Struct google_binaryauthorization1_beta1::api::AdmissionRule

pub struct AdmissionRule {
    pub enforcement_mode: Option<String>,
    pub evaluation_mode: Option<String>,
    pub require_attestations_by: Option<Vec<String>>,
}

An admission rule specifies either that all container images used in a pod creation request must be attested to by one or more attestors, that all pod creations will be allowed, or that all pod creations will be denied. Images matching an admission allowlist pattern are exempted from admission rules and will never block a pod creation.

This type is not used in any activity, and only used as part of another schema.

Fields

enforcement_mode: Option<String>

Required. The action when a pod creation is denied by the admission rule.

evaluation_mode: Option<String>

Required. How this admission rule will be evaluated.

require_attestations_by: Option<Vec<String>>

Optional. The resource names of the attestors that must attest to a container image, in the format projects/*/attestors/*. Each attestor must exist before a policy can reference it. To add an attestor to a policy the principal issuing the policy change request must be able to read the attestor resource. Note: this field must be non-empty when the evaluation_mode field specifies REQUIRE_ATTESTATION, otherwise it must be empty.

Trait Implementations

impl Clone for AdmissionRule

fn clone(&self) -> AdmissionRule

Returns a copy of the value.

pub fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AdmissionRule

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AdmissionRule

fn default() -> AdmissionRule

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for AdmissionRule

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error> where
    __D: Deserializer<'de>, 

Deserialize this value from the given Serde deserializer.

impl Part for AdmissionRule

impl Serialize for AdmissionRule

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error> where
    __S: Serializer, 

Serialize this value into the given Serde serializer.