UNPKG

@pulumi/google-compliance-policies

Version:

This repository contains a growing set of Compliance Policies to validate your infrastructure using Pulumi's Crossguard Policy-as-Code framework.

830 lines (829 loc) 42.4 kB
"use strict"; // Copyright 2016-2024, Pulumi Corporation. // // Licensed under the Apache License, Version 2.0 (the "License"); // you may not use this file except in compliance with the License. // You may obtain a copy of the License at // // http://www.apache.org/licenses/LICENSE-2.0 // // Unless required by applicable law or agreed to in writing, software // distributed under the License is distributed on an "AS IS" BASIS, // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. // See the License for the specific language governing permissions and // limitations under the License. // // ------------------------------- WARNING ------------------------------------- // This file was programmatically generated. Do not edit unless you know what // you're doing. // ------------------------------- WARNING ------------------------------------- Object.defineProperty(exports, "__esModule", { value: true }); exports.TlsRoute = exports.TcpRoute = exports.ServiceLbPolicyIamPolicy = exports.ServiceLbPolicyIamMember = exports.ServiceLbPolicyIamBinding = exports.ServiceLbPolicy = exports.ServiceBindingIamPolicy = exports.ServiceBindingIamMember = exports.ServiceBindingIamBinding = exports.ServiceBinding = exports.MeshIamPolicy = exports.MeshIamMember = exports.MeshIamBinding = exports.Mesh = exports.LbTrafficExtension = exports.LbRouteExtension = exports.HttpRoute = exports.GrpcRoute = exports.GatewayIamPolicy = exports.GatewayIamMember = exports.GatewayIamBinding = exports.Gateway = exports.EndpointPolicyIamPolicy = exports.EndpointPolicyIamMember = exports.EndpointPolicyIamBinding = exports.EndpointPolicy = void 0; const policy_1 = require("@pulumi/policy"); const compliance_policy_manager_1 = require("@pulumi/compliance-policy-manager"); const v1beta1_1 = require("@pulumi/google-native/networkservices/v1beta1"); const v1beta1_2 = require("@pulumi/google-native/networkservices/v1beta1"); const v1beta1_3 = require("@pulumi/google-native/networkservices/v1beta1"); const v1beta1_4 = require("@pulumi/google-native/networkservices/v1beta1"); const v1beta1_5 = require("@pulumi/google-native/networkservices/v1beta1"); const v1beta1_6 = require("@pulumi/google-native/networkservices/v1beta1"); const v1beta1_7 = require("@pulumi/google-native/networkservices/v1beta1"); const v1beta1_8 = require("@pulumi/google-native/networkservices/v1beta1"); const v1beta1_9 = require("@pulumi/google-native/networkservices/v1beta1"); const v1beta1_10 = require("@pulumi/google-native/networkservices/v1beta1"); const v1beta1_11 = require("@pulumi/google-native/networkservices/v1beta1"); const v1beta1_12 = require("@pulumi/google-native/networkservices/v1beta1"); const v1beta1_13 = require("@pulumi/google-native/networkservices/v1beta1"); const v1beta1_14 = require("@pulumi/google-native/networkservices/v1beta1"); const v1beta1_15 = require("@pulumi/google-native/networkservices/v1beta1"); const v1beta1_16 = require("@pulumi/google-native/networkservices/v1beta1"); const v1beta1_17 = require("@pulumi/google-native/networkservices/v1beta1"); const v1beta1_18 = require("@pulumi/google-native/networkservices/v1beta1"); const v1beta1_19 = require("@pulumi/google-native/networkservices/v1beta1"); const v1beta1_20 = require("@pulumi/google-native/networkservices/v1beta1"); const v1beta1_21 = require("@pulumi/google-native/networkservices/v1beta1"); const v1beta1_22 = require("@pulumi/google-native/networkservices/v1beta1"); const v1beta1_23 = require("@pulumi/google-native/networkservices/v1beta1"); const v1beta1_24 = require("@pulumi/google-native/networkservices/v1beta1"); const v1beta1_25 = require("@pulumi/google-native/networkservices/v1beta1"); const v1beta1_26 = require("@pulumi/google-native/networkservices/v1beta1"); var EndpointPolicy; (function (EndpointPolicy) { /** * Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.EndpointPolicy). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ EndpointPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-networkservices-v1beta1-endpointpolicy-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.EndpointPolicy).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta1_1.EndpointPolicy, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Networkservices EndpointPolicy shouldn't use an unstable API (networkservices.v1beta1.EndpointPolicy)."); }), }, vendors: ["google"], services: ["networkservices"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(EndpointPolicy || (EndpointPolicy = {})); exports.EndpointPolicy = EndpointPolicy; var EndpointPolicyIamBinding; (function (EndpointPolicyIamBinding) { /** * Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.EndpointPolicyIamBinding). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ EndpointPolicyIamBinding.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-networkservices-v1beta1-endpointpolicyiambinding-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.EndpointPolicyIamBinding).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta1_2.EndpointPolicyIamBinding, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Networkservices EndpointPolicyIamBinding shouldn't use an unstable API (networkservices.v1beta1.EndpointPolicyIamBinding)."); }), }, vendors: ["google"], services: ["networkservices"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(EndpointPolicyIamBinding || (EndpointPolicyIamBinding = {})); exports.EndpointPolicyIamBinding = EndpointPolicyIamBinding; var EndpointPolicyIamMember; (function (EndpointPolicyIamMember) { /** * Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.EndpointPolicyIamMember). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ EndpointPolicyIamMember.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-networkservices-v1beta1-endpointpolicyiammember-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.EndpointPolicyIamMember).