Documentation ¶
Overview ¶
Package v1beta1 contains API Schema definitions for the accesscontextmanager v1beta1 API group. +k8s:openapi-gen=true +k8s:deepcopy-gen=package,register +k8s:conversion-gen=github.com/GoogleCloudPlatform/k8s-config-connector/pkg/clients/generated/pkg/apis/accesscontextmanager +k8s:defaulter-gen=TypeMeta +groupName=accesscontextmanager.cnrm.cloud.google.com
Index ¶
- Variables
- type AccessContextManagerAccessLevel
- type AccessContextManagerAccessLevelList
- type AccessContextManagerAccessLevelSpec
- type AccessContextManagerAccessLevelStatus
- type AccessContextManagerAccessPolicy
- type AccessContextManagerAccessPolicyList
- type AccessContextManagerAccessPolicySpec
- type AccessContextManagerAccessPolicyStatus
- type AccessContextManagerServicePerimeter
- type AccessContextManagerServicePerimeterList
- func (in *AccessContextManagerServicePerimeterList) DeepCopy() *AccessContextManagerServicePerimeterList
- func (in *AccessContextManagerServicePerimeterList) DeepCopyInto(out *AccessContextManagerServicePerimeterList)
- func (in *AccessContextManagerServicePerimeterList) DeepCopyObject() runtime.Object
- type AccessContextManagerServicePerimeterResource
- func (in *AccessContextManagerServicePerimeterResource) DeepCopy() *AccessContextManagerServicePerimeterResource
- func (in *AccessContextManagerServicePerimeterResource) DeepCopyInto(out *AccessContextManagerServicePerimeterResource)
- func (in *AccessContextManagerServicePerimeterResource) DeepCopyObject() runtime.Object
- type AccessContextManagerServicePerimeterResourceList
- func (in *AccessContextManagerServicePerimeterResourceList) DeepCopy() *AccessContextManagerServicePerimeterResourceList
- func (in *AccessContextManagerServicePerimeterResourceList) DeepCopyInto(out *AccessContextManagerServicePerimeterResourceList)
- func (in *AccessContextManagerServicePerimeterResourceList) DeepCopyObject() runtime.Object
- type AccessContextManagerServicePerimeterResourceSpec
- type AccessContextManagerServicePerimeterResourceStatus
- type AccessContextManagerServicePerimeterSpec
- type AccessContextManagerServicePerimeterStatus
- type AccesslevelBasic
- type AccesslevelConditions
- type AccesslevelCustom
- type AccesslevelDevicePolicy
- type AccesslevelExpr
- type AccesslevelMembers
- type AccesslevelOsConstraints
- type ServiceperimeterEgressFrom
- type ServiceperimeterEgressPolicies
- type ServiceperimeterEgressTo
- type ServiceperimeterIdentities
- type ServiceperimeterIngressFrom
- type ServiceperimeterIngressPolicies
- type ServiceperimeterIngressTo
- type ServiceperimeterMethodSelectors
- type ServiceperimeterOperations
- type ServiceperimeterResources
- type ServiceperimeterSources
- type ServiceperimeterSpec
- type ServiceperimeterStatus
- type ServiceperimeterVpcAccessibleServices
Constants ¶
This section is empty.
Variables ¶
var ( // SchemeGroupVersion is the group version used to register these objects. SchemeGroupVersion = schema.GroupVersion{Group: "accesscontextmanager.cnrm.cloud.google.com", Version: "v1beta1"} // SchemeBuilder is used to add go types to the GroupVersionKind scheme. SchemeBuilder = &scheme.Builder{GroupVersion: SchemeGroupVersion} // AddToScheme is a global function that registers this API group & version to a scheme AddToScheme = SchemeBuilder.AddToScheme AccessContextManagerAccessLevelGVK = schema.GroupVersionKind{ Group: SchemeGroupVersion.Group, Version: SchemeGroupVersion.Version, Kind: reflect.TypeOf(AccessContextManagerAccessLevel{}).Name(), } AccessContextManagerAccessPolicyGVK = schema.GroupVersionKind{ Group: SchemeGroupVersion.Group, Version: SchemeGroupVersion.Version, Kind: reflect.TypeOf(AccessContextManagerAccessPolicy{}).Name(), } AccessContextManagerServicePerimeterGVK = schema.GroupVersionKind{ Group: SchemeGroupVersion.Group, Version: SchemeGroupVersion.Version, Kind: reflect.TypeOf(AccessContextManagerServicePerimeter{}).Name(), } AccessContextManagerServicePerimeterResourceGVK = schema.GroupVersionKind{ Group: SchemeGroupVersion.Group, Version: SchemeGroupVersion.Version, Kind: reflect.TypeOf(AccessContextManagerServicePerimeterResource{}).Name(), } )
Functions ¶
This section is empty.
Types ¶
type AccessContextManagerAccessLevel ¶
type AccessContextManagerAccessLevel struct { metav1.TypeMeta `json:",inline"` metav1.ObjectMeta `json:"metadata,omitempty"` Spec AccessContextManagerAccessLevelSpec `json:"spec,omitempty"` Status AccessContextManagerAccessLevelStatus `json:"status,omitempty"` }
AccessContextManagerAccessLevel is the Schema for the accesscontextmanager API +k8s:openapi-gen=true
func (*AccessContextManagerAccessLevel) DeepCopy ¶
func (in *AccessContextManagerAccessLevel) DeepCopy() *AccessContextManagerAccessLevel
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AccessContextManagerAccessLevel.
