google-native logo
Google Cloud Native v0.28.0, Feb 2 23

google-native.binaryauthorization/v1beta1.Attestor

Creates an attestor, and returns a copy of the new attestor. Returns NOT_FOUND if the project does not exist, INVALID_ARGUMENT if the request is malformed, ALREADY_EXISTS if the attestor already exists.

Create Attestor Resource

new Attestor(name: string, args: AttestorArgs, opts?: CustomResourceOptions);
@overload
def Attestor(resource_name: str,
             opts: Optional[ResourceOptions] = None,
             attestor_id: Optional[str] = None,
             description: Optional[str] = None,
             etag: Optional[str] = None,
             name: Optional[str] = None,
             project: Optional[str] = None,
             user_owned_drydock_note: Optional[UserOwnedDrydockNoteArgs] = None)
@overload
def Attestor(resource_name: str,
             args: AttestorArgs,
             opts: Optional[ResourceOptions] = None)
func NewAttestor(ctx *Context, name string, args AttestorArgs, opts ...ResourceOption) (*Attestor, error)
public Attestor(string name, AttestorArgs args, CustomResourceOptions? opts = null)
public Attestor(String name, AttestorArgs args)
public Attestor(String name, AttestorArgs args, CustomResourceOptions options)
type: google-native:binaryauthorization/v1beta1:Attestor
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

name string
The unique name of the resource.
args AttestorArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name str
The unique name of the resource.
args AttestorArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name string
The unique name of the resource.
args AttestorArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name string
The unique name of the resource.
args AttestorArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name String
The unique name of the resource.
args AttestorArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Attestor Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

The Attestor resource accepts the following input properties:

AttestorId string

Required. The attestors ID.

Description string

Optional. A descriptive comment. This field may be updated. The field may be displayed in chooser dialogs.

Etag string

Optional. A checksum, returned by the server, that can be sent on update requests to ensure the attestor has an up-to-date value before attempting to update it. See https://google.aip.dev/154.

Name string

The resource name, in the format: projects/*/attestors/*. This field may not be updated.

Project string
UserOwnedDrydockNote Pulumi.GoogleNative.BinaryAuthorization.V1Beta1.Inputs.UserOwnedDrydockNoteArgs

A Drydock ATTESTATION_AUTHORITY Note, created by the user.

AttestorId string

Required. The attestors ID.

Description string

Optional. A descriptive comment. This field may be updated. The field may be displayed in chooser dialogs.

Etag string

Optional. A checksum, returned by the server, that can be sent on update requests to ensure the attestor has an up-to-date value before attempting to update it. See https://google.aip.dev/154.

Name string

The resource name, in the format: projects/*/attestors/*. This field may not be updated.

Project string
UserOwnedDrydockNote UserOwnedDrydockNoteArgs

A Drydock ATTESTATION_AUTHORITY Note, created by the user.

attestorId String

Required. The attestors ID.

description String

Optional. A descriptive comment. This field may be updated. The field may be displayed in chooser dialogs.

etag String

Optional. A checksum, returned by the server, that can be sent on update requests to ensure the attestor has an up-to-date value before attempting to update it. See https://google.aip.dev/154.

name String

The resource name, in the format: projects/*/attestors/*. This field may not be updated.

project String
userOwnedDrydockNote UserOwnedDrydockNoteArgs

A Drydock ATTESTATION_AUTHORITY Note, created by the user.

attestorId string

Required. The attestors ID.

description string

Optional. A descriptive comment. This field may be updated. The field may be displayed in chooser dialogs.

etag string

Optional. A checksum, returned by the server, that can be sent on update requests to ensure the attestor has an up-to-date value before attempting to update it. See https://google.aip.dev/154.

name string

The resource name, in the format: projects/*/attestors/*. This field may not be updated.

project string
userOwnedDrydockNote UserOwnedDrydockNoteArgs

A Drydock ATTESTATION_AUTHORITY Note, created by the user.

attestor_id str

Required. The attestors ID.

description str

Optional. A descriptive comment. This field may be updated. The field may be displayed in chooser dialogs.

etag str

Optional. A checksum, returned by the server, that can be sent on update requests to ensure the attestor has an up-to-date value before attempting to update it. See https://google.aip.dev/154.

name str

The resource name, in the format: projects/*/attestors/*. This field may not be updated.

project str
user_owned_drydock_note UserOwnedDrydockNoteArgs

A Drydock ATTESTATION_AUTHORITY Note, created by the user.

attestorId String

Required. The attestors ID.

description String

Optional. A descriptive comment. This field may be updated. The field may be displayed in chooser dialogs.

etag String

Optional. A checksum, returned by the server, that can be sent on update requests to ensure the attestor has an up-to-date value before attempting to update it. See https://google.aip.dev/154.

name String

The resource name, in the format: projects/*/attestors/*. This field may not be updated.

project String
userOwnedDrydockNote Property Map

A Drydock ATTESTATION_AUTHORITY Note, created by the user.

Outputs

All input properties are implicitly available as output properties. Additionally, the Attestor resource produces the following output properties:

Id string

The provider-assigned unique ID for this managed resource.

UpdateTime string

Time when the attestor was last updated.

Id string

The provider-assigned unique ID for this managed resource.

UpdateTime string

Time when the attestor was last updated.

id String

The provider-assigned unique ID for this managed resource.

updateTime String

Time when the attestor was last updated.

id string

The provider-assigned unique ID for this managed resource.

updateTime string

Time when the attestor was last updated.

id str

The provider-assigned unique ID for this managed resource.

update_time str

Time when the attestor was last updated.

id String

The provider-assigned unique ID for this managed resource.

updateTime String

Time when the attestor was last updated.

Supporting Types

AttestorPublicKey

AsciiArmoredPgpPublicKey string

ASCII-armored representation of a PGP public key, as the entire output by the command gpg --export --armor foo@example.com (either LF or CRLF line endings). When using this field, id should be left blank. The BinAuthz API handlers will calculate the ID and fill it in automatically. BinAuthz computes this ID as the OpenPGP RFC4880 V4 fingerprint, represented as upper-case hex. If id is provided by the caller, it will be overwritten by the API-calculated ID.

Comment string

Optional. A descriptive comment. This field may be updated.

Id string

The ID of this public key. Signatures verified by BinAuthz must include the ID of the public key that can be used to verify them, and that ID must match the contents of this field exactly. Additional restrictions on this field can be imposed based on which public key type is encapsulated. See the documentation on public_key cases below for details.

