Variables
Workload_ComplianceRegime_name, Workload_ComplianceRegime_value
var (
Workload_ComplianceRegime_name = map[int32]string{
0: "COMPLIANCE_REGIME_UNSPECIFIED",
1: "IL4",
2: "CJIS",
3: "FEDRAMP_HIGH",
4: "FEDRAMP_MODERATE",
5: "US_REGIONAL_ACCESS",
6: "HIPAA",
7: "HITRUST",
8: "EU_REGIONS_AND_SUPPORT",
9: "CA_REGIONS_AND_SUPPORT",
10: "ITAR",
11: "AU_REGIONS_AND_US_SUPPORT",
12: "ASSURED_WORKLOADS_FOR_PARTNERS",
}
Workload_ComplianceRegime_value = map[string]int32{
"COMPLIANCE_REGIME_UNSPECIFIED": 0,
"IL4": 1,
"CJIS": 2,
"FEDRAMP_HIGH": 3,
"FEDRAMP_MODERATE": 4,
"US_REGIONAL_ACCESS": 5,
"HIPAA": 6,
"HITRUST": 7,
"EU_REGIONS_AND_SUPPORT": 8,
"CA_REGIONS_AND_SUPPORT": 9,
"ITAR": 10,
"AU_REGIONS_AND_US_SUPPORT": 11,
"ASSURED_WORKLOADS_FOR_PARTNERS": 12,
}
)Enum value maps for Workload_ComplianceRegime.
Workload_KajEnrollmentState_name, Workload_KajEnrollmentState_value
var (
Workload_KajEnrollmentState_name = map[int32]string{
0: "KAJ_ENROLLMENT_STATE_UNSPECIFIED",
1: "KAJ_ENROLLMENT_STATE_PENDING",
2: "KAJ_ENROLLMENT_STATE_COMPLETE",
}
Workload_KajEnrollmentState_value = map[string]int32{
"KAJ_ENROLLMENT_STATE_UNSPECIFIED": 0,
"KAJ_ENROLLMENT_STATE_PENDING": 1,
"KAJ_ENROLLMENT_STATE_COMPLETE": 2,
}
)Enum value maps for Workload_KajEnrollmentState.
Workload_Partner_name, Workload_Partner_value
var (
Workload_Partner_name = map[int32]string{
0: "PARTNER_UNSPECIFIED",
1: "LOCAL_CONTROLS_BY_S3NS",
}
Workload_Partner_value = map[string]int32{
"PARTNER_UNSPECIFIED": 0,
"LOCAL_CONTROLS_BY_S3NS": 1,
}
)Enum value maps for Workload_Partner.
Workload_ResourceInfo_ResourceType_name, Workload_ResourceInfo_ResourceType_value
var (
Workload_ResourceInfo_ResourceType_name = map[int32]string{
0: "RESOURCE_TYPE_UNSPECIFIED",
1: "CONSUMER_PROJECT",
4: "CONSUMER_FOLDER",
2: "ENCRYPTION_KEYS_PROJECT",
3: "KEYRING",
}
Workload_ResourceInfo_ResourceType_value = map[string]int32{
"RESOURCE_TYPE_UNSPECIFIED": 0,
"CONSUMER_PROJECT": 1,
"CONSUMER_FOLDER": 4,
"ENCRYPTION_KEYS_PROJECT": 2,
"KEYRING": 3,
}
)Enum value maps for Workload_ResourceInfo_ResourceType.
Workload_SaaEnrollmentResponse_SetupState_name, Workload_SaaEnrollmentResponse_SetupState_value
var (
Workload_SaaEnrollmentResponse_SetupState_name = map[int32]string{
0: "SETUP_STATE_UNSPECIFIED",
1: "STATUS_PENDING",
2: "STATUS_COMPLETE",
}
Workload_SaaEnrollmentResponse_SetupState_value = map[string]int32{
"SETUP_STATE_UNSPECIFIED": 0,
"STATUS_PENDING": 1,
"STATUS_COMPLETE": 2,
}
)Enum value maps for Workload_SaaEnrollmentResponse_SetupState.
Workload_SaaEnrollmentResponse_SetupError_name, Workload_SaaEnrollmentResponse_SetupError_value
var (
Workload_SaaEnrollmentResponse_SetupError_name = map[int32]string{
0: "SETUP_ERROR_UNSPECIFIED",
1: "ERROR_INVALID_BASE_SETUP",
2: "ERROR_MISSING_EXTERNAL_SIGNING_KEY",
3: "ERROR_NOT_ALL_SERVICES_ENROLLED",
4: "ERROR_SETUP_CHECK_FAILED",
}
Workload_SaaEnrollmentResponse_SetupError_value = map[string]int32{
"SETUP_ERROR_UNSPECIFIED": 0,
"ERROR_INVALID_BASE_SETUP": 1,
"ERROR_MISSING_EXTERNAL_SIGNING_KEY": 2,
"ERROR_NOT_ALL_SERVICES_ENROLLED": 3,
"ERROR_SETUP_CHECK_FAILED": 4,
}
)Enum value maps for Workload_SaaEnrollmentResponse_SetupError.
RestrictAllowedResourcesRequest_RestrictionType_name, RestrictAllowedResourcesRequest_RestrictionType_value
var (
RestrictAllowedResourcesRequest_RestrictionType_name = map[int32]string{
0: "RESTRICTION_TYPE_UNSPECIFIED",
1: "ALLOW_ALL_GCP_RESOURCES",
2: "ALLOW_COMPLIANT_RESOURCES",
}
RestrictAllowedResourcesRequest_RestrictionType_value = map[string]int32{
"RESTRICTION_TYPE_UNSPECIFIED": 0,
"ALLOW_ALL_GCP_RESOURCES": 1,
"ALLOW_COMPLIANT_RESOURCES": 2,
}
)Enum value maps for RestrictAllowedResourcesRequest_RestrictionType.
Violation_State_name, Violation_State_value
var (
Violation_State_name = map[int32]string{
0: "STATE_UNSPECIFIED",
2: "RESOLVED",
3: "UNRESOLVED",
4: "EXCEPTION",
}
Violation_State_value = map[string]int32{
"STATE_UNSPECIFIED": 0,
"RESOLVED": 2,
"UNRESOLVED": 3,
"EXCEPTION": 4,
}
)Enum value maps for Violation_State.
Violation_Remediation_RemediationType_name, Violation_Remediation_RemediationType_value
var (
Violation_Remediation_RemediationType_name = map[int32]string{
0: "REMEDIATION_TYPE_UNSPECIFIED",
1: "REMEDIATION_BOOLEAN_ORG_POLICY_VIOLATION",
2: "REMEDIATION_LIST_ALLOWED_VALUES_ORG_POLICY_VIOLATION",
3: "REMEDIATION_LIST_DENIED_VALUES_ORG_POLICY_VIOLATION",
4: "REMEDIATION_RESTRICT_CMEK_CRYPTO_KEY_PROJECTS_ORG_POLICY_VIOLATION",
}
Violation_Remediation_RemediationType_value = map[string]int32{
"REMEDIATION_TYPE_UNSPECIFIED": 0,
"REMEDIATION_BOOLEAN_ORG_POLICY_VIOLATION": 1,
"REMEDIATION_LIST_ALLOWED_VALUES_ORG_POLICY_VIOLATION": 2,
"REMEDIATION_LIST_DENIED_VALUES_ORG_POLICY_VIOLATION": 3,
"REMEDIATION_RESTRICT_CMEK_CRYPTO_KEY_PROJECTS_ORG_POLICY_VIOLATION": 4,
}
)Enum value maps for Violation_Remediation_RemediationType.
