1. Packages
  2. Google Cloud (GCP) Classic
  3. API Docs
  4. osconfig
  5. OsPolicyAssignment
Google Cloud v8.25.1 published on Wednesday, Apr 9, 2025 by Pulumi

gcp.osconfig.OsPolicyAssignment

Explore with Pulumi AI

OS policy assignment is an API resource that is used to apply a set of OS policies to a dynamically targeted group of Compute Engine VM instances. An OS policy is used to define the desired state configuration for a Compute Engine VM instance through a set of configuration resources that provide capabilities such as installing or removing software packages, or executing a script. For more information about the OS policy resource definitions and examples, see OS policy and OS policy assignment.

To get more information about OSPolicyAssignment, see:

Example Usage

Os Config Os Policy Assignment Basic

import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const primary = new gcp.osconfig.OsPolicyAssignment("primary", {
    instanceFilter: {
        all: false,
        exclusionLabels: [{
            labels: {
                "label-two": "value-two",
            },
        }],
        inclusionLabels: [{
            labels: {
                "label-one": "value-one",
            },
        }],
        inventories: [{
            osShortName: "centos",
            osVersion: "8.*",
        }],
    },
    location: "us-central1-a",
    name: "policy-assignment",
    osPolicies: [{
        id: "policy",
        mode: "VALIDATION",
        resourceGroups: [{
            resources: [
                {
                    id: "apt-to-yum",
                    repository: {
                        apt: {
                            archiveType: "DEB",
                            components: ["doc"],
                            distribution: "debian",
                            uri: "https://atl.mirrors.clouvider.net/debian",
                            gpgKey: ".gnupg/pubring.kbx",
                        },
                    },
                },
                {
                    id: "exec1",
                    exec: {
                        validate: {
                            interpreter: "SHELL",
                            args: ["arg1"],
                            file: {
                                localPath: "$HOME/script.sh",
                            },
                            outputFilePath: "$HOME/out",
                        },
                        enforce: {
                            interpreter: "SHELL",
                            args: ["arg1"],
                            file: {
                                allowInsecure: true,
                                remote: {
                                    uri: "https://www.example.com/script.sh",
                                    sha256Checksum: "c7938fed83afdccbb0e86a2a2e4cad7d5035012ca3214b4a61268393635c3063",
                                },
                            },
                            outputFilePath: "$HOME/out",
                        },
                    },
                },
            ],
            inventoryFilters: [{
                osShortName: "centos",
                osVersion: "8.*",
            }],
        }],
        allowNoResourceGroupMatch: false,
        description: "A test os policy",
    }],
    rollout: {
        disruptionBudget: {
            percent: 100,
        },
        minWaitDuration: "3s",
    },
    description: "A test os policy assignment",
});
Copy
import pulumi
import pulumi_gcp as gcp

primary = gcp.osconfig.OsPolicyAssignment("primary",
    instance_filter={
        "all": False,
        "exclusion_labels": [{
            "labels": {
                "label-two": "value-two",
            },
        }],
        "inclusion_labels": [{
            "labels": {
                "label-one": "value-one",
            },
        }],
        "inventories": [{
            "os_short_name": "centos",
            "os_version": "8.*",
        }],
    },
    location="us-central1-a",
    name="policy-assignment",
    os_policies=[{
        "id": "policy",
        "mode": "VALIDATION",
        "resource_groups": [{
            "resources": [
                {
                    "id": "apt-to-yum",
                    "repository": {
                        "apt": {
                            "archive_type": "DEB",
                            "components": ["doc"],
                            "distribution": "debian",
                            "uri": "https://atl.mirrors.clouvider.net/debian",
                            "gpg_key": ".gnupg/pubring.kbx",
                        },
                    },
                },
                {
                    "id": "exec1",
                    "exec_": {
                        "validate": {
                            "interpreter": "SHELL",
                            "args": ["arg1"],
                            "file": {
                                "local_path": "$HOME/script.sh",
                            },
                            "output_file_path": "$HOME/out",
                        },
                        "enforce": {
                            "interpreter": "SHELL",
                            "args": ["arg1"],
                            "file": {
                                "allow_insecure": True,
                                "remote": {
                                    "uri": "https://www.example.com/script.sh",
                                    "sha256_checksum": "c7938fed83afdccbb0e86a2a2e4cad7d5035012ca3214b4a61268393635c3063",
                                },
                            },
                            "output_file_path": "$HOME/out",
                        },
                    },
                },
            ],
            "inventory_filters": [{
                "os_short_name": "centos",
                "os_version": "8.*",
            }],
        }],
        "allow_no_resource_group_match": False,
        "description": "A test os policy",
    }],
    rollout={
        "disruption_budget": {
            "percent": 100,
        },
        "min_wait_duration": "3s",
    },
    description="A test os policy assignment")
Copy
package main

import (
	"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/osconfig"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := osconfig.NewOsPolicyAssignment(ctx, "primary", &osconfig.OsPolicyAssignmentArgs{
			InstanceFilter: &osconfig.OsPolicyAssignmentInstanceFilterArgs{
				All: pulumi.Bool(false),
				ExclusionLabels: osconfig.OsPolicyAssignmentInstanceFilterExclusionLabelArray{
					&osconfig.OsPolicyAssignmentInstanceFilterExclusionLabelArgs{
						Labels: pulumi.StringMap{
							"label-two": pulumi.String("value-two"),
						},
					},
				},
				InclusionLabels: osconfig.OsPolicyAssignmentInstanceFilterInclusionLabelArray{
					&osconfig.OsPolicyAssignmentInstanceFilterInclusionLabelArgs{
						Labels: pulumi.StringMap{
							"label-one": pulumi.String("value-one"),
						},
					},
				},
				Inventories: osconfig.OsPolicyAssignmentInstanceFilterInventoryArray{
					&osconfig.OsPolicyAssignmentInstanceFilterInventoryArgs{
						OsShortName: pulumi.String("centos"),
						OsVersion:   pulumi.String("8.*"),
					},
				},
			},
			Location: pulumi.String("us-central1-a"),
			Name:     pulumi.String("policy-assignment"),
			OsPolicies: osconfig.OsPolicyAssignmentOsPolicyArray{
				&osconfig.OsPolicyAssignmentOsPolicyArgs{
					Id:   pulumi.String("policy"),
					Mode: pulumi.String("VALIDATION"),
					ResourceGroups: osconfig.OsPolicyAssignmentOsPolicyResourceGroupArray{
						&osconfig.OsPolicyAssignmentOsPolicyResourceGroupArgs{
							Resources: osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceArray{
								&osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceArgs{
									Id: pulumi.String("apt-to-yum"),
									Repository: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryArgs{
										Apt: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryAptArgs{
											ArchiveType: pulumi.String("DEB"),
											Components: pulumi.StringArray{
												pulumi.String("doc"),
											},
											Distribution: pulumi.String("debian"),
											Uri:          pulumi.String("https://atl.mirrors.clouvider.net/debian"),
											GpgKey:       pulumi.String(".gnupg/pubring.kbx"),
										},
									},
								},
								&osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceArgs{
									Id: pulumi.String("exec1"),
									Exec: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecArgs{
										Validate: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateArgs{
											Interpreter: pulumi.String("SHELL"),
											Args: pulumi.StringArray{
												pulumi.String("arg1"),
											},
											File: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileArgs{
												LocalPath: pulumi.String("$HOME/script.sh"),
											},
											OutputFilePath: pulumi.String("$HOME/out"),
										},
										Enforce: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceArgs{
											Interpreter: pulumi.String("SHELL"),
											Args: pulumi.StringArray{
												pulumi.String("arg1"),
											},
											File: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileArgs{
												AllowInsecure: pulumi.Bool(true),
												Remote: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileRemoteArgs{
													Uri:            pulumi.String("https://www.example.com/script.sh"),
													Sha256Checksum: pulumi.String("c7938fed83afdccbb0e86a2a2e4cad7d5035012ca3214b4a61268393635c3063"),
												},
											},
											OutputFilePath: pulumi.String("$HOME/out"),
										},
									},
								},
							},
							InventoryFilters: osconfig.OsPolicyAssignmentOsPolicyResourceGroupInventoryFilterArray{
								&osconfig.OsPolicyAssignmentOsPolicyResourceGroupInventoryFilterArgs{
									OsShortName: pulumi.String("centos"),
									OsVersion:   pulumi.String("8.*"),
								},
							},
						},
					},
					AllowNoResourceGroupMatch: pulumi.Bool(false),
					Description:               pulumi.String("A test os policy"),
				},
			},
			Rollout: &osconfig.OsPolicyAssignmentRolloutArgs{
				DisruptionBudget: &osconfig.OsPolicyAssignmentRolloutDisruptionBudgetArgs{
					Percent: pulumi.Int(100),
				},
				MinWaitDuration: pulumi.String("3s"),
			},
			Description: pulumi.String("A test os policy assignment"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;

return await Deployment.RunAsync(() => 
{
    var primary = new Gcp.OsConfig.OsPolicyAssignment("primary", new()
    {
        InstanceFilter = new Gcp.OsConfig.Inputs.OsPolicyAssignmentInstanceFilterArgs
        {
            All = false,
            ExclusionLabels = new[]
            {
                new Gcp.OsConfig.Inputs.OsPolicyAssignmentInstanceFilterExclusionLabelArgs
                {
                    Labels = 
                    {
                        { "label-two", "value-two" },
                    },
                },
            },
            InclusionLabels = new[]
            {
                new Gcp.OsConfig.Inputs.OsPolicyAssignmentInstanceFilterInclusionLabelArgs
                {
                    Labels = 
                    {
                        { "label-one", "value-one" },
                    },
                },
            },
            Inventories = new[]
            {
                new Gcp.OsConfig.Inputs.OsPolicyAssignmentInstanceFilterInventoryArgs
                {
                    OsShortName = "centos",
                    OsVersion = "8.*",
                },
            },
        },
        Location = "us-central1-a",
        Name = "policy-assignment",
        OsPolicies = new[]
        {
            new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyArgs
            {
                Id = "policy",
                Mode = "VALIDATION",
                ResourceGroups = new[]
                {
                    new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupArgs
                    {
                        Resources = new[]
                        {
                            new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceArgs
                            {
                                Id = "apt-to-yum",
                                Repository = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryArgs
                                {
                                    Apt = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryAptArgs
                                    {
                                        ArchiveType = "DEB",
                                        Components = new[]
                                        {
                                            "doc",
                                        },
                                        Distribution = "debian",
                                        Uri = "https://atl.mirrors.clouvider.net/debian",
                                        GpgKey = ".gnupg/pubring.kbx",
                                    },
                                },
                            },
                            new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceArgs
                            {
                                Id = "exec1",
                                Exec = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecArgs
                                {
                                    Validate = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateArgs
                                    {
                                        Interpreter = "SHELL",
                                        Args = new[]
                                        {
                                            "arg1",
                                        },
                                        File = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileArgs
                                        {
                                            LocalPath = "$HOME/script.sh",
                                        },
                                        OutputFilePath = "$HOME/out",
                                    },
                                    Enforce = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceArgs
                                    {
                                        Interpreter = "SHELL",
                                        Args = new[]
                                        {
                                            "arg1",
                                        },
                                        File = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileArgs
                                        {
                                            AllowInsecure = true,
                                            Remote = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileRemoteArgs
                                            {
                                                Uri = "https://www.example.com/script.sh",
                                                Sha256Checksum = "c7938fed83afdccbb0e86a2a2e4cad7d5035012ca3214b4a61268393635c3063",
                                            },
                                        },
                                        OutputFilePath = "$HOME/out",
                                    },
                                },
                            },
                        },
                        InventoryFilters = new[]
                        {
                            new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupInventoryFilterArgs
                            {
                                OsShortName = "centos",
                                OsVersion = "8.*",
                            },
                        },
                    },
                },
                AllowNoResourceGroupMatch = false,
                Description = "A test os policy",
            },
        },
        Rollout = new Gcp.OsConfig.Inputs.OsPolicyAssignmentRolloutArgs
        {
            DisruptionBudget = new Gcp.OsConfig.Inputs.OsPolicyAssignmentRolloutDisruptionBudgetArgs
            {
                Percent = 100,
            },
            MinWaitDuration = "3s",
        },
        Description = "A test os policy assignment",
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.osconfig.OsPolicyAssignment;
import com.pulumi.gcp.osconfig.OsPolicyAssignmentArgs;
import com.pulumi.gcp.osconfig.inputs.OsPolicyAssignmentInstanceFilterArgs;
import com.pulumi.gcp.osconfig.inputs.OsPolicyAssignmentOsPolicyArgs;
import com.pulumi.gcp.osconfig.inputs.OsPolicyAssignmentRolloutArgs;
import com.pulumi.gcp.osconfig.inputs.OsPolicyAssignmentRolloutDisruptionBudgetArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var primary = new OsPolicyAssignment("primary", OsPolicyAssignmentArgs.builder()
            .instanceFilter(OsPolicyAssignmentInstanceFilterArgs.builder()
                .all(false)
                .exclusionLabels(OsPolicyAssignmentInstanceFilterExclusionLabelArgs.builder()
                    .labels(Map.of("label-two", "value-two"))
                    .build())
                .inclusionLabels(OsPolicyAssignmentInstanceFilterInclusionLabelArgs.builder()
                    .labels(Map.of("label-one", "value-one"))
                    .build())
                .inventories(OsPolicyAssignmentInstanceFilterInventoryArgs.builder()
                    .osShortName("centos")
                    .osVersion("8.*")
                    .build())
                .build())
            .location("us-central1-a")
            .name("policy-assignment")
            .osPolicies(OsPolicyAssignmentOsPolicyArgs.builder()
                .id("policy")
                .mode("VALIDATION")
                .resourceGroups(OsPolicyAssignmentOsPolicyResourceGroupArgs.builder()
                    .resources(                    
                        OsPolicyAssignmentOsPolicyResourceGroupResourceArgs.builder()
                            .id("apt-to-yum")
                            .repository(OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryArgs.builder()
                                .apt(OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryAptArgs.builder()
                                    .archiveType("DEB")
                                    .components("doc")
                                    .distribution("debian")
                                    .uri("https://atl.mirrors.clouvider.net/debian")
                                    .gpgKey(".gnupg/pubring.kbx")
                                    .build())
                                .build())
                            .build(),
                        OsPolicyAssignmentOsPolicyResourceGroupResourceArgs.builder()
                            .id("exec1")
                            .exec(OsPolicyAssignmentOsPolicyResourceGroupResourceExecArgs.builder()
                                .validate(OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateArgs.builder()
                                    .interpreter("SHELL")
                                    .args("arg1")
                                    .file(OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileArgs.builder()
                                        .localPath("$HOME/script.sh")
                                        .build())
                                    .outputFilePath("$HOME/out")
                                    .build())
                                .enforce(OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceArgs.builder()
                                    .interpreter("SHELL")
                                    .args("arg1")
                                    .file(OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileArgs.builder()
                                        .allowInsecure(true)
                                        .remote(OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileRemoteArgs.builder()
                                            .uri("https://www.example.com/script.sh")
                                            .sha256Checksum("c7938fed83afdccbb0e86a2a2e4cad7d5035012ca3214b4a61268393635c3063")
                                            .build())
                                        .build())
                                    .outputFilePath("$HOME/out")
                                    .build())
                                .build())
                            .build())
                    .inventoryFilters(OsPolicyAssignmentOsPolicyResourceGroupInventoryFilterArgs.builder()
                        .osShortName("centos")
                        .osVersion("8.*")
                        .build())
                    .build())
                .allowNoResourceGroupMatch(false)
                .description("A test os policy")
                .build())
            .rollout(OsPolicyAssignmentRolloutArgs.builder()
                .disruptionBudget(OsPolicyAssignmentRolloutDisruptionBudgetArgs.builder()
                    .percent(100)
                    .build())
                .minWaitDuration("3s")
                .build())
            .description("A test os policy assignment")
            .build());