func (*AccessContextManagerAccessLevel) DeepCopyInto ¶
func (in *AccessContextManagerAccessLevel) DeepCopyInto(out *AccessContextManagerAccessLevel)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*AccessContextManagerAccessLevel) DeepCopyObject ¶
func (in *AccessContextManagerAccessLevel) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
type AccessContextManagerAccessLevelList ¶
type AccessContextManagerAccessLevelList struct { metav1.TypeMeta `json:",inline"` metav1.ListMeta `json:"metadata,omitempty"` Items []AccessContextManagerAccessLevel `json:"items"` }
AccessContextManagerAccessLevelList contains a list of AccessContextManagerAccessLevel
func (*AccessContextManagerAccessLevelList) DeepCopy ¶
func (in *AccessContextManagerAccessLevelList) DeepCopy() *AccessContextManagerAccessLevelList
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AccessContextManagerAccessLevelList.
func (*AccessContextManagerAccessLevelList) DeepCopyInto ¶
func (in *AccessContextManagerAccessLevelList) DeepCopyInto(out *AccessContextManagerAccessLevelList)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*AccessContextManagerAccessLevelList) DeepCopyObject ¶
func (in *AccessContextManagerAccessLevelList) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
type AccessContextManagerAccessLevelSpec ¶
type AccessContextManagerAccessLevelSpec struct { /* The AccessContextManagerAccessPolicy this AccessContextManagerAccessLevel lives in. */ AccessPolicyRef v1alpha1.ResourceRef `json:"accessPolicyRef"` /* A set of predefined conditions for the access level and a combining function. */ // +optional Basic *AccesslevelBasic `json:"basic,omitempty"` /* Custom access level conditions are set using the Cloud Common Expression Language to represent the necessary conditions for the level to apply to a request. See CEL spec at: https://github.com/google/cel-spec. */ // +optional Custom *AccesslevelCustom `json:"custom,omitempty"` /* Description of the AccessLevel and its use. Does not affect behavior. */ // +optional Description *string `json:"description,omitempty"` /* Immutable. Optional. The name of the resource. Used for creation and acquisition. When unset, the value of `metadata.name` is used as the default. */ // +optional ResourceID *string `json:"resourceID,omitempty"` /* Human readable title. Must be unique within the Policy. */ Title string `json:"title"` }
func (*AccessContextManagerAccessLevelSpec) DeepCopy ¶
func (in *AccessContextManagerAccessLevelSpec) DeepCopy() *AccessContextManagerAccessLevelSpec
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AccessContextManagerAccessLevelSpec.
func (*AccessContextManagerAccessLevelSpec) DeepCopyInto ¶
func (in *AccessContextManagerAccessLevelSpec) DeepCopyInto(out *AccessContextManagerAccessLevelSpec)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type AccessContextManagerAccessLevelStatus ¶
type AccessContextManagerAccessLevelStatus struct { /* Conditions represent the latest available observations of the AccessContextManagerAccessLevel's current state. */ Conditions []v1alpha1.Condition `json:"conditions,omitempty"` /* ObservedGeneration is the generation of the resource that was most recently observed by the Config Connector controller. If this is equal to metadata.generation, then that means that the current reported status reflects the most recent desired state of the resource. */ // +optional ObservedGeneration *int64 `json:"observedGeneration,omitempty"` }
func (*AccessContextManagerAccessLevelStatus) DeepCopy ¶
func (in *AccessContextManagerAccessLevelStatus) DeepCopy() *AccessContextManagerAccessLevelStatus
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AccessContextManagerAccessLevelStatus.
func (*AccessContextManagerAccessLevelStatus) DeepCopyInto ¶
func (in *AccessContextManagerAccessLevelStatus) DeepCopyInto(out *AccessContextManagerAccessLevelStatus)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type AccessContextManagerAccessPolicy ¶
type AccessContextManagerAccessPolicy struct { metav1.TypeMeta `json:",inline"` metav1.ObjectMeta `json:"metadata,omitempty"` Spec AccessContextManagerAccessPolicySpec `json:"spec,omitempty"` Status AccessContextManagerAccessPolicyStatus `json:"status,omitempty"` }
AccessContextManagerAccessPolicy is the Schema for the accesscontextmanager API +k8s:openapi-gen=true
func (*AccessContextManagerAccessPolicy) DeepCopy ¶
func (in *AccessContextManagerAccessPolicy) DeepCopy() *AccessContextManagerAccessPolicy
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AccessContextManagerAccessPolicy.
func (*AccessContextManagerAccessPolicy) DeepCopyInto ¶
func (in *AccessContextManagerAccessPolicy) DeepCopyInto(out *AccessContextManagerAccessPolicy)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*AccessContextManagerAccessPolicy) DeepCopyObject ¶
func (in *AccessContextManagerAccessPolicy) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
type AccessContextManagerAccessPolicyList ¶
type AccessContextManagerAccessPolicyList struct { metav1.TypeMeta `json:",inline"` metav1.ListMeta `json:"metadata,omitempty"` Items []AccessContextManagerAccessPolicy `json:"items"` }
AccessContextManagerAccessPolicyList contains a list of AccessContextManagerAccessPolicy
func (*AccessContextManagerAccessPolicyList) DeepCopy ¶
func (in *AccessContextManagerAccessPolicyList) DeepCopy() *AccessContextManagerAccessPolicyList
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AccessContextManagerAccessPolicyList.
func (*AccessContextManagerAccessPolicyList) DeepCopyInto ¶
func (in *AccessContextManagerAccessPolicyList) DeepCopyInto(out *AccessContextManagerAccessPolicyList)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*AccessContextManagerAccessPolicyList) DeepCopyObject ¶
func (in *AccessContextManagerAccessPolicyList) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
type AccessContextManagerAccessPolicySpec ¶
type AccessContextManagerAccessPolicySpec struct { /* Immutable. Optional. The service-generated name of the resource. Used for acquisition only. Leave unset to create a new resource. */ // +optional ResourceID *string `json:"resourceID,omitempty"` /* Human readable title. Does not affect behavior. */ Title string `json:"title"` }
func (*AccessContextManagerAccessPolicySpec) DeepCopy ¶
func (in *AccessContextManagerAccessPolicySpec) DeepCopy() *AccessContextManagerAccessPolicySpec
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AccessContextManagerAccessPolicySpec.
