1. Packages
  2. Google Cloud (GCP) Classic
  3. API Docs
  4. osconfig
  5. V2PolicyOrchestrator
Google Cloud v8.25.0 published on Thursday, Apr 3, 2025 by Pulumi

gcp.osconfig.V2PolicyOrchestrator

Explore with Pulumi AI

Example Usage

Osconfigv2 Policy Orchestrator Basic

import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const policyOrchestrator = new gcp.osconfig.V2PolicyOrchestrator("policy_orchestrator", {
    policyOrchestratorId: "po",
    state: "ACTIVE",
    action: "UPSERT",
    orchestratedResource: {
        id: "test-orchestrated-resource",
        osPolicyAssignmentV1Payload: {
            osPolicies: [{
                id: "test-os-policy",
                mode: "VALIDATION",
                resourceGroups: [{
                    resources: [{
                        id: "resource-tf",
                        file: {
                            content: "file-content-tf",
                            path: "file-path-tf-1",
                            state: "PRESENT",
                        },
                    }],
                }],
            }],
            instanceFilter: {
                inventories: [{
                    osShortName: "windows-10",
                }],
            },
            rollout: {
                disruptionBudget: {
                    percent: 100,
                },
                minWaitDuration: "60s",
            },
        },
    },
    labels: {
        state: "active",
    },
});
Copy
import pulumi
import pulumi_gcp as gcp

policy_orchestrator = gcp.osconfig.V2PolicyOrchestrator("policy_orchestrator",
    policy_orchestrator_id="po",
    state="ACTIVE",
    action="UPSERT",
    orchestrated_resource={
        "id": "test-orchestrated-resource",
        "os_policy_assignment_v1_payload": {
            "os_policies": [{
                "id": "test-os-policy",
                "mode": "VALIDATION",
                "resource_groups": [{
                    "resources": [{
                        "id": "resource-tf",
                        "file": {
                            "content": "file-content-tf",
                            "path": "file-path-tf-1",
                            "state": "PRESENT",
                        },
                    }],
                }],
            }],
            "instance_filter": {
                "inventories": [{
                    "os_short_name": "windows-10",
                }],
            },
            "rollout": {
                "disruption_budget": {
                    "percent": 100,
                },
                "min_wait_duration": "60s",
            },
        },
    },
    labels={
        "state": "active",
    })
Copy
package main

import (
	"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/osconfig"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := osconfig.NewV2PolicyOrchestrator(ctx, "policy_orchestrator", &osconfig.V2PolicyOrchestratorArgs{
			PolicyOrchestratorId: pulumi.String("po"),
			State:                pulumi.String("ACTIVE"),
			Action:               pulumi.String("UPSERT"),
			OrchestratedResource: &osconfig.V2PolicyOrchestratorOrchestratedResourceArgs{
				Id: pulumi.String("test-orchestrated-resource"),
				OsPolicyAssignmentV1Payload: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadArgs{
					OsPolicies: osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyArray{
						&osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyArgs{
							Id:   pulumi.String("test-os-policy"),
							Mode: pulumi.String("VALIDATION"),
							ResourceGroups: osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupArray{
								&osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupArgs{
									Resources: osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceArray{
										&osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceArgs{
											Id: pulumi.String("resource-tf"),
											File: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileArgs{
												Content: pulumi.String("file-content-tf"),
												Path:    pulumi.String("file-path-tf-1"),
												State:   pulumi.String("PRESENT"),
											},
										},
									},
								},
							},
						},
					},
					InstanceFilter: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterArgs{
						Inventories: osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventoryArray{
							&osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventoryArgs{
								OsShortName: pulumi.String("windows-10"),
							},
						},
					},
					Rollout: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutArgs{
						DisruptionBudget: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudgetArgs{
							Percent: pulumi.Int(100),
						},
						MinWaitDuration: pulumi.String("60s"),
					},
				},
			},
			Labels: pulumi.StringMap{
				"state": pulumi.String("active"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;

return await Deployment.RunAsync(() => 
{
    var policyOrchestrator = new Gcp.OsConfig.V2PolicyOrchestrator("policy_orchestrator", new()
    {
        PolicyOrchestratorId = "po",
        State = "ACTIVE",
        Action = "UPSERT",
        OrchestratedResource = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceArgs
        {
            Id = "test-orchestrated-resource",
            OsPolicyAssignmentV1Payload = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadArgs
            {
                OsPolicies = new[]
                {
                    new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyArgs
                    {
                        Id = "test-os-policy",
                        Mode = "VALIDATION",
                        ResourceGroups = new[]
                        {
                            new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupArgs
                            {
                                Resources = new[]
                                {
                                    new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceArgs
                                    {
                                        Id = "resource-tf",
                                        File = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileArgs
                                        {
                                            Content = "file-content-tf",
                                            Path = "file-path-tf-1",
                                            State = "PRESENT",
                                        },
                                    },
                                },
                            },
                        },
                    },
                },
                InstanceFilter = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterArgs
                {
                    Inventories = new[]
                    {
                        new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventoryArgs
                        {
                            OsShortName = "windows-10",
                        },
                    },
                },
                Rollout = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutArgs
                {
                    DisruptionBudget = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudgetArgs
                    {
                        Percent = 100,
                    },
                    MinWaitDuration = "60s",
                },
            },
        },
        Labels = 
        {
            { "state", "active" },
        },
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.osconfig.V2PolicyOrchestrator;
import com.pulumi.gcp.osconfig.V2PolicyOrchestratorArgs;
import com.pulumi.gcp.osconfig.inputs.V2PolicyOrchestratorOrchestratedResourceArgs;
import com.pulumi.gcp.osconfig.inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadArgs;
import com.pulumi.gcp.osconfig.inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterArgs;
import com.pulumi.gcp.osconfig.inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutArgs;
import com.pulumi.gcp.osconfig.inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudgetArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var policyOrchestrator = new V2PolicyOrchestrator("policyOrchestrator", V2PolicyOrchestratorArgs.builder()
            .policyOrchestratorId("po")
            .state("ACTIVE")
            .action("UPSERT")
            .orchestratedResource(V2PolicyOrchestratorOrchestratedResourceArgs.builder()
                .id("test-orchestrated-resource")
                .osPolicyAssignmentV1Payload(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadArgs.builder()
                    .osPolicies(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyArgs.builder()
                        .id("test-os-policy")
                        .mode("VALIDATION")
                        .resourceGroups(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupArgs.builder()
                            .resources(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceArgs.builder()
                                .id("resource-tf")
                                .file(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileArgs.builder()
                                    .content("file-content-tf")
                                    .path("file-path-tf-1")
                                    .state("PRESENT")
                                    .build())
                                .build())
                            .build())
                        .build())
                    .instanceFilter(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterArgs.builder()
                        .inventories(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventoryArgs.builder()
                            .osShortName("windows-10")
                            .build())
                        .build())
                    .rollout(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutArgs.builder()
                        .disruptionBudget(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudgetArgs.builder()
                            .percent(100)
                            .build())
                        .minWaitDuration("60s")
                        .build())
                    .build())
                .build())
            .labels(Map.of("state", "active"))
            .build());

    }
}
Copy
resources:
  policyOrchestrator:
    type: gcp:osconfig:V2PolicyOrchestrator
    name: policy_orchestrator
    properties:
      policyOrchestratorId: po
      state: ACTIVE
      action: UPSERT
      orchestratedResource:
        id: test-orchestrated-resource
        osPolicyAssignmentV1Payload:
          osPolicies:
            - id: test-os-policy
              mode: VALIDATION
              resourceGroups:
                - resources:
                    - id: resource-tf
                      file:
                        content: file-content-tf
                        path: file-path-tf-1
                        state: PRESENT
          instanceFilter:
            inventories:
              - osShortName: windows-10
          rollout:
            disruptionBudget:
              percent: 100
            minWaitDuration: 60s
      labels:
        state: active
Copy

Create V2PolicyOrchestrator Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new V2PolicyOrchestrator(name: string, args: V2PolicyOrchestratorArgs, opts?: CustomResourceOptions);
@overload
def V2PolicyOrchestrator(resource_name: str,
                         args: V2PolicyOrchestratorArgs,
                         opts: Optional[ResourceOptions] = None)

