google-apis-binaryauthorization_v1 0.33.0 → 0.34.0

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: e51a9140378f94c47bfbf9ec2025883b527d975456970e103855fbbb813f2166
4
- data.tar.gz: 453a3ca9e31a9402156e20324f7ce676a4687251e1f0b5b98569845e61f2cbea
3
+ metadata.gz: 1d7311ba3619e22642ab22a0af0bba4aa55fa02a29c7126d8774d695d9b9e2ff
4
+ data.tar.gz: fd84c69c186062b45e52989db6730c087801105a4a8a6273704333b48b37ecfb
5
5
  SHA512:
6
- metadata.gz: c0565bb75d4840228b6533b1241bed5060dfb7638b0eeab375bde8f601b61382e7942441e35b8c5c02dd244c4743276abc73b5ec6067343690e88a3a4ae5a88a
7
- data.tar.gz: 582f0c1a74bce0f40ad4a2353904ea201075ef0a757a8e47ab5e4b8fb8564a2d63eb1c0da6b03ae156e6c2c361a326100b2e30c4cda9ed5df87895ba9263f749
6
+ metadata.gz: 0fbeab4bb0f747e0bfdf09efaf44074587bbca7e3ad99f5942d828aa790b772ab07e259ca98076ed7816d69b7c305fb0f977238b61d19c337993720de4906926
7
+ data.tar.gz: 98a85cd07d8705853824f182f462689f8fcb8e6bbf08f7c29b4e65694727d3e7095db55073fd9e37ef3f5a3ddedd9946d3762c2215c7fdbd49e4134a98c4eaff
data/CHANGELOG.md CHANGED
@@ -1,5 +1,9 @@
1
1
  # Release history for google-apis-binaryauthorization_v1
2
2
 
3
+ ### v0.34.0 (2024-02-23)
4
+
5
+ * Regenerated from discovery document revision 20240220
6
+
3
7
  ### v0.33.0 (2024-02-18)
4
8
 
5
9
  * Regenerated from discovery document revision 20240209
data/OVERVIEW.md CHANGED
@@ -83,9 +83,9 @@ The [product documentation](https://cloud.google.com/binary-authorization/) may
83
83
 
84
84
  ## Supported Ruby versions
85
85
 
86
- This library is supported on Ruby 2.5+.
86
+ This library is supported on Ruby 2.7+.
87
87
 
88
- Google provides official support for Ruby versions that are actively supported by Ruby Core -- that is, Ruby versions that are either in normal maintenance or in security maintenance, and not end of life. Currently, this means Ruby 2.5 and later. Older versions of Ruby _may_ still work, but are unsupported and not recommended. See https://www.ruby-lang.org/en/downloads/branches/ for details about the Ruby support schedule.
88
+ Google provides official support for Ruby versions that are actively supported by Ruby Core -- that is, Ruby versions that are either in normal maintenance or in security maintenance, and not end of life. Older versions of Ruby _may_ still work, but are unsupported and not recommended. See https://www.ruby-lang.org/en/downloads/branches/ for details about the Ruby support schedule.
89
89
 
90
90
  ## License
91
91
 
@@ -84,6 +84,25 @@ module Google
84
84
  end
85
85
  end
86
86
 
87
+ # Result of evaluating an image name allowlist.
88
+ class AllowlistResult
89
+ include Google::Apis::Core::Hashable
90
+
91
+ # The allowlist pattern that the image matched.
92
+ # Corresponds to the JSON property `matchedPattern`
93
+ # @return [String]
94
+ attr_accessor :matched_pattern
95
+
96
+ def initialize(**args)
97
+ update!(**args)
98
+ end
99
+
100
+ # Update properties of this object
101
+ def update!(**args)
102
+ @matched_pattern = args[:matched_pattern] if args.key?(:matched_pattern)
103
+ end
104
+ end
105
+
87
106
  # An attestation authenticator that will be used to verify attestations.
88
107
  # Typically this is just a set of public keys. Conceptually, an authenticator
89
108
  # can be treated as always returning either "authenticated" or "not
@@ -469,6 +488,74 @@ module Google
469
488
  end
470
489
  end
471
490
 
