managed_identities_attestation_rules

Creates, updates, deletes, gets or lists a managed_identities_attestation_rules resource.

Overview

Name	managed_identities_attestation_rules
Type	Resource
Id	google.iam.managed_identities_attestation_rules

Fields

The following fields are returned by SELECT queries:

list_attestation_rules

Name	Datatype	Description
googleCloudResource	string	Optional. A single workload operating on Google Cloud. For example: //compute.googleapis.com/projects/123/uid/zones/us-central1-a/instances/12345.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
list_attestation_rules	select	projectsId, locationsId, workloadIdentityPoolsId, namespacesId, managedIdentitiesId	filter, pageSize, pageToken	List all AttestationRule on a WorkloadIdentityPoolManagedIdentity.
add_attestation_rule	insert	projectsId, locationsId, workloadIdentityPoolsId, namespacesId, managedIdentitiesId		Add an AttestationRule on a WorkloadIdentityPoolManagedIdentity. The total attestation rules after addition must not exceed 50.
remove_attestation_rule	delete	projectsId, locationsId, workloadIdentityPoolsId, namespacesId, managedIdentitiesId		Remove an AttestationRule on a WorkloadIdentityPoolManagedIdentity.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
locationsId	string
managedIdentitiesId	string
namespacesId	string
projectsId	string
workloadIdentityPoolsId	string
filter	string
pageSize	integer (int32)
pageToken	string

SELECT examples

list_attestation_rules

List all AttestationRule on a WorkloadIdentityPoolManagedIdentity.

SELECT
googleCloudResource
FROM google.iam.managed_identities_attestation_rules
WHERE projectsId = '{{ projectsId }}' -- required
AND locationsId = '{{ locationsId }}' -- required
AND workloadIdentityPoolsId = '{{ workloadIdentityPoolsId }}' -- required
AND namespacesId = '{{ namespacesId }}' -- required
AND managedIdentitiesId = '{{ managedIdentitiesId }}' -- required
AND filter = '{{ filter }}'
AND pageSize = '{{ pageSize }}'
AND pageToken = '{{ pageToken }}'
;

INSERT examples

add_attestation_rule

Add an AttestationRule on a WorkloadIdentityPoolManagedIdentity. The total attestation rules after addition must not exceed 50.

INSERT INTO google.iam.managed_identities_attestation_rules (
data__attestationRule,
projectsId,
locationsId,
workloadIdentityPoolsId,
namespacesId,
managedIdentitiesId
)
SELECT 
'{{ attestationRule }}',
'{{ projectsId }}',
'{{ locationsId }}',
'{{ workloadIdentityPoolsId }}',
'{{ namespacesId }}',
'{{ managedIdentitiesId }}'
RETURNING
name,
done,
error,
metadata,
response
;

Manifest

# Description fields are for documentation purposes
- name: managed_identities_attestation_rules
props:
  - name: projectsId
    value: "{{ projectsId }}"
    description: Required parameter for the managed_identities_attestation_rules resource.
  - name: locationsId
    value: "{{ locationsId }}"
    description: Required parameter for the managed_identities_attestation_rules resource.
  - name: workloadIdentityPoolsId
    value: "{{ workloadIdentityPoolsId }}"
    description: Required parameter for the managed_identities_attestation_rules resource.
  - name: namespacesId
    value: "{{ namespacesId }}"
    description: Required parameter for the managed_identities_attestation_rules resource.
  - name: managedIdentitiesId
    value: "{{ managedIdentitiesId }}"
    description: Required parameter for the managed_identities_attestation_rules resource.
  - name: attestationRule
    description: |
      Required. The attestation rule to be added.
    value:
      googleCloudResource: "{{ googleCloudResource }}"

DELETE examples

remove_attestation_rule

Remove an AttestationRule on a WorkloadIdentityPoolManagedIdentity.

DELETE FROM google.iam.managed_identities_attestation_rules
WHERE projectsId = '{{ projectsId }}' --required
AND locationsId = '{{ locationsId }}' --required
AND workloadIdentityPoolsId = '{{ workloadIdentityPoolsId }}' --required
AND namespacesId = '{{ namespacesId }}' --required
AND managedIdentitiesId = '{{ managedIdentitiesId }}' --required
;