@overload
def V2PolicyOrchestrator(resource_name: str,
                         opts: Optional[ResourceOptions] = None,
                         action: Optional[str] = None,
                         orchestrated_resource: Optional[V2PolicyOrchestratorOrchestratedResourceArgs] = None,
                         policy_orchestrator_id: Optional[str] = None,
                         description: Optional[str] = None,
                         labels: Optional[Mapping[str, str]] = None,
                         orchestration_scope: Optional[V2PolicyOrchestratorOrchestrationScopeArgs] = None,
                         project: Optional[str] = None,
                         state: Optional[str] = None)
func NewV2PolicyOrchestrator(ctx *Context, name string, args V2PolicyOrchestratorArgs, opts ...ResourceOption) (*V2PolicyOrchestrator, error)
public V2PolicyOrchestrator(string name, V2PolicyOrchestratorArgs args, CustomResourceOptions? opts = null)
public V2PolicyOrchestrator(String name, V2PolicyOrchestratorArgs args)
public V2PolicyOrchestrator(String name, V2PolicyOrchestratorArgs args, CustomResourceOptions options)
type: gcp:osconfig:V2PolicyOrchestrator
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. V2PolicyOrchestratorArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. V2PolicyOrchestratorArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. V2PolicyOrchestratorArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. V2PolicyOrchestratorArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. V2PolicyOrchestratorArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var v2policyOrchestratorResource = new Gcp.OsConfig.V2PolicyOrchestrator("v2policyOrchestratorResource", new()
{
    Action = "string",
    OrchestratedResource = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceArgs
    {
        Id = "string",
        OsPolicyAssignmentV1Payload = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadArgs
        {
            InstanceFilter = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterArgs
            {
                All = false,
                ExclusionLabels = new[]
                {
                    new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterExclusionLabelArgs
                    {
                        Labels = 
                        {
                            { "string", "string" },
                        },
                    },
                },
                InclusionLabels = new[]
                {
                    new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInclusionLabelArgs
                    {
                        Labels = 
                        {
                            { "string", "string" },
                        },
                    },
                },
                Inventories = new[]
                {
                    new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventoryArgs
                    {
                        OsShortName = "string",
                        OsVersion = "string",
                    },
                },
            },
            OsPolicies = new[]
            {
                new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyArgs
                {
                    Id = "string",
                    Mode = "string",
                    ResourceGroups = new[]
                    {
                        new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupArgs
                        {
                            Resources = new[]
                            {
                                new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceArgs
                                {
                                    Id = "string",
                                    Exec = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecArgs
                                    {
                                        Validate = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateArgs
                                        {
                                            Interpreter = "string",
                                            Args = new[]
                                            {
                                                "string",
                                            },
                                            File = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileArgs
                                            {
                                                AllowInsecure = false,
                                                Gcs = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileGcsArgs
                                                {
                                                    Bucket = "string",
                                                    Object = "string",
                                                    Generation = "string",
                                                },
                                                LocalPath = "string",
                                                Remote = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileRemoteArgs
                                                {
                                                    Uri = "string",
                                                    Sha256Checksum = "string",
                                                },
                                            },
                                            OutputFilePath = "string",
                                            Script = "string",
                                        },
                                        Enforce = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceArgs
                                        {
                                            Interpreter = "string",
                                            Args = new[]
                                            {
                                                "string",
                                            },
                                            File = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileArgs
                                            {
                                                AllowInsecure = false,
                                                Gcs = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileGcsArgs
                                                {
                                                    Bucket = "string",
                                                    Object = "string",
                                                    Generation = "string",
                                                },
                                                LocalPath = "string",
                                                Remote = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileRemoteArgs
                                                {
                                                    Uri = "string",
                                                    Sha256Checksum = "string",
                                                },
                                            },
                                            OutputFilePath = "string",
                                            Script = "string",
                                        },
                                    },
                                    File = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileArgs
                                    {
                                        Path = "string",
                                        State = "string",
                                        Content = "string",
                                        File = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileArgs
                                        {
                                            AllowInsecure = false,
                                            Gcs = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileGcsArgs
                                            {
                                                Bucket = "string",
                                                Object = "string",
                                                Generation = "string",
                                            },
                                            LocalPath = "string",
                                            Remote = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileRemoteArgs
                                            {
                                                Uri = "string",
                                                Sha256Checksum = "string",
                                            },
                                        },
                                        Permissions = "string",
                                    },
                                    Pkg = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgArgs
                                    {
                                        DesiredState = "string",
                                        Apt = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgAptArgs
                                        {
                                            Name = "string",
                                        },
                                        Deb = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebArgs
                                        {
                                            Source = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceArgs
                                            {
                                                AllowInsecure = false,
                                                Gcs = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceGcsArgs
                                                {
                                                    Bucket = "string",
                                                    Object = "string",
                                                    Generation = "string",
                                                },
                                                LocalPath = "string",
                                                Remote = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceRemoteArgs
                                                {
                                                    Uri = "string",
                                                    Sha256Checksum = "string",
                                                },
                                            },
                                            PullDeps = false,
                                        },
                                        Googet = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgGoogetArgs
                                        {
                                            Name = "string",
                                        },
                                        Msi = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiArgs
                                        {
                                            Source = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceArgs
                                            {
                                                AllowInsecure = false,
                                                Gcs = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceGcsArgs
                                                {
                                                    Bucket = "string",
                                                    Object = "string",
                                                    Generation = "string",
                                                },
                                                LocalPath = "string",
                                                Remote = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceRemoteArgs
                                                {
                                                    Uri = "string",
                                                    Sha256Checksum = "string",
                                                },
                                            },
                                            Properties = new[]
                                            {
                                                "string",
                                            },
                                        },
                                        Rpm = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmArgs
                                        {
                                            Source = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceArgs
                                            {
                                                AllowInsecure = false,
                                                Gcs = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceGcsArgs
                                                {
                                                    Bucket = "string",
                                                    Object = "string",
                                                    Generation = "string",
                                                },
                                                LocalPath = "string",
                                                Remote = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceRemoteArgs
                                                {
                                                    Uri = "string",
                                                    Sha256Checksum = "string",
                                                },
                                            },
                                            PullDeps = false,
                                        },
                                        Yum = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgYumArgs
                                        {
                                            Name = "string",
                                        },
                                        Zypper = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgZypperArgs
                                        {
                                            Name = "string",
                                        },
                                    },
                                    Repository = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryArgs
                                    {
                                        Apt = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryAptArgs
                                        {
                                            ArchiveType = "string",
                                            Components = new[]
                                            {
                                                "string",
                                            },
                                            Distribution = "string",
                                            Uri = "string",
                                            GpgKey = "string",
                                        },
                                        Goo = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryGooArgs
                                        {
                                            Name = "string",
                                            Url = "string",
                                        },
                                        Yum = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryYumArgs
                                        {
                                            BaseUrl = "string",
                                            Id = "string",
                                            DisplayName = "string",
                                            GpgKeys = new[]
                                            {
                                                "string",
                                            },
                                        },
                                        Zypper = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryZypperArgs
                                        {
                                            BaseUrl = "string",
                                            Id = "string",
                                            DisplayName = "string",
                                            GpgKeys = new[]
                                            {
                                                "string",
                                            },
                                        },
                                    },
                                },
                            },
                            InventoryFilters = new[]
                            {
                                new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupInventoryFilterArgs
                                {
                                    OsShortName = "string",
                                    OsVersion = "string",
                                },
                            },
                        },
                    },
                    AllowNoResourceGroupMatch = false,
                    Description = "string",
                },
            },
            Rollout = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutArgs
            {
                DisruptionBudget = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudgetArgs
                {
                    Fixed = 0,
                    Percent = 0,
                },
                MinWaitDuration = "string",
            },
            Baseline = false,
            Deleted = false,
            Description = "string",
            Name = "string",
            Reconciling = false,
            RevisionCreateTime = "string",
            RevisionId = "string",
            RolloutState = "string",
            Uid = "string",
        },
    },
    PolicyOrchestratorId = "string",
    Description = "string",
    Labels = 
    {
        { "string", "string" },
    },
    OrchestrationScope = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestrationScopeArgs
    {
        Selectors = new[]
        {
            new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestrationScopeSelectorArgs
            {
                LocationSelector = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestrationScopeSelectorLocationSelectorArgs
                {
                    IncludedLocations = new[]
                    {
                        "string",
                    },
                },
                ResourceHierarchySelector = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestrationScopeSelectorResourceHierarchySelectorArgs
                {
                    IncludedFolders = new[]
                    {
                        "string",
                    },
                    IncludedProjects = new[]
                    {
                        "string",
                    },
                },
            },
        },
    },
    Project = "string",
    State = "string",
});
Copy
example, err := osconfig.NewV2PolicyOrchestrator(ctx, "v2policyOrchestratorResource", &osconfig.V2PolicyOrchestratorArgs{
	Action: pulumi.String("string"),
	OrchestratedResource: &osconfig.V2PolicyOrchestratorOrchestratedResourceArgs{
		Id: pulumi.String("string"),
		OsPolicyAssignmentV1Payload: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadArgs{
			InstanceFilter: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterArgs{
				All: pulumi.Bool(false),
				ExclusionLabels: osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterExclusionLabelArray{
					&osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterExclusionLabelArgs{
						Labels: pulumi.StringMap{
							"string": pulumi.String("string"),
						},
					},
				},
				InclusionLabels: osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInclusionLabelArray{
					&osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInclusionLabelArgs{
						Labels: pulumi.StringMap{
							"string": pulumi.String("string"),
						},
					},
				},
				Inventories: osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventoryArray{
					&osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventoryArgs{
						OsShortName: pulumi.String("string"),
						OsVersion:   pulumi.String("string"),
					},
				},
			},
			OsPolicies: osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyArray{
				&osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyArgs{
					Id:   pulumi.String("string"),
					Mode: pulumi.String("string"),
					ResourceGroups: osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupArray{
						&osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupArgs{
							Resources: osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceArray{
								&osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceArgs{
									Id: pulumi.String("string"),
									Exec: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecArgs{
										Validate: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateArgs{
											Interpreter: pulumi.String("string"),
											Args: pulumi.StringArray{
												pulumi.String("string"),
											},
											File: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileArgs{
												AllowInsecure: pulumi.Bool(false),
												Gcs: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileGcsArgs{
													Bucket:     pulumi.String("string"),
													Object:     pulumi.String("string"),
													Generation: pulumi.String("string"),
												},
												LocalPath: pulumi.String("string"),
												Remote: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileRemoteArgs{
													Uri:            pulumi.String("string"),
													Sha256Checksum: pulumi.String("string"),
												},
											},
											OutputFilePath: pulumi.String("string"),
											Script:         pulumi.String("string"),
										},
										Enforce: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceArgs{
											Interpreter: pulumi.String("string"),
											Args: pulumi.StringArray{
												pulumi.String("string"),
											},
											File: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileArgs{
												AllowInsecure: pulumi.Bool(false),
												Gcs: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileGcsArgs{
													Bucket:     pulumi.String("string"),
													Object:     pulumi.String("string"),
													Generation: pulumi.String("string"),
												},
												LocalPath: pulumi.String("string"),
												Remote: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileRemoteArgs{
													Uri:            pulumi.String("string"),
													Sha256Checksum: pulumi.String("string"),
												},
											},
											OutputFilePath: pulumi.String("string"),
											Script:         pulumi.String("string"),
										},
									},
									File: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileArgs{
										Path:    pulumi.String("string"),
										State:   pulumi.String("string"),
										Content: pulumi.String("string"),
										File: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileArgs{
											AllowInsecure: pulumi.Bool(false),
											Gcs: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileGcsArgs{
												Bucket:     pulumi.String("string"),
												Object:     pulumi.String("string"),
												Generation: pulumi.String("string"),
											},
											LocalPath: pulumi.String("string"),
											Remote: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileRemoteArgs{
												Uri:            pulumi.String("string"),
												Sha256Checksum: pulumi.String("string"),
											},
										},
										Permissions: pulumi.String("string"),
									},
									Pkg: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgArgs{
										DesiredState: pulumi.String("string"),
										Apt: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgAptArgs{
											Name: pulumi.String("string"),
										},
										Deb: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebArgs{
											Source: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceArgs{
												AllowInsecure: pulumi.Bool(false),
												Gcs: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceGcsArgs{
													Bucket:     pulumi.String("string"),
													Object:     pulumi.String("string"),
													Generation: pulumi.String("string"),
												},
												LocalPath: pulumi.String("string"),
												Remote: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceRemoteArgs{
													Uri:            pulumi.String("string"),
													Sha256Checksum: pulumi.String("string"),
												},
											},
											PullDeps: pulumi.Bool(false),
										},
										Googet: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgGoogetArgs{
											Name: pulumi.String("string"),
										},
										Msi: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiArgs{
											Source: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceArgs{
												AllowInsecure: pulumi.Bool(false),
												Gcs: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceGcsArgs{
													Bucket:     pulumi.String("string"),
													Object:     pulumi.String("string"),
													Generation: pulumi.String("string"),
												},
												LocalPath: pulumi.String("string"),
												Remote: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceRemoteArgs{
													Uri:            pulumi.String("string"),
													Sha256Checksum: pulumi.String("string"),
												},
											},
											Properties: pulumi.StringArray{
												pulumi.String("string"),
											},
										},
										Rpm: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmArgs{
											Source: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceArgs{
												AllowInsecure: pulumi.Bool(false),
												Gcs: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceGcsArgs{
													Bucket:     pulumi.String("string"),
													Object:     pulumi.String("string"),
													Generation: pulumi.String("string"),
												},
												LocalPath: pulumi.String("string"),
												Remote: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceRemoteArgs{
													Uri:            pulumi.String("string"),
													Sha256Checksum: pulumi.String("string"),
												},
											},
											PullDeps: pulumi.Bool(false),
										},
										Yum: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgYumArgs{
											Name: pulumi.String("string"),
										},
										Zypper: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgZypperArgs{
											Name: pulumi.String("string"),
										},
									},
									Repository: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryArgs{
										Apt: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryAptArgs{
											ArchiveType: pulumi.String("string"),
											Components: pulumi.StringArray{
												pulumi.String("string"),
											},
											Distribution: pulumi.String("string"),
											Uri:          pulumi.String("string"),
											GpgKey:       pulumi.String("string"),
										},
										Goo: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryGooArgs{
											Name: pulumi.String("string"),
											Url:  pulumi.String("string"),
										},
										Yum: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryYumArgs{
											BaseUrl:     pulumi.String("string"),
											Id:          pulumi.String("string"),
											DisplayName: pulumi.String("string"),
											GpgKeys: pulumi.StringArray{
												pulumi.String("string"),
											},
										},
										Zypper: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryZypperArgs{
											BaseUrl:     pulumi.String("string"),
											Id:          pulumi.String("string"),
											DisplayName: pulumi.String("string"),
											GpgKeys: pulumi.StringArray{
												pulumi.String("string"),
											},
										},
									},
								},
							},
							InventoryFilters: osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupInventoryFilterArray{
								&osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupInventoryFilterArgs{
									OsShortName: pulumi.String("string"),
									OsVersion:   pulumi.String("string"),
								},
							},
						},
					},
					AllowNoResourceGroupMatch: pulumi.Bool(false),
					Description:               pulumi.String("string"),
				},
			},
			Rollout: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutArgs{
				DisruptionBudget: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudgetArgs{
					Fixed:   pulumi.Int(0),
					Percent: pulumi.Int(0),
				},
				MinWaitDuration: pulumi.String("string"),
			},
			Baseline:           pulumi.Bool(false),
			Deleted:            pulumi.Bool(false),
			Description:        pulumi.String("string"),
			Name:               pulumi.String("string"),
			Reconciling:        pulumi.Bool(false),
			RevisionCreateTime: pulumi.String("string"),
			RevisionId:         pulumi.String("string"),
			RolloutState:       pulumi.String("string"),
			Uid:                pulumi.String("string"),
		},
	},
	PolicyOrchestratorId: pulumi.String("string"),
	Description:          pulumi.String("string"),
	Labels: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	OrchestrationScope: &osconfig.V2PolicyOrchestratorOrchestrationScopeArgs{
		Selectors: osconfig.V2PolicyOrchestratorOrchestrationScopeSelectorArray{
			&osconfig.V2PolicyOrchestratorOrchestrationScopeSelectorArgs{
				LocationSelector: &osconfig.V2PolicyOrchestratorOrchestrationScopeSelectorLocationSelectorArgs{
					IncludedLocations: pulumi.StringArray{
						pulumi.String("string"),
					},
				},
				ResourceHierarchySelector: &osconfig.V2PolicyOrchestratorOrchestrationScopeSelectorResourceHierarchySelectorArgs{
					IncludedFolders: pulumi.StringArray{
						pulumi.String("string"),
					},
					IncludedProjects: pulumi.StringArray{
						pulumi.String("string"),
					},
				},
			},
		},
	},
	Project: pulumi.String("string"),
	State:   pulumi.String("string"),
})
Copy
var v2policyOrchestratorResource = new V2PolicyOrchestrator("v2policyOrchestratorResource", V2PolicyOrchestratorArgs.builder()
    .action("string")
    .orchestratedResource(V2PolicyOrchestratorOrchestratedResourceArgs.builder()
        .id("string")
        .osPolicyAssignmentV1Payload(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadArgs.builder()
            .instanceFilter(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterArgs.builder()
                .all(false)
                .exclusionLabels(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterExclusionLabelArgs.builder()
                    .labels(Map.of("string", "string"))
                    .build())
                .inclusionLabels(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInclusionLabelArgs.builder()
                    .labels(Map.of("string", "string"))
                    .build())
                .inventories(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventoryArgs.builder()
                    .osShortName("string")
                    .osVersion("string")
                    .build())
                .build())
            .osPolicies(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyArgs.builder()
                .id("string")
                .mode("string")
                .resourceGroups(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupArgs.builder()
                    .resources(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceArgs.builder()
                        .id("string")
                        .exec(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecArgs.builder()
                            .validate(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateArgs.builder()
                                .interpreter("string")
                                .args("string")
                                .file(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileArgs.builder()
                                    .allowInsecure(false)
                                    .gcs(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileGcsArgs.builder()
                                        .bucket("string")
                                        .object("string")
                                        .generation("string")
                                        .build())
                                    .localPath("string")
                                    .remote(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileRemoteArgs.builder()
                                        .uri("string")
                                        .sha256Checksum("string")
                                        .build())
                                    .build())
                                .outputFilePath("string")
                                .script("string")
                                .build())
                            .enforce(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceArgs.builder()
                                .interpreter("string")
                                .args("string")
                                .file(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileArgs.builder()
                                    .allowInsecure(false)
                                    .gcs(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileGcsArgs.builder()
                                        .bucket("string")
                                        .object("string")
                                        .generation("string")
                                        .build())
                                    .localPath("string")
                                    .remote(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileRemoteArgs.builder()
                                        .uri("string")
                                        .sha256Checksum("string")
                                        .build())
                                    .build())
                                .outputFilePath("string")
                                .script("string")
                                .build())
                            .build())
                        .file(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileArgs.builder()
                            .path("string")
                            .state("string")
                            .content("string")
                            .file(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileArgs.builder()
                                .allowInsecure(false)
                                .gcs(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileGcsArgs.builder()
                                    .bucket("string")
                                    .object("string")
                                    .generation("string")
                                    .build())
                                .localPath("string")
                                .remote(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileRemoteArgs.builder()
                                    .uri("string")
                                    .sha256Checksum("string")
                                    .build())
                                .build())
                            .permissions("string")
                            .build())
                        .pkg(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgArgs.builder()
                            .desiredState("string")
                            .apt(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgAptArgs.builder()
                                .name("string")
                                .build())
                            .deb(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebArgs.builder()
                                .source(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceArgs.builder()
                                    .allowInsecure(false)
                                    .gcs(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceGcsArgs.builder()
                                        .bucket("string")
                                        .object("string")
                                        .generation("string")
                                        .build())
                                    .localPath("string")
                                    .remote(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceRemoteArgs.builder()
                                        .uri("string")
                                        .sha256Checksum("string")
                                        .build())
                                    .build())
                                .pullDeps(false)
                                .build())
                            .googet(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgGoogetArgs.builder()
                                .name("string")
                                .build())
                            .msi(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiArgs.builder()
                                .source(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceArgs.builder()
                                    .allowInsecure(false)
                                    .gcs(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceGcsArgs.builder()
                                        .bucket("string")
                                        .object("string")
                                        .generation("string")
                                        .build())
                                    .localPath("string")
                                    .remote(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceRemoteArgs.builder()
                                        .uri("string")
                                        .sha256Checksum("string")
                                        .build())
                                    .build())
                                .properties("string")
                                .build())
                            .rpm(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmArgs.builder()
                                .source(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceArgs.builder()
                                    .allowInsecure(false)
                                    .gcs(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceGcsArgs.builder()
                                        .bucket("string")
                                        .object("string")
                                        .generation("string")
                                        .build())
                                    .localPath("string")
                                    .remote(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceRemoteArgs.builder()
                                        .uri("string")
                                        .sha256Checksum("string")
                                        .build())
                                    .build())
                                .pullDeps(false)
                                .build())
                            .yum(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgYumArgs.builder()
                                .name("string")
                                .build())
                            .zypper(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgZypperArgs.builder()
                                .name("string")
                                .build())
                            .build())
                        .repository(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryArgs.builder()
                            .apt(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryAptArgs.builder()
                                .archiveType("string")
                                .components("string")
                                .distribution("string")
                                .uri("string")
                                .gpgKey("string")
                                .build())
                            .goo(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryGooArgs.builder()
                                .name("string")
                                .url("string")
                                .build())
                            .yum(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryYumArgs.builder()
                                .baseUrl("string")
                                .id("string")
                                .displayName("string")
                                .gpgKeys("string")
                                .build())
                            .zypper(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryZypperArgs.builder()
                                .baseUrl("string")
                                .id("string")
                                .displayName("string")
                                .gpgKeys("string")
                                .build())
                            .build())
                        .build())
                    .inventoryFilters(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupInventoryFilterArgs.builder()
                        .osShortName("string")
                        .osVersion("string")
                        .build())
                    .build())
                .allowNoResourceGroupMatch(false)
                .description("string")
                .build())
            .rollout(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutArgs.builder()
                .disruptionBudget(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudgetArgs.builder()
                    .fixed(0)
                    .percent(0)
                    .build())
                .minWaitDuration("string")
                .build())
            .baseline(false)
            .deleted(false)
            .description("string")
            .name("string")
            .reconciling(false)
            .revisionCreateTime("string")
            .revisionId("string")
            .rolloutState("string")
            .uid("string")
            .build())
        .build())
    .policyOrchestratorId("string")
    .description("string")
    .labels(Map.of("string", "string"))
    .orchestrationScope(V2PolicyOrchestratorOrchestrationScopeArgs.builder()
        .selectors(V2PolicyOrchestratorOrchestrationScopeSelectorArgs.builder()
            .locationSelector(V2PolicyOrchestratorOrchestrationScopeSelectorLocationSelectorArgs.builder()
                .includedLocations("string")
                .build())
            .resourceHierarchySelector(V2PolicyOrchestratorOrchestrationScopeSelectorResourceHierarchySelectorArgs.builder()
                .includedFolders("string")
                .includedProjects("string")
                .build())
            .build())
        .build())
    .project("string")
    .state("string")
    .build());
Copy
v2policy_orchestrator_resource = gcp.osconfig.V2PolicyOrchestrator("v2policyOrchestratorResource",
    action="string",
    orchestrated_resource={
        "id": "string",
        "os_policy_assignment_v1_payload": {
            "instance_filter": {
                "all": False,
                "exclusion_labels": [{
                    "labels": {
                        "string": "string",
                    },
                }],
                "inclusion_labels": [{
                    "labels": {
                        "string": "string",
                    },
                }],
                "inventories": [{
                    "os_short_name": "string",
                    "os_version": "string",
                }],
            },
            "os_policies": [{
                "id": "string",
                "mode": "string",
                "resource_groups": [{
                    "resources": [{
                        "id": "string",
                        "exec_": {
                            "validate": {
                                "interpreter": "string",
                                "args": ["string"],
                                "file": {
                                    "allow_insecure": False,
                                    "gcs": {
                                        "bucket": "string",
                                        "object": "string",
                                        "generation": "string",
                                    },
                                    "local_path": "string",
                                    "remote": {
                                        "uri": "string",
                                        "sha256_checksum": "string",
                                    },
                                },
                                "output_file_path": "string",
                                "script": "string",
                            },
                            "enforce": {
                                "interpreter": "string",
                                "args": ["string"],
                                "file": {
                                    "allow_insecure": False,
                                    "gcs": {
                                        "bucket": "string",
                                        "object": "string",
                                        "generation": "string",
                                    },
                                    "local_path": "string",
                                    "remote": {
                                        "uri": "string",
                                        "sha256_checksum": "string",
                                    },
                                },
                                "output_file_path": "string",
                                "script": "string",
                            },
                        },
                        "file": {
                            "path": "string",
                            "state": "string",
                            "content": "string",
                            "file": {
                                "allow_insecure": False,
                                "gcs": {
                                    "bucket": "string",
                                    "object": "string",
                                    "generation": "string",
                                },
                                "local_path": "string",
                                "remote": {
                                    "uri": "string",
                                    "sha256_checksum": "string",
                                },
                            },
                            "permissions": "string",
                        },
                        "pkg": {
                            "desired_state": "string",
                            "apt": {
                                "name": "string",
                            },
                            "deb": {
                                "source": {
                                    "allow_insecure": False,
                                    "gcs": {
                                        "bucket": "string",
                                        "object": "string",
                                        "generation": "string",
                                    },
                                    "local_path": "string",
                                    "remote": {
                                        "uri": "string",
                                        "sha256_checksum": "string",
                                    },
                                },
                                "pull_deps": False,
                            },
                            "googet": {
                                "name": "string",
                            },
                            "msi": {
                                "source": {
                                    "allow_insecure": False,
                                    "gcs": {
                                        "bucket": "string",
                                        "object": "string",
                                        "generation": "string",
                                    },
                                    "local_path": "string",
                                    "remote": {
                                        "uri": "string",
                                        "sha256_checksum": "string",
                                    },
                                },
                                "properties": ["string"],
                            },
                            "rpm": {
                                "source": {
                                    "allow_insecure": False,
                                    "gcs": {
                                        "bucket": "string",
                                        "object": "string",
                                        "generation": "string",
                                    },
                                    "local_path": "string",
                                    "remote": {
                                        "uri": "string",
                                        "sha256_checksum": "string",
                                    },
                                },
                                "pull_deps": False,
                            },
                            "yum": {
                                "name": "string",
                            },
                            "zypper": {
                                "name": "string",
                            },
                        },
                        "repository": {
                            "apt": {
                                "archive_type": "string",
                                "components": ["string"],
                                "distribution": "string",
                                "uri": "string",
                                "gpg_key": "string",
                            },
                            "goo": {
                                "name": "string",
                                "url": "string",
                            },
                            "yum": {
                                "base_url": "string",
                                "id": "string",
                                "display_name": "string",
                                "gpg_keys": ["string"],
                            },
                            "zypper": {
                                "base_url": "string",
                                "id": "string",
                                "display_name": "string",
                                "gpg_keys": ["string"],
                            },
                        },
                    }],
                    "inventory_filters": [{
                        "os_short_name": "string",
                        "os_version": "string",
                    }],
                }],
                "allow_no_resource_group_match": False,
                "description": "string",
            }],
            "rollout": {
                "disruption_budget": {
                    "fixed": 0,
                    "percent": 0,
                },
                "min_wait_duration": "string",
            },
            "baseline": False,
            "deleted": False,
            "description": "string",
            "name": "string",
            "reconciling": False,
            "revision_create_time": "string",
            "revision_id": "string",
            "rollout_state": "string",
            "uid": "string",
        },
    },
    policy_orchestrator_id="string",
    description="string",
    labels={
        "string": "string",
    },
    orchestration_scope={
        "selectors": [{
            "location_selector": {
                "included_locations": ["string"],
            },
            "resource_hierarchy_selector": {
                "included_folders": ["string"],
                "included_projects": ["string"],
            },
        }],
    },
    project="string",
    state="string")
Copy
const v2policyOrchestratorResource = new gcp.osconfig.V2PolicyOrchestrator("v2policyOrchestratorResource", {
    action: "string",
    orchestratedResource: {
        id: "string",
        osPolicyAssignmentV1Payload: {
            instanceFilter: {
                all: false,
                exclusionLabels: [{
                    labels: {
                        string: "string",
                    },
                }],
                inclusionLabels: [{
                    labels: {
                        string: "string",
                    },
                }],
                inventories: [{
                    osShortName: "string",
                    osVersion: "string",
                }],
            },
            osPolicies: [{
                id: "string",
                mode: "string",
                resourceGroups: [{
                    resources: [{
                        id: "string",
                        exec: {
                            validate: {
                                interpreter: "string",
                                args: ["string"],
                                file: {
                                    allowInsecure: false,
                                    gcs: {
                                        bucket: "string",
                                        object: "string",
                                        generation: "string",
                                    },
                                    localPath: "string",
                                    remote: {
                                        uri: "string",
                                        sha256Checksum: "string",
                                    },
                                },
                                outputFilePath: "string",
                                script: "string",
                            },
                            enforce: {
                                interpreter: "string",
                                args: ["string"],
                                file: {
                                    allowInsecure: false,
                                    gcs: {
                                        bucket: "string",
                                        object: "string",
                                        generation: "string",
                                    },
                                    localPath: "string",
                                    remote: {
                                        uri: "string",
                                        sha256Checksum: "string",
                                    },
                                },
                                outputFilePath: "string",
                                script: "string",
                            },
                        },
                        file: {
                            path: "string",
                            state: "string",
                            content: "string",
                            file: {
                                allowInsecure: false,
                                gcs: {
                                    bucket: "string",
                                    object: "string",
                                    generation: "string",
                                },
                                localPath: "string",
                                remote: {
                                    uri: "string",
                                    sha256Checksum: "string",
                                },
                            },
                            permissions: "string",
                        },
                        pkg: {
                            desiredState: "string",
                            apt: {
                                name: "string",
                            },
                            deb: {
                                source: {
                                    allowInsecure: false,
                                    gcs: {
                                        bucket: "string",
                                        object: "string",
                                        generation: "string",
                                    },
                                    localPath: "string",
                                    remote: {
                                        uri: "string",
                                        sha256Checksum: "string",
                                    },
                                },
                                pullDeps: false,
                            },
                            googet: {
                                name: "string",
                            },
                            msi: {
                                source: {
                                    allowInsecure: false,
                                    gcs: {
                                        bucket: "string",
                                        object: "string",
                                        generation: "string",
                                    },
                                    localPath: "string",
                                    remote: {
                                        uri: "string",
                                        sha256Checksum: "string",
                                    },
                                },
                                properties: ["string"],
                            },
                            rpm: {
                                source: {
                                    allowInsecure: false,
                                    gcs: {
                                        bucket: "string",
                                        object: "string",
                                        generation: "string",
                                    },
                                    localPath: "string",
                                    remote: {
                                        uri: "string",
                                        sha256Checksum: "string",
                                    },
                                },
                                pullDeps: false,
                            },
                            yum: {
                                name: "string",
                            },
                            zypper: {
                                name: "string",
                            },
                        },
                        repository: {
                            apt: {
                                archiveType: "string",
                                components: ["string"],
                                distribution: "string",
                                uri: "string",
                                gpgKey: "string",
                            },
                            goo: {
                                name: "string",
                                url: "string",
                            },
                            yum: {
                                baseUrl: "string",
                                id: "string",
                                displayName: "string",
                                gpgKeys: ["string"],
                            },
                            zypper: {
                                baseUrl: "string",
                                id: "string",
                                displayName: "string",
                                gpgKeys: ["string"],
                            },
                        },
                    }],
                    inventoryFilters: [{
                        osShortName: "string",
                        osVersion: "string",
                    }],
                }],
                allowNoResourceGroupMatch: false,
                description: "string",
            }],
            rollout: {
                disruptionBudget: {
                    fixed: 0,
                    percent: 0,
                },
                minWaitDuration: "string",
            },
            baseline: false,
            deleted: false,
            description: "string",
            name: "string",
            reconciling: false,
            revisionCreateTime: "string",
            revisionId: "string",
            rolloutState: "string",
            uid: "string",
        },
    },
    policyOrchestratorId: "string",
    description: "string",
    labels: {
        string: "string",
    },
    orchestrationScope: {
        selectors: [{
            locationSelector: {
                includedLocations: ["string"],
            },
            resourceHierarchySelector: {
                includedFolders: ["string"],
                includedProjects: ["string"],
            },
        }],
    },
    project: "string",
    state: "string",
});
Copy
type: gcp:osconfig:V2PolicyOrchestrator
properties:
    action: string
    description: string
    labels:
        string: string
    orchestratedResource:
        id: string
        osPolicyAssignmentV1Payload:
            baseline: false
            deleted: false
            description: string
            instanceFilter:
                all: false
                exclusionLabels:
                    - labels:
                        string: string
                inclusionLabels:
                    - labels:
                        string: string
                inventories:
                    - osShortName: string
                      osVersion: string
            name: string
            osPolicies:
                - allowNoResourceGroupMatch: false
                  description: string
                  id: string
                  mode: string
                  resourceGroups:
                    - inventoryFilters:
                        - osShortName: string
                          osVersion: string
                      resources:
                        - exec:
                            enforce:
                                args:
                                    - string
                                file:
                                    allowInsecure: false
                                    gcs:
                                        bucket: string
                                        generation: string
                                        object: string
                                    localPath: string
                                    remote:
                                        sha256Checksum: string
                                        uri: string
                                interpreter: string
                                outputFilePath: string
                                script: string
                            validate:
                                args:
                                    - string
                                file:
                                    allowInsecure: false
                                    gcs:
                                        bucket: string
                                        generation: string
                                        object: string
                                    localPath: string
                                    remote:
                                        sha256Checksum: string
                                        uri: string
                                interpreter: string
                                outputFilePath: string
                                script: string
                          file:
                            content: string
                            file:
                                allowInsecure: false
                                gcs:
                                    bucket: string
                                    generation: string
                                    object: string
                                localPath: string
                                remote:
                                    sha256Checksum: string
                                    uri: string
                            path: string
                            permissions: string
                            state: string
                          id: string
                          pkg:
                            apt:
                                name: string
                            deb:
                                pullDeps: false
                                source:
                                    allowInsecure: false
                                    gcs:
                                        bucket: string
                                        generation: string
                                        object: string
                                    localPath: string
                                    remote:
                                        sha256Checksum: string
                                        uri: string
                            desiredState: string
                            googet:
                                name: string
                            msi:
                                properties:
                                    - string
                                source:
                                    allowInsecure: false
                                    gcs:
                                        bucket: string
                                        generation: string
                                        object: string
                                    localPath: string
                                    remote:
                                        sha256Checksum: string
                                        uri: string
                            rpm:
                                pullDeps: false
                                source:
                                    allowInsecure: false
                                    gcs:
                                        bucket: string
                                        generation: string
                                        object: string
                                    localPath: string
                                    remote:
                                        sha256Checksum: string
                                        uri: string
                            yum:
                                name: string
                            zypper:
                                name: string
                          repository:
                            apt:
                                archiveType: string
                                components:
                                    - string
                                distribution: string
                                gpgKey: string
                                uri: string
                            goo:
                                name: string
                                url: string
                            yum:
                                baseUrl: string
                                displayName: string
                                gpgKeys:
                                    - string
                                id: string
                            zypper:
                                baseUrl: string
                                displayName: string
                                gpgKeys:
                                    - string
                                id: string
            reconciling: false
            revisionCreateTime: string
            revisionId: string
            rollout:
                disruptionBudget:
                    fixed: 0
                    percent: 0
                minWaitDuration: string
            rolloutState: string
            uid: string
    orchestrationScope:
        selectors:
            - locationSelector:
                includedLocations:
                    - string
              resourceHierarchySelector:
                includedFolders:
                    - string
                includedProjects:
                    - string
    policyOrchestratorId: string
    project: string
    state: string
Copy