File_google_cloud_assuredworkloads_v1_assuredworkloads_proto
var File_google_cloud_assuredworkloads_v1_assuredworkloads_proto protoreflect.FileDescriptorFunctions
func RegisterAssuredWorkloadsServiceServer
func RegisterAssuredWorkloadsServiceServer(s *grpc.Server, srv AssuredWorkloadsServiceServer)AcknowledgeViolationRequest
type AcknowledgeViolationRequest struct {
Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
Comment string `protobuf:"bytes,2,opt,name=comment,proto3" json:"comment,omitempty"`
NonCompliantOrgPolicy string "" /* 128 byte string literal not displayed */
}Request for acknowledging the violation Next Id: 4
func (*AcknowledgeViolationRequest) Descriptor
func (*AcknowledgeViolationRequest) Descriptor() ([]byte, []int)Deprecated: Use AcknowledgeViolationRequest.ProtoReflect.Descriptor instead.
func (*AcknowledgeViolationRequest) GetComment
func (x *AcknowledgeViolationRequest) GetComment() stringfunc (*AcknowledgeViolationRequest) GetName
func (x *AcknowledgeViolationRequest) GetName() stringfunc (*AcknowledgeViolationRequest) GetNonCompliantOrgPolicy
func (x *AcknowledgeViolationRequest) GetNonCompliantOrgPolicy() stringDeprecated: Marked as deprecated in google/cloud/assuredworkloads/v1/assuredworkloads.proto.
func (*AcknowledgeViolationRequest) ProtoMessage
func (*AcknowledgeViolationRequest) ProtoMessage()func (*AcknowledgeViolationRequest) ProtoReflect
func (x *AcknowledgeViolationRequest) ProtoReflect() protoreflect.Messagefunc (*AcknowledgeViolationRequest) Reset
func (x *AcknowledgeViolationRequest) Reset()func (*AcknowledgeViolationRequest) String
func (x *AcknowledgeViolationRequest) String() stringAcknowledgeViolationResponse
type AcknowledgeViolationResponse struct {
// contains filtered or unexported fields
}Response for violation acknowledgement
func (*AcknowledgeViolationResponse) Descriptor
func (*AcknowledgeViolationResponse) Descriptor() ([]byte, []int)Deprecated: Use AcknowledgeViolationResponse.ProtoReflect.Descriptor instead.
func (*AcknowledgeViolationResponse) ProtoMessage
func (*AcknowledgeViolationResponse) ProtoMessage()func (*AcknowledgeViolationResponse) ProtoReflect
func (x *AcknowledgeViolationResponse) ProtoReflect() protoreflect.Messagefunc (*AcknowledgeViolationResponse) Reset
func (x *AcknowledgeViolationResponse) Reset()func (*AcknowledgeViolationResponse) String
func (x *AcknowledgeViolationResponse) String() stringAssuredWorkloadsServiceClient
type AssuredWorkloadsServiceClient interface {
// Creates Assured Workload.
CreateWorkload(ctx context.Context, in *CreateWorkloadRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
// Updates an existing workload.
// Currently allows updating of workload display_name and labels.
// For force updates don't set etag field in the Workload.
// Only one update operation per workload can be in progress.
UpdateWorkload(ctx context.Context, in *UpdateWorkloadRequest, opts ...grpc.CallOption) (*Workload, error)
// Restrict the list of resources allowed in the Workload environment.
// The current list of allowed products can be found at
// https://cloud.google.com/assured-workloads/docs/supported-products
// In addition to assuredworkloads.workload.update permission, the user should
// also have orgpolicy.policy.set permission on the folder resource
// to use this functionality.
RestrictAllowedResources(ctx context.Context, in *RestrictAllowedResourcesRequest, opts ...grpc.CallOption) (*RestrictAllowedResourcesResponse, error)
// Deletes the workload. Make sure that workload's direct children are already
// in a deleted state, otherwise the request will fail with a
// FAILED_PRECONDITION error.
DeleteWorkload(ctx context.Context, in *DeleteWorkloadRequest, opts ...grpc.CallOption) (*emptypb.Empty, error)
// Gets Assured Workload associated with a CRM Node
GetWorkload(ctx context.Context, in *GetWorkloadRequest, opts ...grpc.CallOption) (*Workload, error)
// Lists Assured Workloads under a CRM Node.
ListWorkloads(ctx context.Context, in *ListWorkloadsRequest, opts ...grpc.CallOption) (*ListWorkloadsResponse, error)
// Lists the Violations in the AssuredWorkload Environment.
// Callers may also choose to read across multiple Workloads as per
// [AIP-159](https://google.aip.dev/159) by using '-' (the hyphen or dash
// character) as a wildcard character instead of workload-id in the parent.
// Format `organizations/{org_id}/locations/{location}/workloads/-`
ListViolations(ctx context.Context, in *ListViolationsRequest, opts ...grpc.CallOption) (*ListViolationsResponse, error)
// Retrieves Assured Workload Violation based on ID.
GetViolation(ctx context.Context, in *GetViolationRequest, opts ...grpc.CallOption) (*Violation, error)
// Acknowledges an existing violation. By acknowledging a violation, users
// acknowledge the existence of a compliance violation in their workload and
// decide to ignore it due to a valid business justification. Acknowledgement
// is a permanent operation and it cannot be reverted.
AcknowledgeViolation(ctx context.Context, in *AcknowledgeViolationRequest, opts ...grpc.CallOption) (*AcknowledgeViolationResponse, error)
}AssuredWorkloadsServiceClient is the client API for AssuredWorkloadsService service.
For semantics around ctx use and closing/ending streaming RPCs, please refer to https://godoc.org/google.golang.org/grpc#ClientConn.NewStream.
func NewAssuredWorkloadsServiceClient
func NewAssuredWorkloadsServiceClient(cc grpc.ClientConnInterface) AssuredWorkloadsServiceClientAssuredWorkloadsServiceServer
type AssuredWorkloadsServiceServer interface {
// Creates Assured Workload.
CreateWorkload(context.Context, *CreateWorkloadRequest) (*longrunningpb.Operation, error)
// Updates an existing workload.
// Currently allows updating of workload display_name and labels.
// For force updates don't set etag field in the Workload.
// Only one update operation per workload can be in progress.
UpdateWorkload(context.Context, *UpdateWorkloadRequest) (*Workload, error)
// Restrict the list of resources allowed in the Workload environment.
// The current list of allowed products can be found at
// https://cloud.google.com/assured-workloads/docs/supported-products
// In addition to assuredworkloads.workload.update permission, the user should
// also have orgpolicy.policy.set permission on the folder resource
// to use this functionality.
RestrictAllowedResources(context.Context, *RestrictAllowedResourcesRequest) (*RestrictAllowedResourcesResponse, error)
// Deletes the workload. Make sure that workload's direct children are already
// in a deleted state, otherwise the request will fail with a
// FAILED_PRECONDITION error.
DeleteWorkload(context.Context, *DeleteWorkloadRequest) (*emptypb.Empty, error)
// Gets Assured Workload associated with a CRM Node
GetWorkload(context.Context, *GetWorkloadRequest) (*Workload, error)
// Lists Assured Workloads under a CRM Node.
ListWorkloads(context.Context, *ListWorkloadsRequest) (*ListWorkloadsResponse, error)
// Lists the Violations in the AssuredWorkload Environment.
// Callers may also choose to read across multiple Workloads as per
// [AIP-159](https://google.aip.dev/159) by using '-' (the hyphen or dash
// character) as a wildcard character instead of workload-id in the parent.
// Format `organizations/{org_id}/locations/{location}/workloads/-`
ListViolations(context.Context, *ListViolationsRequest) (*ListViolationsResponse, error)
// Retrieves Assured Workload Violation based on ID.
GetViolation(context.Context, *GetViolationRequest) (*Violation, error)
// Acknowledges an existing violation. By acknowledging a violation, users
// acknowledge the existence of a compliance violation in their workload and
// decide to ignore it due to a valid business justification. Acknowledgement
// is a permanent operation and it cannot be reverted.
AcknowledgeViolation(context.Context, *AcknowledgeViolationRequest) (*AcknowledgeViolationResponse, error)
}AssuredWorkloadsServiceServer is the server API for AssuredWorkloadsService service.
CreateWorkloadOperationMetadata
type CreateWorkloadOperationMetadata struct {
CreateTime *timestamppb.Timestamp `protobuf:"bytes,1,opt,name=create_time,json=createTime,proto3" json:"create_time,omitempty"`
DisplayName string `protobuf:"bytes,2,opt,name=display_name,json=displayName,proto3" json:"display_name,omitempty"`
Parent string `protobuf:"bytes,3,opt,name=parent,proto3" json:"parent,omitempty"`
ComplianceRegime Workload_ComplianceRegime "" /* 174 byte string literal not displayed */
}Operation metadata to give request details of CreateWorkload.
func (*CreateWorkloadOperationMetadata) Descriptor
func (*CreateWorkloadOperationMetadata) Descriptor() ([]byte, []int)Deprecated: Use CreateWorkloadOperationMetadata.ProtoReflect.Descriptor instead.
func (*CreateWorkloadOperationMetadata) GetComplianceRegime
func (x *CreateWorkloadOperationMetadata) GetComplianceRegime() Workload_ComplianceRegimefunc (*CreateWorkloadOperationMetadata) GetCreateTime
func (x *CreateWorkloadOperationMetadata) GetCreateTime() *timestamppb.Timestampfunc (*CreateWorkloadOperationMetadata) GetDisplayName
func (x *CreateWorkloadOperationMetadata) GetDisplayName() stringfunc (*CreateWorkloadOperationMetadata) GetParent
func (x *CreateWorkloadOperationMetadata) GetParent() stringfunc (*CreateWorkloadOperationMetadata) ProtoMessage
func (*CreateWorkloadOperationMetadata) ProtoMessage()func (*CreateWorkloadOperationMetadata) ProtoReflect
func (x *CreateWorkloadOperationMetadata) ProtoReflect() protoreflect.Messagefunc (*CreateWorkloadOperationMetadata) Reset
func (x *CreateWorkloadOperationMetadata) Reset()func (*CreateWorkloadOperationMetadata) String
func (x *CreateWorkloadOperationMetadata) String() stringCreateWorkloadRequest
type CreateWorkloadRequest struct {
// Required. The resource name of the new Workload's parent.
