UNPKG

@pulumi/google-compliance-policies

Version:

This repository contains a growing set of Compliance Policies to validate your infrastructure using Pulumi's Crossguard Policy-as-Code framework.

551 lines (550 loc) 26.3 kB
"use strict"; // Copyright 2016-2024, Pulumi Corporation. // // Licensed under the Apache License, Version 2.0 (the "License"); // you may not use this file except in compliance with the License. // You may obtain a copy of the License at // // http://www.apache.org/licenses/LICENSE-2.0 // // Unless required by applicable law or agreed to in writing, software // distributed under the License is distributed on an "AS IS" BASIS, // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. // See the License for the specific language governing permissions and // limitations under the License. // // ------------------------------- WARNING ------------------------------------- // This file was programmatically generated. Do not edit unless you know what // you're doing. // ------------------------------- WARNING ------------------------------------- Object.defineProperty(exports, "__esModule", { value: true }); exports.ScopeRbacRoleBinding = exports.ScopeIamPolicy = exports.ScopeIamMember = exports.ScopeIamBinding = exports.Scope = exports.Namespace = exports.MembershipRbacRoleBinding = exports.MembershipIamPolicy = exports.MembershipIamMember = exports.MembershipIamBinding = exports.Membership = exports.Fleet = exports.FeatureIamPolicy = exports.FeatureIamMember = exports.FeatureIamBinding = exports.Feature = exports.Binding = void 0; const policy_1 = require("@pulumi/policy"); const compliance_policy_manager_1 = require("@pulumi/compliance-policy-manager"); const v1beta_1 = require("@pulumi/google-native/gkehub/v1beta"); const v1beta_2 = require("@pulumi/google-native/gkehub/v1beta"); const v1beta_3 = require("@pulumi/google-native/gkehub/v1beta"); const v1beta_4 = require("@pulumi/google-native/gkehub/v1beta"); const v1beta_5 = require("@pulumi/google-native/gkehub/v1beta"); const v1beta_6 = require("@pulumi/google-native/gkehub/v1beta"); const v1beta_7 = require("@pulumi/google-native/gkehub/v1beta"); const v1beta_8 = require("@pulumi/google-native/gkehub/v1beta"); const v1beta_9 = require("@pulumi/google-native/gkehub/v1beta"); const v1beta_10 = require("@pulumi/google-native/gkehub/v1beta"); const v1beta_11 = require("@pulumi/google-native/gkehub/v1beta"); const v1beta_12 = require("@pulumi/google-native/gkehub/v1beta"); const v1beta_13 = require("@pulumi/google-native/gkehub/v1beta"); const v1beta_14 = require("@pulumi/google-native/gkehub/v1beta"); const v1beta_15 = require("@pulumi/google-native/gkehub/v1beta"); const v1beta_16 = require("@pulumi/google-native/gkehub/v1beta"); const v1beta_17 = require("@pulumi/google-native/gkehub/v1beta"); var Binding; (function (Binding) { /** * Disallow the use of non-stable (Beta) resouces (gkehub.v1beta.Binding). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ Binding.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-gkehub-v1beta-binding-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (gkehub.v1beta.Binding).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta_1.Binding, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Gkehub Binding shouldn't use an unstable API (gkehub.v1beta.Binding)."); }), }, vendors: ["google"], services: ["gkehub"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(Binding || (Binding = {})); exports.Binding = Binding; var Feature; (function (Feature) { /** * Disallow the use of non-stable (Beta) resouces (gkehub.v1beta.Feature). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ Feature.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-gkehub-v1beta-feature-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (gkehub.v1beta.Feature).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta_2.Feature, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Gkehub Feature shouldn't use an unstable API (gkehub.v1beta.Feature)."); }), }, vendors: ["google"], services: ["gkehub"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(Feature || (Feature = {})); exports.Feature = Feature; var FeatureIamBinding; (function (FeatureIamBinding) { /** * Disallow the use of non-stable (Beta) resouces (gkehub.v1beta.FeatureIamBinding). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ FeatureIamBinding.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-gkehub-v1beta-featureiambinding-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (gkehub.v1beta.FeatureIamBinding).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta_3.FeatureIamBinding, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Gkehub FeatureIamBinding shouldn't use an unstable API (gkehub.v1beta.FeatureIamBinding)."); }), }, vendors: ["google"], services: ["gkehub"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(FeatureIamBinding || (FeatureIamBinding = {})); exports.FeatureIamBinding = FeatureIamBinding; var FeatureIamMember; (function (FeatureIamMember) { /** * Disallow the use of non-stable (Beta) resouces (gkehub.v1beta.FeatureIamMember). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ FeatureIamMember.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-gkehub-v1beta-featureiammember-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (gkehub.v1beta.FeatureIamMember).