    }
}
Copy
resources:
  primary:
    type: gcp:osconfig:OsPolicyAssignment
    properties:
      instanceFilter:
        all: false
        exclusionLabels:
          - labels:
              label-two: value-two
        inclusionLabels:
          - labels:
              label-one: value-one
        inventories:
          - osShortName: centos
            osVersion: 8.*
      location: us-central1-a
      name: policy-assignment
      osPolicies:
        - id: policy
          mode: VALIDATION
          resourceGroups:
            - resources:
                - id: apt-to-yum
                  repository:
                    apt:
                      archiveType: DEB
                      components:
                        - doc
                      distribution: debian
                      uri: https://atl.mirrors.clouvider.net/debian
                      gpgKey: .gnupg/pubring.kbx
                - id: exec1
                  exec:
                    validate:
                      interpreter: SHELL
                      args:
                        - arg1
                      file:
                        localPath: $HOME/script.sh
                      outputFilePath: $HOME/out
                    enforce:
                      interpreter: SHELL
                      args:
                        - arg1
                      file:
                        allowInsecure: true
                        remote:
                          uri: https://www.example.com/script.sh
                          sha256Checksum: c7938fed83afdccbb0e86a2a2e4cad7d5035012ca3214b4a61268393635c3063
                      outputFilePath: $HOME/out
              inventoryFilters:
                - osShortName: centos
                  osVersion: 8.*
          allowNoResourceGroupMatch: false
          description: A test os policy
      rollout:
        disruptionBudget:
          percent: 100
        minWaitDuration: 3s
      description: A test os policy assignment
Copy

Create OsPolicyAssignment Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new OsPolicyAssignment(name: string, args: OsPolicyAssignmentArgs, opts?: CustomResourceOptions);
@overload
def OsPolicyAssignment(resource_name: str,
                       args: OsPolicyAssignmentArgs,
                       opts: Optional[ResourceOptions] = None)