// Must be of the form `organizations/{org_id}/locations/{location_id}`.
Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
// Required. Assured Workload to create
Workload *Workload `protobuf:"bytes,2,opt,name=workload,proto3" json:"workload,omitempty"`
// Optional. A identifier associated with the workload and underlying projects which
// allows for the break down of billing costs for a workload. The value
// provided for the identifier will add a label to the workload and contained
// projects with the identifier as the value.
ExternalId string `protobuf:"bytes,3,opt,name=external_id,json=externalId,proto3" json:"external_id,omitempty"`
// contains filtered or unexported fields
}Request for creating a workload.
func (*CreateWorkloadRequest) Descriptor
func (*CreateWorkloadRequest) Descriptor() ([]byte, []int)Deprecated: Use CreateWorkloadRequest.ProtoReflect.Descriptor instead.
func (*CreateWorkloadRequest) GetExternalId
func (x *CreateWorkloadRequest) GetExternalId() stringfunc (*CreateWorkloadRequest) GetParent
func (x *CreateWorkloadRequest) GetParent() stringfunc (*CreateWorkloadRequest) GetWorkload
func (x *CreateWorkloadRequest) GetWorkload() *Workloadfunc (*CreateWorkloadRequest) ProtoMessage
func (*CreateWorkloadRequest) ProtoMessage()func (*CreateWorkloadRequest) ProtoReflect
func (x *CreateWorkloadRequest) ProtoReflect() protoreflect.Messagefunc (*CreateWorkloadRequest) Reset
func (x *CreateWorkloadRequest) Reset()func (*CreateWorkloadRequest) String
func (x *CreateWorkloadRequest) String() stringDeleteWorkloadRequest
type DeleteWorkloadRequest struct {
// Required. The `name` field is used to identify the workload.
// Format:
// organizations/{org_id}/locations/{location_id}/workloads/{workload_id}
Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
// Optional. The etag of the workload.
// If this is provided, it must match the server's etag.
Etag string `protobuf:"bytes,2,opt,name=etag,proto3" json:"etag,omitempty"`
// contains filtered or unexported fields
}Request for deleting a Workload.
func (*DeleteWorkloadRequest) Descriptor
func (*DeleteWorkloadRequest) Descriptor() ([]byte, []int)Deprecated: Use DeleteWorkloadRequest.ProtoReflect.Descriptor instead.
func (*DeleteWorkloadRequest) GetEtag
func (x *DeleteWorkloadRequest) GetEtag() stringfunc (*DeleteWorkloadRequest) GetName
func (x *DeleteWorkloadRequest) GetName() stringfunc (*DeleteWorkloadRequest) ProtoMessage
func (*DeleteWorkloadRequest) ProtoMessage()func (*DeleteWorkloadRequest) ProtoReflect
func (x *DeleteWorkloadRequest) ProtoReflect() protoreflect.Messagefunc (*DeleteWorkloadRequest) Reset
func (x *DeleteWorkloadRequest) Reset()func (*DeleteWorkloadRequest) String
func (x *DeleteWorkloadRequest) String() stringGetViolationRequest
type GetViolationRequest struct {
// Required. The resource name of the Violation to fetch (ie. Violation.name).
// Format:
// organizations/{organization}/locations/{location}/workloads/{workload}/violations/{violation}
Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
// contains filtered or unexported fields
}Request for fetching a Workload Violation.
func (*GetViolationRequest) Descriptor
func (*GetViolationRequest) Descriptor() ([]byte, []int)Deprecated: Use GetViolationRequest.ProtoReflect.Descriptor instead.
func (*GetViolationRequest) GetName
func (x *GetViolationRequest) GetName() stringfunc (*GetViolationRequest) ProtoMessage
func (*GetViolationRequest) ProtoMessage()func (*GetViolationRequest) ProtoReflect
func (x *GetViolationRequest) ProtoReflect() protoreflect.Messagefunc (*GetViolationRequest) Reset
func (x *GetViolationRequest) Reset()func (*GetViolationRequest) String
func (x *GetViolationRequest) String() stringGetWorkloadRequest
type GetWorkloadRequest struct {
// Required. The resource name of the Workload to fetch. This is the workload's
// relative path in the API, formatted as
// "organizations/{organization_id}/locations/{location_id}/workloads/{workload_id}".
// For example,
// "organizations/123/locations/us-east1/workloads/assured-workload-1".
Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
// contains filtered or unexported fields
}Request for fetching a workload.
func (*GetWorkloadRequest) Descriptor
func (*GetWorkloadRequest) Descriptor() ([]byte, []int)Deprecated: Use GetWorkloadRequest.ProtoReflect.Descriptor instead.
func (*GetWorkloadRequest) GetName
func (x *GetWorkloadRequest) GetName() stringfunc (*GetWorkloadRequest) ProtoMessage
func (*GetWorkloadRequest) ProtoMessage()func (*GetWorkloadRequest) ProtoReflect
func (x *GetWorkloadRequest) ProtoReflect() protoreflect.Messagefunc (*GetWorkloadRequest) Reset
func (x *GetWorkloadRequest) Reset()func (*GetWorkloadRequest) String
func (x *GetWorkloadRequest) String() stringListViolationsRequest
type ListViolationsRequest struct {
// Required. The Workload name.
// Format `organizations/{org_id}/locations/{location}/workloads/{workload}`.
Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
// Optional. Specifies the time window for retrieving active Violations.
// When specified, retrieves Violations that were active between start_time
// and end_time.
Interval *TimeWindow `protobuf:"bytes,2,opt,name=interval,proto3" json:"interval,omitempty"`
// Optional. Page size.
PageSize int32 `protobuf:"varint,3,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
// Optional. Page token returned from previous request.
PageToken string `protobuf:"bytes,4,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
// Optional. A custom filter for filtering by the Violations properties.
Filter string `protobuf:"bytes,5,opt,name=filter,proto3" json:"filter,omitempty"`
// contains filtered or unexported fields
}Request for fetching violations in an organization.
func (*ListViolationsRequest) Descriptor
func (*ListViolationsRequest) Descriptor() ([]byte, []int)Deprecated: Use ListViolationsRequest.ProtoReflect.Descriptor instead.
func (*ListViolationsRequest) GetFilter
func (x *ListViolationsRequest) GetFilter() stringfunc (*ListViolationsRequest) GetInterval
func (x *ListViolationsRequest) GetInterval() *TimeWindowfunc (*ListViolationsRequest) GetPageSize
func (x *ListViolationsRequest) GetPageSize() int32func (*ListViolationsRequest) GetPageToken
func (x *ListViolationsRequest) GetPageToken() stringfunc (*ListViolationsRequest) GetParent
func (x *ListViolationsRequest) GetParent() stringfunc (*ListViolationsRequest) ProtoMessage
func (*ListViolationsRequest) ProtoMessage()func (*ListViolationsRequest) ProtoReflect
func (x *ListViolationsRequest) ProtoReflect() protoreflect.Messagefunc (*ListViolationsRequest) Reset
func (x *ListViolationsRequest) Reset()func (*ListViolationsRequest) String
func (x *ListViolationsRequest) String() stringListViolationsResponse
type ListViolationsResponse struct {
// List of Violations under a Workload.
Violations []*Violation `protobuf:"bytes,1,rep,name=violations,proto3" json:"violations,omitempty"`
// The next page token. Returns empty if reached the last page.
NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
// contains filtered or unexported fields
}Response of ListViolations endpoint.
func (*ListViolationsResponse) Descriptor
func (*ListViolationsResponse) Descriptor() ([]byte, []int)Deprecated: Use ListViolationsResponse.ProtoReflect.Descriptor instead.
func (*ListViolationsResponse) GetNextPageToken
func (x *ListViolationsResponse) GetNextPageToken() stringfunc (*ListViolationsResponse) GetViolations
func (x *ListViolationsResponse) GetViolations() []*Violationfunc (*ListViolationsResponse) ProtoMessage
func (*ListViolationsResponse) ProtoMessage()func (*ListViolationsResponse) ProtoReflect
func (x *ListViolationsResponse) ProtoReflect() protoreflect.Messagefunc (*ListViolationsResponse) Reset
func (x *ListViolationsResponse) Reset()func (*ListViolationsResponse) String
func (x *ListViolationsResponse) String() stringListWorkloadsRequest
type ListWorkloadsRequest struct {
// Required. Parent Resource to list workloads from.
// Must be of the form `organizations/{org_id}/locations/{location}`.
Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
// Page size.
PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
// Page token returned from previous request. Page token contains context from
// previous request. Page token needs to be passed in the second and following
// requests.
PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
// A custom filter for filtering by properties of a workload. At this time,
// only filtering by labels is supported.
