1. Packages
  2. Google Cloud (GCP) Classic
  3. API Docs
  4. osconfig
  5. V2PolicyOrchestratorForFolder
Google Cloud v8.29.0 published on Thursday, May 1, 2025 by Pulumi

gcp.osconfig.V2PolicyOrchestratorForFolder

Explore with Pulumi AI

gcp logo
Google Cloud v8.29.0 published on Thursday, May 1, 2025 by Pulumi

    PolicyOrchestrator helps managing project+zone level policy resources (e.g. OS Policy Assignments), by providing tools to create, update and delete them across projects and locations, at scale.

    Example Usage

    Osconfigv2 Policy Orchestrator For Folder Basic

    import * as pulumi from "@pulumi/pulumi";
    import * as gcp from "@pulumi/gcp";
    import * as time from "@pulumi/time";
    
    const myFolder = new gcp.organizations.Folder("my_folder", {
        displayName: "po-folder",
        parent: "organizations/123456789",
        deletionProtection: false,
    });
    const osconfigSa = new gcp.folder.ServiceIdentity("osconfig_sa", {
        folder: myFolder.folderId,
        service: "osconfig.googleapis.com",
    });
    const rippleSa = new gcp.folder.ServiceIdentity("ripple_sa", {
        folder: myFolder.folderId,
        service: "progressiverollout.googleapis.com",
    });
    const wait30Sec = new time.index.Sleep("wait_30_sec", {createDuration: "30s"}, {
        dependsOn: [
            osconfigSa,
            rippleSa,
        ],
    });
    const iamOsconfigServiceAgent = new gcp.folder.IAMMember("iam_osconfig_service_agent", {
        folder: myFolder.folderId,
        role: "roles/osconfig.serviceAgent",
        member: osconfigSa.member,
    }, {
        dependsOn: [wait30Sec],
    });
    const iamOsconfigRolloutServiceAgent = new gcp.folder.IAMMember("iam_osconfig_rollout_service_agent", {
        folder: myFolder.folderId,
        role: "roles/osconfig.rolloutServiceAgent",
        member: pulumi.interpolate`serviceAccount:service-folder-${myFolder.folderId}@gcp-sa-osconfig-rollout.iam.gserviceaccount.com`,
    }, {
        dependsOn: [iamOsconfigServiceAgent],
    });
    const iamProgressiverolloutServiceAgent = new gcp.folder.IAMMember("iam_progressiverollout_service_agent", {
        folder: myFolder.folderId,
        role: "roles/progressiverollout.serviceAgent",
        member: rippleSa.member,
    }, {
        dependsOn: [iamOsconfigRolloutServiceAgent],
    });
    const wait3Min = new time.index.Sleep("wait_3_min", {createDuration: "180s"}, {
        dependsOn: [iamProgressiverolloutServiceAgent],
    });
    const policyOrchestratorForFolder = new gcp.osconfig.V2PolicyOrchestratorForFolder("policy_orchestrator_for_folder", {
        policyOrchestratorId: "po-folder",
        folderId: myFolder.folderId,
        state: "ACTIVE",
        action: "UPSERT",
        orchestratedResource: {
            id: "test-orchestrated-resource-folder",
            osPolicyAssignmentV1Payload: {
                osPolicies: [{
                    id: "test-os-policy-folder",
                    mode: "VALIDATION",
                    resourceGroups: [{
                        resources: [{
                            id: "resource-tf",
                            file: {
                                content: "file-content-tf",
                                path: "file-path-tf-1",
                                state: "PRESENT",
                            },
                        }],
                    }],
                }],
                instanceFilter: {
                    inventories: [{
                        osShortName: "windows-10",
                    }],
                },
                rollout: {
                    disruptionBudget: {
                        percent: 100,
                    },
                    minWaitDuration: "60s",
                },
            },
        },
        labels: {
            state: "active",
        },
        orchestrationScope: {
            selectors: [{
                locationSelector: {
                    includedLocations: [""],
                },
            }],
        },
    }, {
        dependsOn: [wait3Min],
    });
    
    import pulumi
    import pulumi_gcp as gcp
    import pulumi_time as time
    
    my_folder = gcp.organizations.Folder("my_folder",
        display_name="po-folder",
        parent="organizations/123456789",
        deletion_protection=False)
    osconfig_sa = gcp.folder.ServiceIdentity("osconfig_sa",
        folder=my_folder.folder_id,
        service="osconfig.googleapis.com")
    ripple_sa = gcp.folder.ServiceIdentity("ripple_sa",
        folder=my_folder.folder_id,
        service="progressiverollout.googleapis.com")
    wait30_sec = time.index.Sleep("wait_30_sec", create_duration=30s,
    opts = pulumi.ResourceOptions(depends_on=[
            osconfig_sa,
            ripple_sa,
        ]))
    iam_osconfig_service_agent = gcp.folder.IAMMember("iam_osconfig_service_agent",
        folder=my_folder.folder_id,
        role="roles/osconfig.serviceAgent",
        member=osconfig_sa.member,
        opts = pulumi.ResourceOptions(depends_on=[wait30_sec]))
    iam_osconfig_rollout_service_agent = gcp.folder.IAMMember("iam_osconfig_rollout_service_agent",
        folder=my_folder.folder_id,
        role="roles/osconfig.rolloutServiceAgent",
        member=my_folder.folder_id.apply(lambda folder_id: f"serviceAccount:service-folder-{folder_id}@gcp-sa-osconfig-rollout.iam.gserviceaccount.com"),
        opts = pulumi.ResourceOptions(depends_on=[iam_osconfig_service_agent]))
    iam_progressiverollout_service_agent = gcp.folder.IAMMember("iam_progressiverollout_service_agent",
        folder=my_folder.folder_id,
        role="roles/progressiverollout.serviceAgent",
        member=ripple_sa.member,
        opts = pulumi.ResourceOptions(depends_on=[iam_osconfig_rollout_service_agent]))
    wait3_min = time.index.Sleep("wait_3_min", create_duration=180s,
    opts = pulumi.ResourceOptions(depends_on=[iam_progressiverollout_service_agent]))
    policy_orchestrator_for_folder = gcp.osconfig.V2PolicyOrchestratorForFolder("policy_orchestrator_for_folder",
        policy_orchestrator_id="po-folder",
        folder_id=my_folder.folder_id,
        state="ACTIVE",
        action="UPSERT",
        orchestrated_resource={
            "id": "test-orchestrated-resource-folder",
            "os_policy_assignment_v1_payload": {
                "os_policies": [{
                    "id": "test-os-policy-folder",
                    "mode": "VALIDATION",
                    "resource_groups": [{
                        "resources": [{
                            "id": "resource-tf",
                            "file": {
                                "content": "file-content-tf",
                                "path": "file-path-tf-1",
                                "state": "PRESENT",
                            },
                        }],
                    }],
                }],
                "instance_filter": {
                    "inventories": [{
                        "os_short_name": "windows-10",
                    }],
                },
                "rollout": {
                    "disruption_budget": {
                        "percent": 100,
                    },
                    "min_wait_duration": "60s",
                },
            },
        },
        labels={
            "state": "active",
        },
        orchestration_scope={
            "selectors": [{
                "location_selector": {
                    "included_locations": [""],
                },
            }],
        },
        opts = pulumi.ResourceOptions(depends_on=[wait3_min]))
    
    package main
    
    import (
    	"fmt"
    
    	"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/folder"
    	"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations"
    	"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/osconfig"
    	"github.com/pulumi/pulumi-time/sdk/go/time"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		myFolder, err := organizations.NewFolder(ctx, "my_folder", &organizations.FolderArgs{
    			DisplayName:        pulumi.String("po-folder"),
    			Parent:             pulumi.String("organizations/123456789"),
    			DeletionProtection: pulumi.Bool(false),
    		})
    		if err != nil {
    			return err
    		}
    		osconfigSa, err := folder.NewServiceIdentity(ctx, "osconfig_sa", &folder.ServiceIdentityArgs{
    			Folder:  myFolder.FolderId,
    			Service: pulumi.String("osconfig.googleapis.com"),
    		})
    		if err != nil {
    			return err
    		}
    		rippleSa, err := folder.NewServiceIdentity(ctx, "ripple_sa", &folder.ServiceIdentityArgs{
    			Folder:  myFolder.FolderId,
    			Service: pulumi.String("progressiverollout.googleapis.com"),
    		})
    		if err != nil {
    			return err
    		}
    		wait30Sec, err := time.NewSleep(ctx, "wait_30_sec", &time.SleepArgs{
    			CreateDuration: "30s",
    		}, pulumi.DependsOn([]pulumi.Resource{
    			osconfigSa,
    			rippleSa,
    		}))
    		if err != nil {
    			return err
    		}
    		iamOsconfigServiceAgent, err := folder.NewIAMMember(ctx, "iam_osconfig_service_agent", &folder.IAMMemberArgs{
    			Folder: myFolder.FolderId,
    			Role:   pulumi.String("roles/osconfig.serviceAgent"),
    			Member: osconfigSa.Member,
    		}, pulumi.DependsOn([]pulumi.Resource{
    			wait30Sec,
    		}))
    		if err != nil {
    			return err
    		}
    		iamOsconfigRolloutServiceAgent, err := folder.NewIAMMember(ctx, "iam_osconfig_rollout_service_agent", &folder.IAMMemberArgs{
    			Folder: myFolder.FolderId,
    			Role:   pulumi.String("roles/osconfig.rolloutServiceAgent"),
    			Member: myFolder.FolderId.ApplyT(func(folderId string) (string, error) {
    				return fmt.Sprintf("serviceAccount:service-folder-%v@gcp-sa-osconfig-rollout.iam.gserviceaccount.com", folderId), nil
    			}).(pulumi.StringOutput),
    		}, pulumi.DependsOn([]pulumi.Resource{
    			iamOsconfigServiceAgent,
    		}))
    		if err != nil {
    			return err
    		}
    		iamProgressiverolloutServiceAgent, err := folder.NewIAMMember(ctx, "iam_progressiverollout_service_agent", &folder.IAMMemberArgs{
    			Folder: myFolder.FolderId,
    			Role:   pulumi.String("roles/progressiverollout.serviceAgent"),
    			Member: rippleSa.Member,
    		}, pulumi.DependsOn([]pulumi.Resource{
    			iamOsconfigRolloutServiceAgent,
    		}))
    		if err != nil {
    			return err
    		}
    		wait3Min, err := time.NewSleep(ctx, "wait_3_min", &time.SleepArgs{
    			CreateDuration: "180s",
    		}, pulumi.DependsOn([]pulumi.Resource{
    			iamProgressiverolloutServiceAgent,
    		}))
    		if err != nil {
    			return err
    		}
    		_, err = osconfig.NewV2PolicyOrchestratorForFolder(ctx, "policy_orchestrator_for_folder", &osconfig.V2PolicyOrchestratorForFolderArgs{
    			PolicyOrchestratorId: pulumi.String("po-folder"),
    			FolderId:             myFolder.FolderId,
    			State:                pulumi.String("ACTIVE"),
    			Action:               pulumi.String("UPSERT"),
    			OrchestratedResource: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceArgs{
    				Id: pulumi.String("test-orchestrated-resource-folder"),
    				OsPolicyAssignmentV1Payload: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadArgs{
    					OsPolicies: osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyArray{
    						&osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyArgs{
    							Id:   pulumi.String("test-os-policy-folder"),
    							Mode: pulumi.String("VALIDATION"),
    							ResourceGroups: osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupArray{
    								&osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupArgs{
    									Resources: osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceArray{
    										&osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceArgs{
    											Id: pulumi.String("resource-tf"),
    											File: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileArgs{
    												Content: pulumi.String("file-content-tf"),
    												Path:    pulumi.String("file-path-tf-1"),
    												State:   pulumi.String("PRESENT"),
    											},
    										},
    									},
    								},
    							},
    						},
    					},
    					InstanceFilter: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterArgs{
    						Inventories: osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventoryArray{
    							&osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventoryArgs{
    								OsShortName: pulumi.String("windows-10"),
    							},
    						},
    					},
    					Rollout: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutArgs{
    						DisruptionBudget: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudgetArgs{
    							Percent: pulumi.Int(100),
    						},
    						MinWaitDuration: pulumi.String("60s"),
    					},
    				},
    			},
    			Labels: pulumi.StringMap{
    				"state": pulumi.String("active"),
    			},
    			OrchestrationScope: &osconfig.V2PolicyOrchestratorForFolderOrchestrationScopeArgs{
    				Selectors: osconfig.V2PolicyOrchestratorForFolderOrchestrationScopeSelectorArray{
    					&osconfig.V2PolicyOrchestratorForFolderOrchestrationScopeSelectorArgs{
    						LocationSelector: &osconfig.V2PolicyOrchestratorForFolderOrchestrationScopeSelectorLocationSelectorArgs{
    							IncludedLocations: pulumi.StringArray{
    								pulumi.String(""),
    							},
    						},
    					},
    				},
    			},
    		}, pulumi.DependsOn([]pulumi.Resource{
    			wait3Min,
    		}))
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Gcp = Pulumi.Gcp;
    using Time = Pulumi.Time;
    
    return await Deployment.RunAsync(() => 
    {
        var myFolder = new Gcp.Organizations.Folder("my_folder", new()
        {
            DisplayName = "po-folder",
            Parent = "organizations/123456789",
            DeletionProtection = false,
        });
    
        var osconfigSa = new Gcp.Folder.ServiceIdentity("osconfig_sa", new()
        {
            Folder = myFolder.FolderId,
            Service = "osconfig.googleapis.com",
        });
    
        var rippleSa = new Gcp.Folder.ServiceIdentity("ripple_sa", new()
        {
            Folder = myFolder.FolderId,
            Service = "progressiverollout.googleapis.com",
        });
    
        var wait30Sec = new Time.Index.Sleep("wait_30_sec", new()
        {
            CreateDuration = "30s",
        }, new CustomResourceOptions
        {
            DependsOn =
            {
                osconfigSa,
                rippleSa,
            },
        });
    
        var iamOsconfigServiceAgent = new Gcp.Folder.IAMMember("iam_osconfig_service_agent", new()
        {
            Folder = myFolder.FolderId,
            Role = "roles/osconfig.serviceAgent",
            Member = osconfigSa.Member,
        }, new CustomResourceOptions
        {
            DependsOn =
            {
                wait30Sec,
            },
        });
    
        var iamOsconfigRolloutServiceAgent = new Gcp.Folder.IAMMember("iam_osconfig_rollout_service_agent", new()
        {
            Folder = myFolder.FolderId,
            Role = "roles/osconfig.rolloutServiceAgent",
            Member = myFolder.FolderId.Apply(folderId => $"serviceAccount:service-folder-{folderId}@gcp-sa-osconfig-rollout.iam.gserviceaccount.com"),
        }, new CustomResourceOptions
        {
            DependsOn =
            {
                iamOsconfigServiceAgent,
            },
        });
    
        var iamProgressiverolloutServiceAgent = new Gcp.Folder.IAMMember("iam_progressiverollout_service_agent", new()
        {
            Folder = myFolder.FolderId,
            Role = "roles/progressiverollout.serviceAgent",
            Member = rippleSa.Member,
        }, new CustomResourceOptions
        {
            DependsOn =
            {
                iamOsconfigRolloutServiceAgent,
            },
        });
    
        var wait3Min = new Time.Index.Sleep("wait_3_min", new()
        {
            CreateDuration = "180s",
        }, new CustomResourceOptions
        {
            DependsOn =
            {
                iamProgressiverolloutServiceAgent,
            },
        });
    
        var policyOrchestratorForFolder = new Gcp.OsConfig.V2PolicyOrchestratorForFolder("policy_orchestrator_for_folder", new()
        {
            PolicyOrchestratorId = "po-folder",
            FolderId = myFolder.FolderId,
            State = "ACTIVE",
            Action = "UPSERT",
            OrchestratedResource = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceArgs
            {
                Id = "test-orchestrated-resource-folder",
                OsPolicyAssignmentV1Payload = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadArgs
                {
                    OsPolicies = new[]
                    {
                        new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyArgs
                        {
                            Id = "test-os-policy-folder",
                            Mode = "VALIDATION",
                            ResourceGroups = new[]
                            {
                                new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupArgs
                                {
                                    Resources = new[]
                                    {
                                        new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceArgs
                                        {
                                            Id = "resource-tf",
                                            File = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileArgs
                                            {
                                                Content = "file-content-tf",
                                                Path = "file-path-tf-1",
                                                State = "PRESENT",
                                            },
                                        },
                                    },
                                },
                            },
                        },
                    },
                    InstanceFilter = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterArgs
                    {
                        Inventories = new[]
                        {
                            new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventoryArgs
                            {
                                OsShortName = "windows-10",
                            },
                        },
                    },
                    Rollout = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutArgs
                    {
                        DisruptionBudget = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudgetArgs
                        {
                            Percent = 100,
                        },
                        MinWaitDuration = "60s",
                    },
                },
            },
            Labels = 
            {
                { "state", "active" },
            },
            OrchestrationScope = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestrationScopeArgs
            {
                Selectors = new[]
                {
                    new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestrationScopeSelectorArgs
                    {
                        LocationSelector = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestrationScopeSelectorLocationSelectorArgs
                        {
                            IncludedLocations = new[]
                            {
                                "",
                            },
                        },
                    },
                },
            },
        }, new CustomResourceOptions
        {
            DependsOn =
            {
                wait3Min,
            },
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.gcp.organizations.Folder;
    import com.pulumi.gcp.organizations.FolderArgs;
    import com.pulumi.gcp.folder.ServiceIdentity;
    import com.pulumi.gcp.folder.ServiceIdentityArgs;
    import com.pulumi.time.sleep;
    import com.pulumi.time.sleepArgs;
    import com.pulumi.gcp.folder.IAMMember;
    import com.pulumi.gcp.folder.IAMMemberArgs;
    import com.pulumi.gcp.osconfig.V2PolicyOrchestratorForFolder;
    import com.pulumi.gcp.osconfig.V2PolicyOrchestratorForFolderArgs;
    import com.pulumi.gcp.osconfig.inputs.V2PolicyOrchestratorForFolderOrchestratedResourceArgs;
    import com.pulumi.gcp.osconfig.inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadArgs;
    import com.pulumi.gcp.osconfig.inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterArgs;
    import com.pulumi.gcp.osconfig.inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutArgs;
    import com.pulumi.gcp.osconfig.inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudgetArgs;
    import com.pulumi.gcp.osconfig.inputs.V2PolicyOrchestratorForFolderOrchestrationScopeArgs;
    import com.pulumi.resources.CustomResourceOptions;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var myFolder = new Folder("myFolder", FolderArgs.builder()
                .displayName("po-folder")
                .parent("organizations/123456789")
                .deletionProtection(false)
                .build());
    
            var osconfigSa = new ServiceIdentity("osconfigSa", ServiceIdentityArgs.builder()
                .folder(myFolder.folderId())
                .service("osconfig.googleapis.com")
                .build());
    
            var rippleSa = new ServiceIdentity("rippleSa", ServiceIdentityArgs.builder()
                .folder(myFolder.folderId())
                .service("progressiverollout.googleapis.com")
                .build());
    
            var wait30Sec = new Sleep("wait30Sec", SleepArgs.builder()
                .createDuration("30s")
                .build(), CustomResourceOptions.builder()
                    .dependsOn(List.of(                
                        osconfigSa,
                        rippleSa))
                    .build());
    
            var iamOsconfigServiceAgent = new IAMMember("iamOsconfigServiceAgent", IAMMemberArgs.builder()
                .folder(myFolder.folderId())
                .role("roles/osconfig.serviceAgent")
                .member(osconfigSa.member())
                .build(), CustomResourceOptions.builder()
                    .dependsOn(wait30Sec)
                    .build());
    
            var iamOsconfigRolloutServiceAgent = new IAMMember("iamOsconfigRolloutServiceAgent", IAMMemberArgs.builder()
                .folder(myFolder.folderId())
                .role("roles/osconfig.rolloutServiceAgent")
                .member(myFolder.folderId().applyValue(_folderId -> String.format("serviceAccount:service-folder-%s@gcp-sa-osconfig-rollout.iam.gserviceaccount.com", _folderId)))
                .build(), CustomResourceOptions.builder()
                    .dependsOn(iamOsconfigServiceAgent)
                    .build());
    
            var iamProgressiverolloutServiceAgent = new IAMMember("iamProgressiverolloutServiceAgent", IAMMemberArgs.builder()
                .folder(myFolder.folderId())
                .role("roles/progressiverollout.serviceAgent")
                .member(rippleSa.member())
                .build(), CustomResourceOptions.builder()
                    .dependsOn(iamOsconfigRolloutServiceAgent)
                    .build());
    
            var wait3Min = new Sleep("wait3Min", SleepArgs.builder()
                .createDuration("180s")
                .build(), CustomResourceOptions.builder()
                    .dependsOn(List.of(iamProgressiverolloutServiceAgent))
                    .build());
    
            var policyOrchestratorForFolder = new V2PolicyOrchestratorForFolder("policyOrchestratorForFolder", V2PolicyOrchestratorForFolderArgs.builder()
                .policyOrchestratorId("po-folder")
                .folderId(myFolder.folderId())
                .state("ACTIVE")
                .action("UPSERT")
                .orchestratedResource(V2PolicyOrchestratorForFolderOrchestratedResourceArgs.builder()
                    .id("test-orchestrated-resource-folder")
                    .osPolicyAssignmentV1Payload(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadArgs.builder()
                        .osPolicies(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyArgs.builder()
                            .id("test-os-policy-folder")
                            .mode("VALIDATION")
                            .resourceGroups(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupArgs.builder()
                                .resources(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceArgs.builder()
                                    .id("resource-tf")
                                    .file(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileArgs.builder()
                                        .content("file-content-tf")
                                        .path("file-path-tf-1")
                                        .state("PRESENT")
                                        .build())
                                    .build())
                                .build())
                            .build())
                        .instanceFilter(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterArgs.builder()
                            .inventories(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventoryArgs.builder()
                                .osShortName("windows-10")
                                .build())
                            .build())
                        .rollout(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutArgs.builder()
                            .disruptionBudget(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudgetArgs.builder()
                                .percent(100)
                                .build())
                            .minWaitDuration("60s")
                            .build())
                        .build())
                    .build())
                .labels(Map.of("state", "active"))
                .orchestrationScope(V2PolicyOrchestratorForFolderOrchestrationScopeArgs.builder()
                    .selectors(V2PolicyOrchestratorForFolderOrchestrationScopeSelectorArgs.builder()
                        .locationSelector(V2PolicyOrchestratorForFolderOrchestrationScopeSelectorLocationSelectorArgs.builder()
                            .includedLocations("")
                            .build())
                        .build())
                    .build())
                .build(), CustomResourceOptions.builder()
                    .dependsOn(wait3Min)
                    .build());
    