@overload
def OsPolicyAssignment(resource_name: str,
                       opts: Optional[ResourceOptions] = None,
                       instance_filter: Optional[OsPolicyAssignmentInstanceFilterArgs] = None,
                       location: Optional[str] = None,
                       os_policies: Optional[Sequence[OsPolicyAssignmentOsPolicyArgs]] = None,
                       rollout: Optional[OsPolicyAssignmentRolloutArgs] = None,
                       description: Optional[str] = None,
                       name: Optional[str] = None,
                       project: Optional[str] = None,
                       skip_await_rollout: Optional[bool] = None)
func NewOsPolicyAssignment(ctx *Context, name string, args OsPolicyAssignmentArgs, opts ...ResourceOption) (*OsPolicyAssignment, error)
public OsPolicyAssignment(string name, OsPolicyAssignmentArgs args, CustomResourceOptions? opts = null)
public OsPolicyAssignment(String name, OsPolicyAssignmentArgs args)
public OsPolicyAssignment(String name, OsPolicyAssignmentArgs args, CustomResourceOptions options)
type: gcp:osconfig:OsPolicyAssignment
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. OsPolicyAssignmentArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. OsPolicyAssignmentArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. OsPolicyAssignmentArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. OsPolicyAssignmentArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. OsPolicyAssignmentArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var osPolicyAssignmentResource = new Gcp.OsConfig.OsPolicyAssignment("osPolicyAssignmentResource", new()
{
    InstanceFilter = new Gcp.OsConfig.Inputs.OsPolicyAssignmentInstanceFilterArgs
    {
        All = false,
        ExclusionLabels = new[]
        {
            new Gcp.OsConfig.Inputs.OsPolicyAssignmentInstanceFilterExclusionLabelArgs
            {
                Labels = 
                {
                    { "string", "string" },
                },
            },
        },
        InclusionLabels = new[]
        {
            new Gcp.OsConfig.Inputs.OsPolicyAssignmentInstanceFilterInclusionLabelArgs
            {
                Labels = 
                {
                    { "string", "string" },
                },
            },
        },
        Inventories = new[]
        {
            new Gcp.OsConfig.Inputs.OsPolicyAssignmentInstanceFilterInventoryArgs
            {
                OsShortName = "string",
                OsVersion = "string",
            },
        },
    },
    Location = "string",
    OsPolicies = new[]
    {
        new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyArgs
        {
            Id = "string",
            Mode = "string",
            ResourceGroups = new[]
            {
                new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupArgs
                {
                    Resources = new[]
                    {
                        new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceArgs
                        {
                            Id = "string",
                            Exec = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecArgs
                            {
                                Validate = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateArgs
                                {
                                    Interpreter = "string",
                                    Args = new[]
                                    {
                                        "string",
                                    },
                                    File = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileArgs
                                    {
                                        AllowInsecure = false,
                                        Gcs = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileGcsArgs
                                        {
                                            Bucket = "string",
                                            Object = "string",
                                            Generation = 0,
                                        },
                                        LocalPath = "string",
                                        Remote = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileRemoteArgs
                                        {
                                            Uri = "string",
                                            Sha256Checksum = "string",
                                        },
                                    },
                                    OutputFilePath = "string",
                                    Script = "string",
                                },
                                Enforce = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceArgs
                                {
                                    Interpreter = "string",
                                    Args = new[]
                                    {
                                        "string",
                                    },
                                    File = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileArgs
                                    {
                                        AllowInsecure = false,
                                        Gcs = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileGcsArgs
                                        {
                                            Bucket = "string",
                                            Object = "string",
                                            Generation = 0,
                                        },
                                        LocalPath = "string",
                                        Remote = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileRemoteArgs
                                        {
                                            Uri = "string",
                                            Sha256Checksum = "string",
                                        },
                                    },
                                    OutputFilePath = "string",
                                    Script = "string",
                                },
                            },
                            File = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceFileArgs
                            {
                                Path = "string",
                                State = "string",
                                Content = "string",
                                File = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileArgs
                                {
                                    AllowInsecure = false,
                                    Gcs = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileGcsArgs
                                    {
                                        Bucket = "string",
                                        Object = "string",
                                        Generation = 0,
                                    },
                                    LocalPath = "string",
                                    Remote = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileRemoteArgs
                                    {
                                        Uri = "string",
                                        Sha256Checksum = "string",
                                    },
                                },
                                Permissions = "string",
                            },
                            Pkg = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgArgs
                            {
                                DesiredState = "string",
                                Apt = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgAptArgs
                                {
                                    Name = "string",
                                },
                                Deb = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebArgs
                                {
                                    Source = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceArgs
                                    {
                                        AllowInsecure = false,
                                        Gcs = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceGcsArgs
                                        {
                                            Bucket = "string",
                                            Object = "string",
                                            Generation = 0,
                                        },
                                        LocalPath = "string",
                                        Remote = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceRemoteArgs
                                        {
                                            Uri = "string",
                                            Sha256Checksum = "string",
                                        },
                                    },
                                    PullDeps = false,
                                },
                                Googet = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgGoogetArgs
                                {
                                    Name = "string",
                                },
                                Msi = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiArgs
                                {
                                    Source = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceArgs
                                    {
                                        AllowInsecure = false,
                                        Gcs = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceGcsArgs
                                        {
                                            Bucket = "string",
                                            Object = "string",
                                            Generation = 0,
                                        },
                                        LocalPath = "string",
                                        Remote = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceRemoteArgs
                                        {
                                            Uri = "string",
                                            Sha256Checksum = "string",
                                        },
                                    },
                                    Properties = new[]
                                    {
                                        "string",
                                    },
                                },
                                Rpm = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmArgs
                                {
                                    Source = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceArgs
                                    {
                                        AllowInsecure = false,
                                        Gcs = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceGcsArgs
                                        {
                                            Bucket = "string",
                                            Object = "string",
                                            Generation = 0,
                                        },
                                        LocalPath = "string",
                                        Remote = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceRemoteArgs
                                        {
                                            Uri = "string",
                                            Sha256Checksum = "string",
                                        },
                                    },
                                    PullDeps = false,
                                },
                                Yum = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgYumArgs
                                {
                                    Name = "string",
                                },
                                Zypper = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgZypperArgs
                                {
                                    Name = "string",
                                },
                            },
                            Repository = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryArgs
                            {
                                Apt = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryAptArgs
                                {
                                    ArchiveType = "string",
                                    Components = new[]
                                    {
                                        "string",
                                    },
                                    Distribution = "string",
                                    Uri = "string",
                                    GpgKey = "string",
                                },
                                Goo = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryGooArgs
                                {
                                    Name = "string",
                                    Url = "string",
                                },
                                Yum = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryYumArgs
                                {
                                    BaseUrl = "string",
                                    Id = "string",
                                    DisplayName = "string",
                                    GpgKeys = new[]
                                    {
                                        "string",
                                    },
                                },
                                Zypper = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryZypperArgs
                                {
                                    BaseUrl = "string",
                                    Id = "string",
                                    DisplayName = "string",
                                    GpgKeys = new[]
                                    {
                                        "string",
                                    },
                                },
                            },
                        },
                    },
                    InventoryFilters = new[]
                    {
                        new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupInventoryFilterArgs
                        {
                            OsShortName = "string",
                            OsVersion = "string",
                        },
                    },
                },
            },
            AllowNoResourceGroupMatch = false,
            Description = "string",
        },
    },
    Rollout = new Gcp.OsConfig.Inputs.OsPolicyAssignmentRolloutArgs
    {
        DisruptionBudget = new Gcp.OsConfig.Inputs.OsPolicyAssignmentRolloutDisruptionBudgetArgs
        {
            Fixed = 0,
            Percent = 0,
        },
        MinWaitDuration = "string",
    },
    Description = "string",
    Name = "string",
    Project = "string",
    SkipAwaitRollout = false,
});
Copy
example, err := osconfig.NewOsPolicyAssignment(ctx, "osPolicyAssignmentResource", &osconfig.OsPolicyAssignmentArgs{
	InstanceFilter: &osconfig.OsPolicyAssignmentInstanceFilterArgs{
		All: pulumi.Bool(false),
		ExclusionLabels: osconfig.OsPolicyAssignmentInstanceFilterExclusionLabelArray{
			&osconfig.OsPolicyAssignmentInstanceFilterExclusionLabelArgs{
				Labels: pulumi.StringMap{
					"string": pulumi.String("string"),
				},
			},
		},
		InclusionLabels: osconfig.OsPolicyAssignmentInstanceFilterInclusionLabelArray{
			&osconfig.OsPolicyAssignmentInstanceFilterInclusionLabelArgs{
				Labels: pulumi.StringMap{
					"string": pulumi.String("string"),
				},
			},
		},
		Inventories: osconfig.OsPolicyAssignmentInstanceFilterInventoryArray{
			&osconfig.OsPolicyAssignmentInstanceFilterInventoryArgs{
				OsShortName: pulumi.String("string"),
				OsVersion:   pulumi.String("string"),
			},
		},
	},
	Location: pulumi.String("string"),
	OsPolicies: osconfig.OsPolicyAssignmentOsPolicyArray{
		&osconfig.OsPolicyAssignmentOsPolicyArgs{
			Id:   pulumi.String("string"),
			Mode: pulumi.String("string"),
			ResourceGroups: osconfig.OsPolicyAssignmentOsPolicyResourceGroupArray{
				&osconfig.OsPolicyAssignmentOsPolicyResourceGroupArgs{
					Resources: osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceArray{
						&osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceArgs{
							Id: pulumi.String("string"),
							Exec: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecArgs{
								Validate: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateArgs{
									Interpreter: pulumi.String("string"),
									Args: pulumi.StringArray{
										pulumi.String("string"),
									},
									File: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileArgs{
										AllowInsecure: pulumi.Bool(false),
										Gcs: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileGcsArgs{
											Bucket:     pulumi.String("string"),
											Object:     pulumi.String("string"),
											Generation: pulumi.Int(0),
										},
										LocalPath: pulumi.String("string"),
										Remote: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileRemoteArgs{
											Uri:            pulumi.String("string"),
											Sha256Checksum: pulumi.String("string"),
										},
									},
									OutputFilePath: pulumi.String("string"),
									Script:         pulumi.String("string"),
								},
								Enforce: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceArgs{
									Interpreter: pulumi.String("string"),
									Args: pulumi.StringArray{
										pulumi.String("string"),
									},
									File: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileArgs{
										AllowInsecure: pulumi.Bool(false),
										Gcs: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileGcsArgs{
											Bucket:     pulumi.String("string"),
											Object:     pulumi.String("string"),
											Generation: pulumi.Int(0),
										},
										LocalPath: pulumi.String("string"),
										Remote: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileRemoteArgs{
											Uri:            pulumi.String("string"),
											Sha256Checksum: pulumi.String("string"),
										},
									},
									OutputFilePath: pulumi.String("string"),
									Script:         pulumi.String("string"),
								},
							},
							File: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceFileArgs{
								Path:    pulumi.String("string"),
								State:   pulumi.String("string"),
								Content: pulumi.String("string"),
								File: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileArgs{
									AllowInsecure: pulumi.Bool(false),
									Gcs: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileGcsArgs{
										Bucket:     pulumi.String("string"),
										Object:     pulumi.String("string"),
										Generation: pulumi.Int(0),
									},
									LocalPath: pulumi.String("string"),
									Remote: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileRemoteArgs{
										Uri:            pulumi.String("string"),
										Sha256Checksum: pulumi.String("string"),
									},
								},
								Permissions: pulumi.String("string"),
							},
							Pkg: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgArgs{
								DesiredState: pulumi.String("string"),
								Apt: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgAptArgs{
									Name: pulumi.String("string"),
								},
								Deb: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebArgs{
									Source: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceArgs{
										AllowInsecure: pulumi.Bool(false),
										Gcs: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceGcsArgs{
											Bucket:     pulumi.String("string"),
											Object:     pulumi.String("string"),
											Generation: pulumi.Int(0),
										},
										LocalPath: pulumi.String("string"),
										Remote: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceRemoteArgs{
											Uri:            pulumi.String("string"),
											Sha256Checksum: pulumi.String("string"),
										},
									},
									PullDeps: pulumi.Bool(false),
								},
								Googet: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgGoogetArgs{
									Name: pulumi.String("string"),
								},
								Msi: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiArgs{
									Source: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceArgs{
										AllowInsecure: pulumi.Bool(false),
										Gcs: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceGcsArgs{
											Bucket:     pulumi.String("string"),
											Object:     pulumi.String("string"),
											Generation: pulumi.Int(0),
										},
										LocalPath: pulumi.String("string"),
										Remote: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceRemoteArgs{
											Uri:            pulumi.String("string"),
											Sha256Checksum: pulumi.String("string"),
										},
									},
									Properties: pulumi.StringArray{
										pulumi.String("string"),
									},
								},
								Rpm: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmArgs{
									Source: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceArgs{
										AllowInsecure: pulumi.Bool(false),
										Gcs: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceGcsArgs{
											Bucket:     pulumi.String("string"),
											Object:     pulumi.String("string"),
											Generation: pulumi.Int(0),
										},
										LocalPath: pulumi.String("string"),
										Remote: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceRemoteArgs{
											Uri:            pulumi.String("string"),
											Sha256Checksum: pulumi.String("string"),
										},
									},
									PullDeps: pulumi.Bool(false),
								},
								Yum: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgYumArgs{
									Name: pulumi.String("string"),
								},
								Zypper: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgZypperArgs{
									Name: pulumi.String("string"),
								},
							},
							Repository: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryArgs{
								Apt: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryAptArgs{
									ArchiveType: pulumi.String("string"),
									Components: pulumi.StringArray{
										pulumi.String("string"),
									},
									Distribution: pulumi.String("string"),
									Uri:          pulumi.String("string"),
									GpgKey:       pulumi.String("string"),
								},
								Goo: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryGooArgs{
									Name: pulumi.String("string"),
									Url:  pulumi.String("string"),
								},
								Yum: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryYumArgs{
									BaseUrl:     pulumi.String("string"),
									Id:          pulumi.String("string"),
									DisplayName: pulumi.String("string"),
									GpgKeys: pulumi.StringArray{
										pulumi.String("string"),
									},
								},
								Zypper: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryZypperArgs{
									BaseUrl:     pulumi.String("string"),
									Id:          pulumi.String("string"),
									DisplayName: pulumi.String("string"),
									GpgKeys: pulumi.StringArray{
										pulumi.String("string"),
									},
								},
							},
						},
					},
					InventoryFilters: osconfig.OsPolicyAssignmentOsPolicyResourceGroupInventoryFilterArray{
						&osconfig.OsPolicyAssignmentOsPolicyResourceGroupInventoryFilterArgs{
							OsShortName: pulumi.String("string"),
							OsVersion:   pulumi.String("string"),
						},
					},
				},
			},
			AllowNoResourceGroupMatch: pulumi.Bool(false),
			Description:               pulumi.String("string"),
		},
	},
	Rollout: &osconfig.OsPolicyAssignmentRolloutArgs{
		DisruptionBudget: &osconfig.OsPolicyAssignmentRolloutDisruptionBudgetArgs{
			Fixed:   pulumi.Int(0),
			Percent: pulumi.Int(0),
		},
		MinWaitDuration: pulumi.String("string"),
	},
	Description:      pulumi.String("string"),
	Name:             pulumi.String("string"),
	Project:          pulumi.String("string"),
	SkipAwaitRollout: pulumi.Bool(false),
})
Copy
var osPolicyAssignmentResource = new OsPolicyAssignment("osPolicyAssignmentResource", OsPolicyAssignmentArgs.builder()
    .instanceFilter(OsPolicyAssignmentInstanceFilterArgs.builder()
        .all(false)
        .exclusionLabels(OsPolicyAssignmentInstanceFilterExclusionLabelArgs.builder()
            .labels(Map.of("string", "string"))
            .build())
        .inclusionLabels(OsPolicyAssignmentInstanceFilterInclusionLabelArgs.builder()
            .labels(Map.of("string", "string"))
            .build())
        .inventories(OsPolicyAssignmentInstanceFilterInventoryArgs.builder()
            .osShortName("string")
            .osVersion("string")
            .build())
        .build())
    .location("string")
    .osPolicies(OsPolicyAssignmentOsPolicyArgs.builder()
        .id("string")
        .mode("string")
        .resourceGroups(OsPolicyAssignmentOsPolicyResourceGroupArgs.builder()
            .resources(OsPolicyAssignmentOsPolicyResourceGroupResourceArgs.builder()
                .id("string")
                .exec(OsPolicyAssignmentOsPolicyResourceGroupResourceExecArgs.builder()
                    .validate(OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateArgs.builder()
                        .interpreter("string")
                        .args("string")
                        .file(OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileArgs.builder()
                            .allowInsecure(false)
                            .gcs(OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileGcsArgs.builder()
                                .bucket("string")
                                .object("string")
                                .generation(0)
                                .build())
                            .localPath("string")
                            .remote(OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileRemoteArgs.builder()
                                .uri("string")
                                .sha256Checksum("string")
                                .build())
                            .build())
                        .outputFilePath("string")
                        .script("string")
                        .build())
                    .enforce(OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceArgs.builder()
                        .interpreter("string")
                        .args("string")
                        .file(OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileArgs.builder()
                            .allowInsecure(false)
                            .gcs(OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileGcsArgs.builder()
                                .bucket("string")
                                .object("string")
                                .generation(0)
                                .build())
                            .localPath("string")
                            .remote(OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileRemoteArgs.builder()
                                .uri("string")
                                .sha256Checksum("string")
                                .build())
                            .build())
                        .outputFilePath("string")
                        .script("string")
                        .build())
                    .build())
                .file(OsPolicyAssignmentOsPolicyResourceGroupResourceFileArgs.builder()
                    .path("string")
                    .state("string")
                    .content("string")
                    .file(OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileArgs.builder()
                        .allowInsecure(false)
                        .gcs(OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileGcsArgs.builder()
                            .bucket("string")
                            .object("string")
                            .generation(0)
                            .build())
                        .localPath("string")
                        .remote(OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileRemoteArgs.builder()
                            .uri("string")
                            .sha256Checksum("string")
                            .build())
                        .build())
                    .permissions("string")
                    .build())
                .pkg(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgArgs.builder()
                    .desiredState("string")
                    .apt(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgAptArgs.builder()
                        .name("string")
                        .build())
                    .deb(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebArgs.builder()
                        .source(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceArgs.builder()
                            .allowInsecure(false)
                            .gcs(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceGcsArgs.builder()
                                .bucket("string")
                                .object("string")
                                .generation(0)
                                .build())
                            .localPath("string")
                            .remote(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceRemoteArgs.builder()
                                .uri("string")
                                .sha256Checksum("string")
                                .build())
                            .build())
                        .pullDeps(false)
                        .build())
                    .googet(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgGoogetArgs.builder()
                        .name("string")
                        .build())
                    .msi(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiArgs.builder()
                        .source(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceArgs.builder()
                            .allowInsecure(false)
                            .gcs(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceGcsArgs.builder()
                                .bucket("string")
                                .object("string")
                                .generation(0)
                                .build())
                            .localPath("string")
                            .remote(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceRemoteArgs.builder()
                                .uri("string")
                                .sha256Checksum("string")
                                .build())
                            .build())
                        .properties("string")
                        .build())
                    .rpm(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmArgs.builder()
                        .source(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceArgs.builder()
                            .allowInsecure(false)
                            .gcs(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceGcsArgs.builder()
                                .bucket("string")
                                .object("string")
                                .generation(0)
                                .build())
                            .localPath("string")
                            .remote(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceRemoteArgs.builder()
                                .uri("string")
                                .sha256Checksum("string")
                                .build())
                            .build())
                        .pullDeps(false)
                        .build())
                    .yum(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgYumArgs.builder()
                        .name("string")
                        .build())
                    .zypper(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgZypperArgs.builder()
                        .name("string")
                        .build())
                    .build())
                .repository(OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryArgs.builder()
                    .apt(OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryAptArgs.builder()
                        .archiveType("string")
                        .components("string")
                        .distribution("string")
                        .uri("string")
                        .gpgKey("string")
                        .build())
                    .goo(OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryGooArgs.builder()
                        .name("string")
                        .url("string")
                        .build())
                    .yum(OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryYumArgs.builder()
                        .baseUrl("string")
                        .id("string")
                        .displayName("string")
                        .gpgKeys("string")
                        .build())
                    .zypper(OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryZypperArgs.builder()
                        .baseUrl("string")
                        .id("string")
                        .displayName("string")
                        .gpgKeys("string")
                        .build())
                    .build())
                .build())
            .inventoryFilters(OsPolicyAssignmentOsPolicyResourceGroupInventoryFilterArgs.builder()
                .osShortName("string")
                .osVersion("string")
                .build())
            .build())
        .allowNoResourceGroupMatch(false)
        .description("string")
        .build())
    .rollout(OsPolicyAssignmentRolloutArgs.builder()
        .disruptionBudget(OsPolicyAssignmentRolloutDisruptionBudgetArgs.builder()
            .fixed(0)
            .percent(0)
            .build())
        .minWaitDuration("string")
        .build())
    .description("string")
    .name("string")
    .project("string")
    .skipAwaitRollout(false)
    .build());
Copy
os_policy_assignment_resource = gcp.osconfig.OsPolicyAssignment("osPolicyAssignmentResource",
    instance_filter={
        "all": False,
        "exclusion_labels": [{
            "labels": {
                "string": "string",
            },
        }],
        "inclusion_labels": [{
            "labels": {
                "string": "string",
            },
        }],
        "inventories": [{
            "os_short_name": "string",
            "os_version": "string",
        }],
    },
    location="string",
    os_policies=[{
        "id": "string",
        "mode": "string",
        "resource_groups": [{
            "resources": [{
                "id": "string",
                "exec_": {
                    "validate": {
                        "interpreter": "string",
                        "args": ["string"],
                        "file": {
                            "allow_insecure": False,
                            "gcs": {
                                "bucket": "string",
                                "object": "string",
                                "generation": 0,
                            },
                            "local_path": "string",
                            "remote": {
                                "uri": "string",
                                "sha256_checksum": "string",
                            },
                        },
                        "output_file_path": "string",
                        "script": "string",
                    },
                    "enforce": {
                        "interpreter": "string",
                        "args": ["string"],
                        "file": {
                            "allow_insecure": False,
                            "gcs": {
                                "bucket": "string",
                                "object": "string",
                                "generation": 0,
                            },
                            "local_path": "string",
                            "remote": {
                                "uri": "string",
                                "sha256_checksum": "string",
                            },
                        },
                        "output_file_path": "string",
                        "script": "string",
                    },
                },
                "file": {
                    "path": "string",
                    "state": "string",
                    "content": "string",
                    "file": {
                        "allow_insecure": False,
                        "gcs": {
                            "bucket": "string",
                            "object": "string",
                            "generation": 0,
                        },
                        "local_path": "string",
                        "remote": {
                            "uri": "string",
                            "sha256_checksum": "string",
                        },
                    },
                    "permissions": "string",
                },
                "pkg": {
                    "desired_state": "string",
                    "apt": {
                        "name": "string",
                    },
                    "deb": {
                        "source": {
                            "allow_insecure": False,
                            "gcs": {
                                "bucket": "string",
                                "object": "string",
                                "generation": 0,
                            },
                            "local_path": "string",
                            "remote": {
                                "uri": "string",
                                "sha256_checksum": "string",
                            },
                        },
                        "pull_deps": False,
                    },
                    "googet": {
                        "name": "string",
                    },
                    "msi": {
                        "source": {
                            "allow_insecure": False,
                            "gcs": {
                                "bucket": "string",
                                "object": "string",
                                "generation": 0,
                            },
                            "local_path": "string",
                            "remote": {
                                "uri": "string",
                                "sha256_checksum": "string",
                            },
                        },
                        "properties": ["string"],
                    },
                    "rpm": {
                        "source": {
                            "allow_insecure": False,
                            "gcs": {
                                "bucket": "string",
                                "object": "string",
                                "generation": 0,
                            },
                            "local_path": "string",
                            "remote": {
                                "uri": "string",
                                "sha256_checksum": "string",
                            },
                        },
                        "pull_deps": False,
                    },
                    "yum": {
                        "name": "string",
                    },
                    "zypper": {
                        "name": "string",
                    },
                },
                "repository": {
                    "apt": {
                        "archive_type": "string",
                        "components": ["string"],
                        "distribution": "string",
                        "uri": "string",
                        "gpg_key": "string",
                    },
                    "goo": {
                        "name": "string",
                        "url": "string",
                    },
                    "yum": {
                        "base_url": "string",
                        "id": "string",
                        "display_name": "string",
                        "gpg_keys": ["string"],
                    },
                    "zypper": {
                        "base_url": "string",
                        "id": "string",
                        "display_name": "string",
                        "gpg_keys": ["string"],
                    },
                },
            }],
            "inventory_filters": [{
                "os_short_name": "string",
                "os_version": "string",
            }],
        }],
        "allow_no_resource_group_match": False,
        "description": "string",
    }],
    rollout={
        "disruption_budget": {
            "fixed": 0,
            "percent": 0,
        },
        "min_wait_duration": "string",
    },
    description="string",
    name="string",
    project="string",
    skip_await_rollout=False)
Copy
const osPolicyAssignmentResource = new gcp.osconfig.OsPolicyAssignment("osPolicyAssignmentResource", {
    instanceFilter: {
        all: false,
        exclusionLabels: [{
            labels: {
                string: "string",
            },
        }],
        inclusionLabels: [{
            labels: {
                string: "string",
            },
        }],
        inventories: [{
            osShortName: "string",
            osVersion: "string",
        }],
    },
    location: "string",
    osPolicies: [{
        id: "string",
        mode: "string",
        resourceGroups: [{
            resources: [{
                id: "string",
                exec: {
                    validate: {
                        interpreter: "string",
                        args: ["string"],
                        file: {
                            allowInsecure: false,
                            gcs: {
                                bucket: "string",
                                object: "string",
                                generation: 0,
                            },
                            localPath: "string",
                            remote: {
                                uri: "string",
                                sha256Checksum: "string",
                            },
                        },
                        outputFilePath: "string",
                        script: "string",
                    },
                    enforce: {
                        interpreter: "string",
                        args: ["string"],
                        file: {
                            allowInsecure: false,
                            gcs: {
                                bucket: "string",
                                object: "string",
                                generation: 0,
                            },
                            localPath: "string",
                            remote: {
                                uri: "string",
                                sha256Checksum: "string",
                            },
                        },
                        outputFilePath: "string",
                        script: "string",
                    },
                },
                file: {
                    path: "string",
                    state: "string",
                    content: "string",
                    file: {
                        allowInsecure: false,
                        gcs: {
                            bucket: "string",
                            object: "string",
                            generation: 0,
                        },
                        localPath: "string",
                        remote: {
                            uri: "string",
                            sha256Checksum: "string",
                        },
                    },
                    permissions: "string",
                },
                pkg: {
                    desiredState: "string",
                    apt: {
                        name: "string",
                    },
                    deb: {
                        source: {
                            allowInsecure: false,
                            gcs: {
                                bucket: "string",
                                object: "string",
                                generation: 0,
                            },
                            localPath: "string",
                            remote: {
                                uri: "string",
                                sha256Checksum: "string",
                            },
                        },
                        pullDeps: false,
                    },
                    googet: {
                        name: "string",
                    },
                    msi: {
                        source: {
                            allowInsecure: false,
                            gcs: {
                                bucket: "string",
                                object: "string",
                                generation: 0,
                            },
                            localPath: "string",
                            remote: {
                                uri: "string",
                                sha256Checksum: "string",
                            },
                        },
                        properties: ["string"],
                    },
                    rpm: {
                        source: {
                            allowInsecure: false,
                            gcs: {
                                bucket: "string",
                                object: "string",
                                generation: 0,
                            },
                            localPath: "string",
                            remote: {
                                uri: "string",
                                sha256Checksum: "string",
                            },
                        },
                        pullDeps: false,
                    },
                    yum: {
                        name: "string",
                    },
                    zypper: {
                        name: "string",
                    },
                },
                repository: {
                    apt: {
                        archiveType: "string",
                        components: ["string"],
                        distribution: "string",
                        uri: "string",
                        gpgKey: "string",
                    },
                    goo: {
                        name: "string",
                        url: "string",
                    },
                    yum: {
                        baseUrl: "string",
                        id: "string",
                        displayName: "string",
                        gpgKeys: ["string"],
                    },
                    zypper: {
                        baseUrl: "string",
                        id: "string",
                        displayName: "string",
                        gpgKeys: ["string"],
                    },
                },
            }],
            inventoryFilters: [{
                osShortName: "string",
                osVersion: "string",
            }],
        }],
        allowNoResourceGroupMatch: false,
        description: "string",
    }],
    rollout: {
        disruptionBudget: {
            fixed: 0,
            percent: 0,
        },
        minWaitDuration: "string",
    },
    description: "string",
    name: "string",
    project: "string",
    skipAwaitRollout: false,
});
Copy
type: gcp:osconfig:OsPolicyAssignment
properties:
    description: string
    instanceFilter:
        all: false
        exclusionLabels:
            - labels:
                string: string
        inclusionLabels:
            - labels:
                string: string
        inventories:
            - osShortName: string
              osVersion: string
    location: string
    name: string
    osPolicies:
        - allowNoResourceGroupMatch: false
          description: string
          id: string
          mode: string
          resourceGroups:
            - inventoryFilters:
                - osShortName: string
                  osVersion: string
              resources:
                - exec:
                    enforce:
                        args:
                            - string
                        file:
                            allowInsecure: false
                            gcs:
                                bucket: string
                                generation: 0
                                object: string
                            localPath: string
                            remote:
                                sha256Checksum: string
                                uri: string
                        interpreter: string
                        outputFilePath: string
                        script: string
                    validate:
                        args:
                            - string
                        file:
                            allowInsecure: false
                            gcs:
                                bucket: string
                                generation: 0
                                object: string
                            localPath: string
                            remote:
                                sha256Checksum: string
                                uri: string
                        interpreter: string
                        outputFilePath: string
                        script: string
                  file:
                    content: string
                    file:
                        allowInsecure: false
                        gcs:
                            bucket: string
                            generation: 0
                            object: string
                        localPath: string
                        remote:
                            sha256Checksum: string
                            uri: string
                    path: string
                    permissions: string
                    state: string
                  id: string
                  pkg:
                    apt:
                        name: string
                    deb:
                        pullDeps: false
                        source:
                            allowInsecure: false
                            gcs:
                                bucket: string
                                generation: 0
                                object: string
                            localPath: string
                            remote:
                                sha256Checksum: string
                                uri: string
                    desiredState: string
                    googet:
                        name: string
                    msi:
                        properties:
                            - string
                        source:
                            allowInsecure: false
                            gcs:
                                bucket: string
                                generation: 0
                                object: string
                            localPath: string
                            remote:
                                sha256Checksum: string
                                uri: string
                    rpm:
                        pullDeps: false
                        source:
                            allowInsecure: false
                            gcs:
                                bucket: string
                                generation: 0
                                object: string
                            localPath: string
                            remote:
                                sha256Checksum: string
                                uri: string
                    yum:
                        name: string
                    zypper:
                        name: string
                  repository:
                    apt:
                        archiveType: string
                        components:
                            - string
                        distribution: string
                        gpgKey: string
                        uri: string
                    goo:
                        name: string
                        url: string
                    yum:
                        baseUrl: string
                        displayName: string
                        gpgKeys:
                            - string
                        id: string
                    zypper:
                        baseUrl: string
                        displayName: string
                        gpgKeys:
                            - string
                        id: string
    project: string
    rollout:
        disruptionBudget:
            fixed: 0
            percent: 0
        minWaitDuration: string
    skipAwaitRollout: false
Copy