Filter string `protobuf:"bytes,4,opt,name=filter,proto3" json:"filter,omitempty"`
// contains filtered or unexported fields
}Request for fetching workloads in an organization.
func (*ListWorkloadsRequest) Descriptor
func (*ListWorkloadsRequest) Descriptor() ([]byte, []int)Deprecated: Use ListWorkloadsRequest.ProtoReflect.Descriptor instead.
func (*ListWorkloadsRequest) GetFilter
func (x *ListWorkloadsRequest) GetFilter() stringfunc (*ListWorkloadsRequest) GetPageSize
func (x *ListWorkloadsRequest) GetPageSize() int32func (*ListWorkloadsRequest) GetPageToken
func (x *ListWorkloadsRequest) GetPageToken() stringfunc (*ListWorkloadsRequest) GetParent
func (x *ListWorkloadsRequest) GetParent() stringfunc (*ListWorkloadsRequest) ProtoMessage
func (*ListWorkloadsRequest) ProtoMessage()func (*ListWorkloadsRequest) ProtoReflect
func (x *ListWorkloadsRequest) ProtoReflect() protoreflect.Messagefunc (*ListWorkloadsRequest) Reset
func (x *ListWorkloadsRequest) Reset()func (*ListWorkloadsRequest) String
func (x *ListWorkloadsRequest) String() stringListWorkloadsResponse
type ListWorkloadsResponse struct {
// List of Workloads under a given parent.
Workloads []*Workload `protobuf:"bytes,1,rep,name=workloads,proto3" json:"workloads,omitempty"`
// The next page token. Return empty if reached the last page.
NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
// contains filtered or unexported fields
}Response of ListWorkloads endpoint.
func (*ListWorkloadsResponse) Descriptor
func (*ListWorkloadsResponse) Descriptor() ([]byte, []int)Deprecated: Use ListWorkloadsResponse.ProtoReflect.Descriptor instead.
func (*ListWorkloadsResponse) GetNextPageToken
func (x *ListWorkloadsResponse) GetNextPageToken() stringfunc (*ListWorkloadsResponse) GetWorkloads
func (x *ListWorkloadsResponse) GetWorkloads() []*Workloadfunc (*ListWorkloadsResponse) ProtoMessage
func (*ListWorkloadsResponse) ProtoMessage()func (*ListWorkloadsResponse) ProtoReflect
func (x *ListWorkloadsResponse) ProtoReflect() protoreflect.Messagefunc (*ListWorkloadsResponse) Reset
func (x *ListWorkloadsResponse) Reset()func (*ListWorkloadsResponse) String
func (x *ListWorkloadsResponse) String() stringRestrictAllowedResourcesRequest
type RestrictAllowedResourcesRequest struct {
Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
RestrictionType RestrictAllowedResourcesRequest_RestrictionType "" /* 193 byte string literal not displayed */
}Request for restricting list of available resources in Workload environment.
func (*RestrictAllowedResourcesRequest) Descriptor
func (*RestrictAllowedResourcesRequest) Descriptor() ([]byte, []int)Deprecated: Use RestrictAllowedResourcesRequest.ProtoReflect.Descriptor instead.
func (*RestrictAllowedResourcesRequest) GetName
func (x *RestrictAllowedResourcesRequest) GetName() stringfunc (*RestrictAllowedResourcesRequest) GetRestrictionType
func (x *RestrictAllowedResourcesRequest) GetRestrictionType() RestrictAllowedResourcesRequest_RestrictionTypefunc (*RestrictAllowedResourcesRequest) ProtoMessage
func (*RestrictAllowedResourcesRequest) ProtoMessage()func (*RestrictAllowedResourcesRequest) ProtoReflect
func (x *RestrictAllowedResourcesRequest) ProtoReflect() protoreflect.Messagefunc (*RestrictAllowedResourcesRequest) Reset
func (x *RestrictAllowedResourcesRequest) Reset()func (*RestrictAllowedResourcesRequest) String
func (x *RestrictAllowedResourcesRequest) String() stringRestrictAllowedResourcesRequest_RestrictionType
type RestrictAllowedResourcesRequest_RestrictionType int32The type of restriction.
RestrictAllowedResourcesRequest_RESTRICTION_TYPE_UNSPECIFIED, RestrictAllowedResourcesRequest_ALLOW_ALL_GCP_RESOURCES, RestrictAllowedResourcesRequest_ALLOW_COMPLIANT_RESOURCES
const (
// Unknown restriction type.
RestrictAllowedResourcesRequest_RESTRICTION_TYPE_UNSPECIFIED RestrictAllowedResourcesRequest_RestrictionType = 0
// Allow the use all of all gcp products, irrespective of the compliance
// posture. This effectively removes gcp.restrictServiceUsage OrgPolicy
// on the AssuredWorkloads Folder.
RestrictAllowedResourcesRequest_ALLOW_ALL_GCP_RESOURCES RestrictAllowedResourcesRequest_RestrictionType = 1
// Based on Workload's compliance regime, allowed list changes.
// See - https://cloud.google.com/assured-workloads/docs/supported-products
// for the list of supported resources.
RestrictAllowedResourcesRequest_ALLOW_COMPLIANT_RESOURCES RestrictAllowedResourcesRequest_RestrictionType = 2
)func (RestrictAllowedResourcesRequest_RestrictionType) Descriptor
func (RestrictAllowedResourcesRequest_RestrictionType) Descriptor() protoreflect.EnumDescriptorfunc (RestrictAllowedResourcesRequest_RestrictionType) Enum
func (x RestrictAllowedResourcesRequest_RestrictionType) Enum() *RestrictAllowedResourcesRequest_RestrictionTypefunc (RestrictAllowedResourcesRequest_RestrictionType) EnumDescriptor
func (RestrictAllowedResourcesRequest_RestrictionType) EnumDescriptor() ([]byte, []int)Deprecated: Use RestrictAllowedResourcesRequest_RestrictionType.Descriptor instead.
func (RestrictAllowedResourcesRequest_RestrictionType) Number
func (x RestrictAllowedResourcesRequest_RestrictionType) Number() protoreflect.EnumNumberfunc (RestrictAllowedResourcesRequest_RestrictionType) String
func (x RestrictAllowedResourcesRequest_RestrictionType) String() stringfunc (RestrictAllowedResourcesRequest_RestrictionType) Type
RestrictAllowedResourcesResponse
type RestrictAllowedResourcesResponse struct {
// contains filtered or unexported fields
}Response for restricting the list of allowed resources.
func (*RestrictAllowedResourcesResponse) Descriptor
func (*RestrictAllowedResourcesResponse) Descriptor() ([]byte, []int)Deprecated: Use RestrictAllowedResourcesResponse.ProtoReflect.Descriptor instead.
func (*RestrictAllowedResourcesResponse) ProtoMessage
func (*RestrictAllowedResourcesResponse) ProtoMessage()func (*RestrictAllowedResourcesResponse) ProtoReflect
func (x *RestrictAllowedResourcesResponse) ProtoReflect() protoreflect.Messagefunc (*RestrictAllowedResourcesResponse) Reset
func (x *RestrictAllowedResourcesResponse) Reset()func (*RestrictAllowedResourcesResponse) String
func (x *RestrictAllowedResourcesResponse) String() stringTimeWindow
type TimeWindow struct {
// The start of the time window.
StartTime *timestamppb.Timestamp `protobuf:"bytes,1,opt,name=start_time,json=startTime,proto3" json:"start_time,omitempty"`
// The end of the time window.
EndTime *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=end_time,json=endTime,proto3" json:"end_time,omitempty"`
// contains filtered or unexported fields
}Interval defining a time window.
func (*TimeWindow) Descriptor
func (*TimeWindow) Descriptor() ([]byte, []int)Deprecated: Use TimeWindow.ProtoReflect.Descriptor instead.
func (*TimeWindow) GetEndTime
func (x *TimeWindow) GetEndTime() *timestamppb.Timestampfunc (*TimeWindow) GetStartTime
func (x *TimeWindow) GetStartTime() *timestamppb.Timestampfunc (*TimeWindow) ProtoMessage
func (*TimeWindow) ProtoMessage()func (*TimeWindow) ProtoReflect
func (x *TimeWindow) ProtoReflect() protoreflect.Messagefunc (*TimeWindow) Reset
func (x *TimeWindow) Reset()func (*TimeWindow) String
func (x *TimeWindow) String() stringUnimplementedAssuredWorkloadsServiceServer
type UnimplementedAssuredWorkloadsServiceServer struct {
}UnimplementedAssuredWorkloadsServiceServer can be embedded to have forward compatible implementations.
