@pulumi/google-compliance-policies
Version:
This repository contains a growing set of Compliance Policies to validate your infrastructure using Pulumi's Crossguard Policy-as-Code framework.
551 lines (550 loc) • 26.5 kB
JavaScript
"use strict";
// Copyright 2016-2024, Pulumi Corporation.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
//
// ------------------------------- WARNING -------------------------------------
// This file was programmatically generated. Do not edit unless you know what
// you're doing.
// ------------------------------- WARNING -------------------------------------
Object.defineProperty(exports, "__esModule", { value: true });
exports.ScopeRbacRoleBinding = exports.ScopeIamPolicy = exports.ScopeIamMember = exports.ScopeIamBinding = exports.Scope = exports.Namespace = exports.MembershipRbacRoleBinding = exports.MembershipIamPolicy = exports.MembershipIamMember = exports.MembershipIamBinding = exports.Membership = exports.Fleet = exports.FeatureIamPolicy = exports.FeatureIamMember = exports.FeatureIamBinding = exports.Feature = exports.Binding = void 0;
const policy_1 = require("@pulumi/policy");
const compliance_policy_manager_1 = require("@pulumi/compliance-policy-manager");
const v1alpha_1 = require("@pulumi/google-native/gkehub/v1alpha");
const v1alpha_2 = require("@pulumi/google-native/gkehub/v1alpha");
const v1alpha_3 = require("@pulumi/google-native/gkehub/v1alpha");
const v1alpha_4 = require("@pulumi/google-native/gkehub/v1alpha");
const v1alpha_5 = require("@pulumi/google-native/gkehub/v1alpha");
const v1alpha_6 = require("@pulumi/google-native/gkehub/v1alpha");
const v1alpha_7 = require("@pulumi/google-native/gkehub/v1alpha");
const v1alpha_8 = require("@pulumi/google-native/gkehub/v1alpha");
const v1alpha_9 = require("@pulumi/google-native/gkehub/v1alpha");
const v1alpha_10 = require("@pulumi/google-native/gkehub/v1alpha");
const v1alpha_11 = require("@pulumi/google-native/gkehub/v1alpha");
const v1alpha_12 = require("@pulumi/google-native/gkehub/v1alpha");
const v1alpha_13 = require("@pulumi/google-native/gkehub/v1alpha");
const v1alpha_14 = require("@pulumi/google-native/gkehub/v1alpha");
const v1alpha_15 = require("@pulumi/google-native/gkehub/v1alpha");
const v1alpha_16 = require("@pulumi/google-native/gkehub/v1alpha");
const v1alpha_17 = require("@pulumi/google-native/gkehub/v1alpha");
var Binding;
(function (Binding) {
/**
* Disallow the use of non-stable (Alpha) resouces (gkehub.v1alpha.Binding).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
Binding.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-gkehub-v1alpha-binding-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) resouces (gkehub.v1alpha.Binding).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha_1.Binding, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Gkehub Binding shouldn't use an unstable API (gkehub.v1alpha.Binding).");
}),
},
vendors: ["google"],
services: ["gkehub"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(Binding || (Binding = {}));
exports.Binding = Binding;
var Feature;
(function (Feature) {
/**
* Disallow the use of non-stable (Alpha) resouces (gkehub.v1alpha.Feature).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
Feature.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-gkehub-v1alpha-feature-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) resouces (gkehub.v1alpha.Feature).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha_2.Feature, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Gkehub Feature shouldn't use an unstable API (gkehub.v1alpha.Feature).");
}),
},
vendors: ["google"],
services: ["gkehub"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(Feature || (Feature = {}));
exports.Feature = Feature;
var FeatureIamBinding;
(function (FeatureIamBinding) {
/**
* Disallow the use of non-stable (Alpha) resouces (gkehub.v1alpha.FeatureIamBinding).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
FeatureIamBinding.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-gkehub-v1alpha-featureiambinding-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) resouces (gkehub.v1alpha.FeatureIamBinding).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha_3.FeatureIamBinding, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Gkehub FeatureIamBinding shouldn't use an unstable API (gkehub.v1alpha.FeatureIamBinding).");
}),
},
vendors: ["google"],
services: ["gkehub"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(FeatureIamBinding || (FeatureIamBinding = {}));
exports.FeatureIamBinding = FeatureIamBinding;
var FeatureIamMember;
(function (FeatureIamMember) {
/**
* Disallow the use of non-stable (Alpha) resouces (gkehub.v1alpha.FeatureIamMember).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
FeatureIamMember.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-gkehub-v1alpha-featureiammember-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) resouces (gkehub.v1alpha.FeatureIamMember).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha_4.FeatureIamMember, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Gkehub FeatureIamMember shouldn't use an unstable API (gkehub.v1alpha.FeatureIamMember).");
}),
},
vendors: ["google"],
