gcp.osconfig.OsPolicyAssignment
Explore with Pulumi AI
OS policy assignment is an API resource that is used to apply a set of OS policies to a dynamically targeted group of Compute Engine VM instances. An OS policy is used to define the desired state configuration for a Compute Engine VM instance through a set of configuration resources that provide capabilities such as installing or removing software packages, or executing a script. For more information about the OS policy resource definitions and examples, see OS policy and OS policy assignment.
To get more information about OSPolicyAssignment, see:
- API documentation
- How-to Guides
Example Usage
Os Config Os Policy Assignment Basic
import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";
const primary = new gcp.osconfig.OsPolicyAssignment("primary", {
    instanceFilter: {
        all: false,
        exclusionLabels: [{
            labels: {
                "label-two": "value-two",
            },
        }],
        inclusionLabels: [{
            labels: {
                "label-one": "value-one",
            },
        }],
        inventories: [{
            osShortName: "centos",
            osVersion: "8.*",
        }],
    },
    location: "us-central1-a",
    name: "policy-assignment",
    osPolicies: [{
        id: "policy",
        mode: "VALIDATION",
        resourceGroups: [{
            resources: [
                {
                    id: "apt-to-yum",
                    repository: {
                        apt: {
                            archiveType: "DEB",
                            components: ["doc"],
                            distribution: "debian",
                            uri: "https://atl.mirrors.clouvider.net/debian",
                            gpgKey: ".gnupg/pubring.kbx",
                        },
                    },
                },
                {
                    id: "exec1",
                    exec: {
                        validate: {
                            interpreter: "SHELL",
                            args: ["arg1"],
                            file: {
                                localPath: "$HOME/script.sh",
                            },
                            outputFilePath: "$HOME/out",
                        },
                        enforce: {
                            interpreter: "SHELL",
                            args: ["arg1"],
                            file: {
                                allowInsecure: true,
                                remote: {
                                    uri: "https://www.example.com/script.sh",
                                    sha256Checksum: "c7938fed83afdccbb0e86a2a2e4cad7d5035012ca3214b4a61268393635c3063",
                                },
                            },
                            outputFilePath: "$HOME/out",
                        },
                    },
                },
            ],
            inventoryFilters: [{
                osShortName: "centos",
                osVersion: "8.*",
            }],
        }],
        allowNoResourceGroupMatch: false,
        description: "A test os policy",
    }],
    rollout: {
        disruptionBudget: {
            percent: 100,
        },
        minWaitDuration: "3s",
    },
    description: "A test os policy assignment",
});
import pulumi
import pulumi_gcp as gcp
primary = gcp.osconfig.OsPolicyAssignment("primary",
    instance_filter={
        "all": False,
        "exclusion_labels": [{
            "labels": {
                "label-two": "value-two",
            },
        }],
        "inclusion_labels": [{
            "labels": {
                "label-one": "value-one",
            },
        }],
        "inventories": [{
            "os_short_name": "centos",
            "os_version": "8.*",
        }],
    },
    location="us-central1-a",
    name="policy-assignment",
    os_policies=[{
        "id": "policy",
        "mode": "VALIDATION",
        "resource_groups": [{
            "resources": [
                {
                    "id": "apt-to-yum",
                    "repository": {
                        "apt": {
                            "archive_type": "DEB",
                            "components": ["doc"],
                            "distribution": "debian",
                            "uri": "https://atl.mirrors.clouvider.net/debian",
                            "gpg_key": ".gnupg/pubring.kbx",
                        },
                    },
                },
                {
                    "id": "exec1",
                    "exec_": {
                        "validate": {
                            "interpreter": "SHELL",
                            "args": ["arg1"],
                            "file": {
                                "local_path": "$HOME/script.sh",
                            },
                            "output_file_path": "$HOME/out",
                        },
                        "enforce": {
                            "interpreter": "SHELL",
                            "args": ["arg1"],
                            "file": {
                                "allow_insecure": True,
                                "remote": {
                                    "uri": "https://www.example.com/script.sh",
                                    "sha256_checksum": "c7938fed83afdccbb0e86a2a2e4cad7d5035012ca3214b4a61268393635c3063",
                                },
                            },
                            "output_file_path": "$HOME/out",
                        },
                    },
                },
            ],
            "inventory_filters": [{
                "os_short_name": "centos",
                "os_version": "8.*",
            }],
        }],
        "allow_no_resource_group_match": False,
        "description": "A test os policy",
    }],
    rollout={
        "disruption_budget": {
            "percent": 100,
        },
        "min_wait_duration": "3s",
    },
    description="A test os policy assignment")
package main
import (
	"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/osconfig"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := osconfig.NewOsPolicyAssignment(ctx, "primary", &osconfig.OsPolicyAssignmentArgs{
			InstanceFilter: &osconfig.OsPolicyAssignmentInstanceFilterArgs{
				All: pulumi.Bool(false),
				ExclusionLabels: osconfig.OsPolicyAssignmentInstanceFilterExclusionLabelArray{
					&osconfig.OsPolicyAssignmentInstanceFilterExclusionLabelArgs{
						Labels: pulumi.StringMap{
							"label-two": pulumi.String("value-two"),
						},
					},
				},
				InclusionLabels: osconfig.OsPolicyAssignmentInstanceFilterInclusionLabelArray{
					&osconfig.OsPolicyAssignmentInstanceFilterInclusionLabelArgs{
						Labels: pulumi.StringMap{
							"label-one": pulumi.String("value-one"),
						},
					},
				},
				Inventories: osconfig.OsPolicyAssignmentInstanceFilterInventoryArray{
					&osconfig.OsPolicyAssignmentInstanceFilterInventoryArgs{
						OsShortName: pulumi.String("centos"),
						OsVersion:   pulumi.String("8.*"),
					},
				},
			},
			Location: pulumi.String("us-central1-a"),
			Name:     pulumi.String("policy-assignment"),
			OsPolicies: osconfig.OsPolicyAssignmentOsPolicyArray{
				&osconfig.OsPolicyAssignmentOsPolicyArgs{
					Id:   pulumi.String("policy"),
					Mode: pulumi.String("VALIDATION"),
					ResourceGroups: osconfig.OsPolicyAssignmentOsPolicyResourceGroupArray{
						&osconfig.OsPolicyAssignmentOsPolicyResourceGroupArgs{
							Resources: osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceArray{
								&osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceArgs{
									Id: pulumi.String("apt-to-yum"),
									Repository: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryArgs{
										Apt: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryAptArgs{
											ArchiveType: pulumi.String("DEB"),
											Components: pulumi.StringArray{
												pulumi.String("doc"),
											},
											Distribution: pulumi.String("debian"),
											Uri:          pulumi.String("https://atl.mirrors.clouvider.net/debian"),
											GpgKey:       pulumi.String(".gnupg/pubring.kbx"),
										},
									},
								},
								&osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceArgs{
									Id: pulumi.String("exec1"),
									Exec: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecArgs{
										Validate: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateArgs{
											Interpreter: pulumi.String("SHELL"),
											Args: pulumi.StringArray{
												pulumi.String("arg1"),
											},
											File: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileArgs{
												LocalPath: pulumi.String("$HOME/script.sh"),
											},
											OutputFilePath: pulumi.String("$HOME/out"),
										},
										Enforce: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceArgs{
											Interpreter: pulumi.String("SHELL"),
											Args: pulumi.StringArray{
												pulumi.String("arg1"),
											},
											File: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileArgs{
												AllowInsecure: pulumi.Bool(true),
												Remote: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileRemoteArgs{
													Uri:            pulumi.String("https://www.example.com/script.sh"),
													Sha256Checksum: pulumi.String("c7938fed83afdccbb0e86a2a2e4cad7d5035012ca3214b4a61268393635c3063"),
												},
											},
											OutputFilePath: pulumi.String("$HOME/out"),
										},
									},
								},
							},
							InventoryFilters: osconfig.OsPolicyAssignmentOsPolicyResourceGroupInventoryFilterArray{
								&osconfig.OsPolicyAssignmentOsPolicyResourceGroupInventoryFilterArgs{
									OsShortName: pulumi.String("centos"),
									OsVersion:   pulumi.String("8.*"),
								},
							},
						},
					},
					AllowNoResourceGroupMatch: pulumi.Bool(false),
					Description:               pulumi.String("A test os policy"),
				},
			},
			Rollout: &osconfig.OsPolicyAssignmentRolloutArgs{
				DisruptionBudget: &osconfig.OsPolicyAssignmentRolloutDisruptionBudgetArgs{
					Percent: pulumi.Int(100),
				},
				MinWaitDuration: pulumi.String("3s"),
			},
			Description: pulumi.String("A test os policy assignment"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;
return await Deployment.RunAsync(() => 
{
    var primary = new Gcp.OsConfig.OsPolicyAssignment("primary", new()
    {
        InstanceFilter = new Gcp.OsConfig.Inputs.OsPolicyAssignmentInstanceFilterArgs
        {
            All = false,
            ExclusionLabels = new[]
            {
                new Gcp.OsConfig.Inputs.OsPolicyAssignmentInstanceFilterExclusionLabelArgs
                {
                    Labels = 
                    {
                        { "label-two", "value-two" },
                    },
                },
            },
            InclusionLabels = new[]
            {
                new Gcp.OsConfig.Inputs.OsPolicyAssignmentInstanceFilterInclusionLabelArgs
                {
                    Labels = 
                    {
                        { "label-one", "value-one" },
                    },
                },
            },
            Inventories = new[]
            {
                new Gcp.OsConfig.Inputs.OsPolicyAssignmentInstanceFilterInventoryArgs
                {
                    OsShortName = "centos",
                    OsVersion = "8.*",
                },
            },
        },
        Location = "us-central1-a",
        Name = "policy-assignment",
        OsPolicies = new[]
        {
            new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyArgs
            {
                Id = "policy",
                Mode = "VALIDATION",
                ResourceGroups = new[]
                {
                    new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupArgs
                    {
                        Resources = new[]
                        {
                            new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceArgs
                            {
                                Id = "apt-to-yum",
                                Repository = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryArgs
                                {
                                    Apt = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryAptArgs
                                    {
                                        ArchiveType = "DEB",
                                        Components = new[]
                                        {
                                            "doc",
                                        },
                                        Distribution = "debian",
                                        Uri = "https://atl.mirrors.clouvider.net/debian",
                                        GpgKey = ".gnupg/pubring.kbx",
                                    },
                                },
                            },
                            new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceArgs
                            {
                                Id = "exec1",
                                Exec = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecArgs
                                {
                                    Validate = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateArgs
                                    {
                                        Interpreter = "SHELL",
                                        Args = new[]
                                        {
                                            "arg1",
                                        },
                                        File = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileArgs
                                        {
                                            LocalPath = "$HOME/script.sh",
                                        },
                                        OutputFilePath = "$HOME/out",
                                    },
                                    Enforce = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceArgs
                                    {
                                        Interpreter = "SHELL",
                                        Args = new[]
                                        {
                                            "arg1",
                                        },
                                        File = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileArgs
                                        {
                                            AllowInsecure = true,
                                            Remote = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileRemoteArgs
                                            {
                                                Uri = "https://www.example.com/script.sh",
                                                Sha256Checksum = "c7938fed83afdccbb0e86a2a2e4cad7d5035012ca3214b4a61268393635c3063",
                                            },
                                        },
                                        OutputFilePath = "$HOME/out",
                                    },
                                },
                            },
                        },
                        InventoryFilters = new[]
                        {
                            new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupInventoryFilterArgs
                            {
                                OsShortName = "centos",
                                OsVersion = "8.*",
                            },
                        },
                    },
                },
                AllowNoResourceGroupMatch = false,
                Description = "A test os policy",
            },
        },
        Rollout = new Gcp.OsConfig.Inputs.OsPolicyAssignmentRolloutArgs
        {
            DisruptionBudget = new Gcp.OsConfig.Inputs.OsPolicyAssignmentRolloutDisruptionBudgetArgs
            {
                Percent = 100,
            },
            MinWaitDuration = "3s",
        },
        Description = "A test os policy assignment",
    });
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.osconfig.OsPolicyAssignment;
import com.pulumi.gcp.osconfig.OsPolicyAssignmentArgs;
import com.pulumi.gcp.osconfig.inputs.OsPolicyAssignmentInstanceFilterArgs;
import com.pulumi.gcp.osconfig.inputs.OsPolicyAssignmentOsPolicyArgs;
import com.pulumi.gcp.osconfig.inputs.OsPolicyAssignmentRolloutArgs;
import com.pulumi.gcp.osconfig.inputs.OsPolicyAssignmentRolloutDisruptionBudgetArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var primary = new OsPolicyAssignment("primary", OsPolicyAssignmentArgs.builder()
            .instanceFilter(OsPolicyAssignmentInstanceFilterArgs.builder()
                .all(false)
                .exclusionLabels(OsPolicyAssignmentInstanceFilterExclusionLabelArgs.builder()
                    .labels(Map.of("label-two", "value-two"))
                    .build())
                .inclusionLabels(OsPolicyAssignmentInstanceFilterInclusionLabelArgs.builder()
                    .labels(Map.of("label-one", "value-one"))
                    .build())
                .inventories(OsPolicyAssignmentInstanceFilterInventoryArgs.builder()
                    .osShortName("centos")
                    .osVersion("8.*")
                    .build())
                .build())
            .location("us-central1-a")
            .name("policy-assignment")
            .osPolicies(OsPolicyAssignmentOsPolicyArgs.builder()
                .id("policy")
                .mode("VALIDATION")
                .resourceGroups(OsPolicyAssignmentOsPolicyResourceGroupArgs.builder()
                    .resources(                    
                        OsPolicyAssignmentOsPolicyResourceGroupResourceArgs.builder()
                            .id("apt-to-yum")
                            .repository(OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryArgs.builder()
                                .apt(OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryAptArgs.builder()
                                    .archiveType("DEB")
                                    .components("doc")
                                    .distribution("debian")
                                    .uri("https://atl.mirrors.clouvider.net/debian")
                                    .gpgKey(".gnupg/pubring.kbx")
                                    .build())
                                .build())
                            .build(),
                        OsPolicyAssignmentOsPolicyResourceGroupResourceArgs.builder()
                            .id("exec1")
                            .exec(OsPolicyAssignmentOsPolicyResourceGroupResourceExecArgs.builder()
                                .validate(OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateArgs.builder()
                                    .interpreter("SHELL")
                                    .args("arg1")
                                    .file(OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileArgs.builder()
                                        .localPath("$HOME/script.sh")
                                        .build())
                                    .outputFilePath("$HOME/out")