491
+ # Result of evaluating one check.
492
+ class CheckResult
493
+ include Google::Apis::Core::Hashable
494
+
495
+ # Result of evaluating an image name allowlist.
496
+ # Corresponds to the JSON property `allowlistResult`
497
+ # @return [Google::Apis::BinaryauthorizationV1::AllowlistResult]
498
+ attr_accessor :allowlist_result
499
+
500
+ # The name of the check.
501
+ # Corresponds to the JSON property `displayName`
502
+ # @return [String]
503
+ attr_accessor :display_name
504
+
505
+ # Result of evaluating one check.
506
+ # Corresponds to the JSON property `evaluationResult`
507
+ # @return [Google::Apis::BinaryauthorizationV1::EvaluationResult]
508
+ attr_accessor :evaluation_result
509
+
510
+ # Explanation of this check result.
511
+ # Corresponds to the JSON property `explanation`
512
+ # @return [String]
513
+ attr_accessor :explanation
514
+
515
+ # The index of the check.
516
+ # Corresponds to the JSON property `index`
517
+ # @return [Fixnum]
518
+ attr_accessor :index
519
+
520
+ # The type of the check.
521
+ # Corresponds to the JSON property `type`
522
+ # @return [String]
523
+ attr_accessor :type
524
+
525
+ def initialize(**args)
526
+ update!(**args)
527
+ end
528
+
529
+ # Update properties of this object
530
+ def update!(**args)
531
+ @allowlist_result = args[:allowlist_result] if args.key?(:allowlist_result)
532
+ @display_name = args[:display_name] if args.key?(:display_name)
533
+ @evaluation_result = args[:evaluation_result] if args.key?(:evaluation_result)
534
+ @explanation = args[:explanation] if args.key?(:explanation)
535
+ @index = args[:index] if args.key?(:index)
536
+ @type = args[:type] if args.key?(:type)
537
+ end
538
+ end
539
+
540
+ # Result of evaluating one or more checks.
541
+ class CheckResults
542
+ include Google::Apis::Core::Hashable
543
+
544
+ # Per-check details.
545
+ # Corresponds to the JSON property `results`
546
+ # @return [Array<Google::Apis::BinaryauthorizationV1::CheckResult>]
547
+ attr_accessor :results
548
+
549
+ def initialize(**args)
550
+ update!(**args)
551
+ end
552
+
553
+ # Update properties of this object
554
+ def update!(**args)
555
+ @results = args[:results] if args.key?(:results)
556
+ end
557
+ end
558
+
472
559
  # A conjunction of policy checks, scoped to a particular namespace or Kubernetes
473
560
  # service account. In order for evaluation of a `CheckSet` to return "allowed"
474
561
  # for a given image in a given Pod, one of the following conditions must be
@@ -514,6 +601,56 @@ module Google
514
601
  end
515
602
  end
516
603
 
604
+ # Result of evaluating one check set.
605
+ class CheckSetResult
606
+ include Google::Apis::Core::Hashable
607
+
608
+ # Result of evaluating an image name allowlist.
609
+ # Corresponds to the JSON property `allowlistResult`
610
+ # @return [Google::Apis::BinaryauthorizationV1::AllowlistResult]
611
+ attr_accessor :allowlist_result
612
+
613
+ # Result of evaluating one or more checks.
614
+ # Corresponds to the JSON property `checkResults`
615
+ # @return [Google::Apis::BinaryauthorizationV1::CheckResults]
616
+ attr_accessor :check_results
617
+
618
+ # The name of the check set.
619
+ # Corresponds to the JSON property `displayName`
620
+ # @return [String]
621
+ attr_accessor :display_name
622
+
623
+ # Explanation of this check set result. Only populated if no checks were
624
+ # evaluated.
625
+ # Corresponds to the JSON property `explanation`
626
+ # @return [String]
627
+ attr_accessor :explanation
628
+
629
+ # The index of the check set.
630
+ # Corresponds to the JSON property `index`
631
+ # @return [Fixnum]
632
+ attr_accessor :index
633
+
634
+ # A scope specifier for `CheckSet` objects.
635
+ # Corresponds to the JSON property `scope`
636
+ # @return [Google::Apis::BinaryauthorizationV1::Scope]
637
+ attr_accessor :scope
638
+
639
+ def initialize(**args)
640
+ update!(**args)
641
+ end
642
+
643
+ # Update properties of this object
644
+ def update!(**args)
645
+ @allowlist_result = args[:allowlist_result] if args.key?(:allowlist_result)
646
+ @check_results = args[:check_results] if args.key?(:check_results)
647
+ @display_name = args[:display_name] if args.key?(:display_name)
648
+ @explanation = args[:explanation] if args.key?(:explanation)
649
+ @index = args[:index] if args.key?(:index)
650
+ @scope = args[:scope] if args.key?(:scope)
651
+ end
652
+ end
653
+
517
654
  # A generic empty message that you can re-use to avoid defining duplicated empty
518
655
  # messages in your APIs. A typical example is to use it as the request or the
519
656
  # response type of an API method. For instance: service Foo ` rpc Bar(google.
@@ -530,6 +667,69 @@ module Google
530
667
  end
531
668
  end
532
669
 
