google-cloud-binary_authorization-v1beta1 0.1.0 → 0.3.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -33,3 +33,6 @@ module Google
33
33
  end
34
34
  end
35
35
  end
36
+
37
+ helper_path = ::File.join __dir__, "v1beta1", "_helpers.rb"
38
+ require "google/cloud/binary_authorization/v1beta1/_helpers" if ::File.file? helper_path
@@ -66,7 +66,7 @@ module Google
66
66
  parent_config = while namespace.any?
67
67
  parent_name = namespace.join "::"
68
68
  parent_const = const_get parent_name
69
- break parent_const.configure if parent_const&.respond_to? :configure
69
+ break parent_const.configure if parent_const.respond_to? :configure
70
70
  namespace.pop
71
71
  end
72
72
  default_config = Client::Configuration.new parent_config
@@ -74,17 +74,17 @@ module Google
74
74
  default_config.rpcs.get_policy.timeout = 600.0
75
75
  default_config.rpcs.get_policy.retry_policy = {
76
76
  initial_delay: 0.1,
77
- max_delay: 60.0,
78
- multiplier: 1.3,
79
- retry_codes: [4, 14]
77
+ max_delay: 60.0,
78
+ multiplier: 1.3,
79
+ retry_codes: [4, 14]
80
80
  }
81
81
 
82
82
  default_config.rpcs.update_policy.timeout = 600.0
83
83
  default_config.rpcs.update_policy.retry_policy = {
84
84
  initial_delay: 0.1,
85
- max_delay: 60.0,
86
- multiplier: 1.3,
87
- retry_codes: [4, 14]
85
+ max_delay: 60.0,
86
+ multiplier: 1.3,
87
+ retry_codes: [4, 14]
88
88
  }
89
89
 
90
90
  default_config.rpcs.create_attestor.timeout = 600.0
@@ -92,33 +92,33 @@ module Google
92
92
  default_config.rpcs.get_attestor.timeout = 600.0
93
93
  default_config.rpcs.get_attestor.retry_policy = {
94
94
  initial_delay: 0.1,
95
- max_delay: 60.0,
96
- multiplier: 1.3,
97
- retry_codes: [4, 14]
95
+ max_delay: 60.0,
96
+ multiplier: 1.3,
97
+ retry_codes: [4, 14]
98
98
  }
99
99
 
100
100
  default_config.rpcs.update_attestor.timeout = 600.0
101
101
  default_config.rpcs.update_attestor.retry_policy = {
102
102
  initial_delay: 0.1,
103
- max_delay: 60.0,
104
- multiplier: 1.3,
105
- retry_codes: [4, 14]
103
+ max_delay: 60.0,
104
+ multiplier: 1.3,
105
+ retry_codes: [4, 14]
106
106
  }
107
107
 
108
108
  default_config.rpcs.list_attestors.timeout = 600.0
109
109
  default_config.rpcs.list_attestors.retry_policy = {
110
110
  initial_delay: 0.1,
111
- max_delay: 60.0,
112
- multiplier: 1.3,
113
- retry_codes: [4, 14]
111
+ max_delay: 60.0,
112
+ multiplier: 1.3,
113
+ retry_codes: [4, 14]
114
114
  }
115
115
 
116
116
  default_config.rpcs.delete_attestor.timeout = 600.0
117
117
  default_config.rpcs.delete_attestor.retry_policy = {
118
118
  initial_delay: 0.1,
119
- max_delay: 60.0,
120
- multiplier: 1.3,
121
- retry_codes: [4, 14]
119
+ max_delay: 60.0,
120
+ multiplier: 1.3,
121
+ retry_codes: [4, 14]
122
122
  }
123
123
 
