1. Packages
  2. Google Cloud (GCP) Classic
  3. API Docs
  4. osconfig
  5. V2PolicyOrchestrator
Google Cloud v8.29.0 published on Thursday, May 1, 2025 by Pulumi

gcp.osconfig.V2PolicyOrchestrator

Explore with Pulumi AI

gcp logo
Google Cloud v8.29.0 published on Thursday, May 1, 2025 by Pulumi

    PolicyOrchestrator helps managing project+zone level policy resources (e.g. OS Policy Assignments), by providing tools to create, update and delete them across projects and locations, at scale.

    Example Usage

    Osconfigv2 Policy Orchestrator Basic

    import * as pulumi from "@pulumi/pulumi";
    import * as gcp from "@pulumi/gcp";
    
    const policyOrchestrator = new gcp.osconfig.V2PolicyOrchestrator("policy_orchestrator", {
        policyOrchestratorId: "po",
        state: "ACTIVE",
        action: "UPSERT",
        orchestratedResource: {
            id: "test-orchestrated-resource",
            osPolicyAssignmentV1Payload: {
                osPolicies: [{
                    id: "test-os-policy",
                    mode: "VALIDATION",
                    resourceGroups: [{
                        resources: [{
                            id: "resource-tf",
                            file: {
                                content: "file-content-tf",
                                path: "file-path-tf-1",
                                state: "PRESENT",
                            },
                        }],
                    }],
                }],
                instanceFilter: {
                    inventories: [{
                        osShortName: "windows-10",
                    }],
                },
                rollout: {
                    disruptionBudget: {
                        percent: 100,
                    },
                    minWaitDuration: "60s",
                },
            },
        },
        labels: {
            state: "active",
        },
    });
    
    import pulumi
    import pulumi_gcp as gcp
    
    policy_orchestrator = gcp.osconfig.V2PolicyOrchestrator("policy_orchestrator",
        policy_orchestrator_id="po",
        state="ACTIVE",
        action="UPSERT",
        orchestrated_resource={
            "id": "test-orchestrated-resource",
            "os_policy_assignment_v1_payload": {
                "os_policies": [{
                    "id": "test-os-policy",
                    "mode": "VALIDATION",
                    "resource_groups": [{
                        "resources": [{
                            "id": "resource-tf",
                            "file": {
                                "content": "file-content-tf",
                                "path": "file-path-tf-1",
                                "state": "PRESENT",
                            },
                        }],
                    }],
                }],
                "instance_filter": {
                    "inventories": [{
                        "os_short_name": "windows-10",
                    }],
                },
                "rollout": {
                    "disruption_budget": {
                        "percent": 100,
                    },
                    "min_wait_duration": "60s",
                },
            },
        },
        labels={
            "state": "active",
        })
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/osconfig"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		_, err := osconfig.NewV2PolicyOrchestrator(ctx, "policy_orchestrator", &osconfig.V2PolicyOrchestratorArgs{
    			PolicyOrchestratorId: pulumi.String("po"),
    			State:                pulumi.String("ACTIVE"),
    			Action:               pulumi.String("UPSERT"),
    			OrchestratedResource: &osconfig.V2PolicyOrchestratorOrchestratedResourceArgs{
    				Id: pulumi.String("test-orchestrated-resource"),
    				OsPolicyAssignmentV1Payload: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadArgs{
    					OsPolicies: osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyArray{
    						&osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyArgs{
    							Id:   pulumi.String("test-os-policy"),
    							Mode: pulumi.String("VALIDATION"),
    							ResourceGroups: osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupArray{
    								&osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupArgs{
    									Resources: osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceArray{
    										&osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceArgs{
    											Id: pulumi.String("resource-tf"),
    											File: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileArgs{
    												Content: pulumi.String("file-content-tf"),
    												Path:    pulumi.String("file-path-tf-1"),
    												State:   pulumi.String("PRESENT"),
    											},
    										},
    									},
    								},
    							},
    						},
    					},
    					InstanceFilter: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterArgs{
    						Inventories: osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventoryArray{
    							&osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventoryArgs{
    								OsShortName: pulumi.String("windows-10"),
    							},
    						},
    					},
    					Rollout: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutArgs{
    						DisruptionBudget: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudgetArgs{
    							Percent: pulumi.Int(100),
    						},
    						MinWaitDuration: pulumi.String("60s"),
    					},
    				},
    			},
    			Labels: pulumi.StringMap{
    				"state": pulumi.String("active"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Gcp = Pulumi.Gcp;
    
    return await Deployment.RunAsync(() => 
    {
        var policyOrchestrator = new Gcp.OsConfig.V2PolicyOrchestrator("policy_orchestrator", new()
        {
            PolicyOrchestratorId = "po",
            State = "ACTIVE",
            Action = "UPSERT",
            OrchestratedResource = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceArgs
            {
                Id = "test-orchestrated-resource",
                OsPolicyAssignmentV1Payload = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadArgs
                {
                    OsPolicies = new[]
                    {
                        new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyArgs
                        {
                            Id = "test-os-policy",
                            Mode = "VALIDATION",
                            ResourceGroups = new[]
                            {
                                new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupArgs
                                {
                                    Resources = new[]
                                    {
                                        new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceArgs
                                        {
                                            Id = "resource-tf",
                                            File = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileArgs
                                            {
                                                Content = "file-content-tf",
                                                Path = "file-path-tf-1",
                                                State = "PRESENT",
                                            },
                                        },
                                    },
                                },
                            },
                        },
                    },
                    InstanceFilter = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterArgs
                    {
                        Inventories = new[]
                        {
                            new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventoryArgs
                            {
                                OsShortName = "windows-10",
                            },
                        },
                    },
                    Rollout = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutArgs
                    {
                        DisruptionBudget = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudgetArgs
                        {
                            Percent = 100,
                        },
                        MinWaitDuration = "60s",
                    },
                },
            },
            Labels = 
            {
                { "state", "active" },
            },
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.gcp.osconfig.V2PolicyOrchestrator;
    import com.pulumi.gcp.osconfig.V2PolicyOrchestratorArgs;
    import com.pulumi.gcp.osconfig.inputs.V2PolicyOrchestratorOrchestratedResourceArgs;
    import com.pulumi.gcp.osconfig.inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadArgs;
    import com.pulumi.gcp.osconfig.inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterArgs;
    import com.pulumi.gcp.osconfig.inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutArgs;
    import com.pulumi.gcp.osconfig.inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudgetArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var policyOrchestrator = new V2PolicyOrchestrator("policyOrchestrator", V2PolicyOrchestratorArgs.builder()
                .policyOrchestratorId("po")
                .state("ACTIVE")
                .action("UPSERT")
                .orchestratedResource(V2PolicyOrchestratorOrchestratedResourceArgs.builder()
                    .id("test-orchestrated-resource")
                    .osPolicyAssignmentV1Payload(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadArgs.builder()
                        .osPolicies(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyArgs.builder()
                            .id("test-os-policy")
                            .mode("VALIDATION")
                            .resourceGroups(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupArgs.builder()
                                .resources(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceArgs.builder()
                                    .id("resource-tf")
                                    .file(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileArgs.builder()
                                        .content("file-content-tf")
                                        .path("file-path-tf-1")
                                        .state("PRESENT")
                                        .build())
                                    .build())
                                .build())
                            .build())
                        .instanceFilter(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterArgs.builder()
                            .inventories(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventoryArgs.builder()
                                .osShortName("windows-10")
                                .build())
                            .build())
                        .rollout(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutArgs.builder()
                            .disruptionBudget(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudgetArgs.builder()
                                .percent(100)
                                .build())
                            .minWaitDuration("60s")
                            .build())
                        .build())
                    .build())
                .labels(Map.of("state", "active"))
                .build());
    
        }
    }
    
    resources:
      policyOrchestrator:
        type: gcp:osconfig:V2PolicyOrchestrator
        name: policy_orchestrator
        properties:
          policyOrchestratorId: po
          state: ACTIVE
          action: UPSERT
          orchestratedResource:
            id: test-orchestrated-resource
            osPolicyAssignmentV1Payload:
              osPolicies:
                - id: test-os-policy
                  mode: VALIDATION
                  resourceGroups:
                    - resources:
                        - id: resource-tf
                          file:
                            content: file-content-tf
                            path: file-path-tf-1
                            state: PRESENT
              instanceFilter:
                inventories:
                  - osShortName: windows-10
              rollout:
                disruptionBudget:
                  percent: 100
                minWaitDuration: 60s
          labels:
            state: active
    

    Create V2PolicyOrchestrator Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new V2PolicyOrchestrator(name: string, args: V2PolicyOrchestratorArgs, opts?: CustomResourceOptions);
    @overload
    def V2PolicyOrchestrator(resource_name: str,
                             args: V2PolicyOrchestratorArgs,
                             opts: Optional[ResourceOptions] = None)
    
    @overload
    def V2PolicyOrchestrator(resource_name: str,
                             opts: Optional[ResourceOptions] = None,
                             action: Optional[str] = None,
                             orchestrated_resource: Optional[V2PolicyOrchestratorOrchestratedResourceArgs] = None,
                             policy_orchestrator_id: Optional[str] = None,
                             description: Optional[str] = None,
                             labels: Optional[Mapping[str, str]] = None,
                             orchestration_scope: Optional[V2PolicyOrchestratorOrchestrationScopeArgs] = None,
                             project: Optional[str] = None,
                             state: Optional[str] = None)
    func NewV2PolicyOrchestrator(ctx *Context, name string, args V2PolicyOrchestratorArgs, opts ...ResourceOption) (*V2PolicyOrchestrator, error)
    public V2PolicyOrchestrator(string name, V2PolicyOrchestratorArgs args, CustomResourceOptions? opts = null)
    public V2PolicyOrchestrator(String name, V2PolicyOrchestratorArgs args)
    public V2PolicyOrchestrator(String name, V2PolicyOrchestratorArgs args, CustomResourceOptions options)
    
    type: gcp:osconfig:V2PolicyOrchestrator
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    

    Parameters

    name string
    The unique name of the resource.
    args V2PolicyOrchestratorArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args V2PolicyOrchestratorArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args V2PolicyOrchestratorArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args V2PolicyOrchestratorArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args V2PolicyOrchestratorArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var v2policyOrchestratorResource = new Gcp.OsConfig.V2PolicyOrchestrator("v2policyOrchestratorResource", new()
    {
        Action = "string",
        OrchestratedResource = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceArgs
        {
            Id = "string",
            OsPolicyAssignmentV1Payload = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadArgs
            {
                InstanceFilter = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterArgs
                {
                    All = false,
                    ExclusionLabels = new[]
                    {
                        new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterExclusionLabelArgs
                        {
                            Labels = 
                            {
                                { "string", "string" },
                            },
                        },
                    },
                    InclusionLabels = new[]
                    {
                        new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInclusionLabelArgs
                        {
                            Labels = 
                            {
                                { "string", "string" },
                            },
                        },
                    },
                    Inventories = new[]
                    {
                        new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventoryArgs
                        {
                            OsShortName = "string",
                            OsVersion = "string",
                        },
                    },
                },
                OsPolicies = new[]
                {
                    new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyArgs
                    {
                        Id = "string",
                        Mode = "string",
                        ResourceGroups = new[]
                        {
                            new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupArgs
                            {
                                Resources = new[]
                                {
                                    new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceArgs
                                    {
                                        Id = "string",
                                        Exec = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecArgs
                                        {
                                            Validate = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateArgs
                                            {
                                                Interpreter = "string",
                                                Args = new[]
                                                {
                                                    "string",
                                                },
                                                File = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileArgs
                                                {
                                                    AllowInsecure = false,
                                                    Gcs = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileGcsArgs
                                                    {
                                                        Bucket = "string",
                                                        Object = "string",
                                                        Generation = "string",
                                                    },
                                                    LocalPath = "string",
                                                    Remote = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileRemoteArgs
                                                    {
                                                        Uri = "string",
                                                        Sha256Checksum = "string",
                                                    },
                                                },
                                                OutputFilePath = "string",
                                                Script = "string",
                                            },
                                            Enforce = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceArgs
                                            {
                                                Interpreter = "string",
                                                Args = new[]
                                                {
                                                    "string",
                                                },
                                                File = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileArgs
                                                {
                                                    AllowInsecure = false,
                                                    Gcs = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileGcsArgs
                                                    {
                                                        Bucket = "string",
                                                        Object = "string",
                                                        Generation = "string",
                                                    },
                                                    LocalPath = "string",
                                                    Remote = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileRemoteArgs
                                                    {
                                                        Uri = "string",
                                                        Sha256Checksum = "string",
                                                    },
                                                },
                                                OutputFilePath = "string",
                                                Script = "string",
                                            },
                                        },
                                        File = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileArgs
                                        {
                                            Path = "string",
                                            State = "string",
                                            Content = "string",
                                            File = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileArgs
                                            {
                                                AllowInsecure = false,
                                                Gcs = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileGcsArgs
                                                {
                                                    Bucket = "string",
                                                    Object = "string",
                                                    Generation = "string",
                                                },
                                                LocalPath = "string",
                                                Remote = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileRemoteArgs
                                                {
                                                    Uri = "string",
                                                    Sha256Checksum = "string",
                                                },
                                            },
                                            Permissions = "string",
                                        },
                                        Pkg = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgArgs
                                        {
                                            DesiredState = "string",
                                            Apt = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgAptArgs
                                            {
                                                Name = "string",
                                            },
                                            Deb = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebArgs
                                            {
                                                Source = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceArgs
                                                {
                                                    AllowInsecure = false,
                                                    Gcs = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceGcsArgs
                                                    {
                                                        Bucket = "string",
                                                        Object = "string",
                                                        Generation = "string",
                                                    },
                                                    LocalPath = "string",
                                                    Remote = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceRemoteArgs
                                                    {
                                                        Uri = "string",
                                                        Sha256Checksum = "string",
                                                    },
                                                },
                                                PullDeps = false,
                                            },
                                            Googet = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgGoogetArgs
                                            {
                                                Name = "string",
                                            },
                                            Msi = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiArgs
                                            {
                                                Source = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceArgs
                                                {
                                                    AllowInsecure = false,
                                                    Gcs = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceGcsArgs
                                                    {
                                                        Bucket = "string",
                                                        Object = "string",
                                                        Generation = "string",
                                                    },
                                                    LocalPath = "string",
                                                    Remote = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceRemoteArgs
                                                    {
                                                        Uri = "string",
                                                        Sha256Checksum = "string",
                                                    },
                                                },
                                                Properties = new[]
                                                {
                                                    "string",
                                                },
                                            },
                                            Rpm = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmArgs
                                            {
                                                Source = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceArgs
                                                {
                                                    AllowInsecure = false,
                                                    Gcs = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceGcsArgs
                                                    {
                                                        Bucket = "string",
                                                        Object = "string",
                                                        Generation = "string",
                                                    },
                                                    LocalPath = "string",
                                                    Remote = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceRemoteArgs
                                                    {
                                                        Uri = "string",
                                                        Sha256Checksum = "string",
                                                    },
                                                },
                                                PullDeps = false,
                                            },
                                            Yum = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgYumArgs
                                            {
                                                Name = "string",
                                            },
                                            Zypper = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgZypperArgs
                                            {
                                                Name = "string",
                                            },
                                        },
                                        Repository = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryArgs
                                        {
                                            Apt = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryAptArgs
                                            {
                                                ArchiveType = "string",
                                                Components = new[]
                                                {
                                                    "string",
                                                },
                                                Distribution = "string",
                                                Uri = "string",
                                                GpgKey = "string",
                                            },
                                            Goo = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryGooArgs
                                            {
                                                Name = "string",
                                                Url = "string",
                                            },
                                            Yum = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryYumArgs
                                            {
                                                BaseUrl = "string",
                                                Id = "string",
                                                DisplayName = "string",
                                                GpgKeys = new[]
                                                {
                                                    "string",
                                                },
                                            },
                                            Zypper = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryZypperArgs
                                            {
                                                BaseUrl = "string",
                                                Id = "string",
                                                DisplayName = "string",
                                                GpgKeys = new[]
                                                {
                                                    "string",
                                                },
                                            },
                                        },
                                    },
                                },
                                InventoryFilters = new[]
                                {
                                    new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupInventoryFilterArgs
                                    {
                                        OsShortName = "string",
                                        OsVersion = "string",
                                    },
                                },
                            },
                        },
                        AllowNoResourceGroupMatch = false,
                        Description = "string",
                    },
                },
                Rollout = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutArgs
                {
                    DisruptionBudget = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudgetArgs
                    {
                        Fixed = 0,
                        Percent = 0,
                    },
                    MinWaitDuration = "string",
                },
                Baseline = false,
                Deleted = false,
                Description = "string",
                Name = "string",
                Reconciling = false,
                RevisionCreateTime = "string",
                RevisionId = "string",
                RolloutState = "string",
                Uid = "string",
            },
        },
        PolicyOrchestratorId = "string",
        Description = "string",
        Labels = 
        {
            { "string", "string" },
        },
        OrchestrationScope = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestrationScopeArgs
        {
            Selectors = new[]
            {
                new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestrationScopeSelectorArgs
                {
                    LocationSelector = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestrationScopeSelectorLocationSelectorArgs
                    {
                        IncludedLocations = new[]
                        {
                            "string",
                        },
                    },
                    ResourceHierarchySelector = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorOrchestrationScopeSelectorResourceHierarchySelectorArgs
                    {
                        IncludedFolders = new[]
                        {
                            "string",
                        },
                        IncludedProjects = new[]
                        {
                            "string",
                        },
                    },
                },
            },
        },
        Project = "string",
        State = "string",
    });
    