670
+ # Request message for PlatformPolicyEvaluationService.EvaluateGkePolicy.
671
+ class EvaluateGkePolicyRequest
672
+ include Google::Apis::Core::Hashable
673
+
674
+ # Required. JSON or YAML blob representing a Kubernetes resource.
675
+ # Corresponds to the JSON property `resource`
676
+ # @return [Hash<String,Object>]
677
+ attr_accessor :resource
678
+
679
+ def initialize(**args)
680
+ update!(**args)
681
+ end
682
+
683
+ # Update properties of this object
684
+ def update!(**args)
685
+ @resource = args[:resource] if args.key?(:resource)
686
+ end
687
+ end
688
+
689
+ # Response message for PlatformPolicyEvaluationService.EvaluateGkePolicy.
690
+ class EvaluateGkePolicyResponse
691
+ include Google::Apis::Core::Hashable
692
+
693
+ # Evaluation result for each Pod contained in the request.
694
+ # Corresponds to the JSON property `results`
695
+ # @return [Array<Google::Apis::BinaryauthorizationV1::PodResult>]
696
+ attr_accessor :results
697
+
698
+ # The result of evaluating all Pods in the request.
699
+ # Corresponds to the JSON property `verdict`
700
+ # @return [String]
701
+ attr_accessor :verdict
702
+
703
+ def initialize(**args)
704
+ update!(**args)
705
+ end
706
+
707
+ # Update properties of this object
708
+ def update!(**args)
709
+ @results = args[:results] if args.key?(:results)
710
+ @verdict = args[:verdict] if args.key?(:verdict)
711
+ end
712
+ end
713
+
714
+ # Result of evaluating one check.
715
+ class EvaluationResult
716
+ include Google::Apis::Core::Hashable
717
+
718
+ # The result of evaluating this check.
719
+ # Corresponds to the JSON property `verdict`
720
+ # @return [String]
721
+ attr_accessor :verdict
722
+
723
+ def initialize(**args)
724
+ update!(**args)
725
+ end
726
+
727
+ # Update properties of this object
728
+ def update!(**args)
729
+ @verdict = args[:verdict] if args.key?(:verdict)
730
+ end
731
+ end
732
+
533
733
  # Represents a textual expression in the Common Expression Language (CEL) syntax.
534
734
  # CEL is a C-like expression language. The syntax and semantics of CEL are
535
735
  # documented at https://github.com/google/cel-spec. Example (Comparison): title:
@@ -755,6 +955,50 @@ module Google
755
955
  end
756
956
  end
757
957
 
958
+ # Result of evaluating one image.
959
+ class ImageResult
960
+ include Google::Apis::Core::Hashable
961
+
962
+ # Result of evaluating an image name allowlist.
963
+ # Corresponds to the JSON property `allowlistResult`
964
+ # @return [Google::Apis::BinaryauthorizationV1::AllowlistResult]
965
+ attr_accessor :allowlist_result
966
+
967
+ # Result of evaluating one check set.
968
+ # Corresponds to the JSON property `checkSetResult`
969
+ # @return [Google::Apis::BinaryauthorizationV1::CheckSetResult]
970
+ attr_accessor :check_set_result
971
+
972
+ # Explanation of this image result. Only populated if no check sets were
973
+ # evaluated.
974
+ # Corresponds to the JSON property `explanation`
975
+ # @return [String]
976
+ attr_accessor :explanation
977
+
978
+ # Image URI from the request.
979
+ # Corresponds to the JSON property `imageUri`
980
+ # @return [String]
981
+ attr_accessor :image_uri
982
+
983
+ # The result of evaluating this image.
984
+ # Corresponds to the JSON property `verdict`
985
+ # @return [String]
986
+ attr_accessor :verdict
987
+
988
+ def initialize(**args)
989
+ update!(**args)
990
+ end
991
+
992
+ # Update properties of this object
993
+ def update!(**args)
994
+ @allowlist_result = args[:allowlist_result] if args.key?(:allowlist_result)
995
+ @check_set_result = args[:check_set_result] if args.key?(:check_set_result)
996
+ @explanation = args[:explanation] if args.key?(:explanation)
997
+ @image_uri = args[:image_uri] if args.key?(:image_uri)
998
+ @verdict = args[:verdict] if args.key?(:verdict)
999
+ end
1000
+ end
1001
+
758
1002
  #
759
1003
  class Jwt
760
1004
  include Google::Apis::Core::Hashable
@@ -938,6 +1182,49 @@ module Google
938
1182
  end
939
1183
  end
940
1184
 