124
124
  default_config
@@ -182,7 +182,13 @@ module Google
182
182
 
183
183
  # Create credentials
184
184
  credentials = @config.credentials
185
- credentials ||= Credentials.default scope: @config.scope
185
+ # Use self-signed JWT if the scope and endpoint are unchanged from default,
186
+ # but only if the default endpoint does not have a region prefix.
187
+ enable_self_signed_jwt = @config.scope == Client.configure.scope &&
188
+ @config.endpoint == Client.configure.endpoint &&
189
+ !@config.endpoint.split(".").first.include?("-")
190
+ credentials ||= Credentials.default scope: @config.scope,
191
+ enable_self_signed_jwt: enable_self_signed_jwt
186
192
  if credentials.is_a?(String) || credentials.is_a?(Hash)
187
193
  credentials = Credentials.new credentials, scope: @config.scope
188
194
  end
@@ -201,13 +207,16 @@ module Google
201
207
  # Service calls
202
208
 
203
209
  ##
204
- # A {::Google::Cloud::BinaryAuthorization::V1beta1::Policy policy} specifies the {::Google::Cloud::BinaryAuthorization::V1beta1::Attestor attestors} that must attest to
205
- # a container image, before the project is allowed to deploy that
210
+ # A {::Google::Cloud::BinaryAuthorization::V1beta1::Policy policy} specifies the
211
+ # {::Google::Cloud::BinaryAuthorization::V1beta1::Attestor attestors} that must
212
+ # attest to a container image, before the project is allowed to deploy that
206
213
  # image. There is at most one policy per project. All image admission
207
214
  # requests are permitted if a project has no policy.
208
215
  #
209
- # Gets the {::Google::Cloud::BinaryAuthorization::V1beta1::Policy policy} for this project. Returns a default
210
- # {::Google::Cloud::BinaryAuthorization::V1beta1::Policy policy} if the project does not have one.
216
+ # Gets the {::Google::Cloud::BinaryAuthorization::V1beta1::Policy policy} for this
217
+ # project. Returns a default
218
+ # {::Google::Cloud::BinaryAuthorization::V1beta1::Policy policy} if the project
219
+ # does not have one.
211
220
  #
212
221
  # @overload get_policy(request, options = nil)
213
222
  # Pass arguments to `get_policy` via a request object, either of type
@@ -225,8 +234,9 @@ module Google
225
234
  # the default parameter values, pass an empty Hash as a request object (see above).
226
235
  #
227
236
  # @param name [::String]
228
- # Required. The resource name of the {::Google::Cloud::BinaryAuthorization::V1beta1::Policy policy} to retrieve,
229
- # in the format `projects/*/policy`.
237
+ # Required. The resource name of the
238
+ # {::Google::Cloud::BinaryAuthorization::V1beta1::Policy policy} to retrieve, in
239
+ # the format `projects/*/policy`.
230
240
  #
231
241
  # @yield [response, operation] Access the result along with the RPC operation
232
242
  # @yieldparam response [::Google::Cloud::BinaryAuthorization::V1beta1::Policy]
@@ -274,11 +284,13 @@ module Google
274
284
  end
275
285
 
276
286
  ##
277
- # Creates or updates a project's {::Google::Cloud::BinaryAuthorization::V1beta1::Policy policy}, and returns a copy of the
278
- # new {::Google::Cloud::BinaryAuthorization::V1beta1::Policy policy}. A policy is always updated as a whole, to avoid race
279
- # conditions with concurrent policy enforcement (or management!)
280
- # requests. Returns NOT_FOUND if the project does not exist, INVALID_ARGUMENT
281
- # if the request is malformed.
287
+ # Creates or updates a project's
288
+ # {::Google::Cloud::BinaryAuthorization::V1beta1::Policy policy}, and returns a
289
+ # copy of the new {::Google::Cloud::BinaryAuthorization::V1beta1::Policy policy}.
290
+ # A policy is always updated as a whole, to avoid race conditions with
291
+ # concurrent policy enforcement (or management!) requests. Returns NOT_FOUND
292
+ # if the project does not exist, INVALID_ARGUMENT if the request is
293
+ # malformed.
282
294
  #
283
295
  # @overload update_policy(request, options = nil)
284
296
  # Pass arguments to `update_policy` via a request object, either of type
@@ -296,9 +308,11 @@ module Google
296
308
  # the default parameter values, pass an empty Hash as a request object (see above).
297
309
  #
298
310
  # @param policy [::Google::Cloud::BinaryAuthorization::V1beta1::Policy, ::Hash]
299
- # Required. A new or updated {::Google::Cloud::BinaryAuthorization::V1beta1::Policy policy} value. The service will
300
- # overwrite the {::Google::Cloud::BinaryAuthorization::V1beta1::Policy#name policy name} field with the resource name in
301
- # the request URL, in the format `projects/*/policy`.
311
+ # Required. A new or updated
312
+ # {::Google::Cloud::BinaryAuthorization::V1beta1::Policy policy} value. The
313
+ # service will overwrite the [policy
314
+ # name][google.cloud.binaryauthorization.v1beta1.Policy.name] field with the
315
+ # resource name in the request URL, in the format `projects/*/policy`.
302
316
  #
303
317
  # @yield [response, operation] Access the result along with the RPC operation
304
318
  # @yieldparam response [::Google::Cloud::BinaryAuthorization::V1beta1::Policy]
@@ -346,10 +360,13 @@ module Google
346
360
  end
347
361
 