OsPolicyAssignment Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The OsPolicyAssignment resource accepts the following input properties:

InstanceFilter This property is required. OsPolicyAssignmentInstanceFilter
Filter to select VMs. Structure is documented below.
Location
This property is required.
Changes to this property will trigger replacement.
string
The location for the resource
OsPolicies This property is required. List<OsPolicyAssignmentOsPolicy>
List of OS policies to be applied to the VMs. Structure is documented below.
Rollout This property is required. OsPolicyAssignmentRollout
Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted. Structure is documented below.
Description string
OS policy assignment description. Length of the description is limited to 1024 characters.
Name Changes to this property will trigger replacement. string
Resource name.
Project Changes to this property will trigger replacement. string
The project for the resource
SkipAwaitRollout bool
Set to true to skip awaiting rollout during resource creation and update.
InstanceFilter This property is required. OsPolicyAssignmentInstanceFilterArgs
Filter to select VMs. Structure is documented below.
Location
This property is required.
Changes to this property will trigger replacement.
string
The location for the resource
OsPolicies This property is required. []OsPolicyAssignmentOsPolicyArgs
List of OS policies to be applied to the VMs. Structure is documented below.
Rollout This property is required. OsPolicyAssignmentRolloutArgs
Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted. Structure is documented below.
Description string
OS policy assignment description. Length of the description is limited to 1024 characters.
Name Changes to this property will trigger replacement. string
Resource name.
Project Changes to this property will trigger replacement. string
The project for the resource
SkipAwaitRollout bool
Set to true to skip awaiting rollout during resource creation and update.
instanceFilter This property is required. OsPolicyAssignmentInstanceFilter
Filter to select VMs. Structure is documented below.
location
This property is required.
Changes to this property will trigger replacement.
String
The location for the resource
osPolicies This property is required. List<OsPolicyAssignmentOsPolicy>
List of OS policies to be applied to the VMs. Structure is documented below.
rollout This property is required. OsPolicyAssignmentRollout
Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted. Structure is documented below.
description String
OS policy assignment description. Length of the description is limited to 1024 characters.
name Changes to this property will trigger replacement. String
Resource name.
project Changes to this property will trigger replacement. String
The project for the resource
skipAwaitRollout Boolean
Set to true to skip awaiting rollout during resource creation and update.
instanceFilter This property is required. OsPolicyAssignmentInstanceFilter
Filter to select VMs. Structure is documented below.
location
This property is required.
Changes to this property will trigger replacement.
string
The location for the resource
osPolicies This property is required. OsPolicyAssignmentOsPolicy[]
List of OS policies to be applied to the VMs. Structure is documented below.
rollout This property is required. OsPolicyAssignmentRollout
Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted. Structure is documented below.
description string
OS policy assignment description. Length of the description is limited to 1024 characters.
name Changes to this property will trigger replacement. string
Resource name.
project Changes to this property will trigger replacement. string
The project for the resource
skipAwaitRollout boolean
Set to true to skip awaiting rollout during resource creation and update.
instance_filter This property is required. OsPolicyAssignmentInstanceFilterArgs
Filter to select VMs. Structure is documented below.
location
This property is required.
Changes to this property will trigger replacement.
str
The location for the resource
os_policies This property is required. Sequence[OsPolicyAssignmentOsPolicyArgs]
List of OS policies to be applied to the VMs. Structure is documented below.
rollout This property is required. OsPolicyAssignmentRolloutArgs
Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted. Structure is documented below.
description str
OS policy assignment description. Length of the description is limited to 1024 characters.
name Changes to this property will trigger replacement. str
Resource name.
project Changes to this property will trigger replacement. str
The project for the resource
skip_await_rollout bool
Set to true to skip awaiting rollout during resource creation and update.
instanceFilter This property is required. Property Map
Filter to select VMs. Structure is documented below.
location
This property is required.
Changes to this property will trigger replacement.
String
The location for the resource
osPolicies This property is required. List<Property Map>
List of OS policies to be applied to the VMs. Structure is documented below.
rollout This property is required. Property Map
Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted. Structure is documented below.
description String
OS policy assignment description. Length of the description is limited to 1024 characters.
name Changes to this property will trigger replacement. String
Resource name.
project Changes to this property will trigger replacement. String
The project for the resource
skipAwaitRollout Boolean
Set to true to skip awaiting rollout during resource creation and update.

Outputs

All input properties are implicitly available as output properties. Additionally, the OsPolicyAssignment resource produces the following output properties:

Baseline bool
Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision. For a given OS policy assignment, there is only one revision with a value of true for this field.
Deleted bool
Output only. Indicates that this revision deletes the OS policy assignment.
Etag string
The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
Id string
The provider-assigned unique ID for this managed resource.
Reconciling bool
Output only. Indicates that reconciliation is in progress for the revision. This value is true when the rollout_state is one of:
RevisionCreateTime string
Output only. The timestamp that the revision was created.
RevisionId string
Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
RolloutState string
Output only. OS policy assignment rollout state
Uid string
Output only. Server generated unique id for the OS policy assignment resource.
Baseline bool
Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision. For a given OS policy assignment, there is only one revision with a value of true for this field.
Deleted bool
Output only. Indicates that this revision deletes the OS policy assignment.
Etag string
The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
Id string
The provider-assigned unique ID for this managed resource.
Reconciling bool
Output only. Indicates that reconciliation is in progress for the revision. This value is true when the rollout_state is one of:
RevisionCreateTime string
Output only. The timestamp that the revision was created.
RevisionId string
Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
RolloutState string
Output only. OS policy assignment rollout state
Uid string
Output only. Server generated unique id for the OS policy assignment resource.
baseline Boolean
Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision. For a given OS policy assignment, there is only one revision with a value of true for this field.
deleted Boolean
Output only. Indicates that this revision deletes the OS policy assignment.
etag String
The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
id String
The provider-assigned unique ID for this managed resource.
reconciling Boolean
Output only. Indicates that reconciliation is in progress for the revision. This value is true when the rollout_state is one of:
revisionCreateTime String
Output only. The timestamp that the revision was created.
revisionId String
Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
rolloutState String
Output only. OS policy assignment rollout state
uid String
Output only. Server generated unique id for the OS policy assignment resource.
baseline boolean
Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision. For a given OS policy assignment, there is only one revision with a value of true for this field.
deleted boolean
Output only. Indicates that this revision deletes the OS policy assignment.
etag string
The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
id string
The provider-assigned unique ID for this managed resource.
reconciling boolean
Output only. Indicates that reconciliation is in progress for the revision. This value is true when the rollout_state is one of:
revisionCreateTime string
Output only. The timestamp that the revision was created.
revisionId string
Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
rolloutState string
Output only. OS policy assignment rollout state
uid string
Output only. Server generated unique id for the OS policy assignment resource.
baseline bool
Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision. For a given OS policy assignment, there is only one revision with a value of true for this field.
deleted bool
Output only. Indicates that this revision deletes the OS policy assignment.
etag str
The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
id str
The provider-assigned unique ID for this managed resource.
reconciling bool
Output only. Indicates that reconciliation is in progress for the revision. This value is true when the rollout_state is one of:
revision_create_time str
Output only. The timestamp that the revision was created.
revision_id str
Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
rollout_state str
Output only. OS policy assignment rollout state
uid str
Output only. Server generated unique id for the OS policy assignment resource.
baseline Boolean
Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision. For a given OS policy assignment, there is only one revision with a value of true for this field.
deleted Boolean
Output only. Indicates that this revision deletes the OS policy assignment.
etag String
The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
id String
The provider-assigned unique ID for this managed resource.
reconciling Boolean
Output only. Indicates that reconciliation is in progress for the revision. This value is true when the rollout_state is one of:
revisionCreateTime String
Output only. The timestamp that the revision was created.
revisionId String
Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
rolloutState String
Output only. OS policy assignment rollout state
uid String
Output only. Server generated unique id for the OS policy assignment resource.

Look up Existing OsPolicyAssignment Resource

Get an existing OsPolicyAssignment resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: OsPolicyAssignmentState, opts?: CustomResourceOptions): OsPolicyAssignment
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        baseline: Optional[bool] = None,
        deleted: Optional[bool] = None,
        description: Optional[str] = None,
        etag: Optional[str] = None,
        instance_filter: Optional[OsPolicyAssignmentInstanceFilterArgs] = None,
        location: Optional[str] = None,
        name: Optional[str] = None,
        os_policies: Optional[Sequence[OsPolicyAssignmentOsPolicyArgs]] = None,
        project: Optional[str] = None,
        reconciling: Optional[bool] = None,
        revision_create_time: Optional[str] = None,
        revision_id: Optional[str] = None,
        rollout: Optional[OsPolicyAssignmentRolloutArgs] = None,
        rollout_state: Optional[str] = None,
        skip_await_rollout: Optional[bool] = None,
        uid: Optional[str] = None) -> OsPolicyAssignment
func GetOsPolicyAssignment(ctx *Context, name string, id IDInput, state *OsPolicyAssignmentState, opts ...ResourceOption) (*OsPolicyAssignment, error)
public static OsPolicyAssignment Get(string name, Input<string> id, OsPolicyAssignmentState? state, CustomResourceOptions? opts = null)
public static OsPolicyAssignment get(String name, Output<String> id, OsPolicyAssignmentState state, CustomResourceOptions options)
resources:  _:    type: gcp:osconfig:OsPolicyAssignment    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
Baseline bool
Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision. For a given OS policy assignment, there is only one revision with a value of true for this field.
Deleted bool
Output only. Indicates that this revision deletes the OS policy assignment.
Description string
OS policy assignment description. Length of the description is limited to 1024 characters.
Etag string
The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
InstanceFilter OsPolicyAssignmentInstanceFilter
Filter to select VMs. Structure is documented below.
Location Changes to this property will trigger replacement. string
The location for the resource
Name Changes to this property will trigger replacement. string
Resource name.
OsPolicies List<OsPolicyAssignmentOsPolicy>
List of OS policies to be applied to the VMs. Structure is documented below.
Project Changes to this property will trigger replacement. string
The project for the resource
Reconciling bool
Output only. Indicates that reconciliation is in progress for the revision. This value is true when the rollout_state is one of:
RevisionCreateTime string
Output only. The timestamp that the revision was created.
RevisionId string
Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
Rollout OsPolicyAssignmentRollout
Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted. Structure is documented below.
RolloutState string
Output only. OS policy assignment rollout state
SkipAwaitRollout bool
Set to true to skip awaiting rollout during resource creation and update.
Uid string
Output only. Server generated unique id for the OS policy assignment resource.
Baseline bool
Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision. For a given OS policy assignment, there is only one revision with a value of true for this field.
Deleted bool
Output only. Indicates that this revision deletes the OS policy assignment.
Description string
OS policy assignment description. Length of the description is limited to 1024 characters.
Etag string
The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
InstanceFilter OsPolicyAssignmentInstanceFilterArgs
Filter to select VMs. Structure is documented below.
Location Changes to this property will trigger replacement. string
The location for the resource
Name Changes to this property will trigger replacement. string
Resource name.
OsPolicies []OsPolicyAssignmentOsPolicyArgs
List of OS policies to be applied to the VMs. Structure is documented below.
Project Changes to this property will trigger replacement. string
The project for the resource
Reconciling bool
Output only. Indicates that reconciliation is in progress for the revision. This value is true when the rollout_state is one of:
RevisionCreateTime string
Output only. The timestamp that the revision was created.
RevisionId string
Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
Rollout OsPolicyAssignmentRolloutArgs
Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted. Structure is documented below.
RolloutState string
Output only. OS policy assignment rollout state
SkipAwaitRollout bool
Set to true to skip awaiting rollout during resource creation and update.
Uid string
Output only. Server generated unique id for the OS policy assignment resource.
baseline Boolean
Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision. For a given OS policy assignment, there is only one revision with a value of true for this field.
deleted Boolean
Output only. Indicates that this revision deletes the OS policy assignment.
description String
OS policy assignment description. Length of the description is limited to 1024 characters.
etag String
The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
instanceFilter OsPolicyAssignmentInstanceFilter
Filter to select VMs. Structure is documented below.
location Changes to this property will trigger replacement. String
The location for the resource
name Changes to this property will trigger replacement. String
Resource name.
osPolicies List<OsPolicyAssignmentOsPolicy>
List of OS policies to be applied to the VMs. Structure is documented below.
project Changes to this property will trigger replacement. String
The project for the resource
reconciling Boolean
Output only. Indicates that reconciliation is in progress for the revision. This value is true when the rollout_state is one of:
revisionCreateTime String
Output only. The timestamp that the revision was created.
revisionId String
Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
rollout OsPolicyAssignmentRollout
Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted. Structure is documented below.
rolloutState String
Output only. OS policy assignment rollout state
skipAwaitRollout Boolean
Set to true to skip awaiting rollout during resource creation and update.
uid String
Output only. Server generated unique id for the OS policy assignment resource.
baseline boolean
Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision. For a given OS policy assignment, there is only one revision with a value of true for this field.
deleted boolean
Output only. Indicates that this revision deletes the OS policy assignment.
description string
OS policy assignment description. Length of the description is limited to 1024 characters.
etag string
The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
instanceFilter OsPolicyAssignmentInstanceFilter
Filter to select VMs. Structure is documented below.
location Changes to this property will trigger replacement. string
The location for the resource
name Changes to this property will trigger replacement. string
Resource name.
osPolicies OsPolicyAssignmentOsPolicy[]
List of OS policies to be applied to the VMs. Structure is documented below.
project Changes to this property will trigger replacement. string
The project for the resource
reconciling boolean
Output only. Indicates that reconciliation is in progress for the revision. This value is true when the rollout_state is one of:
revisionCreateTime string
Output only. The timestamp that the revision was created.
revisionId string
Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
rollout OsPolicyAssignmentRollout
Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted. Structure is documented below.
rolloutState string
Output only. OS policy assignment rollout state
skipAwaitRollout boolean
Set to true to skip awaiting rollout during resource creation and update.
uid string
Output only. Server generated unique id for the OS policy assignment resource.
baseline bool
Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision. For a given OS policy assignment, there is only one revision with a value of true for this field.
deleted bool
Output only. Indicates that this revision deletes the OS policy assignment.
description str
OS policy assignment description. Length of the description is limited to 1024 characters.
etag str
The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
instance_filter OsPolicyAssignmentInstanceFilterArgs
Filter to select VMs. Structure is documented below.
location Changes to this property will trigger replacement. str
The location for the resource
name Changes to this property will trigger replacement. str
Resource name.
os_policies Sequence[OsPolicyAssignmentOsPolicyArgs]
List of OS policies to be applied to the VMs. Structure is documented below.
project Changes to this property will trigger replacement. str
The project for the resource
reconciling bool
Output only. Indicates that reconciliation is in progress for the revision. This value is true when the rollout_state is one of:
revision_create_time str
Output only. The timestamp that the revision was created.
revision_id str
Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
rollout OsPolicyAssignmentRolloutArgs
Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted. Structure is documented below.
rollout_state str
Output only. OS policy assignment rollout state
skip_await_rollout bool
Set to true to skip awaiting rollout during resource creation and update.
uid str
Output only. Server generated unique id for the OS policy assignment resource.
baseline Boolean
Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision. For a given OS policy assignment, there is only one revision with a value of true for this field.
deleted Boolean
Output only. Indicates that this revision deletes the OS policy assignment.
description String
OS policy assignment description. Length of the description is limited to 1024 characters.
etag String
The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
instanceFilter Property Map
Filter to select VMs. Structure is documented below.
location Changes to this property will trigger replacement. String
The location for the resource
name Changes to this property will trigger replacement. String
Resource name.
osPolicies List<Property Map>
List of OS policies to be applied to the VMs. Structure is documented below.
project Changes to this property will trigger replacement. String
The project for the resource
reconciling Boolean
Output only. Indicates that reconciliation is in progress for the revision. This value is true when the rollout_state is one of:
revisionCreateTime String
Output only. The timestamp that the revision was created.
revisionId String
Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
rollout Property Map
Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted. Structure is documented below.
rolloutState String
Output only. OS policy assignment rollout state
skipAwaitRollout Boolean
Set to true to skip awaiting rollout during resource creation and update.
uid String
Output only. Server generated unique id for the OS policy assignment resource.

Supporting Types

OsPolicyAssignmentInstanceFilter
, OsPolicyAssignmentInstanceFilterArgs

All bool
Target all VMs in the project. If true, no other criteria is permitted.
ExclusionLabels List<OsPolicyAssignmentInstanceFilterExclusionLabel>
List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM. Structure is documented below.
InclusionLabels List<OsPolicyAssignmentInstanceFilterInclusionLabel>
List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM. Structure is documented below.
Inventories List<OsPolicyAssignmentInstanceFilterInventory>
List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories. Structure is documented below.
All bool
Target all VMs in the project. If true, no other criteria is permitted.
ExclusionLabels []OsPolicyAssignmentInstanceFilterExclusionLabel
List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM. Structure is documented below.
InclusionLabels []OsPolicyAssignmentInstanceFilterInclusionLabel
List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM. Structure is documented below.
Inventories []OsPolicyAssignmentInstanceFilterInventory
List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories. Structure is documented below.
all Boolean
Target all VMs in the project. If true, no other criteria is permitted.
exclusionLabels List<OsPolicyAssignmentInstanceFilterExclusionLabel>
List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM. Structure is documented below.
inclusionLabels List<OsPolicyAssignmentInstanceFilterInclusionLabel>
List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM. Structure is documented below.
inventories List<OsPolicyAssignmentInstanceFilterInventory>
List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories. Structure is documented below.
all boolean
Target all VMs in the project. If true, no other criteria is permitted.
exclusionLabels OsPolicyAssignmentInstanceFilterExclusionLabel[]
List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM. Structure is documented below.
inclusionLabels OsPolicyAssignmentInstanceFilterInclusionLabel[]
List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM. Structure is documented below.
inventories OsPolicyAssignmentInstanceFilterInventory[]
List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories. Structure is documented below.
all bool
Target all VMs in the project. If true, no other criteria is permitted.
exclusion_labels Sequence[OsPolicyAssignmentInstanceFilterExclusionLabel]
List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM. Structure is documented below.
inclusion_labels Sequence[OsPolicyAssignmentInstanceFilterInclusionLabel]
List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM. Structure is documented below.
inventories Sequence[OsPolicyAssignmentInstanceFilterInventory]
List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories. Structure is documented below.
all Boolean
Target all VMs in the project. If true, no other criteria is permitted.
exclusionLabels List<Property Map>
List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM. Structure is documented below.
inclusionLabels List<Property Map>
List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM. Structure is documented below.
inventories List<Property Map>
List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories. Structure is documented below.

OsPolicyAssignmentInstanceFilterExclusionLabel
, OsPolicyAssignmentInstanceFilterExclusionLabelArgs

Labels Dictionary<string, string>
Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
Labels map[string]string
Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
labels Map<String,String>
Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
labels {[key: string]: string}
Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
labels Mapping[str, str]
Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
labels Map<String>
Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.

OsPolicyAssignmentInstanceFilterInclusionLabel
, OsPolicyAssignmentInstanceFilterInclusionLabelArgs

Labels Dictionary<string, string>
Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
Labels map[string]string
Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
labels Map<String,String>
Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
labels {[key: string]: string}
Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
labels Mapping[str, str]
Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
labels Map<String>
Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.

OsPolicyAssignmentInstanceFilterInventory
, OsPolicyAssignmentInstanceFilterInventoryArgs

OsShortName This property is required. string
The OS short name
OsVersion string
The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
OsShortName This property is required. string
The OS short name
OsVersion string
The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
osShortName This property is required. String
The OS short name
osVersion String
The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
osShortName This property is required. string
The OS short name
osVersion string
The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
os_short_name This property is required. str
The OS short name
os_version str
The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
osShortName This property is required. String
The OS short name
osVersion String
The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.

OsPolicyAssignmentOsPolicy
, OsPolicyAssignmentOsPolicyArgs

Id This property is required. string
The id of the OS policy with the following restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the assignment.
Mode This property is required. string
Policy mode Possible values are: MODE_UNSPECIFIED, VALIDATION, ENFORCEMENT.
ResourceGroups This property is required. List<OsPolicyAssignmentOsPolicyResourceGroup>
List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match Structure is documented below.
AllowNoResourceGroupMatch bool
This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
Description string
Policy description. Length of the description is limited to 1024 characters.
Id This property is required. string
The id of the OS policy with the following restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the assignment.
Mode This property is required. string
Policy mode Possible values are: MODE_UNSPECIFIED, VALIDATION, ENFORCEMENT.
ResourceGroups This property is required. []OsPolicyAssignmentOsPolicyResourceGroup
List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match Structure is documented below.
AllowNoResourceGroupMatch bool
This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
Description string
Policy description. Length of the description is limited to 1024 characters.
id This property is required. String
The id of the OS policy with the following restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the assignment.
mode This property is required. String
Policy mode Possible values are: MODE_UNSPECIFIED, VALIDATION, ENFORCEMENT.
resourceGroups This property is required. List<OsPolicyAssignmentOsPolicyResourceGroup>
List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match Structure is documented below.
allowNoResourceGroupMatch Boolean
This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
description String
Policy description. Length of the description is limited to 1024 characters.
id This property is required. string
The id of the OS policy with the following restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the assignment.
mode This property is required. string
Policy mode Possible values are: MODE_UNSPECIFIED, VALIDATION, ENFORCEMENT.
resourceGroups This property is required. OsPolicyAssignmentOsPolicyResourceGroup[]
List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match Structure is documented below.
allowNoResourceGroupMatch boolean
This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
description string
Policy description. Length of the description is limited to 1024 characters.
id This property is required. str
The id of the OS policy with the following restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the assignment.
mode This property is required. str
Policy mode Possible values are: MODE_UNSPECIFIED, VALIDATION, ENFORCEMENT.
resource_groups This property is required. Sequence[OsPolicyAssignmentOsPolicyResourceGroup]
List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match Structure is documented below.
allow_no_resource_group_match bool
This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
description str
Policy description. Length of the description is limited to 1024 characters.
id This property is required. String
The id of the OS policy with the following restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the assignment.
mode This property is required. String
Policy mode Possible values are: MODE_UNSPECIFIED, VALIDATION, ENFORCEMENT.
resourceGroups This property is required. List<Property Map>
List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match Structure is documented below.
allowNoResourceGroupMatch Boolean
This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
description String
Policy description. Length of the description is limited to 1024 characters.

OsPolicyAssignmentOsPolicyResourceGroup
, OsPolicyAssignmentOsPolicyResourceGroupArgs

Resources This property is required. List<OsPolicyAssignmentOsPolicyResourceGroupResource>
List of resources configured for this resource group. The resources are executed in the exact order specified here. Structure is documented below.
InventoryFilters List<OsPolicyAssignmentOsPolicyResourceGroupInventoryFilter>
List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally. Structure is documented below.
Resources This property is required. []OsPolicyAssignmentOsPolicyResourceGroupResource
List of resources configured for this resource group. The resources are executed in the exact order specified here. Structure is documented below.
InventoryFilters []OsPolicyAssignmentOsPolicyResourceGroupInventoryFilter
List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally. Structure is documented below.
resources This property is required. List<OsPolicyAssignmentOsPolicyResourceGroupResource>
List of resources configured for this resource group. The resources are executed in the exact order specified here. Structure is documented below.
inventoryFilters List<OsPolicyAssignmentOsPolicyResourceGroupInventoryFilter>
List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally. Structure is documented below.
resources This property is required. OsPolicyAssignmentOsPolicyResourceGroupResource[]
List of resources configured for this resource group. The resources are executed in the exact order specified here. Structure is documented below.
inventoryFilters OsPolicyAssignmentOsPolicyResourceGroupInventoryFilter[]
List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally. Structure is documented below.
resources This property is required. Sequence[OsPolicyAssignmentOsPolicyResourceGroupResource]
List of resources configured for this resource group. The resources are executed in the exact order specified here. Structure is documented below.
inventory_filters Sequence[OsPolicyAssignmentOsPolicyResourceGroupInventoryFilter]
List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally. Structure is documented below.
resources This property is required. List<Property Map>
List of resources configured for this resource group. The resources are executed in the exact order specified here. Structure is documented below.
inventoryFilters List<Property Map>
List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally. Structure is documented below.

OsPolicyAssignmentOsPolicyResourceGroupInventoryFilter
, OsPolicyAssignmentOsPolicyResourceGroupInventoryFilterArgs

OsShortName This property is required. string
The OS short name
OsVersion string
The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
OsShortName This property is required. string
The OS short name
OsVersion string
The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
osShortName This property is required. String
The OS short name
osVersion String
The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
osShortName This property is required. string
The OS short name
osVersion string
The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
os_short_name This property is required. str
The OS short name
os_version str
The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
osShortName This property is required. String
The OS short name
osVersion String
The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.

OsPolicyAssignmentOsPolicyResourceGroupResource
, OsPolicyAssignmentOsPolicyResourceGroupResourceArgs

Id This property is required. string
The id of the resource with the following restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the OS policy.
Exec OsPolicyAssignmentOsPolicyResourceGroupResourceExec
Exec resource Structure is documented below.
File OsPolicyAssignmentOsPolicyResourceGroupResourceFile
File resource Structure is documented below.
Pkg OsPolicyAssignmentOsPolicyResourceGroupResourcePkg
Package resource Structure is documented below.
Repository OsPolicyAssignmentOsPolicyResourceGroupResourceRepository
Package repository resource Structure is documented below.
Id This property is required. string
The id of the resource with the following restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the OS policy.
Exec OsPolicyAssignmentOsPolicyResourceGroupResourceExec
Exec resource Structure is documented below.
File OsPolicyAssignmentOsPolicyResourceGroupResourceFile
File resource Structure is documented below.
Pkg OsPolicyAssignmentOsPolicyResourceGroupResourcePkg
Package resource Structure is documented below.
Repository OsPolicyAssignmentOsPolicyResourceGroupResourceRepository
Package repository resource Structure is documented below.
id This property is required. String
The id of the resource with the following restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the OS policy.
exec OsPolicyAssignmentOsPolicyResourceGroupResourceExec
Exec resource Structure is documented below.
file OsPolicyAssignmentOsPolicyResourceGroupResourceFile
File resource Structure is documented below.
pkg OsPolicyAssignmentOsPolicyResourceGroupResourcePkg
Package resource Structure is documented below.
repository OsPolicyAssignmentOsPolicyResourceGroupResourceRepository
Package repository resource Structure is documented below.
id This property is required. string
The id of the resource with the following restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the OS policy.
exec OsPolicyAssignmentOsPolicyResourceGroupResourceExec
Exec resource Structure is documented below.
file OsPolicyAssignmentOsPolicyResourceGroupResourceFile
File resource Structure is documented below.
pkg OsPolicyAssignmentOsPolicyResourceGroupResourcePkg
Package resource Structure is documented below.
repository OsPolicyAssignmentOsPolicyResourceGroupResourceRepository
Package repository resource Structure is documented below.
id This property is required. str
The id of the resource with the following restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the OS policy.
exec_ OsPolicyAssignmentOsPolicyResourceGroupResourceExec
Exec resource Structure is documented below.
file OsPolicyAssignmentOsPolicyResourceGroupResourceFile
File resource Structure is documented below.
pkg OsPolicyAssignmentOsPolicyResourceGroupResourcePkg
Package resource Structure is documented below.
repository OsPolicyAssignmentOsPolicyResourceGroupResourceRepository
Package repository resource Structure is documented below.
id This property is required. String
The id of the resource with the following restrictions:

  • Must contain only lowercase letters, numbers, and hyphens.
  • Must start with a letter.
  • Must be between 1-63 characters.
  • Must end with a number or a letter.
  • Must be unique within the OS policy.
exec Property Map
Exec resource Structure is documented below.
file Property Map
File resource Structure is documented below.
pkg Property Map
Package resource Structure is documented below.
repository Property Map
Package repository resource Structure is documented below.

