google-cloud-binary_authorization-v1beta1 0.8.0 → 0.9.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: fd12a804be74f9fa22f4cc56ec9315757bebb3f734b8ddf6e1add18d82c4c24a
|
|
4
|
+
data.tar.gz: dff543bbbcde5491fade753febbd1e6c76ab0090c442e0f057020db3008c282d
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 9401bea0c9ba981e0028ad9e4342b4c1f9bd298b85cf80470f32decd4f3818e48ac47e49c9dee122d9749ab00c4fbf545d5e60031d8a01aca992a6e8b1b0422c
|
|
7
|
+
data.tar.gz: 4ed3b228c11a31732e97970c4809d85042d7656133cf4dc56919a6b9cc43ac25af1616c9848bd21273c40c8a6717316ec3b664cc78861329d6b49147c3e149be
|
|
@@ -7,7 +7,7 @@ require 'google/protobuf'
|
|
|
7
7
|
require 'google/protobuf/timestamp_pb'
|
|
8
8
|
|
|
9
9
|
|
|
10
|
-
descriptor_data = "\nLgoogle/cloud/binaryauthorization/v1beta1/continuous_validation_logging.proto\x12(google.cloud.binaryauthorization.v1beta1\x1a\x1fgoogle/protobuf/timestamp.proto\"\
|
|
10
|
+
descriptor_data = "\nLgoogle/cloud/binaryauthorization/v1beta1/continuous_validation_logging.proto\x12(google.cloud.binaryauthorization.v1beta1\x1a\x1fgoogle/protobuf/timestamp.proto\"\xea\x0e\n\x19\x43ontinuousValidationEvent\x12u\n\tpod_event\x18\x01 \x01(\x0b\x32`.google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEventH\x00\x12r\n\x12\x63onfig_error_event\x18\x04 \x01(\x0b\x32T.google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ConfigErrorEventH\x00\x1a\xaa\x0c\n\x1c\x43ontinuousValidationPodEvent\x12\x15\n\rpod_namespace\x18\x07 \x01(\t\x12\x0b\n\x03pod\x18\x01 \x01(\t\x12\x13\n\x0bpolicy_name\x18\x08 \x01(\t\x12/\n\x0b\x64\x65ploy_time\x18\x02 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12,\n\x08\x65nd_time\x18\x03 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x8a\x01\n\x07verdict\x18\x04 \x01(\x0e\x32y.google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEvent.PolicyConformanceVerdict\x12}\n\x06images\x18\x05 \x03(\x0b\x32m.google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEvent.ImageDetails\x1a\x88\x08\n\x0cImageDetails\x12\r\n\x05image\x18\x01 \x01(\t\x12\x89\x01\n\x06result\x18\x02 \x01(\x0e\x32y.google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEvent.ImageDetails.AuditResult\x12\x13\n\x0b\x64\x65scription\x18\x03 \x01(\t\x12\x90\x01\n\rcheck_results\x18\x04 \x03(\x0b\x32y.google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEvent.ImageDetails.CheckResult\x1a\xf2\x04\n\x0b\x43heckResult\x12\x17\n\x0f\x63heck_set_index\x18\x01 \x01(\t\x12\x16\n\x0e\x63heck_set_name\x18\x02 \x01(\t\x12\xa1\x01\n\x0f\x63heck_set_scope\x18\x03 \x01(\x0b\x32\x87\x01.google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEvent.ImageDetails.CheckResult.CheckSetScope\x12\x13\n\x0b\x63heck_index\x18\x04 \x01(\t\x12\x12\n\ncheck_name\x18\x05 \x01(\t\x12\x12\n\ncheck_type\x18\x06 \x01(\t\x12\x98\x01\n\x07verdict\x18\x07 \x01(\x0e\x32\x86\x01.google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEvent.ImageDetails.CheckResult.CheckVerdict\x12\x13\n\x0b\x65xplanation\x18\x08 \x01(\t\x1a^\n\rCheckSetScope\x12$\n\x1akubernetes_service_account\x18\x01 \x01(\tH\x00\x12\x1e\n\x14kubernetes_namespace\x18\x02 \x01(\tH\x00\x42\x07\n\x05scope\"A\n\x0c\x43heckVerdict\x12\x1d\n\x19\x43HECK_VERDICT_UNSPECIFIED\x10\x00\x12\x12\n\x0eNON_CONFORMANT\x10\x01\"@\n\x0b\x41uditResult\x12\x1c\n\x18\x41UDIT_RESULT_UNSPECIFIED\x10\x00\x12\t\n\x05\x41LLOW\x10\x01\x12\x08\n\x04\x44\x45NY\x10\x02\"[\n\x18PolicyConformanceVerdict\x12*\n&POLICY_CONFORMANCE_VERDICT_UNSPECIFIED\x10\x00\x12\x13\n\x0fVIOLATES_POLICY\x10\x01\x1a\'\n\x10\x43onfigErrorEvent\x12\x13\n\x0b\x64\x65scription\x18\x01 \x01(\tB\x0c\n\nevent_typeB\xb9\x02\n,com.google.cloud.binaryauthorization.v1beta1B ContinuousValidationLoggingProtoP\x01Z^cloud.google.com/go/binaryauthorization/apiv1beta1/binaryauthorizationpb;binaryauthorizationpb\xf8\x01\x01\xaa\x02(Google.Cloud.BinaryAuthorization.V1Beta1\xca\x02(Google\\Cloud\\BinaryAuthorization\\V1beta1\xea\x02+Google::Cloud::BinaryAuthorization::V1beta1b\x06proto3"
|
|
11
11
|
|
|
12
12
|
pool = Google::Protobuf::DescriptorPool.generated_pool
|
|
13
13
|
|
|
@@ -41,9 +41,12 @@ module Google
|
|
|
41
41
|
ContinuousValidationEvent = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent").msgclass
|
|
42
42
|
ContinuousValidationEvent::ContinuousValidationPodEvent = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEvent").msgclass
|
|
43
43
|
ContinuousValidationEvent::ContinuousValidationPodEvent::ImageDetails = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEvent.ImageDetails").msgclass
|
|
44
|
+
ContinuousValidationEvent::ContinuousValidationPodEvent::ImageDetails::CheckResult = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEvent.ImageDetails.CheckResult").msgclass
|
|
45
|
+
ContinuousValidationEvent::ContinuousValidationPodEvent::ImageDetails::CheckResult::CheckSetScope = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEvent.ImageDetails.CheckResult.CheckSetScope").msgclass
|
|
46
|
+
ContinuousValidationEvent::ContinuousValidationPodEvent::ImageDetails::CheckResult::CheckVerdict = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEvent.ImageDetails.CheckResult.CheckVerdict").enummodule
|
|
44
47
|
ContinuousValidationEvent::ContinuousValidationPodEvent::ImageDetails::AuditResult = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEvent.ImageDetails.AuditResult").enummodule
|
|
45
48
|
ContinuousValidationEvent::ContinuousValidationPodEvent::PolicyConformanceVerdict = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ContinuousValidationPodEvent.PolicyConformanceVerdict").enummodule
|
|
46
|
-
ContinuousValidationEvent::
|
|
49
|
+
ContinuousValidationEvent::ConfigErrorEvent = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.binaryauthorization.v1beta1.ContinuousValidationEvent.ConfigErrorEvent").msgclass