services: ["gkehub"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(FeatureIamMember || (FeatureIamMember = {}));
exports.FeatureIamMember = FeatureIamMember;
var FeatureIamPolicy;
(function (FeatureIamPolicy) {
/**
* Disallow the use of non-stable (Alpha) resouces (gkehub.v1alpha.FeatureIamPolicy).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
FeatureIamPolicy.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-gkehub-v1alpha-featureiampolicy-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) resouces (gkehub.v1alpha.FeatureIamPolicy).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha_5.FeatureIamPolicy, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Gkehub FeatureIamPolicy shouldn't use an unstable API (gkehub.v1alpha.FeatureIamPolicy).");
}),
},
vendors: ["google"],
services: ["gkehub"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(FeatureIamPolicy || (FeatureIamPolicy = {}));
exports.FeatureIamPolicy = FeatureIamPolicy;
var Fleet;
(function (Fleet) {
/**
* Disallow the use of non-stable (Alpha) resouces (gkehub.v1alpha.Fleet).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
Fleet.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-gkehub-v1alpha-fleet-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) resouces (gkehub.v1alpha.Fleet).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha_6.Fleet, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Gkehub Fleet shouldn't use an unstable API (gkehub.v1alpha.Fleet).");
}),
},
vendors: ["google"],
services: ["gkehub"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(Fleet || (Fleet = {}));
exports.Fleet = Fleet;
var Membership;
(function (Membership) {
/**
* Disallow the use of non-stable (Alpha) resouces (gkehub.v1alpha.Membership).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
Membership.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-gkehub-v1alpha-membership-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) resouces (gkehub.v1alpha.Membership).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha_7.Membership, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Gkehub Membership shouldn't use an unstable API (gkehub.v1alpha.Membership).");
}),
},
vendors: ["google"],
services: ["gkehub"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(Membership || (Membership = {}));
exports.Membership = Membership;
var MembershipIamBinding;
(function (MembershipIamBinding) {
/**
* Disallow the use of non-stable (Alpha) resouces (gkehub.v1alpha.MembershipIamBinding).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
MembershipIamBinding.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-gkehub-v1alpha-membershipiambinding-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) resouces (gkehub.v1alpha.MembershipIamBinding).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha_8.MembershipIamBinding, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Gkehub MembershipIamBinding shouldn't use an unstable API (gkehub.v1alpha.MembershipIamBinding).");
}),
},
vendors: ["google"],
services: ["gkehub"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(MembershipIamBinding || (MembershipIamBinding = {}));
exports.MembershipIamBinding = MembershipIamBinding;
var MembershipIamMember;
(function (MembershipIamMember) {
/**
* Disallow the use of non-stable (Alpha) resouces (gkehub.v1alpha.MembershipIamMember).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
MembershipIamMember.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-gkehub-v1alpha-membershipiammember-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) resouces (gkehub.v1alpha.MembershipIamMember).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha_9.MembershipIamMember, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Gkehub MembershipIamMember shouldn't use an unstable API (gkehub.v1alpha.MembershipIamMember).");
}),
},
vendors: ["google"],
services: ["gkehub"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(MembershipIamMember || (MembershipIamMember = {}));
exports.MembershipIamMember = MembershipIamMember;
var MembershipIamPolicy;
(function (MembershipIamPolicy) {
/**
* Disallow the use of non-stable (Alpha) resouces (gkehub.v1alpha.MembershipIamPolicy).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
MembershipIamPolicy.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-gkehub-v1alpha-membershipiampolicy-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) resouces (gkehub.v1alpha.MembershipIamPolicy).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha_10.MembershipIamPolicy, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Gkehub MembershipIamPolicy shouldn't use an unstable API (gkehub.v1alpha.MembershipIamPolicy).");
}),
},
vendors: ["google"],
services: ["gkehub"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(MembershipIamPolicy || (MembershipIamPolicy = {}));
exports.MembershipIamPolicy = MembershipIamPolicy;
var MembershipRbacRoleBinding;
(function (MembershipRbacRoleBinding) {
/**
* Disallow the use of non-stable (Alpha) resouces (gkehub.v1alpha.MembershipRbacRoleBinding).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