        }
    }
    
    resources:
      myFolder:
        type: gcp:organizations:Folder
        name: my_folder
        properties:
          displayName: po-folder
          parent: organizations/123456789
          deletionProtection: false
      osconfigSa:
        type: gcp:folder:ServiceIdentity
        name: osconfig_sa
        properties:
          folder: ${myFolder.folderId}
          service: osconfig.googleapis.com
      rippleSa:
        type: gcp:folder:ServiceIdentity
        name: ripple_sa
        properties:
          folder: ${myFolder.folderId}
          service: progressiverollout.googleapis.com
      wait30Sec:
        type: time:sleep
        name: wait_30_sec
        properties:
          createDuration: 30s
        options:
          dependsOn:
            - ${osconfigSa}
            - ${rippleSa}
      iamOsconfigServiceAgent:
        type: gcp:folder:IAMMember
        name: iam_osconfig_service_agent
        properties:
          folder: ${myFolder.folderId}
          role: roles/osconfig.serviceAgent
          member: ${osconfigSa.member}
        options:
          dependsOn:
            - ${wait30Sec}
      iamOsconfigRolloutServiceAgent:
        type: gcp:folder:IAMMember
        name: iam_osconfig_rollout_service_agent
        properties:
          folder: ${myFolder.folderId}
          role: roles/osconfig.rolloutServiceAgent
          member: serviceAccount:service-folder-${myFolder.folderId}@gcp-sa-osconfig-rollout.iam.gserviceaccount.com
        options:
          dependsOn:
            - ${iamOsconfigServiceAgent}
      iamProgressiverolloutServiceAgent:
        type: gcp:folder:IAMMember
        name: iam_progressiverollout_service_agent
        properties:
          folder: ${myFolder.folderId}
          role: roles/progressiverollout.serviceAgent
          member: ${rippleSa.member}
        options:
          dependsOn:
            - ${iamOsconfigRolloutServiceAgent}
      wait3Min:
        type: time:sleep
        name: wait_3_min
        properties:
          createDuration: 180s
        options:
          dependsOn:
            - ${iamProgressiverolloutServiceAgent}
      policyOrchestratorForFolder:
        type: gcp:osconfig:V2PolicyOrchestratorForFolder
        name: policy_orchestrator_for_folder
        properties:
          policyOrchestratorId: po-folder
          folderId: ${myFolder.folderId}
          state: ACTIVE
          action: UPSERT
          orchestratedResource:
            id: test-orchestrated-resource-folder
            osPolicyAssignmentV1Payload:
              osPolicies:
                - id: test-os-policy-folder
                  mode: VALIDATION
                  resourceGroups:
                    - resources:
                        - id: resource-tf
                          file:
                            content: file-content-tf
                            path: file-path-tf-1
                            state: PRESENT
              instanceFilter:
                inventories:
                  - osShortName: windows-10
              rollout:
                disruptionBudget:
                  percent: 100
                minWaitDuration: 60s
          labels:
            state: active
          orchestrationScope:
            selectors:
              - locationSelector:
                  includedLocations:
                    - ""
        options:
          dependsOn:
            - ${wait3Min}
    

    Create V2PolicyOrchestratorForFolder Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new V2PolicyOrchestratorForFolder(name: string, args: V2PolicyOrchestratorForFolderArgs, opts?: CustomResourceOptions);
    @overload
    def V2PolicyOrchestratorForFolder(resource_name: str,
                                      args: V2PolicyOrchestratorForFolderArgs,
                                      opts: Optional[ResourceOptions] = None)
    
    @overload
    def V2PolicyOrchestratorForFolder(resource_name: str,
                                      opts: Optional[ResourceOptions] = None,
                                      action: Optional[str] = None,
                                      folder_id: Optional[str] = None,
                                      orchestrated_resource: Optional[V2PolicyOrchestratorForFolderOrchestratedResourceArgs] = None,
                                      policy_orchestrator_id: Optional[str] = None,
                                      description: Optional[str] = None,
                                      labels: Optional[Mapping[str, str]] = None,
                                      orchestration_scope: Optional[V2PolicyOrchestratorForFolderOrchestrationScopeArgs] = None,
                                      state: Optional[str] = None)
    func NewV2PolicyOrchestratorForFolder(ctx *Context, name string, args V2PolicyOrchestratorForFolderArgs, opts ...ResourceOption) (*V2PolicyOrchestratorForFolder, error)
    public V2PolicyOrchestratorForFolder(string name, V2PolicyOrchestratorForFolderArgs args, CustomResourceOptions? opts = null)
    public V2PolicyOrchestratorForFolder(String name, V2PolicyOrchestratorForFolderArgs args)
    public V2PolicyOrchestratorForFolder(String name, V2PolicyOrchestratorForFolderArgs args, CustomResourceOptions options)
    
    type: gcp:osconfig:V2PolicyOrchestratorForFolder
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    

    Parameters

    name string
    The unique name of the resource.
    args V2PolicyOrchestratorForFolderArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args V2PolicyOrchestratorForFolderArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args V2PolicyOrchestratorForFolderArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args V2PolicyOrchestratorForFolderArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args V2PolicyOrchestratorForFolderArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var v2policyOrchestratorForFolderResource = new Gcp.OsConfig.V2PolicyOrchestratorForFolder("v2policyOrchestratorForFolderResource", new()
    {
        Action = "string",
        FolderId = "string",
        OrchestratedResource = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceArgs
        {
            Id = "string",
            OsPolicyAssignmentV1Payload = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadArgs
            {
                InstanceFilter = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterArgs
                {
                    All = false,
                    ExclusionLabels = new[]
                    {
                        new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterExclusionLabelArgs
                        {
                            Labels = 
                            {
                                { "string", "string" },
                            },
                        },
                    },
                    InclusionLabels = new[]
                    {
                        new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInclusionLabelArgs
                        {
                            Labels = 
                            {
                                { "string", "string" },
                            },
                        },
                    },
                    Inventories = new[]
                    {
                        new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventoryArgs
                        {
                            OsShortName = "string",
                            OsVersion = "string",
                        },
                    },
                },
                Rollout = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutArgs
                {
                    DisruptionBudget = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudgetArgs
                    {
                        Fixed = 0,
                        Percent = 0,
                    },
                    MinWaitDuration = "string",
                },
                OsPolicies = new[]
                {
                    new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyArgs
                    {
                        Id = "string",
                        Mode = "string",
                        ResourceGroups = new[]
                        {
                            new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupArgs
                            {
                                Resources = new[]
                                {
                                    new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceArgs
                                    {
                                        Id = "string",
                                        Exec = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecArgs
                                        {
                                            Validate = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateArgs
                                            {
                                                Interpreter = "string",
                                                Args = new[]
                                                {
                                                    "string",
                                                },
                                                File = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileArgs
                                                {
                                                    AllowInsecure = false,
                                                    Gcs = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileGcsArgs
                                                    {
                                                        Bucket = "string",
                                                        Object = "string",
                                                        Generation = "string",
                                                    },
                                                    LocalPath = "string",
                                                    Remote = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileRemoteArgs
                                                    {
                                                        Uri = "string",
                                                        Sha256Checksum = "string",
                                                    },
                                                },
                                                OutputFilePath = "string",
                                                Script = "string",
                                            },
                                            Enforce = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceArgs
                                            {
                                                Interpreter = "string",
                                                Args = new[]
                                                {
                                                    "string",
                                                },
                                                File = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileArgs
                                                {
                                                    AllowInsecure = false,
                                                    Gcs = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileGcsArgs
                                                    {
                                                        Bucket = "string",
                                                        Object = "string",
                                                        Generation = "string",
                                                    },
                                                    LocalPath = "string",
                                                    Remote = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileRemoteArgs
                                                    {
                                                        Uri = "string",
                                                        Sha256Checksum = "string",
                                                    },
                                                },
                                                OutputFilePath = "string",
                                                Script = "string",
                                            },
                                        },
                                        File = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileArgs
                                        {
                                            Path = "string",
                                            State = "string",
                                            Content = "string",
                                            File = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileArgs
                                            {
                                                AllowInsecure = false,
                                                Gcs = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileGcsArgs
                                                {
                                                    Bucket = "string",
                                                    Object = "string",
                                                    Generation = "string",
                                                },
                                                LocalPath = "string",
                                                Remote = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileRemoteArgs
                                                {
                                                    Uri = "string",
                                                    Sha256Checksum = "string",
                                                },
                                            },
                                            Permissions = "string",
                                        },
                                        Pkg = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgArgs
                                        {
                                            DesiredState = "string",
                                            Apt = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgAptArgs
                                            {
                                                Name = "string",
                                            },
                                            Deb = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebArgs
                                            {
                                                Source = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceArgs
                                                {
                                                    AllowInsecure = false,
                                                    Gcs = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceGcsArgs
                                                    {
                                                        Bucket = "string",
                                                        Object = "string",
                                                        Generation = "string",
                                                    },
                                                    LocalPath = "string",
                                                    Remote = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceRemoteArgs
                                                    {
                                                        Uri = "string",
                                                        Sha256Checksum = "string",
                                                    },
                                                },
                                                PullDeps = false,
                                            },
                                            Googet = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgGoogetArgs
                                            {
                                                Name = "string",
                                            },
                                            Msi = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiArgs
                                            {
                                                Source = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceArgs
                                                {
                                                    AllowInsecure = false,
                                                    Gcs = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceGcsArgs
                                                    {
                                                        Bucket = "string",
                                                        Object = "string",
                                                        Generation = "string",
                                                    },
                                                    LocalPath = "string",
                                                    Remote = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceRemoteArgs
                                                    {
                                                        Uri = "string",
                                                        Sha256Checksum = "string",
                                                    },
                                                },
                                                Properties = new[]
                                                {
                                                    "string",
                                                },
                                            },
                                            Rpm = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmArgs
                                            {
                                                Source = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceArgs
                                                {
                                                    AllowInsecure = false,
                                                    Gcs = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceGcsArgs
                                                    {
                                                        Bucket = "string",
                                                        Object = "string",
                                                        Generation = "string",
                                                    },
                                                    LocalPath = "string",
                                                    Remote = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceRemoteArgs
                                                    {
                                                        Uri = "string",
                                                        Sha256Checksum = "string",
                                                    },
                                                },
                                                PullDeps = false,
                                            },
                                            Yum = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgYumArgs
                                            {
                                                Name = "string",
                                            },
                                            Zypper = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgZypperArgs
                                            {
                                                Name = "string",
                                            },
                                        },
                                        Repository = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryArgs
                                        {
                                            Apt = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryAptArgs
                                            {
                                                ArchiveType = "string",
                                                Components = new[]
                                                {
                                                    "string",
                                                },
                                                Distribution = "string",
                                                Uri = "string",
                                                GpgKey = "string",
                                            },
                                            Goo = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryGooArgs
                                            {
                                                Name = "string",
                                                Url = "string",
                                            },
                                            Yum = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryYumArgs
                                            {
                                                BaseUrl = "string",
                                                Id = "string",
                                                DisplayName = "string",
                                                GpgKeys = new[]
                                                {
                                                    "string",
                                                },
                                            },
                                            Zypper = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryZypperArgs
                                            {
                                                BaseUrl = "string",
                                                Id = "string",
                                                DisplayName = "string",
                                                GpgKeys = new[]
                                                {
                                                    "string",
                                                },
                                            },
                                        },
                                    },
                                },
                                InventoryFilters = new[]
                                {
                                    new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupInventoryFilterArgs
                                    {
                                        OsShortName = "string",
                                        OsVersion = "string",
                                    },
                                },
                            },
                        },
                        AllowNoResourceGroupMatch = false,
                        Description = "string",
                    },
                },
                Etag = "string",
                Baseline = false,
                Name = "string",
                Description = "string",
                Reconciling = false,
                RevisionCreateTime = "string",
                RevisionId = "string",
                Deleted = false,
                RolloutState = "string",
                Uid = "string",
            },
        },
        PolicyOrchestratorId = "string",
        Description = "string",
        Labels = 
        {
            { "string", "string" },
        },
        OrchestrationScope = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestrationScopeArgs
        {
            Selectors = new[]
            {
                new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestrationScopeSelectorArgs
                {
                    LocationSelector = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestrationScopeSelectorLocationSelectorArgs
                    {
                        IncludedLocations = new[]
                        {
                            "string",
                        },
                    },
                    ResourceHierarchySelector = new Gcp.OsConfig.Inputs.V2PolicyOrchestratorForFolderOrchestrationScopeSelectorResourceHierarchySelectorArgs
                    {
                        IncludedFolders = new[]
                        {
                            "string",
                        },
                        IncludedProjects = new[]
                        {
                            "string",
                        },
                    },
                },
            },
        },
        State = "string",
    });
    
    example, err := osconfig.NewV2PolicyOrchestratorForFolder(ctx, "v2policyOrchestratorForFolderResource", &osconfig.V2PolicyOrchestratorForFolderArgs{
    	Action:   pulumi.String("string"),
    	FolderId: pulumi.String("string"),
    	OrchestratedResource: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceArgs{
    		Id: pulumi.String("string"),
    		OsPolicyAssignmentV1Payload: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadArgs{
    			InstanceFilter: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterArgs{
    				All: pulumi.Bool(false),
    				ExclusionLabels: osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterExclusionLabelArray{
    					&osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterExclusionLabelArgs{
    						Labels: pulumi.StringMap{
    							"string": pulumi.String("string"),
    						},
    					},
    				},
    				InclusionLabels: osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInclusionLabelArray{
    					&osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInclusionLabelArgs{
    						Labels: pulumi.StringMap{
    							"string": pulumi.String("string"),
    						},
    					},
    				},
    				Inventories: osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventoryArray{
    					&osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventoryArgs{
    						OsShortName: pulumi.String("string"),
    						OsVersion:   pulumi.String("string"),
    					},
    				},
    			},
    			Rollout: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutArgs{
    				DisruptionBudget: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudgetArgs{
    					Fixed:   pulumi.Int(0),
    					Percent: pulumi.Int(0),
    				},
    				MinWaitDuration: pulumi.String("string"),
    			},
    			OsPolicies: osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyArray{
    				&osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyArgs{
    					Id:   pulumi.String("string"),
    					Mode: pulumi.String("string"),
    					ResourceGroups: osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupArray{
    						&osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupArgs{
    							Resources: osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceArray{
    								&osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceArgs{
    									Id: pulumi.String("string"),
    									Exec: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecArgs{
    										Validate: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateArgs{
    											Interpreter: pulumi.String("string"),
    											Args: pulumi.StringArray{
    												pulumi.String("string"),
    											},
    											File: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileArgs{
    												AllowInsecure: pulumi.Bool(false),
    												Gcs: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileGcsArgs{
    													Bucket:     pulumi.String("string"),
    													Object:     pulumi.String("string"),
    													Generation: pulumi.String("string"),
    												},
    												LocalPath: pulumi.String("string"),
    												Remote: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileRemoteArgs{
    													Uri:            pulumi.String("string"),
    													Sha256Checksum: pulumi.String("string"),
    												},
    											},
    											OutputFilePath: pulumi.String("string"),
    											Script:         pulumi.String("string"),
    										},
    										Enforce: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceArgs{
    											Interpreter: pulumi.String("string"),
    											Args: pulumi.StringArray{
    												pulumi.String("string"),
    											},
    											File: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileArgs{
    												AllowInsecure: pulumi.Bool(false),
    												Gcs: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileGcsArgs{
    													Bucket:     pulumi.String("string"),
    													Object:     pulumi.String("string"),
    													Generation: pulumi.String("string"),
    												},
    												LocalPath: pulumi.String("string"),
    												Remote: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileRemoteArgs{
    													Uri:            pulumi.String("string"),
    													Sha256Checksum: pulumi.String("string"),
    												},
    											},
    											OutputFilePath: pulumi.String("string"),
    											Script:         pulumi.String("string"),
    										},
    									},
    									File: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileArgs{
    										Path:    pulumi.String("string"),
    										State:   pulumi.String("string"),
    										Content: pulumi.String("string"),
    										File: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileArgs{
    											AllowInsecure: pulumi.Bool(false),
    											Gcs: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileGcsArgs{
    												Bucket:     pulumi.String("string"),
    												Object:     pulumi.String("string"),
    												Generation: pulumi.String("string"),
    											},
    											LocalPath: pulumi.String("string"),
    											Remote: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileRemoteArgs{
    												Uri:            pulumi.String("string"),
    												Sha256Checksum: pulumi.String("string"),
    											},
    										},
    										Permissions: pulumi.String("string"),
    									},
    									Pkg: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgArgs{
    										DesiredState: pulumi.String("string"),
    										Apt: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgAptArgs{
    											Name: pulumi.String("string"),
    										},
    										Deb: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebArgs{
    											Source: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceArgs{
    												AllowInsecure: pulumi.Bool(false),
    												Gcs: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceGcsArgs{
    													Bucket:     pulumi.String("string"),
    													Object:     pulumi.String("string"),
    													Generation: pulumi.String("string"),
    												},
    												LocalPath: pulumi.String("string"),
    												Remote: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceRemoteArgs{
    													Uri:            pulumi.String("string"),
    													Sha256Checksum: pulumi.String("string"),
    												},
    											},
    											PullDeps: pulumi.Bool(false),
    										},
    										Googet: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgGoogetArgs{
    											Name: pulumi.String("string"),
    										},
    										Msi: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiArgs{
    											Source: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceArgs{
    												AllowInsecure: pulumi.Bool(false),
    												Gcs: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceGcsArgs{
    													Bucket:     pulumi.String("string"),
    													Object:     pulumi.String("string"),
    													Generation: pulumi.String("string"),
    												},
    												LocalPath: pulumi.String("string"),
    												Remote: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceRemoteArgs{
    													Uri:            pulumi.String("string"),
    													Sha256Checksum: pulumi.String("string"),
    												},
    											},
    											Properties: pulumi.StringArray{
    												pulumi.String("string"),
    											},
    										},
    										Rpm: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmArgs{
    											Source: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceArgs{
    												AllowInsecure: pulumi.Bool(false),
    												Gcs: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceGcsArgs{
    													Bucket:     pulumi.String("string"),
    													Object:     pulumi.String("string"),
    													Generation: pulumi.String("string"),
    												},
    												LocalPath: pulumi.String("string"),
    												Remote: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceRemoteArgs{
    													Uri:            pulumi.String("string"),
    													Sha256Checksum: pulumi.String("string"),
    												},
    											},
    											PullDeps: pulumi.Bool(false),
    										},
    										Yum: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgYumArgs{
    											Name: pulumi.String("string"),
    										},
    										Zypper: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgZypperArgs{
    											Name: pulumi.String("string"),
    										},
    									},
    									Repository: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryArgs{
    										Apt: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryAptArgs{
    											ArchiveType: pulumi.String("string"),
    											Components: pulumi.StringArray{
    												pulumi.String("string"),
    											},
    											Distribution: pulumi.String("string"),
    											Uri:          pulumi.String("string"),
    											GpgKey:       pulumi.String("string"),
    										},
    										Goo: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryGooArgs{
    											Name: pulumi.String("string"),
    											Url:  pulumi.String("string"),
    										},
    										Yum: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryYumArgs{
    											BaseUrl:     pulumi.String("string"),
    											Id:          pulumi.String("string"),
    											DisplayName: pulumi.String("string"),
    											GpgKeys: pulumi.StringArray{
    												pulumi.String("string"),
    											},
    										},
    										Zypper: &osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryZypperArgs{
    											BaseUrl:     pulumi.String("string"),
    											Id:          pulumi.String("string"),
    											DisplayName: pulumi.String("string"),
    											GpgKeys: pulumi.StringArray{
    												pulumi.String("string"),
    											},
    										},
    									},
    								},
    							},
    							InventoryFilters: osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupInventoryFilterArray{
    								&osconfig.V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupInventoryFilterArgs{
    									OsShortName: pulumi.String("string"),
    									OsVersion:   pulumi.String("string"),
    								},
    							},
    						},
    					},
    					AllowNoResourceGroupMatch: pulumi.Bool(false),
    					Description:               pulumi.String("string"),
    				},
    			},
    			Etag:               pulumi.String("string"),
    			Baseline:           pulumi.Bool(false),
    			Name:               pulumi.String("string"),
    			Description:        pulumi.String("string"),
    			Reconciling:        pulumi.Bool(false),
    			RevisionCreateTime: pulumi.String("string"),
    			RevisionId:         pulumi.String("string"),
    			Deleted:            pulumi.Bool(false),
    			RolloutState:       pulumi.String("string"),
    			Uid:                pulumi.String("string"),
    		},
    	},
    	PolicyOrchestratorId: pulumi.String("string"),
    	Description:          pulumi.String("string"),
    	Labels: pulumi.StringMap{
    		"string": pulumi.String("string"),
    	},
    	OrchestrationScope: &osconfig.V2PolicyOrchestratorForFolderOrchestrationScopeArgs{
    		Selectors: osconfig.V2PolicyOrchestratorForFolderOrchestrationScopeSelectorArray{
    			&osconfig.V2PolicyOrchestratorForFolderOrchestrationScopeSelectorArgs{
    				LocationSelector: &osconfig.V2PolicyOrchestratorForFolderOrchestrationScopeSelectorLocationSelectorArgs{
    					IncludedLocations: pulumi.StringArray{
    						pulumi.String("string"),
    					},
    				},
    				ResourceHierarchySelector: &osconfig.V2PolicyOrchestratorForFolderOrchestrationScopeSelectorResourceHierarchySelectorArgs{
    					IncludedFolders: pulumi.StringArray{
    						pulumi.String("string"),
    					},
    					IncludedProjects: pulumi.StringArray{
    						pulumi.String("string"),
    					},
    				},
    			},
    		},
    	},
    	State: pulumi.String("string"),
    })
    