1185
+ # Result of evaluating the whole GKE policy for one Pod.
1186
+ class PodResult
1187
+ include Google::Apis::Core::Hashable
1188
+
1189
+ # Per-image details.
1190
+ # Corresponds to the JSON property `imageResults`
1191
+ # @return [Array<Google::Apis::BinaryauthorizationV1::ImageResult>]
1192
+ attr_accessor :image_results
1193
+
1194
+ # The Kubernetes namespace of the Pod.
1195
+ # Corresponds to the JSON property `kubernetesNamespace`
1196
+ # @return [String]
1197
+ attr_accessor :kubernetes_namespace
1198
+
1199
+ # The Kubernetes service account of the Pod.
1200
+ # Corresponds to the JSON property `kubernetesServiceAccount`
1201
+ # @return [String]
1202
+ attr_accessor :kubernetes_service_account
1203
+
1204
+ # The name of the Pod.
1205
+ # Corresponds to the JSON property `podName`
1206
+ # @return [String]
1207
+ attr_accessor :pod_name
1208
+
1209
+ # The result of evaluating this Pod.
1210
+ # Corresponds to the JSON property `verdict`
1211
+ # @return [String]
1212
+ attr_accessor :verdict
1213
+
1214
+ def initialize(**args)
1215
+ update!(**args)
1216
+ end
1217
+
1218
+ # Update properties of this object
1219
+ def update!(**args)
1220
+ @image_results = args[:image_results] if args.key?(:image_results)
1221
+ @kubernetes_namespace = args[:kubernetes_namespace] if args.key?(:kubernetes_namespace)
1222
+ @kubernetes_service_account = args[:kubernetes_service_account] if args.key?(:kubernetes_service_account)
1223
+ @pod_name = args[:pod_name] if args.key?(:pod_name)
1224
+ @verdict = args[:verdict] if args.key?(:verdict)
1225
+ end
1226
+ end
1227
+
941
1228
  # A policy for container image binary authorization.
942
1229
  class Policy
943
1230
  include Google::Apis::Core::Hashable
@@ -16,13 +16,13 @@ module Google
16
16
  module Apis
17
17
  module BinaryauthorizationV1
18
18
  # Version of the google-apis-binaryauthorization_v1 gem
19
- GEM_VERSION = "0.33.0"
19
+ GEM_VERSION = "0.34.0"
20
20
 
21
21
  # Version of the code generator used to generate this client
22
22
  GENERATOR_VERSION = "0.13.1"
23
23
 
24
24
  # Revision of the discovery document this client was generated from
25
- REVISION = "20240209"
25
+ REVISION = "20240220"
26
26
  end
27
27
  end
28
28
  end
@@ -34,6 +34,12 @@ module Google
34
34
  include Google::Apis::Core::JsonObjectSupport
35
35
  end
36
36
 
37
+ class AllowlistResult
38
+ class Representation < Google::Apis::Core::JsonRepresentation; end
39
+
40
+ include Google::Apis::Core::JsonObjectSupport
41
+ end
42
+
37
43
  class AttestationAuthenticator
38
44
  class Representation < Google::Apis::Core::JsonRepresentation; end
39
45
 
@@ -76,18 +82,54 @@ module Google
76
82
  include Google::Apis::Core::JsonObjectSupport
77
83
  end
78
84
 
85
+ class CheckResult
86
+ class Representation < Google::Apis::Core::JsonRepresentation; end
87
+
88
+ include Google::Apis::Core::JsonObjectSupport
89
+ end
90
+
91
+ class CheckResults
92
+ class Representation < Google::Apis::Core::JsonRepresentation; end
93
+
94
+ include Google::Apis::Core::JsonObjectSupport
95
+ end
96
+
79
97
  class CheckSet
80
98
  class Representation < Google::Apis::Core::JsonRepresentation; end
81
99
 
