Regulatory support in Cloud Deploy

This document describes the features, configurations and APIs in Cloud Deploy that align with the controls for supported control packages. This document assumes that you're using Assured Workloads.

Data Boundary for ITAR

Supported services

The following table lists the Cloud Deploy APIs and versions that meet the requirements of Data Boundary for ITAR.

Service Version Status
clouddeploy.googleapis.com v1 SUPPORTED

Compliance supported regions

Cloud Deploy is available for Data Boundary for ITAR in the following Google Cloud regions:

  • us-central1
  • us-central2
  • us-east1
  • us-east4
  • us-east5
  • us-south1
  • us-west1
  • us-west2
  • us-west3
  • us-west4

Fields not intended for Sensitive data

The following table provides an illustrative list of field categories and specific fields that aren't suitable for sensitive information. To maintain compliance, avoid placing protected data in these fields. For a complete list, contact your Google Cloud representative.

Category Fields
Automation rules
  • automation.rules.advanceRolloutRule.id
  • automation.rules.promoteReleaseRule.id
  • automation.rules.repairRolloutRule.id
  • automation.rules.timedPromoteReleaseRule.id
Automation selector
  • automation.selector.targets.id
  • automation.selector.targets.labels.key
  • automation.selector.targets.labels.value
Custom target actions
  • customTargetType.customActions.deployAction
  • customTargetType.customActions.renderAction
Custom target configuration
  • customTargetType.description
  • customTargetType.name
  • customTargetTypeId
Custom target environment variables
  • customTargetType.tasks.deploy.container.env.key
  • customTargetType.tasks.deploy.container.env.value
  • customTargetType.tasks.render.container.env.key
  • customTargetType.tasks.render.container.env.value
Deploy parameters
  • deployParameters.key
  • deployParameters.value
  • release.deployParameters.key
  • release.deployParameters.value
Paging and filtering
  • filter
  • orderBy
  • pageToken
Parent resource
  • parent
Release configuration
  • release.skaffoldVersion
  • release.targetConfigs.config.runtimeConfigFiles.helmChart.helmRelease
  • release.targetConfigs.config.runtimeWorkloadDefinition.cloudRunService.template.encryptionKey
  • release.toolVersions.docker
  • release.toolVersions.kpt
  • release.toolVersions.skaffold
Resource identification
  • automationId
  • deliveryPipelineId
  • name
  • releaseId
  • rolloutId
  • targetId

What's next