348
362
  ##
349
- # Creates an {::Google::Cloud::BinaryAuthorization::V1beta1::Attestor attestor}, and returns a copy of the new
350
- # {::Google::Cloud::BinaryAuthorization::V1beta1::Attestor attestor}. Returns NOT_FOUND if the project does not exist,
351
- # INVALID_ARGUMENT if the request is malformed, ALREADY_EXISTS if the
352
- # {::Google::Cloud::BinaryAuthorization::V1beta1::Attestor attestor} already exists.
363
+ # Creates an {::Google::Cloud::BinaryAuthorization::V1beta1::Attestor attestor},
364
+ # and returns a copy of the new
365
+ # {::Google::Cloud::BinaryAuthorization::V1beta1::Attestor attestor}. Returns
366
+ # NOT_FOUND if the project does not exist, INVALID_ARGUMENT if the request is
367
+ # malformed, ALREADY_EXISTS if the
368
+ # {::Google::Cloud::BinaryAuthorization::V1beta1::Attestor attestor} already
369
+ # exists.
353
370
  #
354
371
  # @overload create_attestor(request, options = nil)
355
372
  # Pass arguments to `create_attestor` via a request object, either of type
@@ -367,13 +384,17 @@ module Google
367
384
  # the default parameter values, pass an empty Hash as a request object (see above).
368
385
  #
369
386
  # @param parent [::String]
370
- # Required. The parent of this {::Google::Cloud::BinaryAuthorization::V1beta1::Attestor attestor}.
387
+ # Required. The parent of this
388
+ # {::Google::Cloud::BinaryAuthorization::V1beta1::Attestor attestor}.
371
389
  # @param attestor_id [::String]
372
- # Required. The {::Google::Cloud::BinaryAuthorization::V1beta1::Attestor attestors} ID.
390
+ # Required. The
391
+ # {::Google::Cloud::BinaryAuthorization::V1beta1::Attestor attestors} ID.
373
392
  # @param attestor [::Google::Cloud::BinaryAuthorization::V1beta1::Attestor, ::Hash]
374
- # Required. The initial {::Google::Cloud::BinaryAuthorization::V1beta1::Attestor attestor} value. The service will
375
- # overwrite the {::Google::Cloud::BinaryAuthorization::V1beta1::Attestor#name attestor name} field with the resource name,
376
- # in the format `projects/*/attestors/*`.
393
+ # Required. The initial
394
+ # {::Google::Cloud::BinaryAuthorization::V1beta1::Attestor attestor} value. The
395
+ # service will overwrite the [attestor
396
+ # name][google.cloud.binaryauthorization.v1beta1.Attestor.name] field with
397
+ # the resource name, in the format `projects/*/attestors/*`.
377
398
  #
378
399
  # @yield [response, operation] Access the result along with the RPC operation
379
400
  # @yieldparam response [::Google::Cloud::BinaryAuthorization::V1beta1::Attestor]
@@ -422,7 +443,9 @@ module Google
422
443
 