82
100
  include Google::Apis::Core::JsonObjectSupport
83
101
  end
84
102
 
103
+ class CheckSetResult
104
+ class Representation < Google::Apis::Core::JsonRepresentation; end
105
+
106
+ include Google::Apis::Core::JsonObjectSupport
107
+ end
108
+
85
109
  class Empty
86
110
  class Representation < Google::Apis::Core::JsonRepresentation; end
87
111
 
88
112
  include Google::Apis::Core::JsonObjectSupport
89
113
  end
90
114
 
115
+ class EvaluateGkePolicyRequest
116
+ class Representation < Google::Apis::Core::JsonRepresentation; end
117
+
118
+ include Google::Apis::Core::JsonObjectSupport
119
+ end
120
+
121
+ class EvaluateGkePolicyResponse
122
+ class Representation < Google::Apis::Core::JsonRepresentation; end
123
+
124
+ include Google::Apis::Core::JsonObjectSupport
125
+ end
126
+
127
+ class EvaluationResult
128
+ class Representation < Google::Apis::Core::JsonRepresentation; end
129
+
130
+ include Google::Apis::Core::JsonObjectSupport
131
+ end
132
+
91
133
  class Expr
92
134
  class Representation < Google::Apis::Core::JsonRepresentation; end
93
135
 
@@ -118,6 +160,12 @@ module Google
118
160
  include Google::Apis::Core::JsonObjectSupport
119
161
  end
120
162
 
163
+ class ImageResult
164
+ class Representation < Google::Apis::Core::JsonRepresentation; end
165
+
166
+ include Google::Apis::Core::JsonObjectSupport
167
+ end
168
+
121
169
  class Jwt
122
170
  class Representation < Google::Apis::Core::JsonRepresentation; end
123
171
 
@@ -154,6 +202,12 @@ module Google
154
202
  include Google::Apis::Core::JsonObjectSupport
155
203
  end
156
204
 
205
+ class PodResult
206
+ class Representation < Google::Apis::Core::JsonRepresentation; end
207
+
208
+ include Google::Apis::Core::JsonObjectSupport
209
+ end
210
+
157
211
  class Policy
158
212
  class Representation < Google::Apis::Core::JsonRepresentation; end
159
213
 
@@ -278,6 +332,13 @@ module Google
278
332
  end
279
333
  end
280
334
 
335
+ class AllowlistResult
336
+ # @private
337
+ class Representation < Google::Apis::Core::JsonRepresentation
338
+ property :matched_pattern, as: 'matchedPattern'
339
+ end
340
+ end
341
+
281
342
  class AttestationAuthenticator
282
343
  # @private
283
344
  class Representation < Google::Apis::Core::JsonRepresentation
@@ -360,6 +421,28 @@ module Google
360
421
  end
361
422
  end
362
423
 
424
+ class CheckResult
425
+ # @private
426
+ class Representation < Google::Apis::Core::JsonRepresentation
427
+ property :allowlist_result, as: 'allowlistResult', class: Google::Apis::BinaryauthorizationV1::AllowlistResult, decorator: Google::Apis::BinaryauthorizationV1::AllowlistResult::Representation
428
+
429
+ property :display_name, as: 'displayName'
430
+ property :evaluation_result, as: 'evaluationResult', class: Google::Apis::BinaryauthorizationV1::EvaluationResult, decorator: Google::Apis::BinaryauthorizationV1::EvaluationResult::Representation
431
+
432
+ property :explanation, as: 'explanation'
433
+ property :index, :numeric_string => true, as: 'index'
434
+ property :type, as: 'type'
435
+ end
436
+ end
437
+
438
+ class CheckResults
439
+ # @private
440
+ class Representation < Google::Apis::Core::JsonRepresentation
441
+ collection :results, as: 'results', class: Google::Apis::BinaryauthorizationV1::CheckResult, decorator: Google::Apis::BinaryauthorizationV1::CheckResult::Representation
442
+
443
+ end
444
+ end
445
+
363
446
  class CheckSet
364
447
  # @private
365
448
  class Representation < Google::Apis::Core::JsonRepresentation
@@ -373,12 +456,50 @@ module Google
373
456
  end
374
457
  end
375
458
 