PkixPublicKey Pulumi.GoogleNative.BinaryAuthorization.V1Beta1.Inputs.PkixPublicKey

A raw PKIX SubjectPublicKeyInfo format public key. NOTE: id may be explicitly provided by the caller when using this type of public key, but it MUST be a valid RFC3986 URI. If id is left blank, a default one will be computed based on the digest of the DER encoding of the public key.

AsciiArmoredPgpPublicKey string

ASCII-armored representation of a PGP public key, as the entire output by the command gpg --export --armor foo@example.com (either LF or CRLF line endings). When using this field, id should be left blank. The BinAuthz API handlers will calculate the ID and fill it in automatically. BinAuthz computes this ID as the OpenPGP RFC4880 V4 fingerprint, represented as upper-case hex. If id is provided by the caller, it will be overwritten by the API-calculated ID.

Comment string

Optional. A descriptive comment. This field may be updated.

Id string

The ID of this public key. Signatures verified by BinAuthz must include the ID of the public key that can be used to verify them, and that ID must match the contents of this field exactly. Additional restrictions on this field can be imposed based on which public key type is encapsulated. See the documentation on public_key cases below for details.

PkixPublicKey PkixPublicKey

A raw PKIX SubjectPublicKeyInfo format public key. NOTE: id may be explicitly provided by the caller when using this type of public key, but it MUST be a valid RFC3986 URI. If id is left blank, a default one will be computed based on the digest of the DER encoding of the public key.

asciiArmoredPgpPublicKey String

ASCII-armored representation of a PGP public key, as the entire output by the command gpg --export --armor foo@example.com (either LF or CRLF line endings). When using this field, id should be left blank. The BinAuthz API handlers will calculate the ID and fill it in automatically. BinAuthz computes this ID as the OpenPGP RFC4880 V4 fingerprint, represented as upper-case hex. If id is provided by the caller, it will be overwritten by the API-calculated ID.

comment String

Optional. A descriptive comment. This field may be updated.

id String

The ID of this public key. Signatures verified by BinAuthz must include the ID of the public key that can be used to verify them, and that ID must match the contents of this field exactly. Additional restrictions on this field can be imposed based on which public key type is encapsulated. See the documentation on public_key cases below for details.

pkixPublicKey PkixPublicKey

A raw PKIX SubjectPublicKeyInfo format public key. NOTE: id may be explicitly provided by the caller when using this type of public key, but it MUST be a valid RFC3986 URI. If id is left blank, a default one will be computed based on the digest of the DER encoding of the public key.

asciiArmoredPgpPublicKey string

ASCII-armored representation of a PGP public key, as the entire output by the command gpg --export --armor foo@example.com (either LF or CRLF line endings). When using this field, id should be left blank. The BinAuthz API handlers will calculate the ID and fill it in automatically. BinAuthz computes this ID as the OpenPGP RFC4880 V4 fingerprint, represented as upper-case hex. If id is provided by the caller, it will be overwritten by the API-calculated ID.

comment string

Optional. A descriptive comment. This field may be updated.

id string

The ID of this public key. Signatures verified by BinAuthz must include the ID of the public key that can be used to verify them, and that ID must match the contents of this field exactly. Additional restrictions on this field can be imposed based on which public key type is encapsulated. See the documentation on public_key cases below for details.

pkixPublicKey PkixPublicKey

A raw PKIX SubjectPublicKeyInfo format public key. NOTE: id may be explicitly provided by the caller when using this type of public key, but it MUST be a valid RFC3986 URI. If id is left blank, a default one will be computed based on the digest of the DER encoding of the public key.

ascii_armored_pgp_public_key str

ASCII-armored representation of a PGP public key, as the entire output by the command gpg --export --armor foo@example.com (either LF or CRLF line endings). When using this field, id should be left blank. The BinAuthz API handlers will calculate the ID and fill it in automatically. BinAuthz computes this ID as the OpenPGP RFC4880 V4 fingerprint, represented as upper-case hex. If id is provided by the caller, it will be overwritten by the API-calculated ID.

comment str

Optional. A descriptive comment. This field may be updated.

id str

The ID of this public key. Signatures verified by BinAuthz must include the ID of the public key that can be used to verify them, and that ID must match the contents of this field exactly. Additional restrictions on this field can be imposed based on which public key type is encapsulated. See the documentation on public_key cases below for details.

pkix_public_key PkixPublicKey

A raw PKIX SubjectPublicKeyInfo format public key. NOTE: id may be explicitly provided by the caller when using this type of public key, but it MUST be a valid RFC3986 URI. If id is left blank, a default one will be computed based on the digest of the DER encoding of the public key.

asciiArmoredPgpPublicKey String

ASCII-armored representation of a PGP public key, as the entire output by the command gpg --export --armor foo@example.com (either LF or CRLF line endings). When using this field, id should be left blank. The BinAuthz API handlers will calculate the ID and fill it in automatically. BinAuthz computes this ID as the OpenPGP RFC4880 V4 fingerprint, represented as upper-case hex. If id is provided by the caller, it will be overwritten by the API-calculated ID.

comment String

Optional. A descriptive comment. This field may be updated.

id String

The ID of this public key. Signatures verified by BinAuthz must include the ID of the public key that can be used to verify them, and that ID must match the contents of this field exactly. Additional restrictions on this field can be imposed based on which public key type is encapsulated. See the documentation on public_key cases below for details.

pkixPublicKey Property Map

A raw PKIX SubjectPublicKeyInfo format public key. NOTE: id may be explicitly provided by the caller when using this type of public key, but it MUST be a valid RFC3986 URI. If id is left blank, a default one will be computed based on the digest of the DER encoding of the public key.

AttestorPublicKeyResponse

AsciiArmoredPgpPublicKey string

ASCII-armored representation of a PGP public key, as the entire output by the command gpg --export --armor foo@example.com (either LF or CRLF line endings). When using this field, id should be left blank. The BinAuthz API handlers will calculate the ID and fill it in automatically. BinAuthz computes this ID as the OpenPGP RFC4880 V4 fingerprint, represented as upper-case hex. If id is provided by the caller, it will be overwritten by the API-calculated ID.

Comment string

Optional. A descriptive comment. This field may be updated.

