Package com.google.cloud.binaryauthorization.v1beta1

Class Policy.Builder

  • All Implemented Interfaces:
    PolicyOrBuilder, com.google.protobuf.Message.Builder, com.google.protobuf.MessageLite.Builder, com.google.protobuf.MessageLiteOrBuilder, com.google.protobuf.MessageOrBuilder, Cloneable
    Enclosing class:
    Policy
    public static final class Policy.Builder
extends com.google.protobuf.GeneratedMessageV3.Builder<Policy.Builder>
implements PolicyOrBuilder
     A [policy][google.cloud.binaryauthorization.v1beta1.Policy] for Binary Authorization.
    Protobuf type google.cloud.binaryauthorization.v1beta1.Policy

    • Method Detail

      • getDescriptor

        public static final com.google.protobuf.Descriptors.Descriptor getDescriptor()

      • internalGetMapField

        protected com.google.protobuf.MapField internalGetMapField​(int number)
        Overrides:
        internalGetMapField in class com.google.protobuf.GeneratedMessageV3.Builder<Policy.Builder>

      • internalGetMutableMapField

        protected com.google.protobuf.MapField internalGetMutableMapField​(int number)
        Overrides:
        internalGetMutableMapField in class com.google.protobuf.GeneratedMessageV3.Builder<Policy.Builder>

      • internalGetFieldAccessorTable

        protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()
        Specified by:
        internalGetFieldAccessorTable in class com.google.protobuf.GeneratedMessageV3.Builder<Policy.Builder>

      • clear

        public Policy.Builder clear()
        Specified by:
        clear in interface com.google.protobuf.Message.Builder
        Specified by:
        clear in interface com.google.protobuf.MessageLite.Builder
        Overrides:
        clear in class com.google.protobuf.GeneratedMessageV3.Builder<Policy.Builder>

      • getDescriptorForType

        public com.google.protobuf.Descriptors.Descriptor getDescriptorForType()
        Specified by:
        getDescriptorForType in interface com.google.protobuf.Message.Builder
        Specified by:
        getDescriptorForType in interface com.google.protobuf.MessageOrBuilder
        Overrides:
        getDescriptorForType in class com.google.protobuf.GeneratedMessageV3.Builder<Policy.Builder>

      • getDefaultInstanceForType

        public Policy getDefaultInstanceForType()
        Specified by:
        getDefaultInstanceForType in interface com.google.protobuf.MessageLiteOrBuilder
        Specified by:
        getDefaultInstanceForType in interface com.google.protobuf.MessageOrBuilder

      • build

        public Policy build()
        Specified by:
        build in interface com.google.protobuf.Message.Builder
        Specified by:
        build in interface com.google.protobuf.MessageLite.Builder

      • buildPartial

        public Policy buildPartial()
        Specified by:
        buildPartial in interface com.google.protobuf.Message.Builder
        Specified by:
        buildPartial in interface com.google.protobuf.MessageLite.Builder

      • clone

        public Policy.Builder clone()
        Specified by:
        clone in interface com.google.protobuf.Message.Builder
        Specified by:
        clone in interface com.google.protobuf.MessageLite.Builder
        Overrides:
        clone in class com.google.protobuf.GeneratedMessageV3.Builder<Policy.Builder>

      • setField

        public Policy.Builder setField​(com.google.protobuf.Descriptors.FieldDescriptor field,
                               Object value)
        Specified by:
        setField in interface com.google.protobuf.Message.Builder
        Overrides:
        setField in class com.google.protobuf.GeneratedMessageV3.Builder<Policy.Builder>

      • clearField

        public Policy.Builder clearField​(com.google.protobuf.Descriptors.FieldDescriptor field)
        Specified by:
        clearField in interface com.google.protobuf.Message.Builder
        Overrides:
        clearField in class com.google.protobuf.GeneratedMessageV3.Builder<Policy.Builder>

      • clearOneof

        public Policy.Builder clearOneof​(com.google.protobuf.Descriptors.OneofDescriptor oneof)
        Specified by:
        clearOneof in interface com.google.protobuf.Message.Builder
        Overrides:
        clearOneof in class com.google.protobuf.GeneratedMessageV3.Builder<Policy.Builder>

      • setRepeatedField

        public Policy.Builder setRepeatedField​(com.google.protobuf.Descriptors.FieldDescriptor field,
                                       int index,
                                       Object value)
        Specified by:
        setRepeatedField in interface com.google.protobuf.Message.Builder
        Overrides:
        setRepeatedField in class com.google.protobuf.GeneratedMessageV3.Builder<Policy.Builder>

      • addRepeatedField

        public Policy.Builder addRepeatedField​(com.google.protobuf.Descriptors.FieldDescriptor field,
                                       Object value)
        Specified by:
        addRepeatedField in interface com.google.protobuf.Message.Builder
        Overrides:
        addRepeatedField in class com.google.protobuf.GeneratedMessageV3.Builder<Policy.Builder>

      • mergeFrom

        public Policy.Builder mergeFrom​(com.google.protobuf.Message other)
        Specified by:
        mergeFrom in interface com.google.protobuf.Message.Builder
        Overrides:
        mergeFrom in class com.google.protobuf.AbstractMessage.Builder<Policy.Builder>

      • isInitialized

        public final boolean isInitialized()
        Specified by:
        isInitialized in interface com.google.protobuf.MessageLiteOrBuilder
        Overrides:
        isInitialized in class com.google.protobuf.GeneratedMessageV3.Builder<Policy.Builder>

      • mergeFrom

        public Policy.Builder mergeFrom​(com.google.protobuf.CodedInputStream input,
                                com.google.protobuf.ExtensionRegistryLite extensionRegistry)
                         throws IOException
        Specified by:
        mergeFrom in interface com.google.protobuf.Message.Builder
        Specified by:
        mergeFrom in interface com.google.protobuf.MessageLite.Builder
        Overrides:
        mergeFrom in class com.google.protobuf.AbstractMessage.Builder<Policy.Builder>
        Throws:
        IOException

      • getName

        public String getName()
         Output only. The resource name, in the format `projects/*/policy`. There is
 at most one policy per project.
        string name = 1 [(.google.api.field_behavior) = OUTPUT_ONLY];
        Specified by:
        getName in interface PolicyOrBuilder
        Returns:
        The name.