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta_4.FeatureIamMember, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Gkehub FeatureIamMember shouldn't use an unstable API (gkehub.v1beta.FeatureIamMember)."); }), }, vendors: ["google"], services: ["gkehub"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(FeatureIamMember || (FeatureIamMember = {})); exports.FeatureIamMember = FeatureIamMember; var FeatureIamPolicy; (function (FeatureIamPolicy) { /** * Disallow the use of non-stable (Beta) resouces (gkehub.v1beta.FeatureIamPolicy). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ FeatureIamPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-gkehub-v1beta-featureiampolicy-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (gkehub.v1beta.FeatureIamPolicy).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta_5.FeatureIamPolicy, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Gkehub FeatureIamPolicy shouldn't use an unstable API (gkehub.v1beta.FeatureIamPolicy)."); }), }, vendors: ["google"], services: ["gkehub"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(FeatureIamPolicy || (FeatureIamPolicy = {})); exports.FeatureIamPolicy = FeatureIamPolicy; var Fleet; (function (Fleet) { /** * Disallow the use of non-stable (Beta) resouces (gkehub.v1beta.Fleet). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ Fleet.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-gkehub-v1beta-fleet-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (gkehub.v1beta.Fleet).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta_6.Fleet, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Gkehub Fleet shouldn't use an unstable API (gkehub.v1beta.Fleet)."); }), }, vendors: ["google"], services: ["gkehub"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(Fleet || (Fleet = {})); exports.Fleet = Fleet; var Membership; (function (Membership) { /** * Disallow the use of non-stable (Beta) resouces (gkehub.v1beta.Membership). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ Membership.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-gkehub-v1beta-membership-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (gkehub.v1beta.Membership).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta_7.Membership, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Gkehub Membership shouldn't use an unstable API (gkehub.v1beta.Membership)."); }), }, vendors: ["google"], services: ["gkehub"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(Membership || (Membership = {})); exports.Membership = Membership; var MembershipIamBinding; (function (MembershipIamBinding) { /** * Disallow the use of non-stable (Beta) resouces (gkehub.v1beta.MembershipIamBinding). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ MembershipIamBinding.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-gkehub-v1beta-membershipiambinding-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (gkehub.v1beta.MembershipIamBinding).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta_8.MembershipIamBinding, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Gkehub MembershipIamBinding shouldn't use an unstable API (gkehub.v1beta.MembershipIamBinding)."); }), }, vendors: ["google"], services: ["gkehub"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(MembershipIamBinding || (MembershipIamBinding = {})); exports.MembershipIamBinding = MembershipIamBinding; var MembershipIamMember; (function (MembershipIamMember) { /** * Disallow the use of non-stable (Beta) resouces (gkehub.v1beta.MembershipIamMember). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ MembershipIamMember.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-gkehub-v1beta-membershipiammember-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (gkehub.v1beta.MembershipIamMember).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta_9.MembershipIamMember, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Gkehub MembershipIamMember shouldn't use an unstable API (gkehub.v1beta.MembershipIamMember)."); }), }, vendors: ["google"], services: ["gkehub"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(MembershipIamMember || (MembershipIamMember = {})); exports.MembershipIamMember = MembershipIamMember; var MembershipIamPolicy; (function (MembershipIamPolicy) { /** * Disallow the use of non-stable (Beta) resouces (gkehub.v1beta.MembershipIamPolicy). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ MembershipIamPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-gkehub-v1beta-membershipiampolicy-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (gkehub.v1beta.MembershipIamPolicy).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta_10.MembershipIamPolicy, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Gkehub MembershipIamPolicy shouldn't use an unstable API (gkehub.v1beta.MembershipIamPolicy)."); }), }, vendors: ["google"], services: ["gkehub"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(MembershipIamPolicy || (MembershipIamPolicy = {})); exports.MembershipIamPolicy = MembershipIamPolicy; var MembershipRbacRoleBinding; (function (MembershipRbacRoleBinding) { /** * Disallow the use of non-stable (Beta) resouces (gkehub.v1beta.MembershipRbacRoleBinding). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ MembershipRbacRoleBinding.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-gkehub-v1beta-membershiprbacrolebinding-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (gkehub.v1beta.MembershipRbacRoleBinding).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta_11.MembershipRbacRoleBinding, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Gkehub MembershipRbacRoleBinding shouldn't use an unstable API (gkehub.v1beta.MembershipRbacRoleBinding)."); }), }, vendors: ["google"], services: ["gkehub"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(MembershipRbacRoleBinding || (MembershipRbacRoleBinding = {})); exports.MembershipRbacRoleBinding = MembershipRbacRoleBinding; var Namespace; (function (Namespace) { /** * Disallow the use of non-stable (Beta) resouces (gkehub.v1beta.Namespace). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ Namespace.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-gkehub-v1beta-namespace-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (gkehub.v1beta.Namespace).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta_12.Namespace, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Gkehub Namespace shouldn't use an unstable API (gkehub.v1beta.Namespace)."); }), }, vendors: ["google"], services: ["gkehub"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(Namespace || (Namespace = {})); exports.Namespace = Namespace; var Scope; (function (Scope) { /** * Disallow the use of non-stable (Beta) resouces (gkehub.v1beta.Scope). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ Scope.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-gkehub-v1beta-scope-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (gkehub.v1beta.Scope).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta_13.Scope, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Gkehub Scope shouldn't use an unstable API (gkehub.v1beta.Scope)."); }), }, vendors: ["google"], services: ["gkehub"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(Scope || (Scope = {})); exports.Scope = Scope; var ScopeIamBinding; (function (ScopeIamBinding) { /** * Disallow the use of non-stable (Beta) resouces (gkehub.v1beta.ScopeIamBinding). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ ScopeIamBinding.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-gkehub-v1beta-scopeiambinding-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (gkehub.v1beta.ScopeIamBinding).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta_14.ScopeIamBinding, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Gkehub ScopeIamBinding shouldn't use an unstable API (gkehub.v1beta.ScopeIamBinding)."); }), }, vendors: ["google"], services: ["gkehub"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(ScopeIamBinding || (ScopeIamBinding = {})); exports.ScopeIamBinding = ScopeIamBinding; var ScopeIamMember; (function (ScopeIamMember) { /** * Disallow the use of non-stable (Beta) resouces (gkehub.v1beta.ScopeIamMember). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ ScopeIamMember.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-gkehub-v1beta-scopeiammember-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (gkehub.v1beta.ScopeIamMember).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta_15.ScopeIamMember, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Gkehub ScopeIamMember shouldn't use an unstable API (gkehub.v1beta.ScopeIamMember)."); }), }, vendors: ["google"], services: ["gkehub"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(ScopeIamMember || (ScopeIamMember = {})); exports.ScopeIamMember = ScopeIamMember; var ScopeIamPolicy; (function (ScopeIamPolicy) { /** * Disallow the use of non-stable (Beta) resouces (gkehub.v1beta.ScopeIamPolicy). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ ScopeIamPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-gkehub-v1beta-scopeiampolicy-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (gkehub.v1beta.ScopeIamPolicy).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta_16.ScopeIamPolicy, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Gkehub ScopeIamPolicy shouldn't use an unstable API (gkehub.v1beta.ScopeIamPolicy)."); }), }, vendors: ["google"], services: ["gkehub"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(ScopeIamPolicy || (ScopeIamPolicy = {})); exports.ScopeIamPolicy = ScopeIamPolicy; var ScopeRbacRoleBinding; (function (ScopeRbacRoleBinding) { /** * Disallow the use of non-stable (Beta) resouces (gkehub.v1beta.ScopeRbacRoleBinding). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ ScopeRbacRoleBinding.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-gkehub-v1beta-scoperbacrolebinding-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (gkehub.v1beta.ScopeRbacRoleBinding).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta_17.ScopeRbacRoleBinding, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Gkehub ScopeRbacRoleBinding shouldn't use an unstable API (gkehub.v1beta.ScopeRbacRoleBinding)."); }), }, vendors: ["google"], services: ["gkehub"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(ScopeRbacRoleBinding || (ScopeRbacRoleBinding = {})); exports.ScopeRbacRoleBinding = ScopeRbacRoleBinding;