PkixPublicKey Pulumi.GoogleNative.BinaryAuthorization.V1Beta1.Inputs.PkixPublicKeyResponse

A raw PKIX SubjectPublicKeyInfo format public key. NOTE: id may be explicitly provided by the caller when using this type of public key, but it MUST be a valid RFC3986 URI. If id is left blank, a default one will be computed based on the digest of the DER encoding of the public key.

AsciiArmoredPgpPublicKey string

ASCII-armored representation of a PGP public key, as the entire output by the command gpg --export --armor foo@example.com (either LF or CRLF line endings). When using this field, id should be left blank. The BinAuthz API handlers will calculate the ID and fill it in automatically. BinAuthz computes this ID as the OpenPGP RFC4880 V4 fingerprint, represented as upper-case hex. If id is provided by the caller, it will be overwritten by the API-calculated ID.

Comment string

Optional. A descriptive comment. This field may be updated.

PkixPublicKey PkixPublicKeyResponse

A raw PKIX SubjectPublicKeyInfo format public key. NOTE: id may be explicitly provided by the caller when using this type of public key, but it MUST be a valid RFC3986 URI. If id is left blank, a default one will be computed based on the digest of the DER encoding of the public key.

asciiArmoredPgpPublicKey String

ASCII-armored representation of a PGP public key, as the entire output by the command gpg --export --armor foo@example.com (either LF or CRLF line endings). When using this field, id should be left blank. The BinAuthz API handlers will calculate the ID and fill it in automatically. BinAuthz computes this ID as the OpenPGP RFC4880 V4 fingerprint, represented as upper-case hex. If id is provided by the caller, it will be overwritten by the API-calculated ID.

comment String

Optional. A descriptive comment. This field may be updated.

pkixPublicKey PkixPublicKeyResponse

A raw PKIX SubjectPublicKeyInfo format public key. NOTE: id may be explicitly provided by the caller when using this type of public key, but it MUST be a valid RFC3986 URI. If id is left blank, a default one will be computed based on the digest of the DER encoding of the public key.

asciiArmoredPgpPublicKey string

ASCII-armored representation of a PGP public key, as the entire output by the command gpg --export --armor foo@example.com (either LF or CRLF line endings). When using this field, id should be left blank. The BinAuthz API handlers will calculate the ID and fill it in automatically. BinAuthz computes this ID as the OpenPGP RFC4880 V4 fingerprint, represented as upper-case hex. If id is provided by the caller, it will be overwritten by the API-calculated ID.

comment string

Optional. A descriptive comment. This field may be updated.

pkixPublicKey PkixPublicKeyResponse

A raw PKIX SubjectPublicKeyInfo format public key. NOTE: id may be explicitly provided by the caller when using this type of public key, but it MUST be a valid RFC3986 URI. If id is left blank, a default one will be computed based on the digest of the DER encoding of the public key.

ascii_armored_pgp_public_key str

ASCII-armored representation of a PGP public key, as the entire output by the command gpg --export --armor foo@example.com (either LF or CRLF line endings). When using this field, id should be left blank. The BinAuthz API handlers will calculate the ID and fill it in automatically. BinAuthz computes this ID as the OpenPGP RFC4880 V4 fingerprint, represented as upper-case hex. If id is provided by the caller, it will be overwritten by the API-calculated ID.

comment str

Optional. A descriptive comment. This field may be updated.

pkix_public_key PkixPublicKeyResponse

A raw PKIX SubjectPublicKeyInfo format public key. NOTE: id may be explicitly provided by the caller when using this type of public key, but it MUST be a valid RFC3986 URI. If id is left blank, a default one will be computed based on the digest of the DER encoding of the public key.

asciiArmoredPgpPublicKey String

ASCII-armored representation of a PGP public key, as the entire output by the command gpg --export --armor foo@example.com (either LF or CRLF line endings). When using this field, id should be left blank. The BinAuthz API handlers will calculate the ID and fill it in automatically. BinAuthz computes this ID as the OpenPGP RFC4880 V4 fingerprint, represented as upper-case hex. If id is provided by the caller, it will be overwritten by the API-calculated ID.

comment String

Optional. A descriptive comment. This field may be updated.

pkixPublicKey Property Map

A raw PKIX SubjectPublicKeyInfo format public key. NOTE: id may be explicitly provided by the caller when using this type of public key, but it MUST be a valid RFC3986 URI. If id is left blank, a default one will be computed based on the digest of the DER encoding of the public key.

PkixPublicKey

PublicKeyPem string

A PEM-encoded public key, as described in https://tools.ietf.org/html/rfc7468#section-13

SignatureAlgorithm Pulumi.GoogleNative.BinaryAuthorization.V1Beta1.PkixPublicKeySignatureAlgorithm

The signature algorithm used to verify a message against a signature using this key. These signature algorithm must match the structure and any object identifiers encoded in public_key_pem (i.e. this algorithm must match that of the public key).

PublicKeyPem string

A PEM-encoded public key, as described in https://tools.ietf.org/html/rfc7468#section-13

SignatureAlgorithm PkixPublicKeySignatureAlgorithm

The signature algorithm used to verify a message against a signature using this key. These signature algorithm must match the structure and any object identifiers encoded in public_key_pem (i.e. this algorithm must match that of the public key).

publicKeyPem String

A PEM-encoded public key, as described in https://tools.ietf.org/html/rfc7468#section-13

signatureAlgorithm PkixPublicKeySignatureAlgorithm

The signature algorithm used to verify a message against a signature using this key. These signature algorithm must match the structure and any object identifiers encoded in public_key_pem (i.e. this algorithm must match that of the public key).

publicKeyPem string

A PEM-encoded public key, as described in https://tools.ietf.org/html/rfc7468#section-13

signatureAlgorithm PkixPublicKeySignatureAlgorithm

The signature algorithm used to verify a message against a signature using this key. These signature algorithm must match the structure and any object identifiers encoded in public_key_pem (i.e. this algorithm must match that of the public key).

public_key_pem str

A PEM-encoded public key, as described in https://tools.ietf.org/html/rfc7468#section-13

signature_algorithm PkixPublicKeySignatureAlgorithm

The signature algorithm used to verify a message against a signature using this key. These signature algorithm must match the structure and any object identifiers encoded in public_key_pem (i.e. this algorithm must match that of the public key).