                                    .build())
                                .enforce(OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceArgs.builder()
                                    .interpreter("SHELL")
                                    .args("arg1")
                                    .file(OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileArgs.builder()
                                        .allowInsecure(true)
                                        .remote(OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileRemoteArgs.builder()
                                            .uri("https://www.example.com/script.sh")
                                            .sha256Checksum("c7938fed83afdccbb0e86a2a2e4cad7d5035012ca3214b4a61268393635c3063")
                                            .build())
                                        .build())
                                    .outputFilePath("$HOME/out")
                                    .build())
                                .build())
                            .build())
                    .inventoryFilters(OsPolicyAssignmentOsPolicyResourceGroupInventoryFilterArgs.builder()
                        .osShortName("centos")
                        .osVersion("8.*")
                        .build())
                    .build())
                .allowNoResourceGroupMatch(false)
                .description("A test os policy")
                .build())
            .rollout(OsPolicyAssignmentRolloutArgs.builder()
                .disruptionBudget(OsPolicyAssignmentRolloutDisruptionBudgetArgs.builder()
                    .percent(100)
                    .build())
                .minWaitDuration("3s")
                .build())
            .description("A test os policy assignment")
            .build());
    }
}
resources:
  primary:
    type: gcp:osconfig:OsPolicyAssignment
    properties:
      instanceFilter:
        all: false
        exclusionLabels:
          - labels:
              label-two: value-two
        inclusionLabels:
          - labels:
              label-one: value-one
        inventories:
          - osShortName: centos
            osVersion: 8.*
      location: us-central1-a
      name: policy-assignment
      osPolicies:
        - id: policy
          mode: VALIDATION
          resourceGroups:
            - resources:
                - id: apt-to-yum
                  repository:
                    apt:
                      archiveType: DEB
                      components:
                        - doc
                      distribution: debian
                      uri: https://atl.mirrors.clouvider.net/debian
                      gpgKey: .gnupg/pubring.kbx
                - id: exec1
                  exec:
                    validate:
                      interpreter: SHELL
                      args:
                        - arg1
                      file:
                        localPath: $HOME/script.sh
                      outputFilePath: $HOME/out
                    enforce:
                      interpreter: SHELL
                      args:
                        - arg1
                      file:
                        allowInsecure: true
                        remote:
                          uri: https://www.example.com/script.sh
                          sha256Checksum: c7938fed83afdccbb0e86a2a2e4cad7d5035012ca3214b4a61268393635c3063
                      outputFilePath: $HOME/out
              inventoryFilters:
                - osShortName: centos
                  osVersion: 8.*
          allowNoResourceGroupMatch: false
          description: A test os policy
      rollout:
        disruptionBudget:
          percent: 100
        minWaitDuration: 3s
      description: A test os policy assignment
Create OsPolicyAssignment Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new OsPolicyAssignment(name: string, args: OsPolicyAssignmentArgs, opts?: CustomResourceOptions);@overload
def OsPolicyAssignment(resource_name: str,
                       args: OsPolicyAssignmentArgs,
                       opts: Optional[ResourceOptions] = None)
@overload
def OsPolicyAssignment(resource_name: str,
                       opts: Optional[ResourceOptions] = None,
                       instance_filter: Optional[OsPolicyAssignmentInstanceFilterArgs] = None,
                       location: Optional[str] = None,
                       os_policies: Optional[Sequence[OsPolicyAssignmentOsPolicyArgs]] = None,
                       rollout: Optional[OsPolicyAssignmentRolloutArgs] = None,
                       description: Optional[str] = None,
                       name: Optional[str] = None,
                       project: Optional[str] = None,
                       skip_await_rollout: Optional[bool] = None)func NewOsPolicyAssignment(ctx *Context, name string, args OsPolicyAssignmentArgs, opts ...ResourceOption) (*OsPolicyAssignment, error)public OsPolicyAssignment(string name, OsPolicyAssignmentArgs args, CustomResourceOptions? opts = null)
public OsPolicyAssignment(String name, OsPolicyAssignmentArgs args)
public OsPolicyAssignment(String name, OsPolicyAssignmentArgs args, CustomResourceOptions options)
type: gcp:osconfig:OsPolicyAssignment
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args OsPolicyAssignmentArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args OsPolicyAssignmentArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args OsPolicyAssignmentArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args OsPolicyAssignmentArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args OsPolicyAssignmentArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var osPolicyAssignmentResource = new Gcp.OsConfig.OsPolicyAssignment("osPolicyAssignmentResource", new()
{
    InstanceFilter = new Gcp.OsConfig.Inputs.OsPolicyAssignmentInstanceFilterArgs
    {
        All = false,
        ExclusionLabels = new[]
        {
            new Gcp.OsConfig.Inputs.OsPolicyAssignmentInstanceFilterExclusionLabelArgs
            {
                Labels = 
                {
                    { "string", "string" },
                },
            },
        },
        InclusionLabels = new[]
        {
            new Gcp.OsConfig.Inputs.OsPolicyAssignmentInstanceFilterInclusionLabelArgs
            {
                Labels = 
                {
                    { "string", "string" },
                },
            },
        },
        Inventories = new[]
        {
            new Gcp.OsConfig.Inputs.OsPolicyAssignmentInstanceFilterInventoryArgs
            {
                OsShortName = "string",
                OsVersion = "string",
            },
        },
    },
    Location = "string",
    OsPolicies = new[]
    {
        new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyArgs
        {
            Id = "string",
            Mode = "string",
            ResourceGroups = new[]
            {
                new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupArgs
                {
                    Resources = new[]
                    {
                        new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceArgs
                        {
                            Id = "string",
                            Exec = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecArgs
                            {
                                Validate = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateArgs
                                {
                                    Interpreter = "string",
                                    Args = new[]
                                    {
                                        "string",
                                    },
                                    File = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileArgs
                                    {
                                        AllowInsecure = false,
                                        Gcs = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileGcsArgs
                                        {
                                            Bucket = "string",
                                            Object = "string",
                                            Generation = 0,
                                        },
                                        LocalPath = "string",
                                        Remote = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileRemoteArgs
                                        {
                                            Uri = "string",
                                            Sha256Checksum = "string",
                                        },
                                    },
                                    OutputFilePath = "string",
                                    Script = "string",
                                },
                                Enforce = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceArgs
                                {
                                    Interpreter = "string",
                                    Args = new[]
                                    {
                                        "string",
                                    },
                                    File = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileArgs
                                    {
                                        AllowInsecure = false,
                                        Gcs = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileGcsArgs
                                        {
                                            Bucket = "string",
                                            Object = "string",
                                            Generation = 0,
                                        },
                                        LocalPath = "string",
                                        Remote = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileRemoteArgs
                                        {
                                            Uri = "string",
                                            Sha256Checksum = "string",
                                        },
                                    },
                                    OutputFilePath = "string",
                                    Script = "string",
                                },
                            },
                            File = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceFileArgs
                            {
                                Path = "string",
                                State = "string",
                                Content = "string",
                                File = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileArgs
                                {
                                    AllowInsecure = false,
                                    Gcs = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileGcsArgs
                                    {
                                        Bucket = "string",
                                        Object = "string",
                                        Generation = 0,
                                    },
                                    LocalPath = "string",
                                    Remote = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileRemoteArgs
                                    {
                                        Uri = "string",
                                        Sha256Checksum = "string",
                                    },
                                },
                                Permissions = "string",
                            },
                            Pkg = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgArgs
                            {
                                DesiredState = "string",
                                Apt = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgAptArgs
                                {
                                    Name = "string",
                                },
                                Deb = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebArgs
                                {
                                    Source = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceArgs
                                    {
                                        AllowInsecure = false,
                                        Gcs = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceGcsArgs
                                        {
                                            Bucket = "string",
                                            Object = "string",
                                            Generation = 0,
                                        },
                                        LocalPath = "string",
                                        Remote = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceRemoteArgs
                                        {
                                            Uri = "string",
                                            Sha256Checksum = "string",
                                        },
                                    },
                                    PullDeps = false,
                                },
                                Googet = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgGoogetArgs
                                {
                                    Name = "string",
                                },
                                Msi = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiArgs
                                {
                                    Source = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceArgs
                                    {
                                        AllowInsecure = false,
                                        Gcs = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceGcsArgs
                                        {
                                            Bucket = "string",
                                            Object = "string",
                                            Generation = 0,
                                        },
                                        LocalPath = "string",
                                        Remote = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceRemoteArgs
                                        {
                                            Uri = "string",
                                            Sha256Checksum = "string",
                                        },
                                    },
                                    Properties = new[]
                                    {
                                        "string",
                                    },
                                },
                                Rpm = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmArgs
                                {
                                    Source = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceArgs
                                    {
                                        AllowInsecure = false,
                                        Gcs = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceGcsArgs
                                        {
                                            Bucket = "string",
                                            Object = "string",
                                            Generation = 0,
                                        },
                                        LocalPath = "string",
                                        Remote = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceRemoteArgs
                                        {
                                            Uri = "string",
                                            Sha256Checksum = "string",
                                        },
                                    },
                                    PullDeps = false,
                                },
                                Yum = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgYumArgs
                                {
                                    Name = "string",
                                },
                                Zypper = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgZypperArgs
                                {
                                    Name = "string",
                                },
                            },
                            Repository = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryArgs
                            {
                                Apt = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryAptArgs
                                {
                                    ArchiveType = "string",
                                    Components = new[]
                                    {
                                        "string",
                                    },
                                    Distribution = "string",
                                    Uri = "string",
                                    GpgKey = "string",
                                },
                                Goo = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryGooArgs
                                {
                                    Name = "string",
                                    Url = "string",
                                },
                                Yum = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryYumArgs
                                {
                                    BaseUrl = "string",
                                    Id = "string",
                                    DisplayName = "string",
                                    GpgKeys = new[]
                                    {
                                        "string",
                                    },
                                },
                                Zypper = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryZypperArgs
                                {
                                    BaseUrl = "string",
                                    Id = "string",
                                    DisplayName = "string",
                                    GpgKeys = new[]
                                    {
                                        "string",
                                    },
                                },
                            },
                        },
                    },
                    InventoryFilters = new[]
                    {
                        new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupInventoryFilterArgs
                        {
                            OsShortName = "string",
                            OsVersion = "string",
                        },
                    },
                },
            },
            AllowNoResourceGroupMatch = false,
            Description = "string",
        },
    },
    Rollout = new Gcp.OsConfig.Inputs.OsPolicyAssignmentRolloutArgs
    {
        DisruptionBudget = new Gcp.OsConfig.Inputs.OsPolicyAssignmentRolloutDisruptionBudgetArgs