459
+ class CheckSetResult
460
+ # @private
461
+ class Representation < Google::Apis::Core::JsonRepresentation
462
+ property :allowlist_result, as: 'allowlistResult', class: Google::Apis::BinaryauthorizationV1::AllowlistResult, decorator: Google::Apis::BinaryauthorizationV1::AllowlistResult::Representation
463
+
464
+ property :check_results, as: 'checkResults', class: Google::Apis::BinaryauthorizationV1::CheckResults, decorator: Google::Apis::BinaryauthorizationV1::CheckResults::Representation
465
+
466
+ property :display_name, as: 'displayName'
467
+ property :explanation, as: 'explanation'
468
+ property :index, :numeric_string => true, as: 'index'
469
+ property :scope, as: 'scope', class: Google::Apis::BinaryauthorizationV1::Scope, decorator: Google::Apis::BinaryauthorizationV1::Scope::Representation
470
+
471
+ end
472
+ end
473
+
376
474
  class Empty
377
475
  # @private
378
476
  class Representation < Google::Apis::Core::JsonRepresentation
379
477
  end
380
478
  end
381
479
 
480
+ class EvaluateGkePolicyRequest
481
+ # @private
482
+ class Representation < Google::Apis::Core::JsonRepresentation
483
+ hash :resource, as: 'resource'
484
+ end
485
+ end
486
+
487
+ class EvaluateGkePolicyResponse
488
+ # @private
489
+ class Representation < Google::Apis::Core::JsonRepresentation
490
+ collection :results, as: 'results', class: Google::Apis::BinaryauthorizationV1::PodResult, decorator: Google::Apis::BinaryauthorizationV1::PodResult::Representation
491
+
492
+ property :verdict, as: 'verdict'
493
+ end
494
+ end
495
+
496
+ class EvaluationResult
497
+ # @private
498
+ class Representation < Google::Apis::Core::JsonRepresentation
499
+ property :verdict, as: 'verdict'
500
+ end
501
+ end
502
+
382
503
  class Expr
383
504
  # @private
384
505
  class Representation < Google::Apis::Core::JsonRepresentation
@@ -423,6 +544,19 @@ module Google
423
544
  end
424
545
  end
425
546
 
547
+ class ImageResult
548
+ # @private
549
+ class Representation < Google::Apis::Core::JsonRepresentation
550
+ property :allowlist_result, as: 'allowlistResult', class: Google::Apis::BinaryauthorizationV1::AllowlistResult, decorator: Google::Apis::BinaryauthorizationV1::AllowlistResult::Representation
551
+
552
+ property :check_set_result, as: 'checkSetResult', class: Google::Apis::BinaryauthorizationV1::CheckSetResult, decorator: Google::Apis::BinaryauthorizationV1::CheckSetResult::Representation
553
+
554
+ property :explanation, as: 'explanation'
555
+ property :image_uri, as: 'imageUri'
556
+ property :verdict, as: 'verdict'
557
+ end
558
+ end
559
+
426
560
  class Jwt
427
561
  # @private
428
562
  class Representation < Google::Apis::Core::JsonRepresentation
@@ -476,6 +610,18 @@ module Google
476
610
  end
477
611
  end
478
612
 
613
+ class PodResult
614
+ # @private
615
+ class Representation < Google::Apis::Core::JsonRepresentation
616
+ collection :image_results, as: 'imageResults', class: Google::Apis::BinaryauthorizationV1::ImageResult, decorator: Google::Apis::BinaryauthorizationV1::ImageResult::Representation
617
+
618
+ property :kubernetes_namespace, as: 'kubernetesNamespace'
619
+ property :kubernetes_service_account, as: 'kubernetesServiceAccount'
620
+ property :pod_name, as: 'podName'
621
+ property :verdict, as: 'verdict'
622
+ end
623
+ end
624
+
479
625
  class Policy
480
626
  # @private
481
627
  class Representation < Google::Apis::Core::JsonRepresentation
@@ -455,6 +455,43 @@ module Google
455
455
  execute_or_queue_command(command, &block)
456
456
  end
457
457
 
