google-cloud-binary_authorization-v1beta1 0.8.0 → 0.9.0
Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: fd12a804be74f9fa22f4cc56ec9315757bebb3f734b8ddf6e1add18d82c4c24a
|
|
4
|
+
data.tar.gz: dff543bbbcde5491fade753febbd1e6c76ab0090c442e0f057020db3008c282d
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 9401bea0c9ba981e0028ad9e4342b4c1f9bd298b85cf80470f32decd4f3818e48ac47e49c9dee122d9749ab00c4fbf545d5e60031d8a01aca992a6e8b1b0422c
|
|
7
|
+
data.tar.gz: 4ed3b228c11a31732e97970c4809d85042d7656133cf4dc56919a6b9cc43ac25af1616c9848bd21273c40c8a6717316ec3b664cc78861329d6b49147c3e149be
|
|
@@ -7,7 +7,7 @@ require 'google/protobuf'
|
|
|
7
7
|
require 'google/protobuf/timestamp_pb'
|
|
8
8
|
|
|
9
9
|
|
|
10
|
-
descriptor_data = "\nLgoogle/cloud/binaryauthorization/v1beta1/continuous_validation_logging.proto\x12(google.cloud.binaryauthorization.v1beta1\x1a\x1fgoogle/protobuf/timestamp.proto\"\
|
|
10
|
+
descriptor_data = "\nLgoogle/cloud/binaryauthorization/v1beta1/continuous_validation_logging.proto\x12(google.cloud.binaryauthorization.v1beta1\x1a\x1fgoogle/protobuf/timestamp.proto\"\xea\x0e\n\x19\x43ontinuousValidationEvent\x12u\n\tpod_event\x18\x01 \x01(\x0b\x32`.google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEventH\x00\x12r\n\x12\x63onfig_error_event\x18\x04 \x01(\x0b\x32T.google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ConfigErrorEventH\x00\x1a\xaa\x0c\n\x1c\x43ontinuousValidationPodEvent\x12\x15\n\rpod_namespace\x18\x07 \x01(\t\x12\x0b\n\x03pod\x18\x01 \x01(\t\x12\x13\n\x0bpolicy_name\x18\x08 \x01(\t\x12/\n\x0b\x64\x65ploy_time\x18\x02 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12,\n\x08\x65nd_time\x18\x03 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x8a\x01\n\x07verdict\x18\x04 \x01(\x0e\x32y.google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEvent.PolicyConformanceVerdict\x12}\n\x06images\x18\x05 \x03(\x0b\x32m.google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEvent.ImageDetails\x1a\x88\x08\n\x0cImageDetails\x12\r\n\x05image\x18\x01 \x01(\t\x12\x89\x01\n\x06result\x18\x02 \x01(\x0e\x32y.google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEvent.ImageDetails.AuditResult\x12\x13\n\x0b\x64\x65scription\x18\x03 \x01(\t\x12\x90\x01\n\rcheck_results\x18\x04 \x03(\x0b\x32y.google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEvent.ImageDetails.CheckResult\x1a\xf2\x04\n\x0b\x43heckResult\x12\x17\n\x0f\x63heck_set_index\x18\x01 \x01(\t\x12\x16\n\x0e\x63heck_set_name\x18\x02 \x01(\t\x12\xa1\x01\n\x0f\x63heck_set_scope\x18\x03 \x01(\x0b\x32\x87\x01.google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEvent.ImageDetails.CheckResult.CheckSetScope\x12\x13\n\x0b\x63heck_index\x18\x04 \x01(\t\x12\x12\n\ncheck_name\x18\x05 \x01(\t\x12\x12\n\ncheck_type\x18\x06 \x01(\t\x12\x98\x01\n\x07verdict\x18\x07 \x01(\x0e\x32\x86\x01.google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEvent.ImageDetails.CheckResult.CheckVerdict\x12\x13\n\x0b\x65xplanation\x18\x08 \x01(\t\x1a^\n\rCheckSetScope\x12$\n\x1akubernetes_service_account\x18\x01 \x01(\tH\x00\x12\x1e\n\x14kubernetes_namespace\x18\x02 \x01(\tH\x00\x42\x07\n\x05scope\"A\n\x0c\x43heckVerdict\x12\x1d\n\x19\x43HECK_VERDICT_UNSPECIFIED\x10\x00\x12\x12\n\x0eNON_CONFORMANT\x10\x01\"@\n\x0b\x41uditResult\x12\x1c\n\x18\x41UDIT_RESULT_UNSPECIFIED\x10\x00\x12\t\n\x05\x41LLOW\x10\x01\x12\x08\n\x04\x44\x45NY\x10\x02\"[\n\x18PolicyConformanceVerdict\x12*\n&POLICY_CONFORMANCE_VERDICT_UNSPECIFIED\x10\x00\x12\x13\n\x0fVIOLATES_POLICY\x10\x01\x1a\'\n\x10\x43onfigErrorEvent\x12\x13\n\x0b\x64\x65scription\x18\x01 \x01(\tB\x0c\n\nevent_typeB\xb9\x02\n,com.google.cloud.binaryauthorization.v1beta1B ContinuousValidationLoggingProtoP\x01Z^cloud.google.com/go/binaryauthorization/apiv1beta1/binaryauthorizationpb;binaryauthorizationpb\xf8\x01\x01\xaa\x02(Google.Cloud.BinaryAuthorization.V1Beta1\xca\x02(Google\\Cloud\\BinaryAuthorization\\V1beta1\xea\x02+Google::Cloud::BinaryAuthorization::V1beta1b\x06proto3"