      • getNameBytes

        public com.google.protobuf.ByteString getNameBytes()
         Output only. The resource name, in the format `projects/*/policy`. There is
 at most one policy per project.
        string name = 1 [(.google.api.field_behavior) = OUTPUT_ONLY];
        Specified by:
        getNameBytes in interface PolicyOrBuilder
        Returns:
        The bytes for name.

      • setName

        public Policy.Builder setName​(String value)
         Output only. The resource name, in the format `projects/*/policy`. There is
 at most one policy per project.
        string name = 1 [(.google.api.field_behavior) = OUTPUT_ONLY];
        Parameters:
        value - The name to set.
        Returns:
        This builder for chaining.

      • clearName

        public Policy.Builder clearName()
         Output only. The resource name, in the format `projects/*/policy`. There is
 at most one policy per project.
        string name = 1 [(.google.api.field_behavior) = OUTPUT_ONLY];
        Returns:
        This builder for chaining.

      • setNameBytes

        public Policy.Builder setNameBytes​(com.google.protobuf.ByteString value)
         Output only. The resource name, in the format `projects/*/policy`. There is
 at most one policy per project.
        string name = 1 [(.google.api.field_behavior) = OUTPUT_ONLY];
        Parameters:
        value - The bytes for name to set.
        Returns:
        This builder for chaining.

      • getDescription

        public String getDescription()
         Optional. A descriptive comment.
        string description = 6 [(.google.api.field_behavior) = OPTIONAL];
        Specified by:
        getDescription in interface PolicyOrBuilder
        Returns:
        The description.

      • getDescriptionBytes

        public com.google.protobuf.ByteString getDescriptionBytes()
         Optional. A descriptive comment.
        string description = 6 [(.google.api.field_behavior) = OPTIONAL];
        Specified by:
        getDescriptionBytes in interface PolicyOrBuilder
        Returns:
        The bytes for description.

      • setDescription

        public Policy.Builder setDescription​(String value)
         Optional. A descriptive comment.
        string description = 6 [(.google.api.field_behavior) = OPTIONAL];
        Parameters:
        value - The description to set.
        Returns:
        This builder for chaining.

      • clearDescription

        public Policy.Builder clearDescription()
         Optional. A descriptive comment.
        string description = 6 [(.google.api.field_behavior) = OPTIONAL];
        Returns:
        This builder for chaining.

      • setDescriptionBytes

        public Policy.Builder setDescriptionBytes​(com.google.protobuf.ByteString value)
         Optional. A descriptive comment.
        string description = 6 [(.google.api.field_behavior) = OPTIONAL];
        Parameters:
        value - The bytes for description to set.
        Returns:
        This builder for chaining.

      • getGlobalPolicyEvaluationModeValue

        public int getGlobalPolicyEvaluationModeValue()
         Optional. Controls the evaluation of a Google-maintained global admission
 policy for common system-level images. Images not covered by the global
 policy will be subject to the project admission policy. This setting
 has no effect when specified inside a global admission policy.
        .google.cloud.binaryauthorization.v1beta1.Policy.GlobalPolicyEvaluationMode global_policy_evaluation_mode = 7 [(.google.api.field_behavior) = OPTIONAL];
        Specified by:
        getGlobalPolicyEvaluationModeValue in interface PolicyOrBuilder
        Returns:
        The enum numeric value on the wire for globalPolicyEvaluationMode.

      • setGlobalPolicyEvaluationModeValue

        public Policy.Builder setGlobalPolicyEvaluationModeValue​(int value)
         Optional. Controls the evaluation of a Google-maintained global admission
 policy for common system-level images. Images not covered by the global
 policy will be subject to the project admission policy. This setting
 has no effect when specified inside a global admission policy.
        .google.cloud.binaryauthorization.v1beta1.Policy.GlobalPolicyEvaluationMode global_policy_evaluation_mode = 7 [(.google.api.field_behavior) = OPTIONAL];
        Parameters:
        value - The enum numeric value on the wire for globalPolicyEvaluationMode to set.
        Returns:
        This builder for chaining.

      • getGlobalPolicyEvaluationMode

        public Policy.GlobalPolicyEvaluationMode getGlobalPolicyEvaluationMode()
         Optional. Controls the evaluation of a Google-maintained global admission
 policy for common system-level images. Images not covered by the global
 policy will be subject to the project admission policy. This setting
 has no effect when specified inside a global admission policy.
        .google.cloud.binaryauthorization.v1beta1.Policy.GlobalPolicyEvaluationMode global_policy_evaluation_mode = 7 [(.google.api.field_behavior) = OPTIONAL];
        Specified by:
        getGlobalPolicyEvaluationMode in interface PolicyOrBuilder
        Returns:
        The globalPolicyEvaluationMode.

      • setGlobalPolicyEvaluationMode

        public Policy.Builder setGlobalPolicyEvaluationMode​(Policy.GlobalPolicyEvaluationMode value)
         Optional. Controls the evaluation of a Google-maintained global admission
 policy for common system-level images. Images not covered by the global
 policy will be subject to the project admission policy. This setting
 has no effect when specified inside a global admission policy.
        .google.cloud.binaryauthorization.v1beta1.Policy.GlobalPolicyEvaluationMode global_policy_evaluation_mode = 7 [(.google.api.field_behavior) = OPTIONAL];
        Parameters:
        value - The globalPolicyEvaluationMode to set.
        Returns:
        This builder for chaining.

