Class: Google::Apis::NetworksecurityV1beta1::AuthzPolicyCustomProvider

Inherits:
Object
  • Object
show all
Includes:
Core::Hashable, Core::JsonObjectSupport
Defined in:
lib/google/apis/networksecurity_v1beta1/classes.rb,
lib/google/apis/networksecurity_v1beta1/representations.rb,
lib/google/apis/networksecurity_v1beta1/representations.rb

Overview

Allows delegating authorization decisions to Cloud IAP or to Service Extensions.

Instance Attribute Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(**args) ⇒ AuthzPolicyCustomProvider

Returns a new instance of AuthzPolicyCustomProvider.



819
820
821
 
# File 'lib/google/apis/networksecurity_v1beta1/classes.rb', line 819

def initialize(**args)
   update!(**args)
end

Instance Attribute Details

#authz_extension ⇒ Google::Apis::NetworksecurityV1beta1::AuthzPolicyCustomProviderAuthzExtension

Optional. Delegate authorization decision to user authored extension. Only one of cloudIap or authzExtension can be specified. Corresponds to the JSON property authzExtension

Returns:



808
809
810
 
# File 'lib/google/apis/networksecurity_v1beta1/classes.rb', line 808

def authz_extension
  @authz_extension
end

#cloud_iap ⇒ Google::Apis::NetworksecurityV1beta1::AuthzPolicyCustomProviderCloudIap

Optional. Delegates authorization decisions to Cloud IAP. Applicable only for managed load balancers. Enabling Cloud IAP at the AuthzPolicy level is not compatible with Cloud IAP settings in the BackendService. Enabling IAP in both places will result in request failure. Ensure that IAP is enabled in either the AuthzPolicy or the BackendService but not in both places. Corresponds to the JSON property cloudIap

Returns:



817
818
819
 
# File 'lib/google/apis/networksecurity_v1beta1/classes.rb', line 817

def cloud_iap
  @cloud_iap
end

Instance Method Details

#update!(**args) ⇒ Object

Update properties of this object



824
825
826
827
 
# File 'lib/google/apis/networksecurity_v1beta1/classes.rb', line 824

def update!(**args)
  @authz_extension = args[:authz_extension] if args.key?(:authz_extension)
  @cloud_iap = args[:cloud_iap] if args.key?(:cloud_iap)
end