        {
            Fixed = 0,
            Percent = 0,
        },
        MinWaitDuration = "string",
    },
    Description = "string",
    Name = "string",
    Project = "string",
    SkipAwaitRollout = false,
});
example, err := osconfig.NewOsPolicyAssignment(ctx, "osPolicyAssignmentResource", &osconfig.OsPolicyAssignmentArgs{
	InstanceFilter: &osconfig.OsPolicyAssignmentInstanceFilterArgs{
		All: pulumi.Bool(false),
		ExclusionLabels: osconfig.OsPolicyAssignmentInstanceFilterExclusionLabelArray{
			&osconfig.OsPolicyAssignmentInstanceFilterExclusionLabelArgs{
				Labels: pulumi.StringMap{
					"string": pulumi.String("string"),
				},
			},
		},
		InclusionLabels: osconfig.OsPolicyAssignmentInstanceFilterInclusionLabelArray{
			&osconfig.OsPolicyAssignmentInstanceFilterInclusionLabelArgs{
				Labels: pulumi.StringMap{
					"string": pulumi.String("string"),
				},
			},
		},
		Inventories: osconfig.OsPolicyAssignmentInstanceFilterInventoryArray{
			&osconfig.OsPolicyAssignmentInstanceFilterInventoryArgs{
				OsShortName: pulumi.String("string"),
				OsVersion:   pulumi.String("string"),
			},
		},
	},
	Location: pulumi.String("string"),
	OsPolicies: osconfig.OsPolicyAssignmentOsPolicyArray{
		&osconfig.OsPolicyAssignmentOsPolicyArgs{
			Id:   pulumi.String("string"),
			Mode: pulumi.String("string"),
			ResourceGroups: osconfig.OsPolicyAssignmentOsPolicyResourceGroupArray{
				&osconfig.OsPolicyAssignmentOsPolicyResourceGroupArgs{
					Resources: osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceArray{
						&osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceArgs{
							Id: pulumi.String("string"),
							Exec: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecArgs{
								Validate: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateArgs{
									Interpreter: pulumi.String("string"),
									Args: pulumi.StringArray{
										pulumi.String("string"),
									},
									File: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileArgs{
										AllowInsecure: pulumi.Bool(false),
										Gcs: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileGcsArgs{
											Bucket:     pulumi.String("string"),
											Object:     pulumi.String("string"),
											Generation: pulumi.Int(0),
										},
										LocalPath: pulumi.String("string"),
										Remote: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileRemoteArgs{
											Uri:            pulumi.String("string"),
											Sha256Checksum: pulumi.String("string"),
										},
									},
									OutputFilePath: pulumi.String("string"),
									Script:         pulumi.String("string"),
								},
								Enforce: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceArgs{
									Interpreter: pulumi.String("string"),
									Args: pulumi.StringArray{
										pulumi.String("string"),
									},
									File: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileArgs{
										AllowInsecure: pulumi.Bool(false),
										Gcs: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileGcsArgs{
											Bucket:     pulumi.String("string"),
											Object:     pulumi.String("string"),
											Generation: pulumi.Int(0),
										},
										LocalPath: pulumi.String("string"),
										Remote: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileRemoteArgs{
											Uri:            pulumi.String("string"),
											Sha256Checksum: pulumi.String("string"),
										},
									},
									OutputFilePath: pulumi.String("string"),
									Script:         pulumi.String("string"),
								},
							},
							File: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceFileArgs{
								Path:    pulumi.String("string"),
								State:   pulumi.String("string"),
								Content: pulumi.String("string"),
								File: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileArgs{
									AllowInsecure: pulumi.Bool(false),
									Gcs: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileGcsArgs{
										Bucket:     pulumi.String("string"),
										Object:     pulumi.String("string"),
										Generation: pulumi.Int(0),
									},
									LocalPath: pulumi.String("string"),
									Remote: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileRemoteArgs{
										Uri:            pulumi.String("string"),
										Sha256Checksum: pulumi.String("string"),
									},
								},
								Permissions: pulumi.String("string"),
							},
							Pkg: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgArgs{
								DesiredState: pulumi.String("string"),
								Apt: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgAptArgs{
									Name: pulumi.String("string"),
								},
								Deb: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebArgs{
									Source: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceArgs{
										AllowInsecure: pulumi.Bool(false),
										Gcs: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceGcsArgs{
											Bucket:     pulumi.String("string"),
											Object:     pulumi.String("string"),
											Generation: pulumi.Int(0),
										},
										LocalPath: pulumi.String("string"),
										Remote: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceRemoteArgs{
											Uri:            pulumi.String("string"),
											Sha256Checksum: pulumi.String("string"),
										},
									},
									PullDeps: pulumi.Bool(false),
								},
								Googet: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgGoogetArgs{
									Name: pulumi.String("string"),
								},
								Msi: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiArgs{
									Source: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceArgs{
										AllowInsecure: pulumi.Bool(false),
										Gcs: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceGcsArgs{
											Bucket:     pulumi.String("string"),
											Object:     pulumi.String("string"),
											Generation: pulumi.Int(0),
										},
										LocalPath: pulumi.String("string"),
										Remote: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceRemoteArgs{
											Uri:            pulumi.String("string"),
											Sha256Checksum: pulumi.String("string"),
										},
									},
									Properties: pulumi.StringArray{
										pulumi.String("string"),
									},
								},
								Rpm: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmArgs{
									Source: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceArgs{
										AllowInsecure: pulumi.Bool(false),
										Gcs: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceGcsArgs{
											Bucket:     pulumi.String("string"),
											Object:     pulumi.String("string"),
											Generation: pulumi.Int(0),
										},
										LocalPath: pulumi.String("string"),
										Remote: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceRemoteArgs{
											Uri:            pulumi.String("string"),
											Sha256Checksum: pulumi.String("string"),
										},
									},
									PullDeps: pulumi.Bool(false),
								},
								Yum: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgYumArgs{
									Name: pulumi.String("string"),
								},
								Zypper: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgZypperArgs{
									Name: pulumi.String("string"),
								},
							},
							Repository: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryArgs{
								Apt: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryAptArgs{
									ArchiveType: pulumi.String("string"),
									Components: pulumi.StringArray{
										pulumi.String("string"),
									},
									Distribution: pulumi.String("string"),
									Uri:          pulumi.String("string"),
									GpgKey:       pulumi.String("string"),
								},
								Goo: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryGooArgs{
									Name: pulumi.String("string"),
									Url:  pulumi.String("string"),
								},
								Yum: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryYumArgs{
									BaseUrl:     pulumi.String("string"),
									Id:          pulumi.String("string"),
									DisplayName: pulumi.String("string"),
									GpgKeys: pulumi.StringArray{
										pulumi.String("string"),
									},
								},
								Zypper: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryZypperArgs{
									BaseUrl:     pulumi.String("string"),
									Id:          pulumi.String("string"),
									DisplayName: pulumi.String("string"),
									GpgKeys: pulumi.StringArray{
										pulumi.String("string"),
									},
								},
							},
						},
					},
					InventoryFilters: osconfig.OsPolicyAssignmentOsPolicyResourceGroupInventoryFilterArray{
						&osconfig.OsPolicyAssignmentOsPolicyResourceGroupInventoryFilterArgs{
							OsShortName: pulumi.String("string"),
							OsVersion:   pulumi.String("string"),
						},
					},
				},
			},
			AllowNoResourceGroupMatch: pulumi.Bool(false),
			Description:               pulumi.String("string"),
		},
	},
	Rollout: &osconfig.OsPolicyAssignmentRolloutArgs{
		DisruptionBudget: &osconfig.OsPolicyAssignmentRolloutDisruptionBudgetArgs{
			Fixed:   pulumi.Int(0),
			Percent: pulumi.Int(0),
		},
		MinWaitDuration: pulumi.String("string"),
	},
	Description:      pulumi.String("string"),
	Name:             pulumi.String("string"),
	Project:          pulumi.String("string"),
	SkipAwaitRollout: pulumi.Bool(false),
})
var osPolicyAssignmentResource = new OsPolicyAssignment("osPolicyAssignmentResource", OsPolicyAssignmentArgs.builder()
    .instanceFilter(OsPolicyAssignmentInstanceFilterArgs.builder()
        .all(false)
        .exclusionLabels(OsPolicyAssignmentInstanceFilterExclusionLabelArgs.builder()
            .labels(Map.of("string", "string"))
            .build())
        .inclusionLabels(OsPolicyAssignmentInstanceFilterInclusionLabelArgs.builder()
            .labels(Map.of("string", "string"))
            .build())
        .inventories(OsPolicyAssignmentInstanceFilterInventoryArgs.builder()
            .osShortName("string")
            .osVersion("string")
            .build())
        .build())
    .location("string")
    .osPolicies(OsPolicyAssignmentOsPolicyArgs.builder()
        .id("string")
        .mode("string")
        .resourceGroups(OsPolicyAssignmentOsPolicyResourceGroupArgs.builder()
            .resources(OsPolicyAssignmentOsPolicyResourceGroupResourceArgs.builder()
                .id("string")
                .exec(OsPolicyAssignmentOsPolicyResourceGroupResourceExecArgs.builder()
                    .validate(OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateArgs.builder()
                        .interpreter("string")
                        .args("string")
                        .file(OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileArgs.builder()
                            .allowInsecure(false)
                            .gcs(OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileGcsArgs.builder()
                                .bucket("string")
                                .object("string")
                                .generation(0)
                                .build())
                            .localPath("string")
                            .remote(OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileRemoteArgs.builder()
                                .uri("string")
                                .sha256Checksum("string")
                                .build())
                            .build())
                        .outputFilePath("string")
                        .script("string")
                        .build())
                    .enforce(OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceArgs.builder()
                        .interpreter("string")
                        .args("string")
                        .file(OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileArgs.builder()
                            .allowInsecure(false)
                            .gcs(OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileGcsArgs.builder()
                                .bucket("string")
                                .object("string")
                                .generation(0)
                                .build())
                            .localPath("string")
                            .remote(OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileRemoteArgs.builder()
                                .uri("string")
                                .sha256Checksum("string")
                                .build())
                            .build())
                        .outputFilePath("string")
                        .script("string")
                        .build())
                    .build())
                .file(OsPolicyAssignmentOsPolicyResourceGroupResourceFileArgs.builder()
                    .path("string")
                    .state("string")
                    .content("string")
                    .file(OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileArgs.builder()
                        .allowInsecure(false)
                        .gcs(OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileGcsArgs.builder()
                            .bucket("string")
                            .object("string")
                            .generation(0)
                            .build())
                        .localPath("string")
                        .remote(OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileRemoteArgs.builder()
                            .uri("string")
                            .sha256Checksum("string")
                            .build())
                        .build())
                    .permissions("string")
                    .build())
                .pkg(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgArgs.builder()
                    .desiredState("string")
                    .apt(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgAptArgs.builder()
                        .name("string")
                        .build())
                    .deb(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebArgs.builder()
                        .source(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceArgs.builder()
                            .allowInsecure(false)
                            .gcs(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceGcsArgs.builder()
                                .bucket("string")
                                .object("string")
                                .generation(0)
                                .build())
                            .localPath("string")
                            .remote(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceRemoteArgs.builder()
                                .uri("string")
                                .sha256Checksum("string")
                                .build())
                            .build())
                        .pullDeps(false)
                        .build())
                    .googet(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgGoogetArgs.builder()
                        .name("string")
                        .build())
                    .msi(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiArgs.builder()
                        .source(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceArgs.builder()
                            .allowInsecure(false)
                            .gcs(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceGcsArgs.builder()
                                .bucket("string")
                                .object("string")
                                .generation(0)
                                .build())
                            .localPath("string")
                            .remote(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceRemoteArgs.builder()
                                .uri("string")
                                .sha256Checksum("string")
                                .build())
                            .build())
                        .properties("string")
                        .build())
                    .rpm(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmArgs.builder()
                        .source(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceArgs.builder()
                            .allowInsecure(false)
                            .gcs(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceGcsArgs.builder()
                                .bucket("string")
                                .object("string")
                                .generation(0)
                                .build())
                            .localPath("string")
                            .remote(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceRemoteArgs.builder()
                                .uri("string")
                                .sha256Checksum("string")
                                .build())
                            .build())
                        .pullDeps(false)
                        .build())
                    .yum(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgYumArgs.builder()
                        .name("string")
                        .build())
                    .zypper(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgZypperArgs.builder()
                        .name("string")
                        .build())
                    .build())
                .repository(OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryArgs.builder()
                    .apt(OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryAptArgs.builder()
                        .archiveType("string")
                        .components("string")
                        .distribution("string")
                        .uri("string")
                        .gpgKey("string")
                        .build())
                    .goo(OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryGooArgs.builder()
                        .name("string")
                        .url("string")
                        .build())
                    .yum(OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryYumArgs.builder()
                        .baseUrl("string")
                        .id("string")
                        .displayName("string")
                        .gpgKeys("string")
                        .build())
                    .zypper(OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryZypperArgs.builder()
                        .baseUrl("string")
                        .id("string")
                        .displayName("string")
                        .gpgKeys("string")
                        .build())
                    .build())
                .build())
            .inventoryFilters(OsPolicyAssignmentOsPolicyResourceGroupInventoryFilterArgs.builder()
                .osShortName("string")
                .osVersion("string")
                .build())
            .build())
        .allowNoResourceGroupMatch(false)
        .description("string")
        .build())
    .rollout(OsPolicyAssignmentRolloutArgs.builder()
        .disruptionBudget(OsPolicyAssignmentRolloutDisruptionBudgetArgs.builder()
            .fixed(0)
            .percent(0)
            .build())
        .minWaitDuration("string")
        .build())
    .description("string")