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta1_3.EndpointPolicyIamMember, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Networkservices EndpointPolicyIamMember shouldn't use an unstable API (networkservices.v1beta1.EndpointPolicyIamMember)."); }), }, vendors: ["google"], services: ["networkservices"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(EndpointPolicyIamMember || (EndpointPolicyIamMember = {})); exports.EndpointPolicyIamMember = EndpointPolicyIamMember; var EndpointPolicyIamPolicy; (function (EndpointPolicyIamPolicy) { /** * Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.EndpointPolicyIamPolicy). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ EndpointPolicyIamPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-networkservices-v1beta1-endpointpolicyiampolicy-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.EndpointPolicyIamPolicy).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta1_4.EndpointPolicyIamPolicy, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Networkservices EndpointPolicyIamPolicy shouldn't use an unstable API (networkservices.v1beta1.EndpointPolicyIamPolicy)."); }), }, vendors: ["google"], services: ["networkservices"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(EndpointPolicyIamPolicy || (EndpointPolicyIamPolicy = {})); exports.EndpointPolicyIamPolicy = EndpointPolicyIamPolicy; var Gateway; (function (Gateway) { /** * Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.Gateway). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ Gateway.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-networkservices-v1beta1-gateway-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.Gateway).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta1_5.Gateway, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Networkservices Gateway shouldn't use an unstable API (networkservices.v1beta1.Gateway)."); }), }, vendors: ["google"], services: ["networkservices"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(Gateway || (Gateway = {})); exports.Gateway = Gateway; var GatewayIamBinding; (function (GatewayIamBinding) { /** * Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.GatewayIamBinding). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ GatewayIamBinding.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-networkservices-v1beta1-gatewayiambinding-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.GatewayIamBinding).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta1_6.GatewayIamBinding, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Networkservices GatewayIamBinding shouldn't use an unstable API (networkservices.v1beta1.GatewayIamBinding)."); }), }, vendors: ["google"], services: ["networkservices"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(GatewayIamBinding || (GatewayIamBinding = {})); exports.GatewayIamBinding = GatewayIamBinding; var GatewayIamMember; (function (GatewayIamMember) { /** * Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.GatewayIamMember). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ GatewayIamMember.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-networkservices-v1beta1-gatewayiammember-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.GatewayIamMember).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta1_7.GatewayIamMember, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Networkservices GatewayIamMember shouldn't use an unstable API (networkservices.v1beta1.GatewayIamMember)."); }), }, vendors: ["google"], services: ["networkservices"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(GatewayIamMember || (GatewayIamMember = {})); exports.GatewayIamMember = GatewayIamMember; var GatewayIamPolicy; (function (GatewayIamPolicy) { /** * Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.GatewayIamPolicy). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ GatewayIamPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-networkservices-v1beta1-gatewayiampolicy-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.GatewayIamPolicy).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta1_8.GatewayIamPolicy, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Networkservices GatewayIamPolicy shouldn't use an unstable API (networkservices.v1beta1.GatewayIamPolicy)."); }), }, vendors: ["google"], services: ["networkservices"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(GatewayIamPolicy || (GatewayIamPolicy = {})); exports.GatewayIamPolicy = GatewayIamPolicy; var GrpcRoute; (function (GrpcRoute) { /** * Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.GrpcRoute). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ GrpcRoute.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-networkservices-v1beta1-grpcroute-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.GrpcRoute).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta1_9.GrpcRoute, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Networkservices GrpcRoute shouldn't use an unstable API (networkservices.v1beta1.GrpcRoute)."); }), }, vendors: ["google"], services: ["networkservices"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(GrpcRoute || (GrpcRoute = {})); exports.GrpcRoute = GrpcRoute; var HttpRoute; (function (HttpRoute) { /** * Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.HttpRoute). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ HttpRoute.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-networkservices-v1beta1-httproute-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.HttpRoute).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta1_10.HttpRoute, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Networkservices HttpRoute shouldn't use an unstable API (networkservices.v1beta1.HttpRoute)."); }), }, vendors: ["google"], services: ["networkservices"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(HttpRoute || (HttpRoute = {})); exports.HttpRoute = HttpRoute; var LbRouteExtension; (function (LbRouteExtension) { /** * Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.LbRouteExtension). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ LbRouteExtension.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-networkservices-v1beta1-lbrouteextension-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.LbRouteExtension).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta1_11.LbRouteExtension, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Networkservices LbRouteExtension shouldn't use an unstable API (networkservices.v1beta1.LbRouteExtension)."); }), }, vendors: ["google"], services: ["networkservices"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(LbRouteExtension || (LbRouteExtension = {})); exports.LbRouteExtension = LbRouteExtension; var LbTrafficExtension; (function (LbTrafficExtension) { /** * Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.LbTrafficExtension). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ LbTrafficExtension.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-networkservices-v1beta1-lbtrafficextension-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.LbTrafficExtension).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta1_12.LbTrafficExtension, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Networkservices LbTrafficExtension shouldn't use an unstable API (networkservices.v1beta1.LbTrafficExtension)."); }), }, vendors: ["google"], services: ["networkservices"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(LbTrafficExtension || (LbTrafficExtension = {})); exports.LbTrafficExtension = LbTrafficExtension; var Mesh; (function (Mesh) { /** * Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.Mesh). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ Mesh.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-networkservices-v1beta1-mesh-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.Mesh).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta1_13.Mesh, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Networkservices Mesh shouldn't use an unstable API (networkservices.v1beta1.Mesh)."); }), }, vendors: ["google"], services: ["networkservices"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(Mesh || (Mesh = {})); exports.Mesh = Mesh; var MeshIamBinding; (function (MeshIamBinding) { /** * Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.MeshIamBinding). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ MeshIamBinding.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-networkservices-v1beta1-meshiambinding-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.MeshIamBinding).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta1_14.MeshIamBinding, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Networkservices MeshIamBinding shouldn't use an unstable API (networkservices.v1beta1.MeshIamBinding)."); }), }, vendors: ["google"], services: ["networkservices"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(MeshIamBinding || (MeshIamBinding = {})); exports.MeshIamBinding = MeshIamBinding; var MeshIamMember; (function (MeshIamMember) { /** * Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.MeshIamMember). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ MeshIamMember.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-networkservices-v1beta1-meshiammember-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.MeshIamMember).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta1_15.MeshIamMember, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Networkservices MeshIamMember shouldn't use an unstable API (networkservices.v1beta1.MeshIamMember)."); }), }, vendors: ["google"], services: ["networkservices"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(MeshIamMember || (MeshIamMember = {})); exports.MeshIamMember = MeshIamMember; var MeshIamPolicy; (function (MeshIamPolicy) { /** * Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.MeshIamPolicy). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ MeshIamPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-networkservices-v1beta1-meshiampolicy-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.MeshIamPolicy).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta1_16.MeshIamPolicy, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Networkservices MeshIamPolicy shouldn't use an unstable API (networkservices.v1beta1.MeshIamPolicy)."); }), }, vendors: ["google"], services: ["networkservices"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(MeshIamPolicy || (MeshIamPolicy = {})); exports.MeshIamPolicy = MeshIamPolicy; var ServiceBinding; (function (ServiceBinding) { /** * Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.ServiceBinding). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ ServiceBinding.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-networkservices-v1beta1-servicebinding-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.ServiceBinding).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta1_17.ServiceBinding, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Networkservices ServiceBinding shouldn't use an unstable API (networkservices.v1beta1.ServiceBinding)."); }), }, vendors: ["google"], services: ["networkservices"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(ServiceBinding || (ServiceBinding = {})); exports.ServiceBinding = ServiceBinding; var ServiceBindingIamBinding; (function (ServiceBindingIamBinding) { /** * Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.ServiceBindingIamBinding). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ ServiceBindingIamBinding.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-networkservices-v1beta1-servicebindingiambinding-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.ServiceBindingIamBinding).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta1_18.ServiceBindingIamBinding, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Networkservices ServiceBindingIamBinding shouldn't use an unstable API (networkservices.v1beta1.ServiceBindingIamBinding)."); }), }, vendors: ["google"], services: ["networkservices"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(ServiceBindingIamBinding || (ServiceBindingIamBinding = {})); exports.ServiceBindingIamBinding = ServiceBindingIamBinding; var ServiceBindingIamMember; (function (ServiceBindingIamMember) { /** * Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.ServiceBindingIamMember). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ ServiceBindingIamMember.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-networkservices-v1beta1-servicebindingiammember-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.ServiceBindingIamMember).