assuredworkloadspb

package
v1.11.6 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Mar 14, 2024 License: Apache-2.0 Imports: 14 Imported by: 1

Documentation

Index

Constants

This section is empty.

Variables

View Source
var (
	Workload_ComplianceRegime_name = map[int32]string{
		0:  "COMPLIANCE_REGIME_UNSPECIFIED",
		1:  "IL4",
		2:  "CJIS",
		3:  "FEDRAMP_HIGH",
		4:  "FEDRAMP_MODERATE",
		5:  "US_REGIONAL_ACCESS",
		6:  "HIPAA",
		7:  "HITRUST",
		8:  "EU_REGIONS_AND_SUPPORT",
		9:  "CA_REGIONS_AND_SUPPORT",
		10: "ITAR",
		11: "AU_REGIONS_AND_US_SUPPORT",
		12: "ASSURED_WORKLOADS_FOR_PARTNERS",
	}
	Workload_ComplianceRegime_value = map[string]int32{
		"COMPLIANCE_REGIME_UNSPECIFIED":  0,
		"IL4":                            1,
		"CJIS":                           2,
		"FEDRAMP_HIGH":                   3,
		"FEDRAMP_MODERATE":               4,
		"US_REGIONAL_ACCESS":             5,
		"HIPAA":                          6,
		"HITRUST":                        7,
		"EU_REGIONS_AND_SUPPORT":         8,
		"CA_REGIONS_AND_SUPPORT":         9,
		"ITAR":                           10,
		"AU_REGIONS_AND_US_SUPPORT":      11,
		"ASSURED_WORKLOADS_FOR_PARTNERS": 12,
	}
)

Enum value maps for Workload_ComplianceRegime.

View Source
var (
	Workload_KajEnrollmentState_name = map[int32]string{
		0: "KAJ_ENROLLMENT_STATE_UNSPECIFIED",
		1: "KAJ_ENROLLMENT_STATE_PENDING",
		2: "KAJ_ENROLLMENT_STATE_COMPLETE",
	}
	Workload_KajEnrollmentState_value = map[string]int32{
		"KAJ_ENROLLMENT_STATE_UNSPECIFIED": 0,
		"KAJ_ENROLLMENT_STATE_PENDING":     1,
		"KAJ_ENROLLMENT_STATE_COMPLETE":    2,
	}
)

Enum value maps for Workload_KajEnrollmentState.

View Source
var (
	Workload_Partner_name = map[int32]string{
		0: "PARTNER_UNSPECIFIED",
		1: "LOCAL_CONTROLS_BY_S3NS",
	}
	Workload_Partner_value = map[string]int32{
		"PARTNER_UNSPECIFIED":    0,
		"LOCAL_CONTROLS_BY_S3NS": 1,
	}
)

Enum value maps for Workload_Partner.

View Source
var (
	Workload_ResourceInfo_ResourceType_name = map[int32]string{
		0: "RESOURCE_TYPE_UNSPECIFIED",
		1: "CONSUMER_PROJECT",
		4: "CONSUMER_FOLDER",
		2: "ENCRYPTION_KEYS_PROJECT",
		3: "KEYRING",
	}
	Workload_ResourceInfo_ResourceType_value = map[string]int32{
		"RESOURCE_TYPE_UNSPECIFIED": 0,
		"CONSUMER_PROJECT":          1,
		"CONSUMER_FOLDER":           4,
		"ENCRYPTION_KEYS_PROJECT":   2,
		"KEYRING":                   3,
	}
)

Enum value maps for Workload_ResourceInfo_ResourceType.

View Source
var (
	Workload_SaaEnrollmentResponse_SetupState_name = map[int32]string{
		0: "SETUP_STATE_UNSPECIFIED",
		1: "STATUS_PENDING",
		2: "STATUS_COMPLETE",
	}
	Workload_SaaEnrollmentResponse_SetupState_value = map[string]int32{
		"SETUP_STATE_UNSPECIFIED": 0,
		"STATUS_PENDING":          1,
		"STATUS_COMPLETE":         2,
	}
)

Enum value maps for Workload_SaaEnrollmentResponse_SetupState.

View Source
var (
	Workload_SaaEnrollmentResponse_SetupError_name = map[int32]string{
		0: "SETUP_ERROR_UNSPECIFIED",
		1: "ERROR_INVALID_BASE_SETUP",
		2: "ERROR_MISSING_EXTERNAL_SIGNING_KEY",
		3: "ERROR_NOT_ALL_SERVICES_ENROLLED",
		4: "ERROR_SETUP_CHECK_FAILED",
	}
	Workload_SaaEnrollmentResponse_SetupError_value = map[string]int32{
		"SETUP_ERROR_UNSPECIFIED":            0,
		"ERROR_INVALID_BASE_SETUP":           1,
		"ERROR_MISSING_EXTERNAL_SIGNING_KEY": 2,
		"ERROR_NOT_ALL_SERVICES_ENROLLED":    3,
		"ERROR_SETUP_CHECK_FAILED":           4,
	}
)

Enum value maps for Workload_SaaEnrollmentResponse_SetupError.

View Source
var (
	RestrictAllowedResourcesRequest_RestrictionType_name = map[int32]string{
		0: "RESTRICTION_TYPE_UNSPECIFIED",
		1: "ALLOW_ALL_GCP_RESOURCES",
		2: "ALLOW_COMPLIANT_RESOURCES",
	}
	RestrictAllowedResourcesRequest_RestrictionType_value = map[string]int32{
		"RESTRICTION_TYPE_UNSPECIFIED": 0,
		"ALLOW_ALL_GCP_RESOURCES":      1,
		"ALLOW_COMPLIANT_RESOURCES":    2,
	}
)

Enum value maps for RestrictAllowedResourcesRequest_RestrictionType.

View Source
var (
	Violation_State_name = map[int32]string{
		0: "STATE_UNSPECIFIED",
		2: "RESOLVED",
		3: "UNRESOLVED",
		4: "EXCEPTION",
	}
	Violation_State_value = map[string]int32{
		"STATE_UNSPECIFIED": 0,
		"RESOLVED":          2,
		"UNRESOLVED":        3,
		"EXCEPTION":         4,
	}
)

Enum value maps for Violation_State.

View Source
var (
	Violation_Remediation_RemediationType_name = map[int32]string{
		0: "REMEDIATION_TYPE_UNSPECIFIED",
		1: "REMEDIATION_BOOLEAN_ORG_POLICY_VIOLATION",
		2: "REMEDIATION_LIST_ALLOWED_VALUES_ORG_POLICY_VIOLATION",
		3: "REMEDIATION_LIST_DENIED_VALUES_ORG_POLICY_VIOLATION",
		4: "REMEDIATION_RESTRICT_CMEK_CRYPTO_KEY_PROJECTS_ORG_POLICY_VIOLATION",
	}
	Violation_Remediation_RemediationType_value = map[string]int32{
		"REMEDIATION_TYPE_UNSPECIFIED":                                       0,
		"REMEDIATION_BOOLEAN_ORG_POLICY_VIOLATION":                           1,
		"REMEDIATION_LIST_ALLOWED_VALUES_ORG_POLICY_VIOLATION":               2,
		"REMEDIATION_LIST_DENIED_VALUES_ORG_POLICY_VIOLATION":                3,
		"REMEDIATION_RESTRICT_CMEK_CRYPTO_KEY_PROJECTS_ORG_POLICY_VIOLATION": 4,
	}
)

Enum value maps for Violation_Remediation_RemediationType.

View Source
var File_google_cloud_assuredworkloads_v1_assuredworkloads_proto protoreflect.FileDescriptor

Functions

func RegisterAssuredWorkloadsServiceServer

func RegisterAssuredWorkloadsServiceServer(s *grpc.Server, srv AssuredWorkloadsServiceServer)

Types

type AcknowledgeViolationRequest

type AcknowledgeViolationRequest struct {

	// Required. The resource name of the Violation to acknowledge.
	// Format:
	// organizations/{organization}/locations/{location}/workloads/{workload}/violations/{violation}
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Required. Business justification explaining the need for violation acknowledgement
	Comment string `protobuf:"bytes,2,opt,name=comment,proto3" json:"comment,omitempty"`
	// Optional. This field is deprecated and will be removed in future version of the API.
	// Name of the OrgPolicy which was modified with non-compliant change and
	// resulted in this violation.
	// Format:
	// projects/{project_number}/policies/{constraint_name}
	// folders/{folder_id}/policies/{constraint_name}
	// organizations/{organization_id}/policies/{constraint_name}
	//
	// Deprecated: Marked as deprecated in google/cloud/assuredworkloads/v1/assuredworkloads.proto.
	NonCompliantOrgPolicy string `` /* 128-byte string literal not displayed */
	// contains filtered or unexported fields
}

Request for acknowledging the violation Next Id: 4

func (*AcknowledgeViolationRequest) Descriptor deprecated

func (*AcknowledgeViolationRequest) Descriptor() ([]byte, []int)

Deprecated: Use AcknowledgeViolationRequest.ProtoReflect.Descriptor instead.