    var v2policyOrchestratorForFolderResource = new V2PolicyOrchestratorForFolder("v2policyOrchestratorForFolderResource", V2PolicyOrchestratorForFolderArgs.builder()
        .action("string")
        .folderId("string")
        .orchestratedResource(V2PolicyOrchestratorForFolderOrchestratedResourceArgs.builder()
            .id("string")
            .osPolicyAssignmentV1Payload(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadArgs.builder()
                .instanceFilter(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterArgs.builder()
                    .all(false)
                    .exclusionLabels(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterExclusionLabelArgs.builder()
                        .labels(Map.of("string", "string"))
                        .build())
                    .inclusionLabels(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInclusionLabelArgs.builder()
                        .labels(Map.of("string", "string"))
                        .build())
                    .inventories(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventoryArgs.builder()
                        .osShortName("string")
                        .osVersion("string")
                        .build())
                    .build())
                .rollout(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutArgs.builder()
                    .disruptionBudget(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudgetArgs.builder()
                        .fixed(0)
                        .percent(0)
                        .build())
                    .minWaitDuration("string")
                    .build())
                .osPolicies(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyArgs.builder()
                    .id("string")
                    .mode("string")
                    .resourceGroups(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupArgs.builder()
                        .resources(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceArgs.builder()
                            .id("string")
                            .exec(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecArgs.builder()
                                .validate(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateArgs.builder()
                                    .interpreter("string")
                                    .args("string")
                                    .file(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileArgs.builder()
                                        .allowInsecure(false)
                                        .gcs(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileGcsArgs.builder()
                                            .bucket("string")
                                            .object("string")
                                            .generation("string")
                                            .build())
                                        .localPath("string")
                                        .remote(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileRemoteArgs.builder()
                                            .uri("string")
                                            .sha256Checksum("string")
                                            .build())
                                        .build())
                                    .outputFilePath("string")
                                    .script("string")
                                    .build())
                                .enforce(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceArgs.builder()
                                    .interpreter("string")
                                    .args("string")
                                    .file(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileArgs.builder()
                                        .allowInsecure(false)
                                        .gcs(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileGcsArgs.builder()
                                            .bucket("string")
                                            .object("string")
                                            .generation("string")
                                            .build())
                                        .localPath("string")
                                        .remote(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileRemoteArgs.builder()
                                            .uri("string")
                                            .sha256Checksum("string")
                                            .build())
                                        .build())
                                    .outputFilePath("string")
                                    .script("string")
                                    .build())
                                .build())
                            .file(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileArgs.builder()
                                .path("string")
                                .state("string")
                                .content("string")
                                .file(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileArgs.builder()
                                    .allowInsecure(false)
                                    .gcs(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileGcsArgs.builder()
                                        .bucket("string")
                                        .object("string")
                                        .generation("string")
                                        .build())
                                    .localPath("string")
                                    .remote(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileRemoteArgs.builder()
                                        .uri("string")
                                        .sha256Checksum("string")
                                        .build())
                                    .build())
                                .permissions("string")
                                .build())
                            .pkg(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgArgs.builder()
                                .desiredState("string")
                                .apt(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgAptArgs.builder()
                                    .name("string")
                                    .build())
                                .deb(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebArgs.builder()
                                    .source(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceArgs.builder()
                                        .allowInsecure(false)
                                        .gcs(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceGcsArgs.builder()
                                            .bucket("string")
                                            .object("string")
                                            .generation("string")
                                            .build())
                                        .localPath("string")
                                        .remote(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceRemoteArgs.builder()
                                            .uri("string")
                                            .sha256Checksum("string")
                                            .build())
                                        .build())
                                    .pullDeps(false)
                                    .build())
                                .googet(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgGoogetArgs.builder()
                                    .name("string")
                                    .build())
                                .msi(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiArgs.builder()
                                    .source(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceArgs.builder()
                                        .allowInsecure(false)
                                        .gcs(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceGcsArgs.builder()
                                            .bucket("string")
                                            .object("string")
                                            .generation("string")
                                            .build())
                                        .localPath("string")
                                        .remote(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceRemoteArgs.builder()
                                            .uri("string")
                                            .sha256Checksum("string")
                                            .build())
                                        .build())
                                    .properties("string")
                                    .build())
                                .rpm(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmArgs.builder()
                                    .source(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceArgs.builder()
                                        .allowInsecure(false)
                                        .gcs(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceGcsArgs.builder()
                                            .bucket("string")
                                            .object("string")
                                            .generation("string")
                                            .build())
                                        .localPath("string")
                                        .remote(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceRemoteArgs.builder()
                                            .uri("string")
                                            .sha256Checksum("string")
                                            .build())
                                        .build())
                                    .pullDeps(false)
                                    .build())
                                .yum(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgYumArgs.builder()
                                    .name("string")
                                    .build())
                                .zypper(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgZypperArgs.builder()
                                    .name("string")
                                    .build())
                                .build())
                            .repository(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryArgs.builder()
                                .apt(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryAptArgs.builder()
                                    .archiveType("string")
                                    .components("string")
                                    .distribution("string")
                                    .uri("string")
                                    .gpgKey("string")
                                    .build())
                                .goo(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryGooArgs.builder()
                                    .name("string")
                                    .url("string")
                                    .build())
                                .yum(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryYumArgs.builder()
                                    .baseUrl("string")
                                    .id("string")
                                    .displayName("string")
                                    .gpgKeys("string")
                                    .build())
                                .zypper(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryZypperArgs.builder()
                                    .baseUrl("string")
                                    .id("string")
                                    .displayName("string")
                                    .gpgKeys("string")
                                    .build())
                                .build())
                            .build())
                        .inventoryFilters(V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupInventoryFilterArgs.builder()
                            .osShortName("string")
                            .osVersion("string")
                            .build())
                        .build())
                    .allowNoResourceGroupMatch(false)
                    .description("string")
                    .build())
                .etag("string")
                .baseline(false)
                .name("string")
                .description("string")
                .reconciling(false)
                .revisionCreateTime("string")
                .revisionId("string")
                .deleted(false)
                .rolloutState("string")
                .uid("string")
                .build())
            .build())
        .policyOrchestratorId("string")
        .description("string")
        .labels(Map.of("string", "string"))
        .orchestrationScope(V2PolicyOrchestratorForFolderOrchestrationScopeArgs.builder()
            .selectors(V2PolicyOrchestratorForFolderOrchestrationScopeSelectorArgs.builder()
                .locationSelector(V2PolicyOrchestratorForFolderOrchestrationScopeSelectorLocationSelectorArgs.builder()
                    .includedLocations("string")
                    .build())
                .resourceHierarchySelector(V2PolicyOrchestratorForFolderOrchestrationScopeSelectorResourceHierarchySelectorArgs.builder()
                    .includedFolders("string")
                    .includedProjects("string")
                    .build())
                .build())
            .build())
        .state("string")
        .build());
    
    v2policy_orchestrator_for_folder_resource = gcp.osconfig.V2PolicyOrchestratorForFolder("v2policyOrchestratorForFolderResource",
        action="string",
        folder_id="string",
        orchestrated_resource={
            "id": "string",
            "os_policy_assignment_v1_payload": {
                "instance_filter": {
                    "all": False,
                    "exclusion_labels": [{
                        "labels": {
                            "string": "string",
                        },
                    }],
                    "inclusion_labels": [{
                        "labels": {
                            "string": "string",
                        },
                    }],
                    "inventories": [{
                        "os_short_name": "string",
                        "os_version": "string",
                    }],
                },
                "rollout": {
                    "disruption_budget": {
                        "fixed": 0,
                        "percent": 0,
                    },
                    "min_wait_duration": "string",
                },
                "os_policies": [{
                    "id": "string",
                    "mode": "string",
                    "resource_groups": [{
                        "resources": [{
                            "id": "string",
                            "exec_": {
                                "validate": {
                                    "interpreter": "string",
                                    "args": ["string"],
                                    "file": {
                                        "allow_insecure": False,
                                        "gcs": {
                                            "bucket": "string",
                                            "object": "string",
                                            "generation": "string",
                                        },
                                        "local_path": "string",
                                        "remote": {
                                            "uri": "string",
                                            "sha256_checksum": "string",
                                        },
                                    },
                                    "output_file_path": "string",
                                    "script": "string",
                                },
                                "enforce": {
                                    "interpreter": "string",
                                    "args": ["string"],
                                    "file": {
                                        "allow_insecure": False,
                                        "gcs": {
                                            "bucket": "string",
                                            "object": "string",
                                            "generation": "string",
                                        },
                                        "local_path": "string",
                                        "remote": {
                                            "uri": "string",
                                            "sha256_checksum": "string",
                                        },
                                    },
                                    "output_file_path": "string",
                                    "script": "string",
                                },
                            },
                            "file": {
                                "path": "string",
                                "state": "string",
                                "content": "string",
                                "file": {
                                    "allow_insecure": False,
                                    "gcs": {
                                        "bucket": "string",
                                        "object": "string",
                                        "generation": "string",
                                    },
                                    "local_path": "string",
                                    "remote": {
                                        "uri": "string",
                                        "sha256_checksum": "string",
                                    },
                                },
                                "permissions": "string",
                            },
                            "pkg": {
                                "desired_state": "string",
                                "apt": {
                                    "name": "string",
                                },
                                "deb": {
                                    "source": {
                                        "allow_insecure": False,
                                        "gcs": {
                                            "bucket": "string",
                                            "object": "string",
                                            "generation": "string",
                                        },
                                        "local_path": "string",
                                        "remote": {
                                            "uri": "string",
                                            "sha256_checksum": "string",
                                        },
                                    },
                                    "pull_deps": False,
                                },
                                "googet": {
                                    "name": "string",
                                },
                                "msi": {
                                    "source": {
                                        "allow_insecure": False,
                                        "gcs": {
                                            "bucket": "string",
                                            "object": "string",
                                            "generation": "string",
                                        },
                                        "local_path": "string",
                                        "remote": {
                                            "uri": "string",
                                            "sha256_checksum": "string",
                                        },
                                    },
                                    "properties": ["string"],
                                },
                                "rpm": {
                                    "source": {
                                        "allow_insecure": False,
                                        "gcs": {
                                            "bucket": "string",
                                            "object": "string",
                                            "generation": "string",
                                        },
                                        "local_path": "string",
                                        "remote": {
                                            "uri": "string",
                                            "sha256_checksum": "string",
                                        },
                                    },
                                    "pull_deps": False,
                                },
                                "yum": {
                                    "name": "string",
                                },
                                "zypper": {
                                    "name": "string",
                                },
                            },
                            "repository": {
                                "apt": {
                                    "archive_type": "string",
                                    "components": ["string"],
                                    "distribution": "string",
                                    "uri": "string",
                                    "gpg_key": "string",
                                },
                                "goo": {
                                    "name": "string",
                                    "url": "string",
                                },
                                "yum": {
                                    "base_url": "string",
                                    "id": "string",
                                    "display_name": "string",
                                    "gpg_keys": ["string"],
                                },
                                "zypper": {
                                    "base_url": "string",
                                    "id": "string",
                                    "display_name": "string",
                                    "gpg_keys": ["string"],
                                },
                            },
                        }],
                        "inventory_filters": [{
                            "os_short_name": "string",
                            "os_version": "string",
                        }],
                    }],
                    "allow_no_resource_group_match": False,
                    "description": "string",
                }],
                "etag": "string",
                "baseline": False,
                "name": "string",
                "description": "string",
                "reconciling": False,
                "revision_create_time": "string",
                "revision_id": "string",
                "deleted": False,
                "rollout_state": "string",
                "uid": "string",
            },
        },
        policy_orchestrator_id="string",
        description="string",
        labels={
            "string": "string",
        },
        orchestration_scope={
            "selectors": [{
                "location_selector": {
                    "included_locations": ["string"],
                },
                "resource_hierarchy_selector": {
                    "included_folders": ["string"],
                    "included_projects": ["string"],
                },
            }],
        },
        state="string")
    
    const v2policyOrchestratorForFolderResource = new gcp.osconfig.V2PolicyOrchestratorForFolder("v2policyOrchestratorForFolderResource", {
        action: "string",
        folderId: "string",
        orchestratedResource: {
            id: "string",
            osPolicyAssignmentV1Payload: {
                instanceFilter: {
                    all: false,
                    exclusionLabels: [{
                        labels: {
                            string: "string",
                        },
                    }],
                    inclusionLabels: [{
                        labels: {
                            string: "string",
                        },
                    }],
                    inventories: [{
                        osShortName: "string",
                        osVersion: "string",
                    }],
                },
                rollout: {
                    disruptionBudget: {
                        fixed: 0,
                        percent: 0,
                    },
                    minWaitDuration: "string",
                },
                osPolicies: [{
                    id: "string",
                    mode: "string",
                    resourceGroups: [{
                        resources: [{
                            id: "string",
                            exec: {
                                validate: {
                                    interpreter: "string",
                                    args: ["string"],
                                    file: {
                                        allowInsecure: false,
                                        gcs: {
                                            bucket: "string",
                                            object: "string",
                                            generation: "string",
                                        },
                                        localPath: "string",
                                        remote: {
                                            uri: "string",
                                            sha256Checksum: "string",
                                        },
                                    },
                                    outputFilePath: "string",
                                    script: "string",
                                },
                                enforce: {
                                    interpreter: "string",
                                    args: ["string"],
                                    file: {
                                        allowInsecure: false,
                                        gcs: {
                                            bucket: "string",
                                            object: "string",
                                            generation: "string",
                                        },
                                        localPath: "string",
                                        remote: {
                                            uri: "string",
                                            sha256Checksum: "string",
                                        },
                                    },
                                    outputFilePath: "string",
                                    script: "string",
                                },
                            },
                            file: {
                                path: "string",
                                state: "string",
                                content: "string",
                                file: {
                                    allowInsecure: false,
                                    gcs: {
                                        bucket: "string",
                                        object: "string",
                                        generation: "string",
                                    },
                                    localPath: "string",
                                    remote: {
                                        uri: "string",
                                        sha256Checksum: "string",
                                    },
                                },
                                permissions: "string",
                            },
                            pkg: {
                                desiredState: "string",
                                apt: {
                                    name: "string",
                                },
                                deb: {
                                    source: {
                                        allowInsecure: false,
                                        gcs: {
                                            bucket: "string",
                                            object: "string",
                                            generation: "string",
                                        },
                                        localPath: "string",
                                        remote: {
                                            uri: "string",
                                            sha256Checksum: "string",
                                        },
                                    },
                                    pullDeps: false,
                                },
                                googet: {
                                    name: "string",
                                },
                                msi: {
                                    source: {
                                        allowInsecure: false,
                                        gcs: {
                                            bucket: "string",
                                            object: "string",
                                            generation: "string",
                                        },
                                        localPath: "string",
                                        remote: {
                                            uri: "string",
                                            sha256Checksum: "string",
                                        },
                                    },
                                    properties: ["string"],
                                },
                                rpm: {
                                    source: {
                                        allowInsecure: false,
                                        gcs: {
                                            bucket: "string",
                                            object: "string",
                                            generation: "string",
                                        },
                                        localPath: "string",
                                        remote: {
                                            uri: "string",
                                            sha256Checksum: "string",
                                        },
                                    },
                                    pullDeps: false,
                                },
                                yum: {
                                    name: "string",
                                },
                                zypper: {
                                    name: "string",
                                },
                            },
                            repository: {
                                apt: {
                                    archiveType: "string",
                                    components: ["string"],
                                    distribution: "string",
                                    uri: "string",
                                    gpgKey: "string",
                                },
                                goo: {
                                    name: "string",
                                    url: "string",
                                },
                                yum: {
                                    baseUrl: "string",
                                    id: "string",
                                    displayName: "string",
                                    gpgKeys: ["string"],
                                },
                                zypper: {
                                    baseUrl: "string",
                                    id: "string",
                                    displayName: "string",
                                    gpgKeys: ["string"],
                                },
                            },
                        }],
                        inventoryFilters: [{
                            osShortName: "string",
                            osVersion: "string",
                        }],
                    }],
                    allowNoResourceGroupMatch: false,
                    description: "string",
                }],
                etag: "string",
                baseline: false,
                name: "string",
                description: "string",
                reconciling: false,
                revisionCreateTime: "string",
                revisionId: "string",
                deleted: false,
                rolloutState: "string",
                uid: "string",
            },
        },
        policyOrchestratorId: "string",
        description: "string",
        labels: {
            string: "string",
        },
        orchestrationScope: {
            selectors: [{
                locationSelector: {
                    includedLocations: ["string"],
                },
                resourceHierarchySelector: {
                    includedFolders: ["string"],
                    includedProjects: ["string"],
                },
            }],
        },
        state: "string",
    });
    
    type: gcp:osconfig:V2PolicyOrchestratorForFolder
    properties:
        action: string
        description: string
        folderId: string
        labels:
            string: string
        orchestratedResource:
            id: string
            osPolicyAssignmentV1Payload:
                baseline: false
                deleted: false
                description: string
                etag: string
                instanceFilter:
                    all: false
                    exclusionLabels:
                        - labels:
                            string: string
                    inclusionLabels:
                        - labels:
                            string: string
                    inventories:
                        - osShortName: string
                          osVersion: string
                name: string
                osPolicies:
                    - allowNoResourceGroupMatch: false
                      description: string
                      id: string
                      mode: string
                      resourceGroups:
                        - inventoryFilters:
                            - osShortName: string
                              osVersion: string
                          resources:
                            - exec:
                                enforce:
                                    args:
                                        - string
                                    file:
                                        allowInsecure: false
                                        gcs:
                                            bucket: string
                                            generation: string
                                            object: string
                                        localPath: string
                                        remote:
                                            sha256Checksum: string
                                            uri: string
                                    interpreter: string
                                    outputFilePath: string
                                    script: string
                                validate:
                                    args:
                                        - string
                                    file:
                                        allowInsecure: false
                                        gcs:
                                            bucket: string
                                            generation: string
                                            object: string
                                        localPath: string
                                        remote:
                                            sha256Checksum: string
                                            uri: string
                                    interpreter: string
                                    outputFilePath: string
                                    script: string
                              file:
                                content: string
                                file:
                                    allowInsecure: false
                                    gcs:
                                        bucket: string
                                        generation: string
                                        object: string
                                    localPath: string
                                    remote:
                                        sha256Checksum: string
                                        uri: string
                                path: string
                                permissions: string
                                state: string
                              id: string
                              pkg:
                                apt:
                                    name: string
                                deb:
                                    pullDeps: false
                                    source:
                                        allowInsecure: false
                                        gcs:
                                            bucket: string
                                            generation: string
                                            object: string
                                        localPath: string
                                        remote:
                                            sha256Checksum: string
                                            uri: string
                                desiredState: string
                                googet:
                                    name: string
                                msi:
                                    properties:
                                        - string
                                    source:
                                        allowInsecure: false
                                        gcs:
                                            bucket: string
                                            generation: string
                                            object: string
                                        localPath: string
                                        remote:
                                            sha256Checksum: string
                                            uri: string
                                rpm:
                                    pullDeps: false
                                    source:
                                        allowInsecure: false
                                        gcs:
                                            bucket: string
                                            generation: string
                                            object: string
                                        localPath: string
                                        remote:
                                            sha256Checksum: string
                                            uri: string
                                yum:
                                    name: string
                                zypper:
                                    name: string
                              repository:
                                apt:
                                    archiveType: string
                                    components:
                                        - string
                                    distribution: string
                                    gpgKey: string
                                    uri: string
                                goo:
                                    name: string
                                    url: string
                                yum:
                                    baseUrl: string
                                    displayName: string
                                    gpgKeys:
                                        - string
                                    id: string
                                zypper:
                                    baseUrl: string
                                    displayName: string
                                    gpgKeys:
                                        - string
                                    id: string
                reconciling: false
                revisionCreateTime: string
                revisionId: string
                rollout:
                    disruptionBudget:
                        fixed: 0
                        percent: 0
                    minWaitDuration: string
                rolloutState: string
                uid: string
        orchestrationScope:
            selectors:
                - locationSelector:
                    includedLocations:
                        - string
                  resourceHierarchySelector:
                    includedFolders:
                        - string
                    includedProjects:
                        - string
        policyOrchestratorId: string
        state: string
    

    V2PolicyOrchestratorForFolder Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The V2PolicyOrchestratorForFolder resource accepts the following input properties:

    Action string
    Action to be done by the orchestrator in projects/{project_id}/zones/{zone_id} locations defined by the orchestration_scope. Allowed values:

    • UPSERT - Orchestrator will create or update target resources.
    • DELETE - Orchestrator will delete target resources, if they exist
    FolderId string
    The parent resource name in the form of folders/{folder_id}/locations/global.
    OrchestratedResource V2PolicyOrchestratorForFolderOrchestratedResource
    Represents a resource that is being orchestrated by the policy orchestrator. Structure is documented below.
    PolicyOrchestratorId string
    The logical identifier of the policy orchestrator, with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the parent.
    Description string
    Freeform text describing the purpose of the resource.
    Labels Dictionary<string, string>
    Labels as key value pairs Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
    OrchestrationScope V2PolicyOrchestratorForFolderOrchestrationScope
    Defines a set of selectors which drive which resources are in scope of policy orchestration.
    State string
    (Output) State of the iteration. Possible values: PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    Action string
    Action to be done by the orchestrator in projects/{project_id}/zones/{zone_id} locations defined by the orchestration_scope. Allowed values:

    • UPSERT - Orchestrator will create or update target resources.
    • DELETE - Orchestrator will delete target resources, if they exist
    FolderId string
    The parent resource name in the form of folders/{folder_id}/locations/global.
    OrchestratedResource V2PolicyOrchestratorForFolderOrchestratedResourceArgs
    Represents a resource that is being orchestrated by the policy orchestrator. Structure is documented below.
    PolicyOrchestratorId string
    The logical identifier of the policy orchestrator, with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the parent.
    Description string
    Freeform text describing the purpose of the resource.
    Labels map[string]string
    Labels as key value pairs Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
    OrchestrationScope V2PolicyOrchestratorForFolderOrchestrationScopeArgs
    Defines a set of selectors which drive which resources are in scope of policy orchestration.
    State string
    (Output) State of the iteration. Possible values: PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    action String
    Action to be done by the orchestrator in projects/{project_id}/zones/{zone_id} locations defined by the orchestration_scope. Allowed values:

    • UPSERT - Orchestrator will create or update target resources.
    • DELETE - Orchestrator will delete target resources, if they exist
    folderId String
    The parent resource name in the form of folders/{folder_id}/locations/global.
    orchestratedResource V2PolicyOrchestratorForFolderOrchestratedResource
    Represents a resource that is being orchestrated by the policy orchestrator. Structure is documented below.
    policyOrchestratorId String
    The logical identifier of the policy orchestrator, with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the parent.
    description String
    Freeform text describing the purpose of the resource.
    labels Map<String,String>
    Labels as key value pairs Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
    orchestrationScope V2PolicyOrchestratorForFolderOrchestrationScope
    Defines a set of selectors which drive which resources are in scope of policy orchestration.
    state String
    (Output) State of the iteration. Possible values: PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    action string
    Action to be done by the orchestrator in projects/{project_id}/zones/{zone_id} locations defined by the orchestration_scope. Allowed values:

    • UPSERT - Orchestrator will create or update target resources.
    • DELETE - Orchestrator will delete target resources, if they exist
    folderId string
    The parent resource name in the form of folders/{folder_id}/locations/global.
    orchestratedResource V2PolicyOrchestratorForFolderOrchestratedResource
    Represents a resource that is being orchestrated by the policy orchestrator. Structure is documented below.
    policyOrchestratorId string
    The logical identifier of the policy orchestrator, with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the parent.
    description string
    Freeform text describing the purpose of the resource.
    labels {[key: string]: string}
    Labels as key value pairs Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
    orchestrationScope V2PolicyOrchestratorForFolderOrchestrationScope
    Defines a set of selectors which drive which resources are in scope of policy orchestration.
    state string
    (Output) State of the iteration. Possible values: PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    action str
    Action to be done by the orchestrator in projects/{project_id}/zones/{zone_id} locations defined by the orchestration_scope. Allowed values:

    • UPSERT - Orchestrator will create or update target resources.
    • DELETE - Orchestrator will delete target resources, if they exist
    folder_id str
    The parent resource name in the form of folders/{folder_id}/locations/global.
    orchestrated_resource V2PolicyOrchestratorForFolderOrchestratedResourceArgs
    Represents a resource that is being orchestrated by the policy orchestrator. Structure is documented below.
    policy_orchestrator_id str
    The logical identifier of the policy orchestrator, with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the parent.
    description str
    Freeform text describing the purpose of the resource.
    labels Mapping[str, str]
    Labels as key value pairs Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
    orchestration_scope V2PolicyOrchestratorForFolderOrchestrationScopeArgs
    Defines a set of selectors which drive which resources are in scope of policy orchestration.
    state str
    (Output) State of the iteration. Possible values: PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    action String
    Action to be done by the orchestrator in projects/{project_id}/zones/{zone_id} locations defined by the orchestration_scope. Allowed values:

    • UPSERT - Orchestrator will create or update target resources.
    • DELETE - Orchestrator will delete target resources, if they exist
    folderId String
    The parent resource name in the form of folders/{folder_id}/locations/global.
    orchestratedResource Property Map
    Represents a resource that is being orchestrated by the policy orchestrator. Structure is documented below.
    policyOrchestratorId String
    The logical identifier of the policy orchestrator, with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the parent.
    description String
    Freeform text describing the purpose of the resource.
    labels Map<String>
    Labels as key value pairs Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
    orchestrationScope Property Map
    Defines a set of selectors which drive which resources are in scope of policy orchestration.
    state String
    (Output) State of the iteration. Possible values: PROCESSING COMPLETED FAILED CANCELLED UNKNOWN

    Outputs

    All input properties are implicitly available as output properties. Additionally, the V2PolicyOrchestratorForFolder resource produces the following output properties:

    CreateTime string
    Timestamp when the policy orchestrator resource was created.
    EffectiveLabels Dictionary<string, string>
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    Etag string
    This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    Identifier. In form of

    • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
    OrchestrationStates List<V2PolicyOrchestratorForFolderOrchestrationState>
    Describes the state of the orchestration process. Structure is documented below.
    PulumiLabels Dictionary<string, string>
    The combination of labels configured directly on the resource and default labels configured on the provider.
    Reconciling bool
    Set to true, if the there are ongoing changes being applied by the orchestrator.
    UpdateTime string
    Timestamp when the policy orchestrator resource was last modified.
    CreateTime string
    Timestamp when the policy orchestrator resource was created.
    EffectiveLabels map[string]string
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    Etag string
    This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    Identifier. In form of

    • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
    OrchestrationStates []V2PolicyOrchestratorForFolderOrchestrationState
    Describes the state of the orchestration process. Structure is documented below.
    PulumiLabels map[string]string
    The combination of labels configured directly on the resource and default labels configured on the provider.
    Reconciling bool
    Set to true, if the there are ongoing changes being applied by the orchestrator.
    UpdateTime string
    Timestamp when the policy orchestrator resource was last modified.
    createTime String
    Timestamp when the policy orchestrator resource was created.
    effectiveLabels Map<String,String>
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    etag String
    This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    Identifier. In form of

    • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
    orchestrationStates List<V2PolicyOrchestratorForFolderOrchestrationState>
    Describes the state of the orchestration process. Structure is documented below.
    pulumiLabels Map<String,String>
    The combination of labels configured directly on the resource and default labels configured on the provider.
    reconciling Boolean
    Set to true, if the there are ongoing changes being applied by the orchestrator.
    updateTime String
    Timestamp when the policy orchestrator resource was last modified.
    createTime string
    Timestamp when the policy orchestrator resource was created.
    effectiveLabels {[key: string]: string}
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    etag string
    This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.
    id string
    The provider-assigned unique ID for this managed resource.
    name string
    Identifier. In form of

    • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
    orchestrationStates V2PolicyOrchestratorForFolderOrchestrationState[]
    Describes the state of the orchestration process. Structure is documented below.
    pulumiLabels {[key: string]: string}
    The combination of labels configured directly on the resource and default labels configured on the provider.
    reconciling boolean
    Set to true, if the there are ongoing changes being applied by the orchestrator.
    updateTime string
    Timestamp when the policy orchestrator resource was last modified.
    create_time str
    Timestamp when the policy orchestrator resource was created.
    effective_labels Mapping[str, str]
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    etag str
    This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.
    id str
    The provider-assigned unique ID for this managed resource.
    name str
    Identifier. In form of

    • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
    orchestration_states Sequence[V2PolicyOrchestratorForFolderOrchestrationState]
    Describes the state of the orchestration process. Structure is documented below.
    pulumi_labels Mapping[str, str]
    The combination of labels configured directly on the resource and default labels configured on the provider.
    reconciling bool
    Set to true, if the there are ongoing changes being applied by the orchestrator.
    update_time str
    Timestamp when the policy orchestrator resource was last modified.
    createTime String
    Timestamp when the policy orchestrator resource was created.
    effectiveLabels Map<String>
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    etag String
    This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    Identifier. In form of

    • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
    orchestrationStates List<Property Map>
    Describes the state of the orchestration process. Structure is documented below.
    pulumiLabels Map<String>
    The combination of labels configured directly on the resource and default labels configured on the provider.
    reconciling Boolean
    Set to true, if the there are ongoing changes being applied by the orchestrator.
    updateTime String
    Timestamp when the policy orchestrator resource was last modified.

    Look up Existing V2PolicyOrchestratorForFolder Resource

    Get an existing V2PolicyOrchestratorForFolder resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: V2PolicyOrchestratorForFolderState, opts?: CustomResourceOptions): V2PolicyOrchestratorForFolder
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            action: Optional[str] = None,
            create_time: Optional[str] = None,
            description: Optional[str] = None,
            effective_labels: Optional[Mapping[str, str]] = None,
            etag: Optional[str] = None,
            folder_id: Optional[str] = None,
            labels: Optional[Mapping[str, str]] = None,
            name: Optional[str] = None,
            orchestrated_resource: Optional[V2PolicyOrchestratorForFolderOrchestratedResourceArgs] = None,
            orchestration_scope: Optional[V2PolicyOrchestratorForFolderOrchestrationScopeArgs] = None,
            orchestration_states: Optional[Sequence[V2PolicyOrchestratorForFolderOrchestrationStateArgs]] = None,
            policy_orchestrator_id: Optional[str] = None,
            pulumi_labels: Optional[Mapping[str, str]] = None,
            reconciling: Optional[bool] = None,
            state: Optional[str] = None,
            update_time: Optional[str] = None) -> V2PolicyOrchestratorForFolder
    func GetV2PolicyOrchestratorForFolder(ctx *Context, name string, id IDInput, state *V2PolicyOrchestratorForFolderState, opts ...ResourceOption) (*V2PolicyOrchestratorForFolder, error)
    public static V2PolicyOrchestratorForFolder Get(string name, Input<string> id, V2PolicyOrchestratorForFolderState? state, CustomResourceOptions? opts = null)
    public static V2PolicyOrchestratorForFolder get(String name, Output<String> id, V2PolicyOrchestratorForFolderState state, CustomResourceOptions options)
    resources:  _:    type: gcp:osconfig:V2PolicyOrchestratorForFolder    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Action string
    Action to be done by the orchestrator in projects/{project_id}/zones/{zone_id} locations defined by the orchestration_scope. Allowed values:

    • UPSERT - Orchestrator will create or update target resources.
    • DELETE - Orchestrator will delete target resources, if they exist
    CreateTime string
    Timestamp when the policy orchestrator resource was created.
    Description string
    Freeform text describing the purpose of the resource.
    EffectiveLabels Dictionary<string, string>
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    Etag string
    This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.
    FolderId string
    The parent resource name in the form of folders/{folder_id}/locations/global.
    Labels Dictionary<string, string>
    Labels as key value pairs Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
    Name string
    Identifier. In form of

    • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
    OrchestratedResource V2PolicyOrchestratorForFolderOrchestratedResource
    Represents a resource that is being orchestrated by the policy orchestrator. Structure is documented below.
    OrchestrationScope V2PolicyOrchestratorForFolderOrchestrationScope
    Defines a set of selectors which drive which resources are in scope of policy orchestration.
    OrchestrationStates List<V2PolicyOrchestratorForFolderOrchestrationState>
    Describes the state of the orchestration process. Structure is documented below.
    PolicyOrchestratorId string
    The logical identifier of the policy orchestrator, with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the parent.
    PulumiLabels Dictionary<string, string>
    The combination of labels configured directly on the resource and default labels configured on the provider.
    Reconciling bool
    Set to true, if the there are ongoing changes being applied by the orchestrator.
    State string
    (Output) State of the iteration. Possible values: PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    UpdateTime string
    Timestamp when the policy orchestrator resource was last modified.
    Action string
    Action to be done by the orchestrator in projects/{project_id}/zones/{zone_id} locations defined by the orchestration_scope. Allowed values:

    • UPSERT - Orchestrator will create or update target resources.
    • DELETE - Orchestrator will delete target resources, if they exist
    CreateTime string
    Timestamp when the policy orchestrator resource was created.
    Description string
    Freeform text describing the purpose of the resource.
    EffectiveLabels map[string]string
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    Etag string
    This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.
    FolderId string
    The parent resource name in the form of folders/{folder_id}/locations/global.
    Labels map[string]string
    Labels as key value pairs Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
    Name string
    Identifier. In form of

    • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
    OrchestratedResource V2PolicyOrchestratorForFolderOrchestratedResourceArgs
    Represents a resource that is being orchestrated by the policy orchestrator. Structure is documented below.
    OrchestrationScope V2PolicyOrchestratorForFolderOrchestrationScopeArgs
    Defines a set of selectors which drive which resources are in scope of policy orchestration.
    OrchestrationStates []V2PolicyOrchestratorForFolderOrchestrationStateArgs
    Describes the state of the orchestration process. Structure is documented below.
    PolicyOrchestratorId string
    The logical identifier of the policy orchestrator, with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the parent.
    PulumiLabels map[string]string
    The combination of labels configured directly on the resource and default labels configured on the provider.
    Reconciling bool
    Set to true, if the there are ongoing changes being applied by the orchestrator.
    State string
    (Output) State of the iteration. Possible values: PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    UpdateTime string
    Timestamp when the policy orchestrator resource was last modified.
    action String
    Action to be done by the orchestrator in projects/{project_id}/zones/{zone_id} locations defined by the orchestration_scope. Allowed values:

    • UPSERT - Orchestrator will create or update target resources.
    • DELETE - Orchestrator will delete target resources, if they exist
    createTime String
    Timestamp when the policy orchestrator resource was created.
    description String
    Freeform text describing the purpose of the resource.
    effectiveLabels Map<String,String>
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    etag String
    This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.
    folderId String
    The parent resource name in the form of folders/{folder_id}/locations/global.
    labels Map<String,String>
    Labels as key value pairs Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
    name String
    Identifier. In form of

    • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
    orchestratedResource V2PolicyOrchestratorForFolderOrchestratedResource
    Represents a resource that is being orchestrated by the policy orchestrator. Structure is documented below.
    orchestrationScope V2PolicyOrchestratorForFolderOrchestrationScope
    Defines a set of selectors which drive which resources are in scope of policy orchestration.
    orchestrationStates List<V2PolicyOrchestratorForFolderOrchestrationState>
    Describes the state of the orchestration process. Structure is documented below.
    policyOrchestratorId String
    The logical identifier of the policy orchestrator, with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the parent.
    pulumiLabels Map<String,String>
    The combination of labels configured directly on the resource and default labels configured on the provider.
    reconciling Boolean
    Set to true, if the there are ongoing changes being applied by the orchestrator.
    state String
    (Output) State of the iteration. Possible values: PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    updateTime String
    Timestamp when the policy orchestrator resource was last modified.
    action string
    Action to be done by the orchestrator in projects/{project_id}/zones/{zone_id} locations defined by the orchestration_scope. Allowed values:

    • UPSERT - Orchestrator will create or update target resources.
    • DELETE - Orchestrator will delete target resources, if they exist
    createTime string
    Timestamp when the policy orchestrator resource was created.
    description string
    Freeform text describing the purpose of the resource.
    effectiveLabels {[key: string]: string}
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    etag string
    This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.
    folderId string
    The parent resource name in the form of folders/{folder_id}/locations/global.
    labels {[key: string]: string}
    Labels as key value pairs Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
    name string
    Identifier. In form of

    • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
    orchestratedResource V2PolicyOrchestratorForFolderOrchestratedResource
    Represents a resource that is being orchestrated by the policy orchestrator. Structure is documented below.
    orchestrationScope V2PolicyOrchestratorForFolderOrchestrationScope
    Defines a set of selectors which drive which resources are in scope of policy orchestration.
    orchestrationStates V2PolicyOrchestratorForFolderOrchestrationState[]
    Describes the state of the orchestration process. Structure is documented below.
    policyOrchestratorId string
    The logical identifier of the policy orchestrator, with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the parent.
    pulumiLabels {[key: string]: string}
    The combination of labels configured directly on the resource and default labels configured on the provider.
    reconciling boolean
    Set to true, if the there are ongoing changes being applied by the orchestrator.
    state string
    (Output) State of the iteration. Possible values: PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    updateTime string
    Timestamp when the policy orchestrator resource was last modified.
    action str
    Action to be done by the orchestrator in projects/{project_id}/zones/{zone_id} locations defined by the orchestration_scope. Allowed values:

    • UPSERT - Orchestrator will create or update target resources.
    • DELETE - Orchestrator will delete target resources, if they exist
    create_time str
    Timestamp when the policy orchestrator resource was created.
    description str
    Freeform text describing the purpose of the resource.
    effective_labels Mapping[str, str]
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    etag str
    This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.
    folder_id str
    The parent resource name in the form of folders/{folder_id}/locations/global.
    labels Mapping[str, str]
    Labels as key value pairs Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
    name str
    Identifier. In form of

    • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
    orchestrated_resource V2PolicyOrchestratorForFolderOrchestratedResourceArgs
    Represents a resource that is being orchestrated by the policy orchestrator. Structure is documented below.
    orchestration_scope V2PolicyOrchestratorForFolderOrchestrationScopeArgs
    Defines a set of selectors which drive which resources are in scope of policy orchestration.
    orchestration_states Sequence[V2PolicyOrchestratorForFolderOrchestrationStateArgs]
    Describes the state of the orchestration process. Structure is documented below.
    policy_orchestrator_id str
    The logical identifier of the policy orchestrator, with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the parent.
    pulumi_labels Mapping[str, str]
    The combination of labels configured directly on the resource and default labels configured on the provider.
    reconciling bool
    Set to true, if the there are ongoing changes being applied by the orchestrator.
    state str
    (Output) State of the iteration. Possible values: PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    update_time str
    Timestamp when the policy orchestrator resource was last modified.
    action String
    Action to be done by the orchestrator in projects/{project_id}/zones/{zone_id} locations defined by the orchestration_scope. Allowed values:

    • UPSERT - Orchestrator will create or update target resources.
    • DELETE - Orchestrator will delete target resources, if they exist
    createTime String
    Timestamp when the policy orchestrator resource was created.
    description String
    Freeform text describing the purpose of the resource.
    effectiveLabels Map<String>
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    etag String
    This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.
    folderId String
    The parent resource name in the form of folders/{folder_id}/locations/global.
    labels Map<String>
    Labels as key value pairs Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
    name String
    Identifier. In form of

    • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
    orchestratedResource Property Map
    Represents a resource that is being orchestrated by the policy orchestrator. Structure is documented below.
    orchestrationScope Property Map
    Defines a set of selectors which drive which resources are in scope of policy orchestration.
    orchestrationStates List<Property Map>
    Describes the state of the orchestration process. Structure is documented below.
    policyOrchestratorId String
    The logical identifier of the policy orchestrator, with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the parent.
    pulumiLabels Map<String>
    The combination of labels configured directly on the resource and default labels configured on the provider.
    reconciling Boolean
    Set to true, if the there are ongoing changes being applied by the orchestrator.
    state String
    (Output) State of the iteration. Possible values: PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    updateTime String
    Timestamp when the policy orchestrator resource was last modified.

    Supporting Types

    V2PolicyOrchestratorForFolderOrchestratedResource, V2PolicyOrchestratorForFolderOrchestratedResourceArgs

    Id string

    ID of the resource to be used while generating set of affected resources. For UPSERT action the value is auto-generated during PolicyOrchestrator creation when not set. When the value is set it should following next restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the project. For DELETE action, ID must be specified explicitly during PolicyOrchestrator creation.

    The os_policy_assignment_v1_payload block supports:

    OsPolicyAssignmentV1Payload V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1Payload
    OS policy assignment is an API resource that is used to apply a set of OS policies to a dynamically targeted group of Compute Engine VM instances. An OS policy is used to define the desired state configuration for a Compute Engine VM instance through a set of configuration resources that provide capabilities such as installing or removing software packages, or executing a script. For more information about the OS policy resource definitions and examples, see OS policy and OS policy assignment. Structure is documented below.
    Id string

    ID of the resource to be used while generating set of affected resources. For UPSERT action the value is auto-generated during PolicyOrchestrator creation when not set. When the value is set it should following next restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the project. For DELETE action, ID must be specified explicitly during PolicyOrchestrator creation.

    The os_policy_assignment_v1_payload block supports:

    OsPolicyAssignmentV1Payload V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1Payload
    OS policy assignment is an API resource that is used to apply a set of OS policies to a dynamically targeted group of Compute Engine VM instances. An OS policy is used to define the desired state configuration for a Compute Engine VM instance through a set of configuration resources that provide capabilities such as installing or removing software packages, or executing a script. For more information about the OS policy resource definitions and examples, see OS policy and OS policy assignment. Structure is documented below.
    id String

    ID of the resource to be used while generating set of affected resources. For UPSERT action the value is auto-generated during PolicyOrchestrator creation when not set. When the value is set it should following next restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the project. For DELETE action, ID must be specified explicitly during PolicyOrchestrator creation.

