The management interface for Binary Authorization, a service that provides policy-based deployment validation and control for images deployed to Google Kubernetes Engine (GKE), Anthos Service Mesh, Anthos Clusters, and Cloud Run.
Service: binaryauthorization.googleapis.com
The Service name binaryauthorization.googleapis.com
is needed to create RPC client stubs.
google.cloud.binaryauthorization.v1.BinauthzManagementServiceV1
| Methods | |
|---|---|
|
Creates an attestor
, and returns a copy of the new attestor
. |
|
Deletes an attestor
. |
|
Gets an attestor
. |
|
A policy
specifies the attestors
that must attest to a container image, before the project is allowed to deploy that image. |
|
Lists attestors
. |
|
Updates an attestor
. |
|
Creates or updates a project's policy
, and returns a copy of the new policy
. |
google.cloud.binaryauthorization.v1.PlatformPolicyEvaluationService
| Methods | |
|---|---|
|
Evaluates a Kubernetes object versus a GKE platform policy
. |
google.cloud.binaryauthorization.v1.PlatformPolicyManagementService
| Methods | |
|---|---|
|
Creates a platform policy
, and returns a copy of it. |
|
Deletes a platform policy
. |
|
Gets a platform policy
. |
|
Lists platform policies
owned by a project in the specified platform. |
|
Replaces a platform policy
. |
google.cloud.binaryauthorization.v1.SystemPolicyV1
| Methods | |
|---|---|
|
Gets the current system policy in the specified location. |
google.cloud.binaryauthorization.v1.ValidationHelperV1
| Methods | |
|---|---|
|
Returns whether the given Attestation
for the given image URI was signed by the given Attestor
|
google.cloud.binaryauthorization.v1alpha2.ContinuousValidationManagementServiceV1Alpha2
| Methods | |
|---|---|
|
Gets the continuous validation config
for the project. |
|
Updates a project's continuous validation config
, and returns a copy of the new config. |
google.cloud.binaryauthorization.v1beta1.BinauthzManagementServiceV1Beta1
| Methods | |
|---|---|
|
Creates an attestor
, and returns a copy of the new attestor
. |
|
Deletes an attestor
. |
|
Gets an attestor
. |
|
A policy
specifies the attestors
that must attest to a container image, before the project is allowed to deploy that image. |
|
Lists attestors
. |
|
Updates an attestor
. |
|
Creates or updates a project's policy
, and returns a copy of the new policy
. |
google.cloud.binaryauthorization.v1beta1.SystemPolicyV1Beta1
| Methods | |
|---|---|
|
Gets the current system policy in the specified location. |
google.iam.v1.IAMPolicy
| Methods | |
|---|---|
|
Gets the access control policy for a resource. |
|
Sets the access control policy on the specified resource. |
|
Returns permissions that a caller has on the specified resource. |

