Class BinauthzManagementServiceV1Beta1Client (1.11.1)

Google Cloud Management Service for Binary Authorization admission policies and attestation authorities.

This API implements a REST model with the following objects:

• Policy
• Attestor

Return the API endpoint used by the client instance.

Returns the transport used by the client instance.

Return the universe domain used by the client instance.

Instantiates the binauthz management service v1 beta1 client.

Releases underlying transport's resources.

Returns a fully-qualified attestor string.

Returns a fully-qualified billing_account string.

Returns a fully-qualified folder string.

Returns a fully-qualified location string.

Returns a fully-qualified organization string.

Returns a fully-qualified project string.

Creates an xref_attestor, and returns a copy of the new xref_attestor. Returns NOT_FOUND if the project does not exist, INVALID_ARGUMENT if the request is malformed, ALREADY_EXISTS if the xref_attestor already exists.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import binaryauthorization_v1beta1

def sample_create_attestor():
    # Create a client
    client = binaryauthorization_v1beta1.BinauthzManagementServiceV1Beta1Client()

    # Initialize request argument(s)
    attestor = binaryauthorization_v1beta1.Attestor()
    attestor.user_owned_drydock_note.note_reference = "note_reference_value"
    attestor.name = "name_value"

    request = binaryauthorization_v1beta1.CreateAttestorRequest(
        parent="parent_value",
        attestor_id="attestor_id_value",
        attestor=attestor,
    )

    # Make the request
    response = client.create_attestor(request=request)

    # Handle the response
    print(response)

Deletes an xref_attestor. Returns NOT_FOUND if the xref_attestor does not exist.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import binaryauthorization_v1beta1

def sample_delete_attestor():
    # Create a client
    client = binaryauthorization_v1beta1.BinauthzManagementServiceV1Beta1Client()

    # Initialize request argument(s)
    request = binaryauthorization_v1beta1.DeleteAttestorRequest(
        name="name_value",
    )

    # Make the request
    client.delete_attestor(request=request)

Creates an instance of this client using the provided credentials file.

Creates an instance of this client using the provided credentials info.

Creates an instance of this client using the provided credentials file.

Gets an xref_attestor. Returns NOT_FOUND if the xref_attestor does not exist.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import binaryauthorization_v1beta1

def sample_get_attestor():
    # Create a client
    client = binaryauthorization_v1beta1.BinauthzManagementServiceV1Beta1Client()

    # Initialize request argument(s)
    request = binaryauthorization_v1beta1.GetAttestorRequest(
        name="name_value",
    )

    # Make the request
    response = client.get_attestor(request=request)

    # Handle the response
    print(response)

Deprecated. Return the API endpoint and client cert source for mutual TLS.

The client cert source is determined in the following order: (1) if GOOGLE_API_USE_CLIENT_CERTIFICATE environment variable is not "true", the client cert source is None. (2) if client_options.client_cert_source is provided, use the provided one; if the default client cert source exists, use the default one; otherwise the client cert source is None.

The API endpoint is determined in the following order: (1) if client_options.api_endpoint if provided, use the provided one. (2) if GOOGLE_API_USE_CLIENT_CERTIFICATE environment variable is "always", use the default mTLS endpoint; if the environment variable is "never", use the default API endpoint; otherwise if client cert source exists, use the default mTLS endpoint, otherwise use the default API endpoint.

More details can be found at https://google.aip.dev/auth/4114.

A xref_policy specifies the xref_attestors that must attest to a container image, before the project is allowed to deploy that image. There is at most one policy per project. All image admission requests are permitted if a project has no policy.

Gets the xref_policy for this project. Returns a default xref_policy if the project does not have one.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import binaryauthorization_v1beta1

def sample_get_policy():
    # Create a client
    client = binaryauthorization_v1beta1.BinauthzManagementServiceV1Beta1Client()

    # Initialize request argument(s)
    request = binaryauthorization_v1beta1.GetPolicyRequest(
        name="name_value",
    )

    # Make the request
    response = client.get_policy(request=request)

    # Handle the response
    print(response)

Lists xref_attestors. Returns INVALID_ARGUMENT if the project does not exist.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import binaryauthorization_v1beta1

def sample_list_attestors():
    # Create a client
    client = binaryauthorization_v1beta1.BinauthzManagementServiceV1Beta1Client()

    # Initialize request argument(s)
    request = binaryauthorization_v1beta1.ListAttestorsRequest(
        parent="parent_value",
    )

    # Make the request
    page_result = client.list_attestors(request=request)

    # Handle the response
    for response in page_result:
        print(response)

Parses a attestor path into its component segments.

Parse a billing_account path into its component segments.

Parse a folder path into its component segments.

Parse a location path into its component segments.

Parse a organization path into its component segments.

Parse a project path into its component segments.

Parses a policy path into its component segments.

Returns a fully-qualified policy string.

Updates an xref_attestor. Returns NOT_FOUND if the xref_attestor does not exist.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import binaryauthorization_v1beta1

def sample_update_attestor():
    # Create a client
    client = binaryauthorization_v1beta1.BinauthzManagementServiceV1Beta1Client()

    # Initialize request argument(s)
    attestor = binaryauthorization_v1beta1.Attestor()
    attestor.user_owned_drydock_note.note_reference = "note_reference_value"
    attestor.name = "name_value"

    request = binaryauthorization_v1beta1.UpdateAttestorRequest(
        attestor=attestor,
    )

    # Make the request
    response = client.update_attestor(request=request)

    # Handle the response
    print(response)

Creates or updates a project's xref_policy, and returns a copy of the new xref_policy. A policy is always updated as a whole, to avoid race conditions with concurrent policy enforcement (or management!) requests. Returns NOT_FOUND if the project does not exist, INVALID_ARGUMENT if the request is malformed.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import binaryauthorization_v1beta1

def sample_update_policy():
    # Create a client
    client = binaryauthorization_v1beta1.BinauthzManagementServiceV1Beta1Client()

    # Initialize request argument(s)
    policy = binaryauthorization_v1beta1.Policy()
    policy.default_admission_rule.evaluation_mode = "ALWAYS_DENY"
    policy.default_admission_rule.enforcement_mode = "DRYRUN_AUDIT_LOG_ONLY"

    request = binaryauthorization_v1beta1.UpdatePolicyRequest(
        policy=policy,
    )

    # Make the request
    response = client.update_policy(request=request)

    # Handle the response
    print(response)