IngressFrom

import type { IngressFrom } from "https://googleapis.deno.dev/v1/accesscontextmanager:v1.ts";

Defines the conditions under which an IngressPolicy matches a request. Conditions are based on information about the source of the request. The request must satisfy what is defined in sources AND identity related fields in order to match.

interface IngressFrom {

identities?: string[];

identityType?:

| "IDENTITY_TYPE_UNSPECIFIED"

| "ANY_IDENTITY"

| "ANY_USER_ACCOUNT"

| "ANY_SERVICE_ACCOUNT";

sources?: IngressSource[];

}

§Properties

identities?: string[]

[src]

A list of identities that are allowed access through [IngressPolicy]. Identities can be an individual user, service account, Google group, or third-party identity. For third-party identity, only single identities are supported and other identity types are not supported. The v1 identities that have the prefix user, group, serviceAccount, and principal in https://cloud.google.com/iam/docs/principal-identifiers#v1 are supported.

identityType?: "IDENTITY_TYPE_UNSPECIFIED" | "ANY_IDENTITY" | "ANY_USER_ACCOUNT" | "ANY_SERVICE_ACCOUNT"

[src]

Specifies the type of identities that are allowed access from outside the perimeter. If left unspecified, then members of identities field will be allowed access.

sources?: IngressSource[]

[src]

Sources that this IngressPolicy authorizes access from.