47 lines
1.6 KiB
YAML
47 lines
1.6 KiB
YAML
type: google.api.Service
|
|
config_version: 3
|
|
name: binaryauthorization.googleapis.com
|
|
title: Binary Authorization API
|
|
|
|
apis:
|
|
- name: google.cloud.binaryauthorization.v1beta1.BinauthzManagementServiceV1Beta1
|
|
|
|
documentation:
|
|
summary: |-
|
|
The management interface for Binary Authorization, a system providing
|
|
policy control for images deployed to Kubernetes Engine clusters.
|
|
rules:
|
|
- selector: google.iam.v1.IAMPolicy.GetIamPolicy
|
|
description: |-
|
|
Gets the access control policy for a resource. Returns an empty policy
|
|
if the resource exists and does not have a policy set.
|
|
|
|
- selector: google.iam.v1.IAMPolicy.SetIamPolicy
|
|
description: |-
|
|
Sets the access control policy on the specified resource. Replaces
|
|
any existing policy.
|
|
|
|
Can return Public Errors: NOT_FOUND, INVALID_ARGUMENT and
|
|
PERMISSION_DENIED
|
|
|
|
- selector: google.iam.v1.IAMPolicy.TestIamPermissions
|
|
description: |-
|
|
Returns permissions that a caller has on the specified resource. If the
|
|
resource does not exist, this will return an empty set of
|
|
permissions, not a NOT_FOUND error.
|
|
|
|
Note: This operation is designed to be used for building
|
|
permission-aware UIs and command-line tools, not for authorization
|
|
checking. This operation may "fail open" without warning.
|
|
|
|
authentication:
|
|
rules:
|
|
- selector: 'google.cloud.binaryauthorization.v1beta1.BinauthzManagementServiceV1Beta1.*'
|
|
oauth:
|
|
canonical_scopes: |-
|
|
https://www.googleapis.com/auth/cloud-platform
|
|
- selector: 'google.iam.v1.IAMPolicy.*'
|
|
oauth:
|
|
canonical_scopes: |-
|
|
https://www.googleapis.com/auth/cloud-platform
|