423
444
  ##
424
445
  # Gets an {::Google::Cloud::BinaryAuthorization::V1beta1::Attestor attestor}.
425
- # Returns NOT_FOUND if the {::Google::Cloud::BinaryAuthorization::V1beta1::Attestor attestor} does not exist.
446
+ # Returns NOT_FOUND if the
447
+ # {::Google::Cloud::BinaryAuthorization::V1beta1::Attestor attestor} does not
448
+ # exist.
426
449
  #
427
450
  # @overload get_attestor(request, options = nil)
428
451
  # Pass arguments to `get_attestor` via a request object, either of type
@@ -440,8 +463,9 @@ module Google
440
463
  # the default parameter values, pass an empty Hash as a request object (see above).
441
464
  #
442
465
  # @param name [::String]
443
- # Required. The name of the {::Google::Cloud::BinaryAuthorization::V1beta1::Attestor attestor} to retrieve, in the format
444
- # `projects/*/attestors/*`.
466
+ # Required. The name of the
467
+ # {::Google::Cloud::BinaryAuthorization::V1beta1::Attestor attestor} to retrieve,
468
+ # in the format `projects/*/attestors/*`.
445
469
  #
446
470
  # @yield [response, operation] Access the result along with the RPC operation
447
471
  # @yieldparam response [::Google::Cloud::BinaryAuthorization::V1beta1::Attestor]
@@ -490,7 +514,9 @@ module Google
490
514
 
491
515
  ##
492
516
  # Updates an {::Google::Cloud::BinaryAuthorization::V1beta1::Attestor attestor}.
493
- # Returns NOT_FOUND if the {::Google::Cloud::BinaryAuthorization::V1beta1::Attestor attestor} does not exist.
517
+ # Returns NOT_FOUND if the
518
+ # {::Google::Cloud::BinaryAuthorization::V1beta1::Attestor attestor} does not
519
+ # exist.
494
520
  #
495
521
  # @overload update_attestor(request, options = nil)
496
522
  # Pass arguments to `update_attestor` via a request object, either of type
@@ -508,9 +534,12 @@ module Google
508
534
  # the default parameter values, pass an empty Hash as a request object (see above).
509
535
  #
510
536
  # @param attestor [::Google::Cloud::BinaryAuthorization::V1beta1::Attestor, ::Hash]
511
- # Required. The updated {::Google::Cloud::BinaryAuthorization::V1beta1::Attestor attestor} value. The service will
512
- # overwrite the {::Google::Cloud::BinaryAuthorization::V1beta1::Attestor#name attestor name} field with the resource name
513
- # in the request URL, in the format `projects/*/attestors/*`.
537
+ # Required. The updated
538
+ # {::Google::Cloud::BinaryAuthorization::V1beta1::Attestor attestor} value. The
539
+ # service will overwrite the [attestor
540
+ # name][google.cloud.binaryauthorization.v1beta1.Attestor.name] field with
541
+ # the resource name in the request URL, in the format
542
+ # `projects/*/attestors/*`.
514
543
  #
515
544
  # @yield [response, operation] Access the result along with the RPC operation
516
545
  # @yieldparam response [::Google::Cloud::BinaryAuthorization::V1beta1::Attestor]
@@ -578,14 +607,16 @@ module Google
578
607
  #
579
608
  # @param parent [::String]
580
609
  # Required. The resource name of the project associated with the
581
- # {::Google::Cloud::BinaryAuthorization::V1beta1::Attestor attestors}, in the format `projects/*`.
610
+ # {::Google::Cloud::BinaryAuthorization::V1beta1::Attestor attestors}, in the
611
+ # format `projects/*`.
582
612
  # @param page_size [::Integer]
583
613
  # Requested page size. The server may return fewer results than requested. If
584
614
  # unspecified, the server will pick an appropriate default.
585
615
  # @param page_token [::String]
586
616
  # A token identifying a page of results the server should return. Typically,
587
- # this is the value of {::Google::Cloud::BinaryAuthorization::V1beta1::ListAttestorsResponse#next_page_token ListAttestorsResponse.next_page_token} returned
588
- # from the previous call to the `ListAttestors` method.
617
+ # this is the value of
618
+ # {::Google::Cloud::BinaryAuthorization::V1beta1::ListAttestorsResponse#next_page_token ListAttestorsResponse.next_page_token}
619
+ # returned from the previous call to the `ListAttestors` method.
589
620
  #
590
621
  # @yield [response, operation] Access the result along with the RPC operation
591
622
  # @yieldparam response [::Gapic::PagedEnumerable<::Google::Cloud::BinaryAuthorization::V1beta1::Attestor>]
@@ -634,8 +665,10 @@ module Google
634
665
  end
635
666
 