      • clearGlobalPolicyEvaluationMode

        public Policy.Builder clearGlobalPolicyEvaluationMode()
         Optional. Controls the evaluation of a Google-maintained global admission
 policy for common system-level images. Images not covered by the global
 policy will be subject to the project admission policy. This setting
 has no effect when specified inside a global admission policy.
        .google.cloud.binaryauthorization.v1beta1.Policy.GlobalPolicyEvaluationMode global_policy_evaluation_mode = 7 [(.google.api.field_behavior) = OPTIONAL];
        Returns:
        This builder for chaining.

      • getAdmissionWhitelistPatternsList

        public List<AdmissionWhitelistPattern> getAdmissionWhitelistPatternsList()
         Optional. Admission policy allowlisting. A matching admission request will
 always be permitted. This feature is typically used to exclude Google or
 third-party infrastructure images from Binary Authorization policies.
        repeated .google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];
        Specified by:
        getAdmissionWhitelistPatternsList in interface PolicyOrBuilder

      • getAdmissionWhitelistPatternsCount

        public int getAdmissionWhitelistPatternsCount()
         Optional. Admission policy allowlisting. A matching admission request will
 always be permitted. This feature is typically used to exclude Google or
 third-party infrastructure images from Binary Authorization policies.
        repeated .google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];
        Specified by:
        getAdmissionWhitelistPatternsCount in interface PolicyOrBuilder

      • getAdmissionWhitelistPatterns

        public AdmissionWhitelistPattern getAdmissionWhitelistPatterns​(int index)
         Optional. Admission policy allowlisting. A matching admission request will
 always be permitted. This feature is typically used to exclude Google or
 third-party infrastructure images from Binary Authorization policies.
        repeated .google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];
        Specified by:
        getAdmissionWhitelistPatterns in interface PolicyOrBuilder

      • setAdmissionWhitelistPatterns

        public Policy.Builder setAdmissionWhitelistPatterns​(int index,
                                                    AdmissionWhitelistPattern value)
         Optional. Admission policy allowlisting. A matching admission request will
 always be permitted. This feature is typically used to exclude Google or
 third-party infrastructure images from Binary Authorization policies.
        repeated .google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];

      • setAdmissionWhitelistPatterns

        public Policy.Builder setAdmissionWhitelistPatterns​(int index,
                                                    AdmissionWhitelistPattern.Builder builderForValue)
         Optional. Admission policy allowlisting. A matching admission request will
 always be permitted. This feature is typically used to exclude Google or
 third-party infrastructure images from Binary Authorization policies.
        repeated .google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];

      • addAdmissionWhitelistPatterns

        public Policy.Builder addAdmissionWhitelistPatterns​(AdmissionWhitelistPattern value)
         Optional. Admission policy allowlisting. A matching admission request will
 always be permitted. This feature is typically used to exclude Google or
 third-party infrastructure images from Binary Authorization policies.
        repeated .google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];

      • addAdmissionWhitelistPatterns

        public Policy.Builder addAdmissionWhitelistPatterns​(int index,
                                                    AdmissionWhitelistPattern value)
         Optional. Admission policy allowlisting. A matching admission request will
 always be permitted. This feature is typically used to exclude Google or
 third-party infrastructure images from Binary Authorization policies.
        repeated .google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];

      • addAdmissionWhitelistPatterns

        public Policy.Builder addAdmissionWhitelistPatterns​(AdmissionWhitelistPattern.Builder builderForValue)
         Optional. Admission policy allowlisting. A matching admission request will
 always be permitted. This feature is typically used to exclude Google or
 third-party infrastructure images from Binary Authorization policies.
        repeated .google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];

      • addAdmissionWhitelistPatterns

        public Policy.Builder addAdmissionWhitelistPatterns​(int index,
                                                    AdmissionWhitelistPattern.Builder builderForValue)
         Optional. Admission policy allowlisting. A matching admission request will
 always be permitted. This feature is typically used to exclude Google or
 third-party infrastructure images from Binary Authorization policies.
        repeated .google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];

      • addAllAdmissionWhitelistPatterns

        public Policy.Builder addAllAdmissionWhitelistPatterns​(Iterable<? extends AdmissionWhitelistPattern> values)
         Optional. Admission policy allowlisting. A matching admission request will
 always be permitted. This feature is typically used to exclude Google or
 third-party infrastructure images from Binary Authorization policies.
        repeated .google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];

      • clearAdmissionWhitelistPatterns

        public Policy.Builder clearAdmissionWhitelistPatterns()
         Optional. Admission policy allowlisting. A matching admission request will
 always be permitted. This feature is typically used to exclude Google or
 third-party infrastructure images from Binary Authorization policies.
        repeated .google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];

      • removeAdmissionWhitelistPatterns

        public Policy.Builder removeAdmissionWhitelistPatterns​(int index)
         Optional. Admission policy allowlisting. A matching admission request will
 always be permitted. This feature is typically used to exclude Google or
 third-party infrastructure images from Binary Authorization policies.
        repeated .google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];

      • getAdmissionWhitelistPatternsBuilder

        public AdmissionWhitelistPattern.Builder getAdmissionWhitelistPatternsBuilder​(int index)
         Optional. Admission policy allowlisting. A matching admission request will
 always be permitted. This feature is typically used to exclude Google or
 third-party infrastructure images from Binary Authorization policies.
        repeated .google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];

