@@ -1201,40 +1201,6 @@ def update!(**args)
12011201 end
12021202 end
12031203
1204- # YAML-based rule that uses CEL, which supports the declaration of variables and
1205- # a filtering predicate. A vulnerable resource is emitted if the evaluation is
1206- # false. Given: 1) the resource types as: - resource_types: "compute.googleapis.
1207- # com/Instance" - resource_types: "compute.googleapis.com/Firewall" 2) the CEL
1208- # policy spec as: name: bad_instance resource_filters: - name: instance
1209- # resource_type: compute.googleapis.com/Instance filter: > instance.status == '
1210- # RUNNING' && 'public' in instance.tags.items - name: firewall resource_type:
1211- # compute.googleapis.com/Firewall filter: > firewall.direction == 'INGRESS' && !
1212- # firewall.disabled && firewall.allowed.exists(rule, rule.IPProtocol.upperAscii()
1213- # in ['TCP', 'ALL'] && rule.ports.exists(port, network.portsInRange(port, '11-
1214- # 256'))) rule: match: - predicate: > instance.networkInterfaces.exists(net,
1215- # firewall.network == net.network) output: > `'message': 'Compute instance with
1216- # publicly accessible ports', 'instance': instance.name` Users are able to join
1217- # resource types together using the exact format as Kubernetes Validating
1218- # Admission policies.
1219- class CelPolicySpec
1220- include Google ::Apis ::Core ::Hashable
1221-
1222- # The CEL policy to evaluate to produce findings. A finding is generated when
1223- # the policy validation evaluates to false.
1224- # Corresponds to the JSON property `spec`
1225- # @return [String]
1226- attr_accessor :spec
1227-
1228- def initialize ( **args )
1229- update! ( **args )
1230- end
1231-
1232- # Update properties of this object
1233- def update! ( **args )
1234- @spec = args [ :spec ] if args . key? ( :spec )
1235- end
1236- end
1237-
12381204 # Fields related to Google Cloud Armor findings.
12391205 class CloudArmor
12401206 include Google ::Apis ::Core ::Hashable
@@ -3135,25 +3101,6 @@ def update!(**args)
31353101 class GoogleCloudSecuritycenterV1CustomConfig
31363102 include Google ::Apis ::Core ::Hashable
31373103
3138- # YAML-based rule that uses CEL, which supports the declaration of variables and
3139- # a filtering predicate. A vulnerable resource is emitted if the evaluation is
3140- # false. Given: 1) the resource types as: - resource_types: "compute.googleapis.
3141- # com/Instance" - resource_types: "compute.googleapis.com/Firewall" 2) the CEL
3142- # policy spec as: name: bad_instance resource_filters: - name: instance
3143- # resource_type: compute.googleapis.com/Instance filter: > instance.status == '
3144- # RUNNING' && 'public' in instance.tags.items - name: firewall resource_type:
3145- # compute.googleapis.com/Firewall filter: > firewall.direction == 'INGRESS' && !
3146- # firewall.disabled && firewall.allowed.exists(rule, rule.IPProtocol.upperAscii()
3147- # in ['TCP', 'ALL'] && rule.ports.exists(port, network.portsInRange(port, '11-
3148- # 256'))) rule: match: - predicate: > instance.networkInterfaces.exists(net,
3149- # firewall.network == net.network) output: > `'message': 'Compute instance with
3150- # publicly accessible ports', 'instance': instance.name` Users are able to join
3151- # resource types together using the exact format as Kubernetes Validating
3152- # Admission policies.
3153- # Corresponds to the JSON property `celPolicy`
3154- # @return [Google::Apis::SecuritycenterV1::CelPolicySpec]
3155- attr_accessor :cel_policy
3156-
31573104 # A set of optional name-value pairs that define custom source properties to
31583105 # return with each finding that is generated by the custom module. The custom
31593106 # source properties that are defined here are included in the finding JSON under
@@ -3212,7 +3159,6 @@ def initialize(**args)
32123159
32133160 # Update properties of this object
32143161 def update! ( **args )
3215- @cel_policy = args [ :cel_policy ] if args . key? ( :cel_policy )
32163162 @custom_output = args [ :custom_output ] if args . key? ( :custom_output )
32173163 @description = args [ :description ] if args . key? ( :description )
32183164 @predicate = args [ :predicate ] if args . key? ( :predicate )
@@ -10669,7 +10615,8 @@ def update!(**args)
1066910615 class SetFindingStateRequest
1067010616 include Google ::Apis ::Core ::Hashable
1067110617
10672- # Required. The time at which the updated state takes effect.
10618+ # Optional. The time at which the updated state takes effect. If unset, defaults
10619+ # to the request time.
1067310620 # Corresponds to the JSON property `startTime`
1067410621 # @return [String]
1067510622 attr_accessor :start_time
0 commit comments