func (*UnimplementedAssuredWorkloadsServiceServer) AcknowledgeViolation
func (*UnimplementedAssuredWorkloadsServiceServer) AcknowledgeViolation(context.Context, *AcknowledgeViolationRequest) (*AcknowledgeViolationResponse, error)func (*UnimplementedAssuredWorkloadsServiceServer) CreateWorkload
func (*UnimplementedAssuredWorkloadsServiceServer) CreateWorkload(context.Context, *CreateWorkloadRequest) (*longrunningpb.Operation, error)func (*UnimplementedAssuredWorkloadsServiceServer) DeleteWorkload
func (*UnimplementedAssuredWorkloadsServiceServer) DeleteWorkload(context.Context, *DeleteWorkloadRequest) (*emptypb.Empty, error)func (*UnimplementedAssuredWorkloadsServiceServer) GetViolation
func (*UnimplementedAssuredWorkloadsServiceServer) GetViolation(context.Context, *GetViolationRequest) (*Violation, error)func (*UnimplementedAssuredWorkloadsServiceServer) GetWorkload
func (*UnimplementedAssuredWorkloadsServiceServer) GetWorkload(context.Context, *GetWorkloadRequest) (*Workload, error)func (*UnimplementedAssuredWorkloadsServiceServer) ListViolations
func (*UnimplementedAssuredWorkloadsServiceServer) ListViolations(context.Context, *ListViolationsRequest) (*ListViolationsResponse, error)func (*UnimplementedAssuredWorkloadsServiceServer) ListWorkloads
func (*UnimplementedAssuredWorkloadsServiceServer) ListWorkloads(context.Context, *ListWorkloadsRequest) (*ListWorkloadsResponse, error)func (*UnimplementedAssuredWorkloadsServiceServer) RestrictAllowedResources
func (*UnimplementedAssuredWorkloadsServiceServer) RestrictAllowedResources(context.Context, *RestrictAllowedResourcesRequest) (*RestrictAllowedResourcesResponse, error)func (*UnimplementedAssuredWorkloadsServiceServer) UpdateWorkload
func (*UnimplementedAssuredWorkloadsServiceServer) UpdateWorkload(context.Context, *UpdateWorkloadRequest) (*Workload, error)UpdateWorkloadRequest
type UpdateWorkloadRequest struct {
// Required. The workload to update.
// The workload's `name` field is used to identify the workload to be updated.
// Format:
// organizations/{org_id}/locations/{location_id}/workloads/{workload_id}
Workload *Workload `protobuf:"bytes,1,opt,name=workload,proto3" json:"workload,omitempty"`
// Required. The list of fields to be updated.
UpdateMask *fieldmaskpb.FieldMask `protobuf:"bytes,2,opt,name=update_mask,json=updateMask,proto3" json:"update_mask,omitempty"`
// contains filtered or unexported fields
}Request for Updating a workload.
func (*UpdateWorkloadRequest) Descriptor
func (*UpdateWorkloadRequest) Descriptor() ([]byte, []int)Deprecated: Use UpdateWorkloadRequest.ProtoReflect.Descriptor instead.
func (*UpdateWorkloadRequest) GetUpdateMask
func (x *UpdateWorkloadRequest) GetUpdateMask() *fieldmaskpb.FieldMaskfunc (*UpdateWorkloadRequest) GetWorkload
func (x *UpdateWorkloadRequest) GetWorkload() *Workloadfunc (*UpdateWorkloadRequest) ProtoMessage
func (*UpdateWorkloadRequest) ProtoMessage()func (*UpdateWorkloadRequest) ProtoReflect
func (x *UpdateWorkloadRequest) ProtoReflect() protoreflect.Messagefunc (*UpdateWorkloadRequest) Reset
func (x *UpdateWorkloadRequest) Reset()func (*UpdateWorkloadRequest) String
func (x *UpdateWorkloadRequest) String() stringViolation
type Violation struct {
Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
Description string `protobuf:"bytes,2,opt,name=description,proto3" json:"description,omitempty"`
BeginTime *timestamppb.Timestamp `protobuf:"bytes,3,opt,name=begin_time,json=beginTime,proto3" json:"begin_time,omitempty"`
UpdateTime *timestamppb.Timestamp `protobuf:"bytes,4,opt,name=update_time,json=updateTime,proto3" json:"update_time,omitempty"`
ResolveTime *timestamppb.Timestamp `protobuf:"bytes,5,opt,name=resolve_time,json=resolveTime,proto3" json:"resolve_time,omitempty"`
Category string `protobuf:"bytes,6,opt,name=category,proto3" json:"category,omitempty"`
State Violation_State `protobuf:"varint,7,opt,name=state,proto3,enum=google.cloud.assuredworkloads.v1.Violation_State" json:"state,omitempty"`
OrgPolicyConstraint string `protobuf:"bytes,8,opt,name=org_policy_constraint,json=orgPolicyConstraint,proto3" json:"org_policy_constraint,omitempty"`
AuditLogLink string `protobuf:"bytes,11,opt,name=audit_log_link,json=auditLogLink,proto3" json:"audit_log_link,omitempty"`
NonCompliantOrgPolicy string "" /* 129 byte string literal not displayed */
Remediation *Violation_Remediation `protobuf:"bytes,13,opt,name=remediation,proto3" json:"remediation,omitempty"`
Acknowledged bool `protobuf:"varint,14,opt,name=acknowledged,proto3" json:"acknowledged,omitempty"`
AcknowledgementTime *timestamppb.Timestamp `protobuf:"bytes,15,opt,name=acknowledgement_time,json=acknowledgementTime,proto3,oneof" json:"acknowledgement_time,omitempty"`
ExceptionAuditLogLink string "" /* 129 byte string literal not displayed */
}Workload monitoring Violation.
func (*Violation) Descriptor
Deprecated: Use Violation.ProtoReflect.Descriptor instead.
func (*Violation) GetAcknowledged
func (*Violation) GetAcknowledgementTime
func (x *Violation) GetAcknowledgementTime() *timestamppb.Timestampfunc (*Violation) GetAuditLogLink
func (*Violation) GetBeginTime
func (x *Violation) GetBeginTime() *timestamppb.Timestampfunc (*Violation) GetCategory
func (*Violation) GetDescription
func (*Violation) GetExceptionAuditLogLink
func (*Violation) GetName
func (*Violation) GetNonCompliantOrgPolicy
func (*Violation) GetOrgPolicyConstraint
func (*Violation) GetRemediation
func (x *Violation) GetRemediation() *Violation_Remediationfunc (*Violation) GetResolveTime
func (x *Violation) GetResolveTime() *timestamppb.Timestampfunc (*Violation) GetState
func (x *Violation) GetState() Violation_Statefunc (*Violation) GetUpdateTime
func (x *Violation) GetUpdateTime() *timestamppb.Timestampfunc (*Violation) ProtoMessage
func (*Violation) ProtoMessage()func (*Violation) ProtoReflect
func (x *Violation) ProtoReflect() protoreflect.Messagefunc (*Violation) Reset
func (x *Violation) Reset()func (*Violation) String
Violation_Remediation
type Violation_Remediation struct {
Instructions *Violation_Remediation_Instructions `protobuf:"bytes,1,opt,name=instructions,proto3" json:"instructions,omitempty"`
CompliantValues []string `protobuf:"bytes,2,rep,name=compliant_values,json=compliantValues,proto3" json:"compliant_values,omitempty"`
RemediationType Violation_Remediation_RemediationType "" /* 183 byte string literal not displayed */
}Represents remediation guidance to resolve compliance violation for AssuredWorkload
func (*Violation_Remediation) Descriptor
func (*Violation_Remediation) Descriptor() ([]byte, []int)Deprecated: Use Violation_Remediation.ProtoReflect.Descriptor instead.
func (*Violation_Remediation) GetCompliantValues
func (x *Violation_Remediation) GetCompliantValues() []stringfunc (*Violation_Remediation) GetInstructions
func (x *Violation_Remediation) GetInstructions() *Violation_Remediation_Instructionsfunc (*Violation_Remediation) GetRemediationType
func (x *Violation_Remediation) GetRemediationType() Violation_Remediation_RemediationTypefunc (*Violation_Remediation) ProtoMessage
func (*Violation_Remediation) ProtoMessage()func (*Violation_Remediation) ProtoReflect
func (x *Violation_Remediation) ProtoReflect() protoreflect.Messagefunc (*Violation_Remediation) Reset
func (x *Violation_Remediation) Reset()func (*Violation_Remediation) String
func (x *Violation_Remediation) String() stringViolation_Remediation_Instructions
type Violation_Remediation_Instructions struct {
// Remediation instructions to resolve violation via gcloud cli
GcloudInstructions *Violation_Remediation_Instructions_Gcloud `protobuf:"bytes,1,opt,name=gcloud_instructions,json=gcloudInstructions,proto3" json:"gcloud_instructions,omitempty"`
// Remediation instructions to resolve violation via cloud console
ConsoleInstructions *Violation_Remediation_Instructions_Console `protobuf:"bytes,2,opt,name=console_instructions,json=consoleInstructions,proto3" json:"console_instructions,omitempty"`
// contains filtered or unexported fields
}Instructions to remediate violation
func (*Violation_Remediation_Instructions) Descriptor
func (*Violation_Remediation_Instructions) Descriptor() ([]byte, []int)Deprecated: Use Violation_Remediation_Instructions.ProtoReflect.Descriptor instead.