|
|
11
11
|
|
|
12
12
|
pool = Google::Protobuf::DescriptorPool.generated_pool
|
|
13
13
|
|
|
@@ -41,9 +41,12 @@ module Google
|
|
|
41
41
|
ContinuousValidationEvent = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent").msgclass
|
|
42
42
|
ContinuousValidationEvent::ContinuousValidationPodEvent = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEvent").msgclass
|
|
43
43
|
ContinuousValidationEvent::ContinuousValidationPodEvent::ImageDetails = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEvent.ImageDetails").msgclass
|
|
44
|
+
ContinuousValidationEvent::ContinuousValidationPodEvent::ImageDetails::CheckResult = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEvent.ImageDetails.CheckResult").msgclass
|
|
45
|
+
ContinuousValidationEvent::ContinuousValidationPodEvent::ImageDetails::CheckResult::CheckSetScope = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEvent.ImageDetails.CheckResult.CheckSetScope").msgclass
|
|
46
|
+
ContinuousValidationEvent::ContinuousValidationPodEvent::ImageDetails::CheckResult::CheckVerdict = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEvent.ImageDetails.CheckResult.CheckVerdict").enummodule
|
|
44
47
|
ContinuousValidationEvent::ContinuousValidationPodEvent::ImageDetails::AuditResult = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEvent.ImageDetails.AuditResult").enummodule
|
|
45
48
|
ContinuousValidationEvent::ContinuousValidationPodEvent::PolicyConformanceVerdict = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEvent.PolicyConformanceVerdict").enummodule
|
|
46
|
-
ContinuousValidationEvent::
|
|
49
|
+
ContinuousValidationEvent::ConfigErrorEvent = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ConfigErrorEvent").msgclass
|
|
47
50
|
end
|
|
48
51
|
end
|
|
49
52
|
end
|
|
@@ -25,9 +25,9 @@ module Google
|
|
|
25
25
|
# @!attribute [rw] pod_event
|
|
26
26
|
# @return [::Google::Cloud::BinaryAuthorization::V1beta1::ContinuousValidationEvent::ContinuousValidationPodEvent]
|
|
27
27
|
# Pod event.
|
|
28
|
-
# @!attribute [rw]
|
|
29
|
-
# @return [::Google::Cloud::BinaryAuthorization::V1beta1::ContinuousValidationEvent::
|
|
30
|
-
#
|
|
28
|
+
# @!attribute [rw] config_error_event
|
|
29
|
+
# @return [::Google::Cloud::BinaryAuthorization::V1beta1::ContinuousValidationEvent::ConfigErrorEvent]
|
|
30
|
+
# Config error event.
|
|
31
31
|
class ContinuousValidationEvent
|
|
32
32
|
include ::Google::Protobuf::MessageExts
|
|
33
33
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
@@ -39,6 +39,9 @@ module Google
|
|
|
39
39
|
# @!attribute [rw] pod
|
|
40
40
|
# @return [::String]
|
|
41
41
|
# The name of the Pod.
|
|
42
|
+
# @!attribute [rw] policy_name
|
|
43
|
+
# @return [::String]
|
|
44
|
+
# The name of the policy.
|
|
42
45
|
# @!attribute [rw] deploy_time
|
|
43
46
|
# @return [::Google::Protobuf::Timestamp]
|
|
44
47
|
# Deploy time of the Pod from k8s.
|
|
@@ -65,10 +68,69 @@ module Google
|
|
|
65
68
|
# @!attribute [rw] description
|
|
66
69
|
# @return [::String]
|
|
67
70
|
# Description of the above result.
|
|
71
|
+
# @!attribute [rw] check_results
|
|
72
|
+
# @return [::Array<::Google::Cloud::BinaryAuthorization::V1beta1::ContinuousValidationEvent::ContinuousValidationPodEvent::ImageDetails::CheckResult>]
