Namespace Google.Cloud.BinaryAuthorization.V1 (2.0.0)

Classes

AdmissionRule

An [admission rule][google.cloud.binaryauthorization.v1.AdmissionRule] specifies either that all container images used in a pod creation request must be attested to by one or more [attestors][google.cloud.binaryauthorization.v1.Attestor], that all pod creations will be allowed, or that all pod creations will be denied.

Images matching an [admission allowlist pattern][google.cloud.binaryauthorization.v1.AdmissionWhitelistPattern] are exempted from admission rules and will never block a pod creation.

AdmissionRule.Types

Container for nested types declared in the AdmissionRule message type.

AdmissionWhitelistPattern

An [admission allowlist pattern][google.cloud.binaryauthorization.v1.AdmissionWhitelistPattern] exempts images from checks by [admission rules][google.cloud.binaryauthorization.v1.AdmissionRule].

Attestor

An [attestor][google.cloud.binaryauthorization.v1.Attestor] that attests to container image artifacts. An existing attestor cannot be modified except where indicated.

AttestorName

Resource name for the Attestor resource.

AttestorPublicKey

An [attestor public key][google.cloud.binaryauthorization.v1.AttestorPublicKey] that will be used to verify attestations signed by this attestor.

BinauthzManagementServiceV1

Google Cloud Management Service for Binary Authorization admission policies and attestation authorities.

This API implements a REST model with the following objects:

[Policy][google.cloud.binaryauthorization.v1.Policy]
[Attestor][google.cloud.binaryauthorization.v1.Attestor]

BinauthzManagementServiceV1.BinauthzManagementServiceV1Base

Base class for server-side implementations of BinauthzManagementServiceV1

BinauthzManagementServiceV1.BinauthzManagementServiceV1Client

Client for BinauthzManagementServiceV1

BinauthzManagementServiceV1Client

BinauthzManagementServiceV1 client wrapper, for convenient use.

BinauthzManagementServiceV1ClientBuilder

Builder class for BinauthzManagementServiceV1Client to provide simple configuration of credentials, endpoint etc.

BinauthzManagementServiceV1ClientImpl

BinauthzManagementServiceV1 client wrapper implementation, for convenient use.

BinauthzManagementServiceV1Settings

Settings for BinauthzManagementServiceV1Client instances.

CreateAttestorRequest

Request message for [BinauthzManagementService.CreateAttestor][].

DeleteAttestorRequest

Request message for [BinauthzManagementService.DeleteAttestor][].

GetAttestorRequest

Request message for [BinauthzManagementService.GetAttestor][].

GetPolicyRequest

Request message for [BinauthzManagementService.GetPolicy][].

GetSystemPolicyRequest

Request to read the current system policy.

ListAttestorsRequest

Request message for [BinauthzManagementService.ListAttestors][].

ListAttestorsResponse

Response message for [BinauthzManagementService.ListAttestors][].

PkixPublicKey

A public key in the PkixPublicKey format (see https://tools.ietf.org/html/rfc5280#section-4.1.2.7 for details). Public keys of this type are typically textually encoded using the PEM format.

PkixPublicKey.Types

Container for nested types declared in the PkixPublicKey message type.

Policy

A [policy][google.cloud.binaryauthorization.v1.Policy] for container image binary authorization.

Policy.Types

Container for nested types declared in the Policy message type.

PolicyName

Resource name for the Policy resource.

SystemPolicyV1

API for working with the system policy.

SystemPolicyV1.SystemPolicyV1Base

Base class for server-side implementations of SystemPolicyV1

SystemPolicyV1.SystemPolicyV1Client

Client for SystemPolicyV1

SystemPolicyV1Client

SystemPolicyV1 client wrapper, for convenient use.

SystemPolicyV1ClientBuilder

Builder class for SystemPolicyV1Client to provide simple configuration of credentials, endpoint etc.

SystemPolicyV1ClientImpl

SystemPolicyV1 client wrapper implementation, for convenient use.

SystemPolicyV1Settings

Settings for SystemPolicyV1Client instances.

UpdateAttestorRequest

Request message for [BinauthzManagementService.UpdateAttestor][].

UpdatePolicyRequest

Request message for [BinauthzManagementService.UpdatePolicy][].

UserOwnedGrafeasNote

An [user owned Grafeas note][google.cloud.binaryauthorization.v1.UserOwnedGrafeasNote] references a Grafeas Attestation.Authority Note created by the user.

ValidateAttestationOccurrenceRequest

Request message for [ValidationHelperV1.ValidateAttestationOccurrence][google.cloud.binaryauthorization.v1.ValidationHelperV1.ValidateAttestationOccurrence].

ValidateAttestationOccurrenceResponse

Response message for [ValidationHelperV1.ValidateAttestationOccurrence][google.cloud.binaryauthorization.v1.ValidationHelperV1.ValidateAttestationOccurrence].

ValidateAttestationOccurrenceResponse.Types

Container for nested types declared in the ValidateAttestationOccurrenceResponse message type.

ValidationHelperV1

BinAuthz Attestor verification

ValidationHelperV1.ValidationHelperV1Base

Base class for server-side implementations of ValidationHelperV1

ValidationHelperV1.ValidationHelperV1Client

Client for ValidationHelperV1

ValidationHelperV1Client

ValidationHelperV1 client wrapper, for convenient use.

ValidationHelperV1ClientBuilder

Builder class for ValidationHelperV1Client to provide simple configuration of credentials, endpoint etc.

ValidationHelperV1ClientImpl

ValidationHelperV1 client wrapper implementation, for convenient use.

ValidationHelperV1Settings

Settings for ValidationHelperV1Client instances.

Enums

AdmissionRule.Types.EnforcementMode

Defines the possible actions when a pod creation is denied by an admission rule.

AdmissionRule.Types.EvaluationMode

Attestor.AttestorTypeOneofCase

Enum of possible cases for the "attestor_type" oneof.

AttestorName.ResourceNameType

The possible contents of AttestorName.

AttestorPublicKey.PublicKeyOneofCase

Enum of possible cases for the "public_key" oneof.

PkixPublicKey.Types.SignatureAlgorithm

Represents a signature algorithm and other information necessary to verify signatures with a given public key. This is based primarily on the public key types supported by Tink's PemKeyType, which is in turn based on KMS's supported signing algorithms. See https://cloud.google.com/kms/docs/algorithms. In the future, BinAuthz might support additional public key types independently of Tink and/or KMS.