func (*AccessContextManagerAccessPolicySpec) DeepCopyInto ¶
func (in *AccessContextManagerAccessPolicySpec) DeepCopyInto(out *AccessContextManagerAccessPolicySpec)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type AccessContextManagerAccessPolicyStatus ¶
type AccessContextManagerAccessPolicyStatus struct { /* Conditions represent the latest available observations of the AccessContextManagerAccessPolicy's current state. */ Conditions []v1alpha1.Condition `json:"conditions,omitempty"` /* Time the AccessPolicy was created in UTC. */ // +optional CreateTime *string `json:"createTime,omitempty"` /* Resource name of the AccessPolicy. Format: {policy_id}. */ // +optional Name *string `json:"name,omitempty"` /* ObservedGeneration is the generation of the resource that was most recently observed by the Config Connector controller. If this is equal to metadata.generation, then that means that the current reported status reflects the most recent desired state of the resource. */ // +optional ObservedGeneration *int64 `json:"observedGeneration,omitempty"` /* Time the AccessPolicy was updated in UTC. */ // +optional UpdateTime *string `json:"updateTime,omitempty"` }
func (*AccessContextManagerAccessPolicyStatus) DeepCopy ¶
func (in *AccessContextManagerAccessPolicyStatus) DeepCopy() *AccessContextManagerAccessPolicyStatus
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AccessContextManagerAccessPolicyStatus.
func (*AccessContextManagerAccessPolicyStatus) DeepCopyInto ¶
func (in *AccessContextManagerAccessPolicyStatus) DeepCopyInto(out *AccessContextManagerAccessPolicyStatus)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type AccessContextManagerServicePerimeter ¶
type AccessContextManagerServicePerimeter struct { metav1.TypeMeta `json:",inline"` metav1.ObjectMeta `json:"metadata,omitempty"` Spec AccessContextManagerServicePerimeterSpec `json:"spec,omitempty"` Status AccessContextManagerServicePerimeterStatus `json:"status,omitempty"` }
AccessContextManagerServicePerimeter is the Schema for the accesscontextmanager API +k8s:openapi-gen=true
func (*AccessContextManagerServicePerimeter) DeepCopy ¶
func (in *AccessContextManagerServicePerimeter) DeepCopy() *AccessContextManagerServicePerimeter
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AccessContextManagerServicePerimeter.
func (*AccessContextManagerServicePerimeter) DeepCopyInto ¶
func (in *AccessContextManagerServicePerimeter) DeepCopyInto(out *AccessContextManagerServicePerimeter)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*AccessContextManagerServicePerimeter) DeepCopyObject ¶
func (in *AccessContextManagerServicePerimeter) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
type AccessContextManagerServicePerimeterList ¶
type AccessContextManagerServicePerimeterList struct { metav1.TypeMeta `json:",inline"` metav1.ListMeta `json:"metadata,omitempty"` Items []AccessContextManagerServicePerimeter `json:"items"` }
AccessContextManagerServicePerimeterList contains a list of AccessContextManagerServicePerimeter
func (*AccessContextManagerServicePerimeterList) DeepCopy ¶
func (in *AccessContextManagerServicePerimeterList) DeepCopy() *AccessContextManagerServicePerimeterList
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AccessContextManagerServicePerimeterList.
func (*AccessContextManagerServicePerimeterList) DeepCopyInto ¶
func (in *AccessContextManagerServicePerimeterList) DeepCopyInto(out *AccessContextManagerServicePerimeterList)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*AccessContextManagerServicePerimeterList) DeepCopyObject ¶
func (in *AccessContextManagerServicePerimeterList) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
type AccessContextManagerServicePerimeterResource ¶ added in v1.114.0
type AccessContextManagerServicePerimeterResource struct { metav1.TypeMeta `json:",inline"` metav1.ObjectMeta `json:"metadata,omitempty"` Spec AccessContextManagerServicePerimeterResourceSpec `json:"spec,omitempty"` Status AccessContextManagerServicePerimeterResourceStatus `json:"status,omitempty"` }
AccessContextManagerServicePerimeterResource is the Schema for the accesscontextmanager API +k8s:openapi-gen=true
func (*AccessContextManagerServicePerimeterResource) DeepCopy ¶ added in v1.114.0
func (in *AccessContextManagerServicePerimeterResource) DeepCopy() *AccessContextManagerServicePerimeterResource
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AccessContextManagerServicePerimeterResource.
func (*AccessContextManagerServicePerimeterResource) DeepCopyInto ¶ added in v1.114.0
func (in *AccessContextManagerServicePerimeterResource) DeepCopyInto(out *AccessContextManagerServicePerimeterResource)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*AccessContextManagerServicePerimeterResource) DeepCopyObject ¶ added in v1.114.0
func (in *AccessContextManagerServicePerimeterResource) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
type AccessContextManagerServicePerimeterResourceList ¶ added in v1.114.0
type AccessContextManagerServicePerimeterResourceList struct { metav1.TypeMeta `json:",inline"` metav1.ListMeta `json:"metadata,omitempty"` Items []AccessContextManagerServicePerimeterResource `json:"items"` }
AccessContextManagerServicePerimeterResourceList contains a list of AccessContextManagerServicePerimeterResource
func (*AccessContextManagerServicePerimeterResourceList) DeepCopy ¶ added in v1.114.0
func (in *AccessContextManagerServicePerimeterResourceList) DeepCopy() *AccessContextManagerServicePerimeterResourceList
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AccessContextManagerServicePerimeterResourceList.
