Some or all of the information on this page might not apply to Cloud de Confiance by S3NS. See Differences from Google Cloud for more details.

Class PrivilegedAdmissionConfig (2.65.0)

PrivilegedAdmissionConfig(mapping=None, *, ignore_unknown_fields=False, **kwargs)

PrivilegedAdmissionConfig stores the list of authorized allowlist paths for the cluster.

Attribute
Name	Description
`allowlist_paths`	`MutableSequence[str]` The customer allowlist Cloud Storage paths for the cluster. These paths are used with the `--autopilot-privileged-admission` flag to authorize privileged workloads in Autopilot clusters. Paths can be GKE-owned, in the format `gke://`, or customer-owned, in the format `gs://`. Wildcards (``) are supported to authorize all allowlists under specific paths or directories. Example: `gs://my-bucket/` will authorize all allowlists under the `my-bucket` bucket.

Attribute

Name Description

allowlist_paths MutableSequence[str]
The customer allowlist Cloud Storage paths for the cluster. These paths are used with the --autopilot-privileged-admission flag to authorize privileged workloads in Autopilot clusters. Paths can be GKE-owned, in the format gke://, or customer-owned, in the format gs://. Wildcards (*) are supported to authorize all allowlists under specific paths or directories. Example: gs://my-bucket/* will authorize all allowlists under the my-bucket bucket.

Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026-06-03 UTC.