolicyClusterAdmissionRule class
Properties
-
cluster
→ Input<String>
-
The identifier for this object. Format specified above.
final
-
enforcementMode
→ Input<String>
-
The action when a pod creation is denied by the admission rule.
Possible values are:
ENFORCED_BLOCK_AND_AUDIT_LOG, DRYRUN_AUDIT_LOG_ONLY.
final
-
evaluationMode
→ Input<String>
-
How this admission rule will be evaluated.
Possible values are:
ALWAYS_ALLOW, REQUIRE_ATTESTATION, ALWAYS_DENY.
final
-
hashCode
→ int
-
The hash code for this object.
no setterinherited
-
requireAttestationsBies
→ Input<List<String>?>?
-
The resource names of the attestors that must attest to a
container image. If the attestor is in a different project from the
policy, it should be specified in the format
projects/*/attestors/*.
Each attestor must exist before a policy can reference it. To add an
attestor to a policy the principal issuing the policy change
request must be able to read the attestor resource.
Note: this field must be non-empty when the evaluationMode field
specifies REQUIRE_ATTESTATION, otherwise it must be empty.
final
-
runtimeType
→ Type
-
A representation of the runtime type of the object.
no setterinherited