Defines which workloads can receive an identity within a pool. When an AttestationRule is defined under a managed identity, matching workloads may receive that identity.
JSON representation
{// Union fieldworkload_descriptorcan be only one of the following:"googleCloudResource":string// End of list of possible types for union fieldworkload_descriptor.}
Fields
Union fieldworkload_descriptor. Descriptor for the workload.workload_descriptorcan be only one of the following:
googleCloudResource
string
Optional. A single workload operating on Google Cloud. For example://compute.googleapis.com/projects/123/uid/zones/us-central1-a/instances/12345.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-05-21 UTC."],[],[],null,["# AttestationRule\n\n- [JSON representation](#SCHEMA_REPRESENTATION)\n\nDefines which workloads can receive an identity within a pool. When an AttestationRule is defined under a managed identity, matching workloads may receive that identity."]]