    example, err := osconfig.NewV2PolicyOrchestrator(ctx, "v2policyOrchestratorResource", &osconfig.V2PolicyOrchestratorArgs{
    	Action: pulumi.String("string"),
    	OrchestratedResource: &osconfig.V2PolicyOrchestratorOrchestratedResourceArgs{
    		Id: pulumi.String("string"),
    		OsPolicyAssignmentV1Payload: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadArgs{
    			InstanceFilter: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterArgs{
    				All: pulumi.Bool(false),
    				ExclusionLabels: osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterExclusionLabelArray{
    					&osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterExclusionLabelArgs{
    						Labels: pulumi.StringMap{
    							"string": pulumi.String("string"),
    						},
    					},
    				},
    				InclusionLabels: osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInclusionLabelArray{
    					&osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInclusionLabelArgs{
    						Labels: pulumi.StringMap{
    							"string": pulumi.String("string"),
    						},
    					},
    				},
    				Inventories: osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventoryArray{
    					&osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventoryArgs{
    						OsShortName: pulumi.String("string"),
    						OsVersion:   pulumi.String("string"),
    					},
    				},
    			},
    			OsPolicies: osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyArray{
    				&osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyArgs{
    					Id:   pulumi.String("string"),
    					Mode: pulumi.String("string"),
    					ResourceGroups: osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupArray{
    						&osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupArgs{
    							Resources: osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceArray{
    								&osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceArgs{
    									Id: pulumi.String("string"),
    									Exec: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecArgs{
    										Validate: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateArgs{
    											Interpreter: pulumi.String("string"),
    											Args: pulumi.StringArray{
    												pulumi.String("string"),
    											},
    											File: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileArgs{
    												AllowInsecure: pulumi.Bool(false),
    												Gcs: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileGcsArgs{
    													Bucket:     pulumi.String("string"),
    													Object:     pulumi.String("string"),
    													Generation: pulumi.String("string"),
    												},
    												LocalPath: pulumi.String("string"),
    												Remote: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileRemoteArgs{
    													Uri:            pulumi.String("string"),
    													Sha256Checksum: pulumi.String("string"),
    												},
    											},
    											OutputFilePath: pulumi.String("string"),
    											Script:         pulumi.String("string"),
    										},
    										Enforce: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceArgs{
    											Interpreter: pulumi.String("string"),
    											Args: pulumi.StringArray{
    												pulumi.String("string"),
    											},
    											File: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileArgs{
    												AllowInsecure: pulumi.Bool(false),
    												Gcs: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileGcsArgs{
    													Bucket:     pulumi.String("string"),
    													Object:     pulumi.String("string"),
    													Generation: pulumi.String("string"),
    												},
    												LocalPath: pulumi.String("string"),
    												Remote: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileRemoteArgs{
    													Uri:            pulumi.String("string"),
    													Sha256Checksum: pulumi.String("string"),
    												},
    											},
    											OutputFilePath: pulumi.String("string"),
    											Script:         pulumi.String("string"),
    										},
    									},
    									File: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileArgs{
    										Path:    pulumi.String("string"),
    										State:   pulumi.String("string"),
    										Content: pulumi.String("string"),
    										File: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileArgs{
    											AllowInsecure: pulumi.Bool(false),
    											Gcs: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileGcsArgs{
    												Bucket:     pulumi.String("string"),
    												Object:     pulumi.String("string"),
    												Generation: pulumi.String("string"),
    											},
    											LocalPath: pulumi.String("string"),
    											Remote: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileRemoteArgs{
    												Uri:            pulumi.String("string"),
    												Sha256Checksum: pulumi.String("string"),
    											},
    										},
    										Permissions: pulumi.String("string"),
    									},
    									Pkg: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgArgs{
    										DesiredState: pulumi.String("string"),
    										Apt: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgAptArgs{
    											Name: pulumi.String("string"),
    										},
    										Deb: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebArgs{
    											Source: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceArgs{
    												AllowInsecure: pulumi.Bool(false),
    												Gcs: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceGcsArgs{
    													Bucket:     pulumi.String("string"),
    													Object:     pulumi.String("string"),
    													Generation: pulumi.String("string"),
    												},
    												LocalPath: pulumi.String("string"),
    												Remote: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceRemoteArgs{
    													Uri:            pulumi.String("string"),
    													Sha256Checksum: pulumi.String("string"),
    												},
    											},
    											PullDeps: pulumi.Bool(false),
    										},
    										Googet: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgGoogetArgs{
    											Name: pulumi.String("string"),
    										},
    										Msi: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiArgs{
    											Source: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceArgs{
    												AllowInsecure: pulumi.Bool(false),
    												Gcs: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceGcsArgs{
    													Bucket:     pulumi.String("string"),
    													Object:     pulumi.String("string"),
    													Generation: pulumi.String("string"),
    												},
    												LocalPath: pulumi.String("string"),
    												Remote: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceRemoteArgs{
    													Uri:            pulumi.String("string"),
    													Sha256Checksum: pulumi.String("string"),
    												},
    											},
    											Properties: pulumi.StringArray{
    												pulumi.String("string"),
    											},
    										},
    										Rpm: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmArgs{
    											Source: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceArgs{
    												AllowInsecure: pulumi.Bool(false),
    												Gcs: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceGcsArgs{
    													Bucket:     pulumi.String("string"),
    													Object:     pulumi.String("string"),
    													Generation: pulumi.String("string"),
    												},
    												LocalPath: pulumi.String("string"),
    												Remote: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceRemoteArgs{
    													Uri:            pulumi.String("string"),
    													Sha256Checksum: pulumi.String("string"),
    												},
    											},
    											PullDeps: pulumi.Bool(false),
    										},
    										Yum: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgYumArgs{
    											Name: pulumi.String("string"),
    										},
    										Zypper: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgZypperArgs{
    											Name: pulumi.String("string"),
    										},
    									},
    									Repository: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryArgs{
    										Apt: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryAptArgs{
    											ArchiveType: pulumi.String("string"),
    											Components: pulumi.StringArray{
    												pulumi.String("string"),
    											},
    											Distribution: pulumi.String("string"),
    											Uri:          pulumi.String("string"),
    											GpgKey:       pulumi.String("string"),
    										},
    										Goo: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryGooArgs{
    											Name: pulumi.String("string"),
    											Url:  pulumi.String("string"),
    										},
    										Yum: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryYumArgs{
    											BaseUrl:     pulumi.String("string"),
    											Id:          pulumi.String("string"),
    											DisplayName: pulumi.String("string"),
    											GpgKeys: pulumi.StringArray{
    												pulumi.String("string"),
    											},
    										},
    										Zypper: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryZypperArgs{
    											BaseUrl:     pulumi.String("string"),
    											Id:          pulumi.String("string"),
    											DisplayName: pulumi.String("string"),
    											GpgKeys: pulumi.StringArray{
    												pulumi.String("string"),
    											},
    										},
    									},
    								},
    							},
    							InventoryFilters: osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupInventoryFilterArray{
    								&osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupInventoryFilterArgs{
    									OsShortName: pulumi.String("string"),
    									OsVersion:   pulumi.String("string"),
    								},
    							},
    						},
    					},
    					AllowNoResourceGroupMatch: pulumi.Bool(false),
    					Description:               pulumi.String("string"),
    				},
    			},
    			Rollout: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutArgs{
    				DisruptionBudget: &osconfig.V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudgetArgs{
    					Fixed:   pulumi.Int(0),
    					Percent: pulumi.Int(0),
    				},
    				MinWaitDuration: pulumi.String("string"),
    			},
    			Baseline:           pulumi.Bool(false),
    			Deleted:            pulumi.Bool(false),
    			Description:        pulumi.String("string"),
    			Name:               pulumi.String("string"),
    			Reconciling:        pulumi.Bool(false),
    			RevisionCreateTime: pulumi.String("string"),
    			RevisionId:         pulumi.String("string"),
    			RolloutState:       pulumi.String("string"),
    			Uid:                pulumi.String("string"),
    		},
    	},
    	PolicyOrchestratorId: pulumi.String("string"),
    	Description:          pulumi.String("string"),
    	Labels: pulumi.StringMap{
    		"string": pulumi.String("string"),
    	},
    	OrchestrationScope: &osconfig.V2PolicyOrchestratorOrchestrationScopeArgs{
    		Selectors: osconfig.V2PolicyOrchestratorOrchestrationScopeSelectorArray{
    			&osconfig.V2PolicyOrchestratorOrchestrationScopeSelectorArgs{
    				LocationSelector: &osconfig.V2PolicyOrchestratorOrchestrationScopeSelectorLocationSelectorArgs{
    					IncludedLocations: pulumi.StringArray{
    						pulumi.String("string"),
    					},
    				},
    				ResourceHierarchySelector: &osconfig.V2PolicyOrchestratorOrchestrationScopeSelectorResourceHierarchySelectorArgs{
    					IncludedFolders: pulumi.StringArray{
    						pulumi.String("string"),
    					},
    					IncludedProjects: pulumi.StringArray{
    						pulumi.String("string"),
    					},
    				},
    			},
    		},
    	},
    	Project: pulumi.String("string"),
    	State:   pulumi.String("string"),
    })
    
    var v2policyOrchestratorResource = new V2PolicyOrchestrator("v2policyOrchestratorResource", V2PolicyOrchestratorArgs.builder()
        .action("string")
        .orchestratedResource(V2PolicyOrchestratorOrchestratedResourceArgs.builder()
            .id("string")
            .osPolicyAssignmentV1Payload(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadArgs.builder()
                .instanceFilter(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterArgs.builder()
                    .all(false)
                    .exclusionLabels(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterExclusionLabelArgs.builder()
                        .labels(Map.of("string", "string"))
                        .build())
                    .inclusionLabels(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInclusionLabelArgs.builder()
                        .labels(Map.of("string", "string"))
                        .build())
                    .inventories(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventoryArgs.builder()
                        .osShortName("string")
                        .osVersion("string")
                        .build())
                    .build())
                .osPolicies(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyArgs.builder()
                    .id("string")
                    .mode("string")
                    .resourceGroups(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupArgs.builder()
                        .resources(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceArgs.builder()
                            .id("string")
                            .exec(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecArgs.builder()
                                .validate(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateArgs.builder()
                                    .interpreter("string")
                                    .args("string")
                                    .file(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileArgs.builder()
                                        .allowInsecure(false)
                                        .gcs(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileGcsArgs.builder()
                                            .bucket("string")
                                            .object("string")
                                            .generation("string")
                                            .build())
                                        .localPath("string")
                                        .remote(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileRemoteArgs.builder()
                                            .uri("string")
                                            .sha256Checksum("string")
                                            .build())
                                        .build())
                                    .outputFilePath("string")
                                    .script("string")
                                    .build())
                                .enforce(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceArgs.builder()
                                    .interpreter("string")
                                    .args("string")
                                    .file(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileArgs.builder()
                                        .allowInsecure(false)
                                        .gcs(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileGcsArgs.builder()
                                            .bucket("string")
                                            .object("string")
                                            .generation("string")
                                            .build())
                                        .localPath("string")
                                        .remote(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileRemoteArgs.builder()
                                            .uri("string")
                                            .sha256Checksum("string")
                                            .build())
                                        .build())
                                    .outputFilePath("string")
                                    .script("string")
                                    .build())
                                .build())
                            .file(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileArgs.builder()
                                .path("string")
                                .state("string")
                                .content("string")
                                .file(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileArgs.builder()
                                    .allowInsecure(false)
                                    .gcs(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileGcsArgs.builder()
                                        .bucket("string")
                                        .object("string")
                                        .generation("string")
                                        .build())
                                    .localPath("string")
                                    .remote(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileRemoteArgs.builder()
                                        .uri("string")
                                        .sha256Checksum("string")
                                        .build())
                                    .build())
                                .permissions("string")
                                .build())
                            .pkg(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgArgs.builder()
                                .desiredState("string")
                                .apt(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgAptArgs.builder()
                                    .name("string")
                                    .build())
                                .deb(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebArgs.builder()
                                    .source(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceArgs.builder()
                                        .allowInsecure(false)
                                        .gcs(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceGcsArgs.builder()
                                            .bucket("string")
                                            .object("string")
                                            .generation("string")
                                            .build())
                                        .localPath("string")
                                        .remote(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceRemoteArgs.builder()
                                            .uri("string")
                                            .sha256Checksum("string")
                                            .build())
                                        .build())
                                    .pullDeps(false)
                                    .build())
                                .googet(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgGoogetArgs.builder()
                                    .name("string")
                                    .build())
                                .msi(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiArgs.builder()
                                    .source(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceArgs.builder()
                                        .allowInsecure(false)
                                        .gcs(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceGcsArgs.builder()
                                            .bucket("string")
                                            .object("string")
                                            .generation("string")
                                            .build())
                                        .localPath("string")
                                        .remote(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceRemoteArgs.builder()
                                            .uri("string")
                                            .sha256Checksum("string")
                                            .build())
                                        .build())
                                    .properties("string")
                                    .build())
                                .rpm(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmArgs.builder()
                                    .source(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceArgs.builder()
                                        .allowInsecure(false)
                                        .gcs(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceGcsArgs.builder()
                                            .bucket("string")
                                            .object("string")
                                            .generation("string")
                                            .build())
                                        .localPath("string")
                                        .remote(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceRemoteArgs.builder()
                                            .uri("string")
                                            .sha256Checksum("string")
                                            .build())
                                        .build())
                                    .pullDeps(false)
                                    .build())
                                .yum(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgYumArgs.builder()
                                    .name("string")
                                    .build())
                                .zypper(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgZypperArgs.builder()
                                    .name("string")
                                    .build())
                                .build())
                            .repository(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryArgs.builder()
                                .apt(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryAptArgs.builder()
                                    .archiveType("string")
                                    .components("string")
                                    .distribution("string")
                                    .uri("string")
                                    .gpgKey("string")
                                    .build())
                                .goo(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryGooArgs.builder()
                                    .name("string")
                                    .url("string")
                                    .build())
                                .yum(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryYumArgs.builder()
                                    .baseUrl("string")
                                    .id("string")
                                    .displayName("string")
                                    .gpgKeys("string")
                                    .build())
                                .zypper(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryZypperArgs.builder()
                                    .baseUrl("string")
                                    .id("string")
                                    .displayName("string")
                                    .gpgKeys("string")
                                    .build())
                                .build())
                            .build())
                        .inventoryFilters(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupInventoryFilterArgs.builder()
                            .osShortName("string")
                            .osVersion("string")
                            .build())
                        .build())
                    .allowNoResourceGroupMatch(false)
                    .description("string")
                    .build())
                .rollout(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutArgs.builder()
                    .disruptionBudget(V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudgetArgs.builder()
                        .fixed(0)
                        .percent(0)
                        .build())
                    .minWaitDuration("string")
                    .build())
                .baseline(false)
                .deleted(false)
                .description("string")
                .name("string")
                .reconciling(false)
                .revisionCreateTime("string")
                .revisionId("string")
                .rolloutState("string")
                .uid("string")
                .build())
            .build())
        .policyOrchestratorId("string")
        .description("string")
        .labels(Map.of("string", "string"))
        .orchestrationScope(V2PolicyOrchestratorOrchestrationScopeArgs.builder()
            .selectors(V2PolicyOrchestratorOrchestrationScopeSelectorArgs.builder()
                .locationSelector(V2PolicyOrchestratorOrchestrationScopeSelectorLocationSelectorArgs.builder()
                    .includedLocations("string")
                    .build())
                .resourceHierarchySelector(V2PolicyOrchestratorOrchestrationScopeSelectorResourceHierarchySelectorArgs.builder()
                    .includedFolders("string")
                    .includedProjects("string")
                    .build())
                .build())
            .build())
        .project("string")
        .state("string")
        .build());
    
    v2policy_orchestrator_resource = gcp.osconfig.V2PolicyOrchestrator("v2policyOrchestratorResource",
        action="string",
        orchestrated_resource={
            "id": "string",
            "os_policy_assignment_v1_payload": {
                "instance_filter": {
                    "all": False,
                    "exclusion_labels": [{
                        "labels": {
                            "string": "string",
                        },
                    }],
                    "inclusion_labels": [{
                        "labels": {
                            "string": "string",
                        },
                    }],
                    "inventories": [{
                        "os_short_name": "string",
                        "os_version": "string",
                    }],
                },
                "os_policies": [{
                    "id": "string",
                    "mode": "string",
                    "resource_groups": [{
                        "resources": [{
                            "id": "string",
                            "exec_": {
                                "validate": {
                                    "interpreter": "string",
                                    "args": ["string"],
                                    "file": {
                                        "allow_insecure": False,
                                        "gcs": {
                                            "bucket": "string",
                                            "object": "string",
                                            "generation": "string",
                                        },
                                        "local_path": "string",
                                        "remote": {
                                            "uri": "string",
                                            "sha256_checksum": "string",
                                        },
                                    },
                                    "output_file_path": "string",
                                    "script": "string",
                                },
                                "enforce": {
                                    "interpreter": "string",
                                    "args": ["string"],
                                    "file": {
                                        "allow_insecure": False,
                                        "gcs": {
                                            "bucket": "string",
                                            "object": "string",
                                            "generation": "string",
                                        },
                                        "local_path": "string",
                                        "remote": {
                                            "uri": "string",
                                            "sha256_checksum": "string",
                                        },
                                    },
                                    "output_file_path": "string",
                                    "script": "string",
                                },
                            },
                            "file": {
                                "path": "string",
                                "state": "string",
                                "content": "string",
                                "file": {
                                    "allow_insecure": False,
                                    "gcs": {
                                        "bucket": "string",
                                        "object": "string",
                                        "generation": "string",
                                    },
                                    "local_path": "string",
                                    "remote": {
                                        "uri": "string",
                                        "sha256_checksum": "string",
                                    },
                                },
                                "permissions": "string",
                            },
                            "pkg": {
                                "desired_state": "string",
                                "apt": {
                                    "name": "string",
                                },
                                "deb": {
                                    "source": {
                                        "allow_insecure": False,
                                        "gcs": {
                                            "bucket": "string",
                                            "object": "string",
                                            "generation": "string",
                                        },
                                        "local_path": "string",
                                        "remote": {
                                            "uri": "string",
                                            "sha256_checksum": "string",
                                        },
                                    },
                                    "pull_deps": False,
                                },
                                "googet": {
                                    "name": "string",
                                },
                                "msi": {
                                    "source": {
                                        "allow_insecure": False,
                                        "gcs": {
                                            "bucket": "string",
                                            "object": "string",
                                            "generation": "string",
                                        },
                                        "local_path": "string",
                                        "remote": {
                                            "uri": "string",
                                            "sha256_checksum": "string",
                                        },
                                    },
                                    "properties": ["string"],
                                },
                                "rpm": {
                                    "source": {
                                        "allow_insecure": False,
                                        "gcs": {
                                            "bucket": "string",
                                            "object": "string",
                                            "generation": "string",
                                        },
                                        "local_path": "string",
                                        "remote": {
                                            "uri": "string",
                                            "sha256_checksum": "string",
                                        },
                                    },
                                    "pull_deps": False,
                                },
                                "yum": {
                                    "name": "string",
                                },
                                "zypper": {
                                    "name": "string",
                                },
                            },
                            "repository": {
                                "apt": {
                                    "archive_type": "string",
                                    "components": ["string"],
                                    "distribution": "string",
                                    "uri": "string",
                                    "gpg_key": "string",
                                },
                                "goo": {
                                    "name": "string",
                                    "url": "string",
                                },
                                "yum": {
                                    "base_url": "string",
                                    "id": "string",
                                    "display_name": "string",
                                    "gpg_keys": ["string"],
                                },
                                "zypper": {
                                    "base_url": "string",
                                    "id": "string",
                                    "display_name": "string",
                                    "gpg_keys": ["string"],
                                },
                            },
                        }],
                        "inventory_filters": [{
                            "os_short_name": "string",
                            "os_version": "string",
                        }],
                    }],
                    "allow_no_resource_group_match": False,
                    "description": "string",
                }],
                "rollout": {
                    "disruption_budget": {
                        "fixed": 0,
                        "percent": 0,
                    },
                    "min_wait_duration": "string",
                },
                "baseline": False,
                "deleted": False,
                "description": "string",
                "name": "string",
                "reconciling": False,
                "revision_create_time": "string",
                "revision_id": "string",
                "rollout_state": "string",
                "uid": "string",
            },
        },
        policy_orchestrator_id="string",
        description="string",
        labels={
            "string": "string",
        },
        orchestration_scope={
            "selectors": [{
                "location_selector": {
                    "included_locations": ["string"],
                },
                "resource_hierarchy_selector": {
                    "included_folders": ["string"],
                    "included_projects": ["string"],
                },
            }],
        },
        project="string",
        state="string")
    
