rage.fail

gcp-filestore-explicit-nfs-export-options

explicit gcp emits HasPolicy

emit

source type	`*`
target type	`Policy`
source	`<Filestore instance node>`
target	`<NFS export options / ResourcePolicy node>`

Narrative

{instance.name} has NFS export options governing which IP ranges can mount the share and with what access mode.

Raw rule rules/explicit/gcp-filestore.yaml

id: gcp-filestore-explicit-nfs-export-options
emits: HasPolicy
applies_to:
- gcp
source_record:
  api: file.googleapis.com/v1/projects/{project}/locations/{location}/instances/{instance}
  field: fileShares[].nfsExportOptions
emit:
  source_type: '*'
  target_type: Policy
  source: <Filestore instance node>
  target: <NFS export options / ResourcePolicy node>
  api_source: file.instances.get
  evidence_field: fileShares[].nfsExportOptions
  narrative: '{instance.name} has NFS export options governing which IP ranges can mount the share and
    with what access mode.'