func (*AcknowledgeViolationRequest) GetComment

func (x *AcknowledgeViolationRequest) GetComment() string

func (*AcknowledgeViolationRequest) GetName

func (x *AcknowledgeViolationRequest) GetName() string

func (*AcknowledgeViolationRequest) GetNonCompliantOrgPolicy deprecated

func (x *AcknowledgeViolationRequest) GetNonCompliantOrgPolicy() string

Deprecated: Marked as deprecated in google/cloud/assuredworkloads/v1/assuredworkloads.proto.

func (*AcknowledgeViolationRequest) ProtoMessage

func (*AcknowledgeViolationRequest) ProtoMessage()

func (*AcknowledgeViolationRequest) ProtoReflect

func (*AcknowledgeViolationRequest) Reset

func (x *AcknowledgeViolationRequest) Reset()

func (*AcknowledgeViolationRequest) String

func (x *AcknowledgeViolationRequest) String() string

type AcknowledgeViolationResponse

type AcknowledgeViolationResponse struct {
	// contains filtered or unexported fields
}

Response for violation acknowledgement

func (*AcknowledgeViolationResponse) Descriptor deprecated

func (*AcknowledgeViolationResponse) Descriptor() ([]byte, []int)

Deprecated: Use AcknowledgeViolationResponse.ProtoReflect.Descriptor instead.

func (*AcknowledgeViolationResponse) ProtoMessage

func (*AcknowledgeViolationResponse) ProtoMessage()

func (*AcknowledgeViolationResponse) ProtoReflect

func (*AcknowledgeViolationResponse) Reset

func (x *AcknowledgeViolationResponse) Reset()

func (*AcknowledgeViolationResponse) String

type AssuredWorkloadsServiceClient

type AssuredWorkloadsServiceClient interface {
	// Creates Assured Workload.
	CreateWorkload(ctx context.Context, in *CreateWorkloadRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Updates an existing workload.
	// Currently allows updating of workload display_name and labels.
	// For force updates don't set etag field in the Workload.
	// Only one update operation per workload can be in progress.
	UpdateWorkload(ctx context.Context, in *UpdateWorkloadRequest, opts ...grpc.CallOption) (*Workload, error)
	// Restrict the list of resources allowed in the Workload environment.
	// The current list of allowed products can be found at
	// https://cloud.google.com/assured-workloads/docs/supported-products
	// In addition to assuredworkloads.workload.update permission, the user should
	// also have orgpolicy.policy.set permission on the folder resource
	// to use this functionality.
	RestrictAllowedResources(ctx context.Context, in *RestrictAllowedResourcesRequest, opts ...grpc.CallOption) (*RestrictAllowedResourcesResponse, error)
	// Deletes the workload. Make sure that workload's direct children are already
	// in a deleted state, otherwise the request will fail with a
	// FAILED_PRECONDITION error.
	DeleteWorkload(ctx context.Context, in *DeleteWorkloadRequest, opts ...grpc.CallOption) (*emptypb.Empty, error)
	// Gets Assured Workload associated with a CRM Node
	GetWorkload(ctx context.Context, in *GetWorkloadRequest, opts ...grpc.CallOption) (*Workload, error)
	// Lists Assured Workloads under a CRM Node.
	ListWorkloads(ctx context.Context, in *ListWorkloadsRequest, opts ...grpc.CallOption) (*ListWorkloadsResponse, error)
	// Lists the Violations in the AssuredWorkload Environment.
	// Callers may also choose to read across multiple Workloads as per
	// [AIP-159](https://google.aip.dev/159) by using '-' (the hyphen or dash
	// character) as a wildcard character instead of workload-id in the parent.
	// Format `organizations/{org_id}/locations/{location}/workloads/-`
	ListViolations(ctx context.Context, in *ListViolationsRequest, opts ...grpc.CallOption) (*ListViolationsResponse, error)
	// Retrieves Assured Workload Violation based on ID.
	GetViolation(ctx context.Context, in *GetViolationRequest, opts ...grpc.CallOption) (*Violation, error)
	// Acknowledges an existing violation. By acknowledging a violation, users
	// acknowledge the existence of a compliance violation in their workload and
	// decide to ignore it due to a valid business justification. Acknowledgement
	// is a permanent operation and it cannot be reverted.
	AcknowledgeViolation(ctx context.Context, in *AcknowledgeViolationRequest, opts ...grpc.CallOption) (*AcknowledgeViolationResponse, error)
}

AssuredWorkloadsServiceClient is the client API for AssuredWorkloadsService service.

For semantics around ctx use and closing/ending streaming RPCs, please refer to https://godoc.org/google.golang.org/grpc#ClientConn.NewStream.

type AssuredWorkloadsServiceServer

type AssuredWorkloadsServiceServer interface {
	// Creates Assured Workload.
	CreateWorkload(context.Context, *CreateWorkloadRequest) (*longrunningpb.Operation, error)
	// Updates an existing workload.
	// Currently allows updating of workload display_name and labels.
	// For force updates don't set etag field in the Workload.
	// Only one update operation per workload can be in progress.
	UpdateWorkload(context.Context, *UpdateWorkloadRequest) (*Workload, error)
	// Restrict the list of resources allowed in the Workload environment.
	// The current list of allowed products can be found at
	// https://cloud.google.com/assured-workloads/docs/supported-products
	// In addition to assuredworkloads.workload.update permission, the user should
	// also have orgpolicy.policy.set permission on the folder resource
	// to use this functionality.
	RestrictAllowedResources(context.Context, *RestrictAllowedResourcesRequest) (*RestrictAllowedResourcesResponse, error)
	// Deletes the workload. Make sure that workload's direct children are already
	// in a deleted state, otherwise the request will fail with a
	// FAILED_PRECONDITION error.
	DeleteWorkload(context.Context, *DeleteWorkloadRequest) (*emptypb.Empty, error)
	// Gets Assured Workload associated with a CRM Node
	GetWorkload(context.Context, *GetWorkloadRequest) (*Workload, error)
	// Lists Assured Workloads under a CRM Node.
	ListWorkloads(context.Context, *ListWorkloadsRequest) (*ListWorkloadsResponse, error)
	// Lists the Violations in the AssuredWorkload Environment.
	// Callers may also choose to read across multiple Workloads as per
	// [AIP-159](https://google.aip.dev/159) by using '-' (the hyphen or dash
	// character) as a wildcard character instead of workload-id in the parent.
	// Format `organizations/{org_id}/locations/{location}/workloads/-`
	ListViolations(context.Context, *ListViolationsRequest) (*ListViolationsResponse, error)
	// Retrieves Assured Workload Violation based on ID.
	GetViolation(context.Context, *GetViolationRequest) (*Violation, error)
	// Acknowledges an existing violation. By acknowledging a violation, users
	// acknowledge the existence of a compliance violation in their workload and
	// decide to ignore it due to a valid business justification. Acknowledgement
	// is a permanent operation and it cannot be reverted.
	AcknowledgeViolation(context.Context, *AcknowledgeViolationRequest) (*AcknowledgeViolationResponse, error)
}

AssuredWorkloadsServiceServer is the server API for AssuredWorkloadsService service.

type CreateWorkloadOperationMetadata

type CreateWorkloadOperationMetadata struct {

	// Optional. Time when the operation was created.
	CreateTime *timestamppb.Timestamp `protobuf:"bytes,1,opt,name=create_time,json=createTime,proto3" json:"create_time,omitempty"`
	// Optional. The display name of the workload.
	DisplayName string `protobuf:"bytes,2,opt,name=display_name,json=displayName,proto3" json:"display_name,omitempty"`
	// Optional. The parent of the workload.
	Parent string `protobuf:"bytes,3,opt,name=parent,proto3" json:"parent,omitempty"`
	// Optional. Compliance controls that should be applied to the resources managed by
	// the workload.
	ComplianceRegime Workload_ComplianceRegime `` /* 174-byte string literal not displayed */
	// contains filtered or unexported fields
}

Operation metadata to give request details of CreateWorkload.

func (*CreateWorkloadOperationMetadata) Descriptor deprecated

func (*CreateWorkloadOperationMetadata) Descriptor() ([]byte, []int)

Deprecated: Use CreateWorkloadOperationMetadata.ProtoReflect.Descriptor instead.

func (*CreateWorkloadOperationMetadata) GetComplianceRegime

func (*CreateWorkloadOperationMetadata) GetCreateTime

func (*CreateWorkloadOperationMetadata) GetDisplayName

func (x *CreateWorkloadOperationMetadata) GetDisplayName() string

func (*CreateWorkloadOperationMetadata) GetParent

func (x *CreateWorkloadOperationMetadata) GetParent() string

func (*CreateWorkloadOperationMetadata) ProtoMessage

func (*CreateWorkloadOperationMetadata) ProtoMessage()

func (*CreateWorkloadOperationMetadata) ProtoReflect

func (*CreateWorkloadOperationMetadata) Reset

func (*CreateWorkloadOperationMetadata) String

type CreateWorkloadRequest

type CreateWorkloadRequest struct {

	// Required. The resource name of the new Workload's parent.
	// Must be of the form `organizations/{org_id}/locations/{location_id}`.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Required. Assured Workload to create
	Workload *Workload `protobuf:"bytes,2,opt,name=workload,proto3" json:"workload,omitempty"`
	// Optional. A identifier associated with the workload and underlying projects which
	// allows for the break down of billing costs for a workload. The value
	// provided for the identifier will add a label to the workload and contained
	// projects with the identifier as the value.
	ExternalId string `protobuf:"bytes,3,opt,name=external_id,json=externalId,proto3" json:"external_id,omitempty"`
	// contains filtered or unexported fields
}