|
|
73
|
+
# List of check results.
|
|
68
74
|
class ImageDetails
|
|
69
75
|
include ::Google::Protobuf::MessageExts
|
|
70
76
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
71
77
|
|
|
78
|
+
# @!attribute [rw] check_set_index
|
|
79
|
+
# @return [::String]
|
|
80
|
+
# The index of the check set.
|
|
81
|
+
# @!attribute [rw] check_set_name
|
|
82
|
+
# @return [::String]
|
|
83
|
+
# The name of the check set.
|
|
84
|
+
# @!attribute [rw] check_set_scope
|
|
85
|
+
# @return [::Google::Cloud::BinaryAuthorization::V1beta1::ContinuousValidationEvent::ContinuousValidationPodEvent::ImageDetails::CheckResult::CheckSetScope]
|
|
86
|
+
# The scope of the check set.
|
|
87
|
+
# @!attribute [rw] check_index
|
|
88
|
+
# @return [::String]
|
|
89
|
+
# The index of the check.
|
|
90
|
+
# @!attribute [rw] check_name
|
|
91
|
+
# @return [::String]
|
|
92
|
+
# The name of the check.
|
|
93
|
+
# @!attribute [rw] check_type
|
|
94
|
+
# @return [::String]
|
|
95
|
+
# The type of the check.
|
|
96
|
+
# @!attribute [rw] verdict
|
|
97
|
+
# @return [::Google::Cloud::BinaryAuthorization::V1beta1::ContinuousValidationEvent::ContinuousValidationPodEvent::ImageDetails::CheckResult::CheckVerdict]
|
|
98
|
+
# The verdict of this check.
|
|
99
|
+
# @!attribute [rw] explanation
|
|
100
|
+
# @return [::String]
|
|
101
|
+
# User-friendly explanation of this check result.
|
|
102
|
+
class CheckResult
|
|
103
|
+
include ::Google::Protobuf::MessageExts
|
|
104
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
105
|
+
|
|
106
|
+
# A scope specifier for check sets.
|
|
107
|
+
# @!attribute [rw] kubernetes_service_account
|
|
108
|
+
# @return [::String]
|
|
109
|
+
# Matches a single Kubernetes service account, e.g.
|
|
110
|
+
# 'my-namespace:my-service-account'.
|
|
111
|
+
# `kubernetes_service_account` scope is always more specific than
|
|
112
|
+
# `kubernetes_namespace` scope for the same namespace.
|
|
113
|
+
# @!attribute [rw] kubernetes_namespace
|
|
114
|
+
# @return [::String]
|
|
115
|
+
# Matches all Kubernetes service accounts in the provided
|
|
116
|
+
# namespace, unless a more specific `kubernetes_service_account`
|
|
117
|
+
# scope already matched.
|
|
118
|
+
class CheckSetScope
|
|
119
|
+
include ::Google::Protobuf::MessageExts
|
|
120
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
121
|
+
end
|
|
122
|
+
|
|
123
|
+
# Result of evaluating one check.
|
|
124
|
+
module CheckVerdict
|
|
125
|
+
# We should always have a verdict. This is an error.
|
|
126
|
+
CHECK_VERDICT_UNSPECIFIED = 0
|
|
127
|
+
|
|
128
|
+
# The check was successfully evaluated and the image did not satisfy
|
|
129
|
+
# the check.
|
|
130
|
+
NON_CONFORMANT = 1
|
|
131
|
+
end
|
|
132
|
+
end
|
|
133
|
+
|
|
72
134
|
# Result of the audit.
|
|
73
135
|
module AuditResult
|
|
74
136
|
# Unspecified result. This is an error.
|
|
@@ -92,11 +154,12 @@ module Google
|
|
|
92
154
|
end
|
|
93
155
|
end
|
|
94
156
|
|
|
95
|
-
# An event describing
|
|
157
|
+
# An event describing a user-actionable configuration issue that prevents CV
|
|
158
|
+
# from auditing.
|
|
96
159
|
# @!attribute [rw] description
|
|
97
160
|
# @return [::String]
|
|
98
|
-
# A description of the
|
|
99
|
-
class
|
|
161
|
+
# A description of the issue.
|
|
162
|
+
class ConfigErrorEvent
|
|
100
163
|
include ::Google::Protobuf::MessageExts
|
|
101
164
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
102
165
|
end
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: google-cloud-binary_authorization-v1beta1
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.
|
|
4
|
+
version: 0.9.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Google LLC
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2023-
|
|
11
|
+
date: 2023-08-16 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: gapic-common
|