GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicy constructor
- Input<
GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeature> ? containerImageSources, - Input<
GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeature> ? dockerAddCapabilities, - Input<
GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeature> ? dockerChrootPath, - Input<
GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeature> ? dockerNetwork, - Input<
GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeature> ? dockerPrivileged, - Input<
GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeature> ? dockerRunAsRoot, - Input<
GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeature> ? dockerRuntime, - Input<
GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeature> ? dockerSiblingContainers, - Input<
GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyLinuxIsolation> ? linuxIsolation,
Creates a new GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicy.
containerImageSources Which container image sources are allowed. Currently only RBE-supported registry (gcr.io) is allowed. One can allow all repositories under a project or one specific repository only. E.g. container_image_sources { policy: RESTRICTED allowed_values: "gcr.io/project-foo", "gcr.io/project-bar/repo-baz", } will allow any repositories under "gcr.io/project-foo" plus the repository "gcr.io/project-bar/repo-baz". Default (UNSPECIFIED) is equivalent to any source is allowed.
dockerAddCapabilities Whether dockerAddCapabilities can be used or what capabilities are allowed.
dockerChrootPath Whether dockerChrootPath can be used.
dockerNetwork Whether dockerNetwork can be used or what network modes are allowed. E.g. one may allow off value only via allowed_values.
dockerPrivileged Whether dockerPrivileged can be used.
dockerRunAsRoot Whether dockerRunAsRoot can be used.
dockerRuntime Whether dockerRuntime is allowed to be set or what runtimes are allowed. Note linux_isolation takes precedence, and if set, docker_runtime values may be rejected if they are incompatible with the selected isolation.
dockerSiblingContainers Whether dockerSiblingContainers can be used.
linuxIsolation linux_isolation allows overriding the docker runtime used for containers started on Linux.
Implementation
const GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicy({
this.containerImageSources,
this.dockerAddCapabilities,
this.dockerChrootPath,
this.dockerNetwork,
this.dockerPrivileged,
this.dockerRunAsRoot,
this.dockerRuntime,
this.dockerSiblingContainers,
this.linuxIsolation,
});