BinaryAuthorizationConfig

BinaryAuthorizationConfig defines the fleet level configuration of binary authorization feature.

JSON representation
{
  "evaluationMode": enum (BinaryAuthorizationConfig.EvaluationMode),
  "policyBindings": [
    {
      object (BinaryAuthorizationConfig.PolicyBinding)
    }
  ]
}
Fields
evaluationMode

enum (BinaryAuthorizationConfig.EvaluationMode)

Optional. Mode of operation for binauthz policy evaluation.

policyBindings[]

object (BinaryAuthorizationConfig.PolicyBinding)

Optional. Binauthz policies that apply to this cluster.

BinaryAuthorizationConfig.EvaluationMode

Binary Authorization mode of operation.

Enums
EVALUATION_MODE_UNSPECIFIED Default value
DISABLED Disable BinaryAuthorization
POLICY_BINDINGS Use Binary Authorization with the policies specified in policyBindings.

BinaryAuthorizationConfig.PolicyBinding

Binauthz policy that applies to this cluster.

JSON representation
{
  "name": string
}
Fields
name

string

The relative resource name of the binauthz platform policy to audit. GKE platform policies have the following format: projects/{project_number}/platforms/gke/policies/{policyId}.