func (*AccessContextManagerServicePerimeterResourceList) DeepCopyInto ¶ added in v1.114.0
func (in *AccessContextManagerServicePerimeterResourceList) DeepCopyInto(out *AccessContextManagerServicePerimeterResourceList)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*AccessContextManagerServicePerimeterResourceList) DeepCopyObject ¶ added in v1.114.0
func (in *AccessContextManagerServicePerimeterResourceList) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
type AccessContextManagerServicePerimeterResourceSpec ¶ added in v1.114.0
type AccessContextManagerServicePerimeterResourceSpec struct { /* Only the `external` field is supported to configure the reference. The name of the Service Perimeter to add this resource to. Referencing a resource name leads to recursive reference and Config Connector does not support the feature for now. */ PerimeterNameRef v1alpha1.ResourceRef `json:"perimeterNameRef"` /* A GCP resource that is inside of the service perimeter. */ ResourceRef v1alpha1.ResourceRef `json:"resourceRef"` }
func (*AccessContextManagerServicePerimeterResourceSpec) DeepCopy ¶ added in v1.114.0
func (in *AccessContextManagerServicePerimeterResourceSpec) DeepCopy() *AccessContextManagerServicePerimeterResourceSpec
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AccessContextManagerServicePerimeterResourceSpec.
func (*AccessContextManagerServicePerimeterResourceSpec) DeepCopyInto ¶ added in v1.114.0
func (in *AccessContextManagerServicePerimeterResourceSpec) DeepCopyInto(out *AccessContextManagerServicePerimeterResourceSpec)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type AccessContextManagerServicePerimeterResourceStatus ¶ added in v1.114.0
type AccessContextManagerServicePerimeterResourceStatus struct { /* Conditions represent the latest available observations of the AccessContextManagerServicePerimeterResource's current state. */ Conditions []v1alpha1.Condition `json:"conditions,omitempty"` /* ObservedGeneration is the generation of the resource that was most recently observed by the Config Connector controller. If this is equal to metadata.generation, then that means that the current reported status reflects the most recent desired state of the resource. */ // +optional ObservedGeneration *int64 `json:"observedGeneration,omitempty"` }
func (*AccessContextManagerServicePerimeterResourceStatus) DeepCopy ¶ added in v1.114.0
func (in *AccessContextManagerServicePerimeterResourceStatus) DeepCopy() *AccessContextManagerServicePerimeterResourceStatus
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AccessContextManagerServicePerimeterResourceStatus.
func (*AccessContextManagerServicePerimeterResourceStatus) DeepCopyInto ¶ added in v1.114.0
func (in *AccessContextManagerServicePerimeterResourceStatus) DeepCopyInto(out *AccessContextManagerServicePerimeterResourceStatus)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type AccessContextManagerServicePerimeterSpec ¶
type AccessContextManagerServicePerimeterSpec struct { /* The AccessContextManagerAccessPolicy this AccessContextManagerServicePerimeter lives in. */ AccessPolicyRef v1alpha1.ResourceRef `json:"accessPolicyRef"` /* Description of the ServicePerimeter and its use. Does not affect behavior. */ // +optional Description *string `json:"description,omitempty"` /* Immutable. Specifies the type of the Perimeter. There are two types: regular and bridge. Regular Service Perimeter contains resources, access levels, and restricted services. Every resource can be in at most ONE regular Service Perimeter. In addition to being in a regular service perimeter, a resource can also be in zero or more perimeter bridges. A perimeter bridge only contains resources. Cross project operations are permitted if all effected resources share some perimeter (whether bridge or regular). Perimeter Bridge does not contain access levels or services: those are governed entirely by the regular perimeter that resource is in. Perimeter Bridges are typically useful when building more complex topologies with many independent perimeters that need to share some data with a common perimeter, but should not be able to share data among themselves. Default value: "PERIMETER_TYPE_REGULAR" Possible values: ["PERIMETER_TYPE_REGULAR", "PERIMETER_TYPE_BRIDGE"]. */ // +optional PerimeterType *string `json:"perimeterType,omitempty"` /* Immutable. Optional. The name of the resource. Used for creation and acquisition. When unset, the value of `metadata.name` is used as the default. */ // +optional ResourceID *string `json:"resourceID,omitempty"` /* Proposed (or dry run) ServicePerimeter configuration. This configuration allows to specify and test ServicePerimeter configuration without enforcing actual access restrictions. Only allowed to be set when the 'useExplicitDryRunSpec' flag is set. */ // +optional Spec *ServiceperimeterSpec `json:"spec,omitempty"` /* ServicePerimeter configuration. Specifies sets of resources, restricted services and access levels that determine perimeter content and boundaries. */ // +optional Status *ServiceperimeterStatus `json:"status,omitempty"` /* Human readable title. Must be unique within the Policy. */ Title string `json:"title"` /* Use explicit dry run spec flag. Ordinarily, a dry-run spec implicitly exists for all Service Perimeters, and that spec is identical to the status for those Service Perimeters. When this flag is set, it inhibits the generation of the implicit spec, thereby allowing the user to explicitly provide a configuration ("spec") to use in a dry-run version of the Service Perimeter. This allows the user to test changes to the enforced config ("status") without actually enforcing them. This testing is done through analyzing the differences between currently enforced and suggested restrictions. useExplicitDryRunSpec must bet set to True if any of the fields in the spec are set to non-default values. */ // +optional UseExplicitDryRunSpec *bool `json:"useExplicitDryRunSpec,omitempty"` }
func (*AccessContextManagerServicePerimeterSpec) DeepCopy ¶
func (in *AccessContextManagerServicePerimeterSpec) DeepCopy() *AccessContextManagerServicePerimeterSpec
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AccessContextManagerServicePerimeterSpec.