    const v2policyOrchestratorResource = new gcp.osconfig.V2PolicyOrchestrator("v2policyOrchestratorResource", {
        action: "string",
        orchestratedResource: {
            id: "string",
            osPolicyAssignmentV1Payload: {
                instanceFilter: {
                    all: false,
                    exclusionLabels: [{
                        labels: {
                            string: "string",
                        },
                    }],
                    inclusionLabels: [{
                        labels: {
                            string: "string",
                        },
                    }],
                    inventories: [{
                        osShortName: "string",
                        osVersion: "string",
                    }],
                },
                osPolicies: [{
                    id: "string",
                    mode: "string",
                    resourceGroups: [{
                        resources: [{
                            id: "string",
                            exec: {
                                validate: {
                                    interpreter: "string",
                                    args: ["string"],
                                    file: {
                                        allowInsecure: false,
                                        gcs: {
                                            bucket: "string",
                                            object: "string",
                                            generation: "string",
                                        },
                                        localPath: "string",
                                        remote: {
                                            uri: "string",
                                            sha256Checksum: "string",
                                        },
                                    },
                                    outputFilePath: "string",
                                    script: "string",
                                },
                                enforce: {
                                    interpreter: "string",
                                    args: ["string"],
                                    file: {
                                        allowInsecure: false,
                                        gcs: {
                                            bucket: "string",
                                            object: "string",
                                            generation: "string",
                                        },
                                        localPath: "string",
                                        remote: {
                                            uri: "string",
                                            sha256Checksum: "string",
                                        },
                                    },
                                    outputFilePath: "string",
                                    script: "string",
                                },
                            },
                            file: {
                                path: "string",
                                state: "string",
                                content: "string",
                                file: {
                                    allowInsecure: false,
                                    gcs: {
                                        bucket: "string",
                                        object: "string",
                                        generation: "string",
                                    },
                                    localPath: "string",
                                    remote: {
                                        uri: "string",
                                        sha256Checksum: "string",
                                    },
                                },
                                permissions: "string",
                            },
                            pkg: {
                                desiredState: "string",
                                apt: {
                                    name: "string",
                                },
                                deb: {
                                    source: {
                                        allowInsecure: false,
                                        gcs: {
                                            bucket: "string",
                                            object: "string",
                                            generation: "string",
                                        },
                                        localPath: "string",
                                        remote: {
                                            uri: "string",
                                            sha256Checksum: "string",
                                        },
                                    },
                                    pullDeps: false,
                                },
                                googet: {
                                    name: "string",
                                },
                                msi: {
                                    source: {
                                        allowInsecure: false,
                                        gcs: {
                                            bucket: "string",
                                            object: "string",
                                            generation: "string",
                                        },
                                        localPath: "string",
                                        remote: {
                                            uri: "string",
                                            sha256Checksum: "string",
                                        },
                                    },
                                    properties: ["string"],
                                },
                                rpm: {
                                    source: {
                                        allowInsecure: false,
                                        gcs: {
                                            bucket: "string",
                                            object: "string",
                                            generation: "string",
                                        },
                                        localPath: "string",
                                        remote: {
                                            uri: "string",
                                            sha256Checksum: "string",
                                        },
                                    },
                                    pullDeps: false,
                                },
                                yum: {
                                    name: "string",
                                },
                                zypper: {
                                    name: "string",
                                },
                            },
                            repository: {
                                apt: {
                                    archiveType: "string",
                                    components: ["string"],
                                    distribution: "string",
                                    uri: "string",
                                    gpgKey: "string",
                                },
                                goo: {
                                    name: "string",
                                    url: "string",
                                },
                                yum: {
                                    baseUrl: "string",
                                    id: "string",
                                    displayName: "string",
                                    gpgKeys: ["string"],
                                },
                                zypper: {
                                    baseUrl: "string",
                                    id: "string",
                                    displayName: "string",
                                    gpgKeys: ["string"],
                                },
                            },
                        }],
                        inventoryFilters: [{
                            osShortName: "string",
                            osVersion: "string",
                        }],
                    }],
                    allowNoResourceGroupMatch: false,
                    description: "string",
                }],
                rollout: {
                    disruptionBudget: {
                        fixed: 0,
                        percent: 0,
                    },
                    minWaitDuration: "string",
                },
                baseline: false,
                deleted: false,
                description: "string",
                name: "string",
                reconciling: false,
                revisionCreateTime: "string",
                revisionId: "string",
                rolloutState: "string",
                uid: "string",
            },
        },
        policyOrchestratorId: "string",
        description: "string",
        labels: {
            string: "string",
        },
        orchestrationScope: {
            selectors: [{
                locationSelector: {
                    includedLocations: ["string"],
                },
                resourceHierarchySelector: {
                    includedFolders: ["string"],
                    includedProjects: ["string"],
                },
            }],
        },
        project: "string",
        state: "string",
    });
    
    type: gcp:osconfig:V2PolicyOrchestrator
    properties:
        action: string
        description: string
        labels:
            string: string
        orchestratedResource:
            id: string
            osPolicyAssignmentV1Payload:
                baseline: false
                deleted: false
                description: string
                instanceFilter:
                    all: false
                    exclusionLabels:
                        - labels:
                            string: string
                    inclusionLabels:
                        - labels:
                            string: string
                    inventories:
                        - osShortName: string
                          osVersion: string
                name: string
                osPolicies:
                    - allowNoResourceGroupMatch: false
                      description: string
                      id: string
                      mode: string
                      resourceGroups:
                        - inventoryFilters:
                            - osShortName: string
                              osVersion: string
                          resources:
                            - exec:
                                enforce:
                                    args:
                                        - string
                                    file:
                                        allowInsecure: false
                                        gcs:
                                            bucket: string
                                            generation: string
                                            object: string
                                        localPath: string
                                        remote:
                                            sha256Checksum: string
                                            uri: string
                                    interpreter: string
                                    outputFilePath: string
                                    script: string
                                validate:
                                    args:
                                        - string
                                    file:
                                        allowInsecure: false
                                        gcs:
                                            bucket: string
                                            generation: string
                                            object: string
                                        localPath: string
                                        remote:
                                            sha256Checksum: string
                                            uri: string
                                    interpreter: string
                                    outputFilePath: string
                                    script: string
                              file:
                                content: string
                                file:
                                    allowInsecure: false
                                    gcs:
                                        bucket: string
                                        generation: string
                                        object: string
                                    localPath: string
                                    remote:
                                        sha256Checksum: string
                                        uri: string
                                path: string
                                permissions: string
                                state: string
                              id: string
                              pkg:
                                apt:
                                    name: string
                                deb:
                                    pullDeps: false
                                    source:
                                        allowInsecure: false
                                        gcs:
                                            bucket: string
                                            generation: string
                                            object: string
                                        localPath: string
                                        remote:
                                            sha256Checksum: string
                                            uri: string
                                desiredState: string
                                googet:
                                    name: string
                                msi:
                                    properties:
                                        - string
                                    source:
                                        allowInsecure: false
                                        gcs:
                                            bucket: string
                                            generation: string
                                            object: string
                                        localPath: string
                                        remote:
                                            sha256Checksum: string
                                            uri: string
                                rpm:
                                    pullDeps: false
                                    source:
                                        allowInsecure: false
                                        gcs:
                                            bucket: string
                                            generation: string
                                            object: string
                                        localPath: string
                                        remote:
                                            sha256Checksum: string
                                            uri: string
                                yum:
                                    name: string
                                zypper:
                                    name: string
                              repository:
                                apt:
                                    archiveType: string
                                    components:
                                        - string
                                    distribution: string
                                    gpgKey: string
                                    uri: string
                                goo:
                                    name: string
                                    url: string
                                yum:
                                    baseUrl: string
                                    displayName: string
                                    gpgKeys:
                                        - string
                                    id: string
                                zypper:
                                    baseUrl: string
                                    displayName: string
                                    gpgKeys:
                                        - string
                                    id: string
                reconciling: false
                revisionCreateTime: string
                revisionId: string
                rollout:
                    disruptionBudget:
                        fixed: 0
                        percent: 0
                    minWaitDuration: string
                rolloutState: string
                uid: string
        orchestrationScope:
            selectors:
                - locationSelector:
                    includedLocations:
                        - string
                  resourceHierarchySelector:
                    includedFolders:
                        - string
                    includedProjects:
                        - string
        policyOrchestratorId: string
        project: string
        state: string
    

    V2PolicyOrchestrator Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The V2PolicyOrchestrator resource accepts the following input properties:

    Action string
    Required. Action to be done by the orchestrator in projects/{project_id}/zones/{zone_id} locations defined by the orchestration_scope. Allowed values:

    • UPSERT - Orchestrator will create or update target resources.
    • DELETE - Orchestrator will delete target resources, if they exist
    OrchestratedResource V2PolicyOrchestratorOrchestratedResource
    Represents a resource that is being orchestrated by the policy orchestrator. Structure is documented below.
    PolicyOrchestratorId string
    Required. The logical identifier of the policy orchestrator, with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the parent.
    Description string
    Optional. Freeform text describing the purpose of the resource.
    Labels Dictionary<string, string>
    Optional. Labels as key value pairs Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
    OrchestrationScope V2PolicyOrchestratorOrchestrationScope
    Defines a set of selectors which drive which resources are in scope of policy orchestration.
    Project string
    State string
    (Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    Action string
    Required. Action to be done by the orchestrator in projects/{project_id}/zones/{zone_id} locations defined by the orchestration_scope. Allowed values:

    • UPSERT - Orchestrator will create or update target resources.
    • DELETE - Orchestrator will delete target resources, if they exist
    OrchestratedResource V2PolicyOrchestratorOrchestratedResourceArgs
    Represents a resource that is being orchestrated by the policy orchestrator. Structure is documented below.
    PolicyOrchestratorId string
    Required. The logical identifier of the policy orchestrator, with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the parent.
    Description string
    Optional. Freeform text describing the purpose of the resource.
    Labels map[string]string
    Optional. Labels as key value pairs Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
    OrchestrationScope V2PolicyOrchestratorOrchestrationScopeArgs
    Defines a set of selectors which drive which resources are in scope of policy orchestration.
    Project string
    State string
    (Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    action String
    Required. Action to be done by the orchestrator in projects/{project_id}/zones/{zone_id} locations defined by the orchestration_scope. Allowed values:

    • UPSERT - Orchestrator will create or update target resources.
    • DELETE - Orchestrator will delete target resources, if they exist
    orchestratedResource V2PolicyOrchestratorOrchestratedResource
    Represents a resource that is being orchestrated by the policy orchestrator. Structure is documented below.
    policyOrchestratorId String
    Required. The logical identifier of the policy orchestrator, with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the parent.
    description String
    Optional. Freeform text describing the purpose of the resource.
    labels Map<String,String>
    Optional. Labels as key value pairs Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
    orchestrationScope V2PolicyOrchestratorOrchestrationScope
    Defines a set of selectors which drive which resources are in scope of policy orchestration.
    project String
    state String
    (Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    action string
    Required. Action to be done by the orchestrator in projects/{project_id}/zones/{zone_id} locations defined by the orchestration_scope. Allowed values:

    • UPSERT - Orchestrator will create or update target resources.
    • DELETE - Orchestrator will delete target resources, if they exist
    orchestratedResource V2PolicyOrchestratorOrchestratedResource
    Represents a resource that is being orchestrated by the policy orchestrator. Structure is documented below.
    policyOrchestratorId string
    Required. The logical identifier of the policy orchestrator, with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the parent.
    description string
    Optional. Freeform text describing the purpose of the resource.
    labels {[key: string]: string}
    Optional. Labels as key value pairs Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
    orchestrationScope V2PolicyOrchestratorOrchestrationScope
    Defines a set of selectors which drive which resources are in scope of policy orchestration.
    project string
    state string
    (Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    action str
    Required. Action to be done by the orchestrator in projects/{project_id}/zones/{zone_id} locations defined by the orchestration_scope. Allowed values:

    • UPSERT - Orchestrator will create or update target resources.
    • DELETE - Orchestrator will delete target resources, if they exist
    orchestrated_resource V2PolicyOrchestratorOrchestratedResourceArgs
    Represents a resource that is being orchestrated by the policy orchestrator. Structure is documented below.
    policy_orchestrator_id str
    Required. The logical identifier of the policy orchestrator, with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the parent.
    description str
    Optional. Freeform text describing the purpose of the resource.
    labels Mapping[str, str]
    Optional. Labels as key value pairs Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
    orchestration_scope V2PolicyOrchestratorOrchestrationScopeArgs
    Defines a set of selectors which drive which resources are in scope of policy orchestration.
    project str
    state str
    (Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    action String
    Required. Action to be done by the orchestrator in projects/{project_id}/zones/{zone_id} locations defined by the orchestration_scope. Allowed values:

    • UPSERT - Orchestrator will create or update target resources.
    • DELETE - Orchestrator will delete target resources, if they exist
    orchestratedResource Property Map
    Represents a resource that is being orchestrated by the policy orchestrator. Structure is documented below.
    policyOrchestratorId String
    Required. The logical identifier of the policy orchestrator, with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the parent.
    description String
    Optional. Freeform text describing the purpose of the resource.
    labels Map<String>
    Optional. Labels as key value pairs Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
    orchestrationScope Property Map
    Defines a set of selectors which drive which resources are in scope of policy orchestration.
    project String
    state String
    (Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN

    Outputs

    All input properties are implicitly available as output properties. Additionally, the V2PolicyOrchestrator resource produces the following output properties:

    CreateTime string
    Output only. Timestamp when the policy orchestrator resource was created.
    EffectiveLabels Dictionary<string, string>
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    Immutable. Identifier. In form of

    • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
    OrchestrationStates List<V2PolicyOrchestratorOrchestrationState>
    Describes the state of the orchestration process. Structure is documented below.
    PulumiLabels Dictionary<string, string>
    The combination of labels configured directly on the resource and default labels configured on the provider.
    Reconciling bool
    Output only. Set to true, if the there are ongoing changes being applied by the orchestrator.
    UpdateTime string
    Output only. Timestamp when the policy orchestrator resource was last modified.
    CreateTime string
    Output only. Timestamp when the policy orchestrator resource was created.
    EffectiveLabels map[string]string
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    Immutable. Identifier. In form of

    • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
    OrchestrationStates []V2PolicyOrchestratorOrchestrationState
    Describes the state of the orchestration process. Structure is documented below.
    PulumiLabels map[string]string
    The combination of labels configured directly on the resource and default labels configured on the provider.
    Reconciling bool
    Output only. Set to true, if the there are ongoing changes being applied by the orchestrator.
    UpdateTime string
    Output only. Timestamp when the policy orchestrator resource was last modified.
    createTime String
    Output only. Timestamp when the policy orchestrator resource was created.
    effectiveLabels Map<String,String>
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    Immutable. Identifier. In form of

    • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
    orchestrationStates List<V2PolicyOrchestratorOrchestrationState>
    Describes the state of the orchestration process. Structure is documented below.
    pulumiLabels Map<String,String>
    The combination of labels configured directly on the resource and default labels configured on the provider.
    reconciling Boolean
    Output only. Set to true, if the there are ongoing changes being applied by the orchestrator.
    updateTime String
    Output only. Timestamp when the policy orchestrator resource was last modified.
    createTime string
    Output only. Timestamp when the policy orchestrator resource was created.
    effectiveLabels {[key: string]: string}
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    id string
    The provider-assigned unique ID for this managed resource.
    name string
    Immutable. Identifier. In form of

    • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
    orchestrationStates V2PolicyOrchestratorOrchestrationState[]
    Describes the state of the orchestration process. Structure is documented below.
    pulumiLabels {[key: string]: string}
    The combination of labels configured directly on the resource and default labels configured on the provider.
    reconciling boolean
    Output only. Set to true, if the there are ongoing changes being applied by the orchestrator.
    updateTime string
    Output only. Timestamp when the policy orchestrator resource was last modified.
    create_time str
    Output only. Timestamp when the policy orchestrator resource was created.
    effective_labels Mapping[str, str]
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    id str
    The provider-assigned unique ID for this managed resource.
    name str
    Immutable. Identifier. In form of

    • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
    orchestration_states Sequence[V2PolicyOrchestratorOrchestrationState]
    Describes the state of the orchestration process. Structure is documented below.
    pulumi_labels Mapping[str, str]
    The combination of labels configured directly on the resource and default labels configured on the provider.
    reconciling bool
    Output only. Set to true, if the there are ongoing changes being applied by the orchestrator.
    update_time str
    Output only. Timestamp when the policy orchestrator resource was last modified.
    createTime String
    Output only. Timestamp when the policy orchestrator resource was created.
    effectiveLabels Map<String>
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    Immutable. Identifier. In form of

    • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
    orchestrationStates List<Property Map>
    Describes the state of the orchestration process. Structure is documented below.
    pulumiLabels Map<String>
    The combination of labels configured directly on the resource and default labels configured on the provider.
    reconciling Boolean
    Output only. Set to true, if the there are ongoing changes being applied by the orchestrator.
    updateTime String
    Output only. Timestamp when the policy orchestrator resource was last modified.

    Look up Existing V2PolicyOrchestrator Resource

    Get an existing V2PolicyOrchestrator resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: V2PolicyOrchestratorState, opts?: CustomResourceOptions): V2PolicyOrchestrator
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            action: Optional[str] = None,
            create_time: Optional[str] = None,
            description: Optional[str] = None,
            effective_labels: Optional[Mapping[str, str]] = None,
            labels: Optional[Mapping[str, str]] = None,
            name: Optional[str] = None,
            orchestrated_resource: Optional[V2PolicyOrchestratorOrchestratedResourceArgs] = None,
            orchestration_scope: Optional[V2PolicyOrchestratorOrchestrationScopeArgs] = None,
            orchestration_states: Optional[Sequence[V2PolicyOrchestratorOrchestrationStateArgs]] = None,
            policy_orchestrator_id: Optional[str] = None,
            project: Optional[str] = None,
            pulumi_labels: Optional[Mapping[str, str]] = None,
            reconciling: Optional[bool] = None,
            state: Optional[str] = None,
            update_time: Optional[str] = None) -> V2PolicyOrchestrator
    func GetV2PolicyOrchestrator(ctx *Context, name string, id IDInput, state *V2PolicyOrchestratorState, opts ...ResourceOption) (*V2PolicyOrchestrator, error)
    public static V2PolicyOrchestrator Get(string name, Input<string> id, V2PolicyOrchestratorState? state, CustomResourceOptions? opts = null)
    public static V2PolicyOrchestrator get(String name, Output<String> id, V2PolicyOrchestratorState state, CustomResourceOptions options)
    resources:  _:    type: gcp:osconfig:V2PolicyOrchestrator    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Action string
    Required. Action to be done by the orchestrator in projects/{project_id}/zones/{zone_id} locations defined by the orchestration_scope. Allowed values:

    • UPSERT - Orchestrator will create or update target resources.
    • DELETE - Orchestrator will delete target resources, if they exist
    CreateTime string
    Output only. Timestamp when the policy orchestrator resource was created.
    Description string
    Optional. Freeform text describing the purpose of the resource.
    EffectiveLabels Dictionary<string, string>
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    Labels Dictionary<string, string>
    Optional. Labels as key value pairs Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
    Name string
    Immutable. Identifier. In form of

    • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
    OrchestratedResource V2PolicyOrchestratorOrchestratedResource
    Represents a resource that is being orchestrated by the policy orchestrator. Structure is documented below.
    OrchestrationScope V2PolicyOrchestratorOrchestrationScope
    Defines a set of selectors which drive which resources are in scope of policy orchestration.
    OrchestrationStates List<V2PolicyOrchestratorOrchestrationState>
    Describes the state of the orchestration process. Structure is documented below.
    PolicyOrchestratorId string
    Required. The logical identifier of the policy orchestrator, with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the parent.
    Project string
    PulumiLabels Dictionary<string, string>
    The combination of labels configured directly on the resource and default labels configured on the provider.
    Reconciling bool
    Output only. Set to true, if the there are ongoing changes being applied by the orchestrator.
    State string
    (Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    UpdateTime string
    Output only. Timestamp when the policy orchestrator resource was last modified.
    Action string
    Required. Action to be done by the orchestrator in projects/{project_id}/zones/{zone_id} locations defined by the orchestration_scope. Allowed values:

    • UPSERT - Orchestrator will create or update target resources.
    • DELETE - Orchestrator will delete target resources, if they exist
    CreateTime string
    Output only. Timestamp when the policy orchestrator resource was created.
    Description string
    Optional. Freeform text describing the purpose of the resource.
    EffectiveLabels map[string]string
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    Labels map[string]string
    Optional. Labels as key value pairs Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
    Name string
    Immutable. Identifier. In form of

    • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
    OrchestratedResource V2PolicyOrchestratorOrchestratedResourceArgs
    Represents a resource that is being orchestrated by the policy orchestrator. Structure is documented below.
    OrchestrationScope V2PolicyOrchestratorOrchestrationScopeArgs
    Defines a set of selectors which drive which resources are in scope of policy orchestration.
    OrchestrationStates []V2PolicyOrchestratorOrchestrationStateArgs
    Describes the state of the orchestration process. Structure is documented below.
    PolicyOrchestratorId string
    Required. The logical identifier of the policy orchestrator, with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the parent.
    Project string
    PulumiLabels map[string]string
    The combination of labels configured directly on the resource and default labels configured on the provider.
    Reconciling bool
    Output only. Set to true, if the there are ongoing changes being applied by the orchestrator.
    State string
    (Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    UpdateTime string
    Output only. Timestamp when the policy orchestrator resource was last modified.
    action String
    Required. Action to be done by the orchestrator in projects/{project_id}/zones/{zone_id} locations defined by the orchestration_scope. Allowed values:

    • UPSERT - Orchestrator will create or update target resources.
    • DELETE - Orchestrator will delete target resources, if they exist
    createTime String
    Output only. Timestamp when the policy orchestrator resource was created.
    description String
    Optional. Freeform text describing the purpose of the resource.
    effectiveLabels Map<String,String>
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    labels Map<String,String>
    Optional. Labels as key value pairs Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
    name String
    Immutable. Identifier. In form of

    • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
    orchestratedResource V2PolicyOrchestratorOrchestratedResource
    Represents a resource that is being orchestrated by the policy orchestrator. Structure is documented below.
    orchestrationScope V2PolicyOrchestratorOrchestrationScope
    Defines a set of selectors which drive which resources are in scope of policy orchestration.
    orchestrationStates List<V2PolicyOrchestratorOrchestrationState>
    Describes the state of the orchestration process. Structure is documented below.
    policyOrchestratorId String
    Required. The logical identifier of the policy orchestrator, with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the parent.
    project String
    pulumiLabels Map<String,String>
    The combination of labels configured directly on the resource and default labels configured on the provider.
    reconciling Boolean
    Output only. Set to true, if the there are ongoing changes being applied by the orchestrator.
    state String
    (Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    updateTime String
    Output only. Timestamp when the policy orchestrator resource was last modified.
    action string
    Required. Action to be done by the orchestrator in projects/{project_id}/zones/{zone_id} locations defined by the orchestration_scope. Allowed values:

    • UPSERT - Orchestrator will create or update target resources.
    • DELETE - Orchestrator will delete target resources, if they exist
    createTime string
    Output only. Timestamp when the policy orchestrator resource was created.
    description string
    Optional. Freeform text describing the purpose of the resource.
    effectiveLabels {[key: string]: string}
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    labels {[key: string]: string}
    Optional. Labels as key value pairs Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
    name string
    Immutable. Identifier. In form of

    • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
    orchestratedResource V2PolicyOrchestratorOrchestratedResource
    Represents a resource that is being orchestrated by the policy orchestrator. Structure is documented below.
    orchestrationScope V2PolicyOrchestratorOrchestrationScope
    Defines a set of selectors which drive which resources are in scope of policy orchestration.
    orchestrationStates V2PolicyOrchestratorOrchestrationState[]
    Describes the state of the orchestration process. Structure is documented below.
    policyOrchestratorId string
    Required. The logical identifier of the policy orchestrator, with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the parent.
    project string
    pulumiLabels {[key: string]: string}
    The combination of labels configured directly on the resource and default labels configured on the provider.
    reconciling boolean
    Output only. Set to true, if the there are ongoing changes being applied by the orchestrator.
    state string
    (Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    updateTime string
    Output only. Timestamp when the policy orchestrator resource was last modified.
    action str
    Required. Action to be done by the orchestrator in projects/{project_id}/zones/{zone_id} locations defined by the orchestration_scope. Allowed values:

    • UPSERT - Orchestrator will create or update target resources.
    • DELETE - Orchestrator will delete target resources, if they exist
    create_time str
    Output only. Timestamp when the policy orchestrator resource was created.
    description str
    Optional. Freeform text describing the purpose of the resource.
    effective_labels Mapping[str, str]
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    labels Mapping[str, str]
    Optional. Labels as key value pairs Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
    name str
    Immutable. Identifier. In form of

    • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
    orchestrated_resource V2PolicyOrchestratorOrchestratedResourceArgs
    Represents a resource that is being orchestrated by the policy orchestrator. Structure is documented below.
    orchestration_scope V2PolicyOrchestratorOrchestrationScopeArgs
    Defines a set of selectors which drive which resources are in scope of policy orchestration.
    orchestration_states Sequence[V2PolicyOrchestratorOrchestrationStateArgs]
    Describes the state of the orchestration process. Structure is documented below.
    policy_orchestrator_id str
    Required. The logical identifier of the policy orchestrator, with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the parent.
    project str
    pulumi_labels Mapping[str, str]
    The combination of labels configured directly on the resource and default labels configured on the provider.
    reconciling bool
    Output only. Set to true, if the there are ongoing changes being applied by the orchestrator.
    state str
    (Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    update_time str
    Output only. Timestamp when the policy orchestrator resource was last modified.
    action String
    Required. Action to be done by the orchestrator in projects/{project_id}/zones/{zone_id} locations defined by the orchestration_scope. Allowed values:

    • UPSERT - Orchestrator will create or update target resources.
    • DELETE - Orchestrator will delete target resources, if they exist
    createTime String
    Output only. Timestamp when the policy orchestrator resource was created.
    description String
    Optional. Freeform text describing the purpose of the resource.
    effectiveLabels Map<String>
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    labels Map<String>
    Optional. Labels as key value pairs Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
    name String
    Immutable. Identifier. In form of

    • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
    orchestratedResource Property Map
    Represents a resource that is being orchestrated by the policy orchestrator. Structure is documented below.
    orchestrationScope Property Map
    Defines a set of selectors which drive which resources are in scope of policy orchestration.
    orchestrationStates List<Property Map>
    Describes the state of the orchestration process. Structure is documented below.
    policyOrchestratorId String
    Required. The logical identifier of the policy orchestrator, with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the parent.
    project String
    pulumiLabels Map<String>
    The combination of labels configured directly on the resource and default labels configured on the provider.
    reconciling Boolean
    Output only. Set to true, if the there are ongoing changes being applied by the orchestrator.
    state String
    (Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    updateTime String
    Output only. Timestamp when the policy orchestrator resource was last modified.

    Supporting Types

    V2PolicyOrchestratorOrchestratedResource, V2PolicyOrchestratorOrchestratedResourceArgs

    Id string

    Optional. ID of the resource to be used while generating set of affected resources. For UPSERT action the value is auto-generated during PolicyOrchestrator creation when not set. When the value is set it should following next restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the project. For DELETE action, ID must be specified explicitly during PolicyOrchestrator creation.

    The os_policy_assignment_v1_payload block supports:

    OsPolicyAssignmentV1Payload V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1Payload
    OS policy assignment is an API resource that is used to apply a set of OS policies to a dynamically targeted group of Compute Engine VM instances. An OS policy is used to define the desired state configuration for a Compute Engine VM instance through a set of configuration resources that provide capabilities such as installing or removing software packages, or executing a script. For more information about the OS policy resource definitions and examples, see OS policy and OS policy assignment. Structure is documented below.
    Id string

    Optional. ID of the resource to be used while generating set of affected resources. For UPSERT action the value is auto-generated during PolicyOrchestrator creation when not set. When the value is set it should following next restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the project. For DELETE action, ID must be specified explicitly during PolicyOrchestrator creation.

    The os_policy_assignment_v1_payload block supports:

    OsPolicyAssignmentV1Payload V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1Payload
    OS policy assignment is an API resource that is used to apply a set of OS policies to a dynamically targeted group of Compute Engine VM instances. An OS policy is used to define the desired state configuration for a Compute Engine VM instance through a set of configuration resources that provide capabilities such as installing or removing software packages, or executing a script. For more information about the OS policy resource definitions and examples, see OS policy and OS policy assignment. Structure is documented below.
    id String

    Optional. ID of the resource to be used while generating set of affected resources. For UPSERT action the value is auto-generated during PolicyOrchestrator creation when not set. When the value is set it should following next restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the project. For DELETE action, ID must be specified explicitly during PolicyOrchestrator creation.

    The os_policy_assignment_v1_payload block supports:

    osPolicyAssignmentV1Payload V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1Payload
    OS policy assignment is an API resource that is used to apply a set of OS policies to a dynamically targeted group of Compute Engine VM instances. An OS policy is used to define the desired state configuration for a Compute Engine VM instance through a set of configuration resources that provide capabilities such as installing or removing software packages, or executing a script. For more information about the OS policy resource definitions and examples, see OS policy and OS policy assignment. Structure is documented below.
    id string

    Optional. ID of the resource to be used while generating set of affected resources. For UPSERT action the value is auto-generated during PolicyOrchestrator creation when not set. When the value is set it should following next restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the project. For DELETE action, ID must be specified explicitly during PolicyOrchestrator creation.

    The os_policy_assignment_v1_payload block supports:

    osPolicyAssignmentV1Payload V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1Payload
    OS policy assignment is an API resource that is used to apply a set of OS policies to a dynamically targeted group of Compute Engine VM instances. An OS policy is used to define the desired state configuration for a Compute Engine VM instance through a set of configuration resources that provide capabilities such as installing or removing software packages, or executing a script. For more information about the OS policy resource definitions and examples, see OS policy and OS policy assignment. Structure is documented below.
    id str

    Optional. ID of the resource to be used while generating set of affected resources. For UPSERT action the value is auto-generated during PolicyOrchestrator creation when not set. When the value is set it should following next restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the project. For DELETE action, ID must be specified explicitly during PolicyOrchestrator creation.

    The os_policy_assignment_v1_payload block supports:

    os_policy_assignment_v1_payload V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1Payload
    OS policy assignment is an API resource that is used to apply a set of OS policies to a dynamically targeted group of Compute Engine VM instances. An OS policy is used to define the desired state configuration for a Compute Engine VM instance through a set of configuration resources that provide capabilities such as installing or removing software packages, or executing a script. For more information about the OS policy resource definitions and examples, see OS policy and OS policy assignment. Structure is documented below.
    id String

    Optional. ID of the resource to be used while generating set of affected resources. For UPSERT action the value is auto-generated during PolicyOrchestrator creation when not set. When the value is set it should following next restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the project. For DELETE action, ID must be specified explicitly during PolicyOrchestrator creation.

    The os_policy_assignment_v1_payload block supports:

    osPolicyAssignmentV1Payload Property Map
    OS policy assignment is an API resource that is used to apply a set of OS policies to a dynamically targeted group of Compute Engine VM instances. An OS policy is used to define the desired state configuration for a Compute Engine VM instance through a set of configuration resources that provide capabilities such as installing or removing software packages, or executing a script. For more information about the OS policy resource definitions and examples, see OS policy and OS policy assignment. Structure is documented below.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1Payload, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadArgs

    InstanceFilter V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilter

    Filters to select target VMs for an assignment.

    If more than one filter criteria is specified below, a VM will be selected if and only if it satisfies all of them.

    OsPolicies List<V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicy>
    Required. List of OS policies to be applied to the VMs.
    Rollout V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRollout
    Message to configure the rollout at the zonal level for the OS policy assignment.
    Baseline bool

    Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision.

    For a given OS policy assignment, there is only one revision with a value of 'true' for this field.

    Deleted bool
    Output only. Indicates that this revision deletes the OS policy assignment.
    Description string
    OS policy assignment description. Length of the description is limited to 1024 characters.
    Name string
    Immutable. Identifier. In form of

    • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
    Reconciling bool
    Output only. Set to true, if the there are ongoing changes being applied by the orchestrator.
    RevisionCreateTime string
    Output only. The timestamp that the revision was created.
    RevisionId string
    Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
    RolloutState string
    Output only. OS policy assignment rollout state Possible values: ROLLOUT_STATE_UNSPECIFIED IN_PROGRESS CANCELLING CANCELLED SUCCEEDED
    Uid string
    Output only. Server generated unique id for the OS policy assignment resource.
    InstanceFilter V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilter

    Filters to select target VMs for an assignment.

    If more than one filter criteria is specified below, a VM will be selected if and only if it satisfies all of them.

    OsPolicies []V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicy
    Required. List of OS policies to be applied to the VMs.
    Rollout V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRollout
    Message to configure the rollout at the zonal level for the OS policy assignment.
    Baseline bool

    Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision.

    For a given OS policy assignment, there is only one revision with a value of 'true' for this field.

    Deleted bool
    Output only. Indicates that this revision deletes the OS policy assignment.
    Description string
    OS policy assignment description. Length of the description is limited to 1024 characters.
    Name string
    Immutable. Identifier. In form of

    • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
    Reconciling bool
    Output only. Set to true, if the there are ongoing changes being applied by the orchestrator.
    RevisionCreateTime string
    Output only. The timestamp that the revision was created.
    RevisionId string
    Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
    RolloutState string
    Output only. OS policy assignment rollout state Possible values: ROLLOUT_STATE_UNSPECIFIED IN_PROGRESS CANCELLING CANCELLED SUCCEEDED
    Uid string
    Output only. Server generated unique id for the OS policy assignment resource.
    instanceFilter V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilter

    Filters to select target VMs for an assignment.

    If more than one filter criteria is specified below, a VM will be selected if and only if it satisfies all of them.

    osPolicies List<V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicy>
    Required. List of OS policies to be applied to the VMs.
    rollout V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRollout
    Message to configure the rollout at the zonal level for the OS policy assignment.
    baseline Boolean

    Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision.

    For a given OS policy assignment, there is only one revision with a value of 'true' for this field.

    deleted Boolean
    Output only. Indicates that this revision deletes the OS policy assignment.
    description String
    OS policy assignment description. Length of the description is limited to 1024 characters.
    name String
    Immutable. Identifier. In form of

    • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
    reconciling Boolean
    Output only. Set to true, if the there are ongoing changes being applied by the orchestrator.
    revisionCreateTime String
    Output only. The timestamp that the revision was created.
    revisionId String
    Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
    rolloutState String
    Output only. OS policy assignment rollout state Possible values: ROLLOUT_STATE_UNSPECIFIED IN_PROGRESS CANCELLING CANCELLED SUCCEEDED
    uid String
    Output only. Server generated unique id for the OS policy assignment resource.
    instanceFilter V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilter

    Filters to select target VMs for an assignment.

    If more than one filter criteria is specified below, a VM will be selected if and only if it satisfies all of them.

    osPolicies V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicy[]
    Required. List of OS policies to be applied to the VMs.
    rollout V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRollout
    Message to configure the rollout at the zonal level for the OS policy assignment.
    baseline boolean

    Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision.

    For a given OS policy assignment, there is only one revision with a value of 'true' for this field.

    deleted boolean
    Output only. Indicates that this revision deletes the OS policy assignment.
    description string
    OS policy assignment description. Length of the description is limited to 1024 characters.
    name string
    Immutable. Identifier. In form of

    • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
    reconciling boolean
    Output only. Set to true, if the there are ongoing changes being applied by the orchestrator.
    revisionCreateTime string
    Output only. The timestamp that the revision was created.
    revisionId string
    Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
    rolloutState string
    Output only. OS policy assignment rollout state Possible values: ROLLOUT_STATE_UNSPECIFIED IN_PROGRESS CANCELLING CANCELLED SUCCEEDED
    uid string
    Output only. Server generated unique id for the OS policy assignment resource.
    instance_filter V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilter

    Filters to select target VMs for an assignment.

    If more than one filter criteria is specified below, a VM will be selected if and only if it satisfies all of them.

    os_policies Sequence[V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicy]
    Required. List of OS policies to be applied to the VMs.
    rollout V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRollout
    Message to configure the rollout at the zonal level for the OS policy assignment.
    baseline bool

    Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision.

    For a given OS policy assignment, there is only one revision with a value of 'true' for this field.

    deleted bool
    Output only. Indicates that this revision deletes the OS policy assignment.
    description str
    OS policy assignment description. Length of the description is limited to 1024 characters.
    name str
    Immutable. Identifier. In form of

    • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
    reconciling bool
    Output only. Set to true, if the there are ongoing changes being applied by the orchestrator.
    revision_create_time str
    Output only. The timestamp that the revision was created.
    revision_id str
    Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
    rollout_state str
    Output only. OS policy assignment rollout state Possible values: ROLLOUT_STATE_UNSPECIFIED IN_PROGRESS CANCELLING CANCELLED SUCCEEDED
    uid str
    Output only. Server generated unique id for the OS policy assignment resource.
    instanceFilter Property Map

    Filters to select target VMs for an assignment.

    If more than one filter criteria is specified below, a VM will be selected if and only if it satisfies all of them.

    osPolicies List<Property Map>
    Required. List of OS policies to be applied to the VMs.
    rollout Property Map
    Message to configure the rollout at the zonal level for the OS policy assignment.
    baseline Boolean

    Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision.