func (*Violation_Remediation_Instructions) GetConsoleInstructions
func (x *Violation_Remediation_Instructions) GetConsoleInstructions() *Violation_Remediation_Instructions_Consolefunc (*Violation_Remediation_Instructions) GetGcloudInstructions
func (x *Violation_Remediation_Instructions) GetGcloudInstructions() *Violation_Remediation_Instructions_Gcloudfunc (*Violation_Remediation_Instructions) ProtoMessage
func (*Violation_Remediation_Instructions) ProtoMessage()func (*Violation_Remediation_Instructions) ProtoReflect
func (x *Violation_Remediation_Instructions) ProtoReflect() protoreflect.Messagefunc (*Violation_Remediation_Instructions) Reset
func (x *Violation_Remediation_Instructions) Reset()func (*Violation_Remediation_Instructions) String
func (x *Violation_Remediation_Instructions) String() stringViolation_Remediation_Instructions_Console
type Violation_Remediation_Instructions_Console struct {
// Link to console page where violations can be resolved
ConsoleUris []string `protobuf:"bytes,1,rep,name=console_uris,json=consoleUris,proto3" json:"console_uris,omitempty"`
// Steps to resolve violation via cloud console
Steps []string `protobuf:"bytes,2,rep,name=steps,proto3" json:"steps,omitempty"`
// Additional urls for more information about steps
AdditionalLinks []string `protobuf:"bytes,3,rep,name=additional_links,json=additionalLinks,proto3" json:"additional_links,omitempty"`
// contains filtered or unexported fields
}Remediation instructions to resolve violation via cloud console
func (*Violation_Remediation_Instructions_Console) Descriptor
func (*Violation_Remediation_Instructions_Console) Descriptor() ([]byte, []int)Deprecated: Use Violation_Remediation_Instructions_Console.ProtoReflect.Descriptor instead.
func (*Violation_Remediation_Instructions_Console) GetAdditionalLinks
func (x *Violation_Remediation_Instructions_Console) GetAdditionalLinks() []stringfunc (*Violation_Remediation_Instructions_Console) GetConsoleUris
func (x *Violation_Remediation_Instructions_Console) GetConsoleUris() []stringfunc (*Violation_Remediation_Instructions_Console) GetSteps
func (x *Violation_Remediation_Instructions_Console) GetSteps() []stringfunc (*Violation_Remediation_Instructions_Console) ProtoMessage
func (*Violation_Remediation_Instructions_Console) ProtoMessage()func (*Violation_Remediation_Instructions_Console) ProtoReflect
func (x *Violation_Remediation_Instructions_Console) ProtoReflect() protoreflect.Messagefunc (*Violation_Remediation_Instructions_Console) Reset
func (x *Violation_Remediation_Instructions_Console) Reset()func (*Violation_Remediation_Instructions_Console) String
func (x *Violation_Remediation_Instructions_Console) String() stringViolation_Remediation_Instructions_Gcloud
type Violation_Remediation_Instructions_Gcloud struct {
// Gcloud command to resolve violation
GcloudCommands []string `protobuf:"bytes,1,rep,name=gcloud_commands,json=gcloudCommands,proto3" json:"gcloud_commands,omitempty"`
// Steps to resolve violation via gcloud cli
Steps []string `protobuf:"bytes,2,rep,name=steps,proto3" json:"steps,omitempty"`
// Additional urls for more information about steps
AdditionalLinks []string `protobuf:"bytes,3,rep,name=additional_links,json=additionalLinks,proto3" json:"additional_links,omitempty"`
// contains filtered or unexported fields
}Remediation instructions to resolve violation via gcloud cli
func (*Violation_Remediation_Instructions_Gcloud) Descriptor
func (*Violation_Remediation_Instructions_Gcloud) Descriptor() ([]byte, []int)Deprecated: Use Violation_Remediation_Instructions_Gcloud.ProtoReflect.Descriptor instead.
func (*Violation_Remediation_Instructions_Gcloud) GetAdditionalLinks
func (x *Violation_Remediation_Instructions_Gcloud) GetAdditionalLinks() []stringfunc (*Violation_Remediation_Instructions_Gcloud) GetGcloudCommands
func (x *Violation_Remediation_Instructions_Gcloud) GetGcloudCommands() []stringfunc (*Violation_Remediation_Instructions_Gcloud) GetSteps
func (x *Violation_Remediation_Instructions_Gcloud) GetSteps() []stringfunc (*Violation_Remediation_Instructions_Gcloud) ProtoMessage
func (*Violation_Remediation_Instructions_Gcloud) ProtoMessage()func (*Violation_Remediation_Instructions_Gcloud) ProtoReflect
func (x *Violation_Remediation_Instructions_Gcloud) ProtoReflect() protoreflect.Messagefunc (*Violation_Remediation_Instructions_Gcloud) Reset
func (x *Violation_Remediation_Instructions_Gcloud) Reset()func (*Violation_Remediation_Instructions_Gcloud) String
func (x *Violation_Remediation_Instructions_Gcloud) String() stringViolation_Remediation_RemediationType
type Violation_Remediation_RemediationType int32Classifying remediation into various types based on the kind of violation. For example, violations caused due to changes in boolean org policy requires different remediation instructions compared to violation caused due to changes in allowed values of list org policy.
Violation_Remediation_REMEDIATION_TYPE_UNSPECIFIED, Violation_Remediation_REMEDIATION_BOOLEAN_ORG_POLICY_VIOLATION, Violation_Remediation_REMEDIATION_LIST_ALLOWED_VALUES_ORG_POLICY_VIOLATION, Violation_Remediation_REMEDIATION_LIST_DENIED_VALUES_ORG_POLICY_VIOLATION, Violation_Remediation_REMEDIATION_RESTRICT_CMEK_CRYPTO_KEY_PROJECTS_ORG_POLICY_VIOLATION
const (
// Unspecified remediation type
Violation_Remediation_REMEDIATION_TYPE_UNSPECIFIED Violation_Remediation_RemediationType = 0
// Remediation type for boolean org policy
Violation_Remediation_REMEDIATION_BOOLEAN_ORG_POLICY_VIOLATION Violation_Remediation_RemediationType = 1
// Remediation type for list org policy which have allowed values in the
// monitoring rule
Violation_Remediation_REMEDIATION_LIST_ALLOWED_VALUES_ORG_POLICY_VIOLATION Violation_Remediation_RemediationType = 2
// Remediation type for list org policy which have denied values in the
// monitoring rule
Violation_Remediation_REMEDIATION_LIST_DENIED_VALUES_ORG_POLICY_VIOLATION Violation_Remediation_RemediationType = 3
// Remediation type for gcp.restrictCmekCryptoKeyProjects
Violation_Remediation_REMEDIATION_RESTRICT_CMEK_CRYPTO_KEY_PROJECTS_ORG_POLICY_VIOLATION Violation_Remediation_RemediationType = 4
)func (Violation_Remediation_RemediationType) Descriptor
func (Violation_Remediation_RemediationType) Descriptor() protoreflect.EnumDescriptorfunc (Violation_Remediation_RemediationType) Enum
func (Violation_Remediation_RemediationType) EnumDescriptor
func (Violation_Remediation_RemediationType) EnumDescriptor() ([]byte, []int)Deprecated: Use Violation_Remediation_RemediationType.Descriptor instead.
func (Violation_Remediation_RemediationType) Number
func (x Violation_Remediation_RemediationType) Number() protoreflect.EnumNumberfunc (Violation_Remediation_RemediationType) String
func (x Violation_Remediation_RemediationType) String() stringfunc (Violation_Remediation_RemediationType) Type
func (Violation_Remediation_RemediationType) Type() protoreflect.EnumTypeViolation_State
type Violation_State int32Violation State Values
Violation_STATE_UNSPECIFIED, Violation_RESOLVED, Violation_UNRESOLVED, Violation_EXCEPTION
const (
// Unspecified state.
Violation_STATE_UNSPECIFIED Violation_State = 0
// Violation is resolved.