V2PolicyOrchestrator Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The V2PolicyOrchestrator resource accepts the following input properties:

Action This property is required. string
Required. Action to be done by the orchestrator in projects/{project_id}/zones/{zone_id} locations defined by the orchestration_scope. Allowed values:

  • UPSERT - Orchestrator will create or update target resources.
  • DELETE - Orchestrator will delete target resources, if they exist
OrchestratedResource This property is required. V2PolicyOrchestratorOrchestratedResource
Represents a resource that is being orchestrated by the policy orchestrator. Structure is documented below.
PolicyOrchestratorId
This property is required.
Changes to this property will trigger replacement.
string
Required. The logical identifier of the policy orchestrator, with the following restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the parent.
Description string
Optional. Freeform text describing the purpose of the resource.
Labels Dictionary<string, string>
Optional. Labels as key value pairs Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
OrchestrationScope V2PolicyOrchestratorOrchestrationScope
Defines a set of selectors which drive which resources are in scope of policy orchestration.
Project Changes to this property will trigger replacement. string
State string
(Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
Action This property is required. string
Required. Action to be done by the orchestrator in projects/{project_id}/zones/{zone_id} locations defined by the orchestration_scope. Allowed values:

  • UPSERT - Orchestrator will create or update target resources.
  • DELETE - Orchestrator will delete target resources, if they exist
OrchestratedResource This property is required. V2PolicyOrchestratorOrchestratedResourceArgs
Represents a resource that is being orchestrated by the policy orchestrator. Structure is documented below.
PolicyOrchestratorId
This property is required.
Changes to this property will trigger replacement.
string
Required. The logical identifier of the policy orchestrator, with the following restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the parent.
Description string
Optional. Freeform text describing the purpose of the resource.
Labels map[string]string
Optional. Labels as key value pairs Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
OrchestrationScope V2PolicyOrchestratorOrchestrationScopeArgs
Defines a set of selectors which drive which resources are in scope of policy orchestration.
Project Changes to this property will trigger replacement. string
State string
(Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
action This property is required. String
Required. Action to be done by the orchestrator in projects/{project_id}/zones/{zone_id} locations defined by the orchestration_scope. Allowed values:

  • UPSERT - Orchestrator will create or update target resources.
  • DELETE - Orchestrator will delete target resources, if they exist
orchestratedResource This property is required. V2PolicyOrchestratorOrchestratedResource
Represents a resource that is being orchestrated by the policy orchestrator. Structure is documented below.
policyOrchestratorId
This property is required.
Changes to this property will trigger replacement.
String
Required. The logical identifier of the policy orchestrator, with the following restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the parent.
description String
Optional. Freeform text describing the purpose of the resource.
labels Map<String,String>
Optional. Labels as key value pairs Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
orchestrationScope V2PolicyOrchestratorOrchestrationScope
Defines a set of selectors which drive which resources are in scope of policy orchestration.
project Changes to this property will trigger replacement. String
state String
(Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
action This property is required. string
Required. Action to be done by the orchestrator in projects/{project_id}/zones/{zone_id} locations defined by the orchestration_scope. Allowed values:

  • UPSERT - Orchestrator will create or update target resources.
  • DELETE - Orchestrator will delete target resources, if they exist
orchestratedResource This property is required. V2PolicyOrchestratorOrchestratedResource
Represents a resource that is being orchestrated by the policy orchestrator. Structure is documented below.
policyOrchestratorId
This property is required.
Changes to this property will trigger replacement.
string
Required. The logical identifier of the policy orchestrator, with the following restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the parent.
description string
Optional. Freeform text describing the purpose of the resource.
labels {[key: string]: string}
Optional. Labels as key value pairs Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
orchestrationScope V2PolicyOrchestratorOrchestrationScope
Defines a set of selectors which drive which resources are in scope of policy orchestration.
project Changes to this property will trigger replacement. string
state string
(Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
action This property is required. str
Required. Action to be done by the orchestrator in projects/{project_id}/zones/{zone_id} locations defined by the orchestration_scope. Allowed values:

  • UPSERT - Orchestrator will create or update target resources.
  • DELETE - Orchestrator will delete target resources, if they exist
orchestrated_resource This property is required. V2PolicyOrchestratorOrchestratedResourceArgs
Represents a resource that is being orchestrated by the policy orchestrator. Structure is documented below.
policy_orchestrator_id
This property is required.
Changes to this property will trigger replacement.
str
Required. The logical identifier of the policy orchestrator, with the following restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the parent.
description str
Optional. Freeform text describing the purpose of the resource.
labels Mapping[str, str]
Optional. Labels as key value pairs Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
orchestration_scope V2PolicyOrchestratorOrchestrationScopeArgs
Defines a set of selectors which drive which resources are in scope of policy orchestration.
project Changes to this property will trigger replacement. str
state str
(Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
action This property is required. String
Required. Action to be done by the orchestrator in projects/{project_id}/zones/{zone_id} locations defined by the orchestration_scope. Allowed values:

  • UPSERT - Orchestrator will create or update target resources.
  • DELETE - Orchestrator will delete target resources, if they exist
orchestratedResource This property is required. Property Map
Represents a resource that is being orchestrated by the policy orchestrator. Structure is documented below.
policyOrchestratorId
This property is required.
Changes to this property will trigger replacement.
String
Required. The logical identifier of the policy orchestrator, with the following restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the parent.
description String
Optional. Freeform text describing the purpose of the resource.
labels Map<String>
Optional. Labels as key value pairs Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
orchestrationScope Property Map
Defines a set of selectors which drive which resources are in scope of policy orchestration.
project Changes to this property will trigger replacement. String
state String
(Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN

Outputs

All input properties are implicitly available as output properties. Additionally, the V2PolicyOrchestrator resource produces the following output properties:

CreateTime string
Output only. Timestamp when the policy orchestrator resource was created.
EffectiveLabels Dictionary<string, string>
All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
Id string
The provider-assigned unique ID for this managed resource.
Name string
Immutable. Identifier. In form of

  • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
  • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
  • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
OrchestrationStates List<V2PolicyOrchestratorOrchestrationState>
Describes the state of the orchestration process. Structure is documented below.
PulumiLabels Dictionary<string, string>
The combination of labels configured directly on the resource and default labels configured on the provider.
Reconciling bool
Output only. Set to true, if the there are ongoing changes being applied by the orchestrator.
UpdateTime string
Output only. Timestamp when the policy orchestrator resource was last modified.
CreateTime string
Output only. Timestamp when the policy orchestrator resource was created.
EffectiveLabels map[string]string
All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
Id string
The provider-assigned unique ID for this managed resource.
Name string
Immutable. Identifier. In form of

  • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
  • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
  • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
OrchestrationStates []V2PolicyOrchestratorOrchestrationState
Describes the state of the orchestration process. Structure is documented below.
PulumiLabels map[string]string
The combination of labels configured directly on the resource and default labels configured on the provider.
Reconciling bool
Output only. Set to true, if the there are ongoing changes being applied by the orchestrator.
UpdateTime string
Output only. Timestamp when the policy orchestrator resource was last modified.
createTime String
Output only. Timestamp when the policy orchestrator resource was created.
effectiveLabels Map<String,String>
All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
id String
The provider-assigned unique ID for this managed resource.
name String
Immutable. Identifier. In form of

  • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
  • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
  • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
orchestrationStates List<V2PolicyOrchestratorOrchestrationState>
Describes the state of the orchestration process. Structure is documented below.
pulumiLabels Map<String,String>
The combination of labels configured directly on the resource and default labels configured on the provider.
reconciling Boolean
Output only. Set to true, if the there are ongoing changes being applied by the orchestrator.
updateTime String
Output only. Timestamp when the policy orchestrator resource was last modified.
createTime string
Output only. Timestamp when the policy orchestrator resource was created.
effectiveLabels {[key: string]: string}
All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
id string
The provider-assigned unique ID for this managed resource.
name string
Immutable. Identifier. In form of

  • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
  • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
  • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
orchestrationStates V2PolicyOrchestratorOrchestrationState[]
Describes the state of the orchestration process. Structure is documented below.
pulumiLabels {[key: string]: string}
The combination of labels configured directly on the resource and default labels configured on the provider.
reconciling boolean
Output only. Set to true, if the there are ongoing changes being applied by the orchestrator.
updateTime string
Output only. Timestamp when the policy orchestrator resource was last modified.
create_time str
Output only. Timestamp when the policy orchestrator resource was created.
effective_labels Mapping[str, str]
All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
id str
The provider-assigned unique ID for this managed resource.
name str
Immutable. Identifier. In form of

  • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
  • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
  • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
orchestration_states Sequence[V2PolicyOrchestratorOrchestrationState]
Describes the state of the orchestration process. Structure is documented below.
pulumi_labels Mapping[str, str]
The combination of labels configured directly on the resource and default labels configured on the provider.
reconciling bool
Output only. Set to true, if the there are ongoing changes being applied by the orchestrator.
update_time str
Output only. Timestamp when the policy orchestrator resource was last modified.
createTime String
Output only. Timestamp when the policy orchestrator resource was created.
effectiveLabels Map<String>
All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
id String
The provider-assigned unique ID for this managed resource.
name String
Immutable. Identifier. In form of

  • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
  • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
  • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
orchestrationStates List<Property Map>
Describes the state of the orchestration process. Structure is documented below.
pulumiLabels Map<String>
The combination of labels configured directly on the resource and default labels configured on the provider.
reconciling Boolean
Output only. Set to true, if the there are ongoing changes being applied by the orchestrator.
updateTime String
Output only. Timestamp when the policy orchestrator resource was last modified.

Look up Existing V2PolicyOrchestrator Resource

Get an existing V2PolicyOrchestrator resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: V2PolicyOrchestratorState, opts?: CustomResourceOptions): V2PolicyOrchestrator
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        action: Optional[str] = None,
        create_time: Optional[str] = None,
        description: Optional[str] = None,
        effective_labels: Optional[Mapping[str, str]] = None,
        labels: Optional[Mapping[str, str]] = None,
        name: Optional[str] = None,
        orchestrated_resource: Optional[V2PolicyOrchestratorOrchestratedResourceArgs] = None,
        orchestration_scope: Optional[V2PolicyOrchestratorOrchestrationScopeArgs] = None,
        orchestration_states: Optional[Sequence[V2PolicyOrchestratorOrchestrationStateArgs]] = None,
        policy_orchestrator_id: Optional[str] = None,
        project: Optional[str] = None,
        pulumi_labels: Optional[Mapping[str, str]] = None,
        reconciling: Optional[bool] = None,
        state: Optional[str] = None,
        update_time: Optional[str] = None) -> V2PolicyOrchestrator
func GetV2PolicyOrchestrator(ctx *Context, name string, id IDInput, state *V2PolicyOrchestratorState, opts ...ResourceOption) (*V2PolicyOrchestrator, error)
public static V2PolicyOrchestrator Get(string name, Input<string> id, V2PolicyOrchestratorState? state, CustomResourceOptions? opts = null)
public static V2PolicyOrchestrator get(String name, Output<String> id, V2PolicyOrchestratorState state, CustomResourceOptions options)
resources:  _:    type: gcp:osconfig:V2PolicyOrchestrator    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
Action string
Required. Action to be done by the orchestrator in projects/{project_id}/zones/{zone_id} locations defined by the orchestration_scope. Allowed values:

  • UPSERT - Orchestrator will create or update target resources.
  • DELETE - Orchestrator will delete target resources, if they exist
CreateTime string
Output only. Timestamp when the policy orchestrator resource was created.
Description string
Optional. Freeform text describing the purpose of the resource.
EffectiveLabels Dictionary<string, string>
All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
Labels Dictionary<string, string>
Optional. Labels as key value pairs Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
Name string
Immutable. Identifier. In form of

  • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
  • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
  • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
OrchestratedResource V2PolicyOrchestratorOrchestratedResource
Represents a resource that is being orchestrated by the policy orchestrator. Structure is documented below.
OrchestrationScope V2PolicyOrchestratorOrchestrationScope
Defines a set of selectors which drive which resources are in scope of policy orchestration.
OrchestrationStates List<V2PolicyOrchestratorOrchestrationState>
Describes the state of the orchestration process. Structure is documented below.
PolicyOrchestratorId Changes to this property will trigger replacement. string
Required. The logical identifier of the policy orchestrator, with the following restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the parent.
Project Changes to this property will trigger replacement. string
PulumiLabels Dictionary<string, string>
The combination of labels configured directly on the resource and default labels configured on the provider.
Reconciling bool
Output only. Set to true, if the there are ongoing changes being applied by the orchestrator.
State string
(Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
UpdateTime string
Output only. Timestamp when the policy orchestrator resource was last modified.
Action string
Required. Action to be done by the orchestrator in projects/{project_id}/zones/{zone_id} locations defined by the orchestration_scope. Allowed values:

  • UPSERT - Orchestrator will create or update target resources.
  • DELETE - Orchestrator will delete target resources, if they exist
CreateTime string
Output only. Timestamp when the policy orchestrator resource was created.
Description string
Optional. Freeform text describing the purpose of the resource.
EffectiveLabels map[string]string
All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
Labels map[string]string
Optional. Labels as key value pairs Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
Name string
Immutable. Identifier. In form of

  • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
  • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
  • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
OrchestratedResource V2PolicyOrchestratorOrchestratedResourceArgs
Represents a resource that is being orchestrated by the policy orchestrator. Structure is documented below.
OrchestrationScope V2PolicyOrchestratorOrchestrationScopeArgs
Defines a set of selectors which drive which resources are in scope of policy orchestration.
OrchestrationStates []V2PolicyOrchestratorOrchestrationStateArgs
Describes the state of the orchestration process. Structure is documented below.
PolicyOrchestratorId Changes to this property will trigger replacement. string
Required. The logical identifier of the policy orchestrator, with the following restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the parent.
Project Changes to this property will trigger replacement. string
PulumiLabels map[string]string
The combination of labels configured directly on the resource and default labels configured on the provider.
Reconciling bool
Output only. Set to true, if the there are ongoing changes being applied by the orchestrator.
State string
(Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
UpdateTime string
Output only. Timestamp when the policy orchestrator resource was last modified.
action String
Required. Action to be done by the orchestrator in projects/{project_id}/zones/{zone_id} locations defined by the orchestration_scope. Allowed values:

  • UPSERT - Orchestrator will create or update target resources.
  • DELETE - Orchestrator will delete target resources, if they exist
createTime String
Output only. Timestamp when the policy orchestrator resource was created.
description String
Optional. Freeform text describing the purpose of the resource.
effectiveLabels Map<String,String>
All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
labels Map<String,String>
Optional. Labels as key value pairs Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
name String
Immutable. Identifier. In form of

  • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
  • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
  • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
orchestratedResource V2PolicyOrchestratorOrchestratedResource
Represents a resource that is being orchestrated by the policy orchestrator. Structure is documented below.
orchestrationScope V2PolicyOrchestratorOrchestrationScope
Defines a set of selectors which drive which resources are in scope of policy orchestration.
orchestrationStates List<V2PolicyOrchestratorOrchestrationState>
Describes the state of the orchestration process. Structure is documented below.
policyOrchestratorId Changes to this property will trigger replacement. String
Required. The logical identifier of the policy orchestrator, with the following restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the parent.
project Changes to this property will trigger replacement. String
pulumiLabels Map<String,String>
The combination of labels configured directly on the resource and default labels configured on the provider.
reconciling Boolean
Output only. Set to true, if the there are ongoing changes being applied by the orchestrator.
state String
(Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
updateTime String
Output only. Timestamp when the policy orchestrator resource was last modified.
action string
Required. Action to be done by the orchestrator in projects/{project_id}/zones/{zone_id} locations defined by the orchestration_scope. Allowed values:

  • UPSERT - Orchestrator will create or update target resources.
  • DELETE - Orchestrator will delete target resources, if they exist
createTime string
Output only. Timestamp when the policy orchestrator resource was created.
description string
Optional. Freeform text describing the purpose of the resource.
effectiveLabels {[key: string]: string}
All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
labels {[key: string]: string}
Optional. Labels as key value pairs Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
name string
Immutable. Identifier. In form of

  • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
  • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
  • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
orchestratedResource V2PolicyOrchestratorOrchestratedResource
Represents a resource that is being orchestrated by the policy orchestrator. Structure is documented below.
orchestrationScope V2PolicyOrchestratorOrchestrationScope
Defines a set of selectors which drive which resources are in scope of policy orchestration.
orchestrationStates V2PolicyOrchestratorOrchestrationState[]
Describes the state of the orchestration process. Structure is documented below.
policyOrchestratorId Changes to this property will trigger replacement. string
Required. The logical identifier of the policy orchestrator, with the following restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the parent.
project Changes to this property will trigger replacement. string
pulumiLabels {[key: string]: string}
The combination of labels configured directly on the resource and default labels configured on the provider.
reconciling boolean
Output only. Set to true, if the there are ongoing changes being applied by the orchestrator.
state string
(Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
updateTime string
Output only. Timestamp when the policy orchestrator resource was last modified.
action str
Required. Action to be done by the orchestrator in projects/{project_id}/zones/{zone_id} locations defined by the orchestration_scope. Allowed values:

  • UPSERT - Orchestrator will create or update target resources.
  • DELETE - Orchestrator will delete target resources, if they exist
create_time str
Output only. Timestamp when the policy orchestrator resource was created.
description str
Optional. Freeform text describing the purpose of the resource.
effective_labels Mapping[str, str]
All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
labels Mapping[str, str]
Optional. Labels as key value pairs Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
name str
Immutable. Identifier. In form of

  • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
  • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
  • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
orchestrated_resource V2PolicyOrchestratorOrchestratedResourceArgs
Represents a resource that is being orchestrated by the policy orchestrator. Structure is documented below.
orchestration_scope V2PolicyOrchestratorOrchestrationScopeArgs
Defines a set of selectors which drive which resources are in scope of policy orchestration.
orchestration_states Sequence[V2PolicyOrchestratorOrchestrationStateArgs]
Describes the state of the orchestration process. Structure is documented below.
policy_orchestrator_id Changes to this property will trigger replacement. str
Required. The logical identifier of the policy orchestrator, with the following restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the parent.
project Changes to this property will trigger replacement. str
pulumi_labels Mapping[str, str]
The combination of labels configured directly on the resource and default labels configured on the provider.
reconciling bool
Output only. Set to true, if the there are ongoing changes being applied by the orchestrator.
state str
(Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
update_time str
Output only. Timestamp when the policy orchestrator resource was last modified.
action String
Required. Action to be done by the orchestrator in projects/{project_id}/zones/{zone_id} locations defined by the orchestration_scope. Allowed values:

  • UPSERT - Orchestrator will create or update target resources.
  • DELETE - Orchestrator will delete target resources, if they exist
createTime String
Output only. Timestamp when the policy orchestrator resource was created.
description String
Optional. Freeform text describing the purpose of the resource.
effectiveLabels Map<String>
All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
labels Map<String>
Optional. Labels as key value pairs Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
name String
Immutable. Identifier. In form of

  • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
  • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
  • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
orchestratedResource Property Map
Represents a resource that is being orchestrated by the policy orchestrator. Structure is documented below.
orchestrationScope Property Map
Defines a set of selectors which drive which resources are in scope of policy orchestration.
orchestrationStates List<Property Map>
Describes the state of the orchestration process. Structure is documented below.
policyOrchestratorId Changes to this property will trigger replacement. String
Required. The logical identifier of the policy orchestrator, with the following restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the parent.
project Changes to this property will trigger replacement. String
pulumiLabels Map<String>
The combination of labels configured directly on the resource and default labels configured on the provider.
reconciling Boolean
Output only. Set to true, if the there are ongoing changes being applied by the orchestrator.
state String
(Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
updateTime String
Output only. Timestamp when the policy orchestrator resource was last modified.

Supporting Types

V2PolicyOrchestratorOrchestratedResource
, V2PolicyOrchestratorOrchestratedResourceArgs

Id string

Optional. ID of the resource to be used while generating set of affected resources. For UPSERT action the value is auto-generated during PolicyOrchestrator creation when not set. When the value is set it should following next restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the project. For DELETE action, ID must be specified explicitly during PolicyOrchestrator creation.

The os_policy_assignment_v1_payload block supports:

OsPolicyAssignmentV1Payload V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1Payload
OS policy assignment is an API resource that is used to apply a set of OS policies to a dynamically targeted group of Compute Engine VM instances. An OS policy is used to define the desired state configuration for a Compute Engine VM instance through a set of configuration resources that provide capabilities such as installing or removing software packages, or executing a script. For more information about the OS policy resource definitions and examples, see OS policy and OS policy assignment. Structure is documented below.
Id string

Optional. ID of the resource to be used while generating set of affected resources. For UPSERT action the value is auto-generated during PolicyOrchestrator creation when not set. When the value is set it should following next restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the project. For DELETE action, ID must be specified explicitly during PolicyOrchestrator creation.

The os_policy_assignment_v1_payload block supports:

OsPolicyAssignmentV1Payload V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1Payload
OS policy assignment is an API resource that is used to apply a set of OS policies to a dynamically targeted group of Compute Engine VM instances. An OS policy is used to define the desired state configuration for a Compute Engine VM instance through a set of configuration resources that provide capabilities such as installing or removing software packages, or executing a script. For more information about the OS policy resource definitions and examples, see OS policy and OS policy assignment. Structure is documented below.
id String

Optional. ID of the resource to be used while generating set of affected resources. For UPSERT action the value is auto-generated during PolicyOrchestrator creation when not set. When the value is set it should following next restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the project. For DELETE action, ID must be specified explicitly during PolicyOrchestrator creation.

The os_policy_assignment_v1_payload block supports:

osPolicyAssignmentV1Payload V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1Payload
OS policy assignment is an API resource that is used to apply a set of OS policies to a dynamically targeted group of Compute Engine VM instances. An OS policy is used to define the desired state configuration for a Compute Engine VM instance through a set of configuration resources that provide capabilities such as installing or removing software packages, or executing a script. For more information about the OS policy resource definitions and examples, see OS policy and OS policy assignment. Structure is documented below.
id string

Optional. ID of the resource to be used while generating set of affected resources. For UPSERT action the value is auto-generated during PolicyOrchestrator creation when not set. When the value is set it should following next restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the project. For DELETE action, ID must be specified explicitly during PolicyOrchestrator creation.

The os_policy_assignment_v1_payload block supports:

osPolicyAssignmentV1Payload V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1Payload
OS policy assignment is an API resource that is used to apply a set of OS policies to a dynamically targeted group of Compute Engine VM instances. An OS policy is used to define the desired state configuration for a Compute Engine VM instance through a set of configuration resources that provide capabilities such as installing or removing software packages, or executing a script. For more information about the OS policy resource definitions and examples, see OS policy and OS policy assignment. Structure is documented below.
id str

Optional. ID of the resource to be used while generating set of affected resources. For UPSERT action the value is auto-generated during PolicyOrchestrator creation when not set. When the value is set it should following next restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the project. For DELETE action, ID must be specified explicitly during PolicyOrchestrator creation.

The os_policy_assignment_v1_payload block supports:

os_policy_assignment_v1_payload V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1Payload
OS policy assignment is an API resource that is used to apply a set of OS policies to a dynamically targeted group of Compute Engine VM instances. An OS policy is used to define the desired state configuration for a Compute Engine VM instance through a set of configuration resources that provide capabilities such as installing or removing software packages, or executing a script. For more information about the OS policy resource definitions and examples, see OS policy and OS policy assignment. Structure is documented below.
id String

Optional. ID of the resource to be used while generating set of affected resources. For UPSERT action the value is auto-generated during PolicyOrchestrator creation when not set. When the value is set it should following next restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the project. For DELETE action, ID must be specified explicitly during PolicyOrchestrator creation.

The os_policy_assignment_v1_payload block supports:

osPolicyAssignmentV1Payload Property Map
OS policy assignment is an API resource that is used to apply a set of OS policies to a dynamically targeted group of Compute Engine VM instances. An OS policy is used to define the desired state configuration for a Compute Engine VM instance through a set of configuration resources that provide capabilities such as installing or removing software packages, or executing a script. For more information about the OS policy resource definitions and examples, see OS policy and OS policy assignment. Structure is documented below.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1Payload
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadArgs

InstanceFilter This property is required. V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilter

Filters to select target VMs for an assignment.

If more than one filter criteria is specified below, a VM will be selected if and only if it satisfies all of them.

OsPolicies This property is required. List<V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicy>
Required. List of OS policies to be applied to the VMs.
Rollout This property is required. V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRollout
Message to configure the rollout at the zonal level for the OS policy assignment.
Baseline bool

Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision.

For a given OS policy assignment, there is only one revision with a value of 'true' for this field.

Deleted bool
Output only. Indicates that this revision deletes the OS policy assignment.
Description string
OS policy assignment description. Length of the description is limited to 1024 characters.
Name string
Immutable. Identifier. In form of

  • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
  • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
  • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
Reconciling bool
Output only. Set to true, if the there are ongoing changes being applied by the orchestrator.
RevisionCreateTime string
Output only. The timestamp that the revision was created.
RevisionId string
Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
RolloutState string
Output only. OS policy assignment rollout state Possible values: ROLLOUT_STATE_UNSPECIFIED IN_PROGRESS CANCELLING CANCELLED SUCCEEDED
Uid string
Output only. Server generated unique id for the OS policy assignment resource.
InstanceFilter This property is required. V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilter

Filters to select target VMs for an assignment.

If more than one filter criteria is specified below, a VM will be selected if and only if it satisfies all of them.

OsPolicies This property is required. []V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicy
Required. List of OS policies to be applied to the VMs.
Rollout This property is required. V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRollout
Message to configure the rollout at the zonal level for the OS policy assignment.
Baseline bool

Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision.

For a given OS policy assignment, there is only one revision with a value of 'true' for this field.

Deleted bool
Output only. Indicates that this revision deletes the OS policy assignment.
Description string
OS policy assignment description. Length of the description is limited to 1024 characters.
Name string
Immutable. Identifier. In form of

  • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
  • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
  • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
Reconciling bool
Output only. Set to true, if the there are ongoing changes being applied by the orchestrator.
RevisionCreateTime string
Output only. The timestamp that the revision was created.
RevisionId string
Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
RolloutState string
Output only. OS policy assignment rollout state Possible values: ROLLOUT_STATE_UNSPECIFIED IN_PROGRESS CANCELLING CANCELLED SUCCEEDED
Uid string
Output only. Server generated unique id for the OS policy assignment resource.
instanceFilter This property is required. V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilter

Filters to select target VMs for an assignment.

If more than one filter criteria is specified below, a VM will be selected if and only if it satisfies all of them.

osPolicies This property is required. List<V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicy>
Required. List of OS policies to be applied to the VMs.
rollout This property is required. V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRollout
Message to configure the rollout at the zonal level for the OS policy assignment.
baseline Boolean

Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision.

For a given OS policy assignment, there is only one revision with a value of 'true' for this field.

deleted Boolean
Output only. Indicates that this revision deletes the OS policy assignment.
description String
OS policy assignment description. Length of the description is limited to 1024 characters.
name String
Immutable. Identifier. In form of

  • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
  • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
  • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
reconciling Boolean
Output only. Set to true, if the there are ongoing changes being applied by the orchestrator.
revisionCreateTime String
Output only. The timestamp that the revision was created.
revisionId String
Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
rolloutState String
Output only. OS policy assignment rollout state Possible values: ROLLOUT_STATE_UNSPECIFIED IN_PROGRESS CANCELLING CANCELLED SUCCEEDED
uid String
Output only. Server generated unique id for the OS policy assignment resource.
instanceFilter This property is required. V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilter

Filters to select target VMs for an assignment.

If more than one filter criteria is specified below, a VM will be selected if and only if it satisfies all of them.

osPolicies This property is required. V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicy[]
Required. List of OS policies to be applied to the VMs.
rollout This property is required. V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRollout
Message to configure the rollout at the zonal level for the OS policy assignment.
baseline boolean

Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision.

For a given OS policy assignment, there is only one revision with a value of 'true' for this field.

deleted boolean
Output only. Indicates that this revision deletes the OS policy assignment.
description string
OS policy assignment description. Length of the description is limited to 1024 characters.
name string
Immutable. Identifier. In form of

  • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
  • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
  • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
reconciling boolean
Output only. Set to true, if the there are ongoing changes being applied by the orchestrator.
revisionCreateTime string
Output only. The timestamp that the revision was created.
revisionId string
Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
rolloutState string
Output only. OS policy assignment rollout state Possible values: ROLLOUT_STATE_UNSPECIFIED IN_PROGRESS CANCELLING CANCELLED SUCCEEDED
uid string
Output only. Server generated unique id for the OS policy assignment resource.
instance_filter This property is required. V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilter

Filters to select target VMs for an assignment.

If more than one filter criteria is specified below, a VM will be selected if and only if it satisfies all of them.

os_policies This property is required. Sequence[V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicy]
Required. List of OS policies to be applied to the VMs.
rollout This property is required. V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRollout
Message to configure the rollout at the zonal level for the OS policy assignment.
baseline bool

Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision.

For a given OS policy assignment, there is only one revision with a value of 'true' for this field.

deleted bool
Output only. Indicates that this revision deletes the OS policy assignment.
description str
OS policy assignment description. Length of the description is limited to 1024 characters.
name str
Immutable. Identifier. In form of

  • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
  • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
  • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
reconciling bool
Output only. Set to true, if the there are ongoing changes being applied by the orchestrator.
revision_create_time str
Output only. The timestamp that the revision was created.
revision_id str
Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
rollout_state str
Output only. OS policy assignment rollout state Possible values: ROLLOUT_STATE_UNSPECIFIED IN_PROGRESS CANCELLING CANCELLED SUCCEEDED
uid str
Output only. Server generated unique id for the OS policy assignment resource.
instanceFilter This property is required. Property Map

Filters to select target VMs for an assignment.

If more than one filter criteria is specified below, a VM will be selected if and only if it satisfies all of them.

osPolicies This property is required. List<Property Map>
Required. List of OS policies to be applied to the VMs.
rollout This property is required. Property Map
Message to configure the rollout at the zonal level for the OS policy assignment.
baseline Boolean

Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision.

For a given OS policy assignment, there is only one revision with a value of 'true' for this field.

deleted Boolean
Output only. Indicates that this revision deletes the OS policy assignment.
description String
OS policy assignment description. Length of the description is limited to 1024 characters.
name String
Immutable. Identifier. In form of

  • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
  • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
  • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
reconciling Boolean
Output only. Set to true, if the there are ongoing changes being applied by the orchestrator.
revisionCreateTime String
Output only. The timestamp that the revision was created.
revisionId String
Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
rolloutState String
Output only. OS policy assignment rollout state Possible values: ROLLOUT_STATE_UNSPECIFIED IN_PROGRESS CANCELLING CANCELLED SUCCEEDED
uid String
Output only. Server generated unique id for the OS policy assignment resource.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilter
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterArgs

All bool
Target all VMs in the project. If true, no other criteria is permitted.
ExclusionLabels List<V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterExclusionLabel>
List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM. Structure is documented below.
InclusionLabels List<V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInclusionLabel>
List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM. Structure is documented below.
Inventories List<V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventory>
List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories. Structure is documented below.
All bool
Target all VMs in the project. If true, no other criteria is permitted.
ExclusionLabels []V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterExclusionLabel
List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM. Structure is documented below.
InclusionLabels []V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInclusionLabel
List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM. Structure is documented below.
Inventories []V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventory
List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories. Structure is documented below.
all Boolean
Target all VMs in the project. If true, no other criteria is permitted.
exclusionLabels List<V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterExclusionLabel>
List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM. Structure is documented below.
inclusionLabels List<V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInclusionLabel>
List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM. Structure is documented below.
inventories List<V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventory>
List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories. Structure is documented below.
all boolean
Target all VMs in the project. If true, no other criteria is permitted.
exclusionLabels V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterExclusionLabel[]
List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM. Structure is documented below.
inclusionLabels V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInclusionLabel[]
List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM. Structure is documented below.
inventories V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventory[]
List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories. Structure is documented below.
all bool
Target all VMs in the project. If true, no other criteria is permitted.
exclusion_labels Sequence[V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterExclusionLabel]
List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM. Structure is documented below.
inclusion_labels Sequence[V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInclusionLabel]
List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM. Structure is documented below.
inventories Sequence[V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventory]
List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories. Structure is documented below.
all Boolean
Target all VMs in the project. If true, no other criteria is permitted.
exclusionLabels List<Property Map>
List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM. Structure is documented below.
inclusionLabels List<Property Map>
List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM. Structure is documented below.
inventories List<Property Map>
List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories. Structure is documented below.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterExclusionLabel
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterExclusionLabelArgs

Labels Dictionary<string, string>
Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
Labels map[string]string
Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
labels Map<String,String>
Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
labels {[key: string]: string}
Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
labels Mapping[str, str]
Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
labels Map<String>
Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInclusionLabel
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInclusionLabelArgs

Labels Dictionary<string, string>
Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
Labels map[string]string
Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
labels Map<String,String>
Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
labels {[key: string]: string}
Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
labels Mapping[str, str]
Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
labels Map<String>
Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventory
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventoryArgs

OsShortName This property is required. string
Required. The OS short name
OsVersion string
The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
OsShortName This property is required. string
Required. The OS short name
OsVersion string
The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
osShortName This property is required. String
Required. The OS short name
osVersion String
The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
osShortName This property is required. string
Required. The OS short name
osVersion string
The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
os_short_name This property is required. str
Required. The OS short name
os_version str
The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
osShortName This property is required. String
Required. The OS short name
osVersion String
The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicy
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyArgs

Id This property is required. string
Required. The id of the OS policy with the following restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the assignment.
Mode This property is required. string
Required. Policy mode Possible values: MODE_UNSPECIFIED VALIDATION ENFORCEMENT
ResourceGroups This property is required. List<V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroup>
Required. List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match Structure is documented below.
AllowNoResourceGroupMatch bool
This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
Description string
Policy description. Length of the description is limited to 1024 characters.
Id This property is required. string
Required. The id of the OS policy with the following restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the assignment.
Mode This property is required. string
Required. Policy mode Possible values: MODE_UNSPECIFIED VALIDATION ENFORCEMENT
ResourceGroups This property is required. []V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroup
Required. List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match Structure is documented below.
AllowNoResourceGroupMatch bool
This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
Description string
Policy description. Length of the description is limited to 1024 characters.
id This property is required. String
Required. The id of the OS policy with the following restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the assignment.
mode This property is required. String
Required. Policy mode Possible values: MODE_UNSPECIFIED VALIDATION ENFORCEMENT
resourceGroups This property is required. List<V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroup>
Required. List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match Structure is documented below.
allowNoResourceGroupMatch Boolean
This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
description String
Policy description. Length of the description is limited to 1024 characters.
id This property is required. string
Required. The id of the OS policy with the following restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the assignment.
mode This property is required. string
Required. Policy mode Possible values: MODE_UNSPECIFIED VALIDATION ENFORCEMENT
resourceGroups This property is required. V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroup[]
Required. List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match Structure is documented below.
allowNoResourceGroupMatch boolean
This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
description string
Policy description. Length of the description is limited to 1024 characters.
id This property is required. str
Required. The id of the OS policy with the following restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the assignment.
mode This property is required. str
Required. Policy mode Possible values: MODE_UNSPECIFIED VALIDATION ENFORCEMENT
resource_groups This property is required. Sequence[V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroup]
Required. List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match Structure is documented below.
allow_no_resource_group_match bool
This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
description str
Policy description. Length of the description is limited to 1024 characters.
id This property is required. String
Required. The id of the OS policy with the following restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the assignment.
mode This property is required. String
Required. Policy mode Possible values: MODE_UNSPECIFIED VALIDATION ENFORCEMENT
resourceGroups This property is required. List<Property Map>
Required. List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match Structure is documented below.
allowNoResourceGroupMatch Boolean
This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
description String
Policy description. Length of the description is limited to 1024 characters.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroup
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupArgs

Resources This property is required. List<V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResource>
Required. List of resources configured for this resource group. The resources are executed in the exact order specified here. Structure is documented below.
InventoryFilters List<V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupInventoryFilter>
List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally. Structure is documented below.
Resources This property is required. []V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResource
Required. List of resources configured for this resource group. The resources are executed in the exact order specified here. Structure is documented below.
InventoryFilters []V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupInventoryFilter
List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally. Structure is documented below.
resources This property is required. List<V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResource>
Required. List of resources configured for this resource group. The resources are executed in the exact order specified here. Structure is documented below.
inventoryFilters List<V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupInventoryFilter>
List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally. Structure is documented below.
resources This property is required. V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResource[]
Required. List of resources configured for this resource group. The resources are executed in the exact order specified here. Structure is documented below.
inventoryFilters V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupInventoryFilter[]
List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally. Structure is documented below.
resources This property is required. Sequence[V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResource]
Required. List of resources configured for this resource group. The resources are executed in the exact order specified here. Structure is documented below.
inventory_filters Sequence[V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupInventoryFilter]
List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally. Structure is documented below.
resources This property is required. List<Property Map>
Required. List of resources configured for this resource group. The resources are executed in the exact order specified here. Structure is documented below.
inventoryFilters List<Property Map>
List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally. Structure is documented below.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupInventoryFilter
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupInventoryFilterArgs

OsShortName This property is required. string
Required. The OS short name
OsVersion string
The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
OsShortName This property is required. string
Required. The OS short name
OsVersion string
The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
osShortName This property is required. String
Required. The OS short name
osVersion String
The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
osShortName This property is required. string
Required. The OS short name
osVersion string
The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
os_short_name This property is required. str
Required. The OS short name
os_version str
The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
osShortName This property is required. String
Required. The OS short name
osVersion String
The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResource
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceArgs

Id This property is required. string
Required. The id of the resource with the following restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the OS policy.
Exec V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExec
A resource that allows executing scripts on the VM. The ExecResource has 2 stages: validate and enforce and both stages accept a script as an argument to execute. When the ExecResource is applied by the agent, it first executes the script in the validate stage. The validate stage can signal that the ExecResource is already in the desired state by returning an exit code of 100. If the ExecResource is not in the desired state, it should return an exit code of 101. Any other exit code returned by this stage is considered an error. If the ExecResource is not in the desired state based on the exit code from the validate stage, the agent proceeds to execute the script from the enforce stage. If the ExecResource is already in the desired state, the enforce stage will not be run. Similar to validate stage, the enforce stage should return an exit code of 100 to indicate that the resource in now in its desired state. Any other exit code is considered an error. NOTE: An exit code of 100 was chosen over 0 (and 101 vs 1) to have an explicit indicator of in desired state, not in desired state and errors. Because, for example, Powershell will always return an exit code of 0 unless an exit statement is provided in the script. So, for reasons of consistency and being explicit, exit codes 100 and 101 were chosen. Structure is documented below.
File V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFile
A resource that manages the state of a file. Structure is documented below.
Pkg V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkg
A resource that manages a system package. Structure is documented below.
Repository V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepository
A resource that manages a package repository. Structure is documented below.
Id This property is required. string
Required. The id of the resource with the following restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the OS policy.
Exec V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExec
A resource that allows executing scripts on the VM. The ExecResource has 2 stages: validate and enforce and both stages accept a script as an argument to execute. When the ExecResource is applied by the agent, it first executes the script in the validate stage. The validate stage can signal that the ExecResource is already in the desired state by returning an exit code of 100. If the ExecResource is not in the desired state, it should return an exit code of 101. Any other exit code returned by this stage is considered an error. If the ExecResource is not in the desired state based on the exit code from the validate stage, the agent proceeds to execute the script from the enforce stage. If the ExecResource is already in the desired state, the enforce stage will not be run. Similar to validate stage, the enforce stage should return an exit code of 100 to indicate that the resource in now in its desired state. Any other exit code is considered an error. NOTE: An exit code of 100 was chosen over 0 (and 101 vs 1) to have an explicit indicator of in desired state, not in desired state and errors. Because, for example, Powershell will always return an exit code of 0 unless an exit statement is provided in the script. So, for reasons of consistency and being explicit, exit codes 100 and 101 were chosen. Structure is documented below.
File V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFile
A resource that manages the state of a file. Structure is documented below.
Pkg V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkg
A resource that manages a system package. Structure is documented below.
Repository V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepository
A resource that manages a package repository. Structure is documented below.
id This property is required. String
Required. The id of the resource with the following restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the OS policy.
exec V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExec
A resource that allows executing scripts on the VM. The ExecResource has 2 stages: validate and enforce and both stages accept a script as an argument to execute. When the ExecResource is applied by the agent, it first executes the script in the validate stage. The validate stage can signal that the ExecResource is already in the desired state by returning an exit code of 100. If the ExecResource is not in the desired state, it should return an exit code of 101. Any other exit code returned by this stage is considered an error. If the ExecResource is not in the desired state based on the exit code from the validate stage, the agent proceeds to execute the script from the enforce stage. If the ExecResource is already in the desired state, the enforce stage will not be run. Similar to validate stage, the enforce stage should return an exit code of 100 to indicate that the resource in now in its desired state. Any other exit code is considered an error. NOTE: An exit code of 100 was chosen over 0 (and 101 vs 1) to have an explicit indicator of in desired state, not in desired state and errors. Because, for example, Powershell will always return an exit code of 0 unless an exit statement is provided in the script. So, for reasons of consistency and being explicit, exit codes 100 and 101 were chosen. Structure is documented below.
file V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFile
A resource that manages the state of a file. Structure is documented below.
pkg V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkg
A resource that manages a system package. Structure is documented below.
repository V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepository
A resource that manages a package repository. Structure is documented below.
id This property is required. string
Required. The id of the resource with the following restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the OS policy.
exec V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExec
A resource that allows executing scripts on the VM. The ExecResource has 2 stages: validate and enforce and both stages accept a script as an argument to execute. When the ExecResource is applied by the agent, it first executes the script in the validate stage. The validate stage can signal that the ExecResource is already in the desired state by returning an exit code of 100. If the ExecResource is not in the desired state, it should return an exit code of 101. Any other exit code returned by this stage is considered an error. If the ExecResource is not in the desired state based on the exit code from the validate stage, the agent proceeds to execute the script from the enforce stage. If the ExecResource is already in the desired state, the enforce stage will not be run. Similar to validate stage, the enforce stage should return an exit code of 100 to indicate that the resource in now in its desired state. Any other exit code is considered an error. NOTE: An exit code of 100 was chosen over 0 (and 101 vs 1) to have an explicit indicator of in desired state, not in desired state and errors. Because, for example, Powershell will always return an exit code of 0 unless an exit statement is provided in the script. So, for reasons of consistency and being explicit, exit codes 100 and 101 were chosen. Structure is documented below.
file V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFile
A resource that manages the state of a file. Structure is documented below.
pkg V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkg
A resource that manages a system package. Structure is documented below.
repository V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepository
A resource that manages a package repository. Structure is documented below.
id This property is required. str
Required. The id of the resource with the following restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the OS policy.
exec_ V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExec
A resource that allows executing scripts on the VM. The ExecResource has 2 stages: validate and enforce and both stages accept a script as an argument to execute. When the ExecResource is applied by the agent, it first executes the script in the validate stage. The validate stage can signal that the ExecResource is already in the desired state by returning an exit code of 100. If the ExecResource is not in the desired state, it should return an exit code of 101. Any other exit code returned by this stage is considered an error. If the ExecResource is not in the desired state based on the exit code from the validate stage, the agent proceeds to execute the script from the enforce stage. If the ExecResource is already in the desired state, the enforce stage will not be run. Similar to validate stage, the enforce stage should return an exit code of 100 to indicate that the resource in now in its desired state. Any other exit code is considered an error. NOTE: An exit code of 100 was chosen over 0 (and 101 vs 1) to have an explicit indicator of in desired state, not in desired state and errors. Because, for example, Powershell will always return an exit code of 0 unless an exit statement is provided in the script. So, for reasons of consistency and being explicit, exit codes 100 and 101 were chosen. Structure is documented below.
file V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFile
A resource that manages the state of a file. Structure is documented below.
pkg V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkg
A resource that manages a system package. Structure is documented below.
repository V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepository
A resource that manages a package repository. Structure is documented below.
id This property is required. String
Required. The id of the resource with the following restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the OS policy.
exec Property Map
A resource that allows executing scripts on the VM. The ExecResource has 2 stages: validate and enforce and both stages accept a script as an argument to execute. When the ExecResource is applied by the agent, it first executes the script in the validate stage. The validate stage can signal that the ExecResource is already in the desired state by returning an exit code of 100. If the ExecResource is not in the desired state, it should return an exit code of 101. Any other exit code returned by this stage is considered an error. If the ExecResource is not in the desired state based on the exit code from the validate stage, the agent proceeds to execute the script from the enforce stage. If the ExecResource is already in the desired state, the enforce stage will not be run. Similar to validate stage, the enforce stage should return an exit code of 100 to indicate that the resource in now in its desired state. Any other exit code is considered an error. NOTE: An exit code of 100 was chosen over 0 (and 101 vs 1) to have an explicit indicator of in desired state, not in desired state and errors. Because, for example, Powershell will always return an exit code of 0 unless an exit statement is provided in the script. So, for reasons of consistency and being explicit, exit codes 100 and 101 were chosen. Structure is documented below.
file Property Map
A resource that manages the state of a file. Structure is documented below.
pkg Property Map
A resource that manages a system package. Structure is documented below.
repository Property Map
A resource that manages a package repository. Structure is documented below.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExec
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecArgs

validate This property is required. Property Map
A file or script to execute. Structure is documented below.
enforce Property Map
A file or script to execute. Structure is documented below.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforce
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceArgs

Interpreter This property is required. string
Required. The script interpreter to use. Possible values: INTERPRETER_UNSPECIFIED NONE SHELL POWERSHELL
Args List<string>
Optional arguments to pass to the source during execution.
File V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFile
A remote or local file. Structure is documented below.
OutputFilePath string
Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 500K bytes.
Script string
An inline script. The size of the script is limited to 32KiB.
Interpreter This property is required. string
Required. The script interpreter to use. Possible values: INTERPRETER_UNSPECIFIED NONE SHELL POWERSHELL
Args []string
Optional arguments to pass to the source during execution.
File V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFile
A remote or local file. Structure is documented below.
OutputFilePath string
Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 500K bytes.
Script string
An inline script. The size of the script is limited to 32KiB.
interpreter This property is required. String
Required. The script interpreter to use. Possible values: INTERPRETER_UNSPECIFIED NONE SHELL POWERSHELL
args List<String>
Optional arguments to pass to the source during execution.
file V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFile
A remote or local file. Structure is documented below.
outputFilePath String
Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 500K bytes.
script String
An inline script. The size of the script is limited to 32KiB.
interpreter This property is required. string
Required. The script interpreter to use. Possible values: INTERPRETER_UNSPECIFIED NONE SHELL POWERSHELL
args string[]
Optional arguments to pass to the source during execution.
file V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFile
A remote or local file. Structure is documented below.
outputFilePath string
Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 500K bytes.
script string
An inline script. The size of the script is limited to 32KiB.
interpreter This property is required. str
Required. The script interpreter to use. Possible values: INTERPRETER_UNSPECIFIED NONE SHELL POWERSHELL
args Sequence[str]
Optional arguments to pass to the source during execution.
file V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFile
A remote or local file. Structure is documented below.
output_file_path str
Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 500K bytes.
script str
An inline script. The size of the script is limited to 32KiB.
interpreter This property is required. String
Required. The script interpreter to use. Possible values: INTERPRETER_UNSPECIFIED NONE SHELL POWERSHELL
args List<String>
Optional arguments to pass to the source during execution.
file Property Map
A remote or local file. Structure is documented below.
outputFilePath String
Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 500K bytes.
script String
An inline script. The size of the script is limited to 32KiB.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFile
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileArgs

AllowInsecure bool
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
Gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileGcs
Specifies a file available as a Cloud Storage Object. Structure is documented below.
LocalPath string
A local path within the VM to use.
Remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileRemote
Specifies a file available via some URI. Structure is documented below.
AllowInsecure bool
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
Gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileGcs
Specifies a file available as a Cloud Storage Object. Structure is documented below.
LocalPath string
A local path within the VM to use.
Remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileRemote
Specifies a file available via some URI. Structure is documented below.
allowInsecure Boolean
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileGcs
Specifies a file available as a Cloud Storage Object. Structure is documented below.
localPath String
A local path within the VM to use.
remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileRemote
Specifies a file available via some URI. Structure is documented below.
allowInsecure boolean
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileGcs
Specifies a file available as a Cloud Storage Object. Structure is documented below.
localPath string
A local path within the VM to use.
remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileRemote
Specifies a file available via some URI. Structure is documented below.
allow_insecure bool
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileGcs
Specifies a file available as a Cloud Storage Object. Structure is documented below.
local_path str
A local path within the VM to use.
remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileRemote
Specifies a file available via some URI. Structure is documented below.
allowInsecure Boolean
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs Property Map
Specifies a file available as a Cloud Storage Object. Structure is documented below.
localPath String
A local path within the VM to use.
remote Property Map
Specifies a file available via some URI. Structure is documented below.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileGcs
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileGcsArgs

Bucket This property is required. string
Required. Bucket of the Cloud Storage object.
Object This property is required. string
Required. Name of the Cloud Storage object.
Generation string
Generation number of the Cloud Storage object.
Bucket This property is required. string
Required. Bucket of the Cloud Storage object.
Object This property is required. string
Required. Name of the Cloud Storage object.
Generation string
Generation number of the Cloud Storage object.
bucket This property is required. String
Required. Bucket of the Cloud Storage object.
object This property is required. String
Required. Name of the Cloud Storage object.
generation String
Generation number of the Cloud Storage object.
bucket This property is required. string
Required. Bucket of the Cloud Storage object.
object This property is required. string
Required. Name of the Cloud Storage object.
generation string
Generation number of the Cloud Storage object.
bucket This property is required. str
Required. Bucket of the Cloud Storage object.
object This property is required. str
Required. Name of the Cloud Storage object.
generation str
Generation number of the Cloud Storage object.
bucket This property is required. String
Required. Bucket of the Cloud Storage object.
object This property is required. String
Required. Name of the Cloud Storage object.
generation String
Generation number of the Cloud Storage object.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileRemote
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileRemoteArgs

Uri This property is required. string
Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
Sha256Checksum string
SHA256 checksum of the remote file.
Uri This property is required. string
Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
Sha256Checksum string
SHA256 checksum of the remote file.
uri This property is required. String
Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256Checksum String
SHA256 checksum of the remote file.
uri This property is required. string
Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256Checksum string
SHA256 checksum of the remote file.
uri This property is required. str
Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256_checksum str
SHA256 checksum of the remote file.
uri This property is required. String
Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256Checksum String
SHA256 checksum of the remote file.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidate
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateArgs

Interpreter This property is required. string
Required. The script interpreter to use. Possible values: INTERPRETER_UNSPECIFIED NONE SHELL POWERSHELL
Args List<string>
Optional arguments to pass to the source during execution.
File V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFile
A remote or local file. Structure is documented below.
OutputFilePath string
Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 500K bytes.
Script string
An inline script. The size of the script is limited to 32KiB.
Interpreter This property is required. string
Required. The script interpreter to use. Possible values: INTERPRETER_UNSPECIFIED NONE SHELL POWERSHELL
Args []string
Optional arguments to pass to the source during execution.
File V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFile
A remote or local file. Structure is documented below.
OutputFilePath string
Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 500K bytes.
Script string
An inline script. The size of the script is limited to 32KiB.
interpreter This property is required. String
Required. The script interpreter to use. Possible values: INTERPRETER_UNSPECIFIED NONE SHELL POWERSHELL
args List<String>
Optional arguments to pass to the source during execution.
file V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFile
A remote or local file. Structure is documented below.
outputFilePath String
Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 500K bytes.
script String
An inline script. The size of the script is limited to 32KiB.
interpreter This property is required. string
Required. The script interpreter to use. Possible values: INTERPRETER_UNSPECIFIED NONE SHELL POWERSHELL
args string[]
Optional arguments to pass to the source during execution.
file V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFile
A remote or local file. Structure is documented below.
outputFilePath string
Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 500K bytes.
script string
An inline script. The size of the script is limited to 32KiB.
interpreter This property is required. str
Required. The script interpreter to use. Possible values: INTERPRETER_UNSPECIFIED NONE SHELL POWERSHELL
args Sequence[str]
Optional arguments to pass to the source during execution.
file V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFile
A remote or local file. Structure is documented below.
output_file_path str
Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 500K bytes.
script str
An inline script. The size of the script is limited to 32KiB.
interpreter This property is required. String
Required. The script interpreter to use. Possible values: INTERPRETER_UNSPECIFIED NONE SHELL POWERSHELL
args List<String>
Optional arguments to pass to the source during execution.
file Property Map
A remote or local file. Structure is documented below.
outputFilePath String
Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 500K bytes.
script String
An inline script. The size of the script is limited to 32KiB.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFile
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileArgs

AllowInsecure bool
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
Gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileGcs
Specifies a file available as a Cloud Storage Object. Structure is documented below.
LocalPath string
A local path within the VM to use.
Remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileRemote
Specifies a file available via some URI. Structure is documented below.
AllowInsecure bool
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
Gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileGcs
Specifies a file available as a Cloud Storage Object. Structure is documented below.
LocalPath string
A local path within the VM to use.
Remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileRemote
Specifies a file available via some URI. Structure is documented below.
allowInsecure Boolean
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileGcs
Specifies a file available as a Cloud Storage Object. Structure is documented below.
localPath String
A local path within the VM to use.
remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileRemote
Specifies a file available via some URI. Structure is documented below.
allowInsecure boolean
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileGcs
Specifies a file available as a Cloud Storage Object. Structure is documented below.
localPath string
A local path within the VM to use.
remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileRemote
Specifies a file available via some URI. Structure is documented below.
allow_insecure bool
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileGcs
Specifies a file available as a Cloud Storage Object. Structure is documented below.
local_path str
A local path within the VM to use.
remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileRemote
Specifies a file available via some URI. Structure is documented below.
allowInsecure Boolean
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs Property Map
Specifies a file available as a Cloud Storage Object. Structure is documented below.
localPath String
A local path within the VM to use.
remote Property Map
Specifies a file available via some URI. Structure is documented below.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileGcs
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileGcsArgs

Bucket This property is required. string
Required. Bucket of the Cloud Storage object.
Object This property is required. string
Required. Name of the Cloud Storage object.
Generation string
Generation number of the Cloud Storage object.
Bucket This property is required. string
Required. Bucket of the Cloud Storage object.
Object This property is required. string
Required. Name of the Cloud Storage object.
Generation string
Generation number of the Cloud Storage object.
bucket This property is required. String
Required. Bucket of the Cloud Storage object.
object This property is required. String
Required. Name of the Cloud Storage object.
generation String
Generation number of the Cloud Storage object.
bucket This property is required. string
Required. Bucket of the Cloud Storage object.
object This property is required. string
Required. Name of the Cloud Storage object.
generation string
Generation number of the Cloud Storage object.
bucket This property is required. str
Required. Bucket of the Cloud Storage object.
object This property is required. str
Required. Name of the Cloud Storage object.
generation str
Generation number of the Cloud Storage object.
bucket This property is required. String
Required. Bucket of the Cloud Storage object.
object This property is required. String
Required. Name of the Cloud Storage object.
generation String
Generation number of the Cloud Storage object.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileRemote
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileRemoteArgs

Uri This property is required. string
Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
Sha256Checksum string
SHA256 checksum of the remote file.
Uri This property is required. string
Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
Sha256Checksum string
SHA256 checksum of the remote file.
uri This property is required. String
Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256Checksum String
SHA256 checksum of the remote file.
uri This property is required. string
Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256Checksum string
SHA256 checksum of the remote file.
uri This property is required. str
Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256_checksum str
SHA256 checksum of the remote file.
uri This property is required. String
Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256Checksum String
SHA256 checksum of the remote file.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFile
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileArgs

Path This property is required. string
Required. The absolute path of the file within the VM.
State This property is required. string
Required. Desired state of the file. Possible values: DESIRED_STATE_UNSPECIFIED PRESENT ABSENT CONTENTS_MATCH
Content string
A a file with this content. The size of the content is limited to 32KiB.
File V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFile
A remote or local file. Structure is documented below.
Permissions string
Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
Path This property is required. string
Required. The absolute path of the file within the VM.
State This property is required. string
Required. Desired state of the file. Possible values: DESIRED_STATE_UNSPECIFIED PRESENT ABSENT CONTENTS_MATCH
Content string
A a file with this content. The size of the content is limited to 32KiB.
File V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFile
A remote or local file. Structure is documented below.
Permissions string
Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
path This property is required. String
Required. The absolute path of the file within the VM.
state This property is required. String
Required. Desired state of the file. Possible values: DESIRED_STATE_UNSPECIFIED PRESENT ABSENT CONTENTS_MATCH
content String
A a file with this content. The size of the content is limited to 32KiB.
file V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFile
A remote or local file. Structure is documented below.
permissions String
Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
path This property is required. string
Required. The absolute path of the file within the VM.
state This property is required. string
Required. Desired state of the file. Possible values: DESIRED_STATE_UNSPECIFIED PRESENT ABSENT CONTENTS_MATCH
content string
A a file with this content. The size of the content is limited to 32KiB.
file V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFile
A remote or local file. Structure is documented below.
permissions string
Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
path This property is required. str
Required. The absolute path of the file within the VM.
state This property is required. str
Required. Desired state of the file. Possible values: DESIRED_STATE_UNSPECIFIED PRESENT ABSENT CONTENTS_MATCH
content str
A a file with this content. The size of the content is limited to 32KiB.
file V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFile
A remote or local file. Structure is documented below.
permissions str
Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
path This property is required. String
Required. The absolute path of the file within the VM.
state This property is required. String
Required. Desired state of the file. Possible values: DESIRED_STATE_UNSPECIFIED PRESENT ABSENT CONTENTS_MATCH
content String
A a file with this content. The size of the content is limited to 32KiB.
file Property Map
A remote or local file. Structure is documented below.
permissions String
Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFile
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileArgs

AllowInsecure bool
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
Gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileGcs
Specifies a file available as a Cloud Storage Object. Structure is documented below.
LocalPath string
A local path within the VM to use.
Remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileRemote
Specifies a file available via some URI. Structure is documented below.
AllowInsecure bool
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
Gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileGcs
Specifies a file available as a Cloud Storage Object. Structure is documented below.
LocalPath string
A local path within the VM to use.
Remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileRemote
Specifies a file available via some URI. Structure is documented below.
allowInsecure Boolean
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileGcs
Specifies a file available as a Cloud Storage Object. Structure is documented below.
localPath String
A local path within the VM to use.
remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileRemote
Specifies a file available via some URI. Structure is documented below.
allowInsecure boolean
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileGcs
Specifies a file available as a Cloud Storage Object. Structure is documented below.
localPath string
A local path within the VM to use.
remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileRemote
Specifies a file available via some URI. Structure is documented below.
allow_insecure bool
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileGcs
Specifies a file available as a Cloud Storage Object. Structure is documented below.
local_path str
A local path within the VM to use.
remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileRemote
Specifies a file available via some URI. Structure is documented below.
allowInsecure Boolean
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs Property Map
Specifies a file available as a Cloud Storage Object. Structure is documented below.
localPath String
A local path within the VM to use.
remote Property Map
Specifies a file available via some URI. Structure is documented below.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileGcs
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileGcsArgs

Bucket This property is required. string
Required. Bucket of the Cloud Storage object.
Object This property is required. string
Required. Name of the Cloud Storage object.
Generation string
Generation number of the Cloud Storage object.
Bucket This property is required. string
Required. Bucket of the Cloud Storage object.
Object This property is required. string
Required. Name of the Cloud Storage object.
Generation string
Generation number of the Cloud Storage object.
bucket This property is required. String
Required. Bucket of the Cloud Storage object.
object This property is required. String
Required. Name of the Cloud Storage object.
generation String
Generation number of the Cloud Storage object.
bucket This property is required. string
Required. Bucket of the Cloud Storage object.
object This property is required. string
Required. Name of the Cloud Storage object.
generation string
Generation number of the Cloud Storage object.
bucket This property is required. str
Required. Bucket of the Cloud Storage object.
object This property is required. str
Required. Name of the Cloud Storage object.
generation str
Generation number of the Cloud Storage object.
bucket This property is required. String
Required. Bucket of the Cloud Storage object.
object This property is required. String
Required. Name of the Cloud Storage object.
generation String
Generation number of the Cloud Storage object.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileRemote
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileRemoteArgs

Uri This property is required. string
Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
Sha256Checksum string
SHA256 checksum of the remote file.
Uri This property is required. string
Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
Sha256Checksum string
SHA256 checksum of the remote file.
uri This property is required. String
Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256Checksum String
SHA256 checksum of the remote file.
uri This property is required. string
Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256Checksum string
SHA256 checksum of the remote file.
uri This property is required. str
Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256_checksum str
SHA256 checksum of the remote file.
uri This property is required. String
Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256Checksum String
SHA256 checksum of the remote file.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkg
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgArgs

DesiredState This property is required. string
Required. The desired state the agent should maintain for this package. Possible values: DESIRED_STATE_UNSPECIFIED INSTALLED REMOVED
Apt V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgApt
A package managed by APT.

  • install: apt-get update && apt-get -y install [name]
  • remove: apt-get -y remove [name] Structure is documented below.
Deb V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDeb
A deb package file. dpkg packages only support INSTALLED state. Structure is documented below.
Googet V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgGooget
A package managed by GooGet.

  • install: googet -noconfirm install package
  • remove: googet -noconfirm remove package Structure is documented below.
Msi V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsi
An MSI package. MSI packages only support INSTALLED state. Structure is documented below.
Rpm V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpm
An RPM package file. RPM packages only support INSTALLED state. Structure is documented below.
Yum V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgYum
A package managed by YUM.

  • install: yum -y install package
  • remove: yum -y remove package Structure is documented below.
Zypper V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgZypper
A package managed by Zypper.

  • install: zypper -y install package
  • remove: zypper -y rm package Structure is documented below.
DesiredState This property is required. string
Required. The desired state the agent should maintain for this package. Possible values: DESIRED_STATE_UNSPECIFIED INSTALLED REMOVED
Apt V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgApt
A package managed by APT.

  • install: apt-get update && apt-get -y install [name]
  • remove: apt-get -y remove [name] Structure is documented below.
Deb V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDeb
A deb package file. dpkg packages only support INSTALLED state. Structure is documented below.
Googet V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgGooget
A package managed by GooGet.

  • install: googet -noconfirm install package
  • remove: googet -noconfirm remove package Structure is documented below.
Msi V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsi
An MSI package. MSI packages only support INSTALLED state. Structure is documented below.
Rpm V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpm
An RPM package file. RPM packages only support INSTALLED state. Structure is documented below.
Yum V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgYum
A package managed by YUM.

  • install: yum -y install package
  • remove: yum -y remove package Structure is documented below.
Zypper V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgZypper
A package managed by Zypper.

  • install: zypper -y install package
  • remove: zypper -y rm package Structure is documented below.
desiredState This property is required. String
Required. The desired state the agent should maintain for this package. Possible values: DESIRED_STATE_UNSPECIFIED INSTALLED REMOVED
apt V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgApt
A package managed by APT.

  • install: apt-get update && apt-get -y install [name]
  • remove: apt-get -y remove [name] Structure is documented below.
deb V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDeb
A deb package file. dpkg packages only support INSTALLED state. Structure is documented below.
googet V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgGooget
A package managed by GooGet.

  • install: googet -noconfirm install package
  • remove: googet -noconfirm remove package Structure is documented below.
msi V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsi
An MSI package. MSI packages only support INSTALLED state. Structure is documented below.
rpm V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpm
An RPM package file. RPM packages only support INSTALLED state. Structure is documented below.
yum V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgYum
A package managed by YUM.

  • install: yum -y install package
  • remove: yum -y remove package Structure is documented below.
zypper V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgZypper
A package managed by Zypper.

  • install: zypper -y install package
  • remove: zypper -y rm package Structure is documented below.
desiredState This property is required. string
Required. The desired state the agent should maintain for this package. Possible values: DESIRED_STATE_UNSPECIFIED INSTALLED REMOVED
apt V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgApt
A package managed by APT.

  • install: apt-get update && apt-get -y install [name]
  • remove: apt-get -y remove [name] Structure is documented below.
deb V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDeb
A deb package file. dpkg packages only support INSTALLED state. Structure is documented below.
googet V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgGooget
A package managed by GooGet.

  • install: googet -noconfirm install package
  • remove: googet -noconfirm remove package Structure is documented below.
msi V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsi
An MSI package. MSI packages only support INSTALLED state. Structure is documented below.
rpm V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpm
An RPM package file. RPM packages only support INSTALLED state. Structure is documented below.
yum V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgYum
A package managed by YUM.

  • install: yum -y install package
  • remove: yum -y remove package Structure is documented below.
zypper V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgZypper
A package managed by Zypper.

  • install: zypper -y install package
  • remove: zypper -y rm package Structure is documented below.
desired_state This property is required. str
Required. The desired state the agent should maintain for this package. Possible values: DESIRED_STATE_UNSPECIFIED INSTALLED REMOVED
apt V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgApt
A package managed by APT.

  • install: apt-get update && apt-get -y install [name]
  • remove: apt-get -y remove [name] Structure is documented below.
deb V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDeb
A deb package file. dpkg packages only support INSTALLED state. Structure is documented below.
googet V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgGooget
A package managed by GooGet.

  • install: googet -noconfirm install package
  • remove: googet -noconfirm remove package Structure is documented below.
msi V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsi
An MSI package. MSI packages only support INSTALLED state. Structure is documented below.
rpm V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpm
An RPM package file. RPM packages only support INSTALLED state. Structure is documented below.
yum V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgYum
A package managed by YUM.

  • install: yum -y install package
  • remove: yum -y remove package Structure is documented below.
zypper V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgZypper
A package managed by Zypper.

  • install: zypper -y install package
  • remove: zypper -y rm package Structure is documented below.
desiredState This property is required. String
Required. The desired state the agent should maintain for this package. Possible values: DESIRED_STATE_UNSPECIFIED INSTALLED REMOVED
apt Property Map
A package managed by APT.

  • install: apt-get update && apt-get -y install [name]
  • remove: apt-get -y remove [name] Structure is documented below.
deb Property Map
A deb package file. dpkg packages only support INSTALLED state. Structure is documented below.
googet Property Map
A package managed by GooGet.

  • install: googet -noconfirm install package
  • remove: googet -noconfirm remove package Structure is documented below.
msi Property Map
An MSI package. MSI packages only support INSTALLED state. Structure is documented below.
rpm Property Map
An RPM package file. RPM packages only support INSTALLED state. Structure is documented below.
yum Property Map
A package managed by YUM.

  • install: yum -y install package
  • remove: yum -y remove package Structure is documented below.
zypper Property Map
A package managed by Zypper.

  • install: zypper -y install package
  • remove: zypper -y rm package Structure is documented below.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgApt
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgAptArgs

Name This property is required. string
Required. Package name.
Name This property is required. string
Required. Package name.
name This property is required. String
Required. Package name.
name This property is required. string
Required. Package name.
name This property is required. str
Required. Package name.
name This property is required. String
Required. Package name.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDeb
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebArgs

Source This property is required. V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSource
A remote or local file. Structure is documented below.
PullDeps bool
Whether dependencies should also be installed.

  • install when false: dpkg -i package
  • install when true: apt-get update && apt-get -y install package.deb
Source This property is required. V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSource
A remote or local file. Structure is documented below.
PullDeps bool
Whether dependencies should also be installed.

  • install when false: dpkg -i package
  • install when true: apt-get update && apt-get -y install package.deb
source This property is required. V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSource
A remote or local file. Structure is documented below.
pullDeps Boolean
Whether dependencies should also be installed.

  • install when false: dpkg -i package
  • install when true: apt-get update && apt-get -y install package.deb
source This property is required. V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSource
A remote or local file. Structure is documented below.
pullDeps boolean
Whether dependencies should also be installed.

  • install when false: dpkg -i package
  • install when true: apt-get update && apt-get -y install package.deb
source This property is required. V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSource
A remote or local file. Structure is documented below.
pull_deps bool
Whether dependencies should also be installed.

  • install when false: dpkg -i package
  • install when true: apt-get update && apt-get -y install package.deb
source This property is required. Property Map
A remote or local file. Structure is documented below.
pullDeps Boolean
Whether dependencies should also be installed.

  • install when false: dpkg -i package
  • install when true: apt-get update && apt-get -y install package.deb

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSource
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceArgs

AllowInsecure bool
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
Gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceGcs
Specifies a file available as a Cloud Storage Object. Structure is documented below.
LocalPath string
A local path within the VM to use.
Remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceRemote
Specifies a file available via some URI. Structure is documented below.
AllowInsecure bool
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
Gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceGcs
Specifies a file available as a Cloud Storage Object. Structure is documented below.
LocalPath string
A local path within the VM to use.
Remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceRemote
Specifies a file available via some URI. Structure is documented below.
allowInsecure Boolean
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceGcs
Specifies a file available as a Cloud Storage Object. Structure is documented below.
localPath String
A local path within the VM to use.
remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceRemote
Specifies a file available via some URI. Structure is documented below.
allowInsecure boolean
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceGcs
Specifies a file available as a Cloud Storage Object. Structure is documented below.
localPath string
A local path within the VM to use.
remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceRemote
Specifies a file available via some URI. Structure is documented below.
allow_insecure bool
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceGcs
Specifies a file available as a Cloud Storage Object. Structure is documented below.
local_path str
A local path within the VM to use.
remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceRemote
Specifies a file available via some URI. Structure is documented below.
allowInsecure Boolean
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs Property Map
Specifies a file available as a Cloud Storage Object. Structure is documented below.
localPath String
A local path within the VM to use.
remote Property Map
Specifies a file available via some URI. Structure is documented below.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceGcs
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceGcsArgs

Bucket This property is required. string
Required. Bucket of the Cloud Storage object.
Object This property is required. string
Required. Name of the Cloud Storage object.
Generation string
Generation number of the Cloud Storage object.
Bucket This property is required. string
Required. Bucket of the Cloud Storage object.
Object This property is required. string
Required. Name of the Cloud Storage object.
Generation string
Generation number of the Cloud Storage object.
bucket This property is required. String
Required. Bucket of the Cloud Storage object.
object This property is required. String
Required. Name of the Cloud Storage object.
generation String
Generation number of the Cloud Storage object.
bucket This property is required. string
Required. Bucket of the Cloud Storage object.
object This property is required. string
Required. Name of the Cloud Storage object.
generation string
Generation number of the Cloud Storage object.
bucket This property is required. str
Required. Bucket of the Cloud Storage object.
object This property is required. str
Required. Name of the Cloud Storage object.
generation str
Generation number of the Cloud Storage object.
bucket This property is required. String
Required. Bucket of the Cloud Storage object.
object This property is required. String
Required. Name of the Cloud Storage object.
generation String
Generation number of the Cloud Storage object.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceRemote
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceRemoteArgs

Uri This property is required. string
Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
Sha256Checksum string
SHA256 checksum of the remote file.
Uri This property is required. string
Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
Sha256Checksum string
SHA256 checksum of the remote file.
uri This property is required. String
Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256Checksum String
SHA256 checksum of the remote file.
uri This property is required. string
Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256Checksum string
SHA256 checksum of the remote file.
uri This property is required. str
Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256_checksum str
SHA256 checksum of the remote file.
uri This property is required. String
Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256Checksum String
SHA256 checksum of the remote file.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgGooget
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgGoogetArgs

Name This property is required. string
Required. Package name.
Name This property is required. string
Required. Package name.
name This property is required. String
Required. Package name.
name This property is required. string
Required. Package name.
name This property is required. str
Required. Package name.
name This property is required. String
Required. Package name.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsi
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiArgs

Source This property is required. V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSource
A remote or local file. Structure is documented below.
Properties List<string>
Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.
Source This property is required. V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSource
A remote or local file. Structure is documented below.
Properties []string
Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.
source This property is required. V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSource
A remote or local file. Structure is documented below.
properties List<String>
Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.
source This property is required. V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSource
A remote or local file. Structure is documented below.
properties string[]
Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.
source This property is required. V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSource
A remote or local file. Structure is documented below.
properties Sequence[str]
Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.
source This property is required. Property Map
A remote or local file. Structure is documented below.
properties List<String>
Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSource
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceArgs

AllowInsecure bool
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
Gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceGcs
Specifies a file available as a Cloud Storage Object. Structure is documented below.
LocalPath string
A local path within the VM to use.
Remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceRemote
Specifies a file available via some URI. Structure is documented below.
AllowInsecure bool
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
Gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceGcs
Specifies a file available as a Cloud Storage Object. Structure is documented below.
LocalPath string
A local path within the VM to use.
Remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceRemote
Specifies a file available via some URI. Structure is documented below.
allowInsecure Boolean
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceGcs
Specifies a file available as a Cloud Storage Object. Structure is documented below.
localPath String
A local path within the VM to use.
remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceRemote
Specifies a file available via some URI. Structure is documented below.
allowInsecure boolean
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceGcs
Specifies a file available as a Cloud Storage Object. Structure is documented below.
localPath string
A local path within the VM to use.
remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceRemote
Specifies a file available via some URI. Structure is documented below.
allow_insecure bool
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceGcs
Specifies a file available as a Cloud Storage Object. Structure is documented below.
local_path str
A local path within the VM to use.
remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceRemote
Specifies a file available via some URI. Structure is documented below.
allowInsecure Boolean
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs Property Map
Specifies a file available as a Cloud Storage Object. Structure is documented below.
localPath String
A local path within the VM to use.
remote Property Map
Specifies a file available via some URI. Structure is documented below.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceGcs
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceGcsArgs

Bucket This property is required. string
Required. Bucket of the Cloud Storage object.
Object This property is required. string
Required. Name of the Cloud Storage object.
Generation string
Generation number of the Cloud Storage object.
Bucket This property is required. string
Required. Bucket of the Cloud Storage object.
Object This property is required. string
Required. Name of the Cloud Storage object.
Generation string
Generation number of the Cloud Storage object.
bucket This property is required. String
Required. Bucket of the Cloud Storage object.
object This property is required. String
Required. Name of the Cloud Storage object.
generation String
Generation number of the Cloud Storage object.
bucket This property is required. string
Required. Bucket of the Cloud Storage object.
object This property is required. string
Required. Name of the Cloud Storage object.
generation string
Generation number of the Cloud Storage object.
bucket This property is required. str
Required. Bucket of the Cloud Storage object.
object This property is required. str
Required. Name of the Cloud Storage object.
generation str
Generation number of the Cloud Storage object.
bucket This property is required. String
Required. Bucket of the Cloud Storage object.
object This property is required. String
Required. Name of the Cloud Storage object.
generation String
Generation number of the Cloud Storage object.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceRemote
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceRemoteArgs

Uri This property is required. string
Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
Sha256Checksum string
SHA256 checksum of the remote file.
Uri This property is required. string
Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
Sha256Checksum string
SHA256 checksum of the remote file.
uri This property is required. String
Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256Checksum String
SHA256 checksum of the remote file.
uri This property is required. string
Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256Checksum string
SHA256 checksum of the remote file.
uri This property is required. str
Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256_checksum str
SHA256 checksum of the remote file.
uri This property is required. String
Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256Checksum String
SHA256 checksum of the remote file.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpm
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmArgs

Source This property is required. V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSource
A remote or local file. Structure is documented below.
PullDeps bool
Whether dependencies should also be installed.