    .name("string")
    .project("string")
    .skipAwaitRollout(false)
    .build());
os_policy_assignment_resource = gcp.osconfig.OsPolicyAssignment("osPolicyAssignmentResource",
    instance_filter={
        "all": False,
        "exclusion_labels": [{
            "labels": {
                "string": "string",
            },
        }],
        "inclusion_labels": [{
            "labels": {
                "string": "string",
            },
        }],
        "inventories": [{
            "os_short_name": "string",
            "os_version": "string",
        }],
    },
    location="string",
    os_policies=[{
        "id": "string",
        "mode": "string",
        "resource_groups": [{
            "resources": [{
                "id": "string",
                "exec_": {
                    "validate": {
                        "interpreter": "string",
                        "args": ["string"],
                        "file": {
                            "allow_insecure": False,
                            "gcs": {
                                "bucket": "string",
                                "object": "string",
                                "generation": 0,
                            },
                            "local_path": "string",
                            "remote": {
                                "uri": "string",
                                "sha256_checksum": "string",
                            },
                        },
                        "output_file_path": "string",
                        "script": "string",
                    },
                    "enforce": {
                        "interpreter": "string",
                        "args": ["string"],
                        "file": {
                            "allow_insecure": False,
                            "gcs": {
                                "bucket": "string",
                                "object": "string",
                                "generation": 0,
                            },
                            "local_path": "string",
                            "remote": {
                                "uri": "string",
                                "sha256_checksum": "string",
                            },
                        },
                        "output_file_path": "string",
                        "script": "string",
                    },
                },
                "file": {
                    "path": "string",
                    "state": "string",
                    "content": "string",
                    "file": {
                        "allow_insecure": False,
                        "gcs": {
                            "bucket": "string",
                            "object": "string",
                            "generation": 0,
                        },
                        "local_path": "string",
                        "remote": {
                            "uri": "string",
                            "sha256_checksum": "string",
                        },
                    },
                    "permissions": "string",
                },
                "pkg": {
                    "desired_state": "string",
                    "apt": {
                        "name": "string",
                    },
                    "deb": {
                        "source": {
                            "allow_insecure": False,
                            "gcs": {
                                "bucket": "string",
                                "object": "string",
                                "generation": 0,
                            },
                            "local_path": "string",
                            "remote": {
                                "uri": "string",
                                "sha256_checksum": "string",
                            },
                        },
                        "pull_deps": False,
                    },
                    "googet": {
                        "name": "string",
                    },
                    "msi": {
                        "source": {
                            "allow_insecure": False,
                            "gcs": {
                                "bucket": "string",
                                "object": "string",
                                "generation": 0,
                            },
                            "local_path": "string",
                            "remote": {
                                "uri": "string",
                                "sha256_checksum": "string",
                            },
                        },
                        "properties": ["string"],
                    },
                    "rpm": {
                        "source": {
                            "allow_insecure": False,
                            "gcs": {
                                "bucket": "string",
                                "object": "string",
                                "generation": 0,
                            },
                            "local_path": "string",
                            "remote": {
                                "uri": "string",
                                "sha256_checksum": "string",
                            },
                        },
                        "pull_deps": False,
                    },
                    "yum": {
                        "name": "string",
                    },
                    "zypper": {
                        "name": "string",
                    },
                },
                "repository": {
                    "apt": {
                        "archive_type": "string",
                        "components": ["string"],
                        "distribution": "string",
                        "uri": "string",
                        "gpg_key": "string",
                    },
                    "goo": {
                        "name": "string",
                        "url": "string",
                    },
                    "yum": {
                        "base_url": "string",
                        "id": "string",
                        "display_name": "string",
                        "gpg_keys": ["string"],
                    },
                    "zypper": {
                        "base_url": "string",
                        "id": "string",
                        "display_name": "string",
                        "gpg_keys": ["string"],
                    },
                },
            }],
            "inventory_filters": [{
                "os_short_name": "string",
                "os_version": "string",
            }],
        }],
        "allow_no_resource_group_match": False,
        "description": "string",
    }],
    rollout={
        "disruption_budget": {
            "fixed": 0,
            "percent": 0,
        },
        "min_wait_duration": "string",
    },
    description="string",
    name="string",
    project="string",
    skip_await_rollout=False)
const osPolicyAssignmentResource = new gcp.osconfig.OsPolicyAssignment("osPolicyAssignmentResource", {
    instanceFilter: {
        all: false,
        exclusionLabels: [{
            labels: {
                string: "string",
            },
        }],
        inclusionLabels: [{
            labels: {
                string: "string",
            },
        }],
        inventories: [{
            osShortName: "string",
            osVersion: "string",
        }],
    },
    location: "string",
    osPolicies: [{
        id: "string",
        mode: "string",
        resourceGroups: [{
            resources: [{
                id: "string",
                exec: {
                    validate: {
                        interpreter: "string",
                        args: ["string"],
                        file: {
                            allowInsecure: false,
                            gcs: {
                                bucket: "string",
                                object: "string",
                                generation: 0,
                            },
                            localPath: "string",
                            remote: {
                                uri: "string",
                                sha256Checksum: "string",
                            },
                        },
                        outputFilePath: "string",
                        script: "string",
                    },
                    enforce: {
                        interpreter: "string",
                        args: ["string"],
                        file: {
                            allowInsecure: false,
                            gcs: {
                                bucket: "string",
                                object: "string",
                                generation: 0,
                            },
                            localPath: "string",
                            remote: {
                                uri: "string",
                                sha256Checksum: "string",
                            },
                        },
                        outputFilePath: "string",
                        script: "string",
                    },
                },
                file: {
                    path: "string",
                    state: "string",
                    content: "string",
                    file: {
                        allowInsecure: false,
                        gcs: {
                            bucket: "string",
                            object: "string",
                            generation: 0,
                        },
                        localPath: "string",
                        remote: {
                            uri: "string",
                            sha256Checksum: "string",
                        },
                    },
                    permissions: "string",
                },
                pkg: {
                    desiredState: "string",
                    apt: {
                        name: "string",
                    },
                    deb: {
                        source: {
                            allowInsecure: false,
                            gcs: {
                                bucket: "string",
                                object: "string",
                                generation: 0,
                            },
                            localPath: "string",
                            remote: {
                                uri: "string",
                                sha256Checksum: "string",
                            },
                        },
                        pullDeps: false,
                    },
                    googet: {
                        name: "string",
                    },
                    msi: {
                        source: {
                            allowInsecure: false,
                            gcs: {
                                bucket: "string",
                                object: "string",
                                generation: 0,
                            },
                            localPath: "string",
                            remote: {
                                uri: "string",
                                sha256Checksum: "string",
                            },
                        },
                        properties: ["string"],
                    },
                    rpm: {
                        source: {
                            allowInsecure: false,
                            gcs: {
                                bucket: "string",
                                object: "string",
                                generation: 0,
                            },
                            localPath: "string",
                            remote: {
                                uri: "string",
                                sha256Checksum: "string",
                            },
                        },
                        pullDeps: false,
                    },
                    yum: {
                        name: "string",
                    },
                    zypper: {
                        name: "string",
                    },
                },
                repository: {
                    apt: {
                        archiveType: "string",
                        components: ["string"],
                        distribution: "string",
                        uri: "string",
                        gpgKey: "string",
                    },
                    goo: {
                        name: "string",
                        url: "string",
                    },
                    yum: {
                        baseUrl: "string",
                        id: "string",
                        displayName: "string",
                        gpgKeys: ["string"],
                    },
                    zypper: {
                        baseUrl: "string",
                        id: "string",
                        displayName: "string",
                        gpgKeys: ["string"],
                    },
                },
            }],
            inventoryFilters: [{
                osShortName: "string",
                osVersion: "string",
            }],
        }],
        allowNoResourceGroupMatch: false,
        description: "string",
    }],
    rollout: {
        disruptionBudget: {
            fixed: 0,
            percent: 0,
        },
        minWaitDuration: "string",
    },
    description: "string",
    name: "string",
    project: "string",
    skipAwaitRollout: false,
});
type: gcp:osconfig:OsPolicyAssignment
properties:
    description: string
    instanceFilter:
        all: false
        exclusionLabels:
            - labels:
                string: string
        inclusionLabels:
            - labels:
                string: string
        inventories:
            - osShortName: string
              osVersion: string
    location: string
    name: string
    osPolicies:
        - allowNoResourceGroupMatch: false
          description: string
          id: string
          mode: string
          resourceGroups:
            - inventoryFilters:
                - osShortName: string
                  osVersion: string
              resources:
                - exec:
                    enforce:
                        args:
                            - string
                        file:
                            allowInsecure: false
                            gcs:
                                bucket: string
                                generation: 0
                                object: string
                            localPath: string
                            remote:
                                sha256Checksum: string
                                uri: string
                        interpreter: string
                        outputFilePath: string
                        script: string
                    validate:
                        args:
                            - string
                        file:
                            allowInsecure: false
                            gcs:
                                bucket: string
                                generation: 0
                                object: string
                            localPath: string
                            remote:
                                sha256Checksum: string
                                uri: string
                        interpreter: string
                        outputFilePath: string
                        script: string
                  file:
                    content: string
                    file:
                        allowInsecure: false
                        gcs:
                            bucket: string
                            generation: 0
                            object: string
                        localPath: string
                        remote:
                            sha256Checksum: string
                            uri: string
                    path: string
                    permissions: string
                    state: string
                  id: string
                  pkg:
                    apt:
                        name: string
                    deb:
                        pullDeps: false
                        source:
                            allowInsecure: false
                            gcs:
                                bucket: string
                                generation: 0
                                object: string
                            localPath: string
                            remote:
                                sha256Checksum: string
                                uri: string
                    desiredState: string
                    googet:
                        name: string
                    msi:
                        properties:
                            - string
                        source:
                            allowInsecure: false
                            gcs:
                                bucket: string
                                generation: 0
                                object: string
                            localPath: string
                            remote:
                                sha256Checksum: string
                                uri: string
                    rpm:
                        pullDeps: false
                        source:
                            allowInsecure: false
                            gcs:
                                bucket: string
                                generation: 0
                                object: string
                            localPath: string
                            remote:
                                sha256Checksum: string
                                uri: string
                    yum:
                        name: string
                    zypper:
                        name: string
                  repository:
                    apt:
                        archiveType: string
                        components:
                            - string
                        distribution: string
                        gpgKey: string
                        uri: string
                    goo:
                        name: string
                        url: string
                    yum:
                        baseUrl: string
                        displayName: string
                        gpgKeys:
                            - string
                        id: string
                    zypper:
                        baseUrl: string
                        displayName: string
                        gpgKeys:
                            - string
                        id: string
    project: string
    rollout:
        disruptionBudget:
            fixed: 0
            percent: 0
        minWaitDuration: string
    skipAwaitRollout: false
OsPolicyAssignment Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The OsPolicyAssignment resource accepts the following input properties:
- InstanceFilter OsPolicy Assignment Instance Filter 
- Filter to select VMs. Structure is documented below.
