pulumi-google-native-kotlin/com.pulumi.googlenative.remotebuildexecution.v1alpha.kotlin.inputs/GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyArgs

GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyArgs

data class GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyArgs(val containerImageSources: Output<GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeatureArgs>? = null, val dockerAddCapabilities: Output<GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeatureArgs>? = null, val dockerChrootPath: Output<GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeatureArgs>? = null, val dockerNetwork: Output<GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeatureArgs>? = null, val dockerPrivileged: Output<GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeatureArgs>? = null, val dockerRunAsRoot: Output<GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeatureArgs>? = null, val dockerRuntime: Output<GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeatureArgs>? = null, val dockerSiblingContainers: Output<GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeatureArgs>? = null, val linuxIsolation: Output<GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyLinuxIsolation>? = null) : ConvertibleToJava<GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyArgs>

FeaturePolicy defines features allowed to be used on RBE instances, as well as instance-wide behavior changes that take effect without opt-in or opt-out at usage time.

Constructors

fun GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyArgs(containerImageSources: Output<GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeatureArgs>? = null, dockerAddCapabilities: Output<GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeatureArgs>? = null, dockerChrootPath: Output<GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeatureArgs>? = null, dockerNetwork: Output<GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeatureArgs>? = null, dockerPrivileged: Output<GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeatureArgs>? = null, dockerRunAsRoot: Output<GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeatureArgs>? = null, dockerRuntime: Output<GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeatureArgs>? = null, dockerSiblingContainers: Output<GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeatureArgs>? = null, linuxIsolation: Output<GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyLinuxIsolation>? = null)

Functions

Link copied to clipboard
open override fun toJava(): GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyArgs

Properties

Link copied to clipboard
val containerImageSources: Output<GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeatureArgs>? = null

Which container image sources are allowed. Currently only RBE-supported registry (gcr.io) is allowed. One can allow all repositories under a project or one specific repository only. E.g. container_image_sources { policy: RESTRICTED allowed_values: "gcr.io/project-foo", "gcr.io/project-bar/repo-baz", } will allow any repositories under "gcr.io/project-foo" plus the repository "gcr.io/project-bar/repo-baz". Default (UNSPECIFIED) is equivalent to any source is allowed.

Link copied to clipboard
val dockerAddCapabilities: Output<GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeatureArgs>? = null

Whether dockerAddCapabilities can be used or what capabilities are allowed.

Link copied to clipboard
val dockerChrootPath: Output<GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeatureArgs>? = null

Whether dockerChrootPath can be used.

Link copied to clipboard
val dockerNetwork: Output<GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeatureArgs>? = null

Whether dockerNetwork can be used or what network modes are allowed. E.g. one may allow off value only via allowed_values.

Link copied to clipboard
val dockerPrivileged: Output<GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeatureArgs>? = null

Whether dockerPrivileged can be used.

Link copied to clipboard
val dockerRunAsRoot: Output<GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeatureArgs>? = null

Whether dockerRunAsRoot can be used.

Link copied to clipboard
val dockerRuntime: Output<GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeatureArgs>? = null

Whether dockerRuntime is allowed to be set or what runtimes are allowed. Note linux_isolation takes precedence, and if set, docker_runtime values may be rejected if they are incompatible with the selected isolation.

Link copied to clipboard
val dockerSiblingContainers: Output<GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeatureArgs>? = null

Whether dockerSiblingContainers can be used.

Link copied to clipboard
val linuxIsolation: Output<GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyLinuxIsolation>? = null

linux_isolation allows overriding the docker runtime used for containers started on Linux.