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta1_19.ServiceBindingIamMember, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Networkservices ServiceBindingIamMember shouldn't use an unstable API (networkservices.v1beta1.ServiceBindingIamMember)."); }), }, vendors: ["google"], services: ["networkservices"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(ServiceBindingIamMember || (ServiceBindingIamMember = {})); exports.ServiceBindingIamMember = ServiceBindingIamMember; var ServiceBindingIamPolicy; (function (ServiceBindingIamPolicy) { /** * Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.ServiceBindingIamPolicy). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ ServiceBindingIamPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-networkservices-v1beta1-servicebindingiampolicy-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.ServiceBindingIamPolicy).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta1_20.ServiceBindingIamPolicy, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Networkservices ServiceBindingIamPolicy shouldn't use an unstable API (networkservices.v1beta1.ServiceBindingIamPolicy)."); }), }, vendors: ["google"], services: ["networkservices"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(ServiceBindingIamPolicy || (ServiceBindingIamPolicy = {})); exports.ServiceBindingIamPolicy = ServiceBindingIamPolicy; var ServiceLbPolicy; (function (ServiceLbPolicy) { /** * Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.ServiceLbPolicy). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ ServiceLbPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-networkservices-v1beta1-servicelbpolicy-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.ServiceLbPolicy).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta1_21.ServiceLbPolicy, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Networkservices ServiceLbPolicy shouldn't use an unstable API (networkservices.v1beta1.ServiceLbPolicy)."); }), }, vendors: ["google"], services: ["networkservices"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(ServiceLbPolicy || (ServiceLbPolicy = {})); exports.ServiceLbPolicy = ServiceLbPolicy; var ServiceLbPolicyIamBinding; (function (ServiceLbPolicyIamBinding) { /** * Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.ServiceLbPolicyIamBinding). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ ServiceLbPolicyIamBinding.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-networkservices-v1beta1-servicelbpolicyiambinding-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.ServiceLbPolicyIamBinding).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta1_22.ServiceLbPolicyIamBinding, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Networkservices ServiceLbPolicyIamBinding shouldn't use an unstable API (networkservices.v1beta1.ServiceLbPolicyIamBinding)."); }), }, vendors: ["google"], services: ["networkservices"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(ServiceLbPolicyIamBinding || (ServiceLbPolicyIamBinding = {})); exports.ServiceLbPolicyIamBinding = ServiceLbPolicyIamBinding; var ServiceLbPolicyIamMember; (function (ServiceLbPolicyIamMember) { /** * Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.ServiceLbPolicyIamMember). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ ServiceLbPolicyIamMember.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-networkservices-v1beta1-servicelbpolicyiammember-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.ServiceLbPolicyIamMember).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta1_23.ServiceLbPolicyIamMember, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Networkservices ServiceLbPolicyIamMember shouldn't use an unstable API (networkservices.v1beta1.ServiceLbPolicyIamMember)."); }), }, vendors: ["google"], services: ["networkservices"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(ServiceLbPolicyIamMember || (ServiceLbPolicyIamMember = {})); exports.ServiceLbPolicyIamMember = ServiceLbPolicyIamMember; var ServiceLbPolicyIamPolicy; (function (ServiceLbPolicyIamPolicy) { /** * Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.ServiceLbPolicyIamPolicy). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ ServiceLbPolicyIamPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-networkservices-v1beta1-servicelbpolicyiampolicy-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.ServiceLbPolicyIamPolicy).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta1_24.ServiceLbPolicyIamPolicy, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Networkservices ServiceLbPolicyIamPolicy shouldn't use an unstable API (networkservices.v1beta1.ServiceLbPolicyIamPolicy)."); }), }, vendors: ["google"], services: ["networkservices"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(ServiceLbPolicyIamPolicy || (ServiceLbPolicyIamPolicy = {})); exports.ServiceLbPolicyIamPolicy = ServiceLbPolicyIamPolicy; var TcpRoute; (function (TcpRoute) { /** * Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.TcpRoute). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ TcpRoute.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-networkservices-v1beta1-tcproute-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.TcpRoute).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta1_25.TcpRoute, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Networkservices TcpRoute shouldn't use an unstable API (networkservices.v1beta1.TcpRoute)."); }), }, vendors: ["google"], services: ["networkservices"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(TcpRoute || (TcpRoute = {})); exports.TcpRoute = TcpRoute; var TlsRoute; (function (TlsRoute) { /** * Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.TlsRoute). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ TlsRoute.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-networkservices-v1beta1-tlsroute-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (networkservices.v1beta1.TlsRoute).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta1_26.TlsRoute, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Networkservices TlsRoute shouldn't use an unstable API (networkservices.v1beta1.TlsRoute)."); }), }, vendors: ["google"], services: ["networkservices"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(TlsRoute || (TlsRoute = {})); exports.TlsRoute = TlsRoute;