Kubernetes Engine V1 API - Class Google::Cloud::Container::V1::PrivilegedAdmissionConfig (v1.11.1)

Reference documentation and code samples for the Kubernetes Engine V1 API class Google::Cloud::Container::V1::PrivilegedAdmissionConfig.

PrivilegedAdmissionConfig stores the list of authorized allowlist paths for the cluster.

Inherits

  • Object

Extended By

  • Google::Protobuf::MessageExts::ClassMethods

Includes

  • Google::Protobuf::MessageExts

Methods

#allowlist_paths

def allowlist_paths() -> ::Array<::String>
Returns
  • (::Array<::String>) — The customer allowlist Cloud Storage paths for the cluster. These paths are used with the --autopilot-privileged-admission flag to authorize privileged workloads in Autopilot clusters.

    Paths can be GKE-owned, in the format gke://<partner_name>/<app_name>/<allowlist_path>, or customer-owned, in the format gs://<bucket_name>/<allowlist_path>.

    Wildcards (*) are supported to authorize all allowlists under specific paths or directories. Example: gs://my-bucket/* will authorize all allowlists under the my-bucket bucket.

#allowlist_paths=

def allowlist_paths=(value) -> ::Array<::String>
Parameter
  • value (::Array<::String>) — The customer allowlist Cloud Storage paths for the cluster. These paths are used with the --autopilot-privileged-admission flag to authorize privileged workloads in Autopilot clusters.

    Paths can be GKE-owned, in the format gke://<partner_name>/<app_name>/<allowlist_path>, or customer-owned, in the format gs://<bucket_name>/<allowlist_path>.

    Wildcards (*) are supported to authorize all allowlists under specific paths or directories. Example: gs://my-bucket/* will authorize all allowlists under the my-bucket bucket.

Returns
  • (::Array<::String>) — The customer allowlist Cloud Storage paths for the cluster. These paths are used with the --autopilot-privileged-admission flag to authorize privileged workloads in Autopilot clusters.

    Paths can be GKE-owned, in the format gke://<partner_name>/<app_name>/<allowlist_path>, or customer-owned, in the format gs://<bucket_name>/<allowlist_path>.

    Wildcards (*) are supported to authorize all allowlists under specific paths or directories. Example: gs://my-bucket/* will authorize all allowlists under the my-bucket bucket.