happygapi.binaryauthorization.projects — happygapi 0.4.2

Binary Authorization API: projects. The management interface for Binary Authorization, a system providing policy control for images deployed to Kubernetes Engine clusters.

See: https://cloud.google.com/binary-authorization/api/reference/rest/v1/projects

attestors-create$ clj

(attestors-create$ auth parameters body)

https://cloud.google.com/binary-authorization/api/reference/rest/v1/projects/attestors/create

Required parameters: parent

Optional parameters: attestorId

Body:

{:updateTime string, :name string, :userOwnedGrafeasNote {:noteReference string, :delegationServiceAccountEmail string, :publicKeys [AttestorPublicKey]}, :description string}

Creates an attestor, and returns a copy of the new attestor. Returns NOT_FOUND if the project does not exist, INVALID_ARGUMENT if the request is malformed, ALREADY_EXISTS if the attestor already exists.

attestors-delete$ clj

(attestors-delete$ auth parameters)

https://cloud.google.com/binary-authorization/api/reference/rest/v1/projects/attestors/delete

Required parameters: name

Optional parameters: none

Deletes an attestor. Returns NOT_FOUND if the attestor does not exist.

attestors-get$ clj

(attestors-get$ auth parameters)

https://cloud.google.com/binary-authorization/api/reference/rest/v1/projects/attestors/get

Required parameters: name

Optional parameters: none

Gets an attestor. Returns NOT_FOUND if the attestor does not exist.

attestors-getIamPolicy$ clj

(attestors-getIamPolicy$ auth parameters)

https://cloud.google.com/binary-authorization/api/reference/rest/v1/projects/attestors/getIamPolicy

Required parameters: resource

Optional parameters: options.requestedPolicyVersion

Gets the access control policy for a resource. Returns an empty policy if the resource exists and does not have a policy set.

attestors-list$ clj

(attestors-list$ auth parameters)

https://cloud.google.com/binary-authorization/api/reference/rest/v1/projects/attestors/list

Required parameters: parent

Optional parameters: pageToken, pageSize

Lists attestors. Returns INVALID_ARGUMENT if the project does not exist.

attestors-setIamPolicy$ clj

(attestors-setIamPolicy$ auth parameters body)

https://cloud.google.com/binary-authorization/api/reference/rest/v1/projects/attestors/setIamPolicy

Required parameters: resource

Optional parameters: none

Body:

{:policy {:etag string, :version integer, :bindings [Binding]}}

Sets the access control policy on the specified resource. Replaces any existing policy.

Can return Public Errors: NOT_FOUND, INVALID_ARGUMENT and PERMISSION_DENIED

attestors-testIamPermissions$ clj

(attestors-testIamPermissions$ auth parameters body)

https://cloud.google.com/binary-authorization/api/reference/rest/v1/projects/attestors/testIamPermissions

Required parameters: resource

Optional parameters: none

Body:

{:permissions [string]}

Returns permissions that a caller has on the specified resource. If the resource does not exist, this will return an empty set of permissions, not a NOT_FOUND error.

Note: This operation is designed to be used for building permission-aware UIs and command-line tools, not for authorization checking. This operation may "fail open" without warning.

attestors-update$ clj

(attestors-update$ auth parameters body)

https://cloud.google.com/binary-authorization/api/reference/rest/v1/projects/attestors/update

Required parameters: name

Optional parameters: none

Body:

{:updateTime string, :name string, :userOwnedGrafeasNote {:noteReference string, :delegationServiceAccountEmail string, :publicKeys [AttestorPublicKey]}, :description string}

Updates an attestor. Returns NOT_FOUND if the attestor does not exist.

getPolicy$ clj

(getPolicy$ auth parameters)

https://cloud.google.com/binary-authorization/api/reference/rest/v1/projects/getPolicy

Required parameters: name

Optional parameters: none

A policy specifies the attestors that must attest to a container image, before the project is allowed to deploy that image. There is at most one policy per project. All image admission requests are permitted if a project has no policy.

Gets the policy for this project. Returns a default policy if the project does not have one.

policy-getIamPolicy$ clj

(policy-getIamPolicy$ auth parameters)

https://cloud.google.com/binary-authorization/api/reference/rest/v1/projects/policy/getIamPolicy

Required parameters: resource

Optional parameters: options.requestedPolicyVersion

Gets the access control policy for a resource. Returns an empty policy if the resource exists and does not have a policy set.

policy-setIamPolicy$ clj

(policy-setIamPolicy$ auth parameters body)

https://cloud.google.com/binary-authorization/api/reference/rest/v1/projects/policy/setIamPolicy

Required parameters: resource

Optional parameters: none

Body:

{:policy {:etag string, :version integer, :bindings [Binding]}}

Sets the access control policy on the specified resource. Replaces any existing policy.

Can return Public Errors: NOT_FOUND, INVALID_ARGUMENT and PERMISSION_DENIED

policy-testIamPermissions$ clj

(policy-testIamPermissions$ auth parameters body)

https://cloud.google.com/binary-authorization/api/reference/rest/v1/projects/policy/testIamPermissions

Required parameters: resource

Optional parameters: none

Body:

{:permissions [string]}

Returns permissions that a caller has on the specified resource. If the resource does not exist, this will return an empty set of permissions, not a NOT_FOUND error.

Note: This operation is designed to be used for building permission-aware UIs and command-line tools, not for authorization checking. This operation may "fail open" without warning.

updatePolicy$ clj

(updatePolicy$ auth parameters body)

https://cloud.google.com/binary-authorization/api/reference/rest/v1/projects/updatePolicy

Required parameters: name

Optional parameters: none

Body:

{:globalPolicyEvaluationMode string, :clusterAdmissionRules {}, :description string, :admissionWhitelistPatterns [{:namePattern string}], :updateTime string, :name string, :defaultAdmissionRule {:enforcementMode string, :requireAttestationsBy [string], :evaluationMode string}}

Creates or updates a project's policy, and returns a copy of the new policy. A policy is always updated as a whole, to avoid race conditions with concurrent policy enforcement (or management!) requests. Returns NOT_FOUND if the project does not exist, INVALID_ARGUMENT if the request is malformed.