publicKeyPem String

A PEM-encoded public key, as described in https://tools.ietf.org/html/rfc7468#section-13

signatureAlgorithm "SIGNATURE_ALGORITHM_UNSPECIFIED" | "RSA_PSS_2048_SHA256" | "RSA_SIGN_PSS_2048_SHA256" | "RSA_PSS_3072_SHA256" | "RSA_SIGN_PSS_3072_SHA256" | "RSA_PSS_4096_SHA256" | "RSA_SIGN_PSS_4096_SHA256" | "RSA_PSS_4096_SHA512" | "RSA_SIGN_PSS_4096_SHA512" | "RSA_SIGN_PKCS1_2048_SHA256" | "RSA_SIGN_PKCS1_3072_SHA256" | "RSA_SIGN_PKCS1_4096_SHA256" | "RSA_SIGN_PKCS1_4096_SHA512" | "ECDSA_P256_SHA256" | "EC_SIGN_P256_SHA256" | "ECDSA_P384_SHA384" | "EC_SIGN_P384_SHA384" | "ECDSA_P521_SHA512" | "EC_SIGN_P521_SHA512"

The signature algorithm used to verify a message against a signature using this key. These signature algorithm must match the structure and any object identifiers encoded in public_key_pem (i.e. this algorithm must match that of the public key).

PkixPublicKeyResponse

PublicKeyPem string

A PEM-encoded public key, as described in https://tools.ietf.org/html/rfc7468#section-13

SignatureAlgorithm string

The signature algorithm used to verify a message against a signature using this key. These signature algorithm must match the structure and any object identifiers encoded in public_key_pem (i.e. this algorithm must match that of the public key).

PublicKeyPem string

A PEM-encoded public key, as described in https://tools.ietf.org/html/rfc7468#section-13

SignatureAlgorithm string

The signature algorithm used to verify a message against a signature using this key. These signature algorithm must match the structure and any object identifiers encoded in public_key_pem (i.e. this algorithm must match that of the public key).

publicKeyPem String

A PEM-encoded public key, as described in https://tools.ietf.org/html/rfc7468#section-13

signatureAlgorithm String

The signature algorithm used to verify a message against a signature using this key. These signature algorithm must match the structure and any object identifiers encoded in public_key_pem (i.e. this algorithm must match that of the public key).

publicKeyPem string

A PEM-encoded public key, as described in https://tools.ietf.org/html/rfc7468#section-13

signatureAlgorithm string

The signature algorithm used to verify a message against a signature using this key. These signature algorithm must match the structure and any object identifiers encoded in public_key_pem (i.e. this algorithm must match that of the public key).

public_key_pem str

A PEM-encoded public key, as described in https://tools.ietf.org/html/rfc7468#section-13

signature_algorithm str

The signature algorithm used to verify a message against a signature using this key. These signature algorithm must match the structure and any object identifiers encoded in public_key_pem (i.e. this algorithm must match that of the public key).

publicKeyPem String

A PEM-encoded public key, as described in https://tools.ietf.org/html/rfc7468#section-13

signatureAlgorithm String

The signature algorithm used to verify a message against a signature using this key. These signature algorithm must match the structure and any object identifiers encoded in public_key_pem (i.e. this algorithm must match that of the public key).

PkixPublicKeySignatureAlgorithm

SignatureAlgorithmUnspecified
SIGNATURE_ALGORITHM_UNSPECIFIED

Not specified.

RsaPss2048Sha256
RSA_PSS_2048_SHA256

RSASSA-PSS 2048 bit key with a SHA256 digest.

RsaSignPss2048Sha256
RSA_SIGN_PSS_2048_SHA256

RSASSA-PSS 2048 bit key with a SHA256 digest.

RsaPss3072Sha256
RSA_PSS_3072_SHA256

RSASSA-PSS 3072 bit key with a SHA256 digest.

RsaSignPss3072Sha256
RSA_SIGN_PSS_3072_SHA256

RSASSA-PSS 3072 bit key with a SHA256 digest.

RsaPss4096Sha256
RSA_PSS_4096_SHA256

RSASSA-PSS 4096 bit key with a SHA256 digest.

RsaSignPss4096Sha256
RSA_SIGN_PSS_4096_SHA256

RSASSA-PSS 4096 bit key with a SHA256 digest.

RsaPss4096Sha512
RSA_PSS_4096_SHA512

RSASSA-PSS 4096 bit key with a SHA512 digest.

RsaSignPss4096Sha512
RSA_SIGN_PSS_4096_SHA512

RSASSA-PSS 4096 bit key with a SHA512 digest.

RsaSignPkcs12048Sha256
RSA_SIGN_PKCS1_2048_SHA256

RSASSA-PKCS1-v1_5 with a 2048 bit key and a SHA256 digest.

RsaSignPkcs13072Sha256
RSA_SIGN_PKCS1_3072_SHA256

RSASSA-PKCS1-v1_5 with a 3072 bit key and a SHA256 digest.

RsaSignPkcs14096Sha256
RSA_SIGN_PKCS1_4096_SHA256

RSASSA-PKCS1-v1_5 with a 4096 bit key and a SHA256 digest.

RsaSignPkcs14096Sha512
RSA_SIGN_PKCS1_4096_SHA512

RSASSA-PKCS1-v1_5 with a 4096 bit key and a SHA512 digest.

EcdsaP256Sha256
ECDSA_P256_SHA256

ECDSA on the NIST P-256 curve with a SHA256 digest.

EcSignP256Sha256
EC_SIGN_P256_SHA256

ECDSA on the NIST P-256 curve with a SHA256 digest.

EcdsaP384Sha384
ECDSA_P384_SHA384

ECDSA on the NIST P-384 curve with a SHA384 digest.

EcSignP384Sha384
EC_SIGN_P384_SHA384

ECDSA on the NIST P-384 curve with a SHA384 digest.

EcdsaP521Sha512
ECDSA_P521_SHA512

ECDSA on the NIST P-521 curve with a SHA512 digest.

EcSignP521Sha512
EC_SIGN_P521_SHA512

ECDSA on the NIST P-521 curve with a SHA512 digest.

PkixPublicKeySignatureAlgorithmSignatureAlgorithmUnspecified
SIGNATURE_ALGORITHM_UNSPECIFIED

Not specified.

PkixPublicKeySignatureAlgorithmRsaPss2048Sha256
RSA_PSS_2048_SHA256

RSASSA-PSS 2048 bit key with a SHA256 digest.

PkixPublicKeySignatureAlgorithmRsaSignPss2048Sha256
RSA_SIGN_PSS_2048_SHA256

RSASSA-PSS 2048 bit key with a SHA256 digest.