|
|
47
50
|
end
|
|
48
51
|
end
|
|
49
52
|
end
|
|
@@ -25,9 +25,9 @@ module Google
|
|
|
25
25
|
# @!attribute [rw] pod_event
|
|
26
26
|
# @return [::Google::Cloud::BinaryAuthorization::V1beta1::ContinuousValidationEvent::ContinuousValidationPodEvent]
|
|
27
27
|
# Pod event.
|
|
28
|
-
# @!attribute [rw]
|
|
29
|
-
# @return [::Google::Cloud::BinaryAuthorization::V1beta1::ContinuousValidationEvent::
|
|
30
|
-
#
|
|
28
|
+
# @!attribute [rw] config_error_event
|
|
29
|
+
# @return [::Google::Cloud::BinaryAuthorization::V1beta1::ContinuousValidationEvent::ConfigErrorEvent]
|
|
30
|
+
# Config error event.
|
|
31
31
|
class ContinuousValidationEvent
|
|
32
32
|
include ::Google::Protobuf::MessageExts
|
|
33
33
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
@@ -39,6 +39,9 @@ module Google
|
|
|
39
39
|
# @!attribute [rw] pod
|
|
40
40
|
# @return [::String]
|
|
41
41
|
# The name of the Pod.
|
|
42
|
+
# @!attribute [rw] policy_name
|
|
43
|
+
# @return [::String]
|
|
44
|
+
# The name of the policy.
|
|
42
45
|
# @!attribute [rw] deploy_time
|
|
43
46
|
# @return [::Google::Protobuf::Timestamp]
|
|
44
47
|
# Deploy time of the Pod from k8s.
|
|
@@ -65,10 +68,69 @@ module Google
|
|
|
65
68
|
# @!attribute [rw] description
|
|
66
69
|
# @return [::String]
|
|
67
70
|
# Description of the above result.
|
|
71
|
+
# @!attribute [rw] check_results
|
|
72
|
+
# @return [::Array<::Google::Cloud::BinaryAuthorization::V1beta1::ContinuousValidationEvent::ContinuousValidationPodEvent::ImageDetails::CheckResult>]
|
|
73
|
+
# List of check results.
|
|
68
74
|
class ImageDetails
|
|
69
75
|
include ::Google::Protobuf::MessageExts
|
|
70
76
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
71
77
|
|
|
78
|
+
# @!attribute [rw] check_set_index
|
|
79
|
+
# @return [::String]
|
|
80
|
+
# The index of the check set.
|
|
81
|
+
# @!attribute [rw] check_set_name
|
|
82
|
+
# @return [::String]
|
|
83
|
+
# The name of the check set.
|
|
84
|
+
# @!attribute [rw] check_set_scope
|
|
85
|
+
# @return [::Google::Cloud::BinaryAuthorization::V1beta1::ContinuousValidationEvent::ContinuousValidationPodEvent::ImageDetails::CheckResult::CheckSetScope]
|
|
86
|
+
# The scope of the check set.
|
|
87
|
+
# @!attribute [rw] check_index
|
|
88
|
+
# @return [::String]
|
|
89
|
+
# The index of the check.
|
|
90
|
+
# @!attribute [rw] check_name
|
|
91
|
+
# @return [::String]
|
|
92
|
+
# The name of the check.
|
|
93
|
+
# @!attribute [rw] check_type
|
|
94
|
+
# @return [::String]
|
|
95
|
+
# The type of the check.
|
|
96
|
+
# @!attribute [rw] verdict
|
|
97
|
+
# @return [::Google::Cloud::BinaryAuthorization::V1beta1::ContinuousValidationEvent::ContinuousValidationPodEvent::ImageDetails::CheckResult::CheckVerdict]
|
|
98
|
+
# The verdict of this check.
|
|
99
|
+
# @!attribute [rw] explanation
|
|
100
|
+
# @return [::String]
|
|
101
|
+
# User-friendly explanation of this check result.
|
|
102
|
+
class CheckResult
|
|
103
|
+
include ::Google::Protobuf::MessageExts
|
|
104
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
105
|
+
|
|
106
|
+
# A scope specifier for check sets.
|
|
107
|
+
# @!attribute [rw] kubernetes_service_account
|
|
108
|
+
# @return [::String]
|
|
109
|
+
# Matches a single Kubernetes service account, e.g.
|
|
110
|
+
# 'my-namespace:my-service-account'.
|
|
111
|
+
# `kubernetes_service_account` scope is always more specific than
|
|
112
|
+
# `kubernetes_namespace` scope for the same namespace.
|
|
113
|
+
# @!attribute [rw] kubernetes_namespace
|
|
114
|
+
# @return [::String]
|
|
115
|
+
# Matches all Kubernetes service accounts in the provided
|
|
116
|
+
# namespace, unless a more specific `kubernetes_service_account`
|
|
117
|
+
# scope already matched.
|
|
118
|
+
class CheckSetScope
|
|
119
|
+
include ::Google::Protobuf::MessageExts
|
|
120
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
121
|
+
end
|
|
122
|
+
|
|
123
|
+
# Result of evaluating one check.
|
|
124
|
+
module CheckVerdict
|
|
125
|
+
# We should always have a verdict. This is an error.
|
|
126
|
+
CHECK_VERDICT_UNSPECIFIED = 0
|
|
127
|
+
|
|
128
|
+
# The check was successfully evaluated and the image did not satisfy
|
|
129
|
+
# the check.
|
|
130
|
+
NON_CONFORMANT = 1
|
|
131
|
+
end
|
|
132
|
+
end
|
|
133
|
+
|
|
72
134
|
# Result of the audit.
|
|
73
135
|
module AuditResult
|
|
74
136
|
# Unspecified result. This is an error.
|
|
@@ -92,11 +154,12 @@ module Google
|
|
|
92
154
|
end
|
|
93
155
|
end
|
|
94
156
|
|
|
95
|
-
# An event describing
|
|
157
|
+
# An event describing a user-actionable configuration issue that prevents CV
|
|
158
|
+
# from auditing.
|
|
96
159
|
# @!attribute [rw] description
|
|
97
160
|
# @return [::String]
|
|
98
|
-
# A description of the
|
|
99
|
-
class
|
|
161
|
+
# A description of the issue.
|
|
162
|
+
class ConfigErrorEvent
|
|
100
163
|
include ::Google::Protobuf::MessageExts
|
|
101
164
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
102
165
|
end
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: google-cloud-binary_authorization-v1beta1
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.
|
|
4
|
+
version: 0.9.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Google LLC
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2023-
|
|
11
|
+
date: 2023-08-16 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: gapic-common
|