Request for creating a workload.

func (*CreateWorkloadRequest) Descriptor deprecated

func (*CreateWorkloadRequest) Descriptor() ([]byte, []int)

Deprecated: Use CreateWorkloadRequest.ProtoReflect.Descriptor instead.

func (*CreateWorkloadRequest) GetExternalId

func (x *CreateWorkloadRequest) GetExternalId() string

func (*CreateWorkloadRequest) GetParent

func (x *CreateWorkloadRequest) GetParent() string

func (*CreateWorkloadRequest) GetWorkload

func (x *CreateWorkloadRequest) GetWorkload() *Workload

func (*CreateWorkloadRequest) ProtoMessage

func (*CreateWorkloadRequest) ProtoMessage()

func (*CreateWorkloadRequest) ProtoReflect

func (x *CreateWorkloadRequest) ProtoReflect() protoreflect.Message

func (*CreateWorkloadRequest) Reset

func (x *CreateWorkloadRequest) Reset()

func (*CreateWorkloadRequest) String

func (x *CreateWorkloadRequest) String() string

type DeleteWorkloadRequest

type DeleteWorkloadRequest struct {

	// Required. The `name` field is used to identify the workload.
	// Format:
	// organizations/{org_id}/locations/{location_id}/workloads/{workload_id}
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Optional. The etag of the workload.
	// If this is provided, it must match the server's etag.
	Etag string `protobuf:"bytes,2,opt,name=etag,proto3" json:"etag,omitempty"`
	// contains filtered or unexported fields
}

Request for deleting a Workload.

func (*DeleteWorkloadRequest) Descriptor deprecated

func (*DeleteWorkloadRequest) Descriptor() ([]byte, []int)

Deprecated: Use DeleteWorkloadRequest.ProtoReflect.Descriptor instead.

func (*DeleteWorkloadRequest) GetEtag

func (x *DeleteWorkloadRequest) GetEtag() string

func (*DeleteWorkloadRequest) GetName

func (x *DeleteWorkloadRequest) GetName() string

func (*DeleteWorkloadRequest) ProtoMessage

func (*DeleteWorkloadRequest) ProtoMessage()

func (*DeleteWorkloadRequest) ProtoReflect

func (x *DeleteWorkloadRequest) ProtoReflect() protoreflect.Message

func (*DeleteWorkloadRequest) Reset

func (x *DeleteWorkloadRequest) Reset()

func (*DeleteWorkloadRequest) String

func (x *DeleteWorkloadRequest) String() string

type GetViolationRequest

type GetViolationRequest struct {

	// Required. The resource name of the Violation to fetch (ie. Violation.name).
	// Format:
	// organizations/{organization}/locations/{location}/workloads/{workload}/violations/{violation}
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

Request for fetching a Workload Violation.

func (*GetViolationRequest) Descriptor deprecated

func (*GetViolationRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetViolationRequest.ProtoReflect.Descriptor instead.

func (*GetViolationRequest) GetName

func (x *GetViolationRequest) GetName() string

func (*GetViolationRequest) ProtoMessage

func (*GetViolationRequest) ProtoMessage()

func (*GetViolationRequest) ProtoReflect

func (x *GetViolationRequest) ProtoReflect() protoreflect.Message

func (*GetViolationRequest) Reset

func (x *GetViolationRequest) Reset()

func (*GetViolationRequest) String

func (x *GetViolationRequest) String() string

type GetWorkloadRequest

type GetWorkloadRequest struct {

	// Required. The resource name of the Workload to fetch. This is the workload's
	// relative path in the API, formatted as
	// "organizations/{organization_id}/locations/{location_id}/workloads/{workload_id}".
	// For example,
	// "organizations/123/locations/us-east1/workloads/assured-workload-1".
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

Request for fetching a workload.

func (*GetWorkloadRequest) Descriptor deprecated

func (*GetWorkloadRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetWorkloadRequest.ProtoReflect.Descriptor instead.

func (*GetWorkloadRequest) GetName

func (x *GetWorkloadRequest) GetName() string

func (*GetWorkloadRequest) ProtoMessage

func (*GetWorkloadRequest) ProtoMessage()

func (*GetWorkloadRequest) ProtoReflect

func (x *GetWorkloadRequest) ProtoReflect() protoreflect.Message

func (*GetWorkloadRequest) Reset

func (x *GetWorkloadRequest) Reset()

func (*GetWorkloadRequest) String

func (x *GetWorkloadRequest) String() string

type ListViolationsRequest

type ListViolationsRequest struct {

	// Required. The Workload name.
	// Format `organizations/{org_id}/locations/{location}/workloads/{workload}`.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Optional. Specifies the time window for retrieving active Violations.
	// When specified, retrieves Violations that were active between start_time
	// and end_time.
	Interval *TimeWindow `protobuf:"bytes,2,opt,name=interval,proto3" json:"interval,omitempty"`
	// Optional. Page size.
	PageSize int32 `protobuf:"varint,3,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// Optional. Page token returned from previous request.
	PageToken string `protobuf:"bytes,4,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// Optional. A custom filter for filtering by the Violations properties.
	Filter string `protobuf:"bytes,5,opt,name=filter,proto3" json:"filter,omitempty"`
	// contains filtered or unexported fields
}

Request for fetching violations in an organization.

func (*ListViolationsRequest) Descriptor deprecated

func (*ListViolationsRequest) Descriptor() ([]byte, []int)

Deprecated: Use ListViolationsRequest.ProtoReflect.Descriptor instead.

func (*ListViolationsRequest) GetFilter

func (x *ListViolationsRequest) GetFilter() string

func (*ListViolationsRequest) GetInterval

func (x *ListViolationsRequest) GetInterval() *TimeWindow

func (*ListViolationsRequest) GetPageSize

func (x *ListViolationsRequest) GetPageSize() int32

func (*ListViolationsRequest) GetPageToken

func (x *ListViolationsRequest) GetPageToken() string

func (*ListViolationsRequest) GetParent

func (x *ListViolationsRequest) GetParent() string

func (*ListViolationsRequest) ProtoMessage

func (*ListViolationsRequest) ProtoMessage()

func (*ListViolationsRequest) ProtoReflect

func (x *ListViolationsRequest) ProtoReflect() protoreflect.Message

func (*ListViolationsRequest) Reset

func (x *ListViolationsRequest) Reset()

func (*ListViolationsRequest) String

func (x *ListViolationsRequest) String() string

type ListViolationsResponse

type ListViolationsResponse struct {

	// List of Violations under a Workload.
	Violations []*Violation `protobuf:"bytes,1,rep,name=violations,proto3" json:"violations,omitempty"`
	// The next page token. Returns empty if reached the last page.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

Response of ListViolations endpoint.

func (*ListViolationsResponse) Descriptor deprecated

func (*ListViolationsResponse) Descriptor() ([]byte, []int)

Deprecated: Use ListViolationsResponse.ProtoReflect.Descriptor instead.

func (*ListViolationsResponse) GetNextPageToken

func (x *ListViolationsResponse) GetNextPageToken() string

func (*ListViolationsResponse) GetViolations

func (x *ListViolationsResponse) GetViolations() []*Violation

func (*ListViolationsResponse) ProtoMessage

func (*ListViolationsResponse) ProtoMessage()

func (*ListViolationsResponse) ProtoReflect

func (x *ListViolationsResponse) ProtoReflect() protoreflect.Message

func (*ListViolationsResponse) Reset

func (x *ListViolationsResponse) Reset()

func (*ListViolationsResponse) String

func (x *ListViolationsResponse) String() string

type ListWorkloadsRequest

type ListWorkloadsRequest struct {

	// Required. Parent Resource to list workloads from.
	// Must be of the form `organizations/{org_id}/locations/{location}`.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Page size.
	PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// Page token returned from previous request. Page token contains context from
	// previous request. Page token needs to be passed in the second and following
	// requests.
	PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// A custom filter for filtering by properties of a workload. At this time,
	// only filtering by labels is supported.
	Filter string `protobuf:"bytes,4,opt,name=filter,proto3" json:"filter,omitempty"`
	// contains filtered or unexported fields
}

Request for fetching workloads in an organization.

func (*ListWorkloadsRequest) Descriptor deprecated

func (*ListWorkloadsRequest) Descriptor() ([]byte, []int)

Deprecated: Use ListWorkloadsRequest.ProtoReflect.Descriptor instead.