636
667
  ##
637
- # Deletes an {::Google::Cloud::BinaryAuthorization::V1beta1::Attestor attestor}. Returns NOT_FOUND if the
638
- # {::Google::Cloud::BinaryAuthorization::V1beta1::Attestor attestor} does not exist.
668
+ # Deletes an {::Google::Cloud::BinaryAuthorization::V1beta1::Attestor attestor}.
669
+ # Returns NOT_FOUND if the
670
+ # {::Google::Cloud::BinaryAuthorization::V1beta1::Attestor attestor} does not
671
+ # exist.
639
672
  #
640
673
  # @overload delete_attestor(request, options = nil)
641
674
  # Pass arguments to `delete_attestor` via a request object, either of type
@@ -653,8 +686,9 @@ module Google
653
686
  # the default parameter values, pass an empty Hash as a request object (see above).
654
687
  #
655
688
  # @param name [::String]
656
- # Required. The name of the {::Google::Cloud::BinaryAuthorization::V1beta1::Attestor attestors} to delete, in the format
657
- # `projects/*/attestors/*`.
689
+ # Required. The name of the
690
+ # {::Google::Cloud::BinaryAuthorization::V1beta1::Attestor attestors} to delete,
691
+ # in the format `projects/*/attestors/*`.
658
692
  #
659
693
  # @yield [response, operation] Access the result along with the RPC operation
660
694
  # @yieldparam response [::Google::Protobuf::Empty]
@@ -793,7 +827,7 @@ module Google
793
827
  config_attr :scope, nil, ::String, ::Array, nil
794
828
  config_attr :lib_name, nil, ::String, nil
795
829
  config_attr :lib_version, nil, ::String, nil
796
- config_attr(:channel_args, { "grpc.service_config_disable_resolution"=>1 }, ::Hash, nil)
830
+ config_attr(:channel_args, { "grpc.service_config_disable_resolution" => 1 }, ::Hash, nil)
797
831
  config_attr :interceptors, nil, ::Array, nil
798
832
  config_attr :timeout, nil, ::Numeric, nil
799
833
  config_attr :metadata, nil, ::Hash, nil
@@ -814,7 +848,7 @@ module Google
814
848
  def rpcs
815
849
  @rpcs ||= begin
816
850
  parent_rpcs = nil
817
- parent_rpcs = @parent_config.rpcs if defined?(@parent_config) && @parent_config&.respond_to?(:rpcs)
851
+ parent_rpcs = @parent_config.rpcs if defined?(@parent_config) && @parent_config.respond_to?(:rpcs)
818
852
  Rpcs.new parent_rpcs
819
853
  end
820
854
  end
@@ -826,7 +860,7 @@ module Google
826
860
  # Each configuration object is of type `Gapic::Config::Method` and includes
827
861
  # the following configuration fields:
828
862
  #
829
- # * `timeout` (*type:* `Numeric`) - The call timeout in milliseconds
863
+ # * `timeout` (*type:* `Numeric`) - The call timeout in seconds
830
864
  # * `metadata` (*type:* `Hash{Symbol=>String}`) - Additional gRPC headers
831
865
  # * `retry_policy (*type:* `Hash`) - The retry policy. The policy fields
832
866
  # include the following keys:
@@ -875,19 +909,19 @@ module Google
875
909
 