- Location string
- The location for the resource
- OsPolicies List<OsPolicy Assignment Os Policy> 
- List of OS policies to be applied to the VMs. Structure is documented below.
- Rollout
OsPolicy Assignment Rollout 
- Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted. Structure is documented below.
- Description string
- OS policy assignment description. Length of the description is limited to 1024 characters.
- Name string
- Resource name.
- Project string
- The project for the resource
- SkipAwait boolRollout 
- Set to true to skip awaiting rollout during resource creation and update.
- InstanceFilter OsPolicy Assignment Instance Filter Args 
- Filter to select VMs. Structure is documented below.
- Location string
- The location for the resource
- OsPolicies []OsPolicy Assignment Os Policy Args 
- List of OS policies to be applied to the VMs. Structure is documented below.
- Rollout
OsPolicy Assignment Rollout Args 
- Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted. Structure is documented below.
- Description string
- OS policy assignment description. Length of the description is limited to 1024 characters.
- Name string
- Resource name.
- Project string
- The project for the resource
- SkipAwait boolRollout 
- Set to true to skip awaiting rollout during resource creation and update.
- instanceFilter OsPolicy Assignment Instance Filter 
- Filter to select VMs. Structure is documented below.
- location String
- The location for the resource
- osPolicies List<OsPolicy Assignment Os Policy> 
- List of OS policies to be applied to the VMs. Structure is documented below.
- rollout
OsPolicy Assignment Rollout 
- Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted. Structure is documented below.
- description String
- OS policy assignment description. Length of the description is limited to 1024 characters.
- name String
- Resource name.
- project String
- The project for the resource
- skipAwait BooleanRollout 
- Set to true to skip awaiting rollout during resource creation and update.
- instanceFilter OsPolicy Assignment Instance Filter 
- Filter to select VMs. Structure is documented below.
- location string
- The location for the resource
- osPolicies OsPolicy Assignment Os Policy[] 
- List of OS policies to be applied to the VMs. Structure is documented below.
- rollout
OsPolicy Assignment Rollout 
- Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted. Structure is documented below.
- description string
- OS policy assignment description. Length of the description is limited to 1024 characters.
- name string
- Resource name.
- project string
- The project for the resource
- skipAwait booleanRollout 
- Set to true to skip awaiting rollout during resource creation and update.
- instance_filter OsPolicy Assignment Instance Filter Args 
- Filter to select VMs. Structure is documented below.
- location str
- The location for the resource
- os_policies Sequence[OsPolicy Assignment Os Policy Args] 
- List of OS policies to be applied to the VMs. Structure is documented below.
- rollout
OsPolicy Assignment Rollout Args 
- Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted. Structure is documented below.
- description str
- OS policy assignment description. Length of the description is limited to 1024 characters.
- name str
- Resource name.
- project str
- The project for the resource
- skip_await_ boolrollout 
- Set to true to skip awaiting rollout during resource creation and update.
- instanceFilter Property Map
- Filter to select VMs. Structure is documented below.
- location String
- The location for the resource
- osPolicies List<Property Map>
- List of OS policies to be applied to the VMs. Structure is documented below.
- rollout Property Map
- Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted. Structure is documented below.
- description String
- OS policy assignment description. Length of the description is limited to 1024 characters.
- name String
- Resource name.
- project String
- The project for the resource
- skipAwait BooleanRollout 
- Set to true to skip awaiting rollout during resource creation and update.
Outputs
All input properties are implicitly available as output properties. Additionally, the OsPolicyAssignment resource produces the following output properties:
- Baseline bool
- Output only. Indicates that this revision has been successfully
rolled out in this zone and new VMs will be assigned OS policies from this
revision. For a given OS policy assignment, there is only one revision with
a value of truefor this field.
- Deleted bool
- Output only. Indicates that this revision deletes the OS policy assignment.
- Etag string
- The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
- Id string
- The provider-assigned unique ID for this managed resource.
- Reconciling bool
- Output only. Indicates that reconciliation is in progress
for the revision. This value is truewhen therollout_stateis one of:
- RevisionCreate stringTime 
- Output only. The timestamp that the revision was created.
- RevisionId string
- Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
- RolloutState string
- Output only. OS policy assignment rollout state
- Uid string
- Output only. Server generated unique id for the OS policy assignment resource.
- Baseline bool
- Output only. Indicates that this revision has been successfully
rolled out in this zone and new VMs will be assigned OS policies from this
revision. For a given OS policy assignment, there is only one revision with
a value of truefor this field.
- Deleted bool
- Output only. Indicates that this revision deletes the OS policy assignment.
- Etag string
- The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
- Id string
- The provider-assigned unique ID for this managed resource.
- Reconciling bool
- Output only. Indicates that reconciliation is in progress
for the revision. This value is truewhen therollout_stateis one of:
- RevisionCreate stringTime 
- Output only. The timestamp that the revision was created.
- RevisionId string
- Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
- RolloutState string
- Output only. OS policy assignment rollout state
- Uid string
- Output only. Server generated unique id for the OS policy assignment resource.
- baseline Boolean
- Output only. Indicates that this revision has been successfully
rolled out in this zone and new VMs will be assigned OS policies from this
revision. For a given OS policy assignment, there is only one revision with
a value of truefor this field.
- deleted Boolean
- Output only. Indicates that this revision deletes the OS policy assignment.
- etag String
- The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
- id String
- The provider-assigned unique ID for this managed resource.
- reconciling Boolean
- Output only. Indicates that reconciliation is in progress
for the revision. This value is truewhen therollout_stateis one of:
- revisionCreate StringTime 
- Output only. The timestamp that the revision was created.
- revisionId String
- Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
- rolloutState String
- Output only. OS policy assignment rollout state
- uid String
- Output only. Server generated unique id for the OS policy assignment resource.
- baseline boolean
- Output only. Indicates that this revision has been successfully
rolled out in this zone and new VMs will be assigned OS policies from this
revision. For a given OS policy assignment, there is only one revision with
a value of truefor this field.
- deleted boolean
- Output only. Indicates that this revision deletes the OS policy assignment.
- etag string
- The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
- id string
- The provider-assigned unique ID for this managed resource.
- reconciling boolean
- Output only. Indicates that reconciliation is in progress
for the revision. This value is truewhen therollout_stateis one of:
- revisionCreate stringTime 
- Output only. The timestamp that the revision was created.
- revisionId string
- Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
- rolloutState string
- Output only. OS policy assignment rollout state
- uid string
- Output only. Server generated unique id for the OS policy assignment resource.
- baseline bool
- Output only. Indicates that this revision has been successfully
rolled out in this zone and new VMs will be assigned OS policies from this
revision. For a given OS policy assignment, there is only one revision with
a value of truefor this field.
- deleted bool
- Output only. Indicates that this revision deletes the OS policy assignment.
- etag str
- The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
- id str
- The provider-assigned unique ID for this managed resource.
- reconciling bool
- Output only. Indicates that reconciliation is in progress
for the revision. This value is truewhen therollout_stateis one of:
- revision_create_ strtime 
- Output only. The timestamp that the revision was created.
- revision_id str
- Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
- rollout_state str
- Output only. OS policy assignment rollout state
- uid str
- Output only. Server generated unique id for the OS policy assignment resource.
- baseline Boolean
- Output only. Indicates that this revision has been successfully
rolled out in this zone and new VMs will be assigned OS policies from this
revision. For a given OS policy assignment, there is only one revision with
a value of truefor this field.
- deleted Boolean
- Output only. Indicates that this revision deletes the OS policy assignment.
- etag String
- The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
- id String
- The provider-assigned unique ID for this managed resource.
- reconciling Boolean
- Output only. Indicates that reconciliation is in progress
for the revision. This value is truewhen therollout_stateis one of:
- revisionCreate StringTime 
- Output only. The timestamp that the revision was created.
- revisionId String
- Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
- rolloutState String
- Output only. OS policy assignment rollout state
- uid String
- Output only. Server generated unique id for the OS policy assignment resource.