func (*ListWorkloadsRequest) GetFilter

func (x *ListWorkloadsRequest) GetFilter() string

func (*ListWorkloadsRequest) GetPageSize

func (x *ListWorkloadsRequest) GetPageSize() int32

func (*ListWorkloadsRequest) GetPageToken

func (x *ListWorkloadsRequest) GetPageToken() string

func (*ListWorkloadsRequest) GetParent

func (x *ListWorkloadsRequest) GetParent() string

func (*ListWorkloadsRequest) ProtoMessage

func (*ListWorkloadsRequest) ProtoMessage()

func (*ListWorkloadsRequest) ProtoReflect

func (x *ListWorkloadsRequest) ProtoReflect() protoreflect.Message

func (*ListWorkloadsRequest) Reset

func (x *ListWorkloadsRequest) Reset()

func (*ListWorkloadsRequest) String

func (x *ListWorkloadsRequest) String() string

type ListWorkloadsResponse

type ListWorkloadsResponse struct {

	// List of Workloads under a given parent.
	Workloads []*Workload `protobuf:"bytes,1,rep,name=workloads,proto3" json:"workloads,omitempty"`
	// The next page token. Return empty if reached the last page.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

Response of ListWorkloads endpoint.

func (*ListWorkloadsResponse) Descriptor deprecated

func (*ListWorkloadsResponse) Descriptor() ([]byte, []int)

Deprecated: Use ListWorkloadsResponse.ProtoReflect.Descriptor instead.

func (*ListWorkloadsResponse) GetNextPageToken

func (x *ListWorkloadsResponse) GetNextPageToken() string

func (*ListWorkloadsResponse) GetWorkloads

func (x *ListWorkloadsResponse) GetWorkloads() []*Workload

func (*ListWorkloadsResponse) ProtoMessage

func (*ListWorkloadsResponse) ProtoMessage()

func (*ListWorkloadsResponse) ProtoReflect

func (x *ListWorkloadsResponse) ProtoReflect() protoreflect.Message

func (*ListWorkloadsResponse) Reset

func (x *ListWorkloadsResponse) Reset()

func (*ListWorkloadsResponse) String

func (x *ListWorkloadsResponse) String() string

type RestrictAllowedResourcesRequest

type RestrictAllowedResourcesRequest struct {

	// Required. The resource name of the Workload. This is the workloads's
	// relative path in the API, formatted as
	// "organizations/{organization_id}/locations/{location_id}/workloads/{workload_id}".
	// For example,
	// "organizations/123/locations/us-east1/workloads/assured-workload-1".
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Required. The type of restriction for using gcp products in the Workload environment.
	RestrictionType RestrictAllowedResourcesRequest_RestrictionType `` /* 193-byte string literal not displayed */
	// contains filtered or unexported fields
}

Request for restricting list of available resources in Workload environment.

func (*RestrictAllowedResourcesRequest) Descriptor deprecated

func (*RestrictAllowedResourcesRequest) Descriptor() ([]byte, []int)

Deprecated: Use RestrictAllowedResourcesRequest.ProtoReflect.Descriptor instead.

func (*RestrictAllowedResourcesRequest) GetName

func (*RestrictAllowedResourcesRequest) GetRestrictionType

func (*RestrictAllowedResourcesRequest) ProtoMessage

func (*RestrictAllowedResourcesRequest) ProtoMessage()

func (*RestrictAllowedResourcesRequest) ProtoReflect

func (*RestrictAllowedResourcesRequest) Reset

func (*RestrictAllowedResourcesRequest) String

type RestrictAllowedResourcesRequest_RestrictionType

type RestrictAllowedResourcesRequest_RestrictionType int32

The type of restriction.

const (
	// Unknown restriction type.
	RestrictAllowedResourcesRequest_RESTRICTION_TYPE_UNSPECIFIED RestrictAllowedResourcesRequest_RestrictionType = 0
	// Allow the use all of all gcp products, irrespective of the compliance
	// posture. This effectively removes gcp.restrictServiceUsage OrgPolicy
	// on the AssuredWorkloads Folder.
	RestrictAllowedResourcesRequest_ALLOW_ALL_GCP_RESOURCES RestrictAllowedResourcesRequest_RestrictionType = 1
	// Based on Workload's compliance regime, allowed list changes.
	// See - https://cloud.google.com/assured-workloads/docs/supported-products
	// for the list of supported resources.
	RestrictAllowedResourcesRequest_ALLOW_COMPLIANT_RESOURCES RestrictAllowedResourcesRequest_RestrictionType = 2
)

func (RestrictAllowedResourcesRequest_RestrictionType) Descriptor

func (RestrictAllowedResourcesRequest_RestrictionType) Enum

func (RestrictAllowedResourcesRequest_RestrictionType) EnumDescriptor deprecated

Deprecated: Use RestrictAllowedResourcesRequest_RestrictionType.Descriptor instead.

func (RestrictAllowedResourcesRequest_RestrictionType) Number

func (RestrictAllowedResourcesRequest_RestrictionType) String

func (RestrictAllowedResourcesRequest_RestrictionType) Type

type RestrictAllowedResourcesResponse

type RestrictAllowedResourcesResponse struct {
	// contains filtered or unexported fields
}

Response for restricting the list of allowed resources.

func (*RestrictAllowedResourcesResponse) Descriptor deprecated

func (*RestrictAllowedResourcesResponse) Descriptor() ([]byte, []int)

Deprecated: Use RestrictAllowedResourcesResponse.ProtoReflect.Descriptor instead.

func (*RestrictAllowedResourcesResponse) ProtoMessage

func (*RestrictAllowedResourcesResponse) ProtoMessage()

func (*RestrictAllowedResourcesResponse) ProtoReflect

func (*RestrictAllowedResourcesResponse) Reset

func (*RestrictAllowedResourcesResponse) String

type TimeWindow

type TimeWindow struct {

	// The start of the time window.
	StartTime *timestamppb.Timestamp `protobuf:"bytes,1,opt,name=start_time,json=startTime,proto3" json:"start_time,omitempty"`
	// The end of the time window.
	EndTime *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=end_time,json=endTime,proto3" json:"end_time,omitempty"`
	// contains filtered or unexported fields
}

Interval defining a time window.

func (*TimeWindow) Descriptor deprecated

func (*TimeWindow) Descriptor() ([]byte, []int)

Deprecated: Use TimeWindow.ProtoReflect.Descriptor instead.

func (*TimeWindow) GetEndTime

func (x *TimeWindow) GetEndTime() *timestamppb.Timestamp

func (*TimeWindow) GetStartTime

func (x *TimeWindow) GetStartTime() *timestamppb.Timestamp

func (*TimeWindow) ProtoMessage

func (*TimeWindow) ProtoMessage()

func (*TimeWindow) ProtoReflect

func (x *TimeWindow) ProtoReflect() protoreflect.Message

func (*TimeWindow) Reset

func (x *TimeWindow) Reset()

func (*TimeWindow) String

func (x *TimeWindow) String() string

type UnimplementedAssuredWorkloadsServiceServer

type UnimplementedAssuredWorkloadsServiceServer struct {
}

UnimplementedAssuredWorkloadsServiceServer can be embedded to have forward compatible implementations.

func (*UnimplementedAssuredWorkloadsServiceServer) AcknowledgeViolation

func (*UnimplementedAssuredWorkloadsServiceServer) CreateWorkload

func (*UnimplementedAssuredWorkloadsServiceServer) DeleteWorkload

func (*UnimplementedAssuredWorkloadsServiceServer) GetViolation

func (*UnimplementedAssuredWorkloadsServiceServer) GetWorkload

func (*UnimplementedAssuredWorkloadsServiceServer) ListViolations

func (*UnimplementedAssuredWorkloadsServiceServer) ListWorkloads

func (*UnimplementedAssuredWorkloadsServiceServer) RestrictAllowedResources

func (*UnimplementedAssuredWorkloadsServiceServer) UpdateWorkload

type UpdateWorkloadRequest

type UpdateWorkloadRequest struct {

	// Required. The workload to update.
	// The workload's `name` field is used to identify the workload to be updated.
	// Format:
	// organizations/{org_id}/locations/{location_id}/workloads/{workload_id}
	Workload *Workload `protobuf:"bytes,1,opt,name=workload,proto3" json:"workload,omitempty"`
	// Required. The list of fields to be updated.
	UpdateMask *fieldmaskpb.FieldMask `protobuf:"bytes,2,opt,name=update_mask,json=updateMask,proto3" json:"update_mask,omitempty"`
	// contains filtered or unexported fields
}

Request for Updating a workload.

func (*UpdateWorkloadRequest) Descriptor deprecated

func (*UpdateWorkloadRequest) Descriptor() ([]byte, []int)

Deprecated: Use UpdateWorkloadRequest.ProtoReflect.Descriptor instead.

