Interface BinauthzManagementServiceV1Grpc.AsyncService (1.44.0)

public static interface BinauthzManagementServiceV1Grpc.AsyncService

Google Cloud Management Service for Binary Authorization admission policies and attestation authorities. This API implements a REST model with the following objects:

  • Policy
  • Attestor

Methods

createAttestor(Service.CreateAttestorRequest request, StreamObserver<Resources.Attestor> responseObserver)

public default void createAttestor(Service.CreateAttestorRequest request, StreamObserver<Resources.Attestor> responseObserver)

Creates an attestor, and returns a copy of the new attestor. Returns NOT_FOUND if the project does not exist, INVALID_ARGUMENT if the request is malformed, ALREADY_EXISTS if the attestor already exists.

Parameters
Name Description
request Service.CreateAttestorRequest
responseObserver io.grpc.stub.StreamObserver<Attestor>

deleteAttestor(Service.DeleteAttestorRequest request, StreamObserver<Empty> responseObserver)

public default void deleteAttestor(Service.DeleteAttestorRequest request, StreamObserver<Empty> responseObserver)

Deletes an attestor. Returns NOT_FOUND if the attestor does not exist.

Parameters
Name Description
request Service.DeleteAttestorRequest
responseObserver io.grpc.stub.StreamObserver<Empty>

getAttestor(Service.GetAttestorRequest request, StreamObserver<Resources.Attestor> responseObserver)

public default void getAttestor(Service.GetAttestorRequest request, StreamObserver<Resources.Attestor> responseObserver)

Gets an attestor. Returns NOT_FOUND if the attestor does not exist.

Parameters
Name Description
request Service.GetAttestorRequest
responseObserver io.grpc.stub.StreamObserver<Attestor>

getPolicy(Service.GetPolicyRequest request, StreamObserver<Resources.Policy> responseObserver)

public default void getPolicy(Service.GetPolicyRequest request, StreamObserver<Resources.Policy> responseObserver)

A policy specifies the attestors that must attest to a container image, before the project is allowed to deploy that image. There is at most one policy per project. All image admission requests are permitted if a project has no policy. Gets the policy for this project. Returns a default policy if the project does not have one.

Parameters
Name Description
request Service.GetPolicyRequest
responseObserver io.grpc.stub.StreamObserver<Policy>

listAttestors(Service.ListAttestorsRequest request, StreamObserver<Service.ListAttestorsResponse> responseObserver)

public default void listAttestors(Service.ListAttestorsRequest request, StreamObserver<Service.ListAttestorsResponse> responseObserver)

Lists attestors. Returns INVALID_ARGUMENT if the project does not exist.

Parameters
Name Description
request Service.ListAttestorsRequest
responseObserver io.grpc.stub.StreamObserver<ListAttestorsResponse>

updateAttestor(Service.UpdateAttestorRequest request, StreamObserver<Resources.Attestor> responseObserver)

public default void updateAttestor(Service.UpdateAttestorRequest request, StreamObserver<Resources.Attestor> responseObserver)

Updates an attestor. Returns NOT_FOUND if the attestor does not exist.

Parameters
Name Description
request Service.UpdateAttestorRequest
responseObserver io.grpc.stub.StreamObserver<Attestor>

updatePolicy(Service.UpdatePolicyRequest request, StreamObserver<Resources.Policy> responseObserver)

public default void updatePolicy(Service.UpdatePolicyRequest request, StreamObserver<Resources.Policy> responseObserver)

Creates or updates a project's policy, and returns a copy of the new policy. A policy is always updated as a whole, to avoid race conditions with concurrent policy enforcement (or management!) requests. Returns NOT_FOUND if the project does not exist, INVALID_ARGUMENT if the request is malformed.

Parameters
Name Description
request Service.UpdatePolicyRequest
responseObserver io.grpc.stub.StreamObserver<Policy>