Struct google_api_proto::google::cloud::binaryauthorization::v1beta1::AdmissionRule

pub struct AdmissionRule {
    pub evaluation_mode: i32,
    pub require_attestations_by: Vec<String>,
    pub enforcement_mode: i32,
}

An [admission rule][google.cloud.binaryauthorization.v1beta1.AdmissionRule] specifies either that all container images used in a pod creation request must be attested to by one or more [attestors][google.cloud.binaryauthorization.v1beta1.Attestor], that all pod creations will be allowed, or that all pod creations will be denied.

Images matching an [admission allowlist pattern][google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern] are exempted from admission rules and will never block a pod creation.

Fields

evaluation_mode: i32

Required. How this admission rule will be evaluated.

require_attestations_by: Vec<String>

Optional. The resource names of the attestors that must attest to a container image, in the format projects/*/attestors/*. Each attestor must exist before a policy can reference it. To add an attestor to a policy the principal issuing the policy change request must be able to read the attestor resource.

Note: this field must be non-empty when the evaluation_mode field specifies REQUIRE_ATTESTATION, otherwise it must be empty.

enforcement_mode: i32

Required. The action when a pod creation is denied by the admission rule.

Implementations

impl AdmissionRule

pub fn evaluation_mode(&self) -> EvaluationMode

Returns the enum value of evaluation_mode, or the default if the field is set to an invalid enum value.

pub fn set_evaluation_mode(&mut self, value: EvaluationMode)

Sets evaluation_mode to the provided enum value.

pub fn enforcement_mode(&self) -> EnforcementMode

Returns the enum value of enforcement_mode, or the default if the field is set to an invalid enum value.

pub fn set_enforcement_mode(&mut self, value: EnforcementMode)

Sets enforcement_mode to the provided enum value.

Trait Implementations

impl Clone for AdmissionRule

fn clone(&self) -> AdmissionRule

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AdmissionRule

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AdmissionRule

fn default() -> Self

Returns the “default value” for a type.

impl Message for AdmissionRule

fn encoded_len(&self) -> usize

Returns the encoded length of the message without a length delimiter.

fn clear(&mut self)

Clears the message, resetting all fields to their default.

fn encode(&self, buf: &mut impl BufMut) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message to a buffer.

fn encode_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message to a newly allocated buffer.

fn encode_length_delimited( &self, buf: &mut impl BufMut, ) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message with a length-delimiter to a buffer.

fn encode_length_delimited_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message with a length-delimiter to a newly allocated buffer.

fn decode(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes an instance of the message from a buffer.

fn decode_length_delimited(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes a length-delimited instance of the message from the buffer.

fn merge(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes an instance of the message from a buffer, and merges it into self.

fn merge_length_delimited(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes a length-delimited instance of the message from buffer, and merges it into self.

impl PartialEq for AdmissionRule

fn eq(&self, other: &AdmissionRule) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

This method tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for AdmissionRule