Violation_RESOLVED Violation_State = 2
// Violation is Unresolved
Violation_UNRESOLVED Violation_State = 3
// Violation is Exception
Violation_EXCEPTION Violation_State = 4
)func (Violation_State) Descriptor
func (Violation_State) Descriptor() protoreflect.EnumDescriptorfunc (Violation_State) Enum
func (x Violation_State) Enum() *Violation_Statefunc (Violation_State) EnumDescriptor
func (Violation_State) EnumDescriptor() ([]byte, []int)Deprecated: Use Violation_State.Descriptor instead.
func (Violation_State) Number
func (x Violation_State) Number() protoreflect.EnumNumberfunc (Violation_State) String
func (x Violation_State) String() stringfunc (Violation_State) Type
func (Violation_State) Type() protoreflect.EnumTypeWorkload
type Workload struct {
Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
DisplayName string `protobuf:"bytes,2,opt,name=display_name,json=displayName,proto3" json:"display_name,omitempty"`
Resources []*Workload_ResourceInfo `protobuf:"bytes,3,rep,name=resources,proto3" json:"resources,omitempty"`
ComplianceRegime Workload_ComplianceRegime "" /* 174 byte string literal not displayed */
CreateTime *timestamppb.Timestamp `protobuf:"bytes,5,opt,name=create_time,json=createTime,proto3" json:"create_time,omitempty"`
BillingAccount string `protobuf:"bytes,6,opt,name=billing_account,json=billingAccount,proto3" json:"billing_account,omitempty"`
Etag string `protobuf:"bytes,9,opt,name=etag,proto3" json:"etag,omitempty"`
Labels map[string]string "" /* 154 byte string literal not displayed */
ProvisionedResourcesParent string "" /* 142 byte string literal not displayed */
KmsSettings *Workload_KMSSettings `protobuf:"bytes,14,opt,name=kms_settings,json=kmsSettings,proto3" json:"kms_settings,omitempty"`
ResourceSettings []*Workload_ResourceSettings `protobuf:"bytes,15,rep,name=resource_settings,json=resourceSettings,proto3" json:"resource_settings,omitempty"`
KajEnrollmentState Workload_KajEnrollmentState "" /* 185 byte string literal not displayed */
EnableSovereignControls bool "" /* 134 byte string literal not displayed */
SaaEnrollmentResponse *Workload_SaaEnrollmentResponse "" /* 127 byte string literal not displayed */
CompliantButDisallowedServices []string "" /* 156 byte string literal not displayed */
Partner Workload_Partner `protobuf:"varint,25,opt,name=partner,proto3,enum=google.cloud.assuredworkloads.v1.Workload_Partner" json:"partner,omitempty"`
}A Workload object for managing highly regulated workloads of cloud customers.
func (*Workload) Descriptor
Deprecated: Use Workload.ProtoReflect.Descriptor instead.
func (*Workload) GetBillingAccount
func (*Workload) GetComplianceRegime
func (x *Workload) GetComplianceRegime() Workload_ComplianceRegimefunc (*Workload) GetCompliantButDisallowedServices
func (*Workload) GetCreateTime
func (x *Workload) GetCreateTime() *timestamppb.Timestampfunc (*Workload) GetDisplayName
func (*Workload) GetEnableSovereignControls
func (*Workload) GetEtag
func (*Workload) GetKajEnrollmentState
func (x *Workload) GetKajEnrollmentState() Workload_KajEnrollmentStatefunc (*Workload) GetKmsSettings
func (x *Workload) GetKmsSettings() *Workload_KMSSettingsDeprecated: Marked as deprecated in google/cloud/assuredworkloads/v1/assuredworkloads.proto.
func (*Workload) GetLabels
func (*Workload) GetName
func (*Workload) GetPartner
func (x *Workload) GetPartner() Workload_Partnerfunc (*Workload) GetProvisionedResourcesParent
func (*Workload) GetResourceSettings
func (x *Workload) GetResourceSettings() []*Workload_ResourceSettingsfunc (*Workload) GetResources
func (x *Workload) GetResources() []*Workload_ResourceInfofunc (*Workload) GetSaaEnrollmentResponse
func (x *Workload) GetSaaEnrollmentResponse() *Workload_SaaEnrollmentResponsefunc (*Workload) ProtoMessage
func (*Workload) ProtoMessage()func (*Workload) ProtoReflect
func (x *Workload) ProtoReflect() protoreflect.Messagefunc (*Workload) Reset
func (x *Workload) Reset()func (*Workload) String
Workload_ComplianceRegime
type Workload_ComplianceRegime int32Supported Compliance Regimes.
Workload_COMPLIANCE_REGIME_UNSPECIFIED, Workload_IL4, Workload_CJIS, Workload_FEDRAMP_HIGH, Workload_FEDRAMP_MODERATE, Workload_US_REGIONAL_ACCESS, Workload_HIPAA, Workload_HITRUST, Workload_EU_REGIONS_AND_SUPPORT, Workload_CA_REGIONS_AND_SUPPORT, Workload_ITAR, Workload_AU_REGIONS_AND_US_SUPPORT, Workload_ASSURED_WORKLOADS_FOR_PARTNERS
const (
// Unknown compliance regime.
Workload_COMPLIANCE_REGIME_UNSPECIFIED Workload_ComplianceRegime = 0
// Information protection as per DoD IL4 requirements.
Workload_IL4 Workload_ComplianceRegime = 1
// Criminal Justice Information Services (CJIS) Security policies.
Workload_CJIS Workload_ComplianceRegime = 2
// FedRAMP High data protection controls
Workload_FEDRAMP_HIGH Workload_ComplianceRegime = 3
// FedRAMP Moderate data protection controls
Workload_FEDRAMP_MODERATE Workload_ComplianceRegime = 4
// Assured Workloads For US Regions data protection controls
Workload_US_REGIONAL_ACCESS Workload_ComplianceRegime = 5
// Health Insurance Portability and Accountability Act controls
Workload_HIPAA Workload_ComplianceRegime = 6
// Health Information Trust Alliance controls
Workload_HITRUST Workload_ComplianceRegime = 7
// Assured Workloads For EU Regions and Support controls
Workload_EU_REGIONS_AND_SUPPORT Workload_ComplianceRegime = 8
// Assured Workloads For Canada Regions and Support controls
Workload_CA_REGIONS_AND_SUPPORT Workload_ComplianceRegime = 9
// International Traffic in Arms Regulations
Workload_ITAR Workload_ComplianceRegime = 10
// Assured Workloads for Australia Regions and Support controls
// Available for public preview consumption.
// Don't create production workloads.
Workload_AU_REGIONS_AND_US_SUPPORT Workload_ComplianceRegime = 11
// Assured Workloads for Partners
Workload_ASSURED_WORKLOADS_FOR_PARTNERS Workload_ComplianceRegime = 12
)func (Workload_ComplianceRegime) Descriptor
func (Workload_ComplianceRegime) Descriptor() protoreflect.EnumDescriptorfunc (Workload_ComplianceRegime) Enum
func (x Workload_ComplianceRegime) Enum() *Workload_ComplianceRegimefunc (Workload_ComplianceRegime) EnumDescriptor
func (Workload_ComplianceRegime) EnumDescriptor() ([]byte, []int)Deprecated: Use Workload_ComplianceRegime.Descriptor instead.
func (Workload_ComplianceRegime) Number
func (x Workload_ComplianceRegime) Number() protoreflect.EnumNumberfunc (Workload_ComplianceRegime) String
func (x Workload_ComplianceRegime) String() stringfunc (Workload_ComplianceRegime) Type
func (Workload_ComplianceRegime) Type() protoreflect.EnumTypeWorkload_KMSSettings (deprecated)
type Workload_KMSSettings struct {
// Required. Input only. Immutable. The time at which the Key Management Service will automatically create a
// new version of the crypto key and mark it as the primary.
NextRotationTime *timestamppb.Timestamp `protobuf:"bytes,1,opt,name=next_rotation_time,json=nextRotationTime,proto3" json:"next_rotation_time,omitempty"`
// Required. Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key
// Management Service automatically rotates a key. Must be at least 24 hours
// and at most 876,000 hours.
RotationPeriod *durationpb.Duration `protobuf:"bytes,2,opt,name=rotation_period,json=rotationPeriod,proto3" json:"rotation_period,omitempty"`
// contains filtered or unexported fields
}Settings specific to the Key Management Service. This message is deprecated. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.
Deprecated: Marked as deprecated in google/cloud/assuredworkloads/v1/assuredworkloads.proto.
func (*Workload_KMSSettings) Descriptor (deprecated)
func (*Workload_KMSSettings) Descriptor() ([]byte, []int)Deprecated: Use Workload_KMSSettings.ProtoReflect.Descriptor instead.
func (*Workload_KMSSettings) GetNextRotationTime (deprecated)
func (x *Workload_KMSSettings) GetNextRotationTime() *timestamppb.Timestampfunc (*Workload_KMSSettings) GetRotationPeriod (deprecated)
func (x *Workload_KMSSettings) GetRotationPeriod() *durationpb.Durationfunc (*Workload_KMSSettings) ProtoMessage (deprecated)
func (*Workload_KMSSettings) ProtoMessage()func (*Workload_KMSSettings) ProtoReflect (deprecated)
func (x *Workload_KMSSettings) ProtoReflect() protoreflect.Messagefunc (*Workload_KMSSettings) Reset (deprecated)
func (x *Workload_KMSSettings) Reset()func (*Workload_KMSSettings) String (deprecated)
func (x *Workload_KMSSettings) String() stringWorkload_KajEnrollmentState
type Workload_KajEnrollmentState int32Key Access Justifications(KAJ) Enrollment State.