876
910
  # @private
877
911
  def initialize parent_rpcs = nil
878
- get_policy_config = parent_rpcs&.get_policy if parent_rpcs&.respond_to? :get_policy
912
+ get_policy_config = parent_rpcs.get_policy if parent_rpcs.respond_to? :get_policy
879
913
  @get_policy = ::Gapic::Config::Method.new get_policy_config
880
- update_policy_config = parent_rpcs&.update_policy if parent_rpcs&.respond_to? :update_policy
914
+ update_policy_config = parent_rpcs.update_policy if parent_rpcs.respond_to? :update_policy
881
915
  @update_policy = ::Gapic::Config::Method.new update_policy_config
882
- create_attestor_config = parent_rpcs&.create_attestor if parent_rpcs&.respond_to? :create_attestor
916
+ create_attestor_config = parent_rpcs.create_attestor if parent_rpcs.respond_to? :create_attestor
883
917
  @create_attestor = ::Gapic::Config::Method.new create_attestor_config
884
- get_attestor_config = parent_rpcs&.get_attestor if parent_rpcs&.respond_to? :get_attestor
918
+ get_attestor_config = parent_rpcs.get_attestor if parent_rpcs.respond_to? :get_attestor
885
919
  @get_attestor = ::Gapic::Config::Method.new get_attestor_config
886
- update_attestor_config = parent_rpcs&.update_attestor if parent_rpcs&.respond_to? :update_attestor
920
+ update_attestor_config = parent_rpcs.update_attestor if parent_rpcs.respond_to? :update_attestor
887
921
  @update_attestor = ::Gapic::Config::Method.new update_attestor_config
888
- list_attestors_config = parent_rpcs&.list_attestors if parent_rpcs&.respond_to? :list_attestors
922
+ list_attestors_config = parent_rpcs.list_attestors if parent_rpcs.respond_to? :list_attestors
889
923
  @list_attestors = ::Gapic::Config::Method.new list_attestors_config
890
- delete_attestor_config = parent_rpcs&.delete_attestor if parent_rpcs&.respond_to? :delete_attestor
924
+ delete_attestor_config = parent_rpcs.delete_attestor if parent_rpcs.respond_to? :delete_attestor
891
925
  @delete_attestor = ::Gapic::Config::Method.new delete_attestor_config
892
926
 
893
927
  yield self if block_given?
@@ -21,7 +21,7 @@ module Google
21
21
  module Cloud
22
22
  module BinaryAuthorization
23
23
  module V1beta1
24
- VERSION = "0.1.0"
24
+ VERSION = "0.3.1"
25
25
  end
26
26
  end
27
27
  end
@@ -0,0 +1,55 @@
1
+ # Generated by the protocol buffer compiler. DO NOT EDIT!
2
+ # source: google/cloud/binaryauthorization/v1beta1/continuous_validation_logging.proto
3
+
4
+ require 'google/protobuf'
5
+
6
+ require 'google/protobuf/timestamp_pb'
7
+ Google::Protobuf::DescriptorPool.generated_pool.build do
8
+ add_file("google/cloud/binaryauthorization/v1beta1/continuous_validation_logging.proto", :syntax => :proto3) do
9
+ add_message "google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent" do
10
+ oneof :event_type do
11
+ optional :pod_event, :message, 1, "google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEvent"
12
+ optional :unsupported_policy_event, :message, 2, "google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.UnsupportedPolicyEvent"
13
+ end
14
+ end
15
+ add_message "google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEvent" do
16
+ optional :pod, :string, 1
17
+ optional :deploy_time, :message, 2, "google.protobuf.Timestamp"
18
+ optional :end_time, :message, 3, "google.protobuf.Timestamp"
19
+ optional :verdict, :enum, 4, "google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEvent.PolicyConformanceVerdict"
20
+ repeated :images, :message, 5, "google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEvent.ImageDetails"
21
+ end
22
+ add_message "google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEvent.ImageDetails" do
23
+ optional :image, :string, 1
24
+ optional :result, :enum, 2, "google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEvent.ImageDetails.AuditResult"
25
+ optional :description, :string, 3
26
+ end
27
+ add_enum "google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEvent.ImageDetails.AuditResult" do
28
+ value :AUDIT_RESULT_UNSPECIFIED, 0
29
+ value :ALLOW, 1
30
+ value :DENY, 2
31
+ end
32
+ add_enum "google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEvent.PolicyConformanceVerdict" do
33
+ value :POLICY_CONFORMANCE_VERDICT_UNSPECIFIED, 0
34
+ value :VIOLATES_POLICY, 1
35
+ end
36
+ add_message "google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.UnsupportedPolicyEvent" do
37
+ optional :description, :string, 1
38
+ end
39
+ end
40
+ end
41
+
42
+ module Google
43
+ module Cloud
44
+ module BinaryAuthorization
45
+ module V1beta1
46
+ ContinuousValidationEvent = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent").msgclass
47
+ ContinuousValidationEvent::ContinuousValidationPodEvent = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEvent").msgclass
48
+ ContinuousValidationEvent::ContinuousValidationPodEvent::ImageDetails = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEvent.ImageDetails").msgclass
49
+ ContinuousValidationEvent::ContinuousValidationPodEvent::ImageDetails::AuditResult = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEvent.ImageDetails.AuditResult").enummodule
50
+ ContinuousValidationEvent::ContinuousValidationPodEvent::PolicyConformanceVerdict = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEvent.PolicyConformanceVerdict").enummodule
51
+ ContinuousValidationEvent::UnsupportedPolicyEvent = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.UnsupportedPolicyEvent").msgclass
52
+ end
53
+ end
54
+ end
55
+ end
@@ -3,10 +3,10 @@
3
3
 