Look up Existing OsPolicyAssignment Resource
Get an existing OsPolicyAssignment resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: OsPolicyAssignmentState, opts?: CustomResourceOptions): OsPolicyAssignment@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        baseline: Optional[bool] = None,
        deleted: Optional[bool] = None,
        description: Optional[str] = None,
        etag: Optional[str] = None,
        instance_filter: Optional[OsPolicyAssignmentInstanceFilterArgs] = None,
        location: Optional[str] = None,
        name: Optional[str] = None,
        os_policies: Optional[Sequence[OsPolicyAssignmentOsPolicyArgs]] = None,
        project: Optional[str] = None,
        reconciling: Optional[bool] = None,
        revision_create_time: Optional[str] = None,
        revision_id: Optional[str] = None,
        rollout: Optional[OsPolicyAssignmentRolloutArgs] = None,
        rollout_state: Optional[str] = None,
        skip_await_rollout: Optional[bool] = None,
        uid: Optional[str] = None) -> OsPolicyAssignmentfunc GetOsPolicyAssignment(ctx *Context, name string, id IDInput, state *OsPolicyAssignmentState, opts ...ResourceOption) (*OsPolicyAssignment, error)public static OsPolicyAssignment Get(string name, Input<string> id, OsPolicyAssignmentState? state, CustomResourceOptions? opts = null)public static OsPolicyAssignment get(String name, Output<String> id, OsPolicyAssignmentState state, CustomResourceOptions options)resources:  _:    type: gcp:osconfig:OsPolicyAssignment    get:      id: ${id}- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Baseline bool
- Output only. Indicates that this revision has been successfully
rolled out in this zone and new VMs will be assigned OS policies from this
revision. For a given OS policy assignment, there is only one revision with
a value of truefor this field.
- Deleted bool
- Output only. Indicates that this revision deletes the OS policy assignment.
- Description string
- OS policy assignment description. Length of the description is limited to 1024 characters.
- Etag string
- The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
- InstanceFilter OsPolicy Assignment Instance Filter 
- Filter to select VMs. Structure is documented below.
- Location string
- The location for the resource
- Name string
- Resource name.
- OsPolicies List<OsPolicy Assignment Os Policy> 
- List of OS policies to be applied to the VMs. Structure is documented below.
- Project string
- The project for the resource
- Reconciling bool
- Output only. Indicates that reconciliation is in progress
for the revision. This value is truewhen therollout_stateis one of:
- RevisionCreate stringTime 
- Output only. The timestamp that the revision was created.
- RevisionId string
- Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
- Rollout
OsPolicy Assignment Rollout 
- Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted. Structure is documented below.
- RolloutState string
- Output only. OS policy assignment rollout state
- SkipAwait boolRollout 
- Set to true to skip awaiting rollout during resource creation and update.
- Uid string
- Output only. Server generated unique id for the OS policy assignment resource.
- Baseline bool
- Output only. Indicates that this revision has been successfully
rolled out in this zone and new VMs will be assigned OS policies from this
revision. For a given OS policy assignment, there is only one revision with
a value of truefor this field.
- Deleted bool
- Output only. Indicates that this revision deletes the OS policy assignment.
- Description string
- OS policy assignment description. Length of the description is limited to 1024 characters.
- Etag string
- The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
- InstanceFilter OsPolicy Assignment Instance Filter Args 
- Filter to select VMs. Structure is documented below.
- Location string
- The location for the resource
- Name string
- Resource name.
- OsPolicies []OsPolicy Assignment Os Policy Args 
- List of OS policies to be applied to the VMs. Structure is documented below.
- Project string
- The project for the resource
- Reconciling bool
- Output only. Indicates that reconciliation is in progress
for the revision. This value is truewhen therollout_stateis one of:
- RevisionCreate stringTime 
- Output only. The timestamp that the revision was created.
- RevisionId string
- Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
- Rollout
OsPolicy Assignment Rollout Args 
- Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted. Structure is documented below.
- RolloutState string
- Output only. OS policy assignment rollout state
- SkipAwait boolRollout 
- Set to true to skip awaiting rollout during resource creation and update.
- Uid string
- Output only. Server generated unique id for the OS policy assignment resource.
- baseline Boolean
- Output only. Indicates that this revision has been successfully
rolled out in this zone and new VMs will be assigned OS policies from this
revision. For a given OS policy assignment, there is only one revision with
a value of truefor this field.
- deleted Boolean
- Output only. Indicates that this revision deletes the OS policy assignment.
- description String
- OS policy assignment description. Length of the description is limited to 1024 characters.
- etag String
- The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
- instanceFilter OsPolicy Assignment Instance Filter 
- Filter to select VMs. Structure is documented below.
- location String
- The location for the resource
- name String
- Resource name.
- osPolicies List<OsPolicy Assignment Os Policy> 
- List of OS policies to be applied to the VMs. Structure is documented below.
- project String
- The project for the resource
- reconciling Boolean
- Output only. Indicates that reconciliation is in progress
for the revision. This value is truewhen therollout_stateis one of:
- revisionCreate StringTime 
- Output only. The timestamp that the revision was created.
- revisionId String
- Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
- rollout
OsPolicy Assignment Rollout 
- Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted. Structure is documented below.
- rolloutState String
- Output only. OS policy assignment rollout state
- skipAwait BooleanRollout 
- Set to true to skip awaiting rollout during resource creation and update.
- uid String
- Output only. Server generated unique id for the OS policy assignment resource.
- baseline boolean
- Output only. Indicates that this revision has been successfully
rolled out in this zone and new VMs will be assigned OS policies from this
revision. For a given OS policy assignment, there is only one revision with
a value of truefor this field.
- deleted boolean
- Output only. Indicates that this revision deletes the OS policy assignment.
- description string
- OS policy assignment description. Length of the description is limited to 1024 characters.
- etag string
- The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
- instanceFilter OsPolicy Assignment Instance Filter 
- Filter to select VMs. Structure is documented below.
- location string
- The location for the resource
- name string
- Resource name.
- osPolicies OsPolicy Assignment Os Policy[] 
- List of OS policies to be applied to the VMs. Structure is documented below.
- project string
- The project for the resource
- reconciling boolean
- Output only. Indicates that reconciliation is in progress
for the revision. This value is truewhen therollout_stateis one of:
- revisionCreate stringTime 
- Output only. The timestamp that the revision was created.
- revisionId string
- Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
- rollout
OsPolicy Assignment Rollout 
- Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted. Structure is documented below.
- rolloutState string
- Output only. OS policy assignment rollout state
- skipAwait booleanRollout 
- Set to true to skip awaiting rollout during resource creation and update.
- uid string
- Output only. Server generated unique id for the OS policy assignment resource.
- baseline bool
- Output only. Indicates that this revision has been successfully
rolled out in this zone and new VMs will be assigned OS policies from this
revision. For a given OS policy assignment, there is only one revision with
a value of truefor this field.
- deleted bool
- Output only. Indicates that this revision deletes the OS policy assignment.
- description str
- OS policy assignment description. Length of the description is limited to 1024 characters.
- etag str
- The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
- instance_filter OsPolicy Assignment Instance Filter Args 
- Filter to select VMs. Structure is documented below.
- location str
- The location for the resource
- name str
- Resource name.
- os_policies Sequence[OsPolicy Assignment Os Policy Args] 
- List of OS policies to be applied to the VMs. Structure is documented below.
- project str
- The project for the resource
- reconciling bool
- Output only. Indicates that reconciliation is in progress
for the revision. This value is truewhen therollout_stateis one of:
- revision_create_ strtime 
- Output only. The timestamp that the revision was created.
- revision_id str
- Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
- rollout
OsPolicy Assignment Rollout Args 
- Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted. Structure is documented below.
- rollout_state str
- Output only. OS policy assignment rollout state
- skip_await_ boolrollout 
- Set to true to skip awaiting rollout during resource creation and update.
- uid str
- Output only. Server generated unique id for the OS policy assignment resource.
- baseline Boolean
- Output only. Indicates that this revision has been successfully
rolled out in this zone and new VMs will be assigned OS policies from this
revision. For a given OS policy assignment, there is only one revision with
a value of truefor this field.
- deleted Boolean
- Output only. Indicates that this revision deletes the OS policy assignment.
- description String
- OS policy assignment description. Length of the description is limited to 1024 characters.
- etag String
- The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
- instanceFilter Property Map
- Filter to select VMs. Structure is documented below.
- location String
- The location for the resource
- name String
- Resource name.
- osPolicies List<Property Map>
- List of OS policies to be applied to the VMs. Structure is documented below.
- project String
- The project for the resource
- reconciling Boolean
- Output only. Indicates that reconciliation is in progress
for the revision. This value is truewhen therollout_stateis one of:
- revisionCreate StringTime 
- Output only. The timestamp that the revision was created.
- revisionId String
- Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
- rollout Property Map
- Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted. Structure is documented below.
- rolloutState String
- Output only. OS policy assignment rollout state
- skipAwait BooleanRollout 
- Set to true to skip awaiting rollout during resource creation and update.
- uid String
- Output only. Server generated unique id for the OS policy assignment resource.
Supporting Types
OsPolicyAssignmentInstanceFilter, OsPolicyAssignmentInstanceFilterArgs          
- All bool
- Target all VMs in the project. If true, no other criteria is permitted.
- ExclusionLabels List<OsPolicy Assignment Instance Filter Exclusion Label> 
- List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM. Structure is documented below.
- InclusionLabels List<OsPolicy Assignment Instance Filter Inclusion Label> 
- List of label sets used for VM inclusion. If
the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM. Structure is documented below.
- Inventories
List<OsPolicy Assignment Instance Filter Inventory> 
- List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories. Structure is documented below.
- All bool
- Target all VMs in the project. If true, no other criteria is permitted.
- ExclusionLabels []OsPolicy Assignment Instance Filter Exclusion Label 
- List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM. Structure is documented below.
- InclusionLabels []OsPolicy Assignment Instance Filter Inclusion Label 
- List of label sets used for VM inclusion. If
the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM. Structure is documented below.
- Inventories
[]OsPolicy Assignment Instance Filter Inventory 
- List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories. Structure is documented below.
- all Boolean
- Target all VMs in the project. If true, no other criteria is permitted.
- exclusionLabels List<OsPolicy Assignment Instance Filter Exclusion Label> 
- List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM. Structure is documented below.
- inclusionLabels List<OsPolicy Assignment Instance Filter Inclusion Label> 
- List of label sets used for VM inclusion. If
the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM. Structure is documented below.
- inventories
List<OsPolicy Assignment Instance Filter Inventory> 
- List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories. Structure is documented below.
- all boolean
- Target all VMs in the project. If true, no other criteria is permitted.
- exclusionLabels OsPolicy Assignment Instance Filter Exclusion Label[] 
- List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM. Structure is documented below.
- inclusionLabels OsPolicy Assignment Instance Filter Inclusion Label[] 
- List of label sets used for VM inclusion. If
the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM. Structure is documented below.
- inventories
OsPolicy Assignment Instance Filter Inventory[] 
- List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories. Structure is documented below.
- all bool
- Target all VMs in the project. If true, no other criteria is permitted.
- exclusion_labels Sequence[OsPolicy Assignment Instance Filter Exclusion Label] 
- List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM. Structure is documented below.
- inclusion_labels Sequence[OsPolicy Assignment Instance Filter Inclusion Label] 
- List of label sets used for VM inclusion. If
the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM. Structure is documented below.
- inventories
Sequence[OsPolicy Assignment Instance Filter Inventory] 
- List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories. Structure is documented below.
- all Boolean
- Target all VMs in the project. If true, no other criteria is permitted.
- exclusionLabels List<Property Map>
- List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM. Structure is documented below.
- inclusionLabels List<Property Map>
- List of label sets used for VM inclusion. If
the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM. Structure is documented below.
- inventories List<Property Map>
- List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories. Structure is documented below.
OsPolicyAssignmentInstanceFilterExclusionLabel, OsPolicyAssignmentInstanceFilterExclusionLabelArgs              
- Labels Dictionary<string, string>
- Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
- Labels map[string]string
- Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
- labels Map<String,String>
- Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
- labels {[key: string]: string}
- Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
- labels Mapping[str, str]
- Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
- labels Map<String>
- Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
OsPolicyAssignmentInstanceFilterInclusionLabel, OsPolicyAssignmentInstanceFilterInclusionLabelArgs              
- Labels Dictionary<string, string>
- Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
- Labels map[string]string
- Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
- labels Map<String,String>
- Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
- labels {[key: string]: string}
- Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
- labels Mapping[str, str]
- Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
- labels Map<String>
- Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
OsPolicyAssignmentInstanceFilterInventory, OsPolicyAssignmentInstanceFilterInventoryArgs            
- OsShort stringName 
- The OS short name
- OsVersion string
- The OS version Prefix matches are supported if
asterisk(*) is provided as the last character. For example, to match all
versions with a major version of 7, specify the following value for this field7.*An empty string matches all OS versions.
