attestors

Creates, updates, deletes, gets or lists a attestors resource.

Overview

Name	attestors
Type	Resource
Id	google.binaryauthorization.attestors

Fields

Name	Datatype	Description
name	string	Required. The resource name, in the format: projects/*/attestors/*. This field may not be updated.
description	string	Optional. A descriptive comment. This field may be updated. The field may be displayed in chooser dialogs.
etag	string	Optional. A checksum, returned by the server, that can be sent on update requests to ensure the attestor has an up-to-date value before attempting to update it. See https://google.aip.dev/154.
updateTime	string	Output only. Time when the attestor was last updated.
userOwnedGrafeasNote	object	An user owned Grafeas note references a Grafeas Attestation.Authority Note created by the user.

Methods

Name	Accessible by	Required Params	Description
get	SELECT	attestorsId, projectsId	Gets an attestor. Returns NOT_FOUND if the attestor does not exist.
list	SELECT	projectsId	Lists attestors. Returns INVALID_ARGUMENT if the project does not exist.
create	INSERT	projectsId	Creates an attestor, and returns a copy of the new attestor. Returns NOT_FOUND if the project does not exist, INVALID_ARGUMENT if the request is malformed, ALREADY_EXISTS if the attestor already exists.
delete	DELETE	attestorsId, projectsId	Deletes an attestor. Returns NOT_FOUND if the attestor does not exist.
update	REPLACE	attestorsId, projectsId	Updates an attestor. Returns NOT_FOUND if the attestor does not exist.
validate_attestation_occurrence	EXEC	attestorsId, projectsId	Returns whether the given Attestation for the given image URI was signed by the given Attestor

SELECT examples

Lists attestors. Returns INVALID_ARGUMENT if the project does not exist.

SELECT
name,
description,
etag,
updateTime,
userOwnedGrafeasNote
FROM google.binaryauthorization.attestors
WHERE projectsId = '{{ projectsId }}';

INSERT example

Use the following StackQL query and manifest file to create a new attestors resource.

All Properties

/*+ create */
INSERT INTO google.binaryauthorization.attestors (
projectsId,
name,
description,
userOwnedGrafeasNote,
etag
)
SELECT 
'{{ projectsId }}',
'{{ name }}',
'{{ description }}',
'{{ userOwnedGrafeasNote }}',
'{{ etag }}'
;

Manifest

- name: your_resource_model_name
  props:
    - name: name
      value: string
    - name: description
      value: string
    - name: userOwnedGrafeasNote
      value:
        - name: noteReference
          value: string
        - name: publicKeys
          value:
            - - name: comment
                value: string
              - name: id
                value: string
              - name: asciiArmoredPgpPublicKey
                value: string
              - name: pkixPublicKey
                value:
                  - name: publicKeyPem
                    value: string
                  - name: signatureAlgorithm
                    value: string
                  - name: keyId
                    value: string
        - name: delegationServiceAccountEmail
          value: string
    - name: updateTime
      value: string
    - name: etag
      value: string

REPLACE example

Replaces all fields in the specified attestors resource.

/*+ update */
REPLACE google.binaryauthorization.attestors
SET 
name = '{{ name }}',
description = '{{ description }}',
userOwnedGrafeasNote = '{{ userOwnedGrafeasNote }}',
etag = '{{ etag }}'
WHERE 
attestorsId = '{{ attestorsId }}'
AND projectsId = '{{ projectsId }}';

DELETE example

Deletes the specified attestors resource.

/*+ delete */
DELETE FROM google.binaryauthorization.attestors
WHERE attestorsId = '{{ attestorsId }}'
AND projectsId = '{{ projectsId }}';