4
4
  require 'google/protobuf'
5
5
 
6
+ require 'google/api/annotations_pb'
6
7
  require 'google/api/field_behavior_pb'
7
8
  require 'google/api/resource_pb'
8
9
  require 'google/protobuf/timestamp_pb'
9
- require 'google/api/annotations_pb'
10
10
  Google::Protobuf::DescriptorPool.generated_pool.build do
11
11
  add_file("google/cloud/binaryauthorization/v1beta1/resources.proto", :syntax => :proto3) do
12
12
  add_message "google.cloud.binaryauthorization.v1beta1.Policy" do
@@ -36,42 +36,56 @@ module Google
36
36
  # * [Attestor][google.cloud.binaryauthorization.v1beta1.Attestor]
37
37
  class Service
38
38
 
39
- include GRPC::GenericService
39
+ include ::GRPC::GenericService
40
40
 
41
41
  self.marshal_class_method = :encode
42
42
  self.unmarshal_class_method = :decode
43
43
  self.service_name = 'google.cloud.binaryauthorization.v1beta1.BinauthzManagementServiceV1Beta1'
44
44
 
45
- # A [policy][google.cloud.binaryauthorization.v1beta1.Policy] specifies the [attestors][google.cloud.binaryauthorization.v1beta1.Attestor] that must attest to
46
- # a container image, before the project is allowed to deploy that
45
+ # A [policy][google.cloud.binaryauthorization.v1beta1.Policy] specifies the
46
+ # [attestors][google.cloud.binaryauthorization.v1beta1.Attestor] that must
47
+ # attest to a container image, before the project is allowed to deploy that
47
48
  # image. There is at most one policy per project. All image admission
48
49
  # requests are permitted if a project has no policy.
49
50
  #
50
- # Gets the [policy][google.cloud.binaryauthorization.v1beta1.Policy] for this project. Returns a default
51
- # [policy][google.cloud.binaryauthorization.v1beta1.Policy] if the project does not have one.
51
+ # Gets the [policy][google.cloud.binaryauthorization.v1beta1.Policy] for this
52
+ # project. Returns a default
53
+ # [policy][google.cloud.binaryauthorization.v1beta1.Policy] if the project
54
+ # does not have one.
52
55
  rpc :GetPolicy, ::Google::Cloud::BinaryAuthorization::V1beta1::GetPolicyRequest, ::Google::Cloud::BinaryAuthorization::V1beta1::Policy
53
- # Creates or updates a project's [policy][google.cloud.binaryauthorization.v1beta1.Policy], and returns a copy of the
54
- # new [policy][google.cloud.binaryauthorization.v1beta1.Policy]. A policy is always updated as a whole, to avoid race
55
- # conditions with concurrent policy enforcement (or management!)
56
- # requests. Returns NOT_FOUND if the project does not exist, INVALID_ARGUMENT
57
- # if the request is malformed.
56
+ # Creates or updates a project's
57
+ # [policy][google.cloud.binaryauthorization.v1beta1.Policy], and returns a
58
+ # copy of the new [policy][google.cloud.binaryauthorization.v1beta1.Policy].
59
+ # A policy is always updated as a whole, to avoid race conditions with
60
+ # concurrent policy enforcement (or management!) requests. Returns NOT_FOUND
61
+ # if the project does not exist, INVALID_ARGUMENT if the request is
