pulumi-gcp-kotlin/com.pulumi.gcp.gkehub.kotlin.outputs/FeatureFleetDefaultMemberConfigPolicycontrollerPolicyControllerHubConfig

FeatureFleetDefaultMemberConfigPolicycontrollerPolicyControllerHubConfig

data class FeatureFleetDefaultMemberConfigPolicycontrollerPolicyControllerHubConfig(val auditIntervalSeconds: Int? = null, val constraintViolationLimit: Int? = null, val deploymentConfigs: List<FeatureFleetDefaultMemberConfigPolicycontrollerPolicyControllerHubConfigDeploymentConfig>? = null, val exemptableNamespaces: List<String>? = null, val installSpec: String, val logDeniesEnabled: Boolean? = null, val monitoring: FeatureFleetDefaultMemberConfigPolicycontrollerPolicyControllerHubConfigMonitoring? = null, val mutationEnabled: Boolean? = null, val policyContent: FeatureFleetDefaultMemberConfigPolicycontrollerPolicyControllerHubConfigPolicyContent? = null, val referentialRulesEnabled: Boolean? = null)

Constructors

constructor(auditIntervalSeconds: Int? = null, constraintViolationLimit: Int? = null, deploymentConfigs: List<FeatureFleetDefaultMemberConfigPolicycontrollerPolicyControllerHubConfigDeploymentConfig>? = null, exemptableNamespaces: List<String>? = null, installSpec: String, logDeniesEnabled: Boolean? = null, monitoring: FeatureFleetDefaultMemberConfigPolicycontrollerPolicyControllerHubConfigMonitoring? = null, mutationEnabled: Boolean? = null, policyContent: FeatureFleetDefaultMemberConfigPolicycontrollerPolicyControllerHubConfigPolicyContent? = null, referentialRulesEnabled: Boolean? = null)

Types

Link copied to clipboard
object Companion

Properties

Link copied to clipboard
val auditIntervalSeconds: Int? = null

Interval for Policy Controller Audit scans (in seconds). When set to 0, this disables audit functionality altogether.

Link copied to clipboard
val constraintViolationLimit: Int? = null

The maximum number of audit violations to be stored in a constraint. If not set, the internal default of 20 will be used.

Link copied to clipboard
val deploymentConfigs: List<FeatureFleetDefaultMemberConfigPolicycontrollerPolicyControllerHubConfigDeploymentConfig>? = null

Map of deployment configs to deployments ("admission", "audit", "mutation"). Structure is documented below.

Link copied to clipboard
val exemptableNamespaces: List<String>? = null

The set of namespaces that are excluded from Policy Controller checks. Namespaces do not need to currently exist on the cluster.

Link copied to clipboard
val installSpec: String

Configures the mode of the Policy Controller installation Possible values are: INSTALL_SPEC_UNSPECIFIED, INSTALL_SPEC_NOT_INSTALLED, INSTALL_SPEC_ENABLED, INSTALL_SPEC_SUSPENDED, INSTALL_SPEC_DETACHED.

Link copied to clipboard
val logDeniesEnabled: Boolean? = null

Logs all denies and dry run failures.

Link copied to clipboard
val monitoring: FeatureFleetDefaultMemberConfigPolicycontrollerPolicyControllerHubConfigMonitoring? = null

Monitoring specifies the configuration of monitoring Policy Controller. Structure is documented below.

Link copied to clipboard
val mutationEnabled: Boolean? = null

Enables the ability to mutate resources using Policy Controller.

Link copied to clipboard
val policyContent: FeatureFleetDefaultMemberConfigPolicycontrollerPolicyControllerHubConfigPolicyContent? = null

Specifies the desired policy content on the cluster. Structure is documented below.

Link copied to clipboard
val referentialRulesEnabled: Boolean? = null

Enables the ability to use Constraint Templates that reference to objects other than the object currently being evaluated.