func (*UpdateWorkloadRequest) GetUpdateMask

func (x *UpdateWorkloadRequest) GetUpdateMask() *fieldmaskpb.FieldMask

func (*UpdateWorkloadRequest) GetWorkload

func (x *UpdateWorkloadRequest) GetWorkload() *Workload

func (*UpdateWorkloadRequest) ProtoMessage

func (*UpdateWorkloadRequest) ProtoMessage()

func (*UpdateWorkloadRequest) ProtoReflect

func (x *UpdateWorkloadRequest) ProtoReflect() protoreflect.Message

func (*UpdateWorkloadRequest) Reset

func (x *UpdateWorkloadRequest) Reset()

func (*UpdateWorkloadRequest) String

func (x *UpdateWorkloadRequest) String() string

type Violation

type Violation struct {

	// Output only. Immutable. Name of the Violation.
	// Format:
	// organizations/{organization}/locations/{location}/workloads/{workload_id}/violations/{violations_id}
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Output only. Description for the Violation.
	// e.g. OrgPolicy gcp.resourceLocations has non compliant value.
	Description string `protobuf:"bytes,2,opt,name=description,proto3" json:"description,omitempty"`
	// Output only. Time of the event which triggered the Violation.
	BeginTime *timestamppb.Timestamp `protobuf:"bytes,3,opt,name=begin_time,json=beginTime,proto3" json:"begin_time,omitempty"`
	// Output only. The last time when the Violation record was updated.
	UpdateTime *timestamppb.Timestamp `protobuf:"bytes,4,opt,name=update_time,json=updateTime,proto3" json:"update_time,omitempty"`
	// Output only. Time of the event which fixed the Violation.
	// If the violation is ACTIVE this will be empty.
	ResolveTime *timestamppb.Timestamp `protobuf:"bytes,5,opt,name=resolve_time,json=resolveTime,proto3" json:"resolve_time,omitempty"`
	// Output only. Category under which this violation is mapped.
	// e.g. Location, Service Usage, Access, Encryption, etc.
	Category string `protobuf:"bytes,6,opt,name=category,proto3" json:"category,omitempty"`
	// Output only. State of the violation
	State Violation_State `protobuf:"varint,7,opt,name=state,proto3,enum=google.cloud.assuredworkloads.v1.Violation_State" json:"state,omitempty"`
	// Output only. Immutable. The org-policy-constraint that was incorrectly changed, which resulted in
	// this violation.
	OrgPolicyConstraint string `protobuf:"bytes,8,opt,name=org_policy_constraint,json=orgPolicyConstraint,proto3" json:"org_policy_constraint,omitempty"`
	// Output only. Immutable. Audit Log Link for violated resource
	// Format:
	// https://console.cloud.google.com/logs/query;query={logName}{protoPayload.resourceName}{timeRange}{folder}
	AuditLogLink string `protobuf:"bytes,11,opt,name=audit_log_link,json=auditLogLink,proto3" json:"audit_log_link,omitempty"`
	// Output only. Immutable. Name of the OrgPolicy which was modified with non-compliant change and
	// resulted this violation.
	//
	//	Format:
	//	projects/{project_number}/policies/{constraint_name}
	//	folders/{folder_id}/policies/{constraint_name}
	//	organizations/{organization_id}/policies/{constraint_name}
	NonCompliantOrgPolicy string `` /* 129-byte string literal not displayed */
	// Output only. Compliance violation remediation
	Remediation *Violation_Remediation `protobuf:"bytes,13,opt,name=remediation,proto3" json:"remediation,omitempty"`
	// Output only. A boolean that indicates if the violation is acknowledged
	Acknowledged bool `protobuf:"varint,14,opt,name=acknowledged,proto3" json:"acknowledged,omitempty"`
	// Optional. Timestamp when this violation was acknowledged last.
	// This will be absent when acknowledged field is marked as false.
	AcknowledgementTime *timestamppb.Timestamp `protobuf:"bytes,15,opt,name=acknowledgement_time,json=acknowledgementTime,proto3,oneof" json:"acknowledgement_time,omitempty"`
	// Output only. Immutable. Audit Log link to find business justification provided for violation
	// exception. Format:
	// https://console.cloud.google.com/logs/query;query={logName}{protoPayload.resourceName}{protoPayload.methodName}{timeRange}{organization}
	ExceptionAuditLogLink string `` /* 129-byte string literal not displayed */
	// contains filtered or unexported fields
}

Workload monitoring Violation.

func (*Violation) Descriptor deprecated

func (*Violation) Descriptor() ([]byte, []int)

Deprecated: Use Violation.ProtoReflect.Descriptor instead.

func (*Violation) GetAcknowledged

func (x *Violation) GetAcknowledged() bool

func (*Violation) GetAcknowledgementTime

func (x *Violation) GetAcknowledgementTime() *timestamppb.Timestamp
func (x *Violation) GetAuditLogLink() string

func (*Violation) GetBeginTime

func (x *Violation) GetBeginTime() *timestamppb.Timestamp

func (*Violation) GetCategory

func (x *Violation) GetCategory() string

func (*Violation) GetDescription

func (x *Violation) GetDescription() string
func (x *Violation) GetExceptionAuditLogLink() string

func (*Violation) GetName

func (x *Violation) GetName() string

func (*Violation) GetNonCompliantOrgPolicy

func (x *Violation) GetNonCompliantOrgPolicy() string

func (*Violation) GetOrgPolicyConstraint

func (x *Violation) GetOrgPolicyConstraint() string

func (*Violation) GetRemediation

func (x *Violation) GetRemediation() *Violation_Remediation

func (*Violation) GetResolveTime

func (x *Violation) GetResolveTime() *timestamppb.Timestamp

func (*Violation) GetState

func (x *Violation) GetState() Violation_State

func (*Violation) GetUpdateTime

func (x *Violation) GetUpdateTime() *timestamppb.Timestamp

func (*Violation) ProtoMessage

func (*Violation) ProtoMessage()

func (*Violation) ProtoReflect

func (x *Violation) ProtoReflect() protoreflect.Message

func (*Violation) Reset

func (x *Violation) Reset()

func (*Violation) String

func (x *Violation) String() string

type Violation_Remediation

type Violation_Remediation struct {

	// Required. Remediation instructions to resolve violations
	Instructions *Violation_Remediation_Instructions `protobuf:"bytes,1,opt,name=instructions,proto3" json:"instructions,omitempty"`
	// Values that can resolve the violation
	// For example: for list org policy violations, this will either be the list
	// of allowed or denied values
	CompliantValues []string `protobuf:"bytes,2,rep,name=compliant_values,json=compliantValues,proto3" json:"compliant_values,omitempty"`
	// Output only. Reemediation type based on the type of org policy values violated
	RemediationType Violation_Remediation_RemediationType `` /* 183-byte string literal not displayed */
	// contains filtered or unexported fields
}

Represents remediation guidance to resolve compliance violation for AssuredWorkload

func (*Violation_Remediation) Descriptor deprecated

func (*Violation_Remediation) Descriptor() ([]byte, []int)

Deprecated: Use Violation_Remediation.ProtoReflect.Descriptor instead.

func (*Violation_Remediation) GetCompliantValues

func (x *Violation_Remediation) GetCompliantValues() []string

func (*Violation_Remediation) GetInstructions

func (*Violation_Remediation) GetRemediationType

func (*Violation_Remediation) ProtoMessage

func (*Violation_Remediation) ProtoMessage()

func (*Violation_Remediation) ProtoReflect

func (x *Violation_Remediation) ProtoReflect() protoreflect.Message

func (*Violation_Remediation) Reset

func (x *Violation_Remediation) Reset()

func (*Violation_Remediation) String

func (x *Violation_Remediation) String() string

type Violation_Remediation_Instructions

type Violation_Remediation_Instructions struct {

	// Remediation instructions to resolve violation via gcloud cli
	GcloudInstructions *Violation_Remediation_Instructions_Gcloud `protobuf:"bytes,1,opt,name=gcloud_instructions,json=gcloudInstructions,proto3" json:"gcloud_instructions,omitempty"`
	// Remediation instructions to resolve violation via cloud console
	ConsoleInstructions *Violation_Remediation_Instructions_Console `protobuf:"bytes,2,opt,name=console_instructions,json=consoleInstructions,proto3" json:"console_instructions,omitempty"`
	// contains filtered or unexported fields
}

Instructions to remediate violation

func (*Violation_Remediation_Instructions) Descriptor deprecated

func (*Violation_Remediation_Instructions) Descriptor() ([]byte, []int)

Deprecated: Use Violation_Remediation_Instructions.ProtoReflect.Descriptor instead.

func (*Violation_Remediation_Instructions) GetConsoleInstructions

func (*Violation_Remediation_Instructions) GetGcloudInstructions

func (*Violation_Remediation_Instructions) ProtoMessage

func (*Violation_Remediation_Instructions) ProtoMessage()

func (*Violation_Remediation_Instructions) ProtoReflect

func (*Violation_Remediation_Instructions) Reset

func (*Violation_Remediation_Instructions) String

type Violation_Remediation_Instructions_Console

type Violation_Remediation_Instructions_Console struct {

	// Link to console page where violations can be resolved
	ConsoleUris []string `protobuf:"bytes,1,rep,name=console_uris,json=consoleUris,proto3" json:"console_uris,omitempty"`
	// Steps to resolve violation via cloud console
	Steps []string `protobuf:"bytes,2,rep,name=steps,proto3" json:"steps,omitempty"`
	// Additional urls for more information about steps
	AdditionalLinks []string `protobuf:"bytes,3,rep,name=additional_links,json=additionalLinks,proto3" json:"additional_links,omitempty"`
	// contains filtered or unexported fields
}