62
+ # malformed.
58
63
  rpc :UpdatePolicy, ::Google::Cloud::BinaryAuthorization::V1beta1::UpdatePolicyRequest, ::Google::Cloud::BinaryAuthorization::V1beta1::Policy
59
- # Creates an [attestor][google.cloud.binaryauthorization.v1beta1.Attestor], and returns a copy of the new
60
- # [attestor][google.cloud.binaryauthorization.v1beta1.Attestor]. Returns NOT_FOUND if the project does not exist,
61
- # INVALID_ARGUMENT if the request is malformed, ALREADY_EXISTS if the
62
- # [attestor][google.cloud.binaryauthorization.v1beta1.Attestor] already exists.
64
+ # Creates an [attestor][google.cloud.binaryauthorization.v1beta1.Attestor],
65
+ # and returns a copy of the new
66
+ # [attestor][google.cloud.binaryauthorization.v1beta1.Attestor]. Returns
67
+ # NOT_FOUND if the project does not exist, INVALID_ARGUMENT if the request is
68
+ # malformed, ALREADY_EXISTS if the
69
+ # [attestor][google.cloud.binaryauthorization.v1beta1.Attestor] already
70
+ # exists.
63
71
  rpc :CreateAttestor, ::Google::Cloud::BinaryAuthorization::V1beta1::CreateAttestorRequest, ::Google::Cloud::BinaryAuthorization::V1beta1::Attestor
64
72
  # Gets an [attestor][google.cloud.binaryauthorization.v1beta1.Attestor].
65
- # Returns NOT_FOUND if the [attestor][google.cloud.binaryauthorization.v1beta1.Attestor] does not exist.
73
+ # Returns NOT_FOUND if the
74
+ # [attestor][google.cloud.binaryauthorization.v1beta1.Attestor] does not
75
+ # exist.
66
76
  rpc :GetAttestor, ::Google::Cloud::BinaryAuthorization::V1beta1::GetAttestorRequest, ::Google::Cloud::BinaryAuthorization::V1beta1::Attestor
67
77
  # Updates an [attestor][google.cloud.binaryauthorization.v1beta1.Attestor].
68
- # Returns NOT_FOUND if the [attestor][google.cloud.binaryauthorization.v1beta1.Attestor] does not exist.
78
+ # Returns NOT_FOUND if the
79
+ # [attestor][google.cloud.binaryauthorization.v1beta1.Attestor] does not
80
+ # exist.
69
81
  rpc :UpdateAttestor, ::Google::Cloud::BinaryAuthorization::V1beta1::UpdateAttestorRequest, ::Google::Cloud::BinaryAuthorization::V1beta1::Attestor
70
82
  # Lists [attestors][google.cloud.binaryauthorization.v1beta1.Attestor].
71
83
  # Returns INVALID_ARGUMENT if the project does not exist.
72
84
  rpc :ListAttestors, ::Google::Cloud::BinaryAuthorization::V1beta1::ListAttestorsRequest, ::Google::Cloud::BinaryAuthorization::V1beta1::ListAttestorsResponse
73
- # Deletes an [attestor][google.cloud.binaryauthorization.v1beta1.Attestor]. Returns NOT_FOUND if the
74
- # [attestor][google.cloud.binaryauthorization.v1beta1.Attestor] does not exist.
85
+ # Deletes an [attestor][google.cloud.binaryauthorization.v1beta1.Attestor].
86
+ # Returns NOT_FOUND if the
87
+ # [attestor][google.cloud.binaryauthorization.v1beta1.Attestor] does not
88
+ # exist.
75
89
  rpc :DeleteAttestor, ::Google::Cloud::BinaryAuthorization::V1beta1::DeleteAttestorRequest, ::Google::Protobuf::Empty
76
90
  end
77
91