pub struct AdmissionRule {
pub enforcement_mode: Option<String>,
pub evaluation_mode: Option<String>,
pub require_attestations_by: Option<Vec<String>>,
}
Expand description
An admission rule specifies either that all container images used in a pod creation request must be attested to by one or more attestors, that all pod creations will be allowed, or that all pod creations will be denied. Images matching an admission allowlist pattern are exempted from admission rules and will never block a pod creation.
This type is not used in any activity, and only used as part of another schema.
Fields§
§enforcement_mode: Option<String>
Required. The action when a pod creation is denied by the admission rule.
evaluation_mode: Option<String>
Required. How this admission rule will be evaluated.
require_attestations_by: Option<Vec<String>>
Optional. The resource names of the attestors that must attest to a container image, in the format projects/*/attestors/*
. Each attestor must exist before a policy can reference it. To add an attestor to a policy the principal issuing the policy change request must be able to read the attestor resource. Note: this field must be non-empty when the evaluation_mode field specifies REQUIRE_ATTESTATION, otherwise it must be empty.
Trait Implementations§
Source§impl Clone for AdmissionRule
impl Clone for AdmissionRule
Source§fn clone(&self) -> AdmissionRule
fn clone(&self) -> AdmissionRule
1.0.0 · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source
. Read moreSource§impl Debug for AdmissionRule
impl Debug for AdmissionRule
Source§impl Default for AdmissionRule
impl Default for AdmissionRule
Source§fn default() -> AdmissionRule
fn default() -> AdmissionRule
Source§impl<'de> Deserialize<'de> for AdmissionRule
impl<'de> Deserialize<'de> for AdmissionRule
Source§fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>where
__D: Deserializer<'de>,
fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>where
__D: Deserializer<'de>,
Source§impl Serialize for AdmissionRule
impl Serialize for AdmissionRule
impl Part for AdmissionRule
Auto Trait Implementations§
impl Freeze for AdmissionRule
impl RefUnwindSafe for AdmissionRule
impl Send for AdmissionRule
impl Sync for AdmissionRule
impl Unpin for AdmissionRule
impl UnwindSafe for AdmissionRule
Blanket Implementations§
Source§impl<T> BorrowMut<T> for Twhere
T: ?Sized,
impl<T> BorrowMut<T> for Twhere
T: ?Sized,
Source§fn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
Source§impl<T> CloneToUninit for Twhere
T: Clone,
impl<T> CloneToUninit for Twhere
T: Clone,
Source§impl<T> Instrument for T
impl<T> Instrument for T
Source§fn instrument(self, span: Span) -> Instrumented<Self>
fn instrument(self, span: Span) -> Instrumented<Self>
Source§fn in_current_span(self) -> Instrumented<Self>
fn in_current_span(self) -> Instrumented<Self>
Source§impl<T> IntoEither for T
impl<T> IntoEither for T
Source§fn into_either(self, into_left: bool) -> Either<Self, Self>
fn into_either(self, into_left: bool) -> Either<Self, Self>
self
into a Left
variant of Either<Self, Self>
if into_left
is true
.
Converts self
into a Right
variant of Either<Self, Self>
otherwise. Read moreSource§fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
self
into a Left
variant of Either<Self, Self>
if into_left(&self)
returns true
.
Converts self
into a Right
variant of Either<Self, Self>
otherwise. Read more