PkixPublicKeySignatureAlgorithmRsaPss3072Sha256
RSA_PSS_3072_SHA256

RSASSA-PSS 3072 bit key with a SHA256 digest.

PkixPublicKeySignatureAlgorithmRsaSignPss3072Sha256
RSA_SIGN_PSS_3072_SHA256

RSASSA-PSS 3072 bit key with a SHA256 digest.

PkixPublicKeySignatureAlgorithmRsaPss4096Sha256
RSA_PSS_4096_SHA256

RSASSA-PSS 4096 bit key with a SHA256 digest.

PkixPublicKeySignatureAlgorithmRsaSignPss4096Sha256
RSA_SIGN_PSS_4096_SHA256

RSASSA-PSS 4096 bit key with a SHA256 digest.

PkixPublicKeySignatureAlgorithmRsaPss4096Sha512
RSA_PSS_4096_SHA512

RSASSA-PSS 4096 bit key with a SHA512 digest.

PkixPublicKeySignatureAlgorithmRsaSignPss4096Sha512
RSA_SIGN_PSS_4096_SHA512

RSASSA-PSS 4096 bit key with a SHA512 digest.

PkixPublicKeySignatureAlgorithmRsaSignPkcs12048Sha256
RSA_SIGN_PKCS1_2048_SHA256

RSASSA-PKCS1-v1_5 with a 2048 bit key and a SHA256 digest.

PkixPublicKeySignatureAlgorithmRsaSignPkcs13072Sha256
RSA_SIGN_PKCS1_3072_SHA256

RSASSA-PKCS1-v1_5 with a 3072 bit key and a SHA256 digest.

PkixPublicKeySignatureAlgorithmRsaSignPkcs14096Sha256
RSA_SIGN_PKCS1_4096_SHA256

RSASSA-PKCS1-v1_5 with a 4096 bit key and a SHA256 digest.

PkixPublicKeySignatureAlgorithmRsaSignPkcs14096Sha512
RSA_SIGN_PKCS1_4096_SHA512

RSASSA-PKCS1-v1_5 with a 4096 bit key and a SHA512 digest.

PkixPublicKeySignatureAlgorithmEcdsaP256Sha256
ECDSA_P256_SHA256

ECDSA on the NIST P-256 curve with a SHA256 digest.

PkixPublicKeySignatureAlgorithmEcSignP256Sha256
EC_SIGN_P256_SHA256

ECDSA on the NIST P-256 curve with a SHA256 digest.

PkixPublicKeySignatureAlgorithmEcdsaP384Sha384
ECDSA_P384_SHA384

ECDSA on the NIST P-384 curve with a SHA384 digest.

PkixPublicKeySignatureAlgorithmEcSignP384Sha384
EC_SIGN_P384_SHA384

ECDSA on the NIST P-384 curve with a SHA384 digest.

PkixPublicKeySignatureAlgorithmEcdsaP521Sha512
ECDSA_P521_SHA512

ECDSA on the NIST P-521 curve with a SHA512 digest.

PkixPublicKeySignatureAlgorithmEcSignP521Sha512
EC_SIGN_P521_SHA512

ECDSA on the NIST P-521 curve with a SHA512 digest.

SignatureAlgorithmUnspecified
SIGNATURE_ALGORITHM_UNSPECIFIED

Not specified.

RsaPss2048Sha256
RSA_PSS_2048_SHA256

RSASSA-PSS 2048 bit key with a SHA256 digest.

RsaSignPss2048Sha256
RSA_SIGN_PSS_2048_SHA256

RSASSA-PSS 2048 bit key with a SHA256 digest.

RsaPss3072Sha256
RSA_PSS_3072_SHA256

RSASSA-PSS 3072 bit key with a SHA256 digest.

RsaSignPss3072Sha256
RSA_SIGN_PSS_3072_SHA256

RSASSA-PSS 3072 bit key with a SHA256 digest.

RsaPss4096Sha256
RSA_PSS_4096_SHA256

RSASSA-PSS 4096 bit key with a SHA256 digest.

RsaSignPss4096Sha256
RSA_SIGN_PSS_4096_SHA256

RSASSA-PSS 4096 bit key with a SHA256 digest.

RsaPss4096Sha512
RSA_PSS_4096_SHA512

RSASSA-PSS 4096 bit key with a SHA512 digest.

RsaSignPss4096Sha512
RSA_SIGN_PSS_4096_SHA512

RSASSA-PSS 4096 bit key with a SHA512 digest.

RsaSignPkcs12048Sha256
RSA_SIGN_PKCS1_2048_SHA256

RSASSA-PKCS1-v1_5 with a 2048 bit key and a SHA256 digest.

RsaSignPkcs13072Sha256
RSA_SIGN_PKCS1_3072_SHA256

RSASSA-PKCS1-v1_5 with a 3072 bit key and a SHA256 digest.

RsaSignPkcs14096Sha256
RSA_SIGN_PKCS1_4096_SHA256

RSASSA-PKCS1-v1_5 with a 4096 bit key and a SHA256 digest.

RsaSignPkcs14096Sha512
RSA_SIGN_PKCS1_4096_SHA512

RSASSA-PKCS1-v1_5 with a 4096 bit key and a SHA512 digest.

EcdsaP256Sha256
ECDSA_P256_SHA256

ECDSA on the NIST P-256 curve with a SHA256 digest.

EcSignP256Sha256
EC_SIGN_P256_SHA256

ECDSA on the NIST P-256 curve with a SHA256 digest.

EcdsaP384Sha384
ECDSA_P384_SHA384

ECDSA on the NIST P-384 curve with a SHA384 digest.

EcSignP384Sha384
EC_SIGN_P384_SHA384

ECDSA on the NIST P-384 curve with a SHA384 digest.

EcdsaP521Sha512
ECDSA_P521_SHA512

ECDSA on the NIST P-521 curve with a SHA512 digest.

EcSignP521Sha512
EC_SIGN_P521_SHA512

ECDSA on the NIST P-521 curve with a SHA512 digest.

SignatureAlgorithmUnspecified
SIGNATURE_ALGORITHM_UNSPECIFIED

Not specified.

RsaPss2048Sha256
RSA_PSS_2048_SHA256

RSASSA-PSS 2048 bit key with a SHA256 digest.

RsaSignPss2048Sha256
RSA_SIGN_PSS_2048_SHA256

RSASSA-PSS 2048 bit key with a SHA256 digest.