    The os_policy_assignment_v1_payload block supports:

    osPolicyAssignmentV1Payload V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1Payload
    OS policy assignment is an API resource that is used to apply a set of OS policies to a dynamically targeted group of Compute Engine VM instances. An OS policy is used to define the desired state configuration for a Compute Engine VM instance through a set of configuration resources that provide capabilities such as installing or removing software packages, or executing a script. For more information about the OS policy resource definitions and examples, see OS policy and OS policy assignment. Structure is documented below.
    id string

    ID of the resource to be used while generating set of affected resources. For UPSERT action the value is auto-generated during PolicyOrchestrator creation when not set. When the value is set it should following next restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the project. For DELETE action, ID must be specified explicitly during PolicyOrchestrator creation.

    The os_policy_assignment_v1_payload block supports:

    osPolicyAssignmentV1Payload V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1Payload
    OS policy assignment is an API resource that is used to apply a set of OS policies to a dynamically targeted group of Compute Engine VM instances. An OS policy is used to define the desired state configuration for a Compute Engine VM instance through a set of configuration resources that provide capabilities such as installing or removing software packages, or executing a script. For more information about the OS policy resource definitions and examples, see OS policy and OS policy assignment. Structure is documented below.
    id str

    ID of the resource to be used while generating set of affected resources. For UPSERT action the value is auto-generated during PolicyOrchestrator creation when not set. When the value is set it should following next restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the project. For DELETE action, ID must be specified explicitly during PolicyOrchestrator creation.

    The os_policy_assignment_v1_payload block supports:

    os_policy_assignment_v1_payload V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1Payload
    OS policy assignment is an API resource that is used to apply a set of OS policies to a dynamically targeted group of Compute Engine VM instances. An OS policy is used to define the desired state configuration for a Compute Engine VM instance through a set of configuration resources that provide capabilities such as installing or removing software packages, or executing a script. For more information about the OS policy resource definitions and examples, see OS policy and OS policy assignment. Structure is documented below.
    id String

    ID of the resource to be used while generating set of affected resources. For UPSERT action the value is auto-generated during PolicyOrchestrator creation when not set. When the value is set it should following next restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the project. For DELETE action, ID must be specified explicitly during PolicyOrchestrator creation.

    The os_policy_assignment_v1_payload block supports:

    osPolicyAssignmentV1Payload Property Map
    OS policy assignment is an API resource that is used to apply a set of OS policies to a dynamically targeted group of Compute Engine VM instances. An OS policy is used to define the desired state configuration for a Compute Engine VM instance through a set of configuration resources that provide capabilities such as installing or removing software packages, or executing a script. For more information about the OS policy resource definitions and examples, see OS policy and OS policy assignment. Structure is documented below.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1Payload, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadArgs

    InstanceFilter V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilter

    Filters to select target VMs for an assignment.

    If more than one filter criteria is specified below, a VM will be selected if and only if it satisfies all of them.

    OsPolicies List<V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicy>
    List of OS policies to be applied to the VMs.
    Rollout V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadRollout
    Message to configure the rollout at the zonal level for the OS policy assignment.
    Baseline bool

    Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision.

    For a given OS policy assignment, there is only one revision with a value of 'true' for this field.

    Deleted bool
    Indicates that this revision deletes the OS policy assignment.
    Description string
    OS policy assignment description. Length of the description is limited to 1024 characters.
    Etag string
    This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.
    Name string
    Identifier. In form of

    • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
    Reconciling bool
    Set to true, if the there are ongoing changes being applied by the orchestrator.
    RevisionCreateTime string
    The timestamp that the revision was created.
    RevisionId string
    The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
    RolloutState string
    OS policy assignment rollout state Possible values: IN_PROGRESS CANCELLING CANCELLED SUCCEEDED
    Uid string
    Server generated unique id for the OS policy assignment resource.
    InstanceFilter V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilter

    Filters to select target VMs for an assignment.

    If more than one filter criteria is specified below, a VM will be selected if and only if it satisfies all of them.

    OsPolicies []V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicy
    List of OS policies to be applied to the VMs.
    Rollout V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadRollout
    Message to configure the rollout at the zonal level for the OS policy assignment.
    Baseline bool

    Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision.

    For a given OS policy assignment, there is only one revision with a value of 'true' for this field.

    Deleted bool
    Indicates that this revision deletes the OS policy assignment.
    Description string
    OS policy assignment description. Length of the description is limited to 1024 characters.
    Etag string
    This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.
    Name string
    Identifier. In form of

    • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
    Reconciling bool
    Set to true, if the there are ongoing changes being applied by the orchestrator.
    RevisionCreateTime string
    The timestamp that the revision was created.
    RevisionId string
    The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
    RolloutState string
    OS policy assignment rollout state Possible values: IN_PROGRESS CANCELLING CANCELLED SUCCEEDED
    Uid string
    Server generated unique id for the OS policy assignment resource.
    instanceFilter V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilter

    Filters to select target VMs for an assignment.

    If more than one filter criteria is specified below, a VM will be selected if and only if it satisfies all of them.

    osPolicies List<V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicy>
    List of OS policies to be applied to the VMs.
    rollout V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadRollout
    Message to configure the rollout at the zonal level for the OS policy assignment.
    baseline Boolean

    Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision.

    For a given OS policy assignment, there is only one revision with a value of 'true' for this field.

    deleted Boolean
    Indicates that this revision deletes the OS policy assignment.
    description String
    OS policy assignment description. Length of the description is limited to 1024 characters.
    etag String
    This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.
    name String
    Identifier. In form of

    • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
    reconciling Boolean
    Set to true, if the there are ongoing changes being applied by the orchestrator.
    revisionCreateTime String
    The timestamp that the revision was created.
    revisionId String
    The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
    rolloutState String
    OS policy assignment rollout state Possible values: IN_PROGRESS CANCELLING CANCELLED SUCCEEDED
    uid String
    Server generated unique id for the OS policy assignment resource.
    instanceFilter V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilter

    Filters to select target VMs for an assignment.

    If more than one filter criteria is specified below, a VM will be selected if and only if it satisfies all of them.

    osPolicies V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicy[]
    List of OS policies to be applied to the VMs.
    rollout V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadRollout
    Message to configure the rollout at the zonal level for the OS policy assignment.
    baseline boolean

    Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision.

    For a given OS policy assignment, there is only one revision with a value of 'true' for this field.

    deleted boolean
    Indicates that this revision deletes the OS policy assignment.
    description string
    OS policy assignment description. Length of the description is limited to 1024 characters.
    etag string
    This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.
    name string
    Identifier. In form of

    • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
    reconciling boolean
    Set to true, if the there are ongoing changes being applied by the orchestrator.
    revisionCreateTime string
    The timestamp that the revision was created.
    revisionId string
    The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
    rolloutState string
    OS policy assignment rollout state Possible values: IN_PROGRESS CANCELLING CANCELLED SUCCEEDED
    uid string
    Server generated unique id for the OS policy assignment resource.
    instance_filter V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilter

    Filters to select target VMs for an assignment.

    If more than one filter criteria is specified below, a VM will be selected if and only if it satisfies all of them.

    os_policies Sequence[V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicy]
    List of OS policies to be applied to the VMs.
    rollout V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadRollout
    Message to configure the rollout at the zonal level for the OS policy assignment.
    baseline bool

    Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision.

    For a given OS policy assignment, there is only one revision with a value of 'true' for this field.

    deleted bool
    Indicates that this revision deletes the OS policy assignment.
    description str
    OS policy assignment description. Length of the description is limited to 1024 characters.
    etag str
    This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.
    name str
    Identifier. In form of

    • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
    reconciling bool
    Set to true, if the there are ongoing changes being applied by the orchestrator.
    revision_create_time str
    The timestamp that the revision was created.
    revision_id str
    The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
    rollout_state str
    OS policy assignment rollout state Possible values: IN_PROGRESS CANCELLING CANCELLED SUCCEEDED
    uid str
    Server generated unique id for the OS policy assignment resource.
    instanceFilter Property Map

    Filters to select target VMs for an assignment.

    If more than one filter criteria is specified below, a VM will be selected if and only if it satisfies all of them.

    osPolicies List<Property Map>
    List of OS policies to be applied to the VMs.
    rollout Property Map
    Message to configure the rollout at the zonal level for the OS policy assignment.
    baseline Boolean

    Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision.

    For a given OS policy assignment, there is only one revision with a value of 'true' for this field.

    deleted Boolean
    Indicates that this revision deletes the OS policy assignment.
    description String
    OS policy assignment description. Length of the description is limited to 1024 characters.
    etag String
    This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.
    name String
    Identifier. In form of

    • organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id}
    • projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}
    reconciling Boolean
    Set to true, if the there are ongoing changes being applied by the orchestrator.
    revisionCreateTime String
    The timestamp that the revision was created.
    revisionId String
    The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
    rolloutState String
    OS policy assignment rollout state Possible values: IN_PROGRESS CANCELLING CANCELLED SUCCEEDED
    uid String
    Server generated unique id for the OS policy assignment resource.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilter, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterArgs

    All bool
    Target all VMs in the project. If true, no other criteria is permitted.
    ExclusionLabels List<V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterExclusionLabel>
    List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM. Structure is documented below.
    InclusionLabels List<V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInclusionLabel>
    List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM. Structure is documented below.
    Inventories List<V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventory>
    List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories. Structure is documented below.
    All bool
    Target all VMs in the project. If true, no other criteria is permitted.
    ExclusionLabels []V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterExclusionLabel
    List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM. Structure is documented below.
    InclusionLabels []V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInclusionLabel
    List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM. Structure is documented below.
    Inventories []V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventory
    List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories. Structure is documented below.
    all Boolean
    Target all VMs in the project. If true, no other criteria is permitted.
    exclusionLabels List<V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterExclusionLabel>
    List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM. Structure is documented below.
    inclusionLabels List<V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInclusionLabel>
    List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM. Structure is documented below.
    inventories List<V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventory>
    List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories. Structure is documented below.
    all boolean
    Target all VMs in the project. If true, no other criteria is permitted.
    exclusionLabels V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterExclusionLabel[]
    List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM. Structure is documented below.
    inclusionLabels V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInclusionLabel[]
    List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM. Structure is documented below.
    inventories V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventory[]
    List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories. Structure is documented below.
    all bool
    Target all VMs in the project. If true, no other criteria is permitted.
    exclusion_labels Sequence[V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterExclusionLabel]
    List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM. Structure is documented below.
    inclusion_labels Sequence[V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInclusionLabel]
    List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM. Structure is documented below.
    inventories Sequence[V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventory]
    List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories. Structure is documented below.
    all Boolean
    Target all VMs in the project. If true, no other criteria is permitted.
    exclusionLabels List<Property Map>
    List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM. Structure is documented below.
    inclusionLabels List<Property Map>
    List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM. Structure is documented below.
    inventories List<Property Map>
    List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories. Structure is documented below.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterExclusionLabel, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterExclusionLabelArgs

    Labels Dictionary<string, string>
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    Labels map[string]string
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    labels Map<String,String>
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    labels {[key: string]: string}
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    labels Mapping[str, str]
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    labels Map<String>
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInclusionLabel, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInclusionLabelArgs

    Labels Dictionary<string, string>
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    Labels map[string]string
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    labels Map<String,String>
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    labels {[key: string]: string}
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    labels Mapping[str, str]
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    labels Map<String>
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventory, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadInstanceFilterInventoryArgs

    OsShortName string
    The OS short name
    OsVersion string
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    OsShortName string
    The OS short name
    OsVersion string
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    osShortName String
    The OS short name
    osVersion String
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    osShortName string
    The OS short name
    osVersion string
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    os_short_name str
    The OS short name
    os_version str
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    osShortName String
    The OS short name
    osVersion String
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicy, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyArgs

    Id string
    The id of the OS policy with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the assignment.
    Mode string
    Policy mode Possible values are: VALIDATION, ENFORCEMENT.
    ResourceGroups List<V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroup>
    List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match Structure is documented below.
    AllowNoResourceGroupMatch bool
    This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
    Description string
    Policy description. Length of the description is limited to 1024 characters.
    Id string
    The id of the OS policy with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the assignment.
    Mode string
    Policy mode Possible values are: VALIDATION, ENFORCEMENT.
    ResourceGroups []V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroup
    List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match Structure is documented below.
    AllowNoResourceGroupMatch bool
    This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
    Description string
    Policy description. Length of the description is limited to 1024 characters.
    id String
    The id of the OS policy with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the assignment.
    mode String
    Policy mode Possible values are: VALIDATION, ENFORCEMENT.
    resourceGroups List<V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroup>
    List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match Structure is documented below.
    allowNoResourceGroupMatch Boolean
    This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
    description String
    Policy description. Length of the description is limited to 1024 characters.
    id string
    The id of the OS policy with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the assignment.
    mode string
    Policy mode Possible values are: VALIDATION, ENFORCEMENT.
    resourceGroups V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroup[]
    List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match Structure is documented below.
    allowNoResourceGroupMatch boolean
    This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
    description string
    Policy description. Length of the description is limited to 1024 characters.
    id str
    The id of the OS policy with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the assignment.
    mode str
    Policy mode Possible values are: VALIDATION, ENFORCEMENT.
    resource_groups Sequence[V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroup]
    List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match Structure is documented below.
    allow_no_resource_group_match bool
    This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
    description str
    Policy description. Length of the description is limited to 1024 characters.
    id String
    The id of the OS policy with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the assignment.
    mode String
    Policy mode Possible values are: VALIDATION, ENFORCEMENT.
    resourceGroups List<Property Map>
    List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match Structure is documented below.
    allowNoResourceGroupMatch Boolean
    This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
    description String
    Policy description. Length of the description is limited to 1024 characters.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroup, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupArgs

    Resources List<V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResource>
    List of resources configured for this resource group. The resources are executed in the exact order specified here. Structure is documented below.
    InventoryFilters List<V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupInventoryFilter>
    List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally. Structure is documented below.
    Resources []V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResource
    List of resources configured for this resource group. The resources are executed in the exact order specified here. Structure is documented below.
    InventoryFilters []V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupInventoryFilter
    List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally. Structure is documented below.
    resources List<V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResource>
    List of resources configured for this resource group. The resources are executed in the exact order specified here. Structure is documented below.
    inventoryFilters List<V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupInventoryFilter>
    List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally. Structure is documented below.
    resources V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResource[]
    List of resources configured for this resource group. The resources are executed in the exact order specified here. Structure is documented below.
    inventoryFilters V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupInventoryFilter[]
    List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally. Structure is documented below.
    resources Sequence[V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResource]
    List of resources configured for this resource group. The resources are executed in the exact order specified here. Structure is documented below.
    inventory_filters Sequence[V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupInventoryFilter]
    List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally. Structure is documented below.
    resources List<Property Map>
    List of resources configured for this resource group. The resources are executed in the exact order specified here. Structure is documented below.
    inventoryFilters List<Property Map>
    List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally. Structure is documented below.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupInventoryFilter, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupInventoryFilterArgs

    OsShortName string
    The OS short name
    OsVersion string
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    OsShortName string
    The OS short name
    OsVersion string
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    osShortName String
    The OS short name
    osVersion String
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    osShortName string
    The OS short name
    osVersion string
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    os_short_name str
    The OS short name
    os_version str
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    osShortName String
    The OS short name
    osVersion String
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResource, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceArgs

    Id string
    The id of the resource with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the OS policy.
    Exec V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExec
    A resource that allows executing scripts on the VM. The ExecResource has 2 stages: validate and enforce and both stages accept a script as an argument to execute. When the ExecResource is applied by the agent, it first executes the script in the validate stage. The validate stage can signal that the ExecResource is already in the desired state by returning an exit code of 100. If the ExecResource is not in the desired state, it should return an exit code of 101. Any other exit code returned by this stage is considered an error. If the ExecResource is not in the desired state based on the exit code from the validate stage, the agent proceeds to execute the script from the enforce stage. If the ExecResource is already in the desired state, the enforce stage will not be run. Similar to validate stage, the enforce stage should return an exit code of 100 to indicate that the resource in now in its desired state. Any other exit code is considered an error. NOTE: An exit code of 100 was chosen over 0 (and 101 vs 1) to have an explicit indicator of in desired state, not in desired state and errors. Because, for example, Powershell will always return an exit code of 0 unless an exit statement is provided in the script. So, for reasons of consistency and being explicit, exit codes 100 and 101 were chosen. Structure is documented below.
    File V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFile
    A resource that manages the state of a file. Structure is documented below.
    Pkg V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkg
    A resource that manages a system package. Structure is documented below.
    Repository V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepository
    A resource that manages a package repository. Structure is documented below.
    Id string
    The id of the resource with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the OS policy.
    Exec V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExec
    A resource that allows executing scripts on the VM. The ExecResource has 2 stages: validate and enforce and both stages accept a script as an argument to execute. When the ExecResource is applied by the agent, it first executes the script in the validate stage. The validate stage can signal that the ExecResource is already in the desired state by returning an exit code of 100. If the ExecResource is not in the desired state, it should return an exit code of 101. Any other exit code returned by this stage is considered an error. If the ExecResource is not in the desired state based on the exit code from the validate stage, the agent proceeds to execute the script from the enforce stage. If the ExecResource is already in the desired state, the enforce stage will not be run. Similar to validate stage, the enforce stage should return an exit code of 100 to indicate that the resource in now in its desired state. Any other exit code is considered an error. NOTE: An exit code of 100 was chosen over 0 (and 101 vs 1) to have an explicit indicator of in desired state, not in desired state and errors. Because, for example, Powershell will always return an exit code of 0 unless an exit statement is provided in the script. So, for reasons of consistency and being explicit, exit codes 100 and 101 were chosen. Structure is documented below.
    File V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFile
    A resource that manages the state of a file. Structure is documented below.
    Pkg V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkg
    A resource that manages a system package. Structure is documented below.
    Repository V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepository
    A resource that manages a package repository. Structure is documented below.
    id String
    The id of the resource with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the OS policy.
    exec V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExec
    A resource that allows executing scripts on the VM. The ExecResource has 2 stages: validate and enforce and both stages accept a script as an argument to execute. When the ExecResource is applied by the agent, it first executes the script in the validate stage. The validate stage can signal that the ExecResource is already in the desired state by returning an exit code of 100. If the ExecResource is not in the desired state, it should return an exit code of 101. Any other exit code returned by this stage is considered an error. If the ExecResource is not in the desired state based on the exit code from the validate stage, the agent proceeds to execute the script from the enforce stage. If the ExecResource is already in the desired state, the enforce stage will not be run. Similar to validate stage, the enforce stage should return an exit code of 100 to indicate that the resource in now in its desired state. Any other exit code is considered an error. NOTE: An exit code of 100 was chosen over 0 (and 101 vs 1) to have an explicit indicator of in desired state, not in desired state and errors. Because, for example, Powershell will always return an exit code of 0 unless an exit statement is provided in the script. So, for reasons of consistency and being explicit, exit codes 100 and 101 were chosen. Structure is documented below.
    file V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFile
    A resource that manages the state of a file. Structure is documented below.
    pkg V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkg
    A resource that manages a system package. Structure is documented below.
    repository V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepository
    A resource that manages a package repository. Structure is documented below.
    id string
    The id of the resource with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the OS policy.
    exec V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExec
    A resource that allows executing scripts on the VM. The ExecResource has 2 stages: validate and enforce and both stages accept a script as an argument to execute. When the ExecResource is applied by the agent, it first executes the script in the validate stage. The validate stage can signal that the ExecResource is already in the desired state by returning an exit code of 100. If the ExecResource is not in the desired state, it should return an exit code of 101. Any other exit code returned by this stage is considered an error. If the ExecResource is not in the desired state based on the exit code from the validate stage, the agent proceeds to execute the script from the enforce stage. If the ExecResource is already in the desired state, the enforce stage will not be run. Similar to validate stage, the enforce stage should return an exit code of 100 to indicate that the resource in now in its desired state. Any other exit code is considered an error. NOTE: An exit code of 100 was chosen over 0 (and 101 vs 1) to have an explicit indicator of in desired state, not in desired state and errors. Because, for example, Powershell will always return an exit code of 0 unless an exit statement is provided in the script. So, for reasons of consistency and being explicit, exit codes 100 and 101 were chosen. Structure is documented below.
    file V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFile
    A resource that manages the state of a file. Structure is documented below.
    pkg V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkg
    A resource that manages a system package. Structure is documented below.
    repository V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepository
    A resource that manages a package repository. Structure is documented below.
    id str
    The id of the resource with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the OS policy.
    exec_ V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExec
    A resource that allows executing scripts on the VM. The ExecResource has 2 stages: validate and enforce and both stages accept a script as an argument to execute. When the ExecResource is applied by the agent, it first executes the script in the validate stage. The validate stage can signal that the ExecResource is already in the desired state by returning an exit code of 100. If the ExecResource is not in the desired state, it should return an exit code of 101. Any other exit code returned by this stage is considered an error. If the ExecResource is not in the desired state based on the exit code from the validate stage, the agent proceeds to execute the script from the enforce stage. If the ExecResource is already in the desired state, the enforce stage will not be run. Similar to validate stage, the enforce stage should return an exit code of 100 to indicate that the resource in now in its desired state. Any other exit code is considered an error. NOTE: An exit code of 100 was chosen over 0 (and 101 vs 1) to have an explicit indicator of in desired state, not in desired state and errors. Because, for example, Powershell will always return an exit code of 0 unless an exit statement is provided in the script. So, for reasons of consistency and being explicit, exit codes 100 and 101 were chosen. Structure is documented below.
    file V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFile
    A resource that manages the state of a file. Structure is documented below.
    pkg V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkg
    A resource that manages a system package. Structure is documented below.
    repository V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepository
    A resource that manages a package repository. Structure is documented below.
    id String
    The id of the resource with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the OS policy.
    exec Property Map
    A resource that allows executing scripts on the VM. The ExecResource has 2 stages: validate and enforce and both stages accept a script as an argument to execute. When the ExecResource is applied by the agent, it first executes the script in the validate stage. The validate stage can signal that the ExecResource is already in the desired state by returning an exit code of 100. If the ExecResource is not in the desired state, it should return an exit code of 101. Any other exit code returned by this stage is considered an error. If the ExecResource is not in the desired state based on the exit code from the validate stage, the agent proceeds to execute the script from the enforce stage. If the ExecResource is already in the desired state, the enforce stage will not be run. Similar to validate stage, the enforce stage should return an exit code of 100 to indicate that the resource in now in its desired state. Any other exit code is considered an error. NOTE: An exit code of 100 was chosen over 0 (and 101 vs 1) to have an explicit indicator of in desired state, not in desired state and errors. Because, for example, Powershell will always return an exit code of 0 unless an exit statement is provided in the script. So, for reasons of consistency and being explicit, exit codes 100 and 101 were chosen. Structure is documented below.
    file Property Map
    A resource that manages the state of a file. Structure is documented below.
    pkg Property Map
    A resource that manages a system package. Structure is documented below.
    repository Property Map
    A resource that manages a package repository. Structure is documented below.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExec, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecArgs

    validate Property Map
    A file or script to execute. Structure is documented below.
    enforce Property Map
    A file or script to execute. Structure is documented below.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforce, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceArgs

    Interpreter string
    The script interpreter to use. Possible values are: NONE, SHELL, POWERSHELL.
    Args List<string>
    Optional arguments to pass to the source during execution.
    File V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFile
    A remote or local file. Structure is documented below.
    OutputFilePath string
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 500K bytes.
    Script string
    An inline script. The size of the script is limited to 32KiB.
    Interpreter string
    The script interpreter to use. Possible values are: NONE, SHELL, POWERSHELL.
    Args []string
    Optional arguments to pass to the source during execution.
    File V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFile
    A remote or local file. Structure is documented below.
    OutputFilePath string
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 500K bytes.
    Script string
    An inline script. The size of the script is limited to 32KiB.
    interpreter String
    The script interpreter to use. Possible values are: NONE, SHELL, POWERSHELL.
    args List<String>
    Optional arguments to pass to the source during execution.
    file V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFile
    A remote or local file. Structure is documented below.
    outputFilePath String
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 500K bytes.
    script String
    An inline script. The size of the script is limited to 32KiB.
    interpreter string
    The script interpreter to use. Possible values are: NONE, SHELL, POWERSHELL.
    args string[]
    Optional arguments to pass to the source during execution.
    file V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFile
    A remote or local file. Structure is documented below.
    outputFilePath string
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 500K bytes.
    script string
    An inline script. The size of the script is limited to 32KiB.
    interpreter str
    The script interpreter to use. Possible values are: NONE, SHELL, POWERSHELL.
    args Sequence[str]
    Optional arguments to pass to the source during execution.
    file V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFile
    A remote or local file. Structure is documented below.
    output_file_path str
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 500K bytes.
    script str
    An inline script. The size of the script is limited to 32KiB.
    interpreter String
    The script interpreter to use. Possible values are: NONE, SHELL, POWERSHELL.
    args List<String>
    Optional arguments to pass to the source during execution.
    file Property Map
    A remote or local file. Structure is documented below.
    outputFilePath String
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 500K bytes.
    script String
    An inline script. The size of the script is limited to 32KiB.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFile, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileArgs

    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    LocalPath string
    A local path within the VM to use.
    Remote V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileRemote
    Specifies a file available via some URI. Structure is documented below.
    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    LocalPath string
    A local path within the VM to use.
    Remote V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileRemote
    Specifies a file available via some URI. Structure is documented below.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    localPath String
    A local path within the VM to use.
    remote V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileRemote
    Specifies a file available via some URI. Structure is documented below.
    allowInsecure boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    localPath string
    A local path within the VM to use.
    remote V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileRemote
    Specifies a file available via some URI. Structure is documented below.
    allow_insecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    local_path str
    A local path within the VM to use.
    remote V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileRemote
    Specifies a file available via some URI. Structure is documented below.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs Property Map
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    localPath String
    A local path within the VM to use.
    remote Property Map
    Specifies a file available via some URI. Structure is documented below.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileGcs, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileGcsArgs

    Bucket string
    Bucket of the Cloud Storage object.
    Object string
    Name of the Cloud Storage object.
    Generation string
    Generation number of the Cloud Storage object.
    Bucket string
    Bucket of the Cloud Storage object.
    Object string
    Name of the Cloud Storage object.
    Generation string
    Generation number of the Cloud Storage object.
    bucket String
    Bucket of the Cloud Storage object.
    object String
    Name of the Cloud Storage object.
    generation String
    Generation number of the Cloud Storage object.
    bucket string
    Bucket of the Cloud Storage object.
    object string
    Name of the Cloud Storage object.
    generation string
    Generation number of the Cloud Storage object.
    bucket str
    Bucket of the Cloud Storage object.
    object str
    Name of the Cloud Storage object.
    generation str
    Generation number of the Cloud Storage object.
    bucket String
    Bucket of the Cloud Storage object.
    object String
    Name of the Cloud Storage object.
    generation String
    Generation number of the Cloud Storage object.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileRemote, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecEnforceFileRemoteArgs

    Uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    Uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    uri String
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.
    uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum string
    SHA256 checksum of the remote file.
    uri str
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256_checksum str
    SHA256 checksum of the remote file.
    uri String
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidate, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateArgs

    Interpreter string
    The script interpreter to use. Possible values are: NONE, SHELL, POWERSHELL.
    Args List<string>
    Optional arguments to pass to the source during execution.
    File V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFile
    A remote or local file. Structure is documented below.
    OutputFilePath string
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 500K bytes.
    Script string
    An inline script. The size of the script is limited to 32KiB.
    Interpreter string
    The script interpreter to use. Possible values are: NONE, SHELL, POWERSHELL.
    Args []string
    Optional arguments to pass to the source during execution.
    File V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFile
    A remote or local file. Structure is documented below.
    OutputFilePath string
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 500K bytes.
    Script string
    An inline script. The size of the script is limited to 32KiB.
    interpreter String
    The script interpreter to use. Possible values are: NONE, SHELL, POWERSHELL.
    args List<String>
    Optional arguments to pass to the source during execution.
    file V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFile
    A remote or local file. Structure is documented below.
    outputFilePath String
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 500K bytes.
    script String
    An inline script. The size of the script is limited to 32KiB.
    interpreter string
    The script interpreter to use. Possible values are: NONE, SHELL, POWERSHELL.
    args string[]
    Optional arguments to pass to the source during execution.
    file V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFile
    A remote or local file. Structure is documented below.
    outputFilePath string
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 500K bytes.
    script string
    An inline script. The size of the script is limited to 32KiB.
    interpreter str
    The script interpreter to use. Possible values are: NONE, SHELL, POWERSHELL.
    args Sequence[str]
    Optional arguments to pass to the source during execution.
    file V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFile
    A remote or local file. Structure is documented below.
    output_file_path str
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 500K bytes.
    script str
    An inline script. The size of the script is limited to 32KiB.
    interpreter String
    The script interpreter to use. Possible values are: NONE, SHELL, POWERSHELL.
    args List<String>
    Optional arguments to pass to the source during execution.
    file Property Map
    A remote or local file. Structure is documented below.
    outputFilePath String
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 500K bytes.
    script String
    An inline script. The size of the script is limited to 32KiB.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFile, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileArgs

    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    LocalPath string
    A local path within the VM to use.
    Remote V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileRemote
    Specifies a file available via some URI. Structure is documented below.
    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    LocalPath string
    A local path within the VM to use.
    Remote V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileRemote
    Specifies a file available via some URI. Structure is documented below.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    localPath String
    A local path within the VM to use.
    remote V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileRemote
    Specifies a file available via some URI. Structure is documented below.
    allowInsecure boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    localPath string
    A local path within the VM to use.
    remote V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileRemote
    Specifies a file available via some URI. Structure is documented below.
    allow_insecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    local_path str
    A local path within the VM to use.
    remote V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileRemote
    Specifies a file available via some URI. Structure is documented below.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs Property Map
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    localPath String
    A local path within the VM to use.
    remote Property Map
    Specifies a file available via some URI. Structure is documented below.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileGcs, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileGcsArgs

    Bucket string
    Bucket of the Cloud Storage object.
    Object string
    Name of the Cloud Storage object.
    Generation string
    Generation number of the Cloud Storage object.
    Bucket string
    Bucket of the Cloud Storage object.
    Object string
    Name of the Cloud Storage object.
    Generation string
    Generation number of the Cloud Storage object.
    bucket String
    Bucket of the Cloud Storage object.
    object String
    Name of the Cloud Storage object.
    generation String
    Generation number of the Cloud Storage object.
    bucket string
    Bucket of the Cloud Storage object.
    object string
    Name of the Cloud Storage object.
    generation string
    Generation number of the Cloud Storage object.
    bucket str
    Bucket of the Cloud Storage object.
    object str
    Name of the Cloud Storage object.
    generation str
    Generation number of the Cloud Storage object.
    bucket String
    Bucket of the Cloud Storage object.
    object String
    Name of the Cloud Storage object.
    generation String
    Generation number of the Cloud Storage object.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileRemote, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceExecValidateFileRemoteArgs

    Uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    Uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    uri String
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.
    uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum string
    SHA256 checksum of the remote file.
    uri str
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256_checksum str
    SHA256 checksum of the remote file.
    uri String
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFile, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileArgs

    Path string
    The absolute path of the file within the VM.
    State string
    Desired state of the file. Possible values are: PRESENT, ABSENT, CONTENTS_MATCH.
    Content string
    A a file with this content. The size of the content is limited to 32KiB.
    File V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFile
    A remote or local file. Structure is documented below.
    Permissions string
    Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
    Path string
    The absolute path of the file within the VM.
    State string
    Desired state of the file. Possible values are: PRESENT, ABSENT, CONTENTS_MATCH.
    Content string
    A a file with this content. The size of the content is limited to 32KiB.
    File V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFile
    A remote or local file. Structure is documented below.
    Permissions string
    Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
    path String
    The absolute path of the file within the VM.
    state String
    Desired state of the file. Possible values are: PRESENT, ABSENT, CONTENTS_MATCH.
    content String
    A a file with this content. The size of the content is limited to 32KiB.
    file V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFile
    A remote or local file. Structure is documented below.
    permissions String
    Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
    path string
    The absolute path of the file within the VM.
    state string
    Desired state of the file. Possible values are: PRESENT, ABSENT, CONTENTS_MATCH.
    content string
    A a file with this content. The size of the content is limited to 32KiB.
    file V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFile
    A remote or local file. Structure is documented below.
    permissions string
    Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
    path str
    The absolute path of the file within the VM.
    state str
    Desired state of the file. Possible values are: PRESENT, ABSENT, CONTENTS_MATCH.
    content str
    A a file with this content. The size of the content is limited to 32KiB.
    file V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFile
    A remote or local file. Structure is documented below.
    permissions str
    Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
    path String
    The absolute path of the file within the VM.
    state String
    Desired state of the file. Possible values are: PRESENT, ABSENT, CONTENTS_MATCH.
    content String
    A a file with this content. The size of the content is limited to 32KiB.
    file Property Map
    A remote or local file. Structure is documented below.
    permissions String
    Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFile, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileArgs

    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    LocalPath string
    A local path within the VM to use.
    Remote V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileRemote
    Specifies a file available via some URI. Structure is documented below.
    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    LocalPath string
    A local path within the VM to use.
    Remote V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileRemote
    Specifies a file available via some URI. Structure is documented below.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    localPath String
    A local path within the VM to use.
    remote V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileRemote
    Specifies a file available via some URI. Structure is documented below.
    allowInsecure boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    localPath string
    A local path within the VM to use.
    remote V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileRemote
    Specifies a file available via some URI. Structure is documented below.
    allow_insecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    local_path str
    A local path within the VM to use.
    remote V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileRemote
    Specifies a file available via some URI. Structure is documented below.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs Property Map
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    localPath String
    A local path within the VM to use.
    remote Property Map
    Specifies a file available via some URI. Structure is documented below.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileGcs, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileGcsArgs

    Bucket string
    Bucket of the Cloud Storage object.
    Object string
    Name of the Cloud Storage object.
    Generation string
    Generation number of the Cloud Storage object.
    Bucket string
    Bucket of the Cloud Storage object.
    Object string
    Name of the Cloud Storage object.
    Generation string
    Generation number of the Cloud Storage object.
    bucket String
    Bucket of the Cloud Storage object.
    object String
    Name of the Cloud Storage object.
    generation String
    Generation number of the Cloud Storage object.
    bucket string
    Bucket of the Cloud Storage object.
    object string
    Name of the Cloud Storage object.
    generation string
    Generation number of the Cloud Storage object.
    bucket str
    Bucket of the Cloud Storage object.
    object str
    Name of the Cloud Storage object.
    generation str
    Generation number of the Cloud Storage object.
    bucket String
    Bucket of the Cloud Storage object.
    object String
    Name of the Cloud Storage object.
    generation String
    Generation number of the Cloud Storage object.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileRemote, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceFileFileRemoteArgs

    Uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    Uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    uri String
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.
    uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum string
    SHA256 checksum of the remote file.
    uri str
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256_checksum str
    SHA256 checksum of the remote file.
    uri String
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkg, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgArgs

    DesiredState string
    The desired state the agent should maintain for this package. Possible values are: INSTALLED, REMOVED.
    Apt V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgApt
    A package managed by APT.

    • install: apt-get update && apt-get -y install [name]
    • remove: apt-get -y remove [name] Structure is documented below.
    Deb V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDeb
    A deb package file. dpkg packages only support INSTALLED state. Structure is documented below.
    Googet V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgGooget
    A package managed by GooGet.

    • install: googet -noconfirm install package
    • remove: googet -noconfirm remove package Structure is documented below.
    Msi V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsi
    An MSI package. MSI packages only support INSTALLED state. Structure is documented below.
    Rpm V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpm
    An RPM package file. RPM packages only support INSTALLED state. Structure is documented below.
    Yum V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgYum
    A package managed by YUM.

    • install: yum -y install package
    • remove: yum -y remove package Structure is documented below.
    Zypper V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgZypper
    A package managed by Zypper.

    • install: zypper -y install package
    • remove: zypper -y rm package Structure is documented below.
    DesiredState string
    The desired state the agent should maintain for this package. Possible values are: INSTALLED, REMOVED.
    Apt V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgApt
    A package managed by APT.

    • install: apt-get update && apt-get -y install [name]
    • remove: apt-get -y remove [name] Structure is documented below.
    Deb V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDeb
    A deb package file. dpkg packages only support INSTALLED state. Structure is documented below.
    Googet V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgGooget
    A package managed by GooGet.

    • install: googet -noconfirm install package
    • remove: googet -noconfirm remove package Structure is documented below.
    Msi V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsi
    An MSI package. MSI packages only support INSTALLED state. Structure is documented below.
    Rpm V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpm
    An RPM package file. RPM packages only support INSTALLED state. Structure is documented below.
    Yum V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgYum
    A package managed by YUM.

    • install: yum -y install package
    • remove: yum -y remove package Structure is documented below.
    Zypper V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgZypper
    A package managed by Zypper.

    • install: zypper -y install package
    • remove: zypper -y rm package Structure is documented below.
    desiredState String
    The desired state the agent should maintain for this package. Possible values are: INSTALLED, REMOVED.
    apt V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgApt
    A package managed by APT.

    • install: apt-get update && apt-get -y install [name]
    • remove: apt-get -y remove [name] Structure is documented below.
    deb V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDeb
    A deb package file. dpkg packages only support INSTALLED state. Structure is documented below.
    googet V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgGooget
    A package managed by GooGet.

    • install: googet -noconfirm install package
    • remove: googet -noconfirm remove package Structure is documented below.
    msi V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsi
    An MSI package. MSI packages only support INSTALLED state. Structure is documented below.
    rpm V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpm
    An RPM package file. RPM packages only support INSTALLED state. Structure is documented below.
    yum V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgYum
    A package managed by YUM.

    • install: yum -y install package
    • remove: yum -y remove package Structure is documented below.
    zypper V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgZypper
    A package managed by Zypper.

    • install: zypper -y install package
    • remove: zypper -y rm package Structure is documented below.
    desiredState string
    The desired state the agent should maintain for this package. Possible values are: INSTALLED, REMOVED.
    apt V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgApt
    A package managed by APT.

    • install: apt-get update && apt-get -y install [name]
    • remove: apt-get -y remove [name] Structure is documented below.
    deb V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDeb
    A deb package file. dpkg packages only support INSTALLED state. Structure is documented below.
    googet V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgGooget
    A package managed by GooGet.

    • install: googet -noconfirm install package
    • remove: googet -noconfirm remove package Structure is documented below.
    msi V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsi
    An MSI package. MSI packages only support INSTALLED state. Structure is documented below.
    rpm V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpm
    An RPM package file. RPM packages only support INSTALLED state. Structure is documented below.
    yum V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgYum
    A package managed by YUM.

    • install: yum -y install package
    • remove: yum -y remove package Structure is documented below.
    zypper V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgZypper
    A package managed by Zypper.

    • install: zypper -y install package
    • remove: zypper -y rm package Structure is documented below.
    desired_state str
    The desired state the agent should maintain for this package. Possible values are: INSTALLED, REMOVED.
    apt V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgApt
    A package managed by APT.

    • install: apt-get update && apt-get -y install [name]
    • remove: apt-get -y remove [name] Structure is documented below.
    deb V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDeb
    A deb package file. dpkg packages only support INSTALLED state. Structure is documented below.
    googet V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgGooget
    A package managed by GooGet.

    • install: googet -noconfirm install package
    • remove: googet -noconfirm remove package Structure is documented below.
    msi V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsi
    An MSI package. MSI packages only support INSTALLED state. Structure is documented below.
    rpm V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpm
    An RPM package file. RPM packages only support INSTALLED state. Structure is documented below.
    yum V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgYum
    A package managed by YUM.

    • install: yum -y install package
    • remove: yum -y remove package Structure is documented below.
    zypper V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgZypper
    A package managed by Zypper.

    • install: zypper -y install package
    • remove: zypper -y rm package Structure is documented below.
    desiredState String
    The desired state the agent should maintain for this package. Possible values are: INSTALLED, REMOVED.
    apt Property Map
    A package managed by APT.

    • install: apt-get update && apt-get -y install [name]
    • remove: apt-get -y remove [name] Structure is documented below.
    deb Property Map
    A deb package file. dpkg packages only support INSTALLED state. Structure is documented below.
    googet Property Map
    A package managed by GooGet.

    • install: googet -noconfirm install package
    • remove: googet -noconfirm remove package Structure is documented below.
    msi Property Map
    An MSI package. MSI packages only support INSTALLED state. Structure is documented below.
    rpm Property Map
    An RPM package file. RPM packages only support INSTALLED state. Structure is documented below.
    yum Property Map
    A package managed by YUM.

    • install: yum -y install package
    • remove: yum -y remove package Structure is documented below.
    zypper Property Map
    A package managed by Zypper.

    • install: zypper -y install package
    • remove: zypper -y rm package Structure is documented below.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgApt, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgAptArgs

    Name string
    Package name.
    Name string
    Package name.
    name String
    Package name.
    name string
    Package name.
    name str
    Package name.
    name String
    Package name.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDeb, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebArgs

    Source V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSource
    A remote or local file. Structure is documented below.
    PullDeps bool
    Whether dependencies should also be installed.

    • install when false: dpkg -i package
    • install when true: apt-get update && apt-get -y install package.deb
    Source V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSource
    A remote or local file. Structure is documented below.
    PullDeps bool
    Whether dependencies should also be installed.

    • install when false: dpkg -i package
    • install when true: apt-get update && apt-get -y install package.deb
    source V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSource
    A remote or local file. Structure is documented below.
    pullDeps Boolean
    Whether dependencies should also be installed.

    • install when false: dpkg -i package
    • install when true: apt-get update && apt-get -y install package.deb
    source V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSource
    A remote or local file. Structure is documented below.
    pullDeps boolean
    Whether dependencies should also be installed.

    • install when false: dpkg -i package
    • install when true: apt-get update && apt-get -y install package.deb
    source V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSource
    A remote or local file. Structure is documented below.
    pull_deps bool
    Whether dependencies should also be installed.

    • install when false: dpkg -i package
    • install when true: apt-get update && apt-get -y install package.deb
    source Property Map
    A remote or local file. Structure is documented below.
    pullDeps Boolean
    Whether dependencies should also be installed.