Remediation instructions to resolve violation via cloud console

func (*Violation_Remediation_Instructions_Console) Descriptor deprecated

Deprecated: Use Violation_Remediation_Instructions_Console.ProtoReflect.Descriptor instead.

func (x *Violation_Remediation_Instructions_Console) GetAdditionalLinks() []string

func (*Violation_Remediation_Instructions_Console) GetConsoleUris

func (x *Violation_Remediation_Instructions_Console) GetConsoleUris() []string

func (*Violation_Remediation_Instructions_Console) GetSteps

func (*Violation_Remediation_Instructions_Console) ProtoMessage

func (*Violation_Remediation_Instructions_Console) ProtoReflect

func (*Violation_Remediation_Instructions_Console) Reset

func (*Violation_Remediation_Instructions_Console) String

type Violation_Remediation_Instructions_Gcloud

type Violation_Remediation_Instructions_Gcloud struct {

	// Gcloud command to resolve violation
	GcloudCommands []string `protobuf:"bytes,1,rep,name=gcloud_commands,json=gcloudCommands,proto3" json:"gcloud_commands,omitempty"`
	// Steps to resolve violation via gcloud cli
	Steps []string `protobuf:"bytes,2,rep,name=steps,proto3" json:"steps,omitempty"`
	// Additional urls for more information about steps
	AdditionalLinks []string `protobuf:"bytes,3,rep,name=additional_links,json=additionalLinks,proto3" json:"additional_links,omitempty"`
	// contains filtered or unexported fields
}

Remediation instructions to resolve violation via gcloud cli

func (*Violation_Remediation_Instructions_Gcloud) Descriptor deprecated

func (*Violation_Remediation_Instructions_Gcloud) Descriptor() ([]byte, []int)

Deprecated: Use Violation_Remediation_Instructions_Gcloud.ProtoReflect.Descriptor instead.

func (x *Violation_Remediation_Instructions_Gcloud) GetAdditionalLinks() []string

func (*Violation_Remediation_Instructions_Gcloud) GetGcloudCommands

func (x *Violation_Remediation_Instructions_Gcloud) GetGcloudCommands() []string

func (*Violation_Remediation_Instructions_Gcloud) GetSteps

func (*Violation_Remediation_Instructions_Gcloud) ProtoMessage

func (*Violation_Remediation_Instructions_Gcloud) ProtoReflect

func (*Violation_Remediation_Instructions_Gcloud) Reset

func (*Violation_Remediation_Instructions_Gcloud) String

type Violation_Remediation_RemediationType

type Violation_Remediation_RemediationType int32

Classifying remediation into various types based on the kind of violation. For example, violations caused due to changes in boolean org policy requires different remediation instructions compared to violation caused due to changes in allowed values of list org policy.

const (
	// Unspecified remediation type
	Violation_Remediation_REMEDIATION_TYPE_UNSPECIFIED Violation_Remediation_RemediationType = 0
	// Remediation type for boolean org policy
	Violation_Remediation_REMEDIATION_BOOLEAN_ORG_POLICY_VIOLATION Violation_Remediation_RemediationType = 1
	// Remediation type for list org policy which have allowed values in the
	// monitoring rule
	Violation_Remediation_REMEDIATION_LIST_ALLOWED_VALUES_ORG_POLICY_VIOLATION Violation_Remediation_RemediationType = 2
	// Remediation type for list org policy which have denied values in the
	// monitoring rule
	Violation_Remediation_REMEDIATION_LIST_DENIED_VALUES_ORG_POLICY_VIOLATION Violation_Remediation_RemediationType = 3
	// Remediation type for gcp.restrictCmekCryptoKeyProjects
	Violation_Remediation_REMEDIATION_RESTRICT_CMEK_CRYPTO_KEY_PROJECTS_ORG_POLICY_VIOLATION Violation_Remediation_RemediationType = 4
)

func (Violation_Remediation_RemediationType) Descriptor

func (Violation_Remediation_RemediationType) Enum

func (Violation_Remediation_RemediationType) EnumDescriptor deprecated

func (Violation_Remediation_RemediationType) EnumDescriptor() ([]byte, []int)

Deprecated: Use Violation_Remediation_RemediationType.Descriptor instead.

func (Violation_Remediation_RemediationType) Number

func (Violation_Remediation_RemediationType) String

func (Violation_Remediation_RemediationType) Type

type Violation_State

type Violation_State int32

Violation State Values

const (
	// Unspecified state.
	Violation_STATE_UNSPECIFIED Violation_State = 0
	// Violation is resolved.
	Violation_RESOLVED Violation_State = 2
	// Violation is Unresolved
	Violation_UNRESOLVED Violation_State = 3
	// Violation is Exception
	Violation_EXCEPTION Violation_State = 4
)

func (Violation_State) Descriptor

func (Violation_State) Enum

func (x Violation_State) Enum() *Violation_State

func (Violation_State) EnumDescriptor deprecated

func (Violation_State) EnumDescriptor() ([]byte, []int)

Deprecated: Use Violation_State.Descriptor instead.

func (Violation_State) Number

func (Violation_State) String

func (x Violation_State) String() string

func (Violation_State) Type

type Workload

type Workload struct {

	// Optional. The resource name of the workload.
	// Format:
	// organizations/{organization}/locations/{location}/workloads/{workload}
	//
	// Read-only.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Required. The user-assigned display name of the Workload.
	// When present it must be between 4 to 30 characters.
	// Allowed characters are: lowercase and uppercase letters, numbers,
	// hyphen, and spaces.
	//
	// Example: My Workload
	DisplayName string `protobuf:"bytes,2,opt,name=display_name,json=displayName,proto3" json:"display_name,omitempty"`
	// Output only. The resources associated with this workload.
	// These resources will be created when creating the workload.
	// If any of the projects already exist, the workload creation will fail.
	// Always read only.
	Resources []*Workload_ResourceInfo `protobuf:"bytes,3,rep,name=resources,proto3" json:"resources,omitempty"`
	// Required. Immutable. Compliance Regime associated with this workload.
	ComplianceRegime Workload_ComplianceRegime `` /* 174-byte string literal not displayed */
	// Output only. Immutable. The Workload creation timestamp.
	CreateTime *timestamppb.Timestamp `protobuf:"bytes,5,opt,name=create_time,json=createTime,proto3" json:"create_time,omitempty"`
	// Optional. The billing account used for the resources which are
	// direct children of workload. This billing account is initially associated
	// with the resources created as part of Workload creation.
	// After the initial creation of these resources, the customer can change
	// the assigned billing account.
	// The resource name has the form
	// `billingAccounts/{billing_account_id}`. For example,
	// `billingAccounts/012345-567890-ABCDEF`.
	BillingAccount string `protobuf:"bytes,6,opt,name=billing_account,json=billingAccount,proto3" json:"billing_account,omitempty"`
	// Optional. ETag of the workload, it is calculated on the basis
	// of the Workload contents. It will be used in Update & Delete operations.
	Etag string `protobuf:"bytes,9,opt,name=etag,proto3" json:"etag,omitempty"`
	// Optional. Labels applied to the workload.
	Labels map[string]string `` /* 154-byte string literal not displayed */
	// Input only. The parent resource for the resources managed by this Assured Workload. May
	// be either empty or a folder resource which is a child of the
	// Workload parent. If not specified all resources are created under the
	// parent organization.
	// Format:
	// folders/{folder_id}
	ProvisionedResourcesParent string `` /* 142-byte string literal not displayed */
	// Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS
	// CMEK key is provisioned.
	// This field is deprecated as of Feb 28, 2022.
	// In order to create a Keyring, callers should specify,
	// ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.
	//
	// Deprecated: Marked as deprecated in google/cloud/assuredworkloads/v1/assuredworkloads.proto.
	KmsSettings *Workload_KMSSettings `protobuf:"bytes,14,opt,name=kms_settings,json=kmsSettings,proto3" json:"kms_settings,omitempty"`
	// Input only. Resource properties that are used to customize workload resources.
	// These properties (such as custom project id) will be used to create
	// workload resources if possible. This field is optional.
	ResourceSettings []*Workload_ResourceSettings `protobuf:"bytes,15,rep,name=resource_settings,json=resourceSettings,proto3" json:"resource_settings,omitempty"`
	// Output only. Represents the KAJ enrollment state of the given workload.
	KajEnrollmentState Workload_KajEnrollmentState `` /* 185-byte string literal not displayed */
	// Optional. Indicates the sovereignty status of the given workload.
	// Currently meant to be used by Europe/Canada customers.
	EnableSovereignControls bool `` /* 134-byte string literal not displayed */
	// Output only. Represents the SAA enrollment response of the given workload.
	// SAA enrollment response is queried during GetWorkload call.
	// In failure cases, user friendly error message is shown in SAA details page.
	SaaEnrollmentResponse *Workload_SaaEnrollmentResponse `` /* 127-byte string literal not displayed */
	// Output only. Urls for services which are compliant for this Assured Workload, but which
	// are currently disallowed by the ResourceUsageRestriction org policy.
	// Invoke RestrictAllowedResources endpoint to allow your project developers
	// to use these services in their environment."
	CompliantButDisallowedServices []string `` /* 156-byte string literal not displayed */
	// Optional. Compliance Regime associated with this workload.
	Partner Workload_Partner `protobuf:"varint,25,opt,name=partner,proto3,enum=google.cloud.assuredworkloads.v1.Workload_Partner" json:"partner,omitempty"`
	// contains filtered or unexported fields
}