- OsShort stringName 
- The OS short name
- OsVersion string
- The OS version Prefix matches are supported if
asterisk(*) is provided as the last character. For example, to match all
versions with a major version of 7, specify the following value for this field7.*An empty string matches all OS versions.
- osShort StringName 
- The OS short name
- osVersion String
- The OS version Prefix matches are supported if
asterisk(*) is provided as the last character. For example, to match all
versions with a major version of 7, specify the following value for this field7.*An empty string matches all OS versions.
- osShort stringName 
- The OS short name
- osVersion string
- The OS version Prefix matches are supported if
asterisk(*) is provided as the last character. For example, to match all
versions with a major version of 7, specify the following value for this field7.*An empty string matches all OS versions.
- os_short_ strname 
- The OS short name
- os_version str
- The OS version Prefix matches are supported if
asterisk(*) is provided as the last character. For example, to match all
versions with a major version of 7, specify the following value for this field7.*An empty string matches all OS versions.
- osShort StringName 
- The OS short name
- osVersion String
- The OS version Prefix matches are supported if
asterisk(*) is provided as the last character. For example, to match all
versions with a major version of 7, specify the following value for this field7.*An empty string matches all OS versions.
OsPolicyAssignmentOsPolicy, OsPolicyAssignmentOsPolicyArgs          
- Id string
- The id of the OS policy with the following restrictions:- Must contain only lowercase letters, numbers, and hyphens.
- Must start with a letter.
- Must be between 1-63 characters.
- Must end with a number or a letter.
- Must be unique within the assignment.
 
- Mode string
- Policy mode Possible values are: MODE_UNSPECIFIED,VALIDATION,ENFORCEMENT.
- ResourceGroups List<OsPolicy Assignment Os Policy Resource Group> 
- List of resource groups for the policy. For a
particular VM, resource groups are evaluated in the order specified and the
first resource group that is applicable is selected and the rest are
ignored. If none of the resource groups are applicable for a VM, the VM is
considered to be non-compliant w.r.t this policy. This behavior can be
toggled by the flag allow_no_resource_group_matchStructure is documented below.
- AllowNo boolResource Group Match 
- This flag determines the OS
policy compliance status when none of the resource groups within the policy
are applicable for a VM. Set this value to trueif the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
- Description string
- Policy description. Length of the description is limited to 1024 characters.
- Id string
- The id of the OS policy with the following restrictions:- Must contain only lowercase letters, numbers, and hyphens.
- Must start with a letter.
- Must be between 1-63 characters.
- Must end with a number or a letter.
- Must be unique within the assignment.
 
- Mode string
- Policy mode Possible values are: MODE_UNSPECIFIED,VALIDATION,ENFORCEMENT.
- ResourceGroups []OsPolicy Assignment Os Policy Resource Group 
- List of resource groups for the policy. For a
particular VM, resource groups are evaluated in the order specified and the
first resource group that is applicable is selected and the rest are
ignored. If none of the resource groups are applicable for a VM, the VM is
considered to be non-compliant w.r.t this policy. This behavior can be
toggled by the flag allow_no_resource_group_matchStructure is documented below.
- AllowNo boolResource Group Match 
- This flag determines the OS
policy compliance status when none of the resource groups within the policy
are applicable for a VM. Set this value to trueif the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
- Description string
- Policy description. Length of the description is limited to 1024 characters.
- id String
- The id of the OS policy with the following restrictions:- Must contain only lowercase letters, numbers, and hyphens.
- Must start with a letter.
- Must be between 1-63 characters.
- Must end with a number or a letter.
- Must be unique within the assignment.
 
- mode String
- Policy mode Possible values are: MODE_UNSPECIFIED,VALIDATION,ENFORCEMENT.
- resourceGroups List<OsPolicy Assignment Os Policy Resource Group> 
- List of resource groups for the policy. For a
particular VM, resource groups are evaluated in the order specified and the
first resource group that is applicable is selected and the rest are
ignored. If none of the resource groups are applicable for a VM, the VM is
considered to be non-compliant w.r.t this policy. This behavior can be
toggled by the flag allow_no_resource_group_matchStructure is documented below.
- allowNo BooleanResource Group Match 
- This flag determines the OS
policy compliance status when none of the resource groups within the policy
are applicable for a VM. Set this value to trueif the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
- description String
- Policy description. Length of the description is limited to 1024 characters.
- id string
- The id of the OS policy with the following restrictions:- Must contain only lowercase letters, numbers, and hyphens.
- Must start with a letter.
- Must be between 1-63 characters.
- Must end with a number or a letter.
- Must be unique within the assignment.
 
- mode string
- Policy mode Possible values are: MODE_UNSPECIFIED,VALIDATION,ENFORCEMENT.
- resourceGroups OsPolicy Assignment Os Policy Resource Group[] 
- List of resource groups for the policy. For a
particular VM, resource groups are evaluated in the order specified and the
first resource group that is applicable is selected and the rest are
ignored. If none of the resource groups are applicable for a VM, the VM is
considered to be non-compliant w.r.t this policy. This behavior can be
toggled by the flag allow_no_resource_group_matchStructure is documented below.
- allowNo booleanResource Group Match 
- This flag determines the OS
policy compliance status when none of the resource groups within the policy
are applicable for a VM. Set this value to trueif the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
- description string
- Policy description. Length of the description is limited to 1024 characters.
- id str
- The id of the OS policy with the following restrictions:- Must contain only lowercase letters, numbers, and hyphens.
- Must start with a letter.
- Must be between 1-63 characters.
- Must end with a number or a letter.
- Must be unique within the assignment.
 
- mode str
- Policy mode Possible values are: MODE_UNSPECIFIED,VALIDATION,ENFORCEMENT.
- resource_groups Sequence[OsPolicy Assignment Os Policy Resource Group] 
- List of resource groups for the policy. For a
particular VM, resource groups are evaluated in the order specified and the
first resource group that is applicable is selected and the rest are
ignored. If none of the resource groups are applicable for a VM, the VM is
considered to be non-compliant w.r.t this policy. This behavior can be
toggled by the flag allow_no_resource_group_matchStructure is documented below.
- allow_no_ boolresource_ group_ match 
- This flag determines the OS
policy compliance status when none of the resource groups within the policy
are applicable for a VM. Set this value to trueif the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
- description str
- Policy description. Length of the description is limited to 1024 characters.
- id String
- The id of the OS policy with the following restrictions:- Must contain only lowercase letters, numbers, and hyphens.
- Must start with a letter.
- Must be between 1-63 characters.
- Must end with a number or a letter.
- Must be unique within the assignment.
 
- mode String
- Policy mode Possible values are: MODE_UNSPECIFIED,VALIDATION,ENFORCEMENT.
- resourceGroups List<Property Map>
- List of resource groups for the policy. For a
particular VM, resource groups are evaluated in the order specified and the
first resource group that is applicable is selected and the rest are
ignored. If none of the resource groups are applicable for a VM, the VM is
considered to be non-compliant w.r.t this policy. This behavior can be
toggled by the flag allow_no_resource_group_matchStructure is documented below.
- allowNo BooleanResource Group Match 
- This flag determines the OS
policy compliance status when none of the resource groups within the policy
are applicable for a VM. Set this value to trueif the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
- description String
- Policy description. Length of the description is limited to 1024 characters.
OsPolicyAssignmentOsPolicyResourceGroup, OsPolicyAssignmentOsPolicyResourceGroupArgs              
- Resources
List<OsPolicy Assignment Os Policy Resource Group Resource> 
- List of resources configured for this resource group. The resources are executed in the exact order specified here. Structure is documented below.
- InventoryFilters List<OsPolicy Assignment Os Policy Resource Group Inventory Filter> 
- List of inventory filters for the resource
group. The resources in this resource group are applied to the target VM if
it satisfies at least one of the following inventory filters. For example,
to apply this resource group to VMs running either RHELorCentOSoperating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally. Structure is documented below.
- Resources
[]OsPolicy Assignment Os Policy Resource Group Resource 
- List of resources configured for this resource group. The resources are executed in the exact order specified here. Structure is documented below.
- InventoryFilters []OsPolicy Assignment Os Policy Resource Group Inventory Filter 
- List of inventory filters for the resource
group. The resources in this resource group are applied to the target VM if
it satisfies at least one of the following inventory filters. For example,
to apply this resource group to VMs running either RHELorCentOSoperating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally. Structure is documented below.
- resources
List<OsPolicy Assignment Os Policy Resource Group Resource> 
- List of resources configured for this resource group. The resources are executed in the exact order specified here. Structure is documented below.
- inventoryFilters List<OsPolicy Assignment Os Policy Resource Group Inventory Filter> 
- List of inventory filters for the resource
group. The resources in this resource group are applied to the target VM if
it satisfies at least one of the following inventory filters. For example,
to apply this resource group to VMs running either RHELorCentOSoperating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally. Structure is documented below.
- resources
OsPolicy Assignment Os Policy Resource Group Resource[] 
- List of resources configured for this resource group. The resources are executed in the exact order specified here. Structure is documented below.
- inventoryFilters OsPolicy Assignment Os Policy Resource Group Inventory Filter[] 
- List of inventory filters for the resource
group. The resources in this resource group are applied to the target VM if
it satisfies at least one of the following inventory filters. For example,
to apply this resource group to VMs running either RHELorCentOSoperating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally. Structure is documented below.
- resources
Sequence[OsPolicy Assignment Os Policy Resource Group Resource] 
- List of resources configured for this resource group. The resources are executed in the exact order specified here. Structure is documented below.
- inventory_filters Sequence[OsPolicy Assignment Os Policy Resource Group Inventory Filter] 
- List of inventory filters for the resource
group. The resources in this resource group are applied to the target VM if
it satisfies at least one of the following inventory filters. For example,
to apply this resource group to VMs running either RHELorCentOSoperating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally. Structure is documented below.
- resources List<Property Map>
- List of resources configured for this resource group. The resources are executed in the exact order specified here. Structure is documented below.
- inventoryFilters List<Property Map>
- List of inventory filters for the resource
group. The resources in this resource group are applied to the target VM if
it satisfies at least one of the following inventory filters. For example,
to apply this resource group to VMs running either RHELorCentOSoperating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally. Structure is documented below.
OsPolicyAssignmentOsPolicyResourceGroupInventoryFilter, OsPolicyAssignmentOsPolicyResourceGroupInventoryFilterArgs                  
- OsShort stringName 
- The OS short name
- OsVersion string
- The OS version Prefix matches are supported if
asterisk(*) is provided as the last character. For example, to match all
versions with a major version of 7, specify the following value for this field7.*An empty string matches all OS versions.
- OsShort stringName 
- The OS short name
- OsVersion string
- The OS version Prefix matches are supported if
asterisk(*) is provided as the last character. For example, to match all
versions with a major version of 7, specify the following value for this field7.*An empty string matches all OS versions.
- osShort StringName 
- The OS short name
- osVersion String
- The OS version Prefix matches are supported if
asterisk(*) is provided as the last character. For example, to match all
versions with a major version of 7, specify the following value for this field7.*An empty string matches all OS versions.
- osShort stringName 
- The OS short name
- osVersion string
- The OS version Prefix matches are supported if
asterisk(*) is provided as the last character. For example, to match all
versions with a major version of 7, specify the following value for this field7.*An empty string matches all OS versions.