  • install when false: rpm --upgrade --replacepkgs package.rpm
  • install when true: yum -y install package.rpm or zypper -y install package.rpm
Source This property is required. V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSource
A remote or local file. Structure is documented below.
PullDeps bool
Whether dependencies should also be installed.

  • install when false: rpm --upgrade --replacepkgs package.rpm
  • install when true: yum -y install package.rpm or zypper -y install package.rpm
source This property is required. V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSource
A remote or local file. Structure is documented below.
pullDeps Boolean
Whether dependencies should also be installed.

  • install when false: rpm --upgrade --replacepkgs package.rpm
  • install when true: yum -y install package.rpm or zypper -y install package.rpm
source This property is required. V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSource
A remote or local file. Structure is documented below.
pullDeps boolean
Whether dependencies should also be installed.

  • install when false: rpm --upgrade --replacepkgs package.rpm
  • install when true: yum -y install package.rpm or zypper -y install package.rpm
source This property is required. V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSource
A remote or local file. Structure is documented below.
pull_deps bool
Whether dependencies should also be installed.

  • install when false: rpm --upgrade --replacepkgs package.rpm
  • install when true: yum -y install package.rpm or zypper -y install package.rpm
source This property is required. Property Map
A remote or local file. Structure is documented below.
pullDeps Boolean
Whether dependencies should also be installed.

  • install when false: rpm --upgrade --replacepkgs package.rpm
  • install when true: yum -y install package.rpm or zypper -y install package.rpm

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSource
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceArgs

AllowInsecure bool
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
Gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceGcs
Specifies a file available as a Cloud Storage Object. Structure is documented below.
LocalPath string
A local path within the VM to use.
Remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceRemote
Specifies a file available via some URI. Structure is documented below.
AllowInsecure bool
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
Gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceGcs
Specifies a file available as a Cloud Storage Object. Structure is documented below.
LocalPath string
A local path within the VM to use.
Remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceRemote
Specifies a file available via some URI. Structure is documented below.
allowInsecure Boolean
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceGcs
Specifies a file available as a Cloud Storage Object. Structure is documented below.
localPath String
A local path within the VM to use.
remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceRemote
Specifies a file available via some URI. Structure is documented below.
allowInsecure boolean
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceGcs
Specifies a file available as a Cloud Storage Object. Structure is documented below.
localPath string
A local path within the VM to use.
remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceRemote
Specifies a file available via some URI. Structure is documented below.
allow_insecure bool
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceGcs
Specifies a file available as a Cloud Storage Object. Structure is documented below.
local_path str
A local path within the VM to use.
remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceRemote
Specifies a file available via some URI. Structure is documented below.
allowInsecure Boolean
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs Property Map
Specifies a file available as a Cloud Storage Object. Structure is documented below.
localPath String
A local path within the VM to use.
remote Property Map
Specifies a file available via some URI. Structure is documented below.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceGcs
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceGcsArgs

Bucket This property is required. string
Required. Bucket of the Cloud Storage object.
Object This property is required. string
Required. Name of the Cloud Storage object.
Generation string
Generation number of the Cloud Storage object.
Bucket This property is required. string
Required. Bucket of the Cloud Storage object.
Object This property is required. string
Required. Name of the Cloud Storage object.
Generation string
Generation number of the Cloud Storage object.
bucket This property is required. String
Required. Bucket of the Cloud Storage object.
object This property is required. String
Required. Name of the Cloud Storage object.
generation String
Generation number of the Cloud Storage object.
bucket This property is required. string
Required. Bucket of the Cloud Storage object.
object This property is required. string
Required. Name of the Cloud Storage object.
generation string
Generation number of the Cloud Storage object.
bucket This property is required. str
Required. Bucket of the Cloud Storage object.
object This property is required. str
Required. Name of the Cloud Storage object.
generation str
Generation number of the Cloud Storage object.
bucket This property is required. String
Required. Bucket of the Cloud Storage object.
object This property is required. String
Required. Name of the Cloud Storage object.
generation String
Generation number of the Cloud Storage object.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceRemote
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceRemoteArgs

Uri This property is required. string
Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
Sha256Checksum string
SHA256 checksum of the remote file.
Uri This property is required. string
Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
Sha256Checksum string
SHA256 checksum of the remote file.
uri This property is required. String
Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256Checksum String
SHA256 checksum of the remote file.
uri This property is required. string
Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256Checksum string
SHA256 checksum of the remote file.
uri This property is required. str
Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256_checksum str
SHA256 checksum of the remote file.
uri This property is required. String
Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256Checksum String
SHA256 checksum of the remote file.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgYum
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgYumArgs

Name This property is required. string
Required. Package name.
Name This property is required. string
Required. Package name.
name This property is required. String
Required. Package name.
name This property is required. string
Required. Package name.
name This property is required. str
Required. Package name.
name This property is required. String
Required. Package name.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgZypper
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgZypperArgs

Name This property is required. string
Required. Package name.
Name This property is required. string
Required. Package name.
name This property is required. String
Required. Package name.
name This property is required. string
Required. Package name.
name This property is required. str
Required. Package name.
name This property is required. String
Required. Package name.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepository
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryArgs

Apt V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryApt
Represents a single apt package repository. These will be added to a repo file that will be managed at /etc/apt/sources.list.d/google_osconfig.list. Structure is documented below.
Goo V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryGoo
Represents a Goo package repository. These are added to a repo file that is managed at C:/ProgramData/GooGet/repos/google_osconfig.repo. Structure is documented below.
Yum V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryYum
Represents a single yum package repository. These are added to a repo file that is managed at /etc/yum.repos.d/google_osconfig.repo. Structure is documented below.
Zypper V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryZypper
Represents a single zypper package repository. These are added to a repo file that is managed at /etc/zypp/repos.d/google_osconfig.repo. Structure is documented below.
Apt V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryApt
Represents a single apt package repository. These will be added to a repo file that will be managed at /etc/apt/sources.list.d/google_osconfig.list. Structure is documented below.
Goo V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryGoo
Represents a Goo package repository. These are added to a repo file that is managed at C:/ProgramData/GooGet/repos/google_osconfig.repo. Structure is documented below.
Yum V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryYum
Represents a single yum package repository. These are added to a repo file that is managed at /etc/yum.repos.d/google_osconfig.repo. Structure is documented below.
Zypper V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryZypper
Represents a single zypper package repository. These are added to a repo file that is managed at /etc/zypp/repos.d/google_osconfig.repo. Structure is documented below.
apt V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryApt
Represents a single apt package repository. These will be added to a repo file that will be managed at /etc/apt/sources.list.d/google_osconfig.list. Structure is documented below.
goo V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryGoo
Represents a Goo package repository. These are added to a repo file that is managed at C:/ProgramData/GooGet/repos/google_osconfig.repo. Structure is documented below.
yum V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryYum
Represents a single yum package repository. These are added to a repo file that is managed at /etc/yum.repos.d/google_osconfig.repo. Structure is documented below.
zypper V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryZypper
Represents a single zypper package repository. These are added to a repo file that is managed at /etc/zypp/repos.d/google_osconfig.repo. Structure is documented below.
apt V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryApt
Represents a single apt package repository. These will be added to a repo file that will be managed at /etc/apt/sources.list.d/google_osconfig.list. Structure is documented below.
goo V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryGoo
Represents a Goo package repository. These are added to a repo file that is managed at C:/ProgramData/GooGet/repos/google_osconfig.repo. Structure is documented below.
yum V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryYum
Represents a single yum package repository. These are added to a repo file that is managed at /etc/yum.repos.d/google_osconfig.repo. Structure is documented below.
zypper V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryZypper
Represents a single zypper package repository. These are added to a repo file that is managed at /etc/zypp/repos.d/google_osconfig.repo. Structure is documented below.
apt V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryApt
Represents a single apt package repository. These will be added to a repo file that will be managed at /etc/apt/sources.list.d/google_osconfig.list. Structure is documented below.
goo V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryGoo
Represents a Goo package repository. These are added to a repo file that is managed at C:/ProgramData/GooGet/repos/google_osconfig.repo. Structure is documented below.
yum V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryYum
Represents a single yum package repository. These are added to a repo file that is managed at /etc/yum.repos.d/google_osconfig.repo. Structure is documented below.
zypper V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryZypper
Represents a single zypper package repository. These are added to a repo file that is managed at /etc/zypp/repos.d/google_osconfig.repo. Structure is documented below.
apt Property Map
Represents a single apt package repository. These will be added to a repo file that will be managed at /etc/apt/sources.list.d/google_osconfig.list. Structure is documented below.
goo Property Map
Represents a Goo package repository. These are added to a repo file that is managed at C:/ProgramData/GooGet/repos/google_osconfig.repo. Structure is documented below.
yum Property Map
Represents a single yum package repository. These are added to a repo file that is managed at /etc/yum.repos.d/google_osconfig.repo. Structure is documented below.
zypper Property Map
Represents a single zypper package repository. These are added to a repo file that is managed at /etc/zypp/repos.d/google_osconfig.repo. Structure is documented below.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryApt
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryAptArgs

ArchiveType This property is required. string
Required. Type of archive files in this repository. Possible values: ARCHIVE_TYPE_UNSPECIFIED DEB DEB_SRC
Components This property is required. List<string>
Required. List of components for this repository. Must contain at least one item.
Distribution This property is required. string
Required. Distribution of this repository.
Uri This property is required. string
Required. URI for this repository.
GpgKey string
URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
ArchiveType This property is required. string
Required. Type of archive files in this repository. Possible values: ARCHIVE_TYPE_UNSPECIFIED DEB DEB_SRC
Components This property is required. []string
Required. List of components for this repository. Must contain at least one item.
Distribution This property is required. string
Required. Distribution of this repository.
Uri This property is required. string
Required. URI for this repository.
GpgKey string
URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
archiveType This property is required. String
Required. Type of archive files in this repository. Possible values: ARCHIVE_TYPE_UNSPECIFIED DEB DEB_SRC
components This property is required. List<String>
Required. List of components for this repository. Must contain at least one item.
distribution This property is required. String
Required. Distribution of this repository.
uri This property is required. String
Required. URI for this repository.
gpgKey String
URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
archiveType This property is required. string
Required. Type of archive files in this repository. Possible values: ARCHIVE_TYPE_UNSPECIFIED DEB DEB_SRC
components This property is required. string[]
Required. List of components for this repository. Must contain at least one item.
distribution This property is required. string
Required. Distribution of this repository.
uri This property is required. string
Required. URI for this repository.
gpgKey string
URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
archive_type This property is required. str
Required. Type of archive files in this repository. Possible values: ARCHIVE_TYPE_UNSPECIFIED DEB DEB_SRC
components This property is required. Sequence[str]
Required. List of components for this repository. Must contain at least one item.
distribution This property is required. str
Required. Distribution of this repository.
uri This property is required. str
Required. URI for this repository.
gpg_key str
URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
archiveType This property is required. String
Required. Type of archive files in this repository. Possible values: ARCHIVE_TYPE_UNSPECIFIED DEB DEB_SRC
components This property is required. List<String>
Required. List of components for this repository. Must contain at least one item.
distribution This property is required. String
Required. Distribution of this repository.
uri This property is required. String
Required. URI for this repository.
gpgKey String
URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryGoo
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryGooArgs

Name This property is required. string
Required. The name of the repository.
Url This property is required. string
Required. The url of the repository.
Name This property is required. string
Required. The name of the repository.
Url This property is required. string
Required. The url of the repository.
name This property is required. String
Required. The name of the repository.
url This property is required. String
Required. The url of the repository.
name This property is required. string
Required. The name of the repository.
url This property is required. string
Required. The url of the repository.
name This property is required. str
Required. The name of the repository.
url This property is required. str
Required. The url of the repository.
name This property is required. String
Required. The name of the repository.
url This property is required. String
Required. The url of the repository.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryYum
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryYumArgs

BaseUrl This property is required. string
Required. The location of the repository directory.
Id This property is required. string
Required. A one word, unique name for this repository. This is the repo id in the yum config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for resource conflicts.
DisplayName string
The display name of the repository.
GpgKeys List<string>
URIs of GPG keys.
BaseUrl This property is required. string
Required. The location of the repository directory.
Id This property is required. string
Required. A one word, unique name for this repository. This is the repo id in the yum config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for resource conflicts.
DisplayName string
The display name of the repository.
GpgKeys []string
URIs of GPG keys.
baseUrl This property is required. String
Required. The location of the repository directory.
id This property is required. String
Required. A one word, unique name for this repository. This is the repo id in the yum config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for resource conflicts.
displayName String
The display name of the repository.
gpgKeys List<String>
URIs of GPG keys.
baseUrl This property is required. string
Required. The location of the repository directory.
id This property is required. string
Required. A one word, unique name for this repository. This is the repo id in the yum config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for resource conflicts.
displayName string
The display name of the repository.
gpgKeys string[]
URIs of GPG keys.
base_url This property is required. str
Required. The location of the repository directory.
id This property is required. str
Required. A one word, unique name for this repository. This is the repo id in the yum config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for resource conflicts.
display_name str
The display name of the repository.
gpg_keys Sequence[str]
URIs of GPG keys.
baseUrl This property is required. String
Required. The location of the repository directory.
id This property is required. String
Required. A one word, unique name for this repository. This is the repo id in the yum config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for resource conflicts.
displayName String
The display name of the repository.
gpgKeys List<String>
URIs of GPG keys.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryZypper
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryZypperArgs

BaseUrl This property is required. string
Required. The location of the repository directory.
Id This property is required. string
Required. A one word, unique name for this repository. This is the repo id in the zypper config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
DisplayName string
The display name of the repository.
GpgKeys List<string>
URIs of GPG keys.
BaseUrl This property is required. string
Required. The location of the repository directory.
Id This property is required. string
Required. A one word, unique name for this repository. This is the repo id in the zypper config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
DisplayName string
The display name of the repository.
GpgKeys []string
URIs of GPG keys.
baseUrl This property is required. String
Required. The location of the repository directory.
id This property is required. String
Required. A one word, unique name for this repository. This is the repo id in the zypper config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
displayName String
The display name of the repository.
gpgKeys List<String>
URIs of GPG keys.
baseUrl This property is required. string
Required. The location of the repository directory.
id This property is required. string
Required. A one word, unique name for this repository. This is the repo id in the zypper config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
displayName string
The display name of the repository.
gpgKeys string[]
URIs of GPG keys.
base_url This property is required. str
Required. The location of the repository directory.
id This property is required. str
Required. A one word, unique name for this repository. This is the repo id in the zypper config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
display_name str
The display name of the repository.
gpg_keys Sequence[str]
URIs of GPG keys.
baseUrl This property is required. String
Required. The location of the repository directory.
id This property is required. String
Required. A one word, unique name for this repository. This is the repo id in the zypper config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
displayName String
The display name of the repository.
gpgKeys List<String>
URIs of GPG keys.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRollout
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutArgs

DisruptionBudget This property is required. V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudget
Message encapsulating a value that can be either absolute ("fixed") or relative ("percent") to a value. Structure is documented below.
MinWaitDuration This property is required. string
Required. This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.
DisruptionBudget This property is required. V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudget
Message encapsulating a value that can be either absolute ("fixed") or relative ("percent") to a value. Structure is documented below.
MinWaitDuration This property is required. string
Required. This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.
disruptionBudget This property is required. V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudget
Message encapsulating a value that can be either absolute ("fixed") or relative ("percent") to a value. Structure is documented below.
minWaitDuration This property is required. String
Required. This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.
disruptionBudget This property is required. V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudget
Message encapsulating a value that can be either absolute ("fixed") or relative ("percent") to a value. Structure is documented below.
minWaitDuration This property is required. string
Required. This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.
disruption_budget This property is required. V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudget
Message encapsulating a value that can be either absolute ("fixed") or relative ("percent") to a value. Structure is documented below.
min_wait_duration This property is required. str
Required. This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.
disruptionBudget This property is required. Property Map
Message encapsulating a value that can be either absolute ("fixed") or relative ("percent") to a value. Structure is documented below.
minWaitDuration This property is required. String
Required. This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.

V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudget
, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudgetArgs

Fixed int
Specifies a fixed value.
Percent int
Specifies the relative value defined as a percentage, which will be multiplied by a reference value.


Fixed int
Specifies a fixed value.
Percent int
Specifies the relative value defined as a percentage, which will be multiplied by a reference value.


fixed Integer
Specifies a fixed value.
percent Integer
Specifies the relative value defined as a percentage, which will be multiplied by a reference value.


fixed number
Specifies a fixed value.
percent number
Specifies the relative value defined as a percentage, which will be multiplied by a reference value.


fixed int
Specifies a fixed value.
percent int
Specifies the relative value defined as a percentage, which will be multiplied by a reference value.


fixed Number
Specifies a fixed value.
percent Number
Specifies the relative value defined as a percentage, which will be multiplied by a reference value.


V2PolicyOrchestratorOrchestrationScope
, V2PolicyOrchestratorOrchestrationScopeArgs

Selectors List<V2PolicyOrchestratorOrchestrationScopeSelector>
Optional. Selectors of the orchestration scope. There is a logical AND between each selector defined. When there is no explicit ResourceHierarchySelector selector specified, the scope is by default bounded to the parent of the policy orchestrator resource. Structure is documented below.
Selectors []V2PolicyOrchestratorOrchestrationScopeSelector
Optional. Selectors of the orchestration scope. There is a logical AND between each selector defined. When there is no explicit ResourceHierarchySelector selector specified, the scope is by default bounded to the parent of the policy orchestrator resource. Structure is documented below.
selectors List<V2PolicyOrchestratorOrchestrationScopeSelector>
Optional. Selectors of the orchestration scope. There is a logical AND between each selector defined. When there is no explicit ResourceHierarchySelector selector specified, the scope is by default bounded to the parent of the policy orchestrator resource. Structure is documented below.
selectors V2PolicyOrchestratorOrchestrationScopeSelector[]
Optional. Selectors of the orchestration scope. There is a logical AND between each selector defined. When there is no explicit ResourceHierarchySelector selector specified, the scope is by default bounded to the parent of the policy orchestrator resource. Structure is documented below.
selectors Sequence[V2PolicyOrchestratorOrchestrationScopeSelector]
Optional. Selectors of the orchestration scope. There is a logical AND between each selector defined. When there is no explicit ResourceHierarchySelector selector specified, the scope is by default bounded to the parent of the policy orchestrator resource. Structure is documented below.
selectors List<Property Map>
Optional. Selectors of the orchestration scope. There is a logical AND between each selector defined. When there is no explicit ResourceHierarchySelector selector specified, the scope is by default bounded to the parent of the policy orchestrator resource. Structure is documented below.

