pulumi-google-native-kotlin/com.pulumi.googlenative.orgpolicy.v2.kotlin.outputs

Package-level declarations

Types

data class GetCustomConstraintResult(val actionType: String, val condition: String, val description: String, val displayName: String, val methodTypes: List<String>, val name: String, val resourceTypes: List<String>, val updateTime: String)

GetFolderPolicyResult

data class GetFolderPolicyResult(val alternate: GoogleCloudOrgpolicyV2AlternatePolicySpecResponse, val dryRunSpec: GoogleCloudOrgpolicyV2PolicySpecResponse, val name: String, val spec: GoogleCloudOrgpolicyV2PolicySpecResponse)

GetOrganizationPolicyResult

data class GetOrganizationPolicyResult(val alternate: GoogleCloudOrgpolicyV2AlternatePolicySpecResponse, val dryRunSpec: GoogleCloudOrgpolicyV2PolicySpecResponse, val name: String, val spec: GoogleCloudOrgpolicyV2PolicySpecResponse)

GetPolicyResult

data class GetPolicyResult(val alternate: GoogleCloudOrgpolicyV2AlternatePolicySpecResponse, val dryRunSpec: GoogleCloudOrgpolicyV2PolicySpecResponse, val name: String, val spec: GoogleCloudOrgpolicyV2PolicySpecResponse)

GoogleCloudOrgpolicyV2AlternatePolicySpecResponse

data class GoogleCloudOrgpolicyV2AlternatePolicySpecResponse(val launch: String, val spec: GoogleCloudOrgpolicyV2PolicySpecResponse)

Similar to PolicySpec but with an extra 'launch' field for launch reference. The PolicySpec here is specific for dry-run/darklaunch.

GoogleCloudOrgpolicyV2PolicySpecPolicyRuleResponse

data class GoogleCloudOrgpolicyV2PolicySpecPolicyRuleResponse(val allowAll: Boolean, val condition: GoogleTypeExprResponse, val denyAll: Boolean, val enforce: Boolean, val values: GoogleCloudOrgpolicyV2PolicySpecPolicyRuleStringValuesResponse)

A rule used to express this policy.

GoogleCloudOrgpolicyV2PolicySpecPolicyRuleStringValuesResponse

data class GoogleCloudOrgpolicyV2PolicySpecPolicyRuleStringValuesResponse(val allowedValues: List<String>, val deniedValues: List<String>)

A message that holds specific allowed and denied values. This message can define specific values and subtrees of the Resource Manager resource hierarchy (Organizations, Folders, Projects) that are allowed or denied. This is achieved by using the under: and optional is: prefixes. The under: prefix is used to denote resource subtree values. The is: prefix is used to denote specific values, and is required only if the value contains a ":". Values prefixed with "is:" are treated the same as values with no prefix. Ancestry subtrees must be in one of the following formats: - "projects/", e.g. "projects/tokyo-rain-123" - "folders/", e.g. "folders/1234" - "organizations/", e.g. "organizations/1234" The supports_under field of the associated Constraint defines whether ancestry prefixes can be used.

GoogleCloudOrgpolicyV2PolicySpecResponse

data class GoogleCloudOrgpolicyV2PolicySpecResponse(val etag: String, val inheritFromParent: Boolean, val reset: Boolean, val rules: List<GoogleCloudOrgpolicyV2PolicySpecPolicyRuleResponse>, val updateTime: String)

Defines a Google Cloud policy specification which is used to specify constraints for configurations of Google Cloud resources.

GoogleTypeExprResponse

data class GoogleTypeExprResponse(val description: String, val expression: String, val location: String, val title: String)

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.