Workload_KAJ_ENROLLMENT_STATE_UNSPECIFIED, Workload_KAJ_ENROLLMENT_STATE_PENDING, Workload_KAJ_ENROLLMENT_STATE_COMPLETE
const (
// Default State for KAJ Enrollment.
Workload_KAJ_ENROLLMENT_STATE_UNSPECIFIED Workload_KajEnrollmentState = 0
// Pending State for KAJ Enrollment.
Workload_KAJ_ENROLLMENT_STATE_PENDING Workload_KajEnrollmentState = 1
// Complete State for KAJ Enrollment.
Workload_KAJ_ENROLLMENT_STATE_COMPLETE Workload_KajEnrollmentState = 2
)func (Workload_KajEnrollmentState) Descriptor
func (Workload_KajEnrollmentState) Descriptor() protoreflect.EnumDescriptorfunc (Workload_KajEnrollmentState) Enum
func (x Workload_KajEnrollmentState) Enum() *Workload_KajEnrollmentStatefunc (Workload_KajEnrollmentState) EnumDescriptor
func (Workload_KajEnrollmentState) EnumDescriptor() ([]byte, []int)Deprecated: Use Workload_KajEnrollmentState.Descriptor instead.
func (Workload_KajEnrollmentState) Number
func (x Workload_KajEnrollmentState) Number() protoreflect.EnumNumberfunc (Workload_KajEnrollmentState) String
func (x Workload_KajEnrollmentState) String() stringfunc (Workload_KajEnrollmentState) Type
func (Workload_KajEnrollmentState) Type() protoreflect.EnumTypeWorkload_Partner
type Workload_Partner int32Supported Assured Workloads Partners.
Workload_PARTNER_UNSPECIFIED, Workload_LOCAL_CONTROLS_BY_S3NS
const (
// Unknown partner regime/controls.
Workload_PARTNER_UNSPECIFIED Workload_Partner = 0
// S3NS regime/controls.
Workload_LOCAL_CONTROLS_BY_S3NS Workload_Partner = 1
)func (Workload_Partner) Descriptor
func (Workload_Partner) Descriptor() protoreflect.EnumDescriptorfunc (Workload_Partner) Enum
func (x Workload_Partner) Enum() *Workload_Partnerfunc (Workload_Partner) EnumDescriptor
func (Workload_Partner) EnumDescriptor() ([]byte, []int)Deprecated: Use Workload_Partner.Descriptor instead.
func (Workload_Partner) Number
func (x Workload_Partner) Number() protoreflect.EnumNumberfunc (Workload_Partner) String
func (x Workload_Partner) String() stringfunc (Workload_Partner) Type
func (Workload_Partner) Type() protoreflect.EnumTypeWorkload_ResourceInfo
type Workload_ResourceInfo struct {
ResourceId int64 `protobuf:"varint,1,opt,name=resource_id,json=resourceId,proto3" json:"resource_id,omitempty"`
ResourceType Workload_ResourceInfo_ResourceType "" /* 171 byte string literal not displayed */
}Represent the resources that are children of this Workload.
func (*Workload_ResourceInfo) Descriptor
func (*Workload_ResourceInfo) Descriptor() ([]byte, []int)Deprecated: Use Workload_ResourceInfo.ProtoReflect.Descriptor instead.
func (*Workload_ResourceInfo) GetResourceId
func (x *Workload_ResourceInfo) GetResourceId() int64func (*Workload_ResourceInfo) GetResourceType
func (x *Workload_ResourceInfo) GetResourceType() Workload_ResourceInfo_ResourceTypefunc (*Workload_ResourceInfo) ProtoMessage
func (*Workload_ResourceInfo) ProtoMessage()func (*Workload_ResourceInfo) ProtoReflect
func (x *Workload_ResourceInfo) ProtoReflect() protoreflect.Messagefunc (*Workload_ResourceInfo) Reset
func (x *Workload_ResourceInfo) Reset()func (*Workload_ResourceInfo) String
func (x *Workload_ResourceInfo) String() stringWorkload_ResourceInfo_ResourceType
type Workload_ResourceInfo_ResourceType int32The type of resource.
Workload_ResourceInfo_RESOURCE_TYPE_UNSPECIFIED, Workload_ResourceInfo_CONSUMER_PROJECT, Workload_ResourceInfo_CONSUMER_FOLDER, Workload_ResourceInfo_ENCRYPTION_KEYS_PROJECT, Workload_ResourceInfo_KEYRING
const (
// Unknown resource type.
Workload_ResourceInfo_RESOURCE_TYPE_UNSPECIFIED Workload_ResourceInfo_ResourceType = 0
// Consumer project.
// AssuredWorkloads Projects are no longer supported. This field will be
// ignored only in CreateWorkload requests. ListWorkloads and GetWorkload
// will continue to provide projects information.
// Use CONSUMER_FOLDER instead.
//
// Deprecated: Marked as deprecated in google/cloud/assuredworkloads/v1/assuredworkloads.proto.
Workload_ResourceInfo_CONSUMER_PROJECT Workload_ResourceInfo_ResourceType = 1
// Consumer Folder.
Workload_ResourceInfo_CONSUMER_FOLDER Workload_ResourceInfo_ResourceType = 4
// Consumer project containing encryption keys.
Workload_ResourceInfo_ENCRYPTION_KEYS_PROJECT Workload_ResourceInfo_ResourceType = 2
// Keyring resource that hosts encryption keys.
Workload_ResourceInfo_KEYRING Workload_ResourceInfo_ResourceType = 3
)func (Workload_ResourceInfo_ResourceType) Descriptor
func (Workload_ResourceInfo_ResourceType) Descriptor() protoreflect.EnumDescriptorfunc (Workload_ResourceInfo_ResourceType) Enum
func (x Workload_ResourceInfo_ResourceType) Enum() *Workload_ResourceInfo_ResourceTypefunc (Workload_ResourceInfo_ResourceType) EnumDescriptor
func (Workload_ResourceInfo_ResourceType) EnumDescriptor() ([]byte, []int)Deprecated: Use Workload_ResourceInfo_ResourceType.Descriptor instead.
func (Workload_ResourceInfo_ResourceType) Number
func (x Workload_ResourceInfo_ResourceType) Number() protoreflect.EnumNumberfunc (Workload_ResourceInfo_ResourceType) String
func (x Workload_ResourceInfo_ResourceType) String() stringfunc (Workload_ResourceInfo_ResourceType) Type
func (Workload_ResourceInfo_ResourceType) Type() protoreflect.EnumTypeWorkload_ResourceSettings
type Workload_ResourceSettings struct {
ResourceId string `protobuf:"bytes,1,opt,name=resource_id,json=resourceId,proto3" json:"resource_id,omitempty"`
ResourceType Workload_ResourceInfo_ResourceType "" /* 171 byte string literal not displayed */
DisplayName string `protobuf:"bytes,3,opt,name=display_name,json=displayName,proto3" json:"display_name,omitempty"`
}Represent the custom settings for the resources to be created.
func (*Workload_ResourceSettings) Descriptor
func (*Workload_ResourceSettings) Descriptor() ([]byte, []int)Deprecated: Use Workload_ResourceSettings.ProtoReflect.Descriptor instead.
func (*Workload_ResourceSettings) GetDisplayName
func (x *Workload_ResourceSettings) GetDisplayName() stringfunc (*Workload_ResourceSettings) GetResourceId
func (x *Workload_ResourceSettings) GetResourceId() stringfunc (*Workload_ResourceSettings) GetResourceType
func (x *Workload_ResourceSettings) GetResourceType() Workload_ResourceInfo_ResourceTypefunc (*Workload_ResourceSettings) ProtoMessage
func (*Workload_ResourceSettings) ProtoMessage()func (*Workload_ResourceSettings) ProtoReflect
func (x *Workload_ResourceSettings) ProtoReflect() protoreflect.Messagefunc (*Workload_ResourceSettings) Reset
func (x *Workload_ResourceSettings) Reset()func (*Workload_ResourceSettings) String
func (x *Workload_ResourceSettings) String() stringWorkload_SaaEnrollmentResponse
type Workload_SaaEnrollmentResponse struct {
SetupStatus *Workload_SaaEnrollmentResponse_SetupState "" /* 181 byte string literal not displayed */
SetupErrors []Workload_SaaEnrollmentResponse_SetupError "" /* 182 byte string literal not displayed */
}Signed Access Approvals (SAA) enrollment response.
func (*Workload_SaaEnrollmentResponse) Descriptor
func (*Workload_SaaEnrollmentResponse) Descriptor() ([]byte, []int)Deprecated: Use Workload_SaaEnrollmentResponse.ProtoReflect.Descriptor instead.
func (*Workload_SaaEnrollmentResponse) GetSetupErrors
func (x *Workload_SaaEnrollmentResponse) GetSetupErrors() []Wor