MembershipRbacRoleBinding.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-gkehub-v1alpha-membershiprbacrolebinding-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) resouces (gkehub.v1alpha.MembershipRbacRoleBinding).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha_11.MembershipRbacRoleBinding, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Gkehub MembershipRbacRoleBinding shouldn't use an unstable API (gkehub.v1alpha.MembershipRbacRoleBinding).");
}),
},
vendors: ["google"],
services: ["gkehub"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(MembershipRbacRoleBinding || (MembershipRbacRoleBinding = {}));
exports.MembershipRbacRoleBinding = MembershipRbacRoleBinding;
var Namespace;
(function (Namespace) {
/**
* Disallow the use of non-stable (Alpha) resouces (gkehub.v1alpha.Namespace).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
Namespace.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-gkehub-v1alpha-namespace-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) resouces (gkehub.v1alpha.Namespace).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha_12.Namespace, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Gkehub Namespace shouldn't use an unstable API (gkehub.v1alpha.Namespace).");
}),
},
vendors: ["google"],
services: ["gkehub"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(Namespace || (Namespace = {}));
exports.Namespace = Namespace;
var Scope;
(function (Scope) {
/**
* Disallow the use of non-stable (Alpha) resouces (gkehub.v1alpha.Scope).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
Scope.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-gkehub-v1alpha-scope-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) resouces (gkehub.v1alpha.Scope).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha_13.Scope, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Gkehub Scope shouldn't use an unstable API (gkehub.v1alpha.Scope).");
}),
},
vendors: ["google"],
services: ["gkehub"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(Scope || (Scope = {}));
exports.Scope = Scope;
var ScopeIamBinding;
(function (ScopeIamBinding) {
/**
* Disallow the use of non-stable (Alpha) resouces (gkehub.v1alpha.ScopeIamBinding).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
ScopeIamBinding.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-gkehub-v1alpha-scopeiambinding-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) resouces (gkehub.v1alpha.ScopeIamBinding).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha_14.ScopeIamBinding, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Gkehub ScopeIamBinding shouldn't use an unstable API (gkehub.v1alpha.ScopeIamBinding).");
}),
},
vendors: ["google"],
services: ["gkehub"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(ScopeIamBinding || (ScopeIamBinding = {}));
exports.ScopeIamBinding = ScopeIamBinding;
var ScopeIamMember;
(function (ScopeIamMember) {
/**
* Disallow the use of non-stable (Alpha) resouces (gkehub.v1alpha.ScopeIamMember).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
ScopeIamMember.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-gkehub-v1alpha-scopeiammember-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) resouces (gkehub.v1alpha.ScopeIamMember).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha_15.ScopeIamMember, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Gkehub ScopeIamMember shouldn't use an unstable API (gkehub.v1alpha.ScopeIamMember).");
}),
},
vendors: ["google"],
services: ["gkehub"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(ScopeIamMember || (ScopeIamMember = {}));
exports.ScopeIamMember = ScopeIamMember;
var ScopeIamPolicy;
(function (ScopeIamPolicy) {
/**
* Disallow the use of non-stable (Alpha) resouces (gkehub.v1alpha.ScopeIamPolicy).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
ScopeIamPolicy.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-gkehub-v1alpha-scopeiampolicy-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) resouces (gkehub.v1alpha.ScopeIamPolicy).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha_16.ScopeIamPolicy, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Gkehub ScopeIamPolicy shouldn't use an unstable API (gkehub.v1alpha.ScopeIamPolicy).");
}),
},
vendors: ["google"],
services: ["gkehub"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(ScopeIamPolicy || (ScopeIamPolicy = {}));
exports.ScopeIamPolicy = ScopeIamPolicy;
var ScopeRbacRoleBinding;
(function (ScopeRbacRoleBinding) {
/**
* Disallow the use of non-stable (Alpha) resouces (gkehub.v1alpha.ScopeRbacRoleBinding).
*
* @severity medium
* @frameworks none
* @topics alpha, api, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
ScopeRbacRoleBinding.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-gkehub-v1alpha-scoperbacrolebinding-disallow-alpha-resource",
description: "Disallow the use of non-stable (Alpha) resouces (gkehub.v1alpha.ScopeRbacRoleBinding).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1alpha_17.ScopeRbacRoleBinding, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Gkehub ScopeRbacRoleBinding shouldn't use an unstable API (gkehub.v1alpha.ScopeRbacRoleBinding).");
}),
},
vendors: ["google"],
services: ["gkehub"],
severity: "medium",
topics: ["api", "unstable", "alpha"],
});
})(ScopeRbacRoleBinding || (ScopeRbacRoleBinding = {}));
exports.ScopeRbacRoleBinding = ScopeRbacRoleBinding;