func (*AccessContextManagerServicePerimeterSpec) DeepCopyInto ¶
func (in *AccessContextManagerServicePerimeterSpec) DeepCopyInto(out *AccessContextManagerServicePerimeterSpec)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type AccessContextManagerServicePerimeterStatus ¶
type AccessContextManagerServicePerimeterStatus struct { /* Conditions represent the latest available observations of the AccessContextManagerServicePerimeter's current state. */ Conditions []v1alpha1.Condition `json:"conditions,omitempty"` /* Time the AccessPolicy was created in UTC. */ // +optional CreateTime *string `json:"createTime,omitempty"` /* ObservedGeneration is the generation of the resource that was most recently observed by the Config Connector controller. If this is equal to metadata.generation, then that means that the current reported status reflects the most recent desired state of the resource. */ // +optional ObservedGeneration *int64 `json:"observedGeneration,omitempty"` /* Time the AccessPolicy was updated in UTC. */ // +optional UpdateTime *string `json:"updateTime,omitempty"` }
func (*AccessContextManagerServicePerimeterStatus) DeepCopy ¶
func (in *AccessContextManagerServicePerimeterStatus) DeepCopy() *AccessContextManagerServicePerimeterStatus
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AccessContextManagerServicePerimeterStatus.
func (*AccessContextManagerServicePerimeterStatus) DeepCopyInto ¶
func (in *AccessContextManagerServicePerimeterStatus) DeepCopyInto(out *AccessContextManagerServicePerimeterStatus)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type AccesslevelBasic ¶
type AccesslevelBasic struct { /* How the conditions list should be combined to determine if a request is granted this AccessLevel. If AND is used, each Condition in conditions must be satisfied for the AccessLevel to be applied. If OR is used, at least one Condition in conditions must be satisfied for the AccessLevel to be applied. Default value: "AND" Possible values: ["AND", "OR"]. */ // +optional CombiningFunction *string `json:"combiningFunction,omitempty"` /* A set of requirements for the AccessLevel to be granted. */ Conditions []AccesslevelConditions `json:"conditions"` }
func (*AccesslevelBasic) DeepCopy ¶
func (in *AccesslevelBasic) DeepCopy() *AccesslevelBasic
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AccesslevelBasic.
func (*AccesslevelBasic) DeepCopyInto ¶
func (in *AccesslevelBasic) DeepCopyInto(out *AccesslevelBasic)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type AccesslevelConditions ¶
type AccesslevelConditions struct { /* Device specific restrictions, all restrictions must hold for the Condition to be true. If not specified, all devices are allowed. */ // +optional DevicePolicy *AccesslevelDevicePolicy `json:"devicePolicy,omitempty"` /* A list of CIDR block IP subnetwork specification. May be IPv4 or IPv6. Note that for a CIDR IP address block, the specified IP address portion must be properly truncated (i.e. all the host bits must be zero) or the input is considered malformed. For example, "192.0.2.0/24" is accepted but "192.0.2.1/24" is not. Similarly, for IPv6, "2001:db8::/32" is accepted whereas "2001:db8::1/32" is not. The originating IP of a request must be in one of the listed subnets in order for this Condition to be true. If empty, all IP addresses are allowed. */ // +optional IpSubnetworks []string `json:"ipSubnetworks,omitempty"` // +optional Members []AccesslevelMembers `json:"members,omitempty"` /* Whether to negate the Condition. If true, the Condition becomes a NAND over its non-empty fields, each field must be false for the Condition overall to be satisfied. Defaults to false. */ // +optional Negate *bool `json:"negate,omitempty"` /* The request must originate from one of the provided countries/regions. Format: A valid ISO 3166-1 alpha-2 code. */ // +optional Regions []string `json:"regions,omitempty"` // +optional RequiredAccessLevels []v1alpha1.ResourceRef `json:"requiredAccessLevels,omitempty"` }
func (*AccesslevelConditions) DeepCopy ¶
func (in *AccesslevelConditions) DeepCopy() *AccesslevelConditions
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AccesslevelConditions.
func (*AccesslevelConditions) DeepCopyInto ¶
func (in *AccesslevelConditions) DeepCopyInto(out *AccesslevelConditions)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type AccesslevelCustom ¶
type AccesslevelCustom struct { /* Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. This page details the objects and attributes that are used to the build the CEL expressions for custom access levels - https://cloud.google.com/access-context-manager/docs/custom-access-level-spec. */ Expr AccesslevelExpr `json:"expr"` }
func (*AccesslevelCustom) DeepCopy ¶
func (in *AccesslevelCustom) DeepCopy() *AccesslevelCustom
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AccesslevelCustom.
func (*AccesslevelCustom) DeepCopyInto ¶
func (in *AccesslevelCustom) DeepCopyInto(out *AccesslevelCustom)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type AccesslevelDevicePolicy ¶
type AccesslevelDevicePolicy struct { /* A list of allowed device management levels. An empty list allows all management levels. Possible values: ["MANAGEMENT_UNSPECIFIED", "NONE", "BASIC", "COMPLETE"]. */ // +optional AllowedDeviceManagementLevels []string `json:"allowedDeviceManagementLevels,omitempty"` /* A list of allowed encryptions statuses. An empty list allows all statuses. Possible values: ["ENCRYPTION_UNSPECIFIED", "ENCRYPTION_UNSUPPORTED", "UNENCRYPTED", "ENCRYPTED"]. */ // +optional AllowedEncryptionStatuses []string `json:"allowedEncryptionStatuses,omitempty"` /* A list of allowed OS versions. An empty list allows all types and all versions. */ // +optional OsConstraints []AccesslevelOsConstraints `json:"osConstraints,omitempty"` /* Whether the device needs to be approved by the customer admin. */ // +optional RequireAdminApproval *bool `json:"requireAdminApproval,omitempty"` /* Whether the device needs to be corp owned. */ // +optional RequireCorpOwned *bool `json:"requireCorpOwned,omitempty"` /* Whether or not screenlock is required for the DevicePolicy to be true. Defaults to false. */ // +optional RequireScreenLock *bool `json:"requireScreenLock,omitempty"` }
func (*AccesslevelDevicePolicy) DeepCopy ¶
func (in *AccesslevelDevicePolicy) DeepCopy() *AccesslevelDevicePolicy
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AccesslevelDevicePolicy.
func (*AccesslevelDevicePolicy) DeepCopyInto ¶
func (in *AccesslevelDevicePolicy) DeepCopyInto(out *AccesslevelDevicePolicy)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type AccesslevelExpr ¶
type AccesslevelExpr struct { /* Description of the expression. */ // +optional Description *string `json:"description,omitempty"` /* Textual representation of an expression in Common Expression Language syntax. */ Expression string `json:"expression"` /* String indicating the location of the expression for error reporting, e.g. a file name and a position in the file. */ // +optional Location *string `json:"location,omitempty"` /* Title for the expression, i.e. a short string describing its purpose. */ // +optional Title *string `json:"title,omitempty"` }
func (*AccesslevelExpr) DeepCopy ¶
func (in *AccesslevelExpr) DeepCopy() *AccesslevelExpr
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AccesslevelExpr.
func (*AccesslevelExpr) DeepCopyInto ¶
func (in *AccesslevelExpr) DeepCopyInto(out *AccesslevelExpr)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type AccesslevelMembers ¶
type AccesslevelMembers struct { // +optional ServiceAccountRef *v1alpha1.ResourceRef `json:"serviceAccountRef,omitempty"` // +optional User *string `json:"user,omitempty"` }
func (*AccesslevelMembers) DeepCopy ¶
func (in *AccesslevelMembers) DeepCopy() *AccesslevelMembers
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AccesslevelMembers.
func (*AccesslevelMembers) DeepCopyInto ¶
func (in *AccesslevelMembers) DeepCopyInto(out *AccesslevelMembers)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type AccesslevelOsConstraints ¶
type AccesslevelOsConstraints struct { /* The minimum allowed OS version. If not set, any version of this OS satisfies the constraint. Format: "major.minor.patch" such as "10.5.301", "9.2.1". */ // +optional MinimumVersion *string `json:"minimumVersion,omitempty"` /* The operating system type of the device. Possible values: ["OS_UNSPECIFIED", "DESKTOP_MAC", "DESKTOP_WINDOWS", "DESKTOP_LINUX", "DESKTOP_CHROME_OS", "ANDROID", "IOS"]. */ OsType string `json:"osType"` /* If you specify DESKTOP_CHROME_OS for osType, you can optionally include requireVerifiedChromeOs to require Chrome Verified Access. */ // +optional RequireVerifiedChromeOs *bool `json:"requireVerifiedChromeOs,omitempty"` }
func (*AccesslevelOsConstraints) DeepCopy ¶
func (in *AccesslevelOsConstraints) DeepCopy() *AccesslevelOsConstraints
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AccesslevelOsConstraints.
func (*AccesslevelOsConstraints) DeepCopyInto ¶
func (in *AccesslevelOsConstraints) DeepCopyInto(out *AccesslevelOsConstraints)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type ServiceperimeterEgressFrom ¶
type ServiceperimeterEgressFrom struct { // +optional Identities []ServiceperimeterIdentities `json:"identities,omitempty"` /* Specifies the type of identities that are allowed access to outside the perimeter. If left unspecified, then members of 'identities' field will be allowed access. Possible values: ["IDENTITY_TYPE_UNSPECIFIED", "ANY_IDENTITY", "ANY_USER_ACCOUNT", "ANY_SERVICE_ACCOUNT"]. */ // +optional IdentityType *string `json:"identityType,omitempty"` }
func (*ServiceperimeterEgressFrom) DeepCopy ¶
func (in *ServiceperimeterEgressFrom) DeepCopy() *ServiceperimeterEgressFrom
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ServiceperimeterEgressFrom.
func (*ServiceperimeterEgressFrom) DeepCopyInto ¶
func (in *ServiceperimeterEgressFrom) DeepCopyInto(out *ServiceperimeterEgressFrom)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type ServiceperimeterEgressPolicies ¶
type ServiceperimeterEgressPolicies struct { /* Defines conditions on the source of a request causing this 'EgressPolicy' to apply. */ // +optional EgressFrom *ServiceperimeterEgressFrom `json:"egressFrom,omitempty"` /* Defines the conditions on the 'ApiOperation' and destination resources that cause this 'EgressPolicy' to apply. */ // +optional EgressTo *ServiceperimeterEgressTo `json:"egressTo,omitempty"` }
func (*ServiceperimeterEgressPolicies) DeepCopy ¶
func (in *ServiceperimeterEgressPolicies) DeepCopy() *ServiceperimeterEgressPolicies
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ServiceperimeterEgressPolicies.
func (*ServiceperimeterEgressPolicies) DeepCopyInto ¶
func (in *ServiceperimeterEgressPolicies) DeepCopyInto(out *ServiceperimeterEgressPolicies)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type ServiceperimeterEgressTo ¶
type ServiceperimeterEgressTo struct { /* A list of external resources that are allowed to be accessed. A request matches if it contains an external resource in this list (Example: s3://bucket/path). Currently '*' is not allowed. */ // +optional ExternalResources []string `json:"externalResources,omitempty"` /* A list of 'ApiOperations' that this egress rule applies to. A request matches if it contains an operation/service in this list. */ // +optional Operations []ServiceperimeterOperations `json:"operations,omitempty"` // +optional Resources []ServiceperimeterResources `json:"resources,omitempty"` }
func (*ServiceperimeterEgressTo) DeepCopy ¶
func (in *ServiceperimeterEgressTo) DeepCopy() *ServiceperimeterEgressTo
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ServiceperimeterEgressTo.
func (*ServiceperimeterEgressTo) DeepCopyInto ¶
func (in *ServiceperimeterEgressTo) DeepCopyInto(out *ServiceperimeterEgressTo)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type ServiceperimeterIdentities ¶
type ServiceperimeterIdentities struct { // +optional ServiceAccountRef *v1alpha1.ResourceRef `json:"serviceAccountRef,omitempty"` // +optional User *string `json:"user,omitempty"` }
func (*ServiceperimeterIdentities) DeepCopy ¶
func (in *ServiceperimeterIdentities) DeepCopy() *ServiceperimeterIdentities
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ServiceperimeterIdentities.
func (*ServiceperimeterIdentities) DeepCopyInto ¶
func (in *ServiceperimeterIdentities) DeepCopyInto(out *ServiceperimeterIdentities)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type ServiceperimeterIngressFrom ¶
type ServiceperimeterIngressFrom struct { // +optional Identities []ServiceperimeterIdentities `json:"identities,omitempty"` /* Specifies the type of identities that are allowed access from outside the perimeter. If left unspecified, then members of 'identities' field will be allowed access. Possible values: ["IDENTITY_TYPE_UNSPECIFIED", "ANY_IDENTITY", "ANY_USER_ACCOUNT", "ANY_SERVICE_ACCOUNT"]. */ // +optional IdentityType *string `json:"identityType,omitempty"` /* Sources that this 'IngressPolicy' authorizes access from. */ // +optional Sources []ServiceperimeterSources `json:"sources,omitempty"` }
func (*ServiceperimeterIngressFrom) DeepCopy ¶
func (in *ServiceperimeterIngressFrom) DeepCopy() *ServiceperimeterIngressFrom
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ServiceperimeterIngressFrom.
func (*ServiceperimeterIngressFrom) DeepCopyInto ¶
func (in *ServiceperimeterIngressFrom) DeepCopyInto(out *ServiceperimeterIngressFrom)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type ServiceperimeterIngressPolicies ¶
type ServiceperimeterIngressPolicies struct { /* Defines the conditions on the source of a request causing this 'IngressPolicy' to apply. */ // +optional IngressFrom *ServiceperimeterIngressFrom `json:"ingressFrom,omitempty"` /* Defines the conditions on the 'ApiOperation' and request destination that cause this 'IngressPolicy' to apply. */ // +optional IngressTo *ServiceperimeterIngressTo `json:"ingressTo,omitempty"` }
func (*ServiceperimeterIngressPolicies) DeepCopy ¶
func (in *ServiceperimeterIngressPolicies) DeepCopy() *ServiceperimeterIngressPolicies
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ServiceperimeterIngressPolicies.
func (*ServiceperimeterIngressPolicies) DeepCopyInto ¶
func (in *ServiceperimeterIngressPolicies) DeepCopyInto(out *ServiceperimeterIngressPolicies)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type ServiceperimeterIngressTo ¶
type ServiceperimeterIngressTo struct { /* A list of 'ApiOperations' the sources specified in corresponding 'IngressFrom' are allowed to perform in this 'ServicePerimeter'. */ // +optional Operations []ServiceperimeterOperations `json:"operations,omitempty"` // +optional Resources []ServiceperimeterResources `json:"resources,omitempty"` }
func (*ServiceperimeterIngressTo) DeepCopy ¶
func (in *ServiceperimeterIngressTo) DeepCopy() *ServiceperimeterIngressTo
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ServiceperimeterIngressTo.
func (*ServiceperimeterIngressTo) DeepCopyInto ¶
func (in *ServiceperimeterIngressTo) DeepCopyInto(out *ServiceperimeterIngressTo)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type ServiceperimeterMethodSelectors ¶
type ServiceperimeterMethodSelectors struct { /* Value for method should be a valid method name for the corresponding serviceName in 'ApiOperation'. If '*' used as value for 'method', then ALL methods and permissions are allowed. */ // +optional Method *string `json:"method,omitempty"` /* Value for permission should be a valid Cloud IAM permission for the corresponding 'serviceName' in 'ApiOperation'. */ // +optional Permission *string `json:"permission,omitempty"` }
func (*ServiceperimeterMethodSelectors) DeepCopy ¶
func (in *ServiceperimeterMethodSelectors) DeepCopy() *ServiceperimeterMethodSelectors
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ServiceperimeterMethodSelectors.
func (*ServiceperimeterMethodSelectors) DeepCopyInto ¶
func (in *ServiceperimeterMethodSelectors) DeepCopyInto(out *ServiceperimeterMethodSelectors)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type ServiceperimeterOperations ¶
type ServiceperimeterOperations struct { /* API methods or permissions to allow. Method or permission must belong to the service specified by serviceName field. A single 'MethodSelector' entry with '*' specified for the method field will allow all methods AND permissions for the service specified in 'serviceName'. */ // +optional MethodSelectors []ServiceperimeterMethodSelectors `json:"methodSelectors,omitempty"` /* The name of the API whose methods or permissions the 'IngressPolicy' or 'EgressPolicy' want to allow. A single 'ApiOperation' with 'serviceName' field set to '*' will allow all methods AND permissions for all services. */ // +optional ServiceName *string `json:"serviceName,omitempty"` }
func (*ServiceperimeterOperations) DeepCopy ¶
func (in *ServiceperimeterOperations) DeepCopy() *ServiceperimeterOperations
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ServiceperimeterOperations.
func (*ServiceperimeterOperations) DeepCopyInto ¶
func (in *ServiceperimeterOperations) DeepCopyInto(out *ServiceperimeterOperations)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type ServiceperimeterResources ¶
type ServiceperimeterResources struct { // +optional ProjectRef *v1alpha1.ResourceRef `json:"projectRef,omitempty"` }
func (*ServiceperimeterResources) DeepCopy ¶
func (in *ServiceperimeterResources) DeepCopy() *ServiceperimeterResources
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ServiceperimeterResources.
