Configuration for Policy Controller

Attributes

• auditIntervalSeconds (type: String.t, default: nil) - Sets the interval for Policy Controller Audit Scans (in seconds). When set to 0, this disables audit functionality altogether.
• constraintViolationLimit (type: String.t, default: nil) - The maximum number of audit violations to be stored in a constraint. If not set, the internal default (currently 20) will be used.
• deploymentConfigs (type: %{optional(String.t) => GoogleApi.GKEHub.V1.Model.PolicyControllerPolicyControllerDeploymentConfig.t}, default: nil) - Map of deployment configs to deployments ("admission", "audit", "mutation').
• exemptableNamespaces (type: list(String.t), default: nil) - The set of namespaces that are excluded from Policy Controller checks. Namespaces do not need to currently exist on the cluster.
• installSpec (type: String.t, default: nil) - The install_spec represents the intended state specified by the latest request that mutated install_spec in the feature spec, not the lifecycle state of the feature observed by the Hub feature controller that is reported in the feature state.
• logDeniesEnabled (type: boolean(), default: nil) - Logs all denies and dry run failures.
• monitoring (type: GoogleApi.GKEHub.V1.Model.PolicyControllerMonitoringConfig.t, default: nil) - Monitoring specifies the configuration of monitoring.
• mutationEnabled (type: boolean(), default: nil) - Enables the ability to mutate resources using Policy Controller.
• policyContent (type: GoogleApi.GKEHub.V1.Model.PolicyControllerPolicyContentSpec.t, default: nil) - Specifies the desired policy content on the cluster
• referentialRulesEnabled (type: boolean(), default: nil) - Enables the ability to use Constraint Templates that reference to objects other than the object currently being evaluated.