public sealed class AdmissionRule : IMessage<AdmissionRule>, IEquatable<AdmissionRule>, IDeepCloneable<AdmissionRule>, IBufferMessage, IMessageReference documentation and code samples for the Binary Authorization v1beta1 API class AdmissionRule.
An [admission rule][google.cloud.binaryauthorization.v1beta1.AdmissionRule] specifies either that all container images used in a pod creation request must be attested to by one or more [attestors][google.cloud.binaryauthorization.v1beta1.Attestor], that all pod creations will be allowed, or that all pod creations will be denied.
Images matching an [admission allowlist pattern][google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern] are exempted from admission rules and will never block a pod creation.
Implements
IMessageAdmissionRule, IEquatableAdmissionRule, IDeepCloneableAdmissionRule, IBufferMessage, IMessageNamespace
Google.Cloud.BinaryAuthorization.V1Beta1Assembly
Google.Cloud.BinaryAuthorization.V1Beta1.dll
Constructors
AdmissionRule()
public AdmissionRule()AdmissionRule(AdmissionRule)
public AdmissionRule(AdmissionRule other)| Parameter | |
|---|---|
| Name | Description |
other |
AdmissionRule |
Properties
EnforcementMode
public AdmissionRule.Types.EnforcementMode EnforcementMode { get; set; }Required. The action when a pod creation is denied by the admission rule.
| Property Value | |
|---|---|
| Type | Description |
AdmissionRuleTypesEnforcementMode |
|
EvaluationMode
public AdmissionRule.Types.EvaluationMode EvaluationMode { get; set; }Required. How this admission rule will be evaluated.
| Property Value | |
|---|---|
| Type | Description |
AdmissionRuleTypesEvaluationMode |
|
RequireAttestationsBy
public RepeatedField<string> RequireAttestationsBy { get; }| Property Value | |
|---|---|
| Type | Description |
RepeatedFieldstring |
|