A Workload object for managing highly regulated workloads of cloud customers.

func (*Workload) Descriptor deprecated

func (*Workload) Descriptor() ([]byte, []int)

Deprecated: Use Workload.ProtoReflect.Descriptor instead.

func (*Workload) GetBillingAccount

func (x *Workload) GetBillingAccount() string

func (*Workload) GetComplianceRegime

func (x *Workload) GetComplianceRegime() Workload_ComplianceRegime

func (*Workload) GetCompliantButDisallowedServices

func (x *Workload) GetCompliantButDisallowedServices() []string

func (*Workload) GetCreateTime

func (x *Workload) GetCreateTime() *timestamppb.Timestamp

func (*Workload) GetDisplayName

func (x *Workload) GetDisplayName() string

func (*Workload) GetEnableSovereignControls

func (x *Workload) GetEnableSovereignControls() bool

func (*Workload) GetEtag

func (x *Workload) GetEtag() string

func (*Workload) GetKajEnrollmentState

func (x *Workload) GetKajEnrollmentState() Workload_KajEnrollmentState

func (*Workload) GetKmsSettings deprecated

func (x *Workload) GetKmsSettings() *Workload_KMSSettings

Deprecated: Marked as deprecated in google/cloud/assuredworkloads/v1/assuredworkloads.proto.

func (*Workload) GetLabels

func (x *Workload) GetLabels() map[string]string

func (*Workload) GetName

func (x *Workload) GetName() string

func (*Workload) GetPartner

func (x *Workload) GetPartner() Workload_Partner

func (*Workload) GetProvisionedResourcesParent

func (x *Workload) GetProvisionedResourcesParent() string

func (*Workload) GetResourceSettings

func (x *Workload) GetResourceSettings() []*Workload_ResourceSettings

func (*Workload) GetResources

func (x *Workload) GetResources() []*Workload_ResourceInfo

func (*Workload) GetSaaEnrollmentResponse

func (x *Workload) GetSaaEnrollmentResponse() *Workload_SaaEnrollmentResponse

func (*Workload) ProtoMessage

func (*Workload) ProtoMessage()

func (*Workload) ProtoReflect

func (x *Workload) ProtoReflect() protoreflect.Message

func (*Workload) Reset

func (x *Workload) Reset()

func (*Workload) String

func (x *Workload) String() string

type Workload_ComplianceRegime

type Workload_ComplianceRegime int32

Supported Compliance Regimes.

const (
	// Unknown compliance regime.
	Workload_COMPLIANCE_REGIME_UNSPECIFIED Workload_ComplianceRegime = 0
	// Information protection as per DoD IL4 requirements.
	Workload_IL4 Workload_ComplianceRegime = 1
	// Criminal Justice Information Services (CJIS) Security policies.
	Workload_CJIS Workload_ComplianceRegime = 2
	// FedRAMP High data protection controls
	Workload_FEDRAMP_HIGH Workload_ComplianceRegime = 3
	// FedRAMP Moderate data protection controls
	Workload_FEDRAMP_MODERATE Workload_ComplianceRegime = 4
	// Assured Workloads For US Regions data protection controls
	Workload_US_REGIONAL_ACCESS Workload_ComplianceRegime = 5
	// Health Insurance Portability and Accountability Act controls
	Workload_HIPAA Workload_ComplianceRegime = 6
	// Health Information Trust Alliance controls
	Workload_HITRUST Workload_ComplianceRegime = 7
	// Assured Workloads For EU Regions and Support controls
	Workload_EU_REGIONS_AND_SUPPORT Workload_ComplianceRegime = 8
	// Assured Workloads For Canada Regions and Support controls
	Workload_CA_REGIONS_AND_SUPPORT Workload_ComplianceRegime = 9
	// International Traffic in Arms Regulations
	Workload_ITAR Workload_ComplianceRegime = 10
	// Assured Workloads for Australia Regions and Support controls
	// Available for public preview consumption.
	// Don't create production workloads.
	Workload_AU_REGIONS_AND_US_SUPPORT Workload_ComplianceRegime = 11
	// Assured Workloads for Partners
	Workload_ASSURED_WORKLOADS_FOR_PARTNERS Workload_ComplianceRegime = 12
)

func (Workload_ComplianceRegime) Descriptor

func (Workload_ComplianceRegime) Enum

func (Workload_ComplianceRegime) EnumDescriptor deprecated

func (Workload_ComplianceRegime) EnumDescriptor() ([]byte, []int)

Deprecated: Use Workload_ComplianceRegime.Descriptor instead.

func (Workload_ComplianceRegime) Number

func (Workload_ComplianceRegime) String

func (x Workload_ComplianceRegime) String() string

func (Workload_ComplianceRegime) Type

type Workload_KMSSettings deprecated

type Workload_KMSSettings struct {

	// Required. Input only. Immutable. The time at which the Key Management Service will automatically create a
	// new version of the crypto key and mark it as the primary.
	NextRotationTime *timestamppb.Timestamp `protobuf:"bytes,1,opt,name=next_rotation_time,json=nextRotationTime,proto3" json:"next_rotation_time,omitempty"`
	// Required. Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key
	// Management Service automatically rotates a key. Must be at least 24 hours
	// and at most 876,000 hours.
	RotationPeriod *durationpb.Duration `protobuf:"bytes,2,opt,name=rotation_period,json=rotationPeriod,proto3" json:"rotation_period,omitempty"`
	// contains filtered or unexported fields
}

Settings specific to the Key Management Service. This message is deprecated. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

Deprecated: Marked as deprecated in google/cloud/assuredworkloads/v1/assuredworkloads.proto.

func (*Workload_KMSSettings) Descriptor deprecated

func (*Workload_KMSSettings) Descriptor() ([]byte, []int)

Deprecated: Use Workload_KMSSettings.ProtoReflect.Descriptor instead.

func (*Workload_KMSSettings) GetNextRotationTime

func (x *Workload_KMSSettings) GetNextRotationTime() *timestamppb.Timestamp

func (*Workload_KMSSettings) GetRotationPeriod

func (x *Workload_KMSSettings) GetRotationPeriod() *durationpb.Duration

func (*Workload_KMSSettings) ProtoMessage

func (*Workload_KMSSettings) ProtoMessage()

func (*Workload_KMSSettings) ProtoReflect

func (x *Workload_KMSSettings) ProtoReflect() protoreflect.Message

func (*Workload_KMSSettings) Reset

func (x *Workload_KMSSettings) Reset()

func (*Workload_KMSSettings) String

func (x *Workload_KMSSettings) String() string

type Workload_KajEnrollmentState

type Workload_KajEnrollmentState int32

Key Access Justifications(KAJ) Enrollment State.

const (
	// Default State for KAJ Enrollment.
	Workload_KAJ_ENROLLMENT_STATE_UNSPECIFIED Workload_KajEnrollmentState = 0
	// Pending State for KAJ Enrollment.
	Workload_KAJ_ENROLLMENT_STATE_PENDING Workload_KajEnrollmentState = 1
	// Complete State for KAJ Enrollment.
	Workload_KAJ_ENROLLMENT_STATE_COMPLETE Workload_KajEnrollmentState = 2
)

func (Workload_KajEnrollmentState) Descriptor

func (Workload_KajEnrollmentState) Enum

func (Workload_KajEnrollmentState) EnumDescriptor deprecated

func (Workload_KajEnrollmentState) EnumDescriptor() ([]byte, []int)

Deprecated: Use Workload_KajEnrollmentState.Descriptor instead.

func (Workload_KajEnrollmentState) Number

func (Workload_KajEnrollmentState) String

func (Workload_KajEnrollmentState) Type

type Workload_Partner

type Workload_Partner int32

Supported Assured Workloads Partners.

const (
	// Unknown partner regime/controls.
	Workload_PARTNER_UNSPECIFIED Workload_Partner = 0
	// S3NS regime/controls.
	Workload_LOCAL_CONTROLS_BY_S3NS Workload_Partner = 1
)

func (Workload_Partner) Descriptor

func (Workload_Partner) Enum

func (Workload_Partner) EnumDescriptor deprecated

func (Workload_Partner) EnumDescriptor() ([]byte, []int)

Deprecated: Use Workload_Partner.Descriptor instead.

func (Workload_Partner) Number

func (Workload_Partner) String

func (x Workload_Partner) String() string

func (Workload_Partner) Type

type Workload_ResourceInfo

type Workload_ResourceInfo struct {

	// Resource identifier.
	// For a project this represents project_number.
	ResourceId int64 `protobuf:"varint,1,opt,name=resource_id,json=resourceId,proto3" json:"resource_id,omitempty"`
	// Indicates the type of resource.
	ResourceType Workload_ResourceInfo_ResourceType `` /* 171-byte string literal not displayed */
	// contains filtered or unexported fields
}

