Package com.pulumi.gcp.binaryauthorization.inputs

Class PolicyState

  • public final class PolicyState
extends com.pulumi.resources.ResourceArgs

    • Method Detail

      • admissionWhitelistPatterns

        public java.util.Optional<com.pulumi.core.Output<java.util.List<PolicyAdmissionWhitelistPatternArgs>>> admissionWhitelistPatterns()
        Returns:
        A whitelist of image patterns to exclude from admission rules. If an image's name matches a whitelist pattern, the image's admission requests will always be permitted regardless of your admission rules. Structure is documented below.

      • clusterAdmissionRules

        public java.util.Optional<com.pulumi.core.Output<java.util.List<PolicyClusterAdmissionRuleArgs>>> clusterAdmissionRules()
        Returns:
        Per-cluster admission rules. An admission rule specifies either that all container images used in a pod creation request must be attested to by one or more attestors, that all pod creations will be allowed, or that all pod creations will be denied. There can be at most one admission rule per cluster spec.

      • defaultAdmissionRule

        public java.util.Optional<com.pulumi.core.Output<PolicyDefaultAdmissionRuleArgs>> defaultAdmissionRule()
        Returns:
        Default admission rule for a cluster without a per-cluster admission rule. Structure is documented below.

      • description

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> description()
        Returns:
        A descriptive comment.

      • globalPolicyEvaluationMode

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> globalPolicyEvaluationMode()
        Returns:
        Controls the evaluation of a Google-maintained global admission policy for common system-level images. Images not covered by the global policy will be subject to the project admission policy. Possible values are `ENABLE` and `DISABLE`.

      • project

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> project()
        Returns:
        The ID of the project in which the resource belongs. If it is not provided, the provider project is used.