    For a given OS policy assignment, there is only one revision with a value of 'true' for this field.

    deleted Boolean
    Output only. Indicates that this revision deletes the OS policy assignment.
    description String
    OS policy assignment description. Length of the description is limited to 1024 characters.
    name String
    Immutable. Identifier. In form of

    • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
    reconciling Boolean
    Output only. Set to true, if the there are ongoing changes being applied by the orchestrator.
    revisionCreateTime String
    Output only. The timestamp that the revision was created.
    revisionId String
    Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
    rolloutState String
    Output only. OS policy assignment rollout state Possible values: ROLLOUT_STATE_UNSPECIFIED IN_PROGRESS CANCELLING CANCELLED SUCCEEDED
    uid String
    Output only. Server generated unique id for the OS policy assignment resource.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilter, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterArgs

    All bool
    Target all VMs in the project. If true, no other criteria is permitted.
    ExclusionLabels List<V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterExclusionLabel>
    List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM. Structure is documented below.
    InclusionLabels List<V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInclusionLabel>
    List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM. Structure is documented below.
    Inventories List<V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventory>
    List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories. Structure is documented below.
    All bool
    Target all VMs in the project. If true, no other criteria is permitted.
    ExclusionLabels []V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterExclusionLabel
    List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM. Structure is documented below.
    InclusionLabels []V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInclusionLabel
    List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM. Structure is documented below.
    Inventories []V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventory
    List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories. Structure is documented below.
    all Boolean
    Target all VMs in the project. If true, no other criteria is permitted.
    exclusionLabels List<V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterExclusionLabel>
    List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM. Structure is documented below.
    inclusionLabels List<V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInclusionLabel>
    List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM. Structure is documented below.
    inventories List<V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventory>
    List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories. Structure is documented below.
    all boolean
    Target all VMs in the project. If true, no other criteria is permitted.
    exclusionLabels V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterExclusionLabel[]
    List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM. Structure is documented below.
    inclusionLabels V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInclusionLabel[]
    List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM. Structure is documented below.
    inventories V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventory[]
    List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories. Structure is documented below.
    all bool
    Target all VMs in the project. If true, no other criteria is permitted.
    exclusion_labels Sequence[V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterExclusionLabel]
    List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM. Structure is documented below.
    inclusion_labels Sequence[V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInclusionLabel]
    List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM. Structure is documented below.
    inventories Sequence[V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventory]
    List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories. Structure is documented below.
    all Boolean
    Target all VMs in the project. If true, no other criteria is permitted.
    exclusionLabels List<Property Map>
    List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM. Structure is documented below.
    inclusionLabels List<Property Map>
    List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM. Structure is documented below.
    inventories List<Property Map>
    List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories. Structure is documented below.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterExclusionLabel, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterExclusionLabelArgs

    Labels Dictionary<string, string>
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    Labels map[string]string
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    labels Map<String,String>
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    labels {[key: string]: string}
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    labels Mapping[str, str]
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    labels Map<String>
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInclusionLabel, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInclusionLabelArgs

    Labels Dictionary<string, string>
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    Labels map[string]string
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    labels Map<String,String>
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    labels {[key: string]: string}
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    labels Mapping[str, str]
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    labels Map<String>
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventory, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventoryArgs

    OsShortName string
    Required. The OS short name
    OsVersion string
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    OsShortName string
    Required. The OS short name
    OsVersion string
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    osShortName String
    Required. The OS short name
    osVersion String
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    osShortName string
    Required. The OS short name
    osVersion string
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    os_short_name str
    Required. The OS short name
    os_version str
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    osShortName String
    Required. The OS short name
    osVersion String
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicy, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyArgs

    Id string
    Required. The id of the OS policy with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the assignment.
    Mode string
    Required. Policy mode Possible values: MODE_UNSPECIFIED VALIDATION ENFORCEMENT
    ResourceGroups List<V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroup>
    Required. List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match Structure is documented below.
    AllowNoResourceGroupMatch bool
    This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
    Description string
    Policy description. Length of the description is limited to 1024 characters.
    Id string
    Required. The id of the OS policy with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the assignment.
    Mode string
    Required. Policy mode Possible values: MODE_UNSPECIFIED VALIDATION ENFORCEMENT
    ResourceGroups []V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroup
    Required. List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match Structure is documented below.
    AllowNoResourceGroupMatch bool
    This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
    Description string
    Policy description. Length of the description is limited to 1024 characters.
    id String
    Required. The id of the OS policy with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the assignment.
    mode String
    Required. Policy mode Possible values: MODE_UNSPECIFIED VALIDATION ENFORCEMENT
    resourceGroups List<V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroup>
    Required. List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match Structure is documented below.
    allowNoResourceGroupMatch Boolean
    This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
    description String
    Policy description. Length of the description is limited to 1024 characters.
    id string
    Required. The id of the OS policy with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the assignment.
    mode string
    Required. Policy mode Possible values: MODE_UNSPECIFIED VALIDATION ENFORCEMENT
    resourceGroups V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroup[]
    Required. List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match Structure is documented below.
    allowNoResourceGroupMatch boolean
    This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
    description string
    Policy description. Length of the description is limited to 1024 characters.
    id str
    Required. The id of the OS policy with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the assignment.
    mode str
    Required. Policy mode Possible values: MODE_UNSPECIFIED VALIDATION ENFORCEMENT
    resource_groups Sequence[V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroup]
    Required. List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match Structure is documented below.
    allow_no_resource_group_match bool
    This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
    description str
    Policy description. Length of the description is limited to 1024 characters.
    id String
    Required. The id of the OS policy with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the assignment.
    mode String
    Required. Policy mode Possible values: MODE_UNSPECIFIED VALIDATION ENFORCEMENT
    resourceGroups List<Property Map>
    Required. List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match Structure is documented below.
    allowNoResourceGroupMatch Boolean
    This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
    description String
    Policy description. Length of the description is limited to 1024 characters.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroup, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupArgs

    Resources List<V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResource>
    Required. List of resources configured for this resource group. The resources are executed in the exact order specified here. Structure is documented below.
    InventoryFilters List<V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupInventoryFilter>
    List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally. Structure is documented below.
    Resources []V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResource
    Required. List of resources configured for this resource group. The resources are executed in the exact order specified here. Structure is documented below.
    InventoryFilters []V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupInventoryFilter
    List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally. Structure is documented below.
    resources List<V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResource>
    Required. List of resources configured for this resource group. The resources are executed in the exact order specified here. Structure is documented below.
    inventoryFilters List<V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupInventoryFilter>
    List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally. Structure is documented below.
    resources V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResource[]
    Required. List of resources configured for this resource group. The resources are executed in the exact order specified here. Structure is documented below.
    inventoryFilters V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupInventoryFilter[]
    List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally. Structure is documented below.
    resources Sequence[V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResource]
    Required. List of resources configured for this resource group. The resources are executed in the exact order specified here. Structure is documented below.
    inventory_filters Sequence[V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupInventoryFilter]
    List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally. Structure is documented below.
    resources List<Property Map>
    Required. List of resources configured for this resource group. The resources are executed in the exact order specified here. Structure is documented below.
    inventoryFilters List<Property Map>
    List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally. Structure is documented below.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupInventoryFilter, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupInventoryFilterArgs

    OsShortName string
    Required. The OS short name
    OsVersion string
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    OsShortName string
    Required. The OS short name
    OsVersion string
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    osShortName String
    Required. The OS short name
    osVersion String
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    osShortName string
    Required. The OS short name
    osVersion string
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    os_short_name str
    Required. The OS short name
    os_version str
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    osShortName String
    Required. The OS short name
    osVersion String
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResource, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceArgs

    Id string
    Required. The id of the resource with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the OS policy.
    Exec V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExec
    A resource that allows executing scripts on the VM. The ExecResource has 2 stages: validate and enforce and both stages accept a script as an argument to execute. When the ExecResource is applied by the agent, it first executes the script in the validate stage. The validate stage can signal that the ExecResource is already in the desired state by returning an exit code of 100. If the ExecResource is not in the desired state, it should return an exit code of 101. Any other exit code returned by this stage is considered an error. If the ExecResource is not in the desired state based on the exit code from the validate stage, the agent proceeds to execute the script from the enforce stage. If the ExecResource is already in the desired state, the enforce stage will not be run. Similar to validate stage, the enforce stage should return an exit code of 100 to indicate that the resource in now in its desired state. Any other exit code is considered an error. NOTE: An exit code of 100 was chosen over 0 (and 101 vs 1) to have an explicit indicator of in desired state, not in desired state and errors. Because, for example, Powershell will always return an exit code of 0 unless an exit statement is provided in the script. So, for reasons of consistency and being explicit, exit codes 100 and 101 were chosen. Structure is documented below.
    File V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFile
    A resource that manages the state of a file. Structure is documented below.
    Pkg V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkg
    A resource that manages a system package. Structure is documented below.
    Repository V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepository
    A resource that manages a package repository. Structure is documented below.
    Id string
    Required. The id of the resource with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the OS policy.
    Exec V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExec
    A resource that allows executing scripts on the VM. The ExecResource has 2 stages: validate and enforce and both stages accept a script as an argument to execute. When the ExecResource is applied by the agent, it first executes the script in the validate stage. The validate stage can signal that the ExecResource is already in the desired state by returning an exit code of 100. If the ExecResource is not in the desired state, it should return an exit code of 101. Any other exit code returned by this stage is considered an error. If the ExecResource is not in the desired state based on the exit code from the validate stage, the agent proceeds to execute the script from the enforce stage. If the ExecResource is already in the desired state, the enforce stage will not be run. Similar to validate stage, the enforce stage should return an exit code of 100 to indicate that the resource in now in its desired state. Any other exit code is considered an error. NOTE: An exit code of 100 was chosen over 0 (and 101 vs 1) to have an explicit indicator of in desired state, not in desired state and errors. Because, for example, Powershell will always return an exit code of 0 unless an exit statement is provided in the script. So, for reasons of consistency and being explicit, exit codes 100 and 101 were chosen. Structure is documented below.
    File V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFile
    A resource that manages the state of a file. Structure is documented below.
    Pkg V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkg
    A resource that manages a system package. Structure is documented below.
    Repository V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepository
    A resource that manages a package repository. Structure is documented below.
    id String
    Required. The id of the resource with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the OS policy.
    exec V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExec
    A resource that allows executing scripts on the VM. The ExecResource has 2 stages: validate and enforce and both stages accept a script as an argument to execute. When the ExecResource is applied by the agent, it first executes the script in the validate stage. The validate stage can signal that the ExecResource is already in the desired state by returning an exit code of 100. If the ExecResource is not in the desired state, it should return an exit code of 101. Any other exit code returned by this stage is considered an error. If the ExecResource is not in the desired state based on the exit code from the validate stage, the agent proceeds to execute the script from the enforce stage. If the ExecResource is already in the desired state, the enforce stage will not be run. Similar to validate stage, the enforce stage should return an exit code of 100 to indicate that the resource in now in its desired state. Any other exit code is considered an error. NOTE: An exit code of 100 was chosen over 0 (and 101 vs 1) to have an explicit indicator of in desired state, not in desired state and errors. Because, for example, Powershell will always return an exit code of 0 unless an exit statement is provided in the script. So, for reasons of consistency and being explicit, exit codes 100 and 101 were chosen. Structure is documented below.
    file V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFile
    A resource that manages the state of a file. Structure is documented below.
    pkg V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkg
    A resource that manages a system package. Structure is documented below.
    repository V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepository
    A resource that manages a package repository. Structure is documented below.
    id string
    Required. The id of the resource with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the OS policy.
    exec V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExec
    A resource that allows executing scripts on the VM. The ExecResource has 2 stages: validate and enforce and both stages accept a script as an argument to execute. When the ExecResource is applied by the agent, it first executes the script in the validate stage. The validate stage can signal that the ExecResource is already in the desired state by returning an exit code of 100. If the ExecResource is not in the desired state, it should return an exit code of 101. Any other exit code returned by this stage is considered an error. If the ExecResource is not in the desired state based on the exit code from the validate stage, the agent proceeds to execute the script from the enforce stage. If the ExecResource is already in the desired state, the enforce stage will not be run. Similar to validate stage, the enforce stage should return an exit code of 100 to indicate that the resource in now in its desired state. Any other exit code is considered an error. NOTE: An exit code of 100 was chosen over 0 (and 101 vs 1) to have an explicit indicator of in desired state, not in desired state and errors. Because, for example, Powershell will always return an exit code of 0 unless an exit statement is provided in the script. So, for reasons of consistency and being explicit, exit codes 100 and 101 were chosen. Structure is documented below.
    file V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFile
    A resource that manages the state of a file. Structure is documented below.
    pkg V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkg
    A resource that manages a system package. Structure is documented below.
    repository V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepository
    A resource that manages a package repository. Structure is documented below.
    id str
    Required. The id of the resource with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the OS policy.
    exec_ V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExec
    A resource that allows executing scripts on the VM. The ExecResource has 2 stages: validate and enforce and both stages accept a script as an argument to execute. When the ExecResource is applied by the agent, it first executes the script in the validate stage. The validate stage can signal that the ExecResource is already in the desired state by returning an exit code of 100. If the ExecResource is not in the desired state, it should return an exit code of 101. Any other exit code returned by this stage is considered an error. If the ExecResource is not in the desired state based on the exit code from the validate stage, the agent proceeds to execute the script from the enforce stage. If the ExecResource is already in the desired state, the enforce stage will not be run. Similar to validate stage, the enforce stage should return an exit code of 100 to indicate that the resource in now in its desired state. Any other exit code is considered an error. NOTE: An exit code of 100 was chosen over 0 (and 101 vs 1) to have an explicit indicator of in desired state, not in desired state and errors. Because, for example, Powershell will always return an exit code of 0 unless an exit statement is provided in the script. So, for reasons of consistency and being explicit, exit codes 100 and 101 were chosen. Structure is documented below.
    file V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFile
    A resource that manages the state of a file. Structure is documented below.
    pkg V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkg
    A resource that manages a system package. Structure is documented below.
    repository V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepository
    A resource that manages a package repository. Structure is documented below.
    id String
    Required. The id of the resource with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the OS policy.
    exec Property Map
    A resource that allows executing scripts on the VM. The ExecResource has 2 stages: validate and enforce and both stages accept a script as an argument to execute. When the ExecResource is applied by the agent, it first executes the script in the validate stage. The validate stage can signal that the ExecResource is already in the desired state by returning an exit code of 100. If the ExecResource is not in the desired state, it should return an exit code of 101. Any other exit code returned by this stage is considered an error. If the ExecResource is not in the desired state based on the exit code from the validate stage, the agent proceeds to execute the script from the enforce stage. If the ExecResource is already in the desired state, the enforce stage will not be run. Similar to validate stage, the enforce stage should return an exit code of 100 to indicate that the resource in now in its desired state. Any other exit code is considered an error. NOTE: An exit code of 100 was chosen over 0 (and 101 vs 1) to have an explicit indicator of in desired state, not in desired state and errors. Because, for example, Powershell will always return an exit code of 0 unless an exit statement is provided in the script. So, for reasons of consistency and being explicit, exit codes 100 and 101 were chosen. Structure is documented below.
    file Property Map
    A resource that manages the state of a file. Structure is documented below.
    pkg Property Map
    A resource that manages a system package. Structure is documented below.
    repository Property Map
    A resource that manages a package repository. Structure is documented below.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExec, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecArgs

    validate Property Map
    A file or script to execute. Structure is documented below.
    enforce Property Map
    A file or script to execute. Structure is documented below.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforce, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceArgs

    Interpreter string
    Required. The script interpreter to use. Possible values: INTERPRETER_UNSPECIFIED NONE SHELL POWERSHELL
    Args List<string>
    Optional arguments to pass to the source during execution.
    File V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFile
    A remote or local file. Structure is documented below.
    OutputFilePath string
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 500K bytes.
    Script string
    An inline script. The size of the script is limited to 32KiB.
    Interpreter string
    Required. The script interpreter to use. Possible values: INTERPRETER_UNSPECIFIED NONE SHELL POWERSHELL
    Args []string
    Optional arguments to pass to the source during execution.
    File V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFile
    A remote or local file. Structure is documented below.
    OutputFilePath string
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 500K bytes.
    Script string
    An inline script. The size of the script is limited to 32KiB.
    interpreter String
    Required. The script interpreter to use. Possible values: INTERPRETER_UNSPECIFIED NONE SHELL POWERSHELL
    args List<String>
    Optional arguments to pass to the source during execution.
    file V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFile
    A remote or local file. Structure is documented below.
    outputFilePath String
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 500K bytes.
    script String
    An inline script. The size of the script is limited to 32KiB.
    interpreter string
    Required. The script interpreter to use. Possible values: INTERPRETER_UNSPECIFIED NONE SHELL POWERSHELL
    args string[]
    Optional arguments to pass to the source during execution.
    file V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFile
    A remote or local file. Structure is documented below.
    outputFilePath string
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 500K bytes.
    script string
    An inline script. The size of the script is limited to 32KiB.
    interpreter str
    Required. The script interpreter to use. Possible values: INTERPRETER_UNSPECIFIED NONE SHELL POWERSHELL
    args Sequence[str]
    Optional arguments to pass to the source during execution.
    file V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFile
    A remote or local file. Structure is documented below.
    output_file_path str
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 500K bytes.
    script str
    An inline script. The size of the script is limited to 32KiB.
    interpreter String
    Required. The script interpreter to use. Possible values: INTERPRETER_UNSPECIFIED NONE SHELL POWERSHELL
    args List<String>
    Optional arguments to pass to the source during execution.
    file Property Map
    A remote or local file. Structure is documented below.
    outputFilePath String
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 500K bytes.
    script String
    An inline script. The size of the script is limited to 32KiB.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFile, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileArgs

    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    LocalPath string
    A local path within the VM to use.
    Remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileRemote
    Specifies a file available via some URI. Structure is documented below.
    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    LocalPath string
    A local path within the VM to use.
    Remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileRemote
    Specifies a file available via some URI. Structure is documented below.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    localPath String
    A local path within the VM to use.
    remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileRemote
    Specifies a file available via some URI. Structure is documented below.
    allowInsecure boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    localPath string
    A local path within the VM to use.
    remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileRemote
    Specifies a file available via some URI. Structure is documented below.
    allow_insecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    local_path str
    A local path within the VM to use.
    remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileRemote
    Specifies a file available via some URI. Structure is documented below.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs Property Map
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    localPath String
    A local path within the VM to use.
    remote Property Map
    Specifies a file available via some URI. Structure is documented below.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileGcs, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileGcsArgs

    Bucket string
    Required. Bucket of the Cloud Storage object.
    Object string
    Required. Name of the Cloud Storage object.
    Generation string
    Generation number of the Cloud Storage object.
    Bucket string
    Required. Bucket of the Cloud Storage object.
    Object string
    Required. Name of the Cloud Storage object.
    Generation string
    Generation number of the Cloud Storage object.
    bucket String
    Required. Bucket of the Cloud Storage object.
    object String
    Required. Name of the Cloud Storage object.
    generation String
    Generation number of the Cloud Storage object.
    bucket string
    Required. Bucket of the Cloud Storage object.
    object string
    Required. Name of the Cloud Storage object.
    generation string
    Generation number of the Cloud Storage object.
    bucket str
    Required. Bucket of the Cloud Storage object.
    object str
    Required. Name of the Cloud Storage object.
    generation str
    Generation number of the Cloud Storage object.
    bucket String
    Required. Bucket of the Cloud Storage object.
    object String
    Required. Name of the Cloud Storage object.
    generation String
    Generation number of the Cloud Storage object.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileRemote, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileRemoteArgs

    Uri string
    Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    Uri string
    Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    uri String
    Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.
    uri string
    Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum string
    SHA256 checksum of the remote file.
    uri str
    Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256_checksum str
    SHA256 checksum of the remote file.
    uri String
    Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidate, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateArgs

    Interpreter string
    Required. The script interpreter to use. Possible values: INTERPRETER_UNSPECIFIED NONE SHELL POWERSHELL
    Args List<string>
    Optional arguments to pass to the source during execution.
    File V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFile
    A remote or local file. Structure is documented below.
    OutputFilePath string
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 500K bytes.
    Script string
    An inline script. The size of the script is limited to 32KiB.
    Interpreter string
    Required. The script interpreter to use. Possible values: INTERPRETER_UNSPECIFIED NONE SHELL POWERSHELL
    Args []string
    Optional arguments to pass to the source during execution.
    File V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFile
    A remote or local file. Structure is documented below.
    OutputFilePath string
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 500K bytes.
    Script string
    An inline script. The size of the script is limited to 32KiB.
    interpreter String
    Required. The script interpreter to use. Possible values: INTERPRETER_UNSPECIFIED NONE SHELL POWERSHELL
    args List<String>
    Optional arguments to pass to the source during execution.
    file V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFile
    A remote or local file. Structure is documented below.
    outputFilePath String
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 500K bytes.
    script String
    An inline script. The size of the script is limited to 32KiB.
    interpreter string
    Required. The script interpreter to use. Possible values: INTERPRETER_UNSPECIFIED NONE SHELL POWERSHELL
    args string[]
    Optional arguments to pass to the source during execution.
    file V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFile
    A remote or local file. Structure is documented below.
    outputFilePath string
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 500K bytes.
    script string
    An inline script. The size of the script is limited to 32KiB.
    interpreter str
    Required. The script interpreter to use. Possible values: INTERPRETER_UNSPECIFIED NONE SHELL POWERSHELL
    args Sequence[str]
    Optional arguments to pass to the source during execution.
    file V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFile
    A remote or local file. Structure is documented below.
    output_file_path str
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 500K bytes.
    script str
    An inline script. The size of the script is limited to 32KiB.
    interpreter String
    Required. The script interpreter to use. Possible values: INTERPRETER_UNSPECIFIED NONE SHELL POWERSHELL
    args List<String>
    Optional arguments to pass to the source during execution.
    file Property Map
    A remote or local file. Structure is documented below.
    outputFilePath String
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 500K bytes.
    script String
    An inline script. The size of the script is limited to 32KiB.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFile, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileArgs

    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    LocalPath string
    A local path within the VM to use.
    Remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileRemote
    Specifies a file available via some URI. Structure is documented below.
    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    LocalPath string
    A local path within the VM to use.
    Remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileRemote
    Specifies a file available via some URI. Structure is documented below.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    localPath String
    A local path within the VM to use.
    remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileRemote
    Specifies a file available via some URI. Structure is documented below.
    allowInsecure boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    localPath string
    A local path within the VM to use.
    remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileRemote
    Specifies a file available via some URI. Structure is documented below.
    allow_insecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    local_path str
    A local path within the VM to use.
    remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileRemote
    Specifies a file available via some URI. Structure is documented below.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs Property Map
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    localPath String
    A local path within the VM to use.
    remote Property Map
    Specifies a file available via some URI. Structure is documented below.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileGcs, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileGcsArgs

    Bucket string
    Required. Bucket of the Cloud Storage object.
    Object string
    Required. Name of the Cloud Storage object.
    Generation string
    Generation number of the Cloud Storage object.
    Bucket string
    Required. Bucket of the Cloud Storage object.
    Object string
    Required. Name of the Cloud Storage object.
    Generation string
    Generation number of the Cloud Storage object.
    bucket String
    Required. Bucket of the Cloud Storage object.
    object String
    Required. Name of the Cloud Storage object.
    generation String
    Generation number of the Cloud Storage object.
    bucket string
    Required. Bucket of the Cloud Storage object.
    object string
    Required. Name of the Cloud Storage object.
    generation string
    Generation number of the Cloud Storage object.
    bucket str
    Required. Bucket of the Cloud Storage object.
    object str
    Required. Name of the Cloud Storage object.
    generation str
    Generation number of the Cloud Storage object.
    bucket String
    Required. Bucket of the Cloud Storage object.
    object String
    Required. Name of the Cloud Storage object.
    generation String
    Generation number of the Cloud Storage object.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileRemote, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileRemoteArgs

    Uri string
    Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    Uri string
    Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    uri String
    Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.
    uri string
    Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum string
    SHA256 checksum of the remote file.
    uri str
    Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256_checksum str
    SHA256 checksum of the remote file.
    uri String
    Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFile, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileArgs

    Path string
    Required. The absolute path of the file within the VM.
    State string
    Required. Desired state of the file. Possible values: DESIRED_STATE_UNSPECIFIED PRESENT ABSENT CONTENTS_MATCH
    Content string
    A a file with this content. The size of the content is limited to 32KiB.
    File V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFile
    A remote or local file. Structure is documented below.
    Permissions string
    Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
    Path string
    Required. The absolute path of the file within the VM.
    State string
    Required. Desired state of the file. Possible values: DESIRED_STATE_UNSPECIFIED PRESENT ABSENT CONTENTS_MATCH
    Content string
    A a file with this content. The size of the content is limited to 32KiB.
    File V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFile
    A remote or local file. Structure is documented below.
    Permissions string
    Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
    path String
    Required. The absolute path of the file within the VM.
    state String
    Required. Desired state of the file. Possible values: DESIRED_STATE_UNSPECIFIED PRESENT ABSENT CONTENTS_MATCH
    content String
    A a file with this content. The size of the content is limited to 32KiB.
    file V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFile
    A remote or local file. Structure is documented below.
    permissions String
    Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
    path string
    Required. The absolute path of the file within the VM.
    state string
    Required. Desired state of the file. Possible values: DESIRED_STATE_UNSPECIFIED PRESENT ABSENT CONTENTS_MATCH
    content string
    A a file with this content. The size of the content is limited to 32KiB.
    file V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFile
    A remote or local file. Structure is documented below.
    permissions string
    Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
    path str
    Required. The absolute path of the file within the VM.
    state str
    Required. Desired state of the file. Possible values: DESIRED_STATE_UNSPECIFIED PRESENT ABSENT CONTENTS_MATCH
    content str
    A a file with this content. The size of the content is limited to 32KiB.
    file V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFile
    A remote or local file. Structure is documented below.
    permissions str
    Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
    path String
    Required. The absolute path of the file within the VM.
    state String
    Required. Desired state of the file. Possible values: DESIRED_STATE_UNSPECIFIED PRESENT ABSENT CONTENTS_MATCH
    content String
    A a file with this content. The size of the content is limited to 32KiB.
    file Property Map
    A remote or local file. Structure is documented below.
    permissions String
    Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFile, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileArgs

    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    LocalPath string
    A local path within the VM to use.
    Remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileRemote
    Specifies a file available via some URI. Structure is documented below.
    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    LocalPath string
    A local path within the VM to use.
    Remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileRemote
    Specifies a file available via some URI. Structure is documented below.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    localPath String
    A local path within the VM to use.
    remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileRemote
    Specifies a file available via some URI. Structure is documented below.
    allowInsecure boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    localPath string
    A local path within the VM to use.
    remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileRemote
    Specifies a file available via some URI. Structure is documented below.
    allow_insecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    local_path str
    A local path within the VM to use.
    remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileRemote
    Specifies a file available via some URI. Structure is documented below.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs Property Map
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    localPath String
    A local path within the VM to use.
    remote Property Map
    Specifies a file available via some URI. Structure is documented below.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileGcs, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileGcsArgs

    Bucket string
    Required. Bucket of the Cloud Storage object.
    Object string
    Required. Name of the Cloud Storage object.
    Generation string
    Generation number of the Cloud Storage object.
    Bucket string
    Required. Bucket of the Cloud Storage object.
    Object string
    Required. Name of the Cloud Storage object.
    Generation string
    Generation number of the Cloud Storage object.
    bucket String
    Required. Bucket of the Cloud Storage object.
    object String
    Required. Name of the Cloud Storage object.
    generation String
    Generation number of the Cloud Storage object.
    bucket string
    Required. Bucket of the Cloud Storage object.
    object string
    Required. Name of the Cloud Storage object.
    generation string
    Generation number of the Cloud Storage object.
    bucket str
    Required. Bucket of the Cloud Storage object.
    object str
    Required. Name of the Cloud Storage object.
    generation str
    Generation number of the Cloud Storage object.
    bucket String
    Required. Bucket of the Cloud Storage object.
    object String
    Required. Name of the Cloud Storage object.
    generation String
    Generation number of the Cloud Storage object.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileRemote, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileRemoteArgs

    Uri string
    Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    Uri string
    Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    uri String
    Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.
    uri string
    Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum string
    SHA256 checksum of the remote file.
    uri str
    Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256_checksum str
    SHA256 checksum of the remote file.
    uri String
    Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkg, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgArgs

    DesiredState string
    Required. The desired state the agent should maintain for this package. Possible values: DESIRED_STATE_UNSPECIFIED INSTALLED REMOVED
    Apt V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgApt
    A package managed by APT.

    • install: apt-get update && apt-get -y install [name]
    • remove: apt-get -y remove [name] Structure is documented below.
    Deb V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDeb
    A deb package file. dpkg packages only support INSTALLED state. Structure is documented below.
    Googet V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgGooget
    A package managed by GooGet.

    • install: googet -noconfirm install package
    • remove: googet -noconfirm remove package Structure is documented below.
    Msi V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsi
    An MSI package. MSI packages only support INSTALLED state. Structure is documented below.
    Rpm V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpm
    An RPM package file. RPM packages only support INSTALLED state. Structure is documented below.
    Yum V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgYum
    A package managed by YUM.

    • install: yum -y install package
    • remove: yum -y remove package Structure is documented below.
    Zypper V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgZypper
    A package managed by Zypper.

    • install: zypper -y install package
    • remove: zypper -y rm package Structure is documented below.
    DesiredState string
    Required. The desired state the agent should maintain for this package. Possible values: DESIRED_STATE_UNSPECIFIED INSTALLED REMOVED
    Apt V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgApt
    A package managed by APT.

    • install: apt-get update && apt-get -y install [name]
    • remove: apt-get -y remove [name] Structure is documented below.
    Deb V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDeb
    A deb package file. dpkg packages only support INSTALLED state. Structure is documented below.
    Googet V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgGooget
    A package managed by GooGet.

    • install: googet -noconfirm install package
    • remove: googet -noconfirm remove package Structure is documented below.
    Msi V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsi
    An MSI package. MSI packages only support INSTALLED state. Structure is documented below.
    Rpm V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpm
    An RPM package file. RPM packages only support INSTALLED state. Structure is documented below.
    Yum V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgYum
    A package managed by YUM.

    • install: yum -y install package
    • remove: yum -y remove package Structure is documented below.
    Zypper V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgZypper
    A package managed by Zypper.

    • install: zypper -y install package
    • remove: zypper -y rm package Structure is documented below.
    desiredState String
    Required. The desired state the agent should maintain for this package. Possible values: DESIRED_STATE_UNSPECIFIED INSTALLED REMOVED
    apt V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgApt
    A package managed by APT.

    • install: apt-get update && apt-get -y install [name]
    • remove: apt-get -y remove [name] Structure is documented below.
    deb V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDeb
    A deb package file. dpkg packages only support INSTALLED state. Structure is documented below.
    googet V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgGooget
    A package managed by GooGet.

    • install: googet -noconfirm install package
    • remove: googet -noconfirm remove package Structure is documented below.
    msi V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsi
    An MSI package. MSI packages only support INSTALLED state. Structure is documented below.
    rpm V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpm
    An RPM package file. RPM packages only support INSTALLED state. Structure is documented below.
    yum V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgYum
    A package managed by YUM.

    • install: yum -y install package
    • remove: yum -y remove package Structure is documented below.
    zypper V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgZypper
    A package managed by Zypper.

    • install: zypper -y install package
    • remove: zypper -y rm package Structure is documented below.
    desiredState string
    Required. The desired state the agent should maintain for this package. Possible values: DESIRED_STATE_UNSPECIFIED INSTALLED REMOVED
    apt V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgApt
    A package managed by APT.

    • install: apt-get update && apt-get -y install [name]
    • remove: apt-get -y remove [name] Structure is documented below.
    deb V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDeb
    A deb package file. dpkg packages only support INSTALLED state. Structure is documented below.
    googet V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgGooget
    A package managed by GooGet.

    • install: googet -noconfirm install package
    • remove: googet -noconfirm remove package Structure is documented below.
    msi V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsi
    An MSI package. MSI packages only support INSTALLED state. Structure is documented below.
    rpm V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpm
    An RPM package file. RPM packages only support INSTALLED state. Structure is documented below.
    yum V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgYum
    A package managed by YUM.

    • install: yum -y install package
    • remove: yum -y remove package Structure is documented below.
    zypper V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgZypper
    A package managed by Zypper.

    • install: zypper -y install package
    • remove: zypper -y rm package Structure is documented below.
    desired_state str
    Required. The desired state the agent should maintain for this package. Possible values: DESIRED_STATE_UNSPECIFIED INSTALLED REMOVED
    apt V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgApt
    A package managed by APT.

    • install: apt-get update && apt-get -y install [name]
    • remove: apt-get -y remove [name] Structure is documented below.
    deb V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDeb
    A deb package file. dpkg packages only support INSTALLED state. Structure is documented below.
    googet V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgGooget
    A package managed by GooGet.

    • install: googet -noconfirm install package
    • remove: googet -noconfirm remove package Structure is documented below.
    msi V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsi
    An MSI package. MSI packages only support INSTALLED state. Structure is documented below.
    rpm V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpm
    An RPM package file. RPM packages only support INSTALLED state. Structure is documented below.
    yum V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgYum
    A package managed by YUM.

    • install: yum -y install package
    • remove: yum -y remove package Structure is documented below.
    zypper V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgZypper
    A package managed by Zypper.

    • install: zypper -y install package
    • remove: zypper -y rm package Structure is documented below.
    desiredState String
    Required. The desired state the agent should maintain for this package. Possible values: DESIRED_STATE_UNSPECIFIED INSTALLED REMOVED
    apt Property Map
    A package managed by APT.

    • install: apt-get update && apt-get -y install [name]
    • remove: apt-get -y remove [name] Structure is documented below.
    deb Property Map
    A deb package file. dpkg packages only support INSTALLED state. Structure is documented below.
    googet Property Map
    A package managed by GooGet.

    • install: googet -noconfirm install package
    • remove: googet -noconfirm remove package Structure is documented below.
    msi Property Map
    An MSI package. MSI packages only support INSTALLED state. Structure is documented below.
    rpm Property Map
    An RPM package file. RPM packages only support INSTALLED state. Structure is documented below.
    yum Property Map
    A package managed by YUM.

    • install: yum -y install package
    • remove: yum -y remove package Structure is documented below.
    zypper Property Map
    A package managed by Zypper.

    • install: zypper -y install package
    • remove: zypper -y rm package Structure is documented below.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgApt, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgAptArgs

    Name string
    Required. Package name.
    Name string
    Required. Package name.
    name String
    Required. Package name.
    name string
    Required. Package name.
    name str
    Required. Package name.
    name String
    Required. Package name.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDeb, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebArgs

    Source V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSource
    A remote or local file. Structure is documented below.
    PullDeps bool
    Whether dependencies should also be installed.

    • install when false: dpkg -i package
    • install when true: apt-get update && apt-get -y install package.deb
    Source V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSource
    A remote or local file. Structure is documented below.
    PullDeps bool
    Whether dependencies should also be installed.

    • install when false: dpkg -i package
    • install when true: apt-get update && apt-get -y install package.deb
    source V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSource
    A remote or local file. Structure is documented below.
    pullDeps Boolean
    Whether dependencies should also be installed.

    • install when false: dpkg -i package
    • install when true: apt-get update && apt-get -y install package.deb
    source V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSource
    A remote or local file. Structure is documented below.
    pullDeps boolean
    Whether dependencies should also be installed.

    • install when false: dpkg -i package
    • install when true: apt-get update && apt-get -y install package.deb
    source V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSource
    A remote or local file. Structure is documented below.
    pull_deps bool
    Whether dependencies should also be installed.

    • install when false: dpkg -i package
    • install when true: apt-get update && apt-get -y install package.deb
    source Property Map
    A remote or local file. Structure is documented below.
    pullDeps Boolean
    Whether dependencies should also be installed.

    • install when false: dpkg -i package
    • install when true: apt-get update && apt-get -y install package.deb

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSource, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceArgs

    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    LocalPath string
    A local path within the VM to use.
    Remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceRemote
    Specifies a file available via some URI. Structure is documented below.
    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    LocalPath string
    A local path within the VM to use.
    Remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceRemote
    Specifies a file available via some URI. Structure is documented below.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    localPath String
    A local path within the VM to use.
    remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceRemote
    Specifies a file available via some URI. Structure is documented below.
    allowInsecure boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    localPath string
    A local path within the VM to use.
    remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceRemote
    Specifies a file available via some URI. Structure is documented below.
    allow_insecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    local_path str
    A local path within the VM to use.
    remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceRemote
    Specifies a file available via some URI. Structure is documented below.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs Property Map
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    localPath String
    A local path within the VM to use.
    remote Property Map
    Specifies a file available via some URI. Structure is documented below.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceGcs, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceGcsArgs

    Bucket string
    Required. Bucket of the Cloud Storage object.
    Object string
    Required. Name of the Cloud Storage object.
    Generation string
    Generation number of the Cloud Storage object.
    Bucket string
    Required. Bucket of the Cloud Storage object.
    Object string
    Required. Name of the Cloud Storage object.
    Generation string
    Generation number of the Cloud Storage object.
    bucket String
    Required. Bucket of the Cloud Storage object.
    object String
    Required. Name of the Cloud Storage object.
    generation String
    Generation number of the Cloud Storage object.
    bucket string
    Required. Bucket of the Cloud Storage object.
    object string
    Required. Name of the Cloud Storage object.
    generation string
    Generation number of the Cloud Storage object.
    bucket str
    Required. Bucket of the Cloud Storage object.
    object str
    Required. Name of the Cloud Storage object.
    generation str
    Generation number of the Cloud Storage object.
    bucket String
    Required. Bucket of the Cloud Storage object.
    object String
    Required. Name of the Cloud Storage object.
    generation String
    Generation number of the Cloud Storage object.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceRemote, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceRemoteArgs

    Uri string
    Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    Uri string
    Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    uri String
    Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.
    uri string
    Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum string
    SHA256 checksum of the remote file.
    uri str
    Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256_checksum str
    SHA256 checksum of the remote file.
    uri String
    Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgGooget, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgGoogetArgs

    Name string
    Required. Package name.
    Name string
    Required. Package name.
    name String
    Required. Package name.
    name string
    Required. Package name.
    name str
    Required. Package name.
    name String
    Required. Package name.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsi, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiArgs

    Source V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSource
    A remote or local file. Structure is documented below.
    Properties List<string>
    Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.
    Source V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSource
    A remote or local file. Structure is documented below.
    Properties []string
    Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.
    source V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSource
    A remote or local file. Structure is documented below.
    properties List<String>
    Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.
    source V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSource
    A remote or local file. Structure is documented below.
    properties string[]
    Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.
    source V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSource
    A remote or local file. Structure is documented below.
    properties Sequence[str]
    Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.
    source Property Map
    A remote or local file. Structure is documented below.
    properties List<String>
    Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSource, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceArgs

    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    LocalPath string
    A local path within the VM to use.
    Remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceRemote
    Specifies a file available via some URI. Structure is documented below.
    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    LocalPath string
    A local path within the VM to use.
    Remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceRemote
    Specifies a file available via some URI. Structure is documented below.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    localPath String
    A local path within the VM to use.
    remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceRemote
    Specifies a file available via some URI. Structure is documented below.
    allowInsecure boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    localPath string
    A local path within the VM to use.
    remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceRemote
    Specifies a file available via some URI. Structure is documented below.
    allow_insecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    local_path str
    A local path within the VM to use.
    remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceRemote
    Specifies a file available via some URI. Structure is documented below.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs Property Map
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    localPath String
    A local path within the VM to use.
    remote Property Map
    Specifies a file available via some URI. Structure is documented below.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceGcs, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceGcsArgs

    Bucket string
    Required. Bucket of the Cloud Storage object.
    Object string
    Required. Name of the Cloud Storage object.
    Generation string
    Generation number of the Cloud Storage object.
    Bucket string
    Required. Bucket of the Cloud Storage object.
    Object string
    Required. Name of the Cloud Storage object.
    Generation string
    Generation number of the Cloud Storage object.
    bucket String
    Required. Bucket of the Cloud Storage object.
    object String
    Required. Name of the Cloud Storage object.
    generation String
    Generation number of the Cloud Storage object.
    bucket string
    Required. Bucket of the Cloud Storage object.
    object string
    Required. Name of the Cloud Storage object.
    generation string
    Generation number of the Cloud Storage object.
    bucket str
    Required. Bucket of the Cloud Storage object.
    object str
    Required. Name of the Cloud Storage object.
    generation str
    Generation number of the Cloud Storage object.
    bucket String
    Required. Bucket of the Cloud Storage object.
    object String
    Required. Name of the Cloud Storage object.
    generation String
    Generation number of the Cloud Storage object.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceRemote, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceRemoteArgs

    Uri string
    Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    Uri string
    Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    uri String
    Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.
    uri string
    Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum string
    SHA256 checksum of the remote file.
    uri str
    Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256_checksum str
    SHA256 checksum of the remote file.
    uri String
    Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpm, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmArgs

    Source V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSource
    A remote or local file. Structure is documented below.
    PullDeps bool
    Whether dependencies should also be installed.

