IngressFrom
import type { IngressFrom } from "https://googleapis.deno.dev/v1/accesscontextmanager:v1.ts";
Defines the conditions under which an IngressPolicy matches a request.
Conditions are based on information about the source of the request. The
request must satisfy what is defined in sources
AND identity related fields
in order to match.
§Properties
A list of identities that are allowed access through [IngressPolicy].
Identities can be an individual user, service account, Google group, or
third-party identity. The v1
identities that have the prefix user
,
group
, serviceAccount
, principal
, and principalSet
in
https://cloud.google.com/iam/docs/principal-identifiers#v1 are supported.
Specifies the type of identities that are allowed access from outside the
perimeter. If left unspecified, then members of identities
field will be
allowed access.
Sources that this IngressPolicy authorizes access from.