func (*ServiceperimeterResources) DeepCopyInto ¶
func (in *ServiceperimeterResources) DeepCopyInto(out *ServiceperimeterResources)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type ServiceperimeterSources ¶
type ServiceperimeterSources struct { /* An AccessLevel resource name that allow resources within the ServicePerimeters to be accessed from the internet. AccessLevels listed must be in the same policy as this ServicePerimeter. Referencing a nonexistent AccessLevel will cause an error. If no AccessLevel names are listed, resources within the perimeter can only be accessed via Google Cloud calls with request origins within the perimeter. */ // +optional AccessLevelRef *v1alpha1.ResourceRef `json:"accessLevelRef,omitempty"` /* (Optional) A Google Cloud resource that is allowed to ingress the perimeter. Requests from these resources will be allowed to access perimeter data. Currently only projects are allowed. Format "projects/{project_number}" The project may be in any Google Cloud organization, not just the organization that the perimeter is defined in. */ // +optional ProjectRef *v1alpha1.ResourceRef `json:"projectRef,omitempty"` }
func (*ServiceperimeterSources) DeepCopy ¶
func (in *ServiceperimeterSources) DeepCopy() *ServiceperimeterSources
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ServiceperimeterSources.
func (*ServiceperimeterSources) DeepCopyInto ¶
func (in *ServiceperimeterSources) DeepCopyInto(out *ServiceperimeterSources)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type ServiceperimeterSpec ¶
type ServiceperimeterSpec struct { // +optional AccessLevels []v1alpha1.ResourceRef `json:"accessLevels,omitempty"` /* List of EgressPolicies to apply to the perimeter. A perimeter may have multiple EgressPolicies, each of which is evaluated separately. Access is granted if any EgressPolicy grants it. Must be empty for a perimeter bridge. */ // +optional EgressPolicies []ServiceperimeterEgressPolicies `json:"egressPolicies,omitempty"` /* List of 'IngressPolicies' to apply to the perimeter. A perimeter may have multiple 'IngressPolicies', each of which is evaluated separately. Access is granted if any 'Ingress Policy' grants it. Must be empty for a perimeter bridge. */ // +optional IngressPolicies []ServiceperimeterIngressPolicies `json:"ingressPolicies,omitempty"` // +optional Resources []ServiceperimeterResources `json:"resources,omitempty"` /* GCP services that are subject to the Service Perimeter restrictions. Must contain a list of services. For example, if 'storage.googleapis.com' is specified, access to the storage buckets inside the perimeter must meet the perimeter's access restrictions. */ // +optional RestrictedServices []string `json:"restrictedServices,omitempty"` /* Specifies how APIs are allowed to communicate within the Service Perimeter. */ // +optional VpcAccessibleServices *ServiceperimeterVpcAccessibleServices `json:"vpcAccessibleServices,omitempty"` }
func (*ServiceperimeterSpec) DeepCopy ¶
func (in *ServiceperimeterSpec) DeepCopy() *ServiceperimeterSpec
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ServiceperimeterSpec.
func (*ServiceperimeterSpec) DeepCopyInto ¶
func (in *ServiceperimeterSpec) DeepCopyInto(out *ServiceperimeterSpec)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type ServiceperimeterStatus ¶
type ServiceperimeterStatus struct { // +optional AccessLevels []v1alpha1.ResourceRef `json:"accessLevels,omitempty"` /* List of EgressPolicies to apply to the perimeter. A perimeter may have multiple EgressPolicies, each of which is evaluated separately. Access is granted if any EgressPolicy grants it. Must be empty for a perimeter bridge. */ // +optional EgressPolicies []ServiceperimeterEgressPolicies `json:"egressPolicies,omitempty"` /* List of 'IngressPolicies' to apply to the perimeter. A perimeter may have multiple 'IngressPolicies', each of which is evaluated separately. Access is granted if any 'Ingress Policy' grants it. Must be empty for a perimeter bridge. */ // +optional IngressPolicies []ServiceperimeterIngressPolicies `json:"ingressPolicies,omitempty"` // +optional Resources []ServiceperimeterResources `json:"resources,omitempty"` /* GCP services that are subject to the Service Perimeter restrictions. Must contain a list of services. For example, if 'storage.googleapis.com' is specified, access to the storage buckets inside the perimeter must meet the perimeter's access restrictions. */ // +optional RestrictedServices []string `json:"restrictedServices,omitempty"` /* Specifies how APIs are allowed to communicate within the Service Perimeter. */ // +optional VpcAccessibleServices *ServiceperimeterVpcAccessibleServices `json:"vpcAccessibleServices,omitempty"` }
func (*ServiceperimeterStatus) DeepCopy ¶
func (in *ServiceperimeterStatus) DeepCopy() *ServiceperimeterStatus
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ServiceperimeterStatus.
func (*ServiceperimeterStatus) DeepCopyInto ¶
func (in *ServiceperimeterStatus) DeepCopyInto(out *ServiceperimeterStatus)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type ServiceperimeterVpcAccessibleServices ¶
type ServiceperimeterVpcAccessibleServices struct { /* The list of APIs usable within the Service Perimeter. Must be empty unless 'enableRestriction' is True. */ // +optional AllowedServices []string `json:"allowedServices,omitempty"` /* Whether to restrict API calls within the Service Perimeter to the list of APIs specified in 'allowedServices'. */ // +optional EnableRestriction *bool `json:"enableRestriction,omitempty"` }
func (*ServiceperimeterVpcAccessibleServices) DeepCopy ¶
func (in *ServiceperimeterVpcAccessibleServices) DeepCopy() *ServiceperimeterVpcAccessibleServices
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ServiceperimeterVpcAccessibleServices.
func (*ServiceperimeterVpcAccessibleServices) DeepCopyInto ¶
func (in *ServiceperimeterVpcAccessibleServices) DeepCopyInto(out *ServiceperimeterVpcAccessibleServices)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.