Skip to content
This repository has been archived by the owner on Nov 29, 2023. It is now read-only.

Commit

Permalink
feat: add SecurityPostureConfig Enterprise vuln mode to allow custome…
Browse files Browse the repository at this point in the history
…rs to enable Advanced Vulnerability Scanning for their clusters (#413)

* feat: add SecurityPostureConfig Enterprise vuln mode to allow customers to enable Advanced Vulnerability Scanning for their clusters

---
docs: deprecate ProtectConfig fields in alpha and beta, with SecurityPostureConfig as the intended replacement
PiperOrigin-RevId: 565696375

Source-Link: googleapis/googleapis@304bf75

Source-Link: googleapis/googleapis-gen@e42f451
Copy-Tag: eyJwIjoiLmdpdGh1Yi8uT3dsQm90LnlhbWwiLCJoIjoiZTQyZjQ1MTI5YmNkOTVhNDhmOWY0NzgxYjFlNjRjYWIyZjZjYWE3YiJ9

* 🦉 Updates from OwlBot post-processor

See https://github.com/googleapis/repo-automation-bots/blob/main/packages/owl-bot/README.md

---------

Co-authored-by: Owl Bot <gcf-owl-bot[bot]@users.noreply.github.com>
  • Loading branch information
gcf-owl-bot[bot] and gcf-owl-bot[bot] committed Sep 18, 2023
1 parent 96ddca6 commit d9750ff
Show file tree
Hide file tree
Showing 3 changed files with 21 additions and 6 deletions.
23 changes: 19 additions & 4 deletions google/cloud/container_v1beta1/types/cluster_service.py
Expand Up @@ -696,6 +696,11 @@ class NodeConfig(proto.Message):
HostMaintenancePolicy contains the desired
maintenance policy for the Google Compute Engine
hosts.
enable_confidential_storage (bool):
Optional. Enable confidential storage on Hyperdisk.
boot_disk_kms_key is required when
enable_confidential_storage is true. This is only available
for private preview.
"""

machine_type: str = proto.Field(
Expand Down Expand Up @@ -866,6 +871,10 @@ class NodeConfig(proto.Message):
number=44,
message="HostMaintenancePolicy",
)
enable_confidential_storage: bool = proto.Field(
proto.BOOL,
number=46,
)


class AdvancedMachineFeatures(proto.Message):
Expand Down Expand Up @@ -3046,8 +3055,9 @@ class Cluster(proto.Message):
clusters and node auto-provisioning enabled
clusters.
protect_config (google.cloud.container_v1beta1.types.ProtectConfig):
Enable/Disable Protect API features for the
cluster.
Deprecated: Use SecurityPostureConfig
instead. Enable/Disable Protect API features for
the cluster.
This field is a member of `oneof`_ ``_protect_config``.
etag (str):
Expand Down Expand Up @@ -3615,10 +3625,14 @@ class VulnerabilityMode(proto.Enum):
VULNERABILITY_BASIC (2):
Applies basic vulnerability scanning on the
cluster.
VULNERABILITY_ENTERPRISE (3):
Applies the Security Posture's vulnerability
on cluster Enterprise level features.
"""
VULNERABILITY_MODE_UNSPECIFIED = 0
VULNERABILITY_DISABLED = 1
VULNERABILITY_BASIC = 2
VULNERABILITY_ENTERPRISE = 3

mode: Mode = proto.Field(
proto.ENUM,
Expand Down Expand Up @@ -3895,8 +3909,9 @@ class ClusterUpdate(proto.Message):
clusters and node auto-provisioning enabled
clusters.
desired_protect_config (google.cloud.container_v1beta1.types.ProtectConfig):
Enable/Disable Protect API features for the
cluster.
Deprecated: Use DesiredSecurityPostureConfig
instead. Enable/Disable Protect API features for
the cluster.
This field is a member of `oneof`_ ``_desired_protect_config``.
desired_gateway_api_config (google.cloud.container_v1beta1.types.GatewayAPIConfig):
Expand Down
Expand Up @@ -8,7 +8,7 @@
],
"language": "PYTHON",
"name": "google-cloud-container",
"version": "2.31.0"
"version": "0.1.0"
},
"snippets": [
{
Expand Down
Expand Up @@ -8,7 +8,7 @@
],
"language": "PYTHON",
"name": "google-cloud-container",
"version": "2.31.0"
"version": "0.1.0"
},
"snippets": [
{
Expand Down

0 comments on commit d9750ff

Please sign in to comment.