Package-level declarations
Types
Specifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs. If there are AuditConfigs for both allServices and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted. Example Policy with multiple AuditConfigs: { "audit_configs": [ { "service": "allServices", "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": "user:jose@example.com" }, { "log_type": "DATA_WRITE" }, { "log_type": "ADMIN_READ" } ] }, { "service": "sampleservice.googleapis.com", "audit_log_configs": [ { "log_type": "DATA_READ" }, { "log_type": "DATA_WRITE", "exempted_members": "user:aliya@example.com" } ] } ] } For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts jose@example.com from DATA_READ logging, and aliya@example.com from DATA_WRITE logging.
Builder for AuditConfigArgs.
Provides the configuration for logging a type of permissions. Example: { "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": "user:jose@example.com" }, { "log_type": "DATA_WRITE" } ] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from DATA_READ logging.
Builder for AuditLogConfigArgs.
Associates members, or principals, with a role.
Builder for BindingArgs.
Not supported by Cloud Run. ConfigMapEnvSource selects a ConfigMap to populate the environment variables with. The contents of the target ConfigMap's Data field will represent the key-value pairs as environment variables.
Builder for ConfigMapEnvSourceArgs.
Not supported by Cloud Run.
Builder for ConfigMapKeySelectorArgs.
Not supported by Cloud Run. Adapts a ConfigMap into a volume. The contents of the target ConfigMap's Data field will be presented in a volume as files using the keys in the Data field as the file names, unless the items element is populated with specific mappings of keys to paths.
Builder for ConfigMapVolumeSourceArgs.
A single application container. This specifies both the container to run, the command to run in the container and the arguments to supply to it. Note that additional arguments may be supplied by the system to the container at runtime.
Builder for ContainerArgs.
ContainerPort represents a network port in a single container.
Builder for ContainerPortArgs.
The desired state of the Domain Mapping.
Builder for DomainMappingSpecArgs.
Ephemeral storage which can be backed by real disks (HD, SSD), network storage or memory (i.e. tmpfs). For now only in memory (tmpfs) is supported. It is ephemeral in the sense that when the sandbox is taken down, the data is destroyed with it (it does not persist across sandbox runs).
Builder for EmptyDirVolumeSourceArgs.
Not supported by Cloud Run. EnvFromSource represents the source of a set of ConfigMaps
Builder for EnvFromSourceArgs.
EnvVar represents an environment variable present in a Container.
Builder for EnvVarArgs.
EnvVarSource represents a source for the value of an EnvVar.
Builder for EnvVarSourceArgs.
Not supported by Cloud Run. ExecAction describes a "run in container" action.
Builder for ExecActionArgs.
Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.
Builder for ExprArgs.
Builder for GetDomainMappingPlainArgs.
Builder for GetJobIamPolicyPlainArgs.
Builder for GetJobPlainArgs.
Builder for GetServiceIamPolicyPlainArgs.
Builder for GetServicePlainArgs.
GRPCAction describes an action involving a GRPC port.
Builder for GRPCActionArgs.
HTTPGetAction describes an action based on HTTP Get requests.
Builder for HTTPGetActionArgs.
HTTPHeader describes a custom header to be used in HTTP probes
Builder for HTTPHeaderArgs.
Maps a string key to a path within a volume.
Builder for KeyToPathArgs.
Not supported by Cloud Run. LocalObjectReference contains enough information to let you locate the referenced object inside the same namespace.
Builder for LocalObjectReferenceArgs.
k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta is metadata that all persisted resources must have, which includes all objects users must create.
Builder for ObjectMetaArgs.
This is not supported or used by Cloud Run.
Builder for OwnerReferenceArgs.
Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic.
Builder for ProbeArgs.
Builder for ResourceRequirementsArgs.
RevisionSpec holds the desired state of the Revision (from the client).
Builder for RevisionSpecArgs.
RevisionTemplateSpec describes the data a revision should have when created from a template.
Builder for RevisionTemplateArgs.
Not supported by Cloud Run. SecretEnvSource selects a Secret to populate the environment variables with. The contents of the target Secret's Data field will represent the key-value pairs as environment variables.
Builder for SecretEnvSourceArgs.
SecretKeySelector selects a key of a Secret.
Builder for SecretKeySelectorArgs.
A volume representing a secret stored in Google Secret Manager. The secret's value will be presented as the content of a file whose name is defined in the item path. If no items are defined, the name of the file is the secret_name. The contents of the target Secret's Data field will be presented in a volume as files using the keys in the Data field as the file names.
Builder for SecretVolumeSourceArgs.
Not supported by Cloud Run. SecurityContext holds security configuration that will be applied to a container. Some fields are present in both SecurityContext and PodSecurityContext. When both are set, the values in SecurityContext take precedence.
Builder for SecurityContextArgs.
ServiceSpec holds the desired state of the Route (from the client), which is used to manipulate the underlying Route and Configuration(s).
Builder for ServiceSpecArgs.
TCPSocketAction describes an action based on opening a socket
Builder for TCPSocketActionArgs.
TrafficTarget holds a single entry of the routing table for a Route.
Builder for TrafficTargetArgs.
Volume represents a named volume in a container.
Builder for VolumeArgs.
VolumeMount describes a mounting of a Volume within a container.
Builder for VolumeMountArgs.