Class: Google::Apis::NetworksecurityV1beta1::AuthzPolicyCustomProvider

Inherits:
Object
  • Object
show all
Includes:
Core::Hashable, Core::JsonObjectSupport
Defined in:
lib/google/apis/networksecurity_v1beta1/classes.rb,
lib/google/apis/networksecurity_v1beta1/representations.rb,
lib/google/apis/networksecurity_v1beta1/representations.rb

Overview

Allows delegating authorization decisions to Cloud IAP or to Service Extensions.

Instance Attribute Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(**args) ⇒ AuthzPolicyCustomProvider

Returns a new instance of AuthzPolicyCustomProvider.



799
800
801
 
# File 'lib/google/apis/networksecurity_v1beta1/classes.rb', line 799

def initialize(**args)
   update!(**args)
end

Instance Attribute Details

#authz_extension ⇒ Google::Apis::NetworksecurityV1beta1::AuthzPolicyCustomProviderAuthzExtension

Optional. Delegate authorization decision to user authored extension. Only one of cloudIap or authzExtension can be specified. Corresponds to the JSON property authzExtension

Returns:



788
789
790
 
# File 'lib/google/apis/networksecurity_v1beta1/classes.rb', line 788

def authz_extension
  @authz_extension
end

#cloud_iap ⇒ Google::Apis::NetworksecurityV1beta1::AuthzPolicyCustomProviderCloudIap

Optional. Delegates authorization decisions to Cloud IAP. Applicable only for managed load balancers. Enabling Cloud IAP at the AuthzPolicy level is not compatible with Cloud IAP settings in the BackendService. Enabling IAP in both places will result in request failure. Ensure that IAP is enabled in either the AuthzPolicy or the BackendService but not in both places. Corresponds to the JSON property cloudIap

Returns:



797
798
799
 
# File 'lib/google/apis/networksecurity_v1beta1/classes.rb', line 797

def cloud_iap
  @cloud_iap
end

Instance Method Details

#update!(**args) ⇒ Object

Update properties of this object



804
805
806
807
 
# File 'lib/google/apis/networksecurity_v1beta1/classes.rb', line 804

def update!(**args)
  @authz_extension = args[:authz_extension] if args.key?(:authz_extension)
  @cloud_iap = args[:cloud_iap] if args.key?(:cloud_iap)
end