Represent the resources that are children of this Workload.

func (*Workload_ResourceInfo) Descriptor deprecated

func (*Workload_ResourceInfo) Descriptor() ([]byte, []int)

Deprecated: Use Workload_ResourceInfo.ProtoReflect.Descriptor instead.

func (*Workload_ResourceInfo) GetResourceId

func (x *Workload_ResourceInfo) GetResourceId() int64

func (*Workload_ResourceInfo) GetResourceType

func (*Workload_ResourceInfo) ProtoMessage

func (*Workload_ResourceInfo) ProtoMessage()

func (*Workload_ResourceInfo) ProtoReflect

func (x *Workload_ResourceInfo) ProtoReflect() protoreflect.Message

func (*Workload_ResourceInfo) Reset

func (x *Workload_ResourceInfo) Reset()

func (*Workload_ResourceInfo) String

func (x *Workload_ResourceInfo) String() string

type Workload_ResourceInfo_ResourceType

type Workload_ResourceInfo_ResourceType int32

The type of resource.

const (
	// Unknown resource type.
	Workload_ResourceInfo_RESOURCE_TYPE_UNSPECIFIED Workload_ResourceInfo_ResourceType = 0
	// Consumer project.
	// AssuredWorkloads Projects are no longer supported. This field will be
	// ignored only in CreateWorkload requests. ListWorkloads and GetWorkload
	// will continue to provide projects information.
	// Use CONSUMER_FOLDER instead.
	//
	// Deprecated: Marked as deprecated in google/cloud/assuredworkloads/v1/assuredworkloads.proto.
	Workload_ResourceInfo_CONSUMER_PROJECT Workload_ResourceInfo_ResourceType = 1
	// Consumer Folder.
	Workload_ResourceInfo_CONSUMER_FOLDER Workload_ResourceInfo_ResourceType = 4
	// Consumer project containing encryption keys.
	Workload_ResourceInfo_ENCRYPTION_KEYS_PROJECT Workload_ResourceInfo_ResourceType = 2
	// Keyring resource that hosts encryption keys.
	Workload_ResourceInfo_KEYRING Workload_ResourceInfo_ResourceType = 3
)

func (Workload_ResourceInfo_ResourceType) Descriptor

func (Workload_ResourceInfo_ResourceType) Enum

func (Workload_ResourceInfo_ResourceType) EnumDescriptor deprecated

func (Workload_ResourceInfo_ResourceType) EnumDescriptor() ([]byte, []int)

Deprecated: Use Workload_ResourceInfo_ResourceType.Descriptor instead.

func (Workload_ResourceInfo_ResourceType) Number

func (Workload_ResourceInfo_ResourceType) String

func (Workload_ResourceInfo_ResourceType) Type

type Workload_ResourceSettings

type Workload_ResourceSettings struct {

	// Resource identifier.
	// For a project this represents project_id. If the project is already
	// taken, the workload creation will fail.
	// For KeyRing, this represents the keyring_id.
	// For a folder, don't set this value as folder_id is assigned by Google.
	ResourceId string `protobuf:"bytes,1,opt,name=resource_id,json=resourceId,proto3" json:"resource_id,omitempty"`
	// Indicates the type of resource. This field should be specified to
	// correspond the id to the right resource type (CONSUMER_FOLDER or
	// ENCRYPTION_KEYS_PROJECT)
	ResourceType Workload_ResourceInfo_ResourceType `` /* 171-byte string literal not displayed */
	// User-assigned resource display name.
	// If not empty it will be used to create a resource with the specified
	// name.
	DisplayName string `protobuf:"bytes,3,opt,name=display_name,json=displayName,proto3" json:"display_name,omitempty"`
	// contains filtered or unexported fields
}

Represent the custom settings for the resources to be created.

func (*Workload_ResourceSettings) Descriptor deprecated

func (*Workload_ResourceSettings) Descriptor() ([]byte, []int)

Deprecated: Use Workload_ResourceSettings.ProtoReflect.Descriptor instead.

func (*Workload_ResourceSettings) GetDisplayName

func (x *Workload_ResourceSettings) GetDisplayName() string

func (*Workload_ResourceSettings) GetResourceId

func (x *Workload_ResourceSettings) GetResourceId() string

func (*Workload_ResourceSettings) GetResourceType

func (*Workload_ResourceSettings) ProtoMessage

func (*Workload_ResourceSettings) ProtoMessage()

func (*Workload_ResourceSettings) ProtoReflect

func (*Workload_ResourceSettings) Reset

func (x *Workload_ResourceSettings) Reset()

func (*Workload_ResourceSettings) String

func (x *Workload_ResourceSettings) String() string

type Workload_SaaEnrollmentResponse

type Workload_SaaEnrollmentResponse struct {

	// Indicates SAA enrollment status of a given workload.
	SetupStatus *Workload_SaaEnrollmentResponse_SetupState `` /* 181-byte string literal not displayed */
	// Indicates SAA enrollment setup error if any.
	SetupErrors []Workload_SaaEnrollmentResponse_SetupError `` /* 182-byte string literal not displayed */
	// contains filtered or unexported fields
}

Signed Access Approvals (SAA) enrollment response.

func (*Workload_SaaEnrollmentResponse) Descriptor deprecated

func (*Workload_SaaEnrollmentResponse) Descriptor() ([]byte, []int)

Deprecated: Use Workload_SaaEnrollmentResponse.ProtoReflect.Descriptor instead.

func (*Workload_SaaEnrollmentResponse) GetSetupErrors

func (*Workload_SaaEnrollmentResponse) GetSetupStatus

func (*Workload_SaaEnrollmentResponse) ProtoMessage

func (*Workload_SaaEnrollmentResponse) ProtoMessage()

func (*Workload_SaaEnrollmentResponse) ProtoReflect

func (*Workload_SaaEnrollmentResponse) Reset

func (x *Workload_SaaEnrollmentResponse) Reset()

func (*Workload_SaaEnrollmentResponse) String

type Workload_SaaEnrollmentResponse_SetupError

type Workload_SaaEnrollmentResponse_SetupError int32

Setup error of SAA enrollment.

const (
	// Unspecified.
	Workload_SaaEnrollmentResponse_SETUP_ERROR_UNSPECIFIED Workload_SaaEnrollmentResponse_SetupError = 0
	// Invalid states for all customers, to be redirected to AA UI for
	// additional details.
	Workload_SaaEnrollmentResponse_ERROR_INVALID_BASE_SETUP Workload_SaaEnrollmentResponse_SetupError = 1
	// Returned when there is not an EKM key configured.
	Workload_SaaEnrollmentResponse_ERROR_MISSING_EXTERNAL_SIGNING_KEY Workload_SaaEnrollmentResponse_SetupError = 2
	// Returned when there are no enrolled services or the customer is
	// enrolled in CAA only for a subset of services.
	Workload_SaaEnrollmentResponse_ERROR_NOT_ALL_SERVICES_ENROLLED Workload_SaaEnrollmentResponse_SetupError = 3
	// Returned when exception was encountered during evaluation of other
	// criteria.
	Workload_SaaEnrollmentResponse_ERROR_SETUP_CHECK_FAILED Workload_SaaEnrollmentResponse_SetupError = 4
)

func (Workload_SaaEnrollmentResponse_SetupError) Descriptor

func (Workload_SaaEnrollmentResponse_SetupError) Enum

func (Workload_SaaEnrollmentResponse_SetupError) EnumDescriptor deprecated

func (Workload_SaaEnrollmentResponse_SetupError) EnumDescriptor() ([]byte, []int)

Deprecated: Use Workload_SaaEnrollmentResponse_SetupError.Descriptor instead.

func (Workload_SaaEnrollmentResponse_SetupError) Number

func (Workload_SaaEnrollmentResponse_SetupError) String

func (Workload_SaaEnrollmentResponse_SetupError) Type

type Workload_SaaEnrollmentResponse_SetupState

type Workload_SaaEnrollmentResponse_SetupState int32

Setup state of SAA enrollment.

const (
	// Unspecified.
	Workload_SaaEnrollmentResponse_SETUP_STATE_UNSPECIFIED Workload_SaaEnrollmentResponse_SetupState = 0
	// SAA enrollment pending.
	Workload_SaaEnrollmentResponse_STATUS_PENDING Workload_SaaEnrollmentResponse_SetupState = 1
	// SAA enrollment comopleted.
	Workload_SaaEnrollmentResponse_STATUS_COMPLETE Workload_SaaEnrollmentResponse_SetupState = 2
)

func (Workload_SaaEnrollmentResponse_SetupState) Descriptor

func (Workload_SaaEnrollmentResponse_SetupState) Enum

func (Workload_SaaEnrollmentResponse_SetupState) EnumDescriptor deprecated

func (Workload_SaaEnrollmentResponse_SetupState) EnumDescriptor() ([]byte, []int)

Deprecated: Use Workload_SaaEnrollmentResponse_SetupState.Descriptor instead.

func (Workload_SaaEnrollmentResponse_SetupState) Number

func (Workload_SaaEnrollmentResponse_SetupState) String

func (Workload_SaaEnrollmentResponse_SetupState) Type

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL