Class: Google::Apis::NetworksecurityV1beta1::AuthzPolicyCustomProvider

Inherits:
Object
  • Object
show all
Includes:
Core::Hashable, Core::JsonObjectSupport
Defined in:
lib/google/apis/networksecurity_v1beta1/classes.rb,
lib/google/apis/networksecurity_v1beta1/representations.rb,
lib/google/apis/networksecurity_v1beta1/representations.rb

Overview

Allows delegating authorization decisions to Cloud IAP or to Service Extensions.

Instance Attribute Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(**args) ⇒ AuthzPolicyCustomProvider

Returns a new instance of AuthzPolicyCustomProvider.



719
720
721
 
# File 'lib/google/apis/networksecurity_v1beta1/classes.rb', line 719

def initialize(**args)
   update!(**args)
end

Instance Attribute Details

#authz_extension ⇒ Google::Apis::NetworksecurityV1beta1::AuthzPolicyCustomProviderAuthzExtension

Optional. Delegate authorization decision to user authored extension. Only one of cloudIap or authzExtension can be specified. Corresponds to the JSON property authzExtension

Returns:



708
709
710
 
# File 'lib/google/apis/networksecurity_v1beta1/classes.rb', line 708

def authz_extension
  @authz_extension
end

#cloud_iap ⇒ Google::Apis::NetworksecurityV1beta1::AuthzPolicyCustomProviderCloudIap

Optional. Delegates authorization decisions to Cloud IAP. Applicable only for managed load balancers. Enabling Cloud IAP at the AuthzPolicy level is not compatible with Cloud IAP settings in the BackendService. Enabling IAP in both places will result in request failure. Ensure that IAP is enabled in either the AuthzPolicy or the BackendService but not in both places. Corresponds to the JSON property cloudIap

Returns:



717
718
719
 
# File 'lib/google/apis/networksecurity_v1beta1/classes.rb', line 717

def cloud_iap
  @cloud_iap
end

Instance Method Details

#update!(**args) ⇒ Object

Update properties of this object



724
725
726
727
 
# File 'lib/google/apis/networksecurity_v1beta1/classes.rb', line 724

def update!(**args)
  @authz_extension = args[:authz_extension] if args.key?(:authz_extension)
  @cloud_iap = args[:cloud_iap] if args.key?(:cloud_iap)
end