- os_short_ strname 
- The OS short name
- os_version str
- The OS version Prefix matches are supported if
asterisk(*) is provided as the last character. For example, to match all
versions with a major version of 7, specify the following value for this field7.*An empty string matches all OS versions.
- osShort StringName 
- The OS short name
- osVersion String
- The OS version Prefix matches are supported if
asterisk(*) is provided as the last character. For example, to match all
versions with a major version of 7, specify the following value for this field7.*An empty string matches all OS versions.
OsPolicyAssignmentOsPolicyResourceGroupResource, OsPolicyAssignmentOsPolicyResourceGroupResourceArgs                
- Id string
- The id of the resource with the following restrictions:- Must contain only lowercase letters, numbers, and hyphens.
- Must start with a letter.
- Must be between 1-63 characters.
- Must end with a number or a letter.
- Must be unique within the OS policy.
 
- Exec
OsPolicy Assignment Os Policy Resource Group Resource Exec 
- Exec resource Structure is documented below.
- File
OsPolicy Assignment Os Policy Resource Group Resource File 
- File resource Structure is documented below.
- Pkg
OsPolicy Assignment Os Policy Resource Group Resource Pkg 
- Package resource Structure is documented below.
- Repository
OsPolicy Assignment Os Policy Resource Group Resource Repository 
- Package repository resource Structure is documented below.
- Id string
- The id of the resource with the following restrictions:- Must contain only lowercase letters, numbers, and hyphens.
- Must start with a letter.
- Must be between 1-63 characters.
- Must end with a number or a letter.
- Must be unique within the OS policy.
 
- Exec
OsPolicy Assignment Os Policy Resource Group Resource Exec 
- Exec resource Structure is documented below.
- File
OsPolicy Assignment Os Policy Resource Group Resource File 
- File resource Structure is documented below.
- Pkg
OsPolicy Assignment Os Policy Resource Group Resource Pkg 
- Package resource Structure is documented below.
- Repository
OsPolicy Assignment Os Policy Resource Group Resource Repository 
- Package repository resource Structure is documented below.
- id String
- The id of the resource with the following restrictions:- Must contain only lowercase letters, numbers, and hyphens.
- Must start with a letter.
- Must be between 1-63 characters.
- Must end with a number or a letter.
- Must be unique within the OS policy.
 
- exec
OsPolicy Assignment Os Policy Resource Group Resource Exec 
- Exec resource Structure is documented below.
- file
OsPolicy Assignment Os Policy Resource Group Resource File 
- File resource Structure is documented below.
- pkg
OsPolicy Assignment Os Policy Resource Group Resource Pkg 
- Package resource Structure is documented below.
- repository
OsPolicy Assignment Os Policy Resource Group Resource Repository 
- Package repository resource Structure is documented below.
- id string
- The id of the resource with the following restrictions:- Must contain only lowercase letters, numbers, and hyphens.
- Must start with a letter.
- Must be between 1-63 characters.
- Must end with a number or a letter.
- Must be unique within the OS policy.
 
- exec
OsPolicy Assignment Os Policy Resource Group Resource Exec 
- Exec resource Structure is documented below.
- file
OsPolicy Assignment Os Policy Resource Group Resource File 
- File resource Structure is documented below.
- pkg
OsPolicy Assignment Os Policy Resource Group Resource Pkg 
- Package resource Structure is documented below.
- repository
OsPolicy Assignment Os Policy Resource Group Resource Repository 
- Package repository resource Structure is documented below.
- id str
- The id of the resource with the following restrictions:- Must contain only lowercase letters, numbers, and hyphens.
- Must start with a letter.
- Must be between 1-63 characters.
- Must end with a number or a letter.
- Must be unique within the OS policy.
 
- exec_
OsPolicy Assignment Os Policy Resource Group Resource Exec 
- Exec resource Structure is documented below.
- file
OsPolicy Assignment Os Policy Resource Group Resource File 
- File resource Structure is documented below.
- pkg
OsPolicy Assignment Os Policy Resource Group Resource Pkg 
- Package resource Structure is documented below.
- repository
OsPolicy Assignment Os Policy Resource Group Resource Repository 
- Package repository resource Structure is documented below.
- id String
- The id of the resource with the following restrictions:- Must contain only lowercase letters, numbers, and hyphens.
- Must start with a letter.
- Must be between 1-63 characters.
- Must end with a number or a letter.
- Must be unique within the OS policy.
 
- exec Property Map
- Exec resource Structure is documented below.
- file Property Map
- File resource Structure is documented below.
- pkg Property Map
- Package resource Structure is documented below.
- repository Property Map
- Package repository resource Structure is documented below.
OsPolicyAssignmentOsPolicyResourceGroupResourceExec, OsPolicyAssignmentOsPolicyResourceGroupResourceExecArgs                  
- Validate
OsPolicy Assignment Os Policy Resource Group Resource Exec Validate 
- What to run to validate this resource is in the desired state. An exit code of 100 indicates "in desired state", and exit code of 101 indicates "not in desired state". Any other exit code indicates a failure running validate. Structure is documented below.
- Enforce
OsPolicy Assignment Os Policy Resource Group Resource Exec Enforce 
- What to run to bring this resource into the desired state. An exit code of 100 indicates "success", any other exit code indicates a failure running enforce. Structure is documented below.
- Validate
OsPolicy Assignment Os Policy Resource Group Resource Exec Validate 
- What to run to validate this resource is in the desired state. An exit code of 100 indicates "in desired state", and exit code of 101 indicates "not in desired state". Any other exit code indicates a failure running validate. Structure is documented below.
- Enforce
OsPolicy Assignment Os Policy Resource Group Resource Exec Enforce 
- What to run to bring this resource into the desired state. An exit code of 100 indicates "success", any other exit code indicates a failure running enforce. Structure is documented below.
- validate
OsPolicy Assignment Os Policy Resource Group Resource Exec Validate 
- What to run to validate this resource is in the desired state. An exit code of 100 indicates "in desired state", and exit code of 101 indicates "not in desired state". Any other exit code indicates a failure running validate. Structure is documented below.
- enforce
OsPolicy Assignment Os Policy Resource Group Resource Exec Enforce 
- What to run to bring this resource into the desired state. An exit code of 100 indicates "success", any other exit code indicates a failure running enforce. Structure is documented below.
- validate
OsPolicy Assignment Os Policy Resource Group Resource Exec Validate 
- What to run to validate this resource is in the desired state. An exit code of 100 indicates "in desired state", and exit code of 101 indicates "not in desired state". Any other exit code indicates a failure running validate. Structure is documented below.
- enforce
OsPolicy Assignment Os Policy Resource Group Resource Exec Enforce 
- What to run to bring this resource into the desired state. An exit code of 100 indicates "success", any other exit code indicates a failure running enforce. Structure is documented below.
- validate
OsPolicy Assignment Os Policy Resource Group Resource Exec Validate 
- What to run to validate this resource is in the desired state. An exit code of 100 indicates "in desired state", and exit code of 101 indicates "not in desired state". Any other exit code indicates a failure running validate. Structure is documented below.
- enforce
OsPolicy Assignment Os Policy Resource Group Resource Exec Enforce 
- What to run to bring this resource into the desired state. An exit code of 100 indicates "success", any other exit code indicates a failure running enforce. Structure is documented below.
- validate Property Map
- What to run to validate this resource is in the desired state. An exit code of 100 indicates "in desired state", and exit code of 101 indicates "not in desired state". Any other exit code indicates a failure running validate. Structure is documented below.
- enforce Property Map
- What to run to bring this resource into the desired state. An exit code of 100 indicates "success", any other exit code indicates a failure running enforce. Structure is documented below.
OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforce, OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceArgs                    
- Interpreter string
- The script interpreter to use. Possible values
are: INTERPRETER_UNSPECIFIED,NONE,SHELL,POWERSHELL.
- Args List<string>
- Optional arguments to pass to the source during execution.
- File
OsPolicy Assignment Os Policy Resource Group Resource Exec Enforce File 
- A remote or local file. Structure is documented below.
- OutputFile stringPath 
- Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
- Script string
- An inline script. The size of the script is limited to 1024 characters.
- Interpreter string
- The script interpreter to use. Possible values
are: INTERPRETER_UNSPECIFIED,NONE,SHELL,POWERSHELL.
- Args []string
- Optional arguments to pass to the source during execution.
- File
OsPolicy Assignment Os Policy Resource Group Resource Exec Enforce File 
- A remote or local file. Structure is documented below.
- OutputFile stringPath 
- Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
- Script string
- An inline script. The size of the script is limited to 1024 characters.
- interpreter String
- The script interpreter to use. Possible values
are: INTERPRETER_UNSPECIFIED,NONE,SHELL,POWERSHELL.
- args List<String>
- Optional arguments to pass to the source during execution.
- file
OsPolicy Assignment Os Policy Resource Group Resource Exec Enforce File 
- A remote or local file. Structure is documented below.
- outputFile StringPath 
- Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
- script String
- An inline script. The size of the script is limited to 1024 characters.
- interpreter string
- The script interpreter to use. Possible values
are: INTERPRETER_UNSPECIFIED,NONE,SHELL,POWERSHELL.
- args string[]
- Optional arguments to pass to the source during execution.
- file
OsPolicy Assignment Os Policy Resource Group Resource Exec Enforce File 
- A remote or local file. Structure is documented below.
- outputFile stringPath 
- Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
- script string
- An inline script. The size of the script is limited to 1024 characters.
- interpreter str
- The script interpreter to use. Possible values
are: INTERPRETER_UNSPECIFIED,NONE,SHELL,POWERSHELL.
- args Sequence[str]
- Optional arguments to pass to the source during execution.
- file
OsPolicy Assignment Os Policy Resource Group Resource Exec Enforce File 
- A remote or local file. Structure is documented below.
- output_file_ strpath 
- Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
- script str
- An inline script. The size of the script is limited to 1024 characters.
- interpreter String
- The script interpreter to use. Possible values
are: INTERPRETER_UNSPECIFIED,NONE,SHELL,POWERSHELL.
- args List<String>
- Optional arguments to pass to the source during execution.
- file Property Map
- A remote or local file. Structure is documented below.
- outputFile StringPath 
- Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
- script String
- An inline script. The size of the script is limited to 1024 characters.
OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFile, OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileArgs                      
- AllowInsecure bool
- Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
- Gcs
OsPolicy Assignment Os Policy Resource Group Resource Exec Enforce File Gcs 
- A Cloud Storage object. Structure is documented below.
- LocalPath string
- A local path within the VM to use.
- Remote
OsPolicy Assignment Os Policy Resource Group Resource Exec Enforce File Remote 
- A generic remote file. Structure is documented below.
- AllowInsecure bool
- Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
- Gcs
OsPolicy Assignment Os Policy Resource Group Resource Exec Enforce File Gcs 
- A Cloud Storage object. Structure is documented below.
- LocalPath string
- A local path within the VM to use.
- Remote
OsPolicy Assignment Os Policy Resource Group Resource Exec Enforce File Remote 
- A generic remote file. Structure is documented below.
- allowInsecure Boolean
- Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
- gcs
OsPolicy Assignment Os Policy Resource Group Resource Exec Enforce File Gcs 
- A Cloud Storage object. Structure is documented below.
- localPath String
- A local path within the VM to use.
- remote
OsPolicy Assignment Os Policy Resource Group Resource Exec Enforce File Remote 
- A generic remote file. Structure is documented below.
- allowInsecure boolean
- Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
- gcs
OsPolicy Assignment Os Policy Resource Group Resource Exec Enforce File Gcs 
- A Cloud Storage object. Structure is documented below.
- localPath string
- A local path within the VM to use.
- remote
OsPolicy Assignment Os Policy Resource Group Resource Exec Enforce File Remote 
- A generic remote file. Structure is documented below.
- allow_insecure bool