    • install when false: rpm --upgrade --replacepkgs package.rpm
    • install when true: yum -y install package.rpm or zypper -y install package.rpm
    Source V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSource
    A remote or local file. Structure is documented below.
    PullDeps bool
    Whether dependencies should also be installed.

    • install when false: rpm --upgrade --replacepkgs package.rpm
    • install when true: yum -y install package.rpm or zypper -y install package.rpm
    source V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSource
    A remote or local file. Structure is documented below.
    pullDeps Boolean
    Whether dependencies should also be installed.

    • install when false: rpm --upgrade --replacepkgs package.rpm
    • install when true: yum -y install package.rpm or zypper -y install package.rpm
    source V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSource
    A remote or local file. Structure is documented below.
    pullDeps boolean
    Whether dependencies should also be installed.

    • install when false: rpm --upgrade --replacepkgs package.rpm
    • install when true: yum -y install package.rpm or zypper -y install package.rpm
    source V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSource
    A remote or local file. Structure is documented below.
    pull_deps bool
    Whether dependencies should also be installed.

    • install when false: rpm --upgrade --replacepkgs package.rpm
    • install when true: yum -y install package.rpm or zypper -y install package.rpm
    source Property Map
    A remote or local file. Structure is documented below.
    pullDeps Boolean
    Whether dependencies should also be installed.

    • install when false: rpm --upgrade --replacepkgs package.rpm
    • install when true: yum -y install package.rpm or zypper -y install package.rpm

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSource, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceArgs

    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    LocalPath string
    A local path within the VM to use.
    Remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceRemote
    Specifies a file available via some URI. Structure is documented below.
    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    LocalPath string
    A local path within the VM to use.
    Remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceRemote
    Specifies a file available via some URI. Structure is documented below.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    localPath String
    A local path within the VM to use.
    remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceRemote
    Specifies a file available via some URI. Structure is documented below.
    allowInsecure boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    localPath string
    A local path within the VM to use.
    remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceRemote
    Specifies a file available via some URI. Structure is documented below.
    allow_insecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    local_path str
    A local path within the VM to use.
    remote V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceRemote
    Specifies a file available via some URI. Structure is documented below.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs Property Map
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    localPath String
    A local path within the VM to use.
    remote Property Map
    Specifies a file available via some URI. Structure is documented below.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceGcs, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceGcsArgs

    Bucket string
    Required. Bucket of the Cloud Storage object.
    Object string
    Required. Name of the Cloud Storage object.
    Generation string
    Generation number of the Cloud Storage object.
    Bucket string
    Required. Bucket of the Cloud Storage object.
    Object string
    Required. Name of the Cloud Storage object.
    Generation string
    Generation number of the Cloud Storage object.
    bucket String
    Required. Bucket of the Cloud Storage object.
    object String
    Required. Name of the Cloud Storage object.
    generation String
    Generation number of the Cloud Storage object.
    bucket string
    Required. Bucket of the Cloud Storage object.
    object string
    Required. Name of the Cloud Storage object.
    generation string
    Generation number of the Cloud Storage object.
    bucket str
    Required. Bucket of the Cloud Storage object.
    object str
    Required. Name of the Cloud Storage object.
    generation str
    Generation number of the Cloud Storage object.
    bucket String
    Required. Bucket of the Cloud Storage object.
    object String
    Required. Name of the Cloud Storage object.
    generation String
    Generation number of the Cloud Storage object.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceRemote, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceRemoteArgs

    Uri string
    Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    Uri string
    Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    uri String
    Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.
    uri string
    Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum string
    SHA256 checksum of the remote file.
    uri str
    Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256_checksum str
    SHA256 checksum of the remote file.
    uri String
    Required. URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgYum, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgYumArgs

    Name string
    Required. Package name.
    Name string
    Required. Package name.
    name String
    Required. Package name.
    name string
    Required. Package name.
    name str
    Required. Package name.
    name String
    Required. Package name.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgZypper, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgZypperArgs

    Name string
    Required. Package name.
    Name string
    Required. Package name.
    name String
    Required. Package name.
    name string
    Required. Package name.
    name str
    Required. Package name.
    name String
    Required. Package name.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepository, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryArgs

    Apt V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryApt
    Represents a single apt package repository. These will be added to a repo file that will be managed at /etc/apt/sources.list.d/google_osconfig.list. Structure is documented below.
    Goo V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryGoo
    Represents a Goo package repository. These are added to a repo file that is managed at C:/ProgramData/GooGet/repos/google_osconfig.repo. Structure is documented below.
    Yum V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryYum
    Represents a single yum package repository. These are added to a repo file that is managed at /etc/yum.repos.d/google_osconfig.repo. Structure is documented below.
    Zypper V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryZypper
    Represents a single zypper package repository. These are added to a repo file that is managed at /etc/zypp/repos.d/google_osconfig.repo. Structure is documented below.
    Apt V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryApt
    Represents a single apt package repository. These will be added to a repo file that will be managed at /etc/apt/sources.list.d/google_osconfig.list. Structure is documented below.
    Goo V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryGoo
    Represents a Goo package repository. These are added to a repo file that is managed at C:/ProgramData/GooGet/repos/google_osconfig.repo. Structure is documented below.
    Yum V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryYum
    Represents a single yum package repository. These are added to a repo file that is managed at /etc/yum.repos.d/google_osconfig.repo. Structure is documented below.
    Zypper V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryZypper
    Represents a single zypper package repository. These are added to a repo file that is managed at /etc/zypp/repos.d/google_osconfig.repo. Structure is documented below.
    apt V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryApt
    Represents a single apt package repository. These will be added to a repo file that will be managed at /etc/apt/sources.list.d/google_osconfig.list. Structure is documented below.
    goo V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryGoo
    Represents a Goo package repository. These are added to a repo file that is managed at C:/ProgramData/GooGet/repos/google_osconfig.repo. Structure is documented below.
    yum V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryYum
    Represents a single yum package repository. These are added to a repo file that is managed at /etc/yum.repos.d/google_osconfig.repo. Structure is documented below.
    zypper V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryZypper
    Represents a single zypper package repository. These are added to a repo file that is managed at /etc/zypp/repos.d/google_osconfig.repo. Structure is documented below.
    apt V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryApt
    Represents a single apt package repository. These will be added to a repo file that will be managed at /etc/apt/sources.list.d/google_osconfig.list. Structure is documented below.
    goo V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryGoo
    Represents a Goo package repository. These are added to a repo file that is managed at C:/ProgramData/GooGet/repos/google_osconfig.repo. Structure is documented below.
    yum V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryYum
    Represents a single yum package repository. These are added to a repo file that is managed at /etc/yum.repos.d/google_osconfig.repo. Structure is documented below.
    zypper V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryZypper
    Represents a single zypper package repository. These are added to a repo file that is managed at /etc/zypp/repos.d/google_osconfig.repo. Structure is documented below.
    apt V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryApt
    Represents a single apt package repository. These will be added to a repo file that will be managed at /etc/apt/sources.list.d/google_osconfig.list. Structure is documented below.
    goo V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryGoo
    Represents a Goo package repository. These are added to a repo file that is managed at C:/ProgramData/GooGet/repos/google_osconfig.repo. Structure is documented below.
    yum V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryYum
    Represents a single yum package repository. These are added to a repo file that is managed at /etc/yum.repos.d/google_osconfig.repo. Structure is documented below.
    zypper V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryZypper
    Represents a single zypper package repository. These are added to a repo file that is managed at /etc/zypp/repos.d/google_osconfig.repo. Structure is documented below.
    apt Property Map
    Represents a single apt package repository. These will be added to a repo file that will be managed at /etc/apt/sources.list.d/google_osconfig.list. Structure is documented below.
    goo Property Map
    Represents a Goo package repository. These are added to a repo file that is managed at C:/ProgramData/GooGet/repos/google_osconfig.repo. Structure is documented below.
    yum Property Map
    Represents a single yum package repository. These are added to a repo file that is managed at /etc/yum.repos.d/google_osconfig.repo. Structure is documented below.
    zypper Property Map
    Represents a single zypper package repository. These are added to a repo file that is managed at /etc/zypp/repos.d/google_osconfig.repo. Structure is documented below.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryApt, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryAptArgs

    ArchiveType string
    Required. Type of archive files in this repository. Possible values: ARCHIVE_TYPE_UNSPECIFIED DEB DEB_SRC
    Components List<string>
    Required. List of components for this repository. Must contain at least one item.
    Distribution string
    Required. Distribution of this repository.
    Uri string
    Required. URI for this repository.
    GpgKey string
    URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
    ArchiveType string
    Required. Type of archive files in this repository. Possible values: ARCHIVE_TYPE_UNSPECIFIED DEB DEB_SRC
    Components []string
    Required. List of components for this repository. Must contain at least one item.
    Distribution string
    Required. Distribution of this repository.
    Uri string
    Required. URI for this repository.
    GpgKey string
    URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
    archiveType String
    Required. Type of archive files in this repository. Possible values: ARCHIVE_TYPE_UNSPECIFIED DEB DEB_SRC
    components List<String>
    Required. List of components for this repository. Must contain at least one item.
    distribution String
    Required. Distribution of this repository.
    uri String
    Required. URI for this repository.
    gpgKey String
    URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
    archiveType string
    Required. Type of archive files in this repository. Possible values: ARCHIVE_TYPE_UNSPECIFIED DEB DEB_SRC
    components string[]
    Required. List of components for this repository. Must contain at least one item.
    distribution string
    Required. Distribution of this repository.
    uri string
    Required. URI for this repository.
    gpgKey string
    URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
    archive_type str
    Required. Type of archive files in this repository. Possible values: ARCHIVE_TYPE_UNSPECIFIED DEB DEB_SRC
    components Sequence[str]
    Required. List of components for this repository. Must contain at least one item.
    distribution str
    Required. Distribution of this repository.
    uri str
    Required. URI for this repository.
    gpg_key str
    URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
    archiveType String
    Required. Type of archive files in this repository. Possible values: ARCHIVE_TYPE_UNSPECIFIED DEB DEB_SRC
    components List<String>
    Required. List of components for this repository. Must contain at least one item.
    distribution String
    Required. Distribution of this repository.
    uri String
    Required. URI for this repository.
    gpgKey String
    URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryGoo, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryGooArgs

    Name string
    Required. The name of the repository.
    Url string
    Required. The url of the repository.
    Name string
    Required. The name of the repository.
    Url string
    Required. The url of the repository.
    name String
    Required. The name of the repository.
    url String
    Required. The url of the repository.
    name string
    Required. The name of the repository.
    url string
    Required. The url of the repository.
    name str
    Required. The name of the repository.
    url str
    Required. The url of the repository.
    name String
    Required. The name of the repository.
    url String
    Required. The url of the repository.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryYum, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryYumArgs

    BaseUrl string
    Required. The location of the repository directory.
    Id string
    Required. A one word, unique name for this repository. This is the repo id in the yum config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for resource conflicts.
    DisplayName string
    The display name of the repository.
    GpgKeys List<string>
    URIs of GPG keys.
    BaseUrl string
    Required. The location of the repository directory.
    Id string
    Required. A one word, unique name for this repository. This is the repo id in the yum config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for resource conflicts.
    DisplayName string
    The display name of the repository.
    GpgKeys []string
    URIs of GPG keys.
    baseUrl String
    Required. The location of the repository directory.
    id String
    Required. A one word, unique name for this repository. This is the repo id in the yum config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for resource conflicts.
    displayName String
    The display name of the repository.
    gpgKeys List<String>
    URIs of GPG keys.
    baseUrl string
    Required. The location of the repository directory.
    id string
    Required. A one word, unique name for this repository. This is the repo id in the yum config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for resource conflicts.
    displayName string
    The display name of the repository.
    gpgKeys string[]
    URIs of GPG keys.
    base_url str
    Required. The location of the repository directory.
    id str
    Required. A one word, unique name for this repository. This is the repo id in the yum config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for resource conflicts.
    display_name str
    The display name of the repository.
    gpg_keys Sequence[str]
    URIs of GPG keys.
    baseUrl String
    Required. The location of the repository directory.
    id String
    Required. A one word, unique name for this repository. This is the repo id in the yum config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for resource conflicts.
    displayName String
    The display name of the repository.
    gpgKeys List<String>
    URIs of GPG keys.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryZypper, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryZypperArgs

    BaseUrl string
    Required. The location of the repository directory.
    Id string
    Required. A one word, unique name for this repository. This is the repo id in the zypper config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
    DisplayName string
    The display name of the repository.
    GpgKeys List<string>
    URIs of GPG keys.
    BaseUrl string
    Required. The location of the repository directory.
    Id string
    Required. A one word, unique name for this repository. This is the repo id in the zypper config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
    DisplayName string
    The display name of the repository.
    GpgKeys []string
    URIs of GPG keys.
    baseUrl String
    Required. The location of the repository directory.
    id String
    Required. A one word, unique name for this repository. This is the repo id in the zypper config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
    displayName String
    The display name of the repository.
    gpgKeys List<String>
    URIs of GPG keys.
    baseUrl string
    Required. The location of the repository directory.
    id string
    Required. A one word, unique name for this repository. This is the repo id in the zypper config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
    displayName string
    The display name of the repository.
    gpgKeys string[]
    URIs of GPG keys.
    base_url str
    Required. The location of the repository directory.
    id str
    Required. A one word, unique name for this repository. This is the repo id in the zypper config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
    display_name str
    The display name of the repository.
    gpg_keys Sequence[str]
    URIs of GPG keys.
    baseUrl String
    Required. The location of the repository directory.
    id String
    Required. A one word, unique name for this repository. This is the repo id in the zypper config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
    displayName String
    The display name of the repository.
    gpgKeys List<String>
    URIs of GPG keys.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRollout, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutArgs

    DisruptionBudget V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudget
    Message encapsulating a value that can be either absolute ("fixed") or relative ("percent") to a value. Structure is documented below.
    MinWaitDuration string
    Required. This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.
    DisruptionBudget V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudget
    Message encapsulating a value that can be either absolute ("fixed") or relative ("percent") to a value. Structure is documented below.
    MinWaitDuration string
    Required. This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.
    disruptionBudget V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudget
    Message encapsulating a value that can be either absolute ("fixed") or relative ("percent") to a value. Structure is documented below.
    minWaitDuration String
    Required. This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.
    disruptionBudget V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudget
    Message encapsulating a value that can be either absolute ("fixed") or relative ("percent") to a value. Structure is documented below.
    minWaitDuration string
    Required. This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.
    disruption_budget V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudget
    Message encapsulating a value that can be either absolute ("fixed") or relative ("percent") to a value. Structure is documented below.
    min_wait_duration str
    Required. This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.
    disruptionBudget Property Map
    Message encapsulating a value that can be either absolute ("fixed") or relative ("percent") to a value. Structure is documented below.
    minWaitDuration String
    Required. This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.

    V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudget, V2PolicyOrchestratorOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudgetArgs

    Fixed int
    Specifies a fixed value.
    Percent int
    Specifies the relative value defined as a percentage, which will be multiplied by a reference value.


    Fixed int
    Specifies a fixed value.
    Percent int
    Specifies the relative value defined as a percentage, which will be multiplied by a reference value.


    fixed Integer
    Specifies a fixed value.
    percent Integer
    Specifies the relative value defined as a percentage, which will be multiplied by a reference value.


    fixed number
    Specifies a fixed value.
    percent number
    Specifies the relative value defined as a percentage, which will be multiplied by a reference value.


    fixed int
    Specifies a fixed value.
    percent int
    Specifies the relative value defined as a percentage, which will be multiplied by a reference value.


    fixed Number
    Specifies a fixed value.
    percent Number
    Specifies the relative value defined as a percentage, which will be multiplied by a reference value.


    V2PolicyOrchestratorOrchestrationScope, V2PolicyOrchestratorOrchestrationScopeArgs

    Selectors List<V2PolicyOrchestratorOrchestrationScopeSelector>
    Optional. Selectors of the orchestration scope. There is a logical AND between each selector defined. When there is no explicit ResourceHierarchySelector selector specified, the scope is by default bounded to the parent of the policy orchestrator resource. Structure is documented below.
    Selectors []V2PolicyOrchestratorOrchestrationScopeSelector
    Optional. Selectors of the orchestration scope. There is a logical AND between each selector defined. When there is no explicit ResourceHierarchySelector selector specified, the scope is by default bounded to the parent of the policy orchestrator resource. Structure is documented below.
    selectors List<V2PolicyOrchestratorOrchestrationScopeSelector>
    Optional. Selectors of the orchestration scope. There is a logical AND between each selector defined. When there is no explicit ResourceHierarchySelector selector specified, the scope is by default bounded to the parent of the policy orchestrator resource. Structure is documented below.
    selectors V2PolicyOrchestratorOrchestrationScopeSelector[]
    Optional. Selectors of the orchestration scope. There is a logical AND between each selector defined. When there is no explicit ResourceHierarchySelector selector specified, the scope is by default bounded to the parent of the policy orchestrator resource. Structure is documented below.
    selectors Sequence[V2PolicyOrchestratorOrchestrationScopeSelector]
    Optional. Selectors of the orchestration scope. There is a logical AND between each selector defined. When there is no explicit ResourceHierarchySelector selector specified, the scope is by default bounded to the parent of the policy orchestrator resource. Structure is documented below.
    selectors List<Property Map>
    Optional. Selectors of the orchestration scope. There is a logical AND between each selector defined. When there is no explicit ResourceHierarchySelector selector specified, the scope is by default bounded to the parent of the policy orchestrator resource. Structure is documented below.

    V2PolicyOrchestratorOrchestrationScopeSelector, V2PolicyOrchestratorOrchestrationScopeSelectorArgs

    LocationSelector V2PolicyOrchestratorOrchestrationScopeSelectorLocationSelector
    Selector containing locations in scope. Structure is documented below.
    ResourceHierarchySelector V2PolicyOrchestratorOrchestrationScopeSelectorResourceHierarchySelector
    Selector containing Cloud Resource Manager resource hierarchy nodes. Structure is documented below.
    LocationSelector V2PolicyOrchestratorOrchestrationScopeSelectorLocationSelector
    Selector containing locations in scope. Structure is documented below.
    ResourceHierarchySelector V2PolicyOrchestratorOrchestrationScopeSelectorResourceHierarchySelector
    Selector containing Cloud Resource Manager resource hierarchy nodes. Structure is documented below.
    locationSelector V2PolicyOrchestratorOrchestrationScopeSelectorLocationSelector
    Selector containing locations in scope. Structure is documented below.
    resourceHierarchySelector V2PolicyOrchestratorOrchestrationScopeSelectorResourceHierarchySelector
    Selector containing Cloud Resource Manager resource hierarchy nodes. Structure is documented below.
    locationSelector V2PolicyOrchestratorOrchestrationScopeSelectorLocationSelector
    Selector containing locations in scope. Structure is documented below.
    resourceHierarchySelector V2PolicyOrchestratorOrchestrationScopeSelectorResourceHierarchySelector
    Selector containing Cloud Resource Manager resource hierarchy nodes. Structure is documented below.
    location_selector V2PolicyOrchestratorOrchestrationScopeSelectorLocationSelector
    Selector containing locations in scope. Structure is documented below.
    resource_hierarchy_selector V2PolicyOrchestratorOrchestrationScopeSelectorResourceHierarchySelector
    Selector containing Cloud Resource Manager resource hierarchy nodes. Structure is documented below.
    locationSelector Property Map
    Selector containing locations in scope. Structure is documented below.
    resourceHierarchySelector Property Map
    Selector containing Cloud Resource Manager resource hierarchy nodes. Structure is documented below.

    V2PolicyOrchestratorOrchestrationScopeSelectorLocationSelector, V2PolicyOrchestratorOrchestrationScopeSelectorLocationSelectorArgs

    IncludedLocations List<string>
    Optional. Names of the locations in scope. Format: us-central1-a
    IncludedLocations []string
    Optional. Names of the locations in scope. Format: us-central1-a
    includedLocations List<String>
    Optional. Names of the locations in scope. Format: us-central1-a
    includedLocations string[]
    Optional. Names of the locations in scope. Format: us-central1-a
    included_locations Sequence[str]
    Optional. Names of the locations in scope. Format: us-central1-a
    includedLocations List<String>
    Optional. Names of the locations in scope. Format: us-central1-a

    V2PolicyOrchestratorOrchestrationScopeSelectorResourceHierarchySelector, V2PolicyOrchestratorOrchestrationScopeSelectorResourceHierarchySelectorArgs

    IncludedFolders List<string>
    Optional. Names of the folders in scope. Format: folders/{folder_id}
    IncludedProjects List<string>
    Optional. Names of the projects in scope. Format: projects/{project_number}
    IncludedFolders []string
    Optional. Names of the folders in scope. Format: folders/{folder_id}
    IncludedProjects []string
    Optional. Names of the projects in scope. Format: projects/{project_number}
    includedFolders List<String>
    Optional. Names of the folders in scope. Format: folders/{folder_id}
    includedProjects List<String>
    Optional. Names of the projects in scope. Format: projects/{project_number}
    includedFolders string[]
    Optional. Names of the folders in scope. Format: folders/{folder_id}
    includedProjects string[]
    Optional. Names of the projects in scope. Format: projects/{project_number}
    included_folders Sequence[str]
    Optional. Names of the folders in scope. Format: folders/{folder_id}
    included_projects Sequence[str]
    Optional. Names of the projects in scope. Format: projects/{project_number}
    includedFolders List<String>
    Optional. Names of the folders in scope. Format: folders/{folder_id}
    includedProjects List<String>
    Optional. Names of the projects in scope. Format: projects/{project_number}

    V2PolicyOrchestratorOrchestrationState, V2PolicyOrchestratorOrchestrationStateArgs

    CurrentIterationStates List<V2PolicyOrchestratorOrchestrationStateCurrentIterationState>
    (Output) Describes the state of a single iteration of the orchestrator. Structure is documented below.
    PreviousIterationState V2PolicyOrchestratorOrchestrationStatePreviousIterationState
    Describes the state of a single iteration of the orchestrator. Structure is documented below.
    CurrentIterationStates []V2PolicyOrchestratorOrchestrationStateCurrentIterationState
    (Output) Describes the state of a single iteration of the orchestrator. Structure is documented below.
    PreviousIterationState V2PolicyOrchestratorOrchestrationStatePreviousIterationState
    Describes the state of a single iteration of the orchestrator. Structure is documented below.
    currentIterationStates List<V2PolicyOrchestratorOrchestrationStateCurrentIterationState>
    (Output) Describes the state of a single iteration of the orchestrator. Structure is documented below.
    previousIterationState V2PolicyOrchestratorOrchestrationStatePreviousIterationState
    Describes the state of a single iteration of the orchestrator. Structure is documented below.
    currentIterationStates V2PolicyOrchestratorOrchestrationStateCurrentIterationState[]
    (Output) Describes the state of a single iteration of the orchestrator. Structure is documented below.
    previousIterationState V2PolicyOrchestratorOrchestrationStatePreviousIterationState
    Describes the state of a single iteration of the orchestrator. Structure is documented below.
    current_iteration_states Sequence[V2PolicyOrchestratorOrchestrationStateCurrentIterationState]
    (Output) Describes the state of a single iteration of the orchestrator. Structure is documented below.
    previous_iteration_state V2PolicyOrchestratorOrchestrationStatePreviousIterationState
    Describes the state of a single iteration of the orchestrator. Structure is documented below.
    currentIterationStates List<Property Map>
    (Output) Describes the state of a single iteration of the orchestrator. Structure is documented below.
    previousIterationState Property Map
    Describes the state of a single iteration of the orchestrator. Structure is documented below.

    V2PolicyOrchestratorOrchestrationStateCurrentIterationState, V2PolicyOrchestratorOrchestrationStateCurrentIterationStateArgs

    Error V2PolicyOrchestratorOrchestrationStateCurrentIterationStateError
    The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide. Structure is documented below.
    FailedActions string
    (Output) Output only. Number of orchestration actions which failed so far. For more details, query the Cloud Logs.
    FinishTime string
    (Output) Output only. Finish time of the wave iteration.
    PerformedActions string
    (Output) Output only. Overall number of actions done by the orchestrator so far.
    Progress double
    (Output) Output only. An estimated percentage of the progress. Number between 0 and 100.
    RolloutResource string
    (Output) Output only. Handle to the Progressive Rollouts API rollout resource, which contains detailed information about a particular orchestration iteration.
    StartTime string
    (Output) Output only. Start time of the wave iteration.
    State string
    (Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    Error V2PolicyOrchestratorOrchestrationStateCurrentIterationStateError
    The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide. Structure is documented below.
    FailedActions string
    (Output) Output only. Number of orchestration actions which failed so far. For more details, query the Cloud Logs.
    FinishTime string
    (Output) Output only. Finish time of the wave iteration.
    PerformedActions string
    (Output) Output only. Overall number of actions done by the orchestrator so far.
    Progress float64
    (Output) Output only. An estimated percentage of the progress. Number between 0 and 100.
    RolloutResource string
    (Output) Output only. Handle to the Progressive Rollouts API rollout resource, which contains detailed information about a particular orchestration iteration.
    StartTime string
    (Output) Output only. Start time of the wave iteration.
    State string
    (Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    error V2PolicyOrchestratorOrchestrationStateCurrentIterationStateError
    The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide. Structure is documented below.
    failedActions String
    (Output) Output only. Number of orchestration actions which failed so far. For more details, query the Cloud Logs.
    finishTime String
    (Output) Output only. Finish time of the wave iteration.
    performedActions String
    (Output) Output only. Overall number of actions done by the orchestrator so far.
    progress Double
    (Output) Output only. An estimated percentage of the progress. Number between 0 and 100.
    rolloutResource String
    (Output) Output only. Handle to the Progressive Rollouts API rollout resource, which contains detailed information about a particular orchestration iteration.
    startTime String
    (Output) Output only. Start time of the wave iteration.
    state String
    (Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    error V2PolicyOrchestratorOrchestrationStateCurrentIterationStateError
    The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide. Structure is documented below.
    failedActions string
    (Output) Output only. Number of orchestration actions which failed so far. For more details, query the Cloud Logs.
    finishTime string
    (Output) Output only. Finish time of the wave iteration.
    performedActions string
    (Output) Output only. Overall number of actions done by the orchestrator so far.
    progress number
    (Output) Output only. An estimated percentage of the progress. Number between 0 and 100.
    rolloutResource string
    (Output) Output only. Handle to the Progressive Rollouts API rollout resource, which contains detailed information about a particular orchestration iteration.
    startTime string
    (Output) Output only. Start time of the wave iteration.
    state string
    (Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    error V2PolicyOrchestratorOrchestrationStateCurrentIterationStateError
    The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide. Structure is documented below.
    failed_actions str
    (Output) Output only. Number of orchestration actions which failed so far. For more details, query the Cloud Logs.
    finish_time str
    (Output) Output only. Finish time of the wave iteration.
    performed_actions str
    (Output) Output only. Overall number of actions done by the orchestrator so far.
    progress float
    (Output) Output only. An estimated percentage of the progress. Number between 0 and 100.
    rollout_resource str
    (Output) Output only. Handle to the Progressive Rollouts API rollout resource, which contains detailed information about a particular orchestration iteration.
    start_time str
    (Output) Output only. Start time of the wave iteration.
    state str
    (Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    error Property Map
    The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide. Structure is documented below.
    failedActions String
    (Output) Output only. Number of orchestration actions which failed so far. For more details, query the Cloud Logs.
    finishTime String
    (Output) Output only. Finish time of the wave iteration.
    performedActions String
    (Output) Output only. Overall number of actions done by the orchestrator so far.
    progress Number
    (Output) Output only. An estimated percentage of the progress. Number between 0 and 100.
    rolloutResource String
    (Output) Output only. Handle to the Progressive Rollouts API rollout resource, which contains detailed information about a particular orchestration iteration.
    startTime String
    (Output) Output only. Start time of the wave iteration.
    state String
    (Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN

    V2PolicyOrchestratorOrchestrationStateCurrentIterationStateError, V2PolicyOrchestratorOrchestrationStateCurrentIterationStateErrorArgs

    Code int
    The status code, which should be an enum value of google.rpc.Code.
    Details List<V2PolicyOrchestratorOrchestrationStateCurrentIterationStateErrorDetail>
    A list of messages that carry the error details. There is a common set of message types for APIs to use. Structure is documented below.
    Message string
    A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
    Code int
    The status code, which should be an enum value of google.rpc.Code.
    Details []V2PolicyOrchestratorOrchestrationStateCurrentIterationStateErrorDetail
    A list of messages that carry the error details. There is a common set of message types for APIs to use. Structure is documented below.
    Message string
    A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
    code Integer
    The status code, which should be an enum value of google.rpc.Code.
    details List<V2PolicyOrchestratorOrchestrationStateCurrentIterationStateErrorDetail>
    A list of messages that carry the error details. There is a common set of message types for APIs to use. Structure is documented below.
    message String
    A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
    code number
    The status code, which should be an enum value of google.rpc.Code.
    details V2PolicyOrchestratorOrchestrationStateCurrentIterationStateErrorDetail[]
    A list of messages that carry the error details. There is a common set of message types for APIs to use. Structure is documented below.
    message string
    A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
    code int
    The status code, which should be an enum value of google.rpc.Code.
    details Sequence[V2PolicyOrchestratorOrchestrationStateCurrentIterationStateErrorDetail]
    A list of messages that carry the error details. There is a common set of message types for APIs to use. Structure is documented below.
    message str
    A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
    code Number
    The status code, which should be an enum value of google.rpc.Code.
    details List<Property Map>
    A list of messages that carry the error details. There is a common set of message types for APIs to use. Structure is documented below.
    message String
    A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.

    V2PolicyOrchestratorOrchestrationStateCurrentIterationStateErrorDetail, V2PolicyOrchestratorOrchestrationStateCurrentIterationStateErrorDetailArgs

    TypeUrl string
    A URL/resource name that uniquely identifies the type of the serialized protocol buffer message
    Value string
    (Optional)
    TypeUrl string
    A URL/resource name that uniquely identifies the type of the serialized protocol buffer message
    Value string
    (Optional)
    typeUrl String
    A URL/resource name that uniquely identifies the type of the serialized protocol buffer message
    value String
    (Optional)
    typeUrl string
    A URL/resource name that uniquely identifies the type of the serialized protocol buffer message
    value string
    (Optional)
    type_url str
    A URL/resource name that uniquely identifies the type of the serialized protocol buffer message
    value str
    (Optional)
    typeUrl String
    A URL/resource name that uniquely identifies the type of the serialized protocol buffer message
    value String
    (Optional)

    V2PolicyOrchestratorOrchestrationStatePreviousIterationState, V2PolicyOrchestratorOrchestrationStatePreviousIterationStateArgs

    Error V2PolicyOrchestratorOrchestrationStatePreviousIterationStateError
    The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide. Structure is documented below.
    FailedActions string
    (Output) Output only. Number of orchestration actions which failed so far. For more details, query the Cloud Logs.
    FinishTime string
    (Output) Output only. Finish time of the wave iteration.
    PerformedActions string
    (Output) Output only. Overall number of actions done by the orchestrator so far.
    Progress double
    (Output) Output only. An estimated percentage of the progress. Number between 0 and 100.
    RolloutResource string
    (Output) Output only. Handle to the Progressive Rollouts API rollout resource, which contains detailed information about a particular orchestration iteration.
    StartTime string
    (Output) Output only. Start time of the wave iteration.
    State string
    (Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    Error V2PolicyOrchestratorOrchestrationStatePreviousIterationStateError
    The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide. Structure is documented below.
    FailedActions string
    (Output) Output only. Number of orchestration actions which failed so far. For more details, query the Cloud Logs.
    FinishTime string
    (Output) Output only. Finish time of the wave iteration.
    PerformedActions string
    (Output) Output only. Overall number of actions done by the orchestrator so far.
    Progress float64
    (Output) Output only. An estimated percentage of the progress. Number between 0 and 100.
    RolloutResource string
    (Output) Output only. Handle to the Progressive Rollouts API rollout resource, which contains detailed information about a particular orchestration iteration.
    StartTime string
    (Output) Output only. Start time of the wave iteration.
    State string
    (Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    error V2PolicyOrchestratorOrchestrationStatePreviousIterationStateError
    The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide. Structure is documented below.
    failedActions String
    (Output) Output only. Number of orchestration actions which failed so far. For more details, query the Cloud Logs.
    finishTime String
    (Output) Output only. Finish time of the wave iteration.
    performedActions String
    (Output) Output only. Overall number of actions done by the orchestrator so far.
    progress Double
    (Output) Output only. An estimated percentage of the progress. Number between 0 and 100.
    rolloutResource String
    (Output) Output only. Handle to the Progressive Rollouts API rollout resource, which contains detailed information about a particular orchestration iteration.
    startTime String
    (Output) Output only. Start time of the wave iteration.
    state String
    (Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    error V2PolicyOrchestratorOrchestrationStatePreviousIterationStateError
    The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide. Structure is documented below.
    failedActions string
    (Output) Output only. Number of orchestration actions which failed so far. For more details, query the Cloud Logs.
    finishTime string
    (Output) Output only. Finish time of the wave iteration.
    performedActions string
    (Output) Output only. Overall number of actions done by the orchestrator so far.
    progress number
    (Output) Output only. An estimated percentage of the progress. Number between 0 and 100.
    rolloutResource string
    (Output) Output only. Handle to the Progressive Rollouts API rollout resource, which contains detailed information about a particular orchestration iteration.
    startTime string
    (Output) Output only. Start time of the wave iteration.
    state string
    (Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    error V2PolicyOrchestratorOrchestrationStatePreviousIterationStateError
    The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide. Structure is documented below.
    failed_actions str
    (Output) Output only. Number of orchestration actions which failed so far. For more details, query the Cloud Logs.
    finish_time str
    (Output) Output only. Finish time of the wave iteration.
    performed_actions str
    (Output) Output only. Overall number of actions done by the orchestrator so far.
    progress float
    (Output) Output only. An estimated percentage of the progress. Number between 0 and 100.
    rollout_resource str
    (Output) Output only. Handle to the Progressive Rollouts API rollout resource, which contains detailed information about a particular orchestration iteration.
    start_time str
    (Output) Output only. Start time of the wave iteration.
    state str
    (Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    error Property Map
    The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide. Structure is documented below.
    failedActions String
    (Output) Output only. Number of orchestration actions which failed so far. For more details, query the Cloud Logs.
    finishTime String
    (Output) Output only. Finish time of the wave iteration.
    performedActions String
    (Output) Output only. Overall number of actions done by the orchestrator so far.
    progress Number
    (Output) Output only. An estimated percentage of the progress. Number between 0 and 100.
    rolloutResource String
    (Output) Output only. Handle to the Progressive Rollouts API rollout resource, which contains detailed information about a particular orchestration iteration.
    startTime String
    (Output) Output only. Start time of the wave iteration.
    state String
    (Output) Output only. State of the iteration. Possible values: STATE_UNSPECIFIED PROCESSING COMPLETED FAILED CANCELLED UNKNOWN

    V2PolicyOrchestratorOrchestrationStatePreviousIterationStateError, V2PolicyOrchestratorOrchestrationStatePreviousIterationStateErrorArgs

    Code int
    The status code, which should be an enum value of google.rpc.Code.
    Details List<V2PolicyOrchestratorOrchestrationStatePreviousIterationStateErrorDetail>
    A list of messages that carry the error details. There is a common set of message types for APIs to use. Structure is documented below.
    Message string
    A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
    Code int
    The status code, which should be an enum value of google.rpc.Code.
    Details []V2PolicyOrchestratorOrchestrationStatePreviousIterationStateErrorDetail
    A list of messages that carry the error details. There is a common set of message types for APIs to use. Structure is documented below.
    Message string
    A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
    code Integer
    The status code, which should be an enum value of google.rpc.Code.
    details List<V2PolicyOrchestratorOrchestrationStatePreviousIterationStateErrorDetail>
    A list of messages that carry the error details. There is a common set of message types for APIs to use. Structure is documented below.
    message String
    A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
    code number
    The status code, which should be an enum value of google.rpc.Code.
    details V2PolicyOrchestratorOrchestrationStatePreviousIterationStateErrorDetail[]
    A list of messages that carry the error details. There is a common set of message types for APIs to use. Structure is documented below.
    message string
    A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
    code int
    The status code, which should be an enum value of google.rpc.Code.
    details Sequence[V2PolicyOrchestratorOrchestrationStatePreviousIterationStateErrorDetail]
    A list of messages that carry the error details. There is a common set of message types for APIs to use. Structure is documented below.
    message str
    A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
    code Number
    The status code, which should be an enum value of google.rpc.Code.
    details List<Property Map>
    A list of messages that carry the error details. There is a common set of message types for APIs to use. Structure is documented below.
    message String
    A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.

    V2PolicyOrchestratorOrchestrationStatePreviousIterationStateErrorDetail, V2PolicyOrchestratorOrchestrationStatePreviousIterationStateErrorDetailArgs

    TypeUrl string
    A URL/resource name that uniquely identifies the type of the serialized protocol buffer message
    Value string
    (Optional)
    TypeUrl string
    A URL/resource name that uniquely identifies the type of the serialized protocol buffer message
    Value string
    (Optional)
    typeUrl String
    A URL/resource name that uniquely identifies the type of the serialized protocol buffer message
    value String
    (Optional)
    typeUrl string
    A URL/resource name that uniquely identifies the type of the serialized protocol buffer message
    value string
    (Optional)
    type_url str
    A URL/resource name that uniquely identifies the type of the serialized protocol buffer message
    value str
    (Optional)
    typeUrl String
    A URL/resource name that uniquely identifies the type of the serialized protocol buffer message
    value String
    (Optional)

    Import

    PolicyOrchestrator can be imported using any of these accepted formats:

    • projects/{{project}}/locations/global/policyOrchestrators/{{policy_orchestrator_id}}

    • {{project}}/{{policy_orchestrator_id}}

    • {{policy_orchestrator_id}}

    When using the pulumi import command, PolicyOrchestrator can be imported using one of the formats above. For example:

    $ pulumi import gcp:osconfig/v2PolicyOrchestrator:V2PolicyOrchestrator default projects/{{project}}/locations/global/policyOrchestrators/{{policy_orchestrator_id}}
    
    $ pulumi import gcp:osconfig/v2PolicyOrchestrator:V2PolicyOrchestrator default {{project}}/{{policy_orchestrator_id}}
    
    $ pulumi import gcp:osconfig/v2PolicyOrchestrator:V2PolicyOrchestrator default {{policy_orchestrator_id}}
    

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Google Cloud (GCP) Classic pulumi/pulumi-gcp
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the google-beta Terraform Provider.
    gcp logo
    Google Cloud v8.29.0 published on Thursday, May 1, 2025 by Pulumi