V2PolicyOrchestratorOrchestrationScopeSelector
, V2PolicyOrchestratorOrchestrationScopeSelectorArgs

LocationSelector V2PolicyOrchestratorOrchestrationScopeSelectorLocationSelector
Selector containing locations in scope. Structure is documented below.
ResourceHierarchySelector V2PolicyOrchestratorOrchestrationScopeSelectorResourceHierarchySelector
Selector containing Cloud Resource Manager resource hierarchy nodes. Structure is documented below.
LocationSelector V2PolicyOrchestratorOrchestrationScopeSelectorLocationSelector
Selector containing locations in scope. Structure is documented below.
ResourceHierarchySelector V2PolicyOrchestratorOrchestrationScopeSelectorResourceHierarchySelector
Selector containing Cloud Resource Manager resource hierarchy nodes. Structure is documented below.
locationSelector V2PolicyOrchestratorOrchestrationScopeSelectorLocationSelector
Selector containing locations in scope. Structure is documented below.
resourceHierarchySelector V2PolicyOrchestratorOrchestrationScopeSelectorResourceHierarchySelector
Selector containing Cloud Resource Manager resource hierarchy nodes. Structure is documented below.
locationSelector V2PolicyOrchestratorOrchestrationScopeSelectorLocationSelector
Selector containing locations in scope. Structure is documented below.
resourceHierarchySelector V2PolicyOrchestratorOrchestrationScopeSelectorResourceHierarchySelector
Selector containing Cloud Resource Manager resource hierarchy nodes. Structure is documented below.
location_selector V2PolicyOrchestratorOrchestrationScopeSelectorLocationSelector
Selector containing locations in scope. Structure is documented below.
resource_hierarchy_selector V2PolicyOrchestratorOrchestrationScopeSelectorResourceHierarchySelector
Selector containing Cloud Resource Manager resource hierarchy nodes. Structure is documented below.
locationSelector Property Map
Selector containing locations in scope. Structure is documented below.
resourceHierarchySelector Property Map
Selector containing Cloud Resource Manager resource hierarchy nodes. Structure is documented below.

V2PolicyOrchestratorOrchestrationScopeSelectorLocationSelector
, V2PolicyOrchestratorOrchestrationScopeSelectorLocationSelectorArgs

IncludedLocations List<string>
Optional. Names of the locations in scope. Format: us-central1-a
IncludedLocations []string
Optional. Names of the locations in scope. Format: us-central1-a
includedLocations List<String>
Optional. Names of the locations in scope. Format: us-central1-a
includedLocations string[]
Optional. Names of the locations in scope. Format: us-central1-a
included_locations Sequence[str]
Optional. Names of the locations in scope. Format: us-central1-a
includedLocations List<String>
Optional. Names of the locations in scope. Format: us-central1-a

V2PolicyOrchestratorOrchestrationScopeSelectorResourceHierarchySelector
, V2PolicyOrchestratorOrchestrationScopeSelectorResourceHierarchySelectorArgs

IncludedFolders List<string>
Optional. Names of the folders in scope. Format: folders/{folder_id}
IncludedProjects List<string>
Optional. Names of the projects in scope. Format: projects/{project_number}
IncludedFolders []string
Optional. Names of the folders in scope. Format: folders/{folder_id}
IncludedProjects []string
Optional. Names of the projects in scope. Format: projects/{project_number}
includedFolders List<String>
Optional. Names of the folders in scope. Format: folders/{folder_id}
includedProjects List<String>
Optional. Names of the projects in scope. Format: projects/{project_number}
includedFolders string[]
Optional. Names of the folders in scope. Format: folders/{folder_id}
includedProjects string[]
Optional. Names of the projects in scope. Format: projects/{project_number}
included_folders Sequence[str]
Optional. Names of the folders in scope. Format: folders/{folder_id}
included_projects Sequence[str]
Optional. Names of the projects in scope. Format: projects/{project_number}
includedFolders List<String>
Optional. Names of the folders in scope. Format: folders/{folder_id}
includedProjects List<String>
Optional. Names of the projects in scope. Format: projects/{project_number}

V2PolicyOrchestratorOrchestrationState
, V2PolicyOrchestratorOrchestrationStateArgs

CurrentIterationStates List<V2PolicyOrchestratorOrchestrationStateCurrentIterationState>
(Output) Describes the state of a single iteration of the orchestrator. Structure is documented below.
PreviousIterationState V2PolicyOrchestratorOrchestrationStatePreviousIterationState
Describes the state of a single iteration of the orchestrator. Structure is documented below.
CurrentIterationStates []V2PolicyOrchestratorOrchestrationStateCurrentIterationState
(Output) Describes the state of a single iteration of the orchestrator. Structure is documented below.
PreviousIterationState V2PolicyOrchestratorOrchestrationStatePreviousIterationState
Describes the state of a single iteration of the orchestrator. Structure is documented below.
currentIterationStates List<V2PolicyOrchestratorOrchestrationStateCurrentIterationState>
(Output) Describes the state of a single iteration of the orchestrator. Structure is documented below.
previousIterationState V2PolicyOrchestratorOrchestrationStatePreviousIterationState
Describes the state of a single iteration of the orchestrator. Structure is documented below.
currentIterationStates V2PolicyOrchestratorOrchestrationStateCurrentIterationState[]
(Output) Describes the state of a single iteration of the orchestrator. Structure is documented below.
previousIterationState V2PolicyOrchestratorOrchestrationStatePreviousIterationState
Describes the state of a single iteration of the orchestrator. Structure is documented below.
current_iteration_states Sequence[V2PolicyOrchestratorOrchestrationStateCurrentIterationState]
(Output) Describes the state of a single iteration of the orchestrator. Structure is documented below.
previous_iteration_state V2PolicyOrchestratorOrchestrationStatePreviousIterationState
Describes the state of a single iteration of the orchestrator. Structure is documented below.
currentIterationStates List<Property Map>
(Output) Describes the state of a single iteration of the orchestrator. Structure is documented below.
previousIterationState Property Map
Describes the state of a single iteration of the orchestrator. Structure is documented below.

V2PolicyOrchestratorOrchestrationStateCurrentIterationState
, V2PolicyOrchestratorOrchestrationStateCurrentIterationStateArgs

Error V2PolicyOrchestratorOrchestrationStateCurrentIterationStateError
The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide. Structure is documented below.
FailedActions string
(Output) Output only. Number of orchestration actions which failed so far. For more details, query the Cloud Logs.
FinishTime string
(Output) Output only. Finish time of the wave iteration.
PerformedActions string
(Output) Output only. Overall number of actions done by the orchestrator so far.
Progress double
(Output) Output only. An estimated percentage of the progress. Number between 0 and 100.
RolloutResource string
(Output) Output only. Handle to the Progressive Rollouts API rollout resource, which contains detailed information about a particular orchestration iteration.
StartTime string
(Output) Output only. Start time of the wave iteration.
State string
(Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
Error V2PolicyOrchestratorOrchestrationStateCurrentIterationStateError
The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide. Structure is documented below.
FailedActions string
(Output) Output only. Number of orchestration actions which failed so far. For more details, query the Cloud Logs.
FinishTime string
(Output) Output only. Finish time of the wave iteration.
PerformedActions string
(Output) Output only. Overall number of actions done by the orchestrator so far.
Progress float64
(Output) Output only. An estimated percentage of the progress. Number between 0 and 100.
RolloutResource string
(Output) Output only. Handle to the Progressive Rollouts API rollout resource, which contains detailed information about a particular orchestration iteration.
StartTime string
(Output) Output only. Start time of the wave iteration.
State string
(Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
error V2PolicyOrchestratorOrchestrationStateCurrentIterationStateError
The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide. Structure is documented below.
failedActions String
(Output) Output only. Number of orchestration actions which failed so far. For more details, query the Cloud Logs.
finishTime String
(Output) Output only. Finish time of the wave iteration.
performedActions String
(Output) Output only. Overall number of actions done by the orchestrator so far.
progress Double
(Output) Output only. An estimated percentage of the progress. Number between 0 and 100.
rolloutResource String
(Output) Output only. Handle to the Progressive Rollouts API rollout resource, which contains detailed information about a particular orchestration iteration.
startTime String
(Output) Output only. Start time of the wave iteration.
state String
(Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
error V2PolicyOrchestratorOrchestrationStateCurrentIterationStateError
The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide. Structure is documented below.
failedActions string
(Output) Output only. Number of orchestration actions which failed so far. For more details, query the Cloud Logs.
finishTime string
(Output) Output only. Finish time of the wave iteration.
performedActions string
(Output) Output only. Overall number of actions done by the orchestrator so far.
progress number
(Output) Output only. An estimated percentage of the progress. Number between 0 and 100.
rolloutResource string
(Output) Output only. Handle to the Progressive Rollouts API rollout resource, which contains detailed information about a particular orchestration iteration.
startTime string
(Output) Output only. Start time of the wave iteration.
state string
(Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
error V2PolicyOrchestratorOrchestrationStateCurrentIterationStateError
The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide. Structure is documented below.
failed_actions str
(Output) Output only. Number of orchestration actions which failed so far. For more details, query the Cloud Logs.
finish_time str
(Output) Output only. Finish time of the wave iteration.
performed_actions str
(Output) Output only. Overall number of actions done by the orchestrator so far.
progress float
(Output) Output only. An estimated percentage of the progress. Number between 0 and 100.
rollout_resource str
(Output) Output only. Handle to the Progressive Rollouts API rollout resource, which contains detailed information about a particular orchestration iteration.
start_time str
(Output) Output only. Start time of the wave iteration.
state str
(Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
error Property Map
The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide. Structure is documented below.
failedActions String
(Output) Output only. Number of orchestration actions which failed so far. For more details, query the Cloud Logs.
finishTime String
(Output) Output only. Finish time of the wave iteration.
performedActions String
(Output) Output only. Overall number of actions done by the orchestrator so far.
progress Number
(Output) Output only. An estimated percentage of the progress. Number between 0 and 100.
rolloutResource String
(Output) Output only. Handle to the Progressive Rollouts API rollout resource, which contains detailed information about a particular orchestration iteration.
startTime String
(Output) Output only. Start time of the wave iteration.
state String
(Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN

V2PolicyOrchestratorOrchestrationStateCurrentIterationStateError
, V2PolicyOrchestratorOrchestrationStateCurrentIterationStateErrorArgs

Code int
The status code, which should be an enum value of google.rpc.Code.
Details List<V2PolicyOrchestratorOrchestrationStateCurrentIterationStateErrorDetail>
A list of messages that carry the error details. There is a common set of message types for APIs to use. Structure is documented below.
Message string
A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
Code int
The status code, which should be an enum value of google.rpc.Code.
Details []V2PolicyOrchestratorOrchestrationStateCurrentIterationStateErrorDetail
A list of messages that carry the error details. There is a common set of message types for APIs to use. Structure is documented below.
Message string
A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
code Integer
The status code, which should be an enum value of google.rpc.Code.
details List<V2PolicyOrchestratorOrchestrationStateCurrentIterationStateErrorDetail>
A list of messages that carry the error details. There is a common set of message types for APIs to use. Structure is documented below.
message String
A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
code number
The status code, which should be an enum value of google.rpc.Code.
details V2PolicyOrchestratorOrchestrationStateCurrentIterationStateErrorDetail[]
A list of messages that carry the error details. There is a common set of message types for APIs to use. Structure is documented below.
message string
A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
code int
The status code, which should be an enum value of google.rpc.Code.
details Sequence[V2PolicyOrchestratorOrchestrationStateCurrentIterationStateErrorDetail]
A list of messages that carry the error details. There is a common set of message types for APIs to use. Structure is documented below.
message str
A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
code Number
The status code, which should be an enum value of google.rpc.Code.
details List<Property Map>
A list of messages that carry the error details. There is a common set of message types for APIs to use. Structure is documented below.
message String
A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.

V2PolicyOrchestratorOrchestrationStateCurrentIterationStateErrorDetail
, V2PolicyOrchestratorOrchestrationStateCurrentIterationStateErrorDetailArgs

TypeUrl string
A URL/resource name that uniquely identifies the type of the serialized protocol buffer message
Value string
(Optional)
TypeUrl string
A URL/resource name that uniquely identifies the type of the serialized protocol buffer message
Value string
(Optional)
typeUrl String
A URL/resource name that uniquely identifies the type of the serialized protocol buffer message
value String
(Optional)
typeUrl string
A URL/resource name that uniquely identifies the type of the serialized protocol buffer message
value string
(Optional)
type_url str
A URL/resource name that uniquely identifies the type of the serialized protocol buffer message
value str
(Optional)
typeUrl String
A URL/resource name that uniquely identifies the type of the serialized protocol buffer message
value String
(Optional)

V2PolicyOrchestratorOrchestrationStatePreviousIterationState
, V2PolicyOrchestratorOrchestrationStatePreviousIterationStateArgs

Error V2PolicyOrchestratorOrchestrationStatePreviousIterationStateError
The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide. Structure is documented below.
FailedActions string
(Output) Output only. Number of orchestration actions which failed so far. For more details, query the Cloud Logs.
FinishTime string
(Output) Output only. Finish time of the wave iteration.
PerformedActions string
(Output) Output only. Overall number of actions done by the orchestrator so far.
Progress double
(Output) Output only. An estimated percentage of the progress. Number between 0 and 100.
RolloutResource string
(Output) Output only. Handle to the Progressive Rollouts API rollout resource, which contains detailed information about a particular orchestration iteration.
StartTime string
(Output) Output only. Start time of the wave iteration.
State string
(Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
Error V2PolicyOrchestratorOrchestrationStatePreviousIterationStateError
The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide. Structure is documented below.
FailedActions string
(Output) Output only. Number of orchestration actions which failed so far. For more details, query the Cloud Logs.
FinishTime string
(Output) Output only. Finish time of the wave iteration.
PerformedActions string
(Output) Output only. Overall number of actions done by the orchestrator so far.
Progress float64
(Output) Output only. An estimated percentage of the progress. Number between 0 and 100.
RolloutResource string
(Output) Output only. Handle to the Progressive Rollouts API rollout resource, which contains detailed information about a particular orchestration iteration.
StartTime string
(Output) Output only. Start time of the wave iteration.
State string
(Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
error V2PolicyOrchestratorOrchestrationStatePreviousIterationStateError
The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide. Structure is documented below.
failedActions String
(Output) Output only. Number of orchestration actions which failed so far. For more details, query the Cloud Logs.
finishTime String
(Output) Output only. Finish time of the wave iteration.
performedActions String
(Output) Output only. Overall number of actions done by the orchestrator so far.
progress Double
(Output) Output only. An estimated percentage of the progress. Number between 0 and 100.
rolloutResource String
(Output) Output only. Handle to the Progressive Rollouts API rollout resource, which contains detailed information about a particular orchestration iteration.
startTime String
(Output) Output only. Start time of the wave iteration.
state String
(Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
error V2PolicyOrchestratorOrchestrationStatePreviousIterationStateError
The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide. Structure is documented below.
failedActions string
(Output) Output only. Number of orchestration actions which failed so far. For more details, query the Cloud Logs.
finishTime string
(Output) Output only. Finish time of the wave iteration.
performedActions string
(Output) Output only. Overall number of actions done by the orchestrator so far.
progress number
(Output) Output only. An estimated percentage of the progress. Number between 0 and 100.
rolloutResource string
(Output) Output only. Handle to the Progressive Rollouts API rollout resource, which contains detailed information about a particular orchestration iteration.
startTime string
(Output) Output only. Start time of the wave iteration.
state string
(Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
error V2PolicyOrchestratorOrchestrationStatePreviousIterationStateError
The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide. Structure is documented below.
failed_actions str
(Output) Output only. Number of orchestration actions which failed so far. For more details, query the Cloud Logs.
finish_time str
(Output) Output only. Finish time of the wave iteration.
performed_actions str
(Output) Output only. Overall number of actions done by the orchestrator so far.
progress float
(Output) Output only. An estimated percentage of the progress. Number between 0 and 100.
rollout_resource str
(Output) Output only. Handle to the Progressive Rollouts API rollout resource, which contains detailed information about a particular orchestration iteration.
start_time str
(Output) Output only. Start time of the wave iteration.
state str
(Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
error Property Map
The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide. Structure is documented below.
failedActions String
(Output) Output only. Number of orchestration actions which failed so far. For more details, query the Cloud Logs.
finishTime String
(Output) Output only. Finish time of the wave iteration.
performedActions String
(Output) Output only. Overall number of actions done by the orchestrator so far.
progress Number
(Output) Output only. An estimated percentage of the progress. Number between 0 and 100.
rolloutResource String
(Output) Output only. Handle to the Progressive Rollouts API rollout resource, which contains detailed information about a particular orchestration iteration.
startTime String
(Output) Output only. Start time of the wave iteration.
state String
(Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN

V2PolicyOrchestratorOrchestrationStatePreviousIterationStateError
, V2PolicyOrchestratorOrchestrationStatePreviousIterationStateErrorArgs

Code int
The status code, which should be an enum value of google.rpc.Code.
Details List<V2PolicyOrchestratorOrchestrationStatePreviousIterationStateErrorDetail>
A list of messages that carry the error details. There is a common set of message types for APIs to use. Structure is documented below.
Message string
A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
Code int
The status code, which should be an enum value of google.rpc.Code.
Details []V2PolicyOrchestratorOrchestrationStatePreviousIterationStateErrorDetail
A list of messages that carry the error details. There is a common set of message types for APIs to use. Structure is documented below.
Message string
A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
code Integer
The status code, which should be an enum value of google.rpc.Code.
details List<V2PolicyOrchestratorOrchestrationStatePreviousIterationStateErrorDetail>
A list of messages that carry the error details. There is a common set of message types for APIs to use. Structure is documented below.
message String
A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
code number
The status code, which should be an enum value of google.rpc.Code.
details V2PolicyOrchestratorOrchestrationStatePreviousIterationStateErrorDetail[]
A list of messages that carry the error details. There is a common set of message types for APIs to use. Structure is documented below.
message string
A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
code int
The status code, which should be an enum value of google.rpc.Code.
details Sequence[V2PolicyOrchestratorOrchestrationStatePreviousIterationStateErrorDetail]
A list of messages that carry the error details. There is a common set of message types for APIs to use. Structure is documented below.
message str
A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
code Number
The status code, which should be an enum value of google.rpc.Code.
details List<Property Map>
A list of messages that carry the error details. There is a common set of message types for APIs to use. Structure is documented below.
message String
A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.

V2PolicyOrchestratorOrchestrationStatePreviousIterationStateErrorDetail
, V2PolicyOrchestratorOrchestrationStatePreviousIterationStateErrorDetailArgs

TypeUrl string
A URL/resource name that uniquely identifies the type of the serialized protocol buffer message
Value string
(Optional)
TypeUrl string
A URL/resource name that uniquely identifies the type of the serialized protocol buffer message
Value string
(Optional)
typeUrl String
A URL/resource name that uniquely identifies the type of the serialized protocol buffer message
value String
(Optional)
typeUrl string
A URL/resource name that uniquely identifies the type of the serialized protocol buffer message
value string
(Optional)
type_url str
A URL/resource name that uniquely identifies the type of the serialized protocol buffer message
value str
(Optional)
typeUrl String
A URL/resource name that uniquely identifies the type of the serialized protocol buffer message
value String
(Optional)

Import

PolicyOrchestrator can be imported using any of these accepted formats:

  • projects/{{project}}/locations/global/policyOrchestrators/{{policy_orchestrator_id}}

  • {{project}}/{{policy_orchestrator_id}}

  • {{policy_orchestrator_id}}

When using the pulumi import command, PolicyOrchestrator can be imported using one of the formats above. For example:

$ pulumi import gcp:osconfig/v2PolicyOrchestrator:V2PolicyOrchestrator default projects/{{project}}/locations/global/policyOrchestrators/{{policy_orchestrator_id}}
Copy
$ pulumi import gcp:osconfig/v2PolicyOrchestrator:V2PolicyOrchestrator default {{project}}/{{policy_orchestrator_id}}
Copy
$ pulumi import gcp:osconfig/v2PolicyOrchestrator:V2PolicyOrchestrator default {{policy_orchestrator_id}}
Copy

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
Google Cloud (GCP) Classic pulumi/pulumi-gcp
License
Apache-2.0
Notes
This Pulumi package is based on the google-beta Terraform Provider.