      • getAdmissionWhitelistPatternsOrBuilder

        public AdmissionWhitelistPatternOrBuilder getAdmissionWhitelistPatternsOrBuilder​(int index)
         Optional. Admission policy allowlisting. A matching admission request will
 always be permitted. This feature is typically used to exclude Google or
 third-party infrastructure images from Binary Authorization policies.
        repeated .google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];
        Specified by:
        getAdmissionWhitelistPatternsOrBuilder in interface PolicyOrBuilder

      • getAdmissionWhitelistPatternsOrBuilderList

        public List<? extends AdmissionWhitelistPatternOrBuilder> getAdmissionWhitelistPatternsOrBuilderList()
         Optional. Admission policy allowlisting. A matching admission request will
 always be permitted. This feature is typically used to exclude Google or
 third-party infrastructure images from Binary Authorization policies.
        repeated .google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];
        Specified by:
        getAdmissionWhitelistPatternsOrBuilderList in interface PolicyOrBuilder

      • addAdmissionWhitelistPatternsBuilder

        public AdmissionWhitelistPattern.Builder addAdmissionWhitelistPatternsBuilder()
         Optional. Admission policy allowlisting. A matching admission request will
 always be permitted. This feature is typically used to exclude Google or
 third-party infrastructure images from Binary Authorization policies.
        repeated .google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];

      • addAdmissionWhitelistPatternsBuilder

        public AdmissionWhitelistPattern.Builder addAdmissionWhitelistPatternsBuilder​(int index)
         Optional. Admission policy allowlisting. A matching admission request will
 always be permitted. This feature is typically used to exclude Google or
 third-party infrastructure images from Binary Authorization policies.
        repeated .google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];

      • getAdmissionWhitelistPatternsBuilderList

        public List<AdmissionWhitelistPattern.Builder> getAdmissionWhitelistPatternsBuilderList()
         Optional. Admission policy allowlisting. A matching admission request will
 always be permitted. This feature is typically used to exclude Google or
 third-party infrastructure images from Binary Authorization policies.
        repeated .google.cloud.binaryauthorization.v1beta1.AdmissionWhitelistPattern admission_whitelist_patterns = 2 [(.google.api.field_behavior) = OPTIONAL];

      • getClusterAdmissionRulesCount

        public int getClusterAdmissionRulesCount()
        Description copied from interface: PolicyOrBuilder
         Optional. Per-cluster admission rules. Cluster spec format:
 `location.clusterId`. There can be at most one admission rule per cluster
 spec.
 A `location` is either a compute zone (e.g. us-central1-a) or a region
 (e.g. us-central1).
 For `clusterId` syntax restrictions see
 https://cloud.google.com/container-engine/reference/rest/v1/projects.zones.clusters.
        map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> cluster_admission_rules = 3 [(.google.api.field_behavior) = OPTIONAL];
        Specified by:
        getClusterAdmissionRulesCount in interface PolicyOrBuilder

      • containsClusterAdmissionRules

        public boolean containsClusterAdmissionRules​(String key)
         Optional. Per-cluster admission rules. Cluster spec format:
 `location.clusterId`. There can be at most one admission rule per cluster
 spec.
 A `location` is either a compute zone (e.g. us-central1-a) or a region
 (e.g. us-central1).
 For `clusterId` syntax restrictions see
 https://cloud.google.com/container-engine/reference/rest/v1/projects.zones.clusters.
        map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> cluster_admission_rules = 3 [(.google.api.field_behavior) = OPTIONAL];
        Specified by:
        containsClusterAdmissionRules in interface PolicyOrBuilder

      • getClusterAdmissionRulesMap

        public Map<String,​AdmissionRule> getClusterAdmissionRulesMap()
         Optional. Per-cluster admission rules. Cluster spec format:
 `location.clusterId`. There can be at most one admission rule per cluster
 spec.
 A `location` is either a compute zone (e.g. us-central1-a) or a region
 (e.g. us-central1).
 For `clusterId` syntax restrictions see
 https://cloud.google.com/container-engine/reference/rest/v1/projects.zones.clusters.
        map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> cluster_admission_rules = 3 [(.google.api.field_behavior) = OPTIONAL];
        Specified by:
        getClusterAdmissionRulesMap in interface PolicyOrBuilder

      • getClusterAdmissionRulesOrDefault

        public AdmissionRule getClusterAdmissionRulesOrDefault​(String key,
                                                       AdmissionRule defaultValue)
         Optional. Per-cluster admission rules. Cluster spec format:
 `location.clusterId`. There can be at most one admission rule per cluster
 spec.
 A `location` is either a compute zone (e.g. us-central1-a) or a region
 (e.g. us-central1).
 For `clusterId` syntax restrictions see
 https://cloud.google.com/container-engine/reference/rest/v1/projects.zones.clusters.
        map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> cluster_admission_rules = 3 [(.google.api.field_behavior) = OPTIONAL];
        Specified by:
        getClusterAdmissionRulesOrDefault in interface PolicyOrBuilder

      • getClusterAdmissionRulesOrThrow

        public AdmissionRule getClusterAdmissionRulesOrThrow​(String key)
         Optional. Per-cluster admission rules. Cluster spec format:
 `location.clusterId`. There can be at most one admission rule per cluster
 spec.
 A `location` is either a compute zone (e.g. us-central1-a) or a region
 (e.g. us-central1).
 For `clusterId` syntax restrictions see
 https://cloud.google.com/container-engine/reference/rest/v1/projects.zones.clusters.
        map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> cluster_admission_rules = 3 [(.google.api.field_behavior) = OPTIONAL];
        Specified by:
        getClusterAdmissionRulesOrThrow in interface PolicyOrBuilder

