crds/dlp_v1beta1_dlpdeidentifytemplate.yaml

# Copyright 2025 Google LLC # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: annotations: cnrm.cloud.google.com/version: 1.128.0 creationTimestamp: null labels: cnrm.cloud.google.com/dcl2crd: "true" cnrm.cloud.google.com/managed-by-kcc: "true" cnrm.cloud.google.com/stability-level: stable cnrm.cloud.google.com/system: "true" name: dlpdeidentifytemplates.dlp.cnrm.cloud.google.com spec: group: dlp.cnrm.cloud.google.com names: categories: - gcp kind: DLPDeidentifyTemplate plural: dlpdeidentifytemplates shortNames: - gcpdlpdeidentifytemplate - gcpdlpdeidentifytemplates singular: dlpdeidentifytemplate scope: Namespaced versions: - additionalPrinterColumns: - jsonPath: .metadata.creationTimestamp name: Age type: date - description: When 'True', the most recent reconcile of the resource succeeded jsonPath: .status.conditions[?(@.type=='Ready')].status name: Ready type: string - description: The reason for the value in 'Ready' jsonPath: .status.conditions[?(@.type=='Ready')].reason name: Status type: string - description: The last transition time for the value in 'Status' jsonPath: .status.conditions[?(@.type=='Ready')].lastTransitionTime name: Status Age type: date name: v1beta1 schema: openAPIV3Schema: properties: apiVersion: description: 'apiVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources' type: string kind: description: 'kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds' type: string metadata: type: object spec: oneOf: - required: - organizationRef - required: - projectRef properties: deidentifyConfig: description: The core content of the template. properties: infoTypeTransformations: description: Treat the dataset as free-form text and apply the same free text transformation everywhere. properties: transformations: description: Required. Transformation for each infoType. Cannot specify more than one for a given infoType. items: properties: infoTypes: description: InfoTypes to apply the transformation to. An empty list will cause this transformation to apply to all findings that correspond to infoTypes that were requested in `InspectConfig`. items: properties: name: description: Name of the information type. Either a name of your choosing when creating a CustomInfoType, or one of the names listed at https://cloud.google.com/dlp/docs/infotypes-reference when specifying a built-in type. When sending Cloud DLP results to Data Catalog, infoType names should conform to the pattern `[A-Za-z0-9$-_]{1,64}`. type: string type: object type: array primitiveTransformation: description: Required. Primitive transformation to apply to the infoType. properties: bucketingConfig: description: Bucketing properties: buckets: description: Set of buckets. Ranges must be non-overlapping. items: properties: max: description: Upper bound of the range, exclusive; type must match min. properties: booleanValue: description: boolean type: boolean dateValue: description: date properties: day: description: Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant. format: int64 type: integer month: description: Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day. format: int64 type: integer year: description: Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year. format: int64 type: integer type: object dayOfWeekValue: description: 'day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY' type: string floatValue: description: float format: double type: number integerValue: description: integer format: int64 type: integer stringValue: description: string type: string timeValue: description: time of day properties: hours: description: Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time. format: int64 type: integer minutes: description: Minutes of hour of day. Must be from 0 to 59. format: int64 type: integer nanos: description: Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999. format: int64 type: integer seconds: description: Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds. format: int64 type: integer type: object timestampValue: description: timestamp format: date-time type: string type: object min: description: Lower bound of the range, inclusive. Type should be the same as max if used. properties: booleanValue: description: boolean type: boolean dateValue: description: date properties: day: description: Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant. format: int64 type: integer month: description: Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day. format: int64 type: integer year: description: Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year. format: int64 type: integer type: object dayOfWeekValue: description: 'day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY' type: string floatValue: description: float format: double type: number integerValue: description: integer format: int64 type: integer stringValue: description: string type: string timeValue: description: time of day properties: hours: description: Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time. format: int64 type: integer minutes: description: Minutes of hour of day. Must be from 0 to 59. format: int64 type: integer nanos: description: Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999. format: int64 type: integer seconds: description: Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds. format: int64 type: integer type: object timestampValue: description: timestamp format: date-time type: string type: object replacementValue: description: Required. Replacement value for this bucket. properties: booleanValue: description: boolean type: boolean dateValue: description: date properties: day: description: Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant. format: int64 type: integer month: description: Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day. format: int64 type: integer year: description: Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year. format: int64 type: integer type: object dayOfWeekValue: description: 'day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY' type: string floatValue: description: float format: double type: number integerValue: description: integer format: int64 type: integer stringValue: description: string type: string timeValue: description: time of day properties: hours: description: Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time. format: int64 type: integer minutes: description: Minutes of hour of day. Must be from 0 to 59. format: int64 type: integer nanos: description: Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999. format: int64 type: integer seconds: description: Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds. format: int64 type: integer type: object timestampValue: description: timestamp format: date-time type: string type: object required: - replacementValue type: object type: array type: object characterMaskConfig: description: Mask properties: charactersToIgnore: description: When masking a string, items in this list will be skipped when replacing characters. For example, if the input string is `555-555-5555` and you instruct Cloud DLP to skip `-` and mask 5 characters with `*`, Cloud DLP returns `***-**5-5555`. items: properties: charactersToSkip: description: Characters to not transform when masking. type: string commonCharactersToIgnore: description: 'Common characters to not transform when masking. Useful to avoid removing punctuation. Possible values: COMMON_CHARS_TO_IGNORE_UNSPECIFIED, NUMERIC, ALPHA_UPPER_CASE, ALPHA_LOWER_CASE, PUNCTUATION, WHITESPACE' type: string type: object type: array maskingCharacter: description: Character to use to mask the sensitive values—for example, `*` for an alphabetic string such as a name, or `0` for a numeric string such as ZIP code or credit card number. This string must have a length of 1. If not supplied, this value defaults to `*` for strings, and `0` for digits. type: string numberToMask: description: Number of characters to mask. If not set, all matching chars will be masked. Skipped characters do not count towards this tally. format: int64 type: integer reverseOrder: description: Mask characters in reverse order. For example, if `masking_character` is `0`, `number_to_mask` is `14`, and `reverse_order` is `false`, then the input string `1234-5678-9012-3456` is masked as `00000000000000-3456`. If `masking_character` is `*`, `number_to_mask` is `3`, and `reverse_order` is `true`, then the string `12345` is masked as `12***`. type: boolean type: object cryptoDeterministicConfig: description: Deterministic Crypto properties: context: description: 'A context may be used for higher security and maintaining referential integrity such that the same identifier in two different contexts will be given a distinct surrogate. The context is appended to plaintext value being encrypted. On decryption the provided context is validated against the value used during encryption. If a context was provided during encryption, same context must be provided during decryption as well. If the context is not set, plaintext would be used as is for encryption. If the context is set but: 1. there is no record present when transforming a given value or 2. the field is not present when transforming a given value, plaintext would be used as is for encryption. Note that case (1) is expected when an `InfoTypeTransformation` is applied to both structured and non-structured `ContentItem`s.' properties: name: description: Name describing the field. type: string type: object cryptoKey: description: The key used by the encryption function. For deterministic encryption using AES-SIV, the provided key is internally expanded to 64 bytes prior to use. properties: kmsWrapped: description: Key wrapped using Cloud KMS properties: cryptoKeyRef: oneOf: - not: required: - external required: - name - not: anyOf: - required: - name - required: - namespace required: - external properties: external: description: |- Required. The resource name of the KMS CryptoKey to use for unwrapping. Allowed value: The Google Cloud resource name of a `KMSCryptoKey` resource (format: `{{selfLink}}`). type: string name: description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' type: string namespace: description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/' type: string type: object wrappedKey: description: Required. The wrapped data crypto key. type: string required: - cryptoKeyRef - wrappedKey type: object transient: description: Transient crypto key properties: name: description: 'Required. Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate `TransientCryptoKey` protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).' type: string required: - name type: object unwrapped: description: Unwrapped crypto key properties: key: description: Required. A 128/192/256 bit key. type: string required: - key type: object type: object surrogateInfoType: description: 'The custom info type to annotate the surrogate with. This annotation will be applied to the surrogate by prefixing it with the name of the custom info type followed by the number of characters comprising the surrogate. The following scheme defines the format: {info type name}({surrogate character count}):{surrogate} For example, if the name of custom info type is ''MY_TOKEN_INFO_TYPE'' and the surrogate is ''abc'', the full replacement value will be: ''MY_TOKEN_INFO_TYPE(3):abc'' This annotation identifies the surrogate when inspecting content using the custom info type ''Surrogate''. This facilitates reversal of the surrogate when it occurs in free text. Note: For record transformations where the entire cell in a table is being transformed, surrogates are not mandatory. Surrogates are used to denote the location of the token and are necessary for re-identification in free form text. In order for inspection to work properly, the name of this info type must not occur naturally anywhere in your data; otherwise, inspection may either - reverse a surrogate that does not correspond to an actual identifier - be unable to parse the surrogate and result in an error Therefore, choose your custom info type name carefully after considering what your data looks like. One way to select a name that has a high chance of yielding reliable detection is to include one or more unicode characters that are highly improbable to exist in your data. For example, assuming your data is entered from a regular ASCII keyboard, the symbol with the hex code point 29DD might be used like so: ⧝MY_TOKEN_TYPE.' properties: name: description: Name of the information type. Either a name of your choosing when creating a CustomInfoType, or one of the names listed at https://cloud.google.com/dlp/docs/infotypes-reference when specifying a built-in type. When sending Cloud DLP results to Data Catalog, infoType names should conform to the pattern `[A-Za-z0-9$-_]{1,64}`. type: string type: object type: object cryptoHashConfig: description: Crypto properties: cryptoKey: description: The key used by the hash function. properties: kmsWrapped: description: Key wrapped using Cloud KMS properties: cryptoKeyRef: oneOf: - not: required: - external required: - name - not: anyOf: - required: - name - required: - namespace required: - external properties: external: description: |- Required. The resource name of the KMS CryptoKey to use for unwrapping. Allowed value: The Google Cloud resource name of a `KMSCryptoKey` resource (format: `{{selfLink}}`). type: string name: description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' type: string namespace: description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/' type: string type: object wrappedKey: description: Required. The wrapped data crypto key. type: string required: - cryptoKeyRef - wrappedKey type: object transient: description: Transient crypto key properties: name: description: 'Required. Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate `TransientCryptoKey` protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).' type: string required: - name type: object unwrapped: description: Unwrapped crypto key properties: key: description: Required. A 128/192/256 bit key. type: string required: - key type: object type: object type: object cryptoReplaceFfxFpeConfig: description: Ffx-Fpe properties: commonAlphabet: description: 'Common alphabets. Possible values: FFX_COMMON_NATIVE_ALPHABET_UNSPECIFIED, NUMERIC, HEXADECIMAL, UPPER_CASE_ALPHA_NUMERIC, ALPHA_NUMERIC' type: string context: description: 'The ''tweak'', a context may be used for higher security since the same identifier in two different contexts won''t be given the same surrogate. If the context is not set, a default tweak will be used. If the context is set but: 1. there is no record present when transforming a given value or 1. the field is not present when transforming a given value, a default tweak will be used. Note that case (1) is expected when an `InfoTypeTransformation` is applied to both structured and non-structured `ContentItem`s. Currently, the referenced field may be of value type integer or string. The tweak is constructed as a sequence of bytes in big endian byte order such that: - a 64 bit integer is encoded followed by a single byte of value 1 - a string is encoded in UTF-8 format followed by a single byte of value 2' properties: name: description: Name describing the field. type: string type: object cryptoKey: description: Required. The key used by the encryption algorithm. properties: kmsWrapped: description: Key wrapped using Cloud KMS properties: cryptoKeyRef: oneOf: - not: required: - external required: - name - not: anyOf: - required: - name - required: - namespace required: - external properties: external: description: |- Required. The resource name of the KMS CryptoKey to use for unwrapping. Allowed value: The Google Cloud resource name of a `KMSCryptoKey` resource (format: `{{selfLink}}`). type: string name: description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' type: string namespace: description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/' type: string type: object wrappedKey: description: Required. The wrapped data crypto key. type: string required: - cryptoKeyRef - wrappedKey type: object transient: description: Transient crypto key properties: name: description: 'Required. Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate `TransientCryptoKey` protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).' type: string required: - name type: object unwrapped: description: Unwrapped crypto key properties: key: description: Required. A 128/192/256 bit key. type: string required: - key type: object type: object customAlphabet: description: 'This is supported by mapping these to the alphanumeric characters that the FFX mode natively supports. This happens before/after encryption/decryption. Each character listed must appear only once. Number of characters must be in the range [2, 95]. This must be encoded as ASCII. The order of characters does not matter. The full list of allowed characters is: ``0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz ~`!@#$%^&*()_-+={[}]|:;"''<,>.?/``' type: string radix: description: The native way to select the alphabet. Must be in the range [2, 95]. format: int64 type: integer surrogateInfoType: description: 'The custom infoType to annotate the surrogate with. This annotation will be applied to the surrogate by prefixing it with the name of the custom infoType followed by the number of characters comprising the surrogate. The following scheme defines the format: info_type_name(surrogate_character_count):surrogate For example, if the name of custom infoType is ''MY_TOKEN_INFO_TYPE'' and the surrogate is ''abc'', the full replacement value will be: ''MY_TOKEN_INFO_TYPE(3):abc'' This annotation identifies the surrogate when inspecting content using the custom infoType [`SurrogateType`](https://cloud.google.com/dlp/docs/reference/rest/v2/InspectConfig#surrogatetype). This facilitates reversal of the surrogate when it occurs in free text. In order for inspection to work properly, the name of this infoType must not occur naturally anywhere in your data; otherwise, inspection may find a surrogate that does not correspond to an actual identifier. Therefore, choose your custom infoType name carefully after considering what your data looks like. One way to select a name that has a high chance of yielding reliable detection is to include one or more unicode characters that are highly improbable to exist in your data. For example, assuming your data is entered from a regular ASCII keyboard, the symbol with the hex code point 29DD might be used like so: ⧝MY_TOKEN_TYPE' properties: name: description: Name of the information type. Either a name of your choosing when creating a CustomInfoType, or one of the names listed at https://cloud.google.com/dlp/docs/infotypes-reference when specifying a built-in type. When sending Cloud DLP results to Data Catalog, infoType names should conform to the pattern `[A-Za-z0-9$-_]{1,64}`. type: string type: object required: - cryptoKey type: object dateShiftConfig: description: Date Shift properties: context: description: Points to the field that contains the context, for example, an entity id. If set, must also set cryptoKey. If set, shift will be consistent for the given context. properties: name: description: Name describing the field. type: string type: object cryptoKey: description: Causes the shift to be computed based on this key and the context. This results in the same shift for the same context and crypto_key. If set, must also set context. Can only be applied to table items. properties: kmsWrapped: description: Key wrapped using Cloud KMS properties: cryptoKeyRef: oneOf: - not: required: - external required: - name - not: anyOf: - required: - name - required: - namespace required: - external properties: external: description: |- Required. The resource name of the KMS CryptoKey to use for unwrapping. Allowed value: The Google Cloud resource name of a `KMSCryptoKey` resource (format: `{{selfLink}}`). type: string name: description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' type: string namespace: description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/' type: string type: object wrappedKey: description: Required. The wrapped data crypto key. type: string required: - cryptoKeyRef - wrappedKey type: object transient: description: Transient crypto key properties: name: description: 'Required. Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate `TransientCryptoKey` protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).' type: string required: - name type: object unwrapped: description: Unwrapped crypto key properties: key: description: Required. A 128/192/256 bit key. type: string required: - key type: object type: object lowerBoundDays: description: Required. For example, -5 means shift date to at most 5 days back in the past. format: int64 type: integer upperBoundDays: description: Required. Range of shift in days. Actual shift will be selected at random within this range (inclusive ends). Negative means shift to earlier in time. Must not be more than 365250 days (1000 years) each direction. For example, 3 means shift date to at most 3 days into the future. format: int64 type: integer required: - lowerBoundDays - upperBoundDays type: object fixedSizeBucketingConfig: description: Fixed size bucketing properties: bucketSize: description: 'Required. Size of each bucket (except for minimum and maximum buckets). So if `lower_bound` = 10, `upper_bound` = 89, and `bucket_size` = 10, then the following buckets would be used: -10, 10-20, 20-30, 30-40, 40-50, 50-60, 60-70, 70-80, 80-89, 89+. Precision up to 2 decimals works.' format: double type: number lowerBound: description: Required. Lower bound value of buckets. All values less than `lower_bound` are grouped together into a single bucket; for example if `lower_bound` = 10, then all values less than 10 are replaced with the value "-10". properties: booleanValue: description: boolean type: boolean dateValue: description: date properties: day: description: Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant. format: int64 type: integer month: description: Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day. format: int64 type: integer year: description: Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year. format: int64 type: integer type: object dayOfWeekValue: description: 'day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY' type: string floatValue: description: float format: double type: number integerValue: description: integer format: int64 type: integer stringValue: description: string type: string timeValue: description: time of day properties: hours: description: Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time. format: int64 type: integer minutes: description: Minutes of hour of day. Must be from 0 to 59. format: int64 type: integer nanos: description: Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999. format: int64 type: integer seconds: description: Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds. format: int64 type: integer type: object timestampValue: description: timestamp format: date-time type: string type: object upperBound: description: Required. Upper bound value of buckets. All values greater than upper_bound are grouped together into a single bucket; for example if `upper_bound` = 89, then all values greater than 89 are replaced with the value "89+". properties: booleanValue: description: boolean type: boolean dateValue: description: date properties: day: description: Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant. format: int64 type: integer month: description: Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day. format: int64 type: integer year: description: Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year. format: int64 type: integer type: object dayOfWeekValue: description: 'day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY' type: string floatValue: description: float format: double type: number integerValue: description: integer format: int64 type: integer stringValue: description: string type: string timeValue: description: time of day properties: hours: description: Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time. format: int64 type: integer minutes: description: Minutes of hour of day. Must be from 0 to 59. format: int64 type: integer nanos: description: Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999. format: int64 type: integer seconds: description: Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds. format: int64 type: integer type: object timestampValue: description: timestamp format: date-time type: string type: object required: - bucketSize - lowerBound - upperBound type: object redactConfig: description: Redact type: object x-kubernetes-preserve-unknown-fields: true replaceConfig: description: Replace with a specified value. properties: newValue: description: Value to replace it with. properties: booleanValue: description: boolean type: boolean dateValue: description: date properties: day: description: Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant. format: int64 type: integer month: description: Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day. format: int64 type: integer year: description: Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year. format: int64 type: integer type: object dayOfWeekValue: description: 'day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY' type: string floatValue: description: float format: double type: number integerValue: description: integer format: int64 type: integer stringValue: description: string type: string timeValue: description: time of day properties: hours: description: Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time. format: int64 type: integer minutes: description: Minutes of hour of day. Must be from 0 to 59. format: int64 type: integer nanos: description: Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999. format: int64 type: integer seconds: description: Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds. format: int64 type: integer type: object timestampValue: description: timestamp format: date-time type: string type: object type: object replaceWithInfoTypeConfig: description: Replace with infotype type: object x-kubernetes-preserve-unknown-fields: true timePartConfig: description: Time extraction properties: partToExtract: description: 'The part of the time to keep. Possible values: TIME_PART_UNSPECIFIED, YEAR, MONTH, DAY_OF_MONTH, DAY_OF_WEEK, WEEK_OF_YEAR, HOUR_OF_DAY' type: string type: object type: object required: - primitiveTransformation type: object type: array required: - transformations type: object recordTransformations: description: Treat the dataset as structured. Transformations can be applied to specific locations within structured datasets, such as transforming a column within a table. properties: fieldTransformations: description: Transform the record by applying various field transformations. items: properties: condition: description: 'Only apply the transformation if the condition evaluates to true for the given `RecordCondition`. The conditions are allowed to reference fields that are not used in the actual transformation. Example Use Cases: - Apply a different bucket transformation to an age column if the zip code column for the same record is within a specific range. - Redact a field if the date of birth field is greater than 85.' properties: expressions: description: An expression. properties: conditions: description: Conditions to apply to the expression. properties: conditions: description: A collection of conditions. items: properties: field: description: Required. Field within the record this condition is evaluated against. properties: name: description: Name describing the field. type: string type: object operator: description: 'Required. Operator used to compare the field or infoType to the value. Possible values: LOGICAL_OPERATOR_UNSPECIFIED, AND' type: string value: description: Value to compare against. [Mandatory, except for `EXISTS` tests.] properties: booleanValue: description: boolean type: boolean dateValue: description: date properties: day: description: Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant. format: int64 type: integer month: description: Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day. format: int64 type: integer year: description: Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year. format: int64 type: integer type: object dayOfWeekValue: description: 'day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY' type: string floatValue: description: float format: double type: number integerValue: description: integer format: int64 type: integer stringValue: description: string type: string timeValue: description: time of day properties: hours: description: Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time. format: int64 type: integer minutes: description: Minutes of hour of day. Must be from 0 to 59. format: int64 type: integer nanos: description: Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999. format: int64 type: integer seconds: description: Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds. format: int64 type: integer type: object timestampValue: description: timestamp format: date-time type: string type: object required: - field - operator type: object type: array type: object logicalOperator: description: 'The operator to apply to the result of conditions. Default and currently only supported value is `AND`. Possible values: LOGICAL_OPERATOR_UNSPECIFIED, AND' type: string type: object type: object fields: description: Required. Input field(s) to apply the transformation to. When you have columns that reference their position within a list, omit the index from the FieldId. FieldId name matching ignores the index. For example, instead of "contact.nums[0].type", use "contact.nums.type". items: properties: name: description: Name describing the field. type: string type: object type: array infoTypeTransformations: description: Treat the contents of the field as free text, and selectively transform content that matches an `InfoType`. properties: transformations: description: Required. Transformation for each infoType. Cannot specify more than one for a given infoType. items: properties: infoTypes: description: InfoTypes to apply the transformation to. An empty list will cause this transformation to apply to all findings that correspond to infoTypes that were requested in `InspectConfig`. items: properties: name: description: Name of the information type. Either a name of your choosing when creating a CustomInfoType, or one of the names listed at https://cloud.google.com/dlp/docs/infotypes-reference when specifying a built-in type. When sending Cloud DLP results to Data Catalog, infoType names should conform to the pattern `[A-Za-z0-9$-_]{1,64}`. type: string type: object type: array primitiveTransformation: description: Required. Primitive transformation to apply to the infoType. properties: bucketingConfig: description: Bucketing properties: buckets: description: Set of buckets. Ranges must be non-overlapping. items: properties: max: description: Upper bound of the range, exclusive; type must match min. properties: booleanValue: description: boolean type: boolean dateValue: description: date properties: day: description: Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant. format: int64 type: integer month: description: Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day. format: int64 type: integer year: description: Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year. format: int64 type: integer type: object dayOfWeekValue: description: 'day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY' type: string floatValue: description: float format: double type: number integerValue: description: integer format: int64 type: integer stringValue: description: string type: string timeValue: description: time of day properties: hours: description: Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time. format: int64 type: integer minutes: description: Minutes of hour of day. Must be from 0 to 59. format: int64 type: integer nanos: description: Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999. format: int64 type: integer seconds: description: Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds. format: int64 type: integer type: object timestampValue: description: timestamp format: date-time type: string type: object min: description: Lower bound of the range, inclusive. Type should be the same as max if used. properties: booleanValue: description: boolean type: boolean dateValue: description: date properties: day: description: Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant. format: int64 type: integer month: description: Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day. format: int64 type: integer year: description: Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year. format: int64 type: integer type: object dayOfWeekValue: description: 'day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY' type: string floatValue: description: float format: double type: number integerValue: description: integer format: int64 type: integer stringValue: description: string type: string timeValue: description: time of day properties: hours: description: Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time. format: int64 type: integer minutes: description: Minutes of hour of day. Must be from 0 to 59. format: int64 type: integer nanos: description: Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999. format: int64 type: integer seconds: description: Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds. format: int64 type: integer type: object timestampValue: description: timestamp format: date-time type: string type: object replacementValue: description: Required. Replacement value for this bucket. properties: booleanValue: description: boolean type: boolean dateValue: description: date properties: day: description: Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant. format: int64 type: integer month: description: Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day. format: int64 type: integer year: description: Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year. format: int64 type: integer type: object dayOfWeekValue: description: 'day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY' type: string floatValue: description: float format: double type: number integerValue: description: integer format: int64 type: integer stringValue: description: string type: string timeValue: description: time of day properties: hours: description: Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time. format: int64 type: integer minutes: description: Minutes of hour of day. Must be from 0 to 59. format: int64 type: integer nanos: description: Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999. format: int64 type: integer seconds: description: Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds. format: int64 type: integer type: object timestampValue: description: timestamp format: date-time type: string type: object required: - replacementValue type: object type: array type: object characterMaskConfig: description: Mask properties: charactersToIgnore: description: When masking a string, items in this list will be skipped when replacing characters. For example, if the input string is `555-555-5555` and you instruct Cloud DLP to skip `-` and mask 5 characters with `*`, Cloud DLP returns `***-**5-5555`. items: properties: charactersToSkip: description: Characters to not transform when masking. type: string commonCharactersToIgnore: description: 'Common characters to not transform when masking. Useful to avoid removing punctuation. Possible values: COMMON_CHARS_TO_IGNORE_UNSPECIFIED, NUMERIC, ALPHA_UPPER_CASE, ALPHA_LOWER_CASE, PUNCTUATION, WHITESPACE' type: string type: object type: array maskingCharacter: description: Character to use to mask the sensitive values—for example, `*` for an alphabetic string such as a name, or `0` for a numeric string such as ZIP code or credit card number. This string must have a length of 1. If not supplied, this value defaults to `*` for strings, and `0` for digits. type: string numberToMask: description: Number of characters to mask. If not set, all matching chars will be masked. Skipped characters do not count towards this tally. format: int64 type: integer reverseOrder: description: Mask characters in reverse order. For example, if `masking_character` is `0`, `number_to_mask` is `14`, and `reverse_order` is `false`, then the input string `1234-5678-9012-3456` is masked as `00000000000000-3456`. If `masking_character` is `*`, `number_to_mask` is `3`, and `reverse_order` is `true`, then the string `12345` is masked as `12***`. type: boolean type: object cryptoDeterministicConfig: description: Deterministic Crypto properties: context: description: 'A context may be used for higher security and maintaining referential integrity such that the same identifier in two different contexts will be given a distinct surrogate. The context is appended to plaintext value being encrypted. On decryption the provided context is validated against the value used during encryption. If a context was provided during encryption, same context must be provided during decryption as well. If the context is not set, plaintext would be used as is for encryption. If the context is set but: 1. there is no record present when transforming a given value or 2. the field is not present when transforming a given value, plaintext would be used as is for encryption. Note that case (1) is expected when an `InfoTypeTransformation` is applied to both structured and non-structured `ContentItem`s.' properties: name: description: Name describing the field. type: string type: object cryptoKey: description: The key used by the encryption function. For deterministic encryption using AES-SIV, the provided key is internally expanded to 64 bytes prior to use. properties: kmsWrapped: description: Key wrapped using Cloud KMS properties: cryptoKeyRef: oneOf: - not: required: - external required: - name - not: anyOf: - required: - name - required: - namespace required: - external properties: external: description: |- Required. The resource name of the KMS CryptoKey to use for unwrapping. Allowed value: The Google Cloud resource name of a `KMSCryptoKey` resource (format: `{{selfLink}}`). type: string name: description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' type: string namespace: description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/' type: string type: object wrappedKey: description: Required. The wrapped data crypto key. type: string required: - cryptoKeyRef - wrappedKey type: object transient: description: Transient crypto key properties: name: description: 'Required. Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate `TransientCryptoKey` protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).' type: string required: - name type: object unwrapped: description: Unwrapped crypto key properties: key: description: Required. A 128/192/256 bit key. type: string required: - key type: object type: object surrogateInfoType: description: 'The custom info type to annotate the surrogate with. This annotation will be applied to the surrogate by prefixing it with the name of the custom info type followed by the number of characters comprising the surrogate. The following scheme defines the format: {info type name}({surrogate character count}):{surrogate} For example, if the name of custom info type is ''MY_TOKEN_INFO_TYPE'' and the surrogate is ''abc'', the full replacement value will be: ''MY_TOKEN_INFO_TYPE(3):abc'' This annotation identifies the surrogate when inspecting content using the custom info type ''Surrogate''. This facilitates reversal of the surrogate when it occurs in free text. Note: For record transformations where the entire cell in a table is being transformed, surrogates are not mandatory. Surrogates are used to denote the location of the token and are necessary for re-identification in free form text. In order for inspection to work properly, the name of this info type must not occur naturally anywhere in your data; otherwise, inspection may either - reverse a surrogate that does not correspond to an actual identifier - be unable to parse the surrogate and result in an error Therefore, choose your custom info type name carefully after considering what your data looks like. One way to select a name that has a high chance of yielding reliable detection is to include one or more unicode characters that are highly improbable to exist in your data. For example, assuming your data is entered from a regular ASCII keyboard, the symbol with the hex code point 29DD might be used like so: ⧝MY_TOKEN_TYPE.' properties: name: description: Name of the information type. Either a name of your choosing when creating a CustomInfoType, or one of the names listed at https://cloud.google.com/dlp/docs/infotypes-reference when specifying a built-in type. When sending Cloud DLP results to Data Catalog, infoType names should conform to the pattern `[A-Za-z0-9$-_]{1,64}`. type: string type: object type: object cryptoHashConfig: description: Crypto properties: cryptoKey: description: The key used by the hash function. properties: kmsWrapped: description: Key wrapped using Cloud KMS properties: cryptoKeyRef: oneOf: - not: required: - external required: - name - not: anyOf: - required: - name - required: - namespace required: - external properties: external: description: |- Required. The resource name of the KMS CryptoKey to use for unwrapping. Allowed value: The Google Cloud resource name of a `KMSCryptoKey` resource (format: `{{selfLink}}`). type: string name: description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' type: string namespace: description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/' type: string type: object wrappedKey: description: Required. The wrapped data crypto key. type: string required: - cryptoKeyRef - wrappedKey type: object transient: description: Transient crypto key properties: name: description: 'Required. Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate `TransientCryptoKey` protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).' type: string required: - name type: object unwrapped: description: Unwrapped crypto key properties: key: description: Required. A 128/192/256 bit key. type: string required: - key type: object type: object type: object cryptoReplaceFfxFpeConfig: description: Ffx-Fpe properties: commonAlphabet: description: 'Common alphabets. Possible values: FFX_COMMON_NATIVE_ALPHABET_UNSPECIFIED, NUMERIC, HEXADECIMAL, UPPER_CASE_ALPHA_NUMERIC, ALPHA_NUMERIC' type: string context: description: 'The ''tweak'', a context may be used for higher security since the same identifier in two different contexts won''t be given the same surrogate. If the context is not set, a default tweak will be used. If the context is set but: 1. there is no record present when transforming a given value or 1. the field is not present when transforming a given value, a default tweak will be used. Note that case (1) is expected when an `InfoTypeTransformation` is applied to both structured and non-structured `ContentItem`s. Currently, the referenced field may be of value type integer or string. The tweak is constructed as a sequence of bytes in big endian byte order such that: - a 64 bit integer is encoded followed by a single byte of value 1 - a string is encoded in UTF-8 format followed by a single byte of value 2' properties: name: description: Name describing the field. type: string type: object cryptoKey: description: Required. The key used by the encryption algorithm. properties: kmsWrapped: description: Key wrapped using Cloud KMS properties: cryptoKeyRef: oneOf: - not: required: - external required: - name - not: anyOf: - required: - name - required: - namespace required: - external properties: external: description: |- Required. The resource name of the KMS CryptoKey to use for unwrapping. Allowed value: The Google Cloud resource name of a `KMSCryptoKey` resource (format: `{{selfLink}}`). type: string name: description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' type: string namespace: description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/' type: string type: object wrappedKey: description: Required. The wrapped data crypto key. type: string required: - cryptoKeyRef - wrappedKey type: object transient: description: Transient crypto key properties: name: description: 'Required. Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate `TransientCryptoKey` protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).' type: string required: - name type: object unwrapped: description: Unwrapped crypto key properties: key: description: Required. A 128/192/256 bit key. type: string required: - key type: object type: object customAlphabet: description: 'This is supported by mapping these to the alphanumeric characters that the FFX mode natively supports. This happens before/after encryption/decryption. Each character listed must appear only once. Number of characters must be in the range [2, 95]. This must be encoded as ASCII. The order of characters does not matter. The full list of allowed characters is: ``0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz ~`!@#$%^&*()_-+={[}]|:;"''<,>.?/``' type: string radix: description: The native way to select the alphabet. Must be in the range [2, 95]. format: int64 type: integer surrogateInfoType: description: 'The custom infoType to annotate the surrogate with. This annotation will be applied to the surrogate by prefixing it with the name of the custom infoType followed by the number of characters comprising the surrogate. The following scheme defines the format: info_type_name(surrogate_character_count):surrogate For example, if the name of custom infoType is ''MY_TOKEN_INFO_TYPE'' and the surrogate is ''abc'', the full replacement value will be: ''MY_TOKEN_INFO_TYPE(3):abc'' This annotation identifies the surrogate when inspecting content using the custom infoType [`SurrogateType`](https://cloud.google.com/dlp/docs/reference/rest/v2/InspectConfig#surrogatetype). This facilitates reversal of the surrogate when it occurs in free text. In order for inspection to work properly, the name of this infoType must not occur naturally anywhere in your data; otherwise, inspection may find a surrogate that does not correspond to an actual identifier. Therefore, choose your custom infoType name carefully after considering what your data looks like. One way to select a name that has a high chance of yielding reliable detection is to include one or more unicode characters that are highly improbable to exist in your data. For example, assuming your data is entered from a regular ASCII keyboard, the symbol with the hex code point 29DD might be used like so: ⧝MY_TOKEN_TYPE' properties: name: description: Name of the information type. Either a name of your choosing when creating a CustomInfoType, or one of the names listed at https://cloud.google.com/dlp/docs/infotypes-reference when specifying a built-in type. When sending Cloud DLP results to Data Catalog, infoType names should conform to the pattern `[A-Za-z0-9$-_]{1,64}`. type: string type: object required: - cryptoKey type: object dateShiftConfig: description: Date Shift properties: context: description: Points to the field that contains the context, for example, an entity id. If set, must also set cryptoKey. If set, shift will be consistent for the given context. properties: name: description: Name describing the field. type: string type: object cryptoKey: description: Causes the shift to be computed based on this key and the context. This results in the same shift for the same context and crypto_key. If set, must also set context. Can only be applied to table items. properties: kmsWrapped: description: Key wrapped using Cloud KMS properties: cryptoKeyRef: oneOf: - not: required: - external required: - name - not: anyOf: - required: - name - required: - namespace required: - external properties: external: description: |- Required. The resource name of the KMS CryptoKey to use for unwrapping. Allowed value: The Google Cloud resource name of a `KMSCryptoKey` resource (format: `{{selfLink}}`). type: string name: description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' type: string namespace: description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/' type: string type: object wrappedKey: description: Required. The wrapped data crypto key. type: string required: - cryptoKeyRef - wrappedKey type: object transient: description: Transient crypto key properties: name: description: 'Required. Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate `TransientCryptoKey` protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).' type: string required: - name type: object unwrapped: description: Unwrapped crypto key properties: key: description: Required. A 128/192/256 bit key. type: string required: - key type: object type: object lowerBoundDays: description: Required. For example, -5 means shift date to at most 5 days back in the past. format: int64 type: integer upperBoundDays: description: Required. Range of shift in days. Actual shift will be selected at random within this range (inclusive ends). Negative means shift to earlier in time. Must not be more than 365250 days (1000 years) each direction. For example, 3 means shift date to at most 3 days into the future. format: int64 type: integer required: - lowerBoundDays - upperBoundDays type: object fixedSizeBucketingConfig: description: Fixed size bucketing properties: bucketSize: description: 'Required. Size of each bucket (except for minimum and maximum buckets). So if `lower_bound` = 10, `upper_bound` = 89, and `bucket_size` = 10, then the following buckets would be used: -10, 10-20, 20-30, 30-40, 40-50, 50-60, 60-70, 70-80, 80-89, 89+. Precision up to 2 decimals works.' format: double type: number lowerBound: description: Required. Lower bound value of buckets. All values less than `lower_bound` are grouped together into a single bucket; for example if `lower_bound` = 10, then all values less than 10 are replaced with the value "-10". properties: booleanValue: description: boolean type: boolean dateValue: description: date properties: day: description: Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant. format: int64 type: integer month: description: Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day. format: int64 type: integer year: description: Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year. format: int64 type: integer type: object dayOfWeekValue: description: 'day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY' type: string floatValue: description: float format: double type: number integerValue: description: integer format: int64 type: integer stringValue: description: string type: string timeValue: description: time of day properties: hours: description: Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time. format: int64 type: integer minutes: description: Minutes of hour of day. Must be from 0 to 59. format: int64 type: integer nanos: description: Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999. format: int64 type: integer seconds: description: Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds. format: int64 type: integer type: object timestampValue: description: timestamp format: date-time type: string type: object upperBound: description: Required. Upper bound value of buckets. All values greater than upper_bound are grouped together into a single bucket; for example if `upper_bound` = 89, then all values greater than 89 are replaced with the value "89+". properties: booleanValue: description: boolean type: boolean dateValue: description: date properties: day: description: Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant. format: int64 type: integer month: description: Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day. format: int64 type: integer year: description: Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year. format: int64 type: integer type: object dayOfWeekValue: description: 'day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY' type: string floatValue: description: float format: double type: number integerValue: description: integer format: int64 type: integer stringValue: description: string type: string timeValue: description: time of day properties: hours: description: Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time. format: int64 type: integer minutes: description: Minutes of hour of day. Must be from 0 to 59. format: int64 type: integer nanos: description: Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999. format: int64 type: integer seconds: description: Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds. format: int64 type: integer type: object timestampValue: description: timestamp format: date-time type: string type: object required: - bucketSize - lowerBound - upperBound type: object redactConfig: description: Redact type: object x-kubernetes-preserve-unknown-fields: true replaceConfig: description: Replace with a specified value. properties: newValue: description: Value to replace it with. properties: booleanValue: description: boolean type: boolean dateValue: description: date properties: day: description: Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant. format: int64 type: integer month: description: Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day. format: int64 type: integer year: description: Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year. format: int64 type: integer type: object dayOfWeekValue: description: 'day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY' type: string floatValue: description: float format: double type: number integerValue: description: integer format: int64 type: integer stringValue: description: string type: string timeValue: description: time of day properties: hours: description: Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time. format: int64 type: integer minutes: description: Minutes of hour of day. Must be from 0 to 59. format: int64 type: integer nanos: description: Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999. format: int64 type: integer seconds: description: Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds. format: int64 type: integer type: object timestampValue: description: timestamp format: date-time type: string type: object type: object replaceWithInfoTypeConfig: description: Replace with infotype type: object x-kubernetes-preserve-unknown-fields: true timePartConfig: description: Time extraction properties: partToExtract: description: 'The part of the time to keep. Possible values: TIME_PART_UNSPECIFIED, YEAR, MONTH, DAY_OF_MONTH, DAY_OF_WEEK, WEEK_OF_YEAR, HOUR_OF_DAY' type: string type: object type: object required: - primitiveTransformation type: object type: array required: - transformations type: object primitiveTransformation: description: Apply the transformation to the entire field. properties: bucketingConfig: description: Bucketing properties: buckets: description: Set of buckets. Ranges must be non-overlapping. items: properties: max: description: Upper bound of the range, exclusive; type must match min. properties: booleanValue: description: boolean type: boolean dateValue: description: date properties: day: description: Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant. format: int64 type: integer month: description: Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day. format: int64 type: integer year: description: Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year. format: int64 type: integer type: object dayOfWeekValue: description: 'day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY' type: string floatValue: description: float format: double type: number integerValue: description: integer format: int64 type: integer stringValue: description: string type: string timeValue: description: time of day properties: hours: description: Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time. format: int64 type: integer minutes: description: Minutes of hour of day. Must be from 0 to 59. format: int64 type: integer nanos: description: Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999. format: int64 type: integer seconds: description: Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds. format: int64 type: integer type: object timestampValue: description: timestamp format: date-time type: string type: object min: description: Lower bound of the range, inclusive. Type should be the same as max if used. properties: booleanValue: description: boolean type: boolean dateValue: description: date properties: day: description: Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant. format: int64 type: integer month: description: Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day. format: int64 type: integer year: description: Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year. format: int64 type: integer type: object dayOfWeekValue: description: 'day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY' type: string floatValue: description: float format: double type: number integerValue: description: integer format: int64 type: integer stringValue: description: string type: string timeValue: description: time of day properties: hours: description: Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time. format: int64 type: integer minutes: description: Minutes of hour of day. Must be from 0 to 59. format: int64 type: integer nanos: description: Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999. format: int64 type: integer seconds: description: Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds. format: int64 type: integer type: object timestampValue: description: timestamp format: date-time type: string type: object replacementValue: description: Required. Replacement value for this bucket. properties: booleanValue: description: boolean type: boolean dateValue: description: date properties: day: description: Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant. format: int64 type: integer month: description: Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day. format: int64 type: integer year: description: Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year. format: int64 type: integer type: object dayOfWeekValue: description: 'day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY' type: string floatValue: description: float format: double type: number integerValue: description: integer format: int64 type: integer stringValue: description: string type: string timeValue: description: time of day properties: hours: description: Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time. format: int64 type: integer minutes: description: Minutes of hour of day. Must be from 0 to 59. format: int64 type: integer nanos: description: Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999. format: int64 type: integer seconds: description: Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds. format: int64 type: integer type: object timestampValue: description: timestamp format: date-time type: string type: object required: - replacementValue type: object type: array type: object characterMaskConfig: description: Mask properties: charactersToIgnore: description: When masking a string, items in this list will be skipped when replacing characters. For example, if the input string is `555-555-5555` and you instruct Cloud DLP to skip `-` and mask 5 characters with `*`, Cloud DLP returns `***-**5-5555`. items: properties: charactersToSkip: description: Characters to not transform when masking. type: string commonCharactersToIgnore: description: 'Common characters to not transform when masking. Useful to avoid removing punctuation. Possible values: COMMON_CHARS_TO_IGNORE_UNSPECIFIED, NUMERIC, ALPHA_UPPER_CASE, ALPHA_LOWER_CASE, PUNCTUATION, WHITESPACE' type: string type: object type: array maskingCharacter: description: Character to use to mask the sensitive values—for example, `*` for an alphabetic string such as a name, or `0` for a numeric string such as ZIP code or credit card number. This string must have a length of 1. If not supplied, this value defaults to `*` for strings, and `0` for digits. type: string numberToMask: description: Number of characters to mask. If not set, all matching chars will be masked. Skipped characters do not count towards this tally. format: int64 type: integer reverseOrder: description: Mask characters in reverse order. For example, if `masking_character` is `0`, `number_to_mask` is `14`, and `reverse_order` is `false`, then the input string `1234-5678-9012-3456` is masked as `00000000000000-3456`. If `masking_character` is `*`, `number_to_mask` is `3`, and `reverse_order` is `true`, then the string `12345` is masked as `12***`. type: boolean type: object cryptoDeterministicConfig: description: Deterministic Crypto properties: context: description: 'A context may be used for higher security and maintaining referential integrity such that the same identifier in two different contexts will be given a distinct surrogate. The context is appended to plaintext value being encrypted. On decryption the provided context is validated against the value used during encryption. If a context was provided during encryption, same context must be provided during decryption as well. If the context is not set, plaintext would be used as is for encryption. If the context is set but: 1. there is no record present when transforming a given value or 2. the field is not present when transforming a given value, plaintext would be used as is for encryption. Note that case (1) is expected when an `InfoTypeTransformation` is applied to both structured and non-structured `ContentItem`s.' properties: name: description: Name describing the field. type: string type: object cryptoKey: description: The key used by the encryption function. For deterministic encryption using AES-SIV, the provided key is internally expanded to 64 bytes prior to use. properties: kmsWrapped: description: Key wrapped using Cloud KMS properties: cryptoKeyRef: oneOf: - not: required: - external required: - name - not: anyOf: - required: - name - required: - namespace required: - external properties: external: description: |- Required. The resource name of the KMS CryptoKey to use for unwrapping. Allowed value: The Google Cloud resource name of a `KMSCryptoKey` resource (format: `{{selfLink}}`). type: string name: description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' type: string namespace: description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/' type: string type: object wrappedKey: description: Required. The wrapped data crypto key. type: string required: - cryptoKeyRef - wrappedKey type: object transient: description: Transient crypto key properties: name: description: 'Required. Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate `TransientCryptoKey` protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).' type: string required: - name type: object unwrapped: description: Unwrapped crypto key properties: key: description: Required. A 128/192/256 bit key. type: string required: - key type: object type: object surrogateInfoType: description: 'The custom info type to annotate the surrogate with. This annotation will be applied to the surrogate by prefixing it with the name of the custom info type followed by the number of characters comprising the surrogate. The following scheme defines the format: {info type name}({surrogate character count}):{surrogate} For example, if the name of custom info type is ''MY_TOKEN_INFO_TYPE'' and the surrogate is ''abc'', the full replacement value will be: ''MY_TOKEN_INFO_TYPE(3):abc'' This annotation identifies the surrogate when inspecting content using the custom info type ''Surrogate''. This facilitates reversal of the surrogate when it occurs in free text. Note: For record transformations where the entire cell in a table is being transformed, surrogates are not mandatory. Surrogates are used to denote the location of the token and are necessary for re-identification in free form text. In order for inspection to work properly, the name of this info type must not occur naturally anywhere in your data; otherwise, inspection may either - reverse a surrogate that does not correspond to an actual identifier - be unable to parse the surrogate and result in an error Therefore, choose your custom info type name carefully after considering what your data looks like. One way to select a name that has a high chance of yielding reliable detection is to include one or more unicode characters that are highly improbable to exist in your data. For example, assuming your data is entered from a regular ASCII keyboard, the symbol with the hex code point 29DD might be used like so: ⧝MY_TOKEN_TYPE.' properties: name: description: Name of the information type. Either a name of your choosing when creating a CustomInfoType, or one of the names listed at https://cloud.google.com/dlp/docs/infotypes-reference when specifying a built-in type. When sending Cloud DLP results to Data Catalog, infoType names should conform to the pattern `[A-Za-z0-9$-_]{1,64}`. type: string type: object type: object cryptoHashConfig: description: Crypto properties: cryptoKey: description: The key used by the hash function. properties: kmsWrapped: description: Key wrapped using Cloud KMS properties: cryptoKeyRef: oneOf: - not: required: - external required: - name - not: anyOf: - required: - name - required: - namespace required: - external properties: external: description: |- Required. The resource name of the KMS CryptoKey to use for unwrapping. Allowed value: The Google Cloud resource name of a `KMSCryptoKey` resource (format: `{{selfLink}}`). type: string name: description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' type: string namespace: description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/' type: string type: object wrappedKey: description: Required. The wrapped data crypto key. type: string required: - cryptoKeyRef - wrappedKey type: object transient: description: Transient crypto key properties: name: description: 'Required. Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate `TransientCryptoKey` protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).' type: string required: - name type: object unwrapped: description: Unwrapped crypto key properties: key: description: Required. A 128/192/256 bit key. type: string required: - key type: object type: object type: object cryptoReplaceFfxFpeConfig: description: Ffx-Fpe properties: commonAlphabet: description: 'Common alphabets. Possible values: FFX_COMMON_NATIVE_ALPHABET_UNSPECIFIED, NUMERIC, HEXADECIMAL, UPPER_CASE_ALPHA_NUMERIC, ALPHA_NUMERIC' type: string context: description: 'The ''tweak'', a context may be used for higher security since the same identifier in two different contexts won''t be given the same surrogate. If the context is not set, a default tweak will be used. If the context is set but: 1. there is no record present when transforming a given value or 1. the field is not present when transforming a given value, a default tweak will be used. Note that case (1) is expected when an `InfoTypeTransformation` is applied to both structured and non-structured `ContentItem`s. Currently, the referenced field may be of value type integer or string. The tweak is constructed as a sequence of bytes in big endian byte order such that: - a 64 bit integer is encoded followed by a single byte of value 1 - a string is encoded in UTF-8 format followed by a single byte of value 2' properties: name: description: Name describing the field. type: string type: object cryptoKey: description: Required. The key used by the encryption algorithm. properties: kmsWrapped: description: Key wrapped using Cloud KMS properties: cryptoKeyRef: oneOf: - not: required: - external required: - name - not: anyOf: - required: - name - required: - namespace required: - external properties: external: description: |- Required. The resource name of the KMS CryptoKey to use for unwrapping. Allowed value: The Google Cloud resource name of a `KMSCryptoKey` resource (format: `{{selfLink}}`). type: string name: description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' type: string namespace: description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/' type: string type: object wrappedKey: description: Required. The wrapped data crypto key. type: string required: - cryptoKeyRef - wrappedKey type: object transient: description: Transient crypto key properties: name: description: 'Required. Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate `TransientCryptoKey` protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).' type: string required: - name type: object unwrapped: description: Unwrapped crypto key properties: key: description: Required. A 128/192/256 bit key. type: string required: - key type: object type: object customAlphabet: description: 'This is supported by mapping these to the alphanumeric characters that the FFX mode natively supports. This happens before/after encryption/decryption. Each character listed must appear only once. Number of characters must be in the range [2, 95]. This must be encoded as ASCII. The order of characters does not matter. The full list of allowed characters is: ``0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz ~`!@#$%^&*()_-+={[}]|:;"''<,>.?/``' type: string radix: description: The native way to select the alphabet. Must be in the range [2, 95]. format: int64 type: integer surrogateInfoType: description: 'The custom infoType to annotate the surrogate with. This annotation will be applied to the surrogate by prefixing it with the name of the custom infoType followed by the number of characters comprising the surrogate. The following scheme defines the format: info_type_name(surrogate_character_count):surrogate For example, if the name of custom infoType is ''MY_TOKEN_INFO_TYPE'' and the surrogate is ''abc'', the full replacement value will be: ''MY_TOKEN_INFO_TYPE(3):abc'' This annotation identifies the surrogate when inspecting content using the custom infoType [`SurrogateType`](https://cloud.google.com/dlp/docs/reference/rest/v2/InspectConfig#surrogatetype). This facilitates reversal of the surrogate when it occurs in free text. In order for inspection to work properly, the name of this infoType must not occur naturally anywhere in your data; otherwise, inspection may find a surrogate that does not correspond to an actual identifier. Therefore, choose your custom infoType name carefully after considering what your data looks like. One way to select a name that has a high chance of yielding reliable detection is to include one or more unicode characters that are highly improbable to exist in your data. For example, assuming your data is entered from a regular ASCII keyboard, the symbol with the hex code point 29DD might be used like so: ⧝MY_TOKEN_TYPE' properties: name: description: Name of the information type. Either a name of your choosing when creating a CustomInfoType, or one of the names listed at https://cloud.google.com/dlp/docs/infotypes-reference when specifying a built-in type. When sending Cloud DLP results to Data Catalog, infoType names should conform to the pattern `[A-Za-z0-9$-_]{1,64}`. type: string type: object required: - cryptoKey type: object dateShiftConfig: description: Date Shift properties: context: description: Points to the field that contains the context, for example, an entity id. If set, must also set cryptoKey. If set, shift will be consistent for the given context. properties: name: description: Name describing the field. type: string type: object cryptoKey: description: Causes the shift to be computed based on this key and the context. This results in the same shift for the same context and crypto_key. If set, must also set context. Can only be applied to table items. properties: kmsWrapped: description: Key wrapped using Cloud KMS properties: cryptoKeyRef: oneOf: - not: required: - external required: - name - not: anyOf: - required: - name - required: - namespace required: - external properties: external: description: |- Required. The resource name of the KMS CryptoKey to use for unwrapping. Allowed value: The Google Cloud resource name of a `KMSCryptoKey` resource (format: `{{selfLink}}`). type: string name: description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' type: string namespace: description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/' type: string type: object wrappedKey: description: Required. The wrapped data crypto key. type: string required: - cryptoKeyRef - wrappedKey type: object transient: description: Transient crypto key properties: name: description: 'Required. Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate `TransientCryptoKey` protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).' type: string required: - name type: object unwrapped: description: Unwrapped crypto key properties: key: description: Required. A 128/192/256 bit key. type: string required: - key type: object type: object lowerBoundDays: description: Required. For example, -5 means shift date to at most 5 days back in the past. format: int64 type: integer upperBoundDays: description: Required. Range of shift in days. Actual shift will be selected at random within this range (inclusive ends). Negative means shift to earlier in time. Must not be more than 365250 days (1000 years) each direction. For example, 3 means shift date to at most 3 days into the future. format: int64 type: integer required: - lowerBoundDays - upperBoundDays type: object fixedSizeBucketingConfig: description: Fixed size bucketing properties: bucketSize: description: 'Required. Size of each bucket (except for minimum and maximum buckets). So if `lower_bound` = 10, `upper_bound` = 89, and `bucket_size` = 10, then the following buckets would be used: -10, 10-20, 20-30, 30-40, 40-50, 50-60, 60-70, 70-80, 80-89, 89+. Precision up to 2 decimals works.' format: double type: number lowerBound: description: Required. Lower bound value of buckets. All values less than `lower_bound` are grouped together into a single bucket; for example if `lower_bound` = 10, then all values less than 10 are replaced with the value "-10". properties: booleanValue: description: boolean type: boolean dateValue: description: date properties: day: description: Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant. format: int64 type: integer month: description: Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day. format: int64 type: integer year: description: Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year. format: int64 type: integer type: object dayOfWeekValue: description: 'day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY' type: string floatValue: description: float format: double type: number integerValue: description: integer format: int64 type: integer stringValue: description: string type: string timeValue: description: time of day properties: hours: description: Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time. format: int64 type: integer minutes: description: Minutes of hour of day. Must be from 0 to 59. format: int64 type: integer nanos: description: Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999. format: int64 type: integer seconds: description: Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds. format: int64 type: integer type: object timestampValue: description: timestamp format: date-time type: string type: object upperBound: description: Required. Upper bound value of buckets. All values greater than upper_bound are grouped together into a single bucket; for example if `upper_bound` = 89, then all values greater than 89 are replaced with the value "89+". properties: booleanValue: description: boolean type: boolean dateValue: description: date properties: day: description: Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant. format: int64 type: integer month: description: Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day. format: int64 type: integer year: description: Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year. format: int64 type: integer type: object dayOfWeekValue: description: 'day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY' type: string floatValue: description: float format: double type: number integerValue: description: integer format: int64 type: integer stringValue: description: string type: string timeValue: description: time of day properties: hours: description: Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time. format: int64 type: integer minutes: description: Minutes of hour of day. Must be from 0 to 59. format: int64 type: integer nanos: description: Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999. format: int64 type: integer seconds: description: Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds. format: int64 type: integer type: object timestampValue: description: timestamp format: date-time type: string type: object required: - bucketSize - lowerBound - upperBound type: object redactConfig: description: Redact type: object x-kubernetes-preserve-unknown-fields: true replaceConfig: description: Replace with a specified value. properties: newValue: description: Value to replace it with. properties: booleanValue: description: boolean type: boolean dateValue: description: date properties: day: description: Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant. format: int64 type: integer month: description: Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day. format: int64 type: integer year: description: Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year. format: int64 type: integer type: object dayOfWeekValue: description: 'day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY' type: string floatValue: description: float format: double type: number integerValue: description: integer format: int64 type: integer stringValue: description: string type: string timeValue: description: time of day properties: hours: description: Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time. format: int64 type: integer minutes: description: Minutes of hour of day. Must be from 0 to 59. format: int64 type: integer nanos: description: Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999. format: int64 type: integer seconds: description: Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds. format: int64 type: integer type: object timestampValue: description: timestamp format: date-time type: string type: object type: object replaceWithInfoTypeConfig: description: Replace with infotype type: object x-kubernetes-preserve-unknown-fields: true timePartConfig: description: Time extraction properties: partToExtract: description: 'The part of the time to keep. Possible values: TIME_PART_UNSPECIFIED, YEAR, MONTH, DAY_OF_MONTH, DAY_OF_WEEK, WEEK_OF_YEAR, HOUR_OF_DAY' type: string type: object type: object required: - fields type: object type: array recordSuppressions: description: Configuration defining which records get suppressed entirely. Records that match any suppression rule are omitted from the output. items: properties: condition: description: A condition that when it evaluates to true will result in the record being evaluated to be suppressed from the transformed content. properties: expressions: description: An expression. properties: conditions: description: Conditions to apply to the expression. properties: conditions: description: A collection of conditions. items: properties: field: description: Required. Field within the record this condition is evaluated against. properties: name: description: Name describing the field. type: string type: object operator: description: 'Required. Operator used to compare the field or infoType to the value. Possible values: LOGICAL_OPERATOR_UNSPECIFIED, AND' type: string value: description: Value to compare against. [Mandatory, except for `EXISTS` tests.] properties: booleanValue: description: boolean type: boolean dateValue: description: date properties: day: description: Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant. format: int64 type: integer month: description: Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day. format: int64 type: integer year: description: Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year. format: int64 type: integer type: object dayOfWeekValue: description: 'day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY' type: string floatValue: description: float format: double type: number integerValue: description: integer format: int64 type: integer stringValue: description: string type: string timeValue: description: time of day properties: hours: description: Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time. format: int64 type: integer minutes: description: Minutes of hour of day. Must be from 0 to 59. format: int64 type: integer nanos: description: Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999. format: int64 type: integer seconds: description: Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds. format: int64 type: integer type: object timestampValue: description: timestamp format: date-time type: string type: object required: - field - operator type: object type: array type: object logicalOperator: description: 'The operator to apply to the result of conditions. Default and currently only supported value is `AND`. Possible values: LOGICAL_OPERATOR_UNSPECIFIED, AND' type: string type: object type: object type: object type: array type: object transformationErrorHandling: description: Mode for handling transformation errors. If left unspecified, the default mode is `TransformationErrorHandling.ThrowError`. properties: leaveUntransformed: description: Ignore errors type: object x-kubernetes-preserve-unknown-fields: true throwError: description: Throw an error type: object x-kubernetes-preserve-unknown-fields: true type: object type: object description: description: Short description (max 256 chars). type: string displayName: description: Display name (max 256 chars). type: string location: description: Immutable. The location of the resource type: string organizationRef: description: Immutable. The Organization that this resource belongs to. Only one of [organizationRef, projectRef] may be specified. oneOf: - not: required: - external required: - name - not: anyOf: - required: - name - required: - namespace required: - external properties: external: description: 'Allowed value: The Google Cloud resource name of a Google Cloud Organization (format: `organizations/{{name}}`).' type: string name: description: |- [WARNING] Organization not yet supported in Config Connector, use 'external' field to reference existing resources. Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names type: string namespace: description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/' type: string type: object projectRef: description: Immutable. The Project that this resource belongs to. Only one of [organizationRef, projectRef] may be specified. oneOf: - not: required: - external required: - name - not: anyOf: - required: - name - required: - namespace required: - external properties: external: description: 'Allowed value: The Google Cloud resource name of a `Project` resource (format: `projects/{{name}}`).' type: string name: description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' type: string namespace: description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/' type: string type: object resourceID: description: Immutable. Optional. The service-generated name of the resource. Used for acquisition only. Leave unset to create a new resource. type: string type: object status: properties: conditions: description: Conditions represent the latest available observation of the resource's current state. items: properties: lastTransitionTime: description: Last time the condition transitioned from one status to another. type: string message: description: Human-readable message indicating details about last transition. type: string reason: description: Unique, one-word, CamelCase reason for the condition's last transition. type: string status: description: Status is the status of the condition. Can be True, False, Unknown. type: string type: description: Type is the type of the condition. type: string type: object type: array createTime: description: Output only. The creation timestamp of an inspectTemplate. format: date-time type: string locationId: description: Output only. The geographic location where this resource is stored. type: string observedGeneration: description: ObservedGeneration is the generation of the resource that was most recently observed by the Config Connector controller. If this is equal to metadata.generation, then that means that the current reported status reflects the most recent desired state of the resource. type: integer updateTime: description: Output only. The last update timestamp of an inspectTemplate. format: date-time type: string type: object type: object served: true storage: true subresources: status: {} status: acceptedNames: kind: "" plural: "" conditions: [] storedVersions: []

crds/dlp_v1beta1_dlpdeidentifytemplate.yaml (4,162 lines of code) (raw):