458
+ # Evaluates a Kubernetes object versus a GKE platform policy. Returns `NOT_FOUND`
459
+ # if the policy doesn't exist, `INVALID_ARGUMENT` if the policy or request is
460
+ # malformed and `PERMISSION_DENIED` if the client does not have sufficient
461
+ # permissions.
462
+ # @param [String] name
463
+ # Required. The name of the platform policy to evaluate in the format `projects/*
464
+ # /platforms/*/policies/*`.
465
+ # @param [Google::Apis::BinaryauthorizationV1::EvaluateGkePolicyRequest] evaluate_gke_policy_request_object
466
+ # @param [String] fields
467
+ # Selector specifying which fields to include in a partial response.
468
+ # @param [String] quota_user
469
+ # Available to use for quota purposes for server-side applications. Can be any
470
+ # arbitrary string assigned to a user, but should not exceed 40 characters.
471
+ # @param [Google::Apis::RequestOptions] options
472
+ # Request-specific options
473
+ #
474
+ # @yield [result, err] Result & error if block supplied
475
+ # @yieldparam result [Google::Apis::BinaryauthorizationV1::EvaluateGkePolicyResponse] parsed result object
476
+ # @yieldparam err [StandardError] error object if request failed
477
+ #
478
+ # @return [Google::Apis::BinaryauthorizationV1::EvaluateGkePolicyResponse]
479
+ #
480
+ # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
481
+ # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
482
+ # @raise [Google::Apis::AuthorizationError] Authorization is required
483
+ def evaluate_gke_policy(name, evaluate_gke_policy_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
484
+ command = make_simple_command(:post, 'v1/{+name}:evaluate', options)
485
+ command.request_representation = Google::Apis::BinaryauthorizationV1::EvaluateGkePolicyRequest::Representation
486
+ command.request_object = evaluate_gke_policy_request_object
487
+ command.response_representation = Google::Apis::BinaryauthorizationV1::EvaluateGkePolicyResponse::Representation
488
+ command.response_class = Google::Apis::BinaryauthorizationV1::EvaluateGkePolicyResponse
489
+ command.params['name'] = name unless name.nil?
490
+ command.query['fields'] = fields unless fields.nil?
491
+ command.query['quotaUser'] = quota_user unless quota_user.nil?
492
+ execute_or_queue_command(command, &block)
493
+ end
494
+
458
495
  # Creates a platform policy, and returns a copy of it. Returns `NOT_FOUND` if
459
496
  # the project or platform doesn't exist, `INVALID_ARGUMENT` if the request is
460
497
  # malformed, `ALREADY_EXISTS` if the policy already exists, and `
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: google-apis-binaryauthorization_v1
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.33.0
4
+ version: 0.34.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Google LLC
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2024-02-18 00:00:00.000000000 Z
11
+ date: 2024-02-25 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: google-apis-core
@@ -16,7 +16,7 @@ dependencies:
16
16
  requirements:
17
17
  - - ">="
18
18
  - !ruby/object:Gem::Version
19
- version: 0.12.0
19
+ version: 0.14.0
20
20
  - - "<"
21
21
  - !ruby/object:Gem::Version
22
22
  version: 2.a
@@ -26,7 +26,7 @@ dependencies:
26
26
  requirements:
27
27
  - - ">="
28
28
  - !ruby/object:Gem::Version
29
- version: 0.12.0
29
+ version: 0.14.0
30
30
  - - "<"
31
31
  - !ruby/object:Gem::Version
32
32
  version: 2.a
@@ -58,7 +58,7 @@ licenses:
58
58
  metadata:
59
59
  bug_tracker_uri: https://github.com/googleapis/google-api-ruby-client/issues
60
60
  changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-binaryauthorization_v1/CHANGELOG.md
61
- documentation_uri: https://googleapis.dev/ruby/google-apis-binaryauthorization_v1/v0.33.0
61
+ documentation_uri: https://googleapis.dev/ruby/google-apis-binaryauthorization_v1/v0.34.0
62
62
  source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-binaryauthorization_v1
63
63
  post_install_message:
64
64
  rdoc_options: []
@@ -68,14 +68,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
68
68
  requirements:
69
69
  - - ">="
70
70
  - !ruby/object:Gem::Version
71
- version: '2.5'
71
+ version: '2.7'
72
72
  required_rubygems_version: !ruby/object:Gem::Requirement
73
73
  requirements:
74
74
  - - ">="
75
75
  - !ruby/object:Gem::Version
76
76
  version: '0'
77
77
  requirements: []
78
- rubygems_version: 3.5.3
78
+ rubygems_version: 3.5.6
79
79
  signing_key:
80
80
  specification_version: 4
81
81
  summary: Simple REST client for Binary Authorization API V1