Binary Authorization V1beta1 API - Module Google::Cloud::BinaryAuthorization::V1beta1::AdmissionRule::EnforcementMode (v0.20.0)

Reference documentation and code samples for the Binary Authorization V1beta1 API module Google::Cloud::BinaryAuthorization::V1beta1::AdmissionRule::EnforcementMode.

TODO(wietse) re-word this text to 'per-image' instead of 'per-pod' and to allow for three-way evaluation (allow, deny, delegate). Defines the possible actions when a pod creation is denied by an admission rule.

Constants

ENFORCEMENT_MODE_UNSPECIFIED

value: 0
Do not use.

ENFORCED_BLOCK_AND_AUDIT_LOG

value: 1
Enforce the admission rule by blocking the pod creation.

DRYRUN_AUDIT_LOG_ONLY

value: 2
Dryrun mode: Audit logging only. This will allow the pod creation as if the admission request had specified break-glass.