workload_identity_pools_attestation_rule

Creates, updates, deletes, gets or lists a workload_identity_pools_attestation_rule resource.

Overview

Name	workload_identity_pools_attestation_rule
Type	Resource
Id	google.iam.workload_identity_pools_attestation_rule

Fields

The following fields are returned by SELECT queries:

SELECT not supported for this resource, use SHOW METHODS to view available operations for the resource.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
add_attestation_rule	insert	projectsId, locationsId, workloadIdentityPoolsId		Add an AttestationRule on a WorkloadIdentityPoolManagedIdentity. The total attestation rules after addition must not exceed 50.
remove_attestation_rule	delete	projectsId, locationsId, workloadIdentityPoolsId		Remove an AttestationRule on a WorkloadIdentityPoolManagedIdentity.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
locationsId	string
projectsId	string
workloadIdentityPoolsId	string

INSERT examples

add_attestation_rule

Add an AttestationRule on a WorkloadIdentityPoolManagedIdentity. The total attestation rules after addition must not exceed 50.

INSERT INTO google.iam.workload_identity_pools_attestation_rule (
data__attestationRule,
projectsId,
locationsId,
workloadIdentityPoolsId
)
SELECT 
'{{ attestationRule }}',
'{{ projectsId }}',
'{{ locationsId }}',
'{{ workloadIdentityPoolsId }}'
RETURNING
name,
done,
error,
metadata,
response
;

Manifest

# Description fields are for documentation purposes
- name: workload_identity_pools_attestation_rule
props:
  - name: projectsId
    value: "{{ projectsId }}"
    description: Required parameter for the workload_identity_pools_attestation_rule resource.
  - name: locationsId
    value: "{{ locationsId }}"
    description: Required parameter for the workload_identity_pools_attestation_rule resource.
  - name: workloadIdentityPoolsId
    value: "{{ workloadIdentityPoolsId }}"
    description: Required parameter for the workload_identity_pools_attestation_rule resource.
  - name: attestationRule
    description: |
      Defines which workloads can receive an identity within a pool. When an AttestationRule is defined under a managed identity, matching workloads may receive that identity.
    value:
      googleCloudResource: "{{ googleCloudResource }}"

DELETE examples

remove_attestation_rule

Remove an AttestationRule on a WorkloadIdentityPoolManagedIdentity.

DELETE FROM google.iam.workload_identity_pools_attestation_rule
WHERE projectsId = '{{ projectsId }}' --required
AND locationsId = '{{ locationsId }}' --required
AND workloadIdentityPoolsId = '{{ workloadIdentityPoolsId }}' --required
;