    • install when false: dpkg -i package
    • install when true: apt-get update && apt-get -y install package.deb

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSource, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceArgs

    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    LocalPath string
    A local path within the VM to use.
    Remote V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceRemote
    Specifies a file available via some URI. Structure is documented below.
    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    LocalPath string
    A local path within the VM to use.
    Remote V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceRemote
    Specifies a file available via some URI. Structure is documented below.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    localPath String
    A local path within the VM to use.
    remote V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceRemote
    Specifies a file available via some URI. Structure is documented below.
    allowInsecure boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    localPath string
    A local path within the VM to use.
    remote V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceRemote
    Specifies a file available via some URI. Structure is documented below.
    allow_insecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    local_path str
    A local path within the VM to use.
    remote V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceRemote
    Specifies a file available via some URI. Structure is documented below.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs Property Map
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    localPath String
    A local path within the VM to use.
    remote Property Map
    Specifies a file available via some URI. Structure is documented below.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceGcs, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceGcsArgs

    Bucket string
    Bucket of the Cloud Storage object.
    Object string
    Name of the Cloud Storage object.
    Generation string
    Generation number of the Cloud Storage object.
    Bucket string
    Bucket of the Cloud Storage object.
    Object string
    Name of the Cloud Storage object.
    Generation string
    Generation number of the Cloud Storage object.
    bucket String
    Bucket of the Cloud Storage object.
    object String
    Name of the Cloud Storage object.
    generation String
    Generation number of the Cloud Storage object.
    bucket string
    Bucket of the Cloud Storage object.
    object string
    Name of the Cloud Storage object.
    generation string
    Generation number of the Cloud Storage object.
    bucket str
    Bucket of the Cloud Storage object.
    object str
    Name of the Cloud Storage object.
    generation str
    Generation number of the Cloud Storage object.
    bucket String
    Bucket of the Cloud Storage object.
    object String
    Name of the Cloud Storage object.
    generation String
    Generation number of the Cloud Storage object.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceRemote, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgDebSourceRemoteArgs

    Uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    Uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    uri String
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.
    uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum string
    SHA256 checksum of the remote file.
    uri str
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256_checksum str
    SHA256 checksum of the remote file.
    uri String
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgGooget, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgGoogetArgs

    Name string
    Package name.
    Name string
    Package name.
    name String
    Package name.
    name string
    Package name.
    name str
    Package name.
    name String
    Package name.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsi, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiArgs

    Source V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSource
    A remote or local file. Structure is documented below.
    Properties List<string>
    Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.
    Source V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSource
    A remote or local file. Structure is documented below.
    Properties []string
    Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.
    source V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSource
    A remote or local file. Structure is documented below.
    properties List<String>
    Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.
    source V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSource
    A remote or local file. Structure is documented below.
    properties string[]
    Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.
    source V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSource
    A remote or local file. Structure is documented below.
    properties Sequence[str]
    Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.
    source Property Map
    A remote or local file. Structure is documented below.
    properties List<String>
    Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSource, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceArgs

    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    LocalPath string
    A local path within the VM to use.
    Remote V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceRemote
    Specifies a file available via some URI. Structure is documented below.
    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    LocalPath string
    A local path within the VM to use.
    Remote V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceRemote
    Specifies a file available via some URI. Structure is documented below.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    localPath String
    A local path within the VM to use.
    remote V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceRemote
    Specifies a file available via some URI. Structure is documented below.
    allowInsecure boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    localPath string
    A local path within the VM to use.
    remote V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceRemote
    Specifies a file available via some URI. Structure is documented below.
    allow_insecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    local_path str
    A local path within the VM to use.
    remote V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceRemote
    Specifies a file available via some URI. Structure is documented below.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs Property Map
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    localPath String
    A local path within the VM to use.
    remote Property Map
    Specifies a file available via some URI. Structure is documented below.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceGcs, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceGcsArgs

    Bucket string
    Bucket of the Cloud Storage object.
    Object string
    Name of the Cloud Storage object.
    Generation string
    Generation number of the Cloud Storage object.
    Bucket string
    Bucket of the Cloud Storage object.
    Object string
    Name of the Cloud Storage object.
    Generation string
    Generation number of the Cloud Storage object.
    bucket String
    Bucket of the Cloud Storage object.
    object String
    Name of the Cloud Storage object.
    generation String
    Generation number of the Cloud Storage object.
    bucket string
    Bucket of the Cloud Storage object.
    object string
    Name of the Cloud Storage object.
    generation string
    Generation number of the Cloud Storage object.
    bucket str
    Bucket of the Cloud Storage object.
    object str
    Name of the Cloud Storage object.
    generation str
    Generation number of the Cloud Storage object.
    bucket String
    Bucket of the Cloud Storage object.
    object String
    Name of the Cloud Storage object.
    generation String
    Generation number of the Cloud Storage object.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceRemote, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgMsiSourceRemoteArgs

    Uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    Uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    uri String
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.
    uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum string
    SHA256 checksum of the remote file.
    uri str
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256_checksum str
    SHA256 checksum of the remote file.
    uri String
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpm, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmArgs

    Source V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSource
    A remote or local file. Structure is documented below.
    PullDeps bool
    Whether dependencies should also be installed.

    • install when false: rpm --upgrade --replacepkgs package.rpm
    • install when true: yum -y install package.rpm or zypper -y install package.rpm
    Source V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSource
    A remote or local file. Structure is documented below.
    PullDeps bool
    Whether dependencies should also be installed.

    • install when false: rpm --upgrade --replacepkgs package.rpm
    • install when true: yum -y install package.rpm or zypper -y install package.rpm
    source V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSource
    A remote or local file. Structure is documented below.
    pullDeps Boolean
    Whether dependencies should also be installed.

    • install when false: rpm --upgrade --replacepkgs package.rpm
    • install when true: yum -y install package.rpm or zypper -y install package.rpm
    source V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSource
    A remote or local file. Structure is documented below.
    pullDeps boolean
    Whether dependencies should also be installed.

    • install when false: rpm --upgrade --replacepkgs package.rpm
    • install when true: yum -y install package.rpm or zypper -y install package.rpm
    source V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSource
    A remote or local file. Structure is documented below.
    pull_deps bool
    Whether dependencies should also be installed.

    • install when false: rpm --upgrade --replacepkgs package.rpm
    • install when true: yum -y install package.rpm or zypper -y install package.rpm
    source Property Map
    A remote or local file. Structure is documented below.
    pullDeps Boolean
    Whether dependencies should also be installed.

    • install when false: rpm --upgrade --replacepkgs package.rpm
    • install when true: yum -y install package.rpm or zypper -y install package.rpm

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSource, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceArgs

    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    LocalPath string
    A local path within the VM to use.
    Remote V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceRemote
    Specifies a file available via some URI. Structure is documented below.
    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    LocalPath string
    A local path within the VM to use.
    Remote V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceRemote
    Specifies a file available via some URI. Structure is documented below.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    localPath String
    A local path within the VM to use.
    remote V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceRemote
    Specifies a file available via some URI. Structure is documented below.
    allowInsecure boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    localPath string
    A local path within the VM to use.
    remote V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceRemote
    Specifies a file available via some URI. Structure is documented below.
    allow_insecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceGcs
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    local_path str
    A local path within the VM to use.
    remote V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceRemote
    Specifies a file available via some URI. Structure is documented below.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs Property Map
    Specifies a file available as a Cloud Storage Object. Structure is documented below.
    localPath String
    A local path within the VM to use.
    remote Property Map
    Specifies a file available via some URI. Structure is documented below.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceGcs, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceGcsArgs

    Bucket string
    Bucket of the Cloud Storage object.
    Object string
    Name of the Cloud Storage object.
    Generation string
    Generation number of the Cloud Storage object.
    Bucket string
    Bucket of the Cloud Storage object.
    Object string
    Name of the Cloud Storage object.
    Generation string
    Generation number of the Cloud Storage object.
    bucket String
    Bucket of the Cloud Storage object.
    object String
    Name of the Cloud Storage object.
    generation String
    Generation number of the Cloud Storage object.
    bucket string
    Bucket of the Cloud Storage object.
    object string
    Name of the Cloud Storage object.
    generation string
    Generation number of the Cloud Storage object.
    bucket str
    Bucket of the Cloud Storage object.
    object str
    Name of the Cloud Storage object.
    generation str
    Generation number of the Cloud Storage object.
    bucket String
    Bucket of the Cloud Storage object.
    object String
    Name of the Cloud Storage object.
    generation String
    Generation number of the Cloud Storage object.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceRemote, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgRpmSourceRemoteArgs

    Uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    Uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    uri String
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.
    uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum string
    SHA256 checksum of the remote file.
    uri str
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256_checksum str
    SHA256 checksum of the remote file.
    uri String
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgYum, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgYumArgs

    Name string
    Package name.
    Name string
    Package name.
    name String
    Package name.
    name string
    Package name.
    name str
    Package name.
    name String
    Package name.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgZypper, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourcePkgZypperArgs

    Name string
    Package name.
    Name string
    Package name.
    name String
    Package name.
    name string
    Package name.
    name str
    Package name.
    name String
    Package name.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepository, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryArgs

    Apt V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryApt
    Represents a single apt package repository. These will be added to a repo file that will be managed at /etc/apt/sources.list.d/google_osconfig.list. Structure is documented below.
    Goo V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryGoo
    Represents a Goo package repository. These are added to a repo file that is managed at C:/ProgramData/GooGet/repos/google_osconfig.repo. Structure is documented below.
    Yum V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryYum
    Represents a single yum package repository. These are added to a repo file that is managed at /etc/yum.repos.d/google_osconfig.repo. Structure is documented below.
    Zypper V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryZypper
    Represents a single zypper package repository. These are added to a repo file that is managed at /etc/zypp/repos.d/google_osconfig.repo. Structure is documented below.
    Apt V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryApt
    Represents a single apt package repository. These will be added to a repo file that will be managed at /etc/apt/sources.list.d/google_osconfig.list. Structure is documented below.
    Goo V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryGoo
    Represents a Goo package repository. These are added to a repo file that is managed at C:/ProgramData/GooGet/repos/google_osconfig.repo. Structure is documented below.
    Yum V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryYum
    Represents a single yum package repository. These are added to a repo file that is managed at /etc/yum.repos.d/google_osconfig.repo. Structure is documented below.
    Zypper V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryZypper
    Represents a single zypper package repository. These are added to a repo file that is managed at /etc/zypp/repos.d/google_osconfig.repo. Structure is documented below.
    apt V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryApt
    Represents a single apt package repository. These will be added to a repo file that will be managed at /etc/apt/sources.list.d/google_osconfig.list. Structure is documented below.
    goo V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryGoo
    Represents a Goo package repository. These are added to a repo file that is managed at C:/ProgramData/GooGet/repos/google_osconfig.repo. Structure is documented below.
    yum V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryYum
    Represents a single yum package repository. These are added to a repo file that is managed at /etc/yum.repos.d/google_osconfig.repo. Structure is documented below.
    zypper V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryZypper
    Represents a single zypper package repository. These are added to a repo file that is managed at /etc/zypp/repos.d/google_osconfig.repo. Structure is documented below.
    apt V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryApt
    Represents a single apt package repository. These will be added to a repo file that will be managed at /etc/apt/sources.list.d/google_osconfig.list. Structure is documented below.
    goo V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryGoo
    Represents a Goo package repository. These are added to a repo file that is managed at C:/ProgramData/GooGet/repos/google_osconfig.repo. Structure is documented below.
    yum V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryYum
    Represents a single yum package repository. These are added to a repo file that is managed at /etc/yum.repos.d/google_osconfig.repo. Structure is documented below.
    zypper V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryZypper
    Represents a single zypper package repository. These are added to a repo file that is managed at /etc/zypp/repos.d/google_osconfig.repo. Structure is documented below.
    apt V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryApt
    Represents a single apt package repository. These will be added to a repo file that will be managed at /etc/apt/sources.list.d/google_osconfig.list. Structure is documented below.
    goo V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryGoo
    Represents a Goo package repository. These are added to a repo file that is managed at C:/ProgramData/GooGet/repos/google_osconfig.repo. Structure is documented below.
    yum V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryYum
    Represents a single yum package repository. These are added to a repo file that is managed at /etc/yum.repos.d/google_osconfig.repo. Structure is documented below.
    zypper V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryZypper
    Represents a single zypper package repository. These are added to a repo file that is managed at /etc/zypp/repos.d/google_osconfig.repo. Structure is documented below.
    apt Property Map
    Represents a single apt package repository. These will be added to a repo file that will be managed at /etc/apt/sources.list.d/google_osconfig.list. Structure is documented below.
    goo Property Map
    Represents a Goo package repository. These are added to a repo file that is managed at C:/ProgramData/GooGet/repos/google_osconfig.repo. Structure is documented below.
    yum Property Map
    Represents a single yum package repository. These are added to a repo file that is managed at /etc/yum.repos.d/google_osconfig.repo. Structure is documented below.
    zypper Property Map
    Represents a single zypper package repository. These are added to a repo file that is managed at /etc/zypp/repos.d/google_osconfig.repo. Structure is documented below.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryApt, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryAptArgs

    ArchiveType string
    Type of archive files in this repository. Possible values are: DEB, DEB_SRC.
    Components List<string>
    List of components for this repository. Must contain at least one item.
    Distribution string
    Distribution of this repository.
    Uri string
    URI for this repository.
    GpgKey string
    URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
    ArchiveType string
    Type of archive files in this repository. Possible values are: DEB, DEB_SRC.
    Components []string
    List of components for this repository. Must contain at least one item.
    Distribution string
    Distribution of this repository.
    Uri string
    URI for this repository.
    GpgKey string
    URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
    archiveType String
    Type of archive files in this repository. Possible values are: DEB, DEB_SRC.
    components List<String>
    List of components for this repository. Must contain at least one item.
    distribution String
    Distribution of this repository.
    uri String
    URI for this repository.
    gpgKey String
    URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
    archiveType string
    Type of archive files in this repository. Possible values are: DEB, DEB_SRC.
    components string[]
    List of components for this repository. Must contain at least one item.
    distribution string
    Distribution of this repository.
    uri string
    URI for this repository.
    gpgKey string
    URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
    archive_type str
    Type of archive files in this repository. Possible values are: DEB, DEB_SRC.
    components Sequence[str]
    List of components for this repository. Must contain at least one item.
    distribution str
    Distribution of this repository.
    uri str
    URI for this repository.
    gpg_key str
    URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
    archiveType String
    Type of archive files in this repository. Possible values are: DEB, DEB_SRC.
    components List<String>
    List of components for this repository. Must contain at least one item.
    distribution String
    Distribution of this repository.
    uri String
    URI for this repository.
    gpgKey String
    URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryGoo, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryGooArgs

    Name string
    The name of the repository.
    Url string
    The url of the repository.
    Name string
    The name of the repository.
    Url string
    The url of the repository.
    name String
    The name of the repository.
    url String
    The url of the repository.
    name string
    The name of the repository.
    url string
    The url of the repository.
    name str
    The name of the repository.
    url str
    The url of the repository.
    name String
    The name of the repository.
    url String
    The url of the repository.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryYum, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryYumArgs

    BaseUrl string
    The location of the repository directory.
    Id string
    A one word, unique name for this repository. This is the repo id in the yum config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for resource conflicts.
    DisplayName string
    The display name of the repository.
    GpgKeys List<string>
    URIs of GPG keys.
    BaseUrl string
    The location of the repository directory.
    Id string
    A one word, unique name for this repository. This is the repo id in the yum config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for resource conflicts.
    DisplayName string
    The display name of the repository.
    GpgKeys []string
    URIs of GPG keys.
    baseUrl String
    The location of the repository directory.
    id String
    A one word, unique name for this repository. This is the repo id in the yum config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for resource conflicts.
    displayName String
    The display name of the repository.
    gpgKeys List<String>
    URIs of GPG keys.
    baseUrl string
    The location of the repository directory.
    id string
    A one word, unique name for this repository. This is the repo id in the yum config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for resource conflicts.
    displayName string
    The display name of the repository.
    gpgKeys string[]
    URIs of GPG keys.
    base_url str
    The location of the repository directory.
    id str
    A one word, unique name for this repository. This is the repo id in the yum config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for resource conflicts.
    display_name str
    The display name of the repository.
    gpg_keys Sequence[str]
    URIs of GPG keys.
    baseUrl String
    The location of the repository directory.
    id String
    A one word, unique name for this repository. This is the repo id in the yum config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for resource conflicts.
    displayName String
    The display name of the repository.
    gpgKeys List<String>
    URIs of GPG keys.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryZypper, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadOsPolicyResourceGroupResourceRepositoryZypperArgs

    BaseUrl string
    The location of the repository directory.
    Id string
    A one word, unique name for this repository. This is the repo id in the zypper config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
    DisplayName string
    The display name of the repository.
    GpgKeys List<string>
    URIs of GPG keys.
    BaseUrl string
    The location of the repository directory.
    Id string
    A one word, unique name for this repository. This is the repo id in the zypper config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
    DisplayName string
    The display name of the repository.
    GpgKeys []string
    URIs of GPG keys.
    baseUrl String
    The location of the repository directory.
    id String
    A one word, unique name for this repository. This is the repo id in the zypper config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
    displayName String
    The display name of the repository.
    gpgKeys List<String>
    URIs of GPG keys.
    baseUrl string
    The location of the repository directory.
    id string
    A one word, unique name for this repository. This is the repo id in the zypper config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
    displayName string
    The display name of the repository.
    gpgKeys string[]
    URIs of GPG keys.
    base_url str
    The location of the repository directory.
    id str
    A one word, unique name for this repository. This is the repo id in the zypper config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
    display_name str
    The display name of the repository.
    gpg_keys Sequence[str]
    URIs of GPG keys.
    baseUrl String
    The location of the repository directory.
    id String
    A one word, unique name for this repository. This is the repo id in the zypper config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
    displayName String
    The display name of the repository.
    gpgKeys List<String>
    URIs of GPG keys.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadRollout, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutArgs

    DisruptionBudget V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudget
    Message encapsulating a value that can be either absolute ("fixed") or relative ("percent") to a value. Structure is documented below.
    MinWaitDuration string
    This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.
    DisruptionBudget V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudget
    Message encapsulating a value that can be either absolute ("fixed") or relative ("percent") to a value. Structure is documented below.
    MinWaitDuration string
    This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.
    disruptionBudget V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudget
    Message encapsulating a value that can be either absolute ("fixed") or relative ("percent") to a value. Structure is documented below.
    minWaitDuration String
    This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.
    disruptionBudget V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudget
    Message encapsulating a value that can be either absolute ("fixed") or relative ("percent") to a value. Structure is documented below.
    minWaitDuration string
    This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.
    disruption_budget V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudget
    Message encapsulating a value that can be either absolute ("fixed") or relative ("percent") to a value. Structure is documented below.
    min_wait_duration str
    This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.
    disruptionBudget Property Map
    Message encapsulating a value that can be either absolute ("fixed") or relative ("percent") to a value. Structure is documented below.
    minWaitDuration String
    This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.

    V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudget, V2PolicyOrchestratorForFolderOrchestratedResourceOsPolicyAssignmentV1PayloadRolloutDisruptionBudgetArgs

    Fixed int
    Specifies a fixed value.
    Percent int
    Specifies the relative value defined as a percentage, which will be multiplied by a reference value.


    Fixed int
    Specifies a fixed value.
    Percent int
    Specifies the relative value defined as a percentage, which will be multiplied by a reference value.


    fixed Integer
    Specifies a fixed value.
    percent Integer
    Specifies the relative value defined as a percentage, which will be multiplied by a reference value.


    fixed number
    Specifies a fixed value.
    percent number
    Specifies the relative value defined as a percentage, which will be multiplied by a reference value.


    fixed int
    Specifies a fixed value.
    percent int
    Specifies the relative value defined as a percentage, which will be multiplied by a reference value.


    fixed Number
    Specifies a fixed value.
    percent Number
    Specifies the relative value defined as a percentage, which will be multiplied by a reference value.


    V2PolicyOrchestratorForFolderOrchestrationScope, V2PolicyOrchestratorForFolderOrchestrationScopeArgs

    Selectors List<V2PolicyOrchestratorForFolderOrchestrationScopeSelector>
    Selectors of the orchestration scope. There is a logical AND between each selector defined. When there is no explicit ResourceHierarchySelector selector specified, the scope is by default bounded to the parent of the policy orchestrator resource. Structure is documented below.
    Selectors []V2PolicyOrchestratorForFolderOrchestrationScopeSelector
    Selectors of the orchestration scope. There is a logical AND between each selector defined. When there is no explicit ResourceHierarchySelector selector specified, the scope is by default bounded to the parent of the policy orchestrator resource. Structure is documented below.
    selectors List<V2PolicyOrchestratorForFolderOrchestrationScopeSelector>
    Selectors of the orchestration scope. There is a logical AND between each selector defined. When there is no explicit ResourceHierarchySelector selector specified, the scope is by default bounded to the parent of the policy orchestrator resource. Structure is documented below.
    selectors V2PolicyOrchestratorForFolderOrchestrationScopeSelector[]
    Selectors of the orchestration scope. There is a logical AND between each selector defined. When there is no explicit ResourceHierarchySelector selector specified, the scope is by default bounded to the parent of the policy orchestrator resource. Structure is documented below.
    selectors Sequence[V2PolicyOrchestratorForFolderOrchestrationScopeSelector]
    Selectors of the orchestration scope. There is a logical AND between each selector defined. When there is no explicit ResourceHierarchySelector selector specified, the scope is by default bounded to the parent of the policy orchestrator resource. Structure is documented below.
    selectors List<Property Map>
    Selectors of the orchestration scope. There is a logical AND between each selector defined. When there is no explicit ResourceHierarchySelector selector specified, the scope is by default bounded to the parent of the policy orchestrator resource. Structure is documented below.