OsPolicyAssignmentOsPolicyResourceGroupResourceExec
, OsPolicyAssignmentOsPolicyResourceGroupResourceExecArgs

Validate This property is required. OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidate
What to run to validate this resource is in the desired state. An exit code of 100 indicates "in desired state", and exit code of 101 indicates "not in desired state". Any other exit code indicates a failure running validate. Structure is documented below.
Enforce OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforce
What to run to bring this resource into the desired state. An exit code of 100 indicates "success", any other exit code indicates a failure running enforce. Structure is documented below.
Validate This property is required. OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidate
What to run to validate this resource is in the desired state. An exit code of 100 indicates "in desired state", and exit code of 101 indicates "not in desired state". Any other exit code indicates a failure running validate. Structure is documented below.
Enforce OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforce
What to run to bring this resource into the desired state. An exit code of 100 indicates "success", any other exit code indicates a failure running enforce. Structure is documented below.
validate This property is required. OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidate
What to run to validate this resource is in the desired state. An exit code of 100 indicates "in desired state", and exit code of 101 indicates "not in desired state". Any other exit code indicates a failure running validate. Structure is documented below.
enforce OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforce
What to run to bring this resource into the desired state. An exit code of 100 indicates "success", any other exit code indicates a failure running enforce. Structure is documented below.
validate This property is required. OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidate
What to run to validate this resource is in the desired state. An exit code of 100 indicates "in desired state", and exit code of 101 indicates "not in desired state". Any other exit code indicates a failure running validate. Structure is documented below.
enforce OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforce
What to run to bring this resource into the desired state. An exit code of 100 indicates "success", any other exit code indicates a failure running enforce. Structure is documented below.
validate This property is required. OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidate
What to run to validate this resource is in the desired state. An exit code of 100 indicates "in desired state", and exit code of 101 indicates "not in desired state". Any other exit code indicates a failure running validate. Structure is documented below.
enforce OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforce
What to run to bring this resource into the desired state. An exit code of 100 indicates "success", any other exit code indicates a failure running enforce. Structure is documented below.
validate This property is required. Property Map
What to run to validate this resource is in the desired state. An exit code of 100 indicates "in desired state", and exit code of 101 indicates "not in desired state". Any other exit code indicates a failure running validate. Structure is documented below.
enforce Property Map
What to run to bring this resource into the desired state. An exit code of 100 indicates "success", any other exit code indicates a failure running enforce. Structure is documented below.

OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforce
, OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceArgs

Interpreter This property is required. string
The script interpreter to use. Possible values are: INTERPRETER_UNSPECIFIED, NONE, SHELL, POWERSHELL.
Args List<string>
Optional arguments to pass to the source during execution.
File OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFile
A remote or local file. Structure is documented below.
OutputFilePath string
Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
Script string
An inline script. The size of the script is limited to 1024 characters.
Interpreter This property is required. string
The script interpreter to use. Possible values are: INTERPRETER_UNSPECIFIED, NONE, SHELL, POWERSHELL.
Args []string
Optional arguments to pass to the source during execution.
File OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFile
A remote or local file. Structure is documented below.
OutputFilePath string
Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
Script string
An inline script. The size of the script is limited to 1024 characters.
interpreter This property is required. String
The script interpreter to use. Possible values are: INTERPRETER_UNSPECIFIED, NONE, SHELL, POWERSHELL.
args List<String>
Optional arguments to pass to the source during execution.
file OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFile
A remote or local file. Structure is documented below.
outputFilePath String
Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
script String
An inline script. The size of the script is limited to 1024 characters.
interpreter This property is required. string
The script interpreter to use. Possible values are: INTERPRETER_UNSPECIFIED, NONE, SHELL, POWERSHELL.
args string[]
Optional arguments to pass to the source during execution.
file OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFile
A remote or local file. Structure is documented below.
outputFilePath string
Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
script string
An inline script. The size of the script is limited to 1024 characters.
interpreter This property is required. str
The script interpreter to use. Possible values are: INTERPRETER_UNSPECIFIED, NONE, SHELL, POWERSHELL.
args Sequence[str]
Optional arguments to pass to the source during execution.
file OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFile
A remote or local file. Structure is documented below.
output_file_path str
Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
script str
An inline script. The size of the script is limited to 1024 characters.
interpreter This property is required. String
The script interpreter to use. Possible values are: INTERPRETER_UNSPECIFIED, NONE, SHELL, POWERSHELL.
args List<String>
Optional arguments to pass to the source during execution.
file Property Map
A remote or local file. Structure is documented below.
outputFilePath String
Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
script String
An inline script. The size of the script is limited to 1024 characters.

OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFile
, OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileArgs

AllowInsecure bool
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
Gcs OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileGcs
A Cloud Storage object. Structure is documented below.
LocalPath string
A local path within the VM to use.
Remote OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileRemote
A generic remote file. Structure is documented below.
AllowInsecure bool
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
Gcs OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileGcs
A Cloud Storage object. Structure is documented below.
LocalPath string
A local path within the VM to use.
Remote OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileRemote
A generic remote file. Structure is documented below.
allowInsecure Boolean
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileGcs
A Cloud Storage object. Structure is documented below.
localPath String
A local path within the VM to use.
remote OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileRemote
A generic remote file. Structure is documented below.
allowInsecure boolean
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileGcs
A Cloud Storage object. Structure is documented below.
localPath string
A local path within the VM to use.
remote OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileRemote
A generic remote file. Structure is documented below.
allow_insecure bool
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileGcs
A Cloud Storage object. Structure is documented below.
local_path str
A local path within the VM to use.
remote OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileRemote
A generic remote file. Structure is documented below.
allowInsecure Boolean
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs Property Map
A Cloud Storage object. Structure is documented below.
localPath String
A local path within the VM to use.
remote Property Map
A generic remote file. Structure is documented below.

OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileGcs
, OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileGcsArgs

Bucket This property is required. string
Bucket of the Cloud Storage object.
Object This property is required. string
Name of the Cloud Storage object.
Generation int
Generation number of the Cloud Storage object.
Bucket This property is required. string
Bucket of the Cloud Storage object.
Object This property is required. string
Name of the Cloud Storage object.
Generation int
Generation number of the Cloud Storage object.
bucket This property is required. String
Bucket of the Cloud Storage object.
object This property is required. String
Name of the Cloud Storage object.
generation Integer
Generation number of the Cloud Storage object.
bucket This property is required. string
Bucket of the Cloud Storage object.
object This property is required. string
Name of the Cloud Storage object.
generation number
Generation number of the Cloud Storage object.
bucket This property is required. str
Bucket of the Cloud Storage object.
object This property is required. str
Name of the Cloud Storage object.
generation int
Generation number of the Cloud Storage object.
bucket This property is required. String
Bucket of the Cloud Storage object.
object This property is required. String
Name of the Cloud Storage object.
generation Number
Generation number of the Cloud Storage object.

OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileRemote
, OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileRemoteArgs

Uri This property is required. string
URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
Sha256Checksum string
SHA256 checksum of the remote file.
Uri This property is required. string
URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
Sha256Checksum string
SHA256 checksum of the remote file.
uri This property is required. String
URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256Checksum String
SHA256 checksum of the remote file.
uri This property is required. string
URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256Checksum string
SHA256 checksum of the remote file.
uri This property is required. str
URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256_checksum str
SHA256 checksum of the remote file.
uri This property is required. String
URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256Checksum String
SHA256 checksum of the remote file.

OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidate
, OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateArgs

Interpreter This property is required. string
The script interpreter to use. Possible values are: INTERPRETER_UNSPECIFIED, NONE, SHELL, POWERSHELL.
Args List<string>
Optional arguments to pass to the source during execution.
File OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFile
A remote or local file. Structure is documented below.
OutputFilePath string
Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
Script string
An inline script. The size of the script is limited to 1024 characters.
Interpreter This property is required. string
The script interpreter to use. Possible values are: INTERPRETER_UNSPECIFIED, NONE, SHELL, POWERSHELL.
Args []string
Optional arguments to pass to the source during execution.
File OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFile
A remote or local file. Structure is documented below.
OutputFilePath string
Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
Script string
An inline script. The size of the script is limited to 1024 characters.
interpreter This property is required. String
The script interpreter to use. Possible values are: INTERPRETER_UNSPECIFIED, NONE, SHELL, POWERSHELL.
args List<String>
Optional arguments to pass to the source during execution.
file OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFile
A remote or local file. Structure is documented below.
outputFilePath String
Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
script String
An inline script. The size of the script is limited to 1024 characters.
interpreter This property is required. string
The script interpreter to use. Possible values are: INTERPRETER_UNSPECIFIED, NONE, SHELL, POWERSHELL.
args string[]
Optional arguments to pass to the source during execution.
file OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFile
A remote or local file. Structure is documented below.
outputFilePath string
Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
script string
An inline script. The size of the script is limited to 1024 characters.
interpreter This property is required. str
The script interpreter to use. Possible values are: INTERPRETER_UNSPECIFIED, NONE, SHELL, POWERSHELL.
args Sequence[str]
Optional arguments to pass to the source during execution.
file OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFile
A remote or local file. Structure is documented below.
output_file_path str
Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
script str
An inline script. The size of the script is limited to 1024 characters.
interpreter This property is required. String
The script interpreter to use. Possible values are: INTERPRETER_UNSPECIFIED, NONE, SHELL, POWERSHELL.
args List<String>
Optional arguments to pass to the source during execution.
file Property Map
A remote or local file. Structure is documented below.
outputFilePath String
Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
script String
An inline script. The size of the script is limited to 1024 characters.

OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFile
, OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileArgs

AllowInsecure bool
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
Gcs OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileGcs
A Cloud Storage object. Structure is documented below.
LocalPath string
A local path within the VM to use.
Remote OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileRemote
A generic remote file. Structure is documented below.
AllowInsecure bool
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
Gcs OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileGcs
A Cloud Storage object. Structure is documented below.
LocalPath string
A local path within the VM to use.
Remote OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileRemote
A generic remote file. Structure is documented below.
allowInsecure Boolean
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileGcs
A Cloud Storage object. Structure is documented below.
localPath String
A local path within the VM to use.
remote OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileRemote
A generic remote file. Structure is documented below.
allowInsecure boolean
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileGcs
A Cloud Storage object. Structure is documented below.
localPath string
A local path within the VM to use.
remote OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileRemote
A generic remote file. Structure is documented below.
allow_insecure bool
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileGcs
A Cloud Storage object. Structure is documented below.
local_path str
A local path within the VM to use.
remote OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileRemote
A generic remote file. Structure is documented below.
allowInsecure Boolean
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs Property Map
A Cloud Storage object. Structure is documented below.
localPath String
A local path within the VM to use.
remote Property Map
A generic remote file. Structure is documented below.

OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileGcs
, OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileGcsArgs

Bucket This property is required. string
Bucket of the Cloud Storage object.
Object This property is required. string
Name of the Cloud Storage object.
Generation int
Generation number of the Cloud Storage object.
Bucket This property is required. string
Bucket of the Cloud Storage object.
Object This property is required. string
Name of the Cloud Storage object.
Generation int
Generation number of the Cloud Storage object.
bucket This property is required. String
Bucket of the Cloud Storage object.
object This property is required. String
Name of the Cloud Storage object.
generation Integer
Generation number of the Cloud Storage object.
bucket This property is required. string
Bucket of the Cloud Storage object.
object This property is required. string
Name of the Cloud Storage object.
generation number
Generation number of the Cloud Storage object.
bucket This property is required. str
Bucket of the Cloud Storage object.
object This property is required. str
Name of the Cloud Storage object.
generation int
Generation number of the Cloud Storage object.
bucket This property is required. String
Bucket of the Cloud Storage object.
object This property is required. String
Name of the Cloud Storage object.
generation Number
Generation number of the Cloud Storage object.

OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileRemote
, OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileRemoteArgs

Uri This property is required. string
URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
Sha256Checksum string
SHA256 checksum of the remote file.
Uri This property is required. string
URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
Sha256Checksum string
SHA256 checksum of the remote file.
uri This property is required. String
URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256Checksum String
SHA256 checksum of the remote file.
uri This property is required. string
URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256Checksum string
SHA256 checksum of the remote file.
uri This property is required. str
URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256_checksum str
SHA256 checksum of the remote file.
uri This property is required. String
URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256Checksum String
SHA256 checksum of the remote file.

OsPolicyAssignmentOsPolicyResourceGroupResourceFile
, OsPolicyAssignmentOsPolicyResourceGroupResourceFileArgs

Path This property is required. string
The absolute path of the file within the VM.
State This property is required. string
Desired state of the file. Possible values are: DESIRED_STATE_UNSPECIFIED, PRESENT, ABSENT, CONTENTS_MATCH.
Content string
A a file with this content. The size of the content is limited to 1024 characters.
File OsPolicyAssignmentOsPolicyResourceGroupResourceFileFile
A remote or local source. Structure is documented below.
Permissions string
Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
Path This property is required. string
The absolute path of the file within the VM.
State This property is required. string
Desired state of the file. Possible values are: DESIRED_STATE_UNSPECIFIED, PRESENT, ABSENT, CONTENTS_MATCH.
Content string
A a file with this content. The size of the content is limited to 1024 characters.
File OsPolicyAssignmentOsPolicyResourceGroupResourceFileFile
A remote or local source. Structure is documented below.
Permissions string
Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
path This property is required. String
The absolute path of the file within the VM.
state This property is required. String
Desired state of the file. Possible values are: DESIRED_STATE_UNSPECIFIED, PRESENT, ABSENT, CONTENTS_MATCH.
content String
A a file with this content. The size of the content is limited to 1024 characters.
file OsPolicyAssignmentOsPolicyResourceGroupResourceFileFile
A remote or local source. Structure is documented below.
permissions String
Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
path This property is required. string
The absolute path of the file within the VM.
state This property is required. string
Desired state of the file. Possible values are: DESIRED_STATE_UNSPECIFIED, PRESENT, ABSENT, CONTENTS_MATCH.
content string
A a file with this content. The size of the content is limited to 1024 characters.
file OsPolicyAssignmentOsPolicyResourceGroupResourceFileFile
A remote or local source. Structure is documented below.
permissions string
Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
path This property is required. str
The absolute path of the file within the VM.
state This property is required. str
Desired state of the file. Possible values are: DESIRED_STATE_UNSPECIFIED, PRESENT, ABSENT, CONTENTS_MATCH.
content str
A a file with this content. The size of the content is limited to 1024 characters.
file OsPolicyAssignmentOsPolicyResourceGroupResourceFileFile
A remote or local source. Structure is documented below.
permissions str
Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
path This property is required. String
The absolute path of the file within the VM.
state This property is required. String
Desired state of the file. Possible values are: DESIRED_STATE_UNSPECIFIED, PRESENT, ABSENT, CONTENTS_MATCH.
content String
A a file with this content. The size of the content is limited to 1024 characters.
file Property Map
A remote or local source. Structure is documented below.
permissions String
Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4

OsPolicyAssignmentOsPolicyResourceGroupResourceFileFile
, OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileArgs

AllowInsecure bool
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
Gcs OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileGcs
A Cloud Storage object. Structure is documented below.
LocalPath string
A local path within the VM to use.
Remote OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileRemote
A generic remote file. Structure is documented below.
AllowInsecure bool
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
Gcs OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileGcs
A Cloud Storage object. Structure is documented below.
LocalPath string
A local path within the VM to use.
Remote OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileRemote
A generic remote file. Structure is documented below.
allowInsecure Boolean
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileGcs
A Cloud Storage object. Structure is documented below.
localPath String
A local path within the VM to use.
remote OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileRemote
A generic remote file. Structure is documented below.
allowInsecure boolean
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileGcs
A Cloud Storage object. Structure is documented below.
localPath string
A local path within the VM to use.
remote OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileRemote
A generic remote file. Structure is documented below.
allow_insecure bool
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileGcs
A Cloud Storage object. Structure is documented below.
local_path str
A local path within the VM to use.
remote OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileRemote
A generic remote file. Structure is documented below.
allowInsecure Boolean
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs Property Map
A Cloud Storage object. Structure is documented below.
localPath String
A local path within the VM to use.
remote Property Map
A generic remote file. Structure is documented below.

OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileGcs
, OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileGcsArgs

Bucket This property is required. string
Bucket of the Cloud Storage object.
Object This property is required. string
Name of the Cloud Storage object.
Generation int
Generation number of the Cloud Storage object.
Bucket This property is required. string
Bucket of the Cloud Storage object.
Object This property is required. string
Name of the Cloud Storage object.
Generation int
Generation number of the Cloud Storage object.
bucket This property is required. String
Bucket of the Cloud Storage object.
object This property is required. String
Name of the Cloud Storage object.
generation Integer
Generation number of the Cloud Storage object.
bucket This property is required. string
Bucket of the Cloud Storage object.
object This property is required. string
Name of the Cloud Storage object.
generation number
Generation number of the Cloud Storage object.
bucket This property is required. str
Bucket of the Cloud Storage object.
object This property is required. str
Name of the Cloud Storage object.
generation int
Generation number of the Cloud Storage object.
bucket This property is required. String
Bucket of the Cloud Storage object.
object This property is required. String
Name of the Cloud Storage object.
generation Number
Generation number of the Cloud Storage object.

OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileRemote
, OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileRemoteArgs

Uri This property is required. string
URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
Sha256Checksum string
SHA256 checksum of the remote file.
Uri This property is required. string
URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
Sha256Checksum string
SHA256 checksum of the remote file.
uri This property is required. String
URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256Checksum String
SHA256 checksum of the remote file.
uri This property is required. string
URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256Checksum string
SHA256 checksum of the remote file.
uri This property is required. str
URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256_checksum str
SHA256 checksum of the remote file.
uri This property is required. String
URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256Checksum String
SHA256 checksum of the remote file.

OsPolicyAssignmentOsPolicyResourceGroupResourcePkg
, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgArgs

DesiredState This property is required. string
The desired state the agent should maintain for this package. Possible values are: DESIRED_STATE_UNSPECIFIED, INSTALLED, REMOVED.
Apt OsPolicyAssignmentOsPolicyResourceGroupResourcePkgApt
A package managed by Apt. Structure is documented below.
Deb OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDeb
A deb package file. Structure is documented below.
Googet OsPolicyAssignmentOsPolicyResourceGroupResourcePkgGooget
A package managed by GooGet. Structure is documented below.
Msi OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsi
An MSI package. Structure is documented below.
Rpm OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpm
An rpm package file. Structure is documented below.
Yum OsPolicyAssignmentOsPolicyResourceGroupResourcePkgYum
A package managed by YUM. Structure is documented below.
Zypper OsPolicyAssignmentOsPolicyResourceGroupResourcePkgZypper
A package managed by Zypper. Structure is documented below.
DesiredState This property is required. string
The desired state the agent should maintain for this package. Possible values are: DESIRED_STATE_UNSPECIFIED, INSTALLED, REMOVED.
Apt OsPolicyAssignmentOsPolicyResourceGroupResourcePkgApt
A package managed by Apt. Structure is documented below.
Deb OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDeb
A deb package file. Structure is documented below.
Googet OsPolicyAssignmentOsPolicyResourceGroupResourcePkgGooget
A package managed by GooGet. Structure is documented below.
Msi OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsi
An MSI package. Structure is documented below.
Rpm OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpm
An rpm package file. Structure is documented below.
Yum OsPolicyAssignmentOsPolicyResourceGroupResourcePkgYum
A package managed by YUM. Structure is documented below.
Zypper OsPolicyAssignmentOsPolicyResourceGroupResourcePkgZypper
A package managed by Zypper. Structure is documented below.
desiredState This property is required. String
The desired state the agent should maintain for this package. Possible values are: DESIRED_STATE_UNSPECIFIED, INSTALLED, REMOVED.
apt OsPolicyAssignmentOsPolicyResourceGroupResourcePkgApt
A package managed by Apt. Structure is documented below.
deb OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDeb
A deb package file. Structure is documented below.
googet OsPolicyAssignmentOsPolicyResourceGroupResourcePkgGooget
A package managed by GooGet. Structure is documented below.
msi OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsi
An MSI package. Structure is documented below.
rpm OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpm
An rpm package file. Structure is documented below.
yum OsPolicyAssignmentOsPolicyResourceGroupResourcePkgYum
A package managed by YUM. Structure is documented below.
zypper OsPolicyAssignmentOsPolicyResourceGroupResourcePkgZypper
A package managed by Zypper. Structure is documented below.
desiredState This property is required. string
The desired state the agent should maintain for this package. Possible values are: DESIRED_STATE_UNSPECIFIED, INSTALLED, REMOVED.
apt OsPolicyAssignmentOsPolicyResourceGroupResourcePkgApt
A package managed by Apt. Structure is documented below.
deb OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDeb
A deb package file. Structure is documented below.
googet OsPolicyAssignmentOsPolicyResourceGroupResourcePkgGooget
A package managed by GooGet. Structure is documented below.
msi OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsi
An MSI package. Structure is documented below.
rpm OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpm
An rpm package file. Structure is documented below.
yum OsPolicyAssignmentOsPolicyResourceGroupResourcePkgYum
A package managed by YUM. Structure is documented below.
zypper OsPolicyAssignmentOsPolicyResourceGroupResourcePkgZypper
A package managed by Zypper. Structure is documented below.
desired_state This property is required. str
The desired state the agent should maintain for this package. Possible values are: DESIRED_STATE_UNSPECIFIED, INSTALLED, REMOVED.
apt OsPolicyAssignmentOsPolicyResourceGroupResourcePkgApt
A package managed by Apt. Structure is documented below.
deb OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDeb
A deb package file. Structure is documented below.
googet OsPolicyAssignmentOsPolicyResourceGroupResourcePkgGooget
A package managed by GooGet. Structure is documented below.
msi OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsi
An MSI package. Structure is documented below.
rpm OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpm
An rpm package file. Structure is documented below.
yum OsPolicyAssignmentOsPolicyResourceGroupResourcePkgYum
A package managed by YUM. Structure is documented below.
zypper OsPolicyAssignmentOsPolicyResourceGroupResourcePkgZypper
A package managed by Zypper. Structure is documented below.
desiredState This property is required. String
The desired state the agent should maintain for this package. Possible values are: DESIRED_STATE_UNSPECIFIED, INSTALLED, REMOVED.
apt Property Map
A package managed by Apt. Structure is documented below.
deb Property Map
A deb package file. Structure is documented below.
googet Property Map
A package managed by GooGet. Structure is documented below.
msi Property Map
An MSI package. Structure is documented below.
rpm Property Map
An rpm package file. Structure is documented below.
yum Property Map
A package managed by YUM. Structure is documented below.
zypper Property Map
A package managed by Zypper. Structure is documented below.

OsPolicyAssignmentOsPolicyResourceGroupResourcePkgApt
, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgAptArgs

Name This property is required. string
Package name.
Name This property is required. string
Package name.
name This property is required. String
Package name.
name This property is required. string
Package name.
name This property is required. str
Package name.
name This property is required. String
Package name.

OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDeb
, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebArgs

Source This property is required. OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSource
A deb package. Structure is documented below.
PullDeps bool
Whether dependencies should also be installed. - install when false: dpkg -i package - install when true: apt-get update && apt-get -y install package.deb
Source This property is required. OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSource
A deb package. Structure is documented below.
PullDeps bool
Whether dependencies should also be installed. - install when false: dpkg -i package - install when true: apt-get update && apt-get -y install package.deb
source This property is required. OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSource
A deb package. Structure is documented below.
pullDeps Boolean
Whether dependencies should also be installed. - install when false: dpkg -i package - install when true: apt-get update && apt-get -y install package.deb
source This property is required. OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSource
A deb package. Structure is documented below.
pullDeps boolean
Whether dependencies should also be installed. - install when false: dpkg -i package - install when true: apt-get update && apt-get -y install package.deb
source This property is required. OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSource
A deb package. Structure is documented below.
pull_deps bool
Whether dependencies should also be installed. - install when false: dpkg -i package - install when true: apt-get update && apt-get -y install package.deb
source This property is required. Property Map
A deb package. Structure is documented below.
pullDeps Boolean
Whether dependencies should also be installed. - install when false: dpkg -i package - install when true: apt-get update && apt-get -y install package.deb

OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSource
, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceArgs

AllowInsecure bool
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
Gcs OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceGcs
A Cloud Storage object. Structure is documented below.
LocalPath string
A local path within the VM to use.
Remote OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceRemote
A generic remote file. Structure is documented below.
AllowInsecure bool
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
Gcs OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceGcs
A Cloud Storage object. Structure is documented below.
LocalPath string
A local path within the VM to use.
Remote OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceRemote
A generic remote file. Structure is documented below.
allowInsecure Boolean
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceGcs
A Cloud Storage object. Structure is documented below.
localPath String
A local path within the VM to use.
remote OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceRemote
A generic remote file. Structure is documented below.
allowInsecure boolean
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceGcs
A Cloud Storage object. Structure is documented below.
localPath string
A local path within the VM to use.
remote OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceRemote
A generic remote file. Structure is documented below.
allow_insecure bool
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceGcs
A Cloud Storage object. Structure is documented below.
local_path str
A local path within the VM to use.
remote OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceRemote
A generic remote file. Structure is documented below.
allowInsecure Boolean
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs Property Map
A Cloud Storage object. Structure is documented below.
localPath String
A local path within the VM to use.
remote Property Map
A generic remote file. Structure is documented below.

OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceGcs
, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceGcsArgs

Bucket This property is required. string
Bucket of the Cloud Storage object.
Object This property is required. string
Name of the Cloud Storage object.
Generation int
Generation number of the Cloud Storage object.
Bucket This property is required. string
Bucket of the Cloud Storage object.
Object This property is required. string
Name of the Cloud Storage object.
Generation int
Generation number of the Cloud Storage object.
bucket This property is required. String
Bucket of the Cloud Storage object.
object This property is required. String
Name of the Cloud Storage object.
generation Integer
Generation number of the Cloud Storage object.
bucket This property is required. string
Bucket of the Cloud Storage object.
object This property is required. string
Name of the Cloud Storage object.
generation number
Generation number of the Cloud Storage object.
bucket This property is required. str
Bucket of the Cloud Storage object.
object This property is required. str
Name of the Cloud Storage object.
generation int
Generation number of the Cloud Storage object.
bucket This property is required. String
Bucket of the Cloud Storage object.
object This property is required. String
Name of the Cloud Storage object.
generation Number
Generation number of the Cloud Storage object.

OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceRemote
, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceRemoteArgs

Uri This property is required. string
URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
Sha256Checksum string
SHA256 checksum of the remote file.
Uri This property is required. string
URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
Sha256Checksum string
SHA256 checksum of the remote file.
uri This property is required. String
URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256Checksum String
SHA256 checksum of the remote file.
uri This property is required. string
URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256Checksum string
SHA256 checksum of the remote file.
uri This property is required. str
URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256_checksum str
SHA256 checksum of the remote file.
uri This property is required. String
URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256Checksum String
SHA256 checksum of the remote file.

OsPolicyAssignmentOsPolicyResourceGroupResourcePkgGooget
, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgGoogetArgs

Name This property is required. string
Package name.
Name This property is required. string
Package name.
name This property is required. String
Package name.
name This property is required. string
Package name.
name This property is required. str
Package name.
name This property is required. String
Package name.

OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsi
, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiArgs

Source This property is required. OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSource
The MSI package. Structure is documented below.
Properties List<string>
Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.
Source This property is required. OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSource
The MSI package. Structure is documented below.
Properties []string
Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.
source This property is required. OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSource
The MSI package. Structure is documented below.
properties List<String>
Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.
source This property is required. OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSource
The MSI package. Structure is documented below.
properties string[]
Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.
source This property is required. OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSource
The MSI package. Structure is documented below.
properties Sequence[str]
Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.
source This property is required. Property Map
The MSI package. Structure is documented below.
properties List<String>
Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.

OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSource
, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceArgs

AllowInsecure bool
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
Gcs OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceGcs
A Cloud Storage object. Structure is documented below.
LocalPath string
A local path within the VM to use.
Remote OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceRemote
A generic remote file. Structure is documented below.
AllowInsecure bool
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
Gcs OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceGcs
A Cloud Storage object. Structure is documented below.
LocalPath string
A local path within the VM to use.
Remote OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceRemote
A generic remote file. Structure is documented below.
allowInsecure Boolean
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceGcs
A Cloud Storage object. Structure is documented below.
localPath String
A local path within the VM to use.
remote OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceRemote
A generic remote file. Structure is documented below.
allowInsecure boolean
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceGcs
A Cloud Storage object. Structure is documented below.
localPath string
A local path within the VM to use.
remote OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceRemote
A generic remote file. Structure is documented below.
allow_insecure bool
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceGcs
A Cloud Storage object. Structure is documented below.
local_path str
A local path within the VM to use.
remote OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceRemote
A generic remote file. Structure is documented below.
allowInsecure Boolean
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs Property Map
A Cloud Storage object. Structure is documented below.
localPath String
A local path within the VM to use.
remote Property Map
A generic remote file. Structure is documented below.

OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceGcs
, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceGcsArgs

Bucket This property is required. string
Bucket of the Cloud Storage object.
Object This property is required. string
Name of the Cloud Storage object.
Generation int
Generation number of the Cloud Storage object.
Bucket This property is required. string
Bucket of the Cloud Storage object.
Object This property is required. string
Name of the Cloud Storage object.
Generation int
Generation number of the Cloud Storage object.
bucket This property is required. String
Bucket of the Cloud Storage object.
object This property is required. String
Name of the Cloud Storage object.
generation Integer
Generation number of the Cloud Storage object.
bucket This property is required. string
Bucket of the Cloud Storage object.
object This property is required. string
Name of the Cloud Storage object.
generation number
Generation number of the Cloud Storage object.
bucket This property is required. str
Bucket of the Cloud Storage object.
object This property is required. str
Name of the Cloud Storage object.
generation int
Generation number of the Cloud Storage object.
bucket This property is required. String
Bucket of the Cloud Storage object.
object This property is required. String
Name of the Cloud Storage object.
generation Number
Generation number of the Cloud Storage object.

OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceRemote
, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceRemoteArgs

Uri This property is required. string
URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
Sha256Checksum string
SHA256 checksum of the remote file.
Uri This property is required. string
URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
Sha256Checksum string
SHA256 checksum of the remote file.
uri This property is required. String
URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256Checksum String
SHA256 checksum of the remote file.
uri This property is required. string
URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256Checksum string
SHA256 checksum of the remote file.
uri This property is required. str
URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256_checksum str
SHA256 checksum of the remote file.
uri This property is required. String
URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256Checksum String
SHA256 checksum of the remote file.

OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpm
, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmArgs

Source This property is required. OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSource
An rpm package. Structure is documented below.
PullDeps bool
Whether dependencies should also be installed. - install when false: rpm --upgrade --replacepkgs package.rpm - install when true: yum -y install package.rpm or zypper -y install package.rpm
Source This property is required. OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSource
An rpm package. Structure is documented below.
PullDeps bool
Whether dependencies should also be installed. - install when false: rpm --upgrade --replacepkgs package.rpm - install when true: yum -y install package.rpm or zypper -y install package.rpm
source This property is required. OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSource
An rpm package. Structure is documented below.
pullDeps Boolean
Whether dependencies should also be installed. - install when false: rpm --upgrade --replacepkgs package.rpm - install when true: yum -y install package.rpm or zypper -y install package.rpm
source This property is required. OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSource
An rpm package. Structure is documented below.
pullDeps boolean
Whether dependencies should also be installed. - install when false: rpm --upgrade --replacepkgs package.rpm - install when true: yum -y install package.rpm or zypper -y install package.rpm
source This property is required. OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSource
An rpm package. Structure is documented below.
pull_deps bool
Whether dependencies should also be installed. - install when false: rpm --upgrade --replacepkgs package.rpm - install when true: yum -y install package.rpm or zypper -y install package.rpm
source This property is required. Property Map
An rpm package. Structure is documented below.
pullDeps Boolean
Whether dependencies should also be installed. - install when false: rpm --upgrade --replacepkgs package.rpm - install when true: yum -y install package.rpm or zypper -y install package.rpm

OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSource
, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceArgs

AllowInsecure bool
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
Gcs OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceGcs
A Cloud Storage object. Structure is documented below.
LocalPath string
A local path within the VM to use.
Remote OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceRemote
A generic remote file. Structure is documented below.
AllowInsecure bool
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
Gcs OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceGcs
A Cloud Storage object. Structure is documented below.
LocalPath string
A local path within the VM to use.
Remote OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceRemote
A generic remote file. Structure is documented below.
allowInsecure Boolean
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceGcs
A Cloud Storage object. Structure is documented below.
localPath String
A local path within the VM to use.
remote OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceRemote
A generic remote file. Structure is documented below.
allowInsecure boolean
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceGcs
A Cloud Storage object. Structure is documented below.
localPath string
A local path within the VM to use.
remote OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceRemote
A generic remote file. Structure is documented below.
allow_insecure bool
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceGcs
A Cloud Storage object. Structure is documented below.
local_path str
A local path within the VM to use.
remote OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceRemote
A generic remote file. Structure is documented below.
allowInsecure Boolean
Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
gcs Property Map
A Cloud Storage object. Structure is documented below.
localPath String
A local path within the VM to use.
remote Property Map
A generic remote file. Structure is documented below.

OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceGcs
, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceGcsArgs

Bucket This property is required. string
Bucket of the Cloud Storage object.
Object This property is required. string
Name of the Cloud Storage object.
Generation int
Generation number of the Cloud Storage object.
Bucket This property is required. string
Bucket of the Cloud Storage object.
Object This property is required. string
Name of the Cloud Storage object.
Generation int
Generation number of the Cloud Storage object.
bucket This property is required. String
Bucket of the Cloud Storage object.
object This property is required. String
Name of the Cloud Storage object.
generation Integer
Generation number of the Cloud Storage object.
bucket This property is required. string
Bucket of the Cloud Storage object.
object This property is required. string
Name of the Cloud Storage object.
generation number
Generation number of the Cloud Storage object.
bucket This property is required. str
Bucket of the Cloud Storage object.
object This property is required. str
Name of the Cloud Storage object.
generation int
Generation number of the Cloud Storage object.
bucket This property is required. String
Bucket of the Cloud Storage object.
object This property is required. String
Name of the Cloud Storage object.
generation Number
Generation number of the Cloud Storage object.

OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceRemote
, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceRemoteArgs

Uri This property is required. string
URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
Sha256Checksum string
SHA256 checksum of the remote file.
Uri This property is required. string
URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
Sha256Checksum string
SHA256 checksum of the remote file.
uri This property is required. String
URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256Checksum String
SHA256 checksum of the remote file.
uri This property is required. string
URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256Checksum string
SHA256 checksum of the remote file.
uri This property is required. str
URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256_checksum str
SHA256 checksum of the remote file.
uri This property is required. String
URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
sha256Checksum String
SHA256 checksum of the remote file.

OsPolicyAssignmentOsPolicyResourceGroupResourcePkgYum
, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgYumArgs

Name This property is required. string
Package name.
Name This property is required. string
Package name.
name This property is required. String
Package name.
name This property is required. string
Package name.
name This property is required. str
Package name.
name This property is required. String
Package name.

OsPolicyAssignmentOsPolicyResourceGroupResourcePkgZypper
, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgZypperArgs

Name This property is required. string
Package name.
Name This property is required. string
Package name.
name This property is required. String
Package name.
name This property is required. string
Package name.
name This property is required. str
Package name.
name This property is required. String
Package name.

OsPolicyAssignmentOsPolicyResourceGroupResourceRepository
, OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryArgs

Apt OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryApt
An Apt Repository. Structure is documented below.
Goo OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryGoo
A Goo Repository. Structure is documented below.
Yum OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryYum
A Yum Repository. Structure is documented below.
Zypper OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryZypper
A Zypper Repository. Structure is documented below.
Apt OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryApt
An Apt Repository. Structure is documented below.
Goo OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryGoo
A Goo Repository. Structure is documented below.
Yum OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryYum
A Yum Repository. Structure is documented below.
Zypper OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryZypper
A Zypper Repository. Structure is documented below.
apt OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryApt
An Apt Repository. Structure is documented below.
goo OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryGoo
A Goo Repository. Structure is documented below.
yum OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryYum
A Yum Repository. Structure is documented below.
zypper OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryZypper
A Zypper Repository. Structure is documented below.
apt OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryApt
An Apt Repository. Structure is documented below.
goo OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryGoo
A Goo Repository. Structure is documented below.
yum OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryYum
A Yum Repository. Structure is documented below.
zypper OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryZypper
A Zypper Repository. Structure is documented below.
apt OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryApt
An Apt Repository. Structure is documented below.
goo OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryGoo
A Goo Repository. Structure is documented below.
yum OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryYum
A Yum Repository. Structure is documented below.
zypper OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryZypper
A Zypper Repository. Structure is documented below.
apt Property Map
An Apt Repository. Structure is documented below.
goo Property Map
A Goo Repository. Structure is documented below.
yum Property Map
A Yum Repository. Structure is documented below.
zypper Property Map
A Zypper Repository. Structure is documented below.

OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryApt
, OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryAptArgs

ArchiveType This property is required. string
Type of archive files in this repository. Possible values are: ARCHIVE_TYPE_UNSPECIFIED, DEB, DEB_SRC.
Components This property is required. List<string>
List of components for this repository. Must contain at least one item.
Distribution This property is required. string
Distribution of this repository.
Uri This property is required. string
URI for this repository.
GpgKey string
URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
ArchiveType This property is required. string
Type of archive files in this repository. Possible values are: ARCHIVE_TYPE_UNSPECIFIED, DEB, DEB_SRC.
Components This property is required. []string
List of components for this repository. Must contain at least one item.
Distribution This property is required. string
Distribution of this repository.
Uri This property is required. string
URI for this repository.
GpgKey string
URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
archiveType This property is required. String
Type of archive files in this repository. Possible values are: ARCHIVE_TYPE_UNSPECIFIED, DEB, DEB_SRC.
components This property is required. List<String>
List of components for this repository. Must contain at least one item.
distribution This property is required. String
Distribution of this repository.
uri This property is required. String
URI for this repository.
gpgKey String
URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
archiveType This property is required. string
Type of archive files in this repository. Possible values are: ARCHIVE_TYPE_UNSPECIFIED, DEB, DEB_SRC.
components This property is required. string[]
List of components for this repository. Must contain at least one item.
distribution This property is required. string
Distribution of this repository.
uri This property is required. string
URI for this repository.
gpgKey string
URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
archive_type This property is required. str
Type of archive files in this repository. Possible values are: ARCHIVE_TYPE_UNSPECIFIED, DEB, DEB_SRC.
components This property is required. Sequence[str]
List of components for this repository. Must contain at least one item.
distribution This property is required. str
Distribution of this repository.
uri This property is required. str
URI for this repository.
gpg_key str
URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
archiveType This property is required. String
Type of archive files in this repository. Possible values are: ARCHIVE_TYPE_UNSPECIFIED, DEB, DEB_SRC.
components This property is required. List<String>
List of components for this repository. Must contain at least one item.
distribution This property is required. String
Distribution of this repository.
uri This property is required. String
URI for this repository.
gpgKey String
URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.

OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryGoo
, OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryGooArgs

Name This property is required. string
The name of the repository.
Url This property is required. string
The url of the repository.
Name This property is required. string
The name of the repository.
Url This property is required. string
The url of the repository.
name This property is required. String
The name of the repository.
url This property is required. String
The url of the repository.
name This property is required. string
The name of the repository.
url This property is required. string
The url of the repository.
name This property is required. str
The name of the repository.
url This property is required. str
The url of the repository.
name This property is required. String
The name of the repository.
url This property is required. String
The url of the repository.

OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryYum
, OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryYumArgs

BaseUrl This property is required. string
The location of the repository directory.
Id This property is required. string
A one word, unique name for this repository. This is the repo id in the yum config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for resource conflicts.
DisplayName string
The display name of the repository.
GpgKeys List<string>
URIs of GPG keys.
BaseUrl This property is required. string
The location of the repository directory.
Id This property is required. string
A one word, unique name for this repository. This is the repo id in the yum config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for resource conflicts.
DisplayName string
The display name of the repository.
GpgKeys []string
URIs of GPG keys.
baseUrl This property is required. String
The location of the repository directory.
id This property is required. String
A one word, unique name for this repository. This is the repo id in the yum config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for resource conflicts.
displayName String
The display name of the repository.
gpgKeys List<String>
URIs of GPG keys.
baseUrl This property is required. string
The location of the repository directory.
id This property is required. string
A one word, unique name for this repository. This is the repo id in the yum config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for resource conflicts.
displayName string
The display name of the repository.
gpgKeys string[]
URIs of GPG keys.
base_url This property is required. str
The location of the repository directory.
id This property is required. str
A one word, unique name for this repository. This is the repo id in the yum config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for resource conflicts.
display_name str
The display name of the repository.
gpg_keys Sequence[str]
URIs of GPG keys.
baseUrl This property is required. String
The location of the repository directory.
id This property is required. String
A one word, unique name for this repository. This is the repo id in the yum config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for resource conflicts.
displayName String
The display name of the repository.
gpgKeys List<String>
URIs of GPG keys.

OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryZypper
, OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryZypperArgs

BaseUrl This property is required. string
The location of the repository directory.
Id This property is required. string
A one word, unique name for this repository. This is the repo id in the zypper config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
DisplayName string
The display name of the repository.
GpgKeys List<string>
URIs of GPG keys.
BaseUrl This property is required. string
The location of the repository directory.
Id This property is required. string
A one word, unique name for this repository. This is the repo id in the zypper config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
DisplayName string
The display name of the repository.
GpgKeys []string
URIs of GPG keys.
baseUrl This property is required. String
The location of the repository directory.
id This property is required. String
A one word, unique name for this repository. This is the repo id in the zypper config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
displayName String
The display name of the repository.
gpgKeys List<String>
URIs of GPG keys.
baseUrl This property is required. string
The location of the repository directory.
id This property is required. string
A one word, unique name for this repository. This is the repo id in the zypper config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
displayName string
The display name of the repository.
gpgKeys string[]
URIs of GPG keys.
base_url This property is required. str
The location of the repository directory.
id This property is required. str
A one word, unique name for this repository. This is the repo id in the zypper config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
display_name str
The display name of the repository.
gpg_keys Sequence[str]
URIs of GPG keys.
baseUrl This property is required. String
The location of the repository directory.
id This property is required. String
A one word, unique name for this repository. This is the repo id in the zypper config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
displayName String
The display name of the repository.
gpgKeys List<String>
URIs of GPG keys.

OsPolicyAssignmentRollout
, OsPolicyAssignmentRolloutArgs

DisruptionBudget This property is required. OsPolicyAssignmentRolloutDisruptionBudget
The maximum number (or percentage) of VMs per zone to disrupt at any given moment. Structure is documented below.
MinWaitDuration This property is required. string
This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.
DisruptionBudget This property is required. OsPolicyAssignmentRolloutDisruptionBudget
The maximum number (or percentage) of VMs per zone to disrupt at any given moment. Structure is documented below.
MinWaitDuration This property is required. string
This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.
disruptionBudget This property is required. OsPolicyAssignmentRolloutDisruptionBudget
The maximum number (or percentage) of VMs per zone to disrupt at any given moment. Structure is documented below.
minWaitDuration This property is required. String
This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.
disruptionBudget This property is required. OsPolicyAssignmentRolloutDisruptionBudget
The maximum number (or percentage) of VMs per zone to disrupt at any given moment. Structure is documented below.
minWaitDuration This property is required. string
This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.
disruption_budget This property is required. OsPolicyAssignmentRolloutDisruptionBudget
The maximum number (or percentage) of VMs per zone to disrupt at any given moment. Structure is documented below.
min_wait_duration This property is required. str
This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.
disruptionBudget This property is required. Property Map
The maximum number (or percentage) of VMs per zone to disrupt at any given moment. Structure is documented below.
minWaitDuration This property is required. String
This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.

OsPolicyAssignmentRolloutDisruptionBudget
, OsPolicyAssignmentRolloutDisruptionBudgetArgs

Fixed int
Specifies a fixed value.
Percent int
Specifies the relative value defined as a percentage, which will be multiplied by a reference value.


Fixed int
Specifies a fixed value.
Percent int
Specifies the relative value defined as a percentage, which will be multiplied by a reference value.


fixed Integer
Specifies a fixed value.
percent Integer
Specifies the relative value defined as a percentage, which will be multiplied by a reference value.


fixed number
Specifies a fixed value.
percent number
Specifies the relative value defined as a percentage, which will be multiplied by a reference value.


fixed int
Specifies a fixed value.
percent int
Specifies the relative value defined as a percentage, which will be multiplied by a reference value.


fixed Number
Specifies a fixed value.
percent Number
Specifies the relative value defined as a percentage, which will be multiplied by a reference value.


Import

OSPolicyAssignment can be imported using any of these accepted formats:

  • projects/{{project}}/locations/{{location}}/osPolicyAssignments/{{name}}

  • {{project}}/{{location}}/{{name}}

  • {{location}}/{{name}}

When using the pulumi import command, OSPolicyAssignment can be imported using one of the formats above. For example:

$ pulumi import gcp:osconfig/osPolicyAssignment:OsPolicyAssignment default projects/{{project}}/locations/{{location}}/osPolicyAssignments/{{name}}
Copy
$ pulumi import gcp:osconfig/osPolicyAssignment:OsPolicyAssignment default {{project}}/{{location}}/{{name}}
Copy
$ pulumi import gcp:osconfig/osPolicyAssignment:OsPolicyAssignment default {{location}}/{{name}}
Copy

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
Google Cloud (GCP) Classic pulumi/pulumi-gcp
License
Apache-2.0
Notes
This Pulumi package is based on the google-beta Terraform Provider.