RsaPss3072Sha256
RSA_PSS_3072_SHA256

RSASSA-PSS 3072 bit key with a SHA256 digest.

RsaSignPss3072Sha256
RSA_SIGN_PSS_3072_SHA256

RSASSA-PSS 3072 bit key with a SHA256 digest.

RsaPss4096Sha256
RSA_PSS_4096_SHA256

RSASSA-PSS 4096 bit key with a SHA256 digest.

RsaSignPss4096Sha256
RSA_SIGN_PSS_4096_SHA256

RSASSA-PSS 4096 bit key with a SHA256 digest.

RsaPss4096Sha512
RSA_PSS_4096_SHA512

RSASSA-PSS 4096 bit key with a SHA512 digest.

RsaSignPss4096Sha512
RSA_SIGN_PSS_4096_SHA512

RSASSA-PSS 4096 bit key with a SHA512 digest.

RsaSignPkcs12048Sha256
RSA_SIGN_PKCS1_2048_SHA256

RSASSA-PKCS1-v1_5 with a 2048 bit key and a SHA256 digest.

RsaSignPkcs13072Sha256
RSA_SIGN_PKCS1_3072_SHA256

RSASSA-PKCS1-v1_5 with a 3072 bit key and a SHA256 digest.

RsaSignPkcs14096Sha256
RSA_SIGN_PKCS1_4096_SHA256

RSASSA-PKCS1-v1_5 with a 4096 bit key and a SHA256 digest.

RsaSignPkcs14096Sha512
RSA_SIGN_PKCS1_4096_SHA512

RSASSA-PKCS1-v1_5 with a 4096 bit key and a SHA512 digest.

EcdsaP256Sha256
ECDSA_P256_SHA256

ECDSA on the NIST P-256 curve with a SHA256 digest.

EcSignP256Sha256
EC_SIGN_P256_SHA256

ECDSA on the NIST P-256 curve with a SHA256 digest.

EcdsaP384Sha384
ECDSA_P384_SHA384

ECDSA on the NIST P-384 curve with a SHA384 digest.

EcSignP384Sha384
EC_SIGN_P384_SHA384

ECDSA on the NIST P-384 curve with a SHA384 digest.

EcdsaP521Sha512
ECDSA_P521_SHA512

ECDSA on the NIST P-521 curve with a SHA512 digest.

EcSignP521Sha512
EC_SIGN_P521_SHA512

ECDSA on the NIST P-521 curve with a SHA512 digest.

SIGNATURE_ALGORITHM_UNSPECIFIED
SIGNATURE_ALGORITHM_UNSPECIFIED

Not specified.

RSA_PSS2048_SHA256
RSA_PSS_2048_SHA256

RSASSA-PSS 2048 bit key with a SHA256 digest.

RSA_SIGN_PSS2048_SHA256
RSA_SIGN_PSS_2048_SHA256

RSASSA-PSS 2048 bit key with a SHA256 digest.

RSA_PSS3072_SHA256
RSA_PSS_3072_SHA256

RSASSA-PSS 3072 bit key with a SHA256 digest.

RSA_SIGN_PSS3072_SHA256
RSA_SIGN_PSS_3072_SHA256

RSASSA-PSS 3072 bit key with a SHA256 digest.

RSA_PSS4096_SHA256
RSA_PSS_4096_SHA256

RSASSA-PSS 4096 bit key with a SHA256 digest.

RSA_SIGN_PSS4096_SHA256
RSA_SIGN_PSS_4096_SHA256

RSASSA-PSS 4096 bit key with a SHA256 digest.

RSA_PSS4096_SHA512
RSA_PSS_4096_SHA512

RSASSA-PSS 4096 bit key with a SHA512 digest.

RSA_SIGN_PSS4096_SHA512
RSA_SIGN_PSS_4096_SHA512

RSASSA-PSS 4096 bit key with a SHA512 digest.

RSA_SIGN_PKCS12048_SHA256
RSA_SIGN_PKCS1_2048_SHA256

RSASSA-PKCS1-v1_5 with a 2048 bit key and a SHA256 digest.

RSA_SIGN_PKCS13072_SHA256
RSA_SIGN_PKCS1_3072_SHA256

RSASSA-PKCS1-v1_5 with a 3072 bit key and a SHA256 digest.

RSA_SIGN_PKCS14096_SHA256
RSA_SIGN_PKCS1_4096_SHA256

RSASSA-PKCS1-v1_5 with a 4096 bit key and a SHA256 digest.

RSA_SIGN_PKCS14096_SHA512
RSA_SIGN_PKCS1_4096_SHA512

RSASSA-PKCS1-v1_5 with a 4096 bit key and a SHA512 digest.

ECDSA_P256_SHA256
ECDSA_P256_SHA256

ECDSA on the NIST P-256 curve with a SHA256 digest.

EC_SIGN_P256_SHA256
EC_SIGN_P256_SHA256

ECDSA on the NIST P-256 curve with a SHA256 digest.

ECDSA_P384_SHA384
ECDSA_P384_SHA384

ECDSA on the NIST P-384 curve with a SHA384 digest.

EC_SIGN_P384_SHA384
EC_SIGN_P384_SHA384

ECDSA on the NIST P-384 curve with a SHA384 digest.

ECDSA_P521_SHA512
ECDSA_P521_SHA512

ECDSA on the NIST P-521 curve with a SHA512 digest.

EC_SIGN_P521_SHA512
EC_SIGN_P521_SHA512

ECDSA on the NIST P-521 curve with a SHA512 digest.

"SIGNATURE_ALGORITHM_UNSPECIFIED"
SIGNATURE_ALGORITHM_UNSPECIFIED

Not specified.

"RSA_PSS_2048_SHA256"
RSA_PSS_2048_SHA256

RSASSA-PSS 2048 bit key with a SHA256 digest.

"RSA_SIGN_PSS_2048_SHA256"
RSA_SIGN_PSS_2048_SHA256

RSASSA-PSS 2048 bit key with a SHA256 digest.

"RSA_PSS_3072_SHA256"
RSA_PSS_3072_SHA256

RSASSA-PSS 3072 bit key with a SHA256 digest.

"RSA_SIGN_PSS_3072_SHA256"
RSA_SIGN_PSS_3072_SHA256

RSASSA-PSS 3072 bit key with a SHA256 digest.

"RSA_PSS_4096_SHA256"
RSA_PSS_4096_SHA256

RSASSA-PSS 4096 bit key with a SHA256 digest.

"RSA_SIGN_PSS_4096_SHA256"
RSA_SIGN_PSS_4096_SHA256

RSASSA-PSS 4096 bit key with a SHA256 digest.

"RSA_PSS_4096_SHA512"
RSA_PSS_4096_SHA512

RSASSA-PSS 4096 bit key with a SHA512 digest.

"RSA_SIGN_PSS_4096_SHA512"
RSA_SIGN_PSS_4096_SHA512

RSASSA-PSS 4096 bit key with a SHA512 digest.

"RSA_SIGN_PKCS1_2048_SHA256"
RSA_SIGN_PKCS1_2048_SHA256

RSASSA-PKCS1-v1_5 with a 2048 bit key and a SHA256 digest.

"RSA_SIGN_PKCS1_3072_SHA256"
RSA_SIGN_PKCS1_3072_SHA256

RSASSA-PKCS1-v1_5 with a 3072 bit key and a SHA256 digest.

"RSA_SIGN_PKCS1_4096_SHA256"
RSA_SIGN_PKCS1_4096_SHA256

RSASSA-PKCS1-v1_5 with a 4096 bit key and a SHA256 digest.

"RSA_SIGN_PKCS1_4096_SHA512"
RSA_SIGN_PKCS1_4096_SHA512

RSASSA-PKCS1-v1_5 with a 4096 bit key and a SHA512 digest.

"ECDSA_P256_SHA256"
ECDSA_P256_SHA256

ECDSA on the NIST P-256 curve with a SHA256 digest.

"EC_SIGN_P256_SHA256"
EC_SIGN_P256_SHA256

ECDSA on the NIST P-256 curve with a SHA256 digest.

"ECDSA_P384_SHA384"
ECDSA_P384_SHA384

ECDSA on the NIST P-384 curve with a SHA384 digest.

"EC_SIGN_P384_SHA384"
EC_SIGN_P384_SHA384

ECDSA on the NIST P-384 curve with a SHA384 digest.

"ECDSA_P521_SHA512"
ECDSA_P521_SHA512

ECDSA on the NIST P-521 curve with a SHA512 digest.

"EC_SIGN_P521_SHA512"
EC_SIGN_P521_SHA512

ECDSA on the NIST P-521 curve with a SHA512 digest.

UserOwnedDrydockNote

NoteReference string

The Drydock resource name of a ATTESTATION_AUTHORITY Note, created by the user, in the format: projects/*/notes/* (or the legacy providers/*/notes/*). This field may not be updated. An attestation by this attestor is stored as a Drydock ATTESTATION_AUTHORITY Occurrence that names a container image and that links to this Note. Drydock is an external dependency.

PublicKeys List<Pulumi.GoogleNative.BinaryAuthorization.V1Beta1.Inputs.AttestorPublicKey>

Optional. Public keys that verify attestations signed by this attestor. This field may be updated. If this field is non-empty, one of the specified public keys must verify that an attestation was signed by this attestor for the image specified in the admission request. If this field is empty, this attestor always returns that no valid attestations exist.

NoteReference string

The Drydock resource name of a ATTESTATION_AUTHORITY Note, created by the user, in the format: projects/*/notes/* (or the legacy providers/*/notes/*). This field may not be updated. An attestation by this attestor is stored as a Drydock ATTESTATION_AUTHORITY Occurrence that names a container image and that links to this Note. Drydock is an external dependency.

PublicKeys []AttestorPublicKey

Optional. Public keys that verify attestations signed by this attestor. This field may be updated. If this field is non-empty, one of the specified public keys must verify that an attestation was signed by this attestor for the image specified in the admission request. If this field is empty, this attestor always returns that no valid attestations exist.

noteReference String

The Drydock resource name of a ATTESTATION_AUTHORITY Note, created by the user, in the format: projects/*/notes/* (or the legacy providers/*/notes/*). This field may not be updated. An attestation by this attestor is stored as a Drydock ATTESTATION_AUTHORITY Occurrence that names a container image and that links to this Note. Drydock is an external dependency.

publicKeys List<AttestorPublicKey>

Optional. Public keys that verify attestations signed by this attestor. This field may be updated. If this field is non-empty, one of the specified public keys must verify that an attestation was signed by this attestor for the image specified in the admission request. If this field is empty, this attestor always returns that no valid attestations exist.

noteReference string

The Drydock resource name of a ATTESTATION_AUTHORITY Note, created by the user, in the format: projects/*/notes/* (or the legacy providers/*/notes/*). This field may not be updated. An attestation by this attestor is stored as a Drydock ATTESTATION_AUTHORITY Occurrence that names a container image and that links to this Note. Drydock is an external dependency.

publicKeys AttestorPublicKey[]

Optional. Public keys that verify attestations signed by this attestor. This field may be updated. If this field is non-empty, one of the specified public keys must verify that an attestation was signed by this attestor for the image specified in the admission request. If this field is empty, this attestor always returns that no valid attestations exist.

note_reference str

The Drydock resource name of a ATTESTATION_AUTHORITY Note, created by the user, in the format: projects/*/notes/* (or the legacy providers/*/notes/*). This field may not be updated. An attestation by this attestor is stored as a Drydock ATTESTATION_AUTHORITY Occurrence that names a container image and that links to this Note. Drydock is an external dependency.

public_keys Sequence[AttestorPublicKey]

Optional. Public keys that verify attestations signed by this attestor. This field may be updated. If this field is non-empty, one of the specified public keys must verify that an attestation was signed by this attestor for the image specified in the admission request. If this field is empty, this attestor always returns that no valid attestations exist.

noteReference String

The Drydock resource name of a ATTESTATION_AUTHORITY Note, created by the user, in the format: projects/*/notes/* (or the legacy providers/*/notes/*). This field may not be updated. An attestation by this attestor is stored as a Drydock ATTESTATION_AUTHORITY Occurrence that names a container image and that links to this Note. Drydock is an external dependency.

publicKeys List<Property Map>

Optional. Public keys that verify attestations signed by this attestor. This field may be updated. If this field is non-empty, one of the specified public keys must verify that an attestation was signed by this attestor for the image specified in the admission request. If this field is empty, this attestor always returns that no valid attestations exist.

UserOwnedDrydockNoteResponse

DelegationServiceAccountEmail string

This field will contain the service account email address that this Attestor will use as the principal when querying Container Analysis. Attestor administrators must grant this service account the IAM role needed to read attestations from the note_reference in Container Analysis (containeranalysis.notes.occurrences.viewer). This email address is fixed for the lifetime of the Attestor, but callers should not make any other assumptions about the service account email; future versions may use an email based on a different naming pattern.

NoteReference string

The Drydock resource name of a ATTESTATION_AUTHORITY Note, created by the user, in the format: projects/*/notes/* (or the legacy providers/*/notes/*). This field may not be updated. An attestation by this attestor is stored as a Drydock ATTESTATION_AUTHORITY Occurrence that names a container image and that links to this Note. Drydock is an external dependency.

PublicKeys List<Pulumi.GoogleNative.BinaryAuthorization.V1Beta1.Inputs.AttestorPublicKeyResponse>

Optional. Public keys that verify attestations signed by this attestor. This field may be updated. If this field is non-empty, one of the specified public keys must verify that an attestation was signed by this attestor for the image specified in the admission request. If this field is empty, this attestor always returns that no valid attestations exist.

DelegationServiceAccountEmail string

This field will contain the service account email address that this Attestor will use as the principal when querying Container Analysis. Attestor administrators must grant this service account the IAM role needed to read attestations from the note_reference in Container Analysis (containeranalysis.notes.occurrences.viewer). This email address is fixed for the lifetime of the Attestor, but callers should not make any other assumptions about the service account email; future versions may use an email based on a different naming pattern.

NoteReference string

The Drydock resource name of a ATTESTATION_AUTHORITY Note, created by the user, in the format: projects/*/notes/* (or the legacy providers/*/notes/*). This field may not be updated. An attestation by this attestor is stored as a Drydock ATTESTATION_AUTHORITY Occurrence that names a container image and that links to this Note. Drydock is an external dependency.

PublicKeys []AttestorPublicKeyResponse

Optional. Public keys that verify attestations signed by this attestor. This field may be updated. If this field is non-empty, one of the specified public keys must verify that an attestation was signed by this attestor for the image specified in the admission request. If this field is empty, this attestor always returns that no valid attestations exist.

delegationServiceAccountEmail String

This field will contain the service account email address that this Attestor will use as the principal when querying Container Analysis. Attestor administrators must grant this service account the IAM role needed to read attestations from the note_reference in Container Analysis (containeranalysis.notes.occurrences.viewer). This email address is fixed for the lifetime of the Attestor, but callers should not make any other assumptions about the service account email; future versions may use an email based on a different naming pattern.

noteReference String

The Drydock resource name of a ATTESTATION_AUTHORITY Note, created by the user, in the format: projects/*/notes/* (or the legacy providers/*/notes/*). This field may not be updated. An attestation by this attestor is stored as a Drydock ATTESTATION_AUTHORITY Occurrence that names a container image and that links to this Note. Drydock is an external dependency.

publicKeys List<AttestorPublicKeyResponse>

Optional. Public keys that verify attestations signed by this attestor. This field may be updated. If this field is non-empty, one of the specified public keys must verify that an attestation was signed by this attestor for the image specified in the admission request. If this field is empty, this attestor always returns that no valid attestations exist.

delegationServiceAccountEmail string

This field will contain the service account email address that this Attestor will use as the principal when querying Container Analysis. Attestor administrators must grant this service account the IAM role needed to read attestations from the note_reference in Container Analysis (containeranalysis.notes.occurrences.viewer). This email address is fixed for the lifetime of the Attestor, but callers should not make any other assumptions about the service account email; future versions may use an email based on a different naming pattern.

noteReference string

The Drydock resource name of a ATTESTATION_AUTHORITY Note, created by the user, in the format: projects/*/notes/* (or the legacy providers/*/notes/*). This field may not be updated. An attestation by this attestor is stored as a Drydock ATTESTATION_AUTHORITY Occurrence that names a container image and that links to this Note. Drydock is an external dependency.

publicKeys AttestorPublicKeyResponse[]

Optional. Public keys that verify attestations signed by this attestor. This field may be updated. If this field is non-empty, one of the specified public keys must verify that an attestation was signed by this attestor for the image specified in the admission request. If this field is empty, this attestor always returns that no valid attestations exist.

delegation_service_account_email str

This field will contain the service account email address that this Attestor will use as the principal when querying Container Analysis. Attestor administrators must grant this service account the IAM role needed to read attestations from the note_reference in Container Analysis (containeranalysis.notes.occurrences.viewer). This email address is fixed for the lifetime of the Attestor, but callers should not make any other assumptions about the service account email; future versions may use an email based on a different naming pattern.

note_reference str

The Drydock resource name of a ATTESTATION_AUTHORITY Note, created by the user, in the format: projects/*/notes/* (or the legacy providers/*/notes/*). This field may not be updated. An attestation by this attestor is stored as a Drydock ATTESTATION_AUTHORITY Occurrence that names a container image and that links to this Note. Drydock is an external dependency.

public_keys Sequence[AttestorPublicKeyResponse]

Optional. Public keys that verify attestations signed by this attestor. This field may be updated. If this field is non-empty, one of the specified public keys must verify that an attestation was signed by this attestor for the image specified in the admission request. If this field is empty, this attestor always returns that no valid attestations exist.

delegationServiceAccountEmail String

This field will contain the service account email address that this Attestor will use as the principal when querying Container Analysis. Attestor administrators must grant this service account the IAM role needed to read attestations from the note_reference in Container Analysis (containeranalysis.notes.occurrences.viewer). This email address is fixed for the lifetime of the Attestor, but callers should not make any other assumptions about the service account email; future versions may use an email based on a different naming pattern.

noteReference String

The Drydock resource name of a ATTESTATION_AUTHORITY Note, created by the user, in the format: projects/*/notes/* (or the legacy providers/*/notes/*). This field may not be updated. An attestation by this attestor is stored as a Drydock ATTESTATION_AUTHORITY Occurrence that names a container image and that links to this Note. Drydock is an external dependency.

publicKeys List<Property Map>

Optional. Public keys that verify attestations signed by this attestor. This field may be updated. If this field is non-empty, one of the specified public keys must verify that an attestation was signed by this attestor for the image specified in the admission request. If this field is empty, this attestor always returns that no valid attestations exist.

Package Details

Repository
Google Cloud Native pulumi/pulumi-google-native
License
Apache-2.0