      • clearClusterAdmissionRules

        public Policy.Builder clearClusterAdmissionRules()

      • removeClusterAdmissionRules

        public Policy.Builder removeClusterAdmissionRules​(String key)
         Optional. Per-cluster admission rules. Cluster spec format:
 `location.clusterId`. There can be at most one admission rule per cluster
 spec.
 A `location` is either a compute zone (e.g. us-central1-a) or a region
 (e.g. us-central1).
 For `clusterId` syntax restrictions see
 https://cloud.google.com/container-engine/reference/rest/v1/projects.zones.clusters.
        map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> cluster_admission_rules = 3 [(.google.api.field_behavior) = OPTIONAL];

      • getMutableClusterAdmissionRules

        @Deprecated
public Map<String,​AdmissionRule> getMutableClusterAdmissionRules()
        Deprecated.
        Use alternate mutation accessors instead.

      • putClusterAdmissionRules

        public Policy.Builder putClusterAdmissionRules​(String key,
                                               AdmissionRule value)
         Optional. Per-cluster admission rules. Cluster spec format:
 `location.clusterId`. There can be at most one admission rule per cluster
 spec.
 A `location` is either a compute zone (e.g. us-central1-a) or a region
 (e.g. us-central1).
 For `clusterId` syntax restrictions see
 https://cloud.google.com/container-engine/reference/rest/v1/projects.zones.clusters.
        map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> cluster_admission_rules = 3 [(.google.api.field_behavior) = OPTIONAL];

      • putAllClusterAdmissionRules

        public Policy.Builder putAllClusterAdmissionRules​(Map<String,​AdmissionRule> values)
         Optional. Per-cluster admission rules. Cluster spec format:
 `location.clusterId`. There can be at most one admission rule per cluster
 spec.
 A `location` is either a compute zone (e.g. us-central1-a) or a region
 (e.g. us-central1).
 For `clusterId` syntax restrictions see
 https://cloud.google.com/container-engine/reference/rest/v1/projects.zones.clusters.
        map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> cluster_admission_rules = 3 [(.google.api.field_behavior) = OPTIONAL];

      • getKubernetesNamespaceAdmissionRulesCount

        public int getKubernetesNamespaceAdmissionRulesCount()
        Description copied from interface: PolicyOrBuilder
         Optional. Per-kubernetes-namespace admission rules. K8s namespace spec format:
   `[a-z.-]+`, e.g. `some-namespace`
        map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> kubernetes_namespace_admission_rules = 10 [(.google.api.field_behavior) = OPTIONAL];
        Specified by:
        getKubernetesNamespaceAdmissionRulesCount in interface PolicyOrBuilder

      • containsKubernetesNamespaceAdmissionRules

        public boolean containsKubernetesNamespaceAdmissionRules​(String key)
         Optional. Per-kubernetes-namespace admission rules. K8s namespace spec format:
   `[a-z.-]+`, e.g. `some-namespace`
        map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> kubernetes_namespace_admission_rules = 10 [(.google.api.field_behavior) = OPTIONAL];
        Specified by:
        containsKubernetesNamespaceAdmissionRules in interface PolicyOrBuilder

      • getKubernetesNamespaceAdmissionRulesMap

        public Map<String,​AdmissionRule> getKubernetesNamespaceAdmissionRulesMap()
         Optional. Per-kubernetes-namespace admission rules. K8s namespace spec format:
   `[a-z.-]+`, e.g. `some-namespace`
        map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> kubernetes_namespace_admission_rules = 10 [(.google.api.field_behavior) = OPTIONAL];
        Specified by:
        getKubernetesNamespaceAdmissionRulesMap in interface PolicyOrBuilder

      • getKubernetesNamespaceAdmissionRulesOrDefault

        public AdmissionRule getKubernetesNamespaceAdmissionRulesOrDefault​(String key,
                                                                   AdmissionRule defaultValue)
         Optional. Per-kubernetes-namespace admission rules. K8s namespace spec format:
   `[a-z.-]+`, e.g. `some-namespace`
        map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> kubernetes_namespace_admission_rules = 10 [(.google.api.field_behavior) = OPTIONAL];
        Specified by:
        getKubernetesNamespaceAdmissionRulesOrDefault in interface PolicyOrBuilder

      • getKubernetesNamespaceAdmissionRulesOrThrow

        public AdmissionRule getKubernetesNamespaceAdmissionRulesOrThrow​(String key)
         Optional. Per-kubernetes-namespace admission rules. K8s namespace spec format:
   `[a-z.-]+`, e.g. `some-namespace`
        map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> kubernetes_namespace_admission_rules = 10 [(.google.api.field_behavior) = OPTIONAL];
        Specified by:
        getKubernetesNamespaceAdmissionRulesOrThrow in interface PolicyOrBuilder

      • clearKubernetesNamespaceAdmissionRules

        public Policy.Builder clearKubernetesNamespaceAdmissionRules()

      • removeKubernetesNamespaceAdmissionRules

        public Policy.Builder removeKubernetesNamespaceAdmissionRules​(String key)
         Optional. Per-kubernetes-namespace admission rules. K8s namespace spec format:
   `[a-z.-]+`, e.g. `some-namespace`
        map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> kubernetes_namespace_admission_rules = 10 [(.google.api.field_behavior) = OPTIONAL];

      • getMutableKubernetesNamespaceAdmissionRules

        @Deprecated
public Map<String,​AdmissionRule> getMutableKubernetesNamespaceAdmissionRules()
        Deprecated.
        Use alternate mutation accessors instead.

      • putKubernetesNamespaceAdmissionRules

        public Policy.Builder putKubernetesNamespaceAdmissionRules​(String key,
                                                           AdmissionRule value)
         Optional. Per-kubernetes-namespace admission rules. K8s namespace spec format:
   `[a-z.-]+`, e.g. `some-namespace`
        map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> kubernetes_namespace_admission_rules = 10 [(.google.api.field_behavior) = OPTIONAL];

      • putAllKubernetesNamespaceAdmissionRules

        public Policy.Builder putAllKubernetesNamespaceAdmissionRules​(Map<String,​AdmissionRule> values)
         Optional. Per-kubernetes-namespace admission rules. K8s namespace spec format:
   `[a-z.-]+`, e.g. `some-namespace`
        map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> kubernetes_namespace_admission_rules = 10 [(.google.api.field_behavior) = OPTIONAL];

      • getKubernetesServiceAccountAdmissionRulesCount

        public int getKubernetesServiceAccountAdmissionRulesCount()
        Description copied from interface: PolicyOrBuilder
         Optional. Per-kubernetes-service-account admission rules. Service account
 spec format: `namespace:serviceaccount`. e.g. `test-ns:default`
        map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> kubernetes_service_account_admission_rules = 8 [(.google.api.field_behavior) = OPTIONAL];
        Specified by:
        getKubernetesServiceAccountAdmissionRulesCount in interface PolicyOrBuilder

      • containsKubernetesServiceAccountAdmissionRules

        public boolean containsKubernetesServiceAccountAdmissionRules​(String key)
         Optional. Per-kubernetes-service-account admission rules. Service account
 spec format: `namespace:serviceaccount`. e.g. `test-ns:default`
        map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> kubernetes_service_account_admission_rules = 8 [(.google.api.field_behavior) = OPTIONAL];
        Specified by:
        containsKubernetesServiceAccountAdmissionRules in interface PolicyOrBuilder

      • getKubernetesServiceAccountAdmissionRulesMap

        public Map<String,​AdmissionRule> getKubernetesServiceAccountAdmissionRulesMap()
         Optional. Per-kubernetes-service-account admission rules. Service account
 spec format: `namespace:serviceaccount`. e.g. `test-ns:default`
        map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> kubernetes_service_account_admission_rules = 8 [(.google.api.field_behavior) = OPTIONAL];
        Specified by:
        getKubernetesServiceAccountAdmissionRulesMap in interface PolicyOrBuilder

      • getKubernetesServiceAccountAdmissionRulesOrDefault

        public AdmissionRule getKubernetesServiceAccountAdmissionRulesOrDefault​(String key,
                                                                        AdmissionRule defaultValue)
         Optional. Per-kubernetes-service-account admission rules. Service account
 spec format: `namespace:serviceaccount`. e.g. `test-ns:default`
        map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> kubernetes_service_account_admission_rules = 8 [(.google.api.field_behavior) = OPTIONAL];
        Specified by:
        getKubernetesServiceAccountAdmissionRulesOrDefault in interface PolicyOrBuilder

      • getKubernetesServiceAccountAdmissionRulesOrThrow

        public AdmissionRule getKubernetesServiceAccountAdmissionRulesOrThrow​(String key)
         Optional. Per-kubernetes-service-account admission rules. Service account
 spec format: `namespace:serviceaccount`. e.g. `test-ns:default`
        map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> kubernetes_service_account_admission_rules = 8 [(.google.api.field_behavior) = OPTIONAL];
        Specified by:
        getKubernetesServiceAccountAdmissionRulesOrThrow in interface PolicyOrBuilder

      • clearKubernetesServiceAccountAdmissionRules

        public Policy.Builder clearKubernetesServiceAccountAdmissionRules()

      • removeKubernetesServiceAccountAdmissionRules

        public Policy.Builder removeKubernetesServiceAccountAdmissionRules​(String key)
         Optional. Per-kubernetes-service-account admission rules. Service account
 spec format: `namespace:serviceaccount`. e.g. `test-ns:default`
        map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> kubernetes_service_account_admission_rules = 8 [(.google.api.field_behavior) = OPTIONAL];

      • getMutableKubernetesServiceAccountAdmissionRules

        @Deprecated
public Map<String,​AdmissionRule> getMutableKubernetesServiceAccountAdmissionRules()
        Deprecated.
        Use alternate mutation accessors instead.

      • putKubernetesServiceAccountAdmissionRules

        public Policy.Builder putKubernetesServiceAccountAdmissionRules​(String key,
                                                                AdmissionRule value)
         Optional. Per-kubernetes-service-account admission rules. Service account
 spec format: `namespace:serviceaccount`. e.g. `test-ns:default`
        map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> kubernetes_service_account_admission_rules = 8 [(.google.api.field_behavior) = OPTIONAL];

      • putAllKubernetesServiceAccountAdmissionRules

        public Policy.Builder putAllKubernetesServiceAccountAdmissionRules​(Map<String,​AdmissionRule> values)
         Optional. Per-kubernetes-service-account admission rules. Service account
 spec format: `namespace:serviceaccount`. e.g. `test-ns:default`
        map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> kubernetes_service_account_admission_rules = 8 [(.google.api.field_behavior) = OPTIONAL];

      • getIstioServiceIdentityAdmissionRulesCount

        public int getIstioServiceIdentityAdmissionRulesCount()
        Description copied from interface: PolicyOrBuilder
         Optional. Per-istio-service-identity admission rules. Istio service
 identity spec format:
 `spiffe://<domain>/ns/<namespace>/sa/<serviceaccount>` or
 `<domain>/ns/<namespace>/sa/<serviceaccount>`
 e.g. `spiffe://example.com/ns/test-ns/sa/default`
        map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> istio_service_identity_admission_rules = 9 [(.google.api.field_behavior) = OPTIONAL];
        Specified by:
        getIstioServiceIdentityAdmissionRulesCount in interface PolicyOrBuilder

      • containsIstioServiceIdentityAdmissionRules

        public boolean containsIstioServiceIdentityAdmissionRules​(String key)
         Optional. Per-istio-service-identity admission rules. Istio service
 identity spec format:
 `spiffe://<domain>/ns/<namespace>/sa/<serviceaccount>` or
 `<domain>/ns/<namespace>/sa/<serviceaccount>`
 e.g. `spiffe://example.com/ns/test-ns/sa/default`
        map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> istio_service_identity_admission_rules = 9 [(.google.api.field_behavior) = OPTIONAL];
        Specified by:
        containsIstioServiceIdentityAdmissionRules in interface PolicyOrBuilder

      • getIstioServiceIdentityAdmissionRulesMap

        public Map<String,​AdmissionRule> getIstioServiceIdentityAdmissionRulesMap()
         Optional. Per-istio-service-identity admission rules. Istio service
 identity spec format:
 `spiffe://<domain>/ns/<namespace>/sa/<serviceaccount>` or
 `<domain>/ns/<namespace>/sa/<serviceaccount>`
 e.g. `spiffe://example.com/ns/test-ns/sa/default`
        map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> istio_service_identity_admission_rules = 9 [(.google.api.field_behavior) = OPTIONAL];
        Specified by:
        getIstioServiceIdentityAdmissionRulesMap in interface PolicyOrBuilder

      • getIstioServiceIdentityAdmissionRulesOrDefault

        public AdmissionRule getIstioServiceIdentityAdmissionRulesOrDefault​(String key,
                                                                    AdmissionRule defaultValue)
         Optional. Per-istio-service-identity admission rules. Istio service
 identity spec format:
 `spiffe://<domain>/ns/<namespace>/sa/<serviceaccount>` or
 `<domain>/ns/<namespace>/sa/<serviceaccount>`
 e.g. `spiffe://example.com/ns/test-ns/sa/default`
        map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> istio_service_identity_admission_rules = 9 [(.google.api.field_behavior) = OPTIONAL];
        Specified by:
        getIstioServiceIdentityAdmissionRulesOrDefault in interface PolicyOrBuilder

      • getIstioServiceIdentityAdmissionRulesOrThrow

        public AdmissionRule getIstioServiceIdentityAdmissionRulesOrThrow​(String key)
         Optional. Per-istio-service-identity admission rules. Istio service
 identity spec format:
 `spiffe://<domain>/ns/<namespace>/sa/<serviceaccount>` or
 `<domain>/ns/<namespace>/sa/<serviceaccount>`
 e.g. `spiffe://example.com/ns/test-ns/sa/default`
        map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> istio_service_identity_admission_rules = 9 [(.google.api.field_behavior) = OPTIONAL];
        Specified by:
        getIstioServiceIdentityAdmissionRulesOrThrow in interface PolicyOrBuilder

      • clearIstioServiceIdentityAdmissionRules

        public Policy.Builder clearIstioServiceIdentityAdmissionRules()

      • removeIstioServiceIdentityAdmissionRules

        public Policy.Builder removeIstioServiceIdentityAdmissionRules​(String key)
         Optional. Per-istio-service-identity admission rules. Istio service
 identity spec format:
 `spiffe://<domain>/ns/<namespace>/sa/<serviceaccount>` or
 `<domain>/ns/<namespace>/sa/<serviceaccount>`
 e.g. `spiffe://example.com/ns/test-ns/sa/default`
        map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> istio_service_identity_admission_rules = 9 [(.google.api.field_behavior) = OPTIONAL];

      • getMutableIstioServiceIdentityAdmissionRules

        @Deprecated
public Map<String,​AdmissionRule> getMutableIstioServiceIdentityAdmissionRules()
        Deprecated.
        Use alternate mutation accessors instead.

      • putIstioServiceIdentityAdmissionRules

        public Policy.Builder putIstioServiceIdentityAdmissionRules​(String key,
                                                            AdmissionRule value)
         Optional. Per-istio-service-identity admission rules. Istio service
 identity spec format:
 `spiffe://<domain>/ns/<namespace>/sa/<serviceaccount>` or
 `<domain>/ns/<namespace>/sa/<serviceaccount>`
 e.g. `spiffe://example.com/ns/test-ns/sa/default`
        map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> istio_service_identity_admission_rules = 9 [(.google.api.field_behavior) = OPTIONAL];

      • putAllIstioServiceIdentityAdmissionRules

        public Policy.Builder putAllIstioServiceIdentityAdmissionRules​(Map<String,​AdmissionRule> values)
         Optional. Per-istio-service-identity admission rules. Istio service
 identity spec format:
 `spiffe://<domain>/ns/<namespace>/sa/<serviceaccount>` or
 `<domain>/ns/<namespace>/sa/<serviceaccount>`
 e.g. `spiffe://example.com/ns/test-ns/sa/default`
        map<string, .google.cloud.binaryauthorization.v1beta1.AdmissionRule> istio_service_identity_admission_rules = 9 [(.google.api.field_behavior) = OPTIONAL];

      • hasDefaultAdmissionRule

        public boolean hasDefaultAdmissionRule()
         Required. Default admission rule for a cluster without a per-cluster, per-
 kubernetes-service-account, or per-istio-service-identity admission rule.
        .google.cloud.binaryauthorization.v1beta1.AdmissionRule default_admission_rule = 4 [(.google.api.field_behavior) = REQUIRED];
        Specified by:
        hasDefaultAdmissionRule in interface PolicyOrBuilder
        Returns:
        Whether the defaultAdmissionRule field is set.

      • getDefaultAdmissionRule

        public AdmissionRule getDefaultAdmissionRule()
         Required. Default admission rule for a cluster without a per-cluster, per-
 kubernetes-service-account, or per-istio-service-identity admission rule.
        .google.cloud.binaryauthorization.v1beta1.AdmissionRule default_admission_rule = 4 [(.google.api.field_behavior) = REQUIRED];
        Specified by:
        getDefaultAdmissionRule in interface PolicyOrBuilder
        Returns:
        The defaultAdmissionRule.

      • setDefaultAdmissionRule

        public Policy.Builder setDefaultAdmissionRule​(AdmissionRule value)
         Required. Default admission rule for a cluster without a per-cluster, per-
 kubernetes-service-account, or per-istio-service-identity admission rule.
        .google.cloud.binaryauthorization.v1beta1.AdmissionRule default_admission_rule = 4 [(.google.api.field_behavior) = REQUIRED];

      • setDefaultAdmissionRule

        public Policy.Builder setDefaultAdmissionRule​(AdmissionRule.Builder builderForValue)
         Required. Default admission rule for a cluster without a per-cluster, per-
 kubernetes-service-account, or per-istio-service-identity admission rule.
        .google.cloud.binaryauthorization.v1beta1.AdmissionRule default_admission_rule = 4 [(.google.api.field_behavior) = REQUIRED];

      • mergeDefaultAdmissionRule

        public Policy.Builder mergeDefaultAdmissionRule​(AdmissionRule value)
         Required. Default admission rule for a cluster without a per-cluster, per-
 kubernetes-service-account, or per-istio-service-identity admission rule.
        .google.cloud.binaryauthorization.v1beta1.AdmissionRule default_admission_rule = 4 [(.google.api.field_behavior) = REQUIRED];

      • clearDefaultAdmissionRule

        public Policy.Builder clearDefaultAdmissionRule()
         Required. Default admission rule for a cluster without a per-cluster, per-
 kubernetes-service-account, or per-istio-service-identity admission rule.
        .google.cloud.binaryauthorization.v1beta1.AdmissionRule default_admission_rule = 4 [(.google.api.field_behavior) = REQUIRED];

      • getDefaultAdmissionRuleBuilder

        public AdmissionRule.Builder getDefaultAdmissionRuleBuilder()
         Required. Default admission rule for a cluster without a per-cluster, per-
 kubernetes-service-account, or per-istio-service-identity admission rule.
        .google.cloud.binaryauthorization.v1beta1.AdmissionRule default_admission_rule = 4 [(.google.api.field_behavior) = REQUIRED];

      • getDefaultAdmissionRuleOrBuilder

        public AdmissionRuleOrBuilder getDefaultAdmissionRuleOrBuilder()
         Required. Default admission rule for a cluster without a per-cluster, per-
 kubernetes-service-account, or per-istio-service-identity admission rule.
        .google.cloud.binaryauthorization.v1beta1.AdmissionRule default_admission_rule = 4 [(.google.api.field_behavior) = REQUIRED];
        Specified by:
        getDefaultAdmissionRuleOrBuilder in interface PolicyOrBuilder

      • hasUpdateTime

        public boolean hasUpdateTime()
         Output only. Time when the policy was last updated.
        .google.protobuf.Timestamp update_time = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];
        Specified by:
        hasUpdateTime in interface PolicyOrBuilder
        Returns:
        Whether the updateTime field is set.

      • getUpdateTime

        public com.google.protobuf.Timestamp getUpdateTime()
         Output only. Time when the policy was last updated.
        .google.protobuf.Timestamp update_time = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];
        Specified by:
        getUpdateTime in interface PolicyOrBuilder
        Returns:
        The updateTime.

      • setUpdateTime

        public Policy.Builder setUpdateTime​(com.google.protobuf.Timestamp value)
         Output only. Time when the policy was last updated.
        .google.protobuf.Timestamp update_time = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];

      • setUpdateTime

        public Policy.Builder setUpdateTime​(com.google.protobuf.Timestamp.Builder builderForValue)
         Output only. Time when the policy was last updated.
        .google.protobuf.Timestamp update_time = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];

      • mergeUpdateTime

        public Policy.Builder mergeUpdateTime​(com.google.protobuf.Timestamp value)
         Output only. Time when the policy was last updated.
        .google.protobuf.Timestamp update_time = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];

      • clearUpdateTime

        public Policy.Builder clearUpdateTime()
         Output only. Time when the policy was last updated.
        .google.protobuf.Timestamp update_time = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];

      • getUpdateTimeBuilder

        public com.google.protobuf.Timestamp.Builder getUpdateTimeBuilder()
         Output only. Time when the policy was last updated.
        .google.protobuf.Timestamp update_time = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];

      • getUpdateTimeOrBuilder

        public com.google.protobuf.TimestampOrBuilder getUpdateTimeOrBuilder()
         Output only. Time when the policy was last updated.
        .google.protobuf.Timestamp update_time = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];
        Specified by:
        getUpdateTimeOrBuilder in interface PolicyOrBuilder

      • setUnknownFields

        public final Policy.Builder setUnknownFields​(com.google.protobuf.UnknownFieldSet unknownFields)
        Specified by:
        setUnknownFields in interface com.google.protobuf.Message.Builder
        Overrides:
        setUnknownFields in class com.google.protobuf.GeneratedMessageV3.Builder<Policy.Builder>

      • mergeUnknownFields

        public final Policy.Builder mergeUnknownFields​(com.google.protobuf.UnknownFieldSet unknownFields)
        Specified by:
        mergeUnknownFields in interface com.google.protobuf.Message.Builder
        Overrides:
        mergeUnknownFields in class com.google.protobuf.GeneratedMessageV3.Builder<Policy.Builder>