    V2PolicyOrchestratorForFolderOrchestrationScopeSelector, V2PolicyOrchestratorForFolderOrchestrationScopeSelectorArgs

    LocationSelector V2PolicyOrchestratorForFolderOrchestrationScopeSelectorLocationSelector
    Selector containing locations in scope. Structure is documented below.
    ResourceHierarchySelector V2PolicyOrchestratorForFolderOrchestrationScopeSelectorResourceHierarchySelector
    Selector containing Cloud Resource Manager resource hierarchy nodes. Structure is documented below.
    LocationSelector V2PolicyOrchestratorForFolderOrchestrationScopeSelectorLocationSelector
    Selector containing locations in scope. Structure is documented below.
    ResourceHierarchySelector V2PolicyOrchestratorForFolderOrchestrationScopeSelectorResourceHierarchySelector
    Selector containing Cloud Resource Manager resource hierarchy nodes. Structure is documented below.
    locationSelector V2PolicyOrchestratorForFolderOrchestrationScopeSelectorLocationSelector
    Selector containing locations in scope. Structure is documented below.
    resourceHierarchySelector V2PolicyOrchestratorForFolderOrchestrationScopeSelectorResourceHierarchySelector
    Selector containing Cloud Resource Manager resource hierarchy nodes. Structure is documented below.
    locationSelector V2PolicyOrchestratorForFolderOrchestrationScopeSelectorLocationSelector
    Selector containing locations in scope. Structure is documented below.
    resourceHierarchySelector V2PolicyOrchestratorForFolderOrchestrationScopeSelectorResourceHierarchySelector
    Selector containing Cloud Resource Manager resource hierarchy nodes. Structure is documented below.
    location_selector V2PolicyOrchestratorForFolderOrchestrationScopeSelectorLocationSelector
    Selector containing locations in scope. Structure is documented below.
    resource_hierarchy_selector V2PolicyOrchestratorForFolderOrchestrationScopeSelectorResourceHierarchySelector
    Selector containing Cloud Resource Manager resource hierarchy nodes. Structure is documented below.
    locationSelector Property Map
    Selector containing locations in scope. Structure is documented below.
    resourceHierarchySelector Property Map
    Selector containing Cloud Resource Manager resource hierarchy nodes. Structure is documented below.

    V2PolicyOrchestratorForFolderOrchestrationScopeSelectorLocationSelector, V2PolicyOrchestratorForFolderOrchestrationScopeSelectorLocationSelectorArgs

    IncludedLocations List<string>
    Names of the locations in scope. Format: us-central1-a
    IncludedLocations []string
    Names of the locations in scope. Format: us-central1-a
    includedLocations List<String>
    Names of the locations in scope. Format: us-central1-a
    includedLocations string[]
    Names of the locations in scope. Format: us-central1-a
    included_locations Sequence[str]
    Names of the locations in scope. Format: us-central1-a
    includedLocations List<String>
    Names of the locations in scope. Format: us-central1-a

    V2PolicyOrchestratorForFolderOrchestrationScopeSelectorResourceHierarchySelector, V2PolicyOrchestratorForFolderOrchestrationScopeSelectorResourceHierarchySelectorArgs

    IncludedFolders List<string>
    Names of the folders in scope. Format: folders/{folder_id}
    IncludedProjects List<string>
    Names of the projects in scope. Format: projects/{project_number}
    IncludedFolders []string
    Names of the folders in scope. Format: folders/{folder_id}
    IncludedProjects []string
    Names of the projects in scope. Format: projects/{project_number}
    includedFolders List<String>
    Names of the folders in scope. Format: folders/{folder_id}
    includedProjects List<String>
    Names of the projects in scope. Format: projects/{project_number}
    includedFolders string[]
    Names of the folders in scope. Format: folders/{folder_id}
    includedProjects string[]
    Names of the projects in scope. Format: projects/{project_number}
    included_folders Sequence[str]
    Names of the folders in scope. Format: folders/{folder_id}
    included_projects Sequence[str]
    Names of the projects in scope. Format: projects/{project_number}
    includedFolders List<String>
    Names of the folders in scope. Format: folders/{folder_id}
    includedProjects List<String>
    Names of the projects in scope. Format: projects/{project_number}

    V2PolicyOrchestratorForFolderOrchestrationState, V2PolicyOrchestratorForFolderOrchestrationStateArgs

    CurrentIterationStates List<V2PolicyOrchestratorForFolderOrchestrationStateCurrentIterationState>
    (Output) Describes the state of a single iteration of the orchestrator. Structure is documented below.
    PreviousIterationStates List<V2PolicyOrchestratorForFolderOrchestrationStatePreviousIterationState>
    (Output) Describes the state of a single iteration of the orchestrator. Structure is documented below.
    CurrentIterationStates []V2PolicyOrchestratorForFolderOrchestrationStateCurrentIterationState
    (Output) Describes the state of a single iteration of the orchestrator. Structure is documented below.
    PreviousIterationStates []V2PolicyOrchestratorForFolderOrchestrationStatePreviousIterationState
    (Output) Describes the state of a single iteration of the orchestrator. Structure is documented below.
    currentIterationStates List<V2PolicyOrchestratorForFolderOrchestrationStateCurrentIterationState>
    (Output) Describes the state of a single iteration of the orchestrator. Structure is documented below.
    previousIterationStates List<V2PolicyOrchestratorForFolderOrchestrationStatePreviousIterationState>
    (Output) Describes the state of a single iteration of the orchestrator. Structure is documented below.
    currentIterationStates V2PolicyOrchestratorForFolderOrchestrationStateCurrentIterationState[]
    (Output) Describes the state of a single iteration of the orchestrator. Structure is documented below.
    previousIterationStates V2PolicyOrchestratorForFolderOrchestrationStatePreviousIterationState[]
    (Output) Describes the state of a single iteration of the orchestrator. Structure is documented below.
    current_iteration_states Sequence[V2PolicyOrchestratorForFolderOrchestrationStateCurrentIterationState]
    (Output) Describes the state of a single iteration of the orchestrator. Structure is documented below.
    previous_iteration_states Sequence[V2PolicyOrchestratorForFolderOrchestrationStatePreviousIterationState]
    (Output) Describes the state of a single iteration of the orchestrator. Structure is documented below.
    currentIterationStates List<Property Map>
    (Output) Describes the state of a single iteration of the orchestrator. Structure is documented below.
    previousIterationStates List<Property Map>
    (Output) Describes the state of a single iteration of the orchestrator. Structure is documented below.

    V2PolicyOrchestratorForFolderOrchestrationStateCurrentIterationState, V2PolicyOrchestratorForFolderOrchestrationStateCurrentIterationStateArgs

    Errors List<V2PolicyOrchestratorForFolderOrchestrationStateCurrentIterationStateError>
    (Output) The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide. Structure is documented below.
    FailedActions string
    (Output) Number of orchestration actions which failed so far. For more details, query the Cloud Logs.
    FinishTime string
    (Output) Finish time of the wave iteration.
    PerformedActions string
    (Output) Overall number of actions done by the orchestrator so far.
    Progress double
    (Output) An estimated percentage of the progress. Number between 0 and 100.
    RolloutResource string
    (Output) Handle to the Progressive Rollouts API rollout resource, which contains detailed information about a particular orchestration iteration.
    StartTime string
    (Output) Start time of the wave iteration.
    State string
    (Output) State of the iteration. Possible values: PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    Errors []V2PolicyOrchestratorForFolderOrchestrationStateCurrentIterationStateError
    (Output) The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide. Structure is documented below.
    FailedActions string
    (Output) Number of orchestration actions which failed so far. For more details, query the Cloud Logs.
    FinishTime string
    (Output) Finish time of the wave iteration.
    PerformedActions string
    (Output) Overall number of actions done by the orchestrator so far.
    Progress float64
    (Output) An estimated percentage of the progress. Number between 0 and 100.
    RolloutResource string
    (Output) Handle to the Progressive Rollouts API rollout resource, which contains detailed information about a particular orchestration iteration.
    StartTime string
    (Output) Start time of the wave iteration.
    State string
    (Output) State of the iteration. Possible values: PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    errors List<V2PolicyOrchestratorForFolderOrchestrationStateCurrentIterationStateError>
    (Output) The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide. Structure is documented below.
    failedActions String
    (Output) Number of orchestration actions which failed so far. For more details, query the Cloud Logs.
    finishTime String
    (Output) Finish time of the wave iteration.
    performedActions String
    (Output) Overall number of actions done by the orchestrator so far.
    progress Double
    (Output) An estimated percentage of the progress. Number between 0 and 100.
    rolloutResource String
    (Output) Handle to the Progressive Rollouts API rollout resource, which contains detailed information about a particular orchestration iteration.
    startTime String
    (Output) Start time of the wave iteration.
    state String
    (Output) State of the iteration. Possible values: PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    errors V2PolicyOrchestratorForFolderOrchestrationStateCurrentIterationStateError[]
    (Output) The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide. Structure is documented below.
    failedActions string
    (Output) Number of orchestration actions which failed so far. For more details, query the Cloud Logs.
    finishTime string
    (Output) Finish time of the wave iteration.
    performedActions string
    (Output) Overall number of actions done by the orchestrator so far.
    progress number
    (Output) An estimated percentage of the progress. Number between 0 and 100.
    rolloutResource string
    (Output) Handle to the Progressive Rollouts API rollout resource, which contains detailed information about a particular orchestration iteration.
    startTime string
    (Output) Start time of the wave iteration.
    state string
    (Output) State of the iteration. Possible values: PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    errors Sequence[V2PolicyOrchestratorForFolderOrchestrationStateCurrentIterationStateError]
    (Output) The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide. Structure is documented below.
    failed_actions str
    (Output) Number of orchestration actions which failed so far. For more details, query the Cloud Logs.
    finish_time str
    (Output) Finish time of the wave iteration.
    performed_actions str
    (Output) Overall number of actions done by the orchestrator so far.
    progress float
    (Output) An estimated percentage of the progress. Number between 0 and 100.
    rollout_resource str
    (Output) Handle to the Progressive Rollouts API rollout resource, which contains detailed information about a particular orchestration iteration.
    start_time str
    (Output) Start time of the wave iteration.
    state str
    (Output) State of the iteration. Possible values: PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    errors List<Property Map>
    (Output) The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide. Structure is documented below.
    failedActions String
    (Output) Number of orchestration actions which failed so far. For more details, query the Cloud Logs.
    finishTime String
    (Output) Finish time of the wave iteration.
    performedActions String
    (Output) Overall number of actions done by the orchestrator so far.
    progress Number
    (Output) An estimated percentage of the progress. Number between 0 and 100.
    rolloutResource String
    (Output) Handle to the Progressive Rollouts API rollout resource, which contains detailed information about a particular orchestration iteration.
    startTime String
    (Output) Start time of the wave iteration.
    state String
    (Output) State of the iteration. Possible values: PROCESSING COMPLETED FAILED CANCELLED UNKNOWN

    V2PolicyOrchestratorForFolderOrchestrationStateCurrentIterationStateError, V2PolicyOrchestratorForFolderOrchestrationStateCurrentIterationStateErrorArgs

    Code int
    (Output) The status code, which should be an enum value of google.rpc.Code.
    Details List<V2PolicyOrchestratorForFolderOrchestrationStateCurrentIterationStateErrorDetail>
    (Output) A list of messages that carry the error details. There is a common set of message types for APIs to use. Structure is documented below.
    Message string
    (Output) A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
    Code int
    (Output) The status code, which should be an enum value of google.rpc.Code.
    Details []V2PolicyOrchestratorForFolderOrchestrationStateCurrentIterationStateErrorDetail
    (Output) A list of messages that carry the error details. There is a common set of message types for APIs to use. Structure is documented below.
    Message string
    (Output) A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
    code Integer
    (Output) The status code, which should be an enum value of google.rpc.Code.
    details List<V2PolicyOrchestratorForFolderOrchestrationStateCurrentIterationStateErrorDetail>
    (Output) A list of messages that carry the error details. There is a common set of message types for APIs to use. Structure is documented below.
    message String
    (Output) A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
    code number
    (Output) The status code, which should be an enum value of google.rpc.Code.
    details V2PolicyOrchestratorForFolderOrchestrationStateCurrentIterationStateErrorDetail[]
    (Output) A list of messages that carry the error details. There is a common set of message types for APIs to use. Structure is documented below.
    message string
    (Output) A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
    code int
    (Output) The status code, which should be an enum value of google.rpc.Code.
    details Sequence[V2PolicyOrchestratorForFolderOrchestrationStateCurrentIterationStateErrorDetail]
    (Output) A list of messages that carry the error details. There is a common set of message types for APIs to use. Structure is documented below.
    message str
    (Output) A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
    code Number
    (Output) The status code, which should be an enum value of google.rpc.Code.
    details List<Property Map>
    (Output) A list of messages that carry the error details. There is a common set of message types for APIs to use. Structure is documented below.
    message String
    (Output) A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.

    V2PolicyOrchestratorForFolderOrchestrationStateCurrentIterationStateErrorDetail, V2PolicyOrchestratorForFolderOrchestrationStateCurrentIterationStateErrorDetailArgs

    TypeUrl string
    (Output) A URL/resource name that uniquely identifies the type of the serialized protocol buffer message
    Value string
    (Output)
    TypeUrl string
    (Output) A URL/resource name that uniquely identifies the type of the serialized protocol buffer message
    Value string
    (Output)
    typeUrl String
    (Output) A URL/resource name that uniquely identifies the type of the serialized protocol buffer message
    value String
    (Output)
    typeUrl string
    (Output) A URL/resource name that uniquely identifies the type of the serialized protocol buffer message
    value string
    (Output)
    type_url str
    (Output) A URL/resource name that uniquely identifies the type of the serialized protocol buffer message
    value str
    (Output)
    typeUrl String
    (Output) A URL/resource name that uniquely identifies the type of the serialized protocol buffer message
    value String
    (Output)

    V2PolicyOrchestratorForFolderOrchestrationStatePreviousIterationState, V2PolicyOrchestratorForFolderOrchestrationStatePreviousIterationStateArgs

    Errors List<V2PolicyOrchestratorForFolderOrchestrationStatePreviousIterationStateError>
    (Output) The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide. Structure is documented below.
    FailedActions string
    (Output) Number of orchestration actions which failed so far. For more details, query the Cloud Logs.
    FinishTime string
    (Output) Finish time of the wave iteration.
    PerformedActions string
    (Output) Overall number of actions done by the orchestrator so far.
    Progress double
    (Output) An estimated percentage of the progress. Number between 0 and 100.
    RolloutResource string
    (Output) Handle to the Progressive Rollouts API rollout resource, which contains detailed information about a particular orchestration iteration.
    StartTime string
    (Output) Start time of the wave iteration.
    State string
    (Output) State of the iteration. Possible values: PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    Errors []V2PolicyOrchestratorForFolderOrchestrationStatePreviousIterationStateError
    (Output) The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide. Structure is documented below.
    FailedActions string
    (Output) Number of orchestration actions which failed so far. For more details, query the Cloud Logs.
    FinishTime string
    (Output) Finish time of the wave iteration.
    PerformedActions string
    (Output) Overall number of actions done by the orchestrator so far.
    Progress float64
    (Output) An estimated percentage of the progress. Number between 0 and 100.
    RolloutResource string
    (Output) Handle to the Progressive Rollouts API rollout resource, which contains detailed information about a particular orchestration iteration.
    StartTime string
    (Output) Start time of the wave iteration.
    State string
    (Output) State of the iteration. Possible values: PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    errors List<V2PolicyOrchestratorForFolderOrchestrationStatePreviousIterationStateError>
    (Output) The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide. Structure is documented below.
    failedActions String
    (Output) Number of orchestration actions which failed so far. For more details, query the Cloud Logs.
    finishTime String
    (Output) Finish time of the wave iteration.
    performedActions String
    (Output) Overall number of actions done by the orchestrator so far.
    progress Double
    (Output) An estimated percentage of the progress. Number between 0 and 100.
    rolloutResource String
    (Output) Handle to the Progressive Rollouts API rollout resource, which contains detailed information about a particular orchestration iteration.
    startTime String
    (Output) Start time of the wave iteration.
    state String
    (Output) State of the iteration. Possible values: PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    errors V2PolicyOrchestratorForFolderOrchestrationStatePreviousIterationStateError[]
    (Output) The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide. Structure is documented below.
    failedActions string
    (Output) Number of orchestration actions which failed so far. For more details, query the Cloud Logs.
    finishTime string
    (Output) Finish time of the wave iteration.
    performedActions string
    (Output) Overall number of actions done by the orchestrator so far.
    progress number
    (Output) An estimated percentage of the progress. Number between 0 and 100.
    rolloutResource string
    (Output) Handle to the Progressive Rollouts API rollout resource, which contains detailed information about a particular orchestration iteration.
    startTime string
    (Output) Start time of the wave iteration.
    state string
    (Output) State of the iteration. Possible values: PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    errors Sequence[V2PolicyOrchestratorForFolderOrchestrationStatePreviousIterationStateError]
    (Output) The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide. Structure is documented below.
    failed_actions str
    (Output) Number of orchestration actions which failed so far. For more details, query the Cloud Logs.
    finish_time str
    (Output) Finish time of the wave iteration.
    performed_actions str
    (Output) Overall number of actions done by the orchestrator so far.
    progress float
    (Output) An estimated percentage of the progress. Number between 0 and 100.
    rollout_resource str
    (Output) Handle to the Progressive Rollouts API rollout resource, which contains detailed information about a particular orchestration iteration.
    start_time str
    (Output) Start time of the wave iteration.
    state str
    (Output) State of the iteration. Possible values: PROCESSING COMPLETED FAILED CANCELLED UNKNOWN
    errors List<Property Map>
    (Output) The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide. Structure is documented below.
    failedActions String
    (Output) Number of orchestration actions which failed so far. For more details, query the Cloud Logs.
    finishTime String
    (Output) Finish time of the wave iteration.
    performedActions String
    (Output) Overall number of actions done by the orchestrator so far.
    progress Number
    (Output) An estimated percentage of the progress. Number between 0 and 100.
    rolloutResource String
    (Output) Handle to the Progressive Rollouts API rollout resource, which contains detailed information about a particular orchestration iteration.
    startTime String
    (Output) Start time of the wave iteration.
    state String
    (Output) State of the iteration. Possible values: PROCESSING COMPLETED FAILED CANCELLED UNKNOWN

    V2PolicyOrchestratorForFolderOrchestrationStatePreviousIterationStateError, V2PolicyOrchestratorForFolderOrchestrationStatePreviousIterationStateErrorArgs

    Code int
    (Output) The status code, which should be an enum value of google.rpc.Code.
    Details List<V2PolicyOrchestratorForFolderOrchestrationStatePreviousIterationStateErrorDetail>
    (Output) A list of messages that carry the error details. There is a common set of message types for APIs to use. Structure is documented below.
    Message string
    (Output) A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
    Code int
    (Output) The status code, which should be an enum value of google.rpc.Code.
    Details []V2PolicyOrchestratorForFolderOrchestrationStatePreviousIterationStateErrorDetail
    (Output) A list of messages that carry the error details. There is a common set of message types for APIs to use. Structure is documented below.
    Message string
    (Output) A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
    code Integer
    (Output) The status code, which should be an enum value of google.rpc.Code.
    details List<V2PolicyOrchestratorForFolderOrchestrationStatePreviousIterationStateErrorDetail>
    (Output) A list of messages that carry the error details. There is a common set of message types for APIs to use. Structure is documented below.
    message String
    (Output) A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
    code number
    (Output) The status code, which should be an enum value of google.rpc.Code.
    details V2PolicyOrchestratorForFolderOrchestrationStatePreviousIterationStateErrorDetail[]
    (Output) A list of messages that carry the error details. There is a common set of message types for APIs to use. Structure is documented below.
    message string
    (Output) A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
    code int
    (Output) The status code, which should be an enum value of google.rpc.Code.
    details Sequence[V2PolicyOrchestratorForFolderOrchestrationStatePreviousIterationStateErrorDetail]
    (Output) A list of messages that carry the error details. There is a common set of message types for APIs to use. Structure is documented below.
    message str
    (Output) A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
    code Number
    (Output) The status code, which should be an enum value of google.rpc.Code.
    details List<Property Map>
    (Output) A list of messages that carry the error details. There is a common set of message types for APIs to use. Structure is documented below.
    message String
    (Output) A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.

    V2PolicyOrchestratorForFolderOrchestrationStatePreviousIterationStateErrorDetail, V2PolicyOrchestratorForFolderOrchestrationStatePreviousIterationStateErrorDetailArgs

    TypeUrl string
    (Output) A URL/resource name that uniquely identifies the type of the serialized protocol buffer message
    Value string
    (Output)
    TypeUrl string
    (Output) A URL/resource name that uniquely identifies the type of the serialized protocol buffer message
    Value string
    (Output)
    typeUrl String
    (Output) A URL/resource name that uniquely identifies the type of the serialized protocol buffer message
    value String
    (Output)
    typeUrl string
    (Output) A URL/resource name that uniquely identifies the type of the serialized protocol buffer message
    value string
    (Output)
    type_url str
    (Output) A URL/resource name that uniquely identifies the type of the serialized protocol buffer message
    value str
    (Output)
    typeUrl String
    (Output) A URL/resource name that uniquely identifies the type of the serialized protocol buffer message
    value String
    (Output)

    Import

    PolicyOrchestratorForFolder can be imported using any of these accepted formats:

    • folders/{{folder_id}}/locations/global/policyOrchestrators/{{policy_orchestrator_id}}

    • {{folder_id}}/{{policy_orchestrator_id}}

    When using the pulumi import command, PolicyOrchestratorForFolder can be imported using one of the formats above. For example:

    $ pulumi import gcp:osconfig/v2PolicyOrchestratorForFolder:V2PolicyOrchestratorForFolder default folders/{{folder_id}}/locations/global/policyOrchestrators/{{policy_orchestrator_id}}
    
    $ pulumi import gcp:osconfig/v2PolicyOrchestratorForFolder:V2PolicyOrchestratorForFolder default {{folder_id}}/{{policy_orchestrator_id}}
    

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Google Cloud (GCP) Classic pulumi/pulumi-gcp
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the google-beta Terraform Provider.
    gcp logo
    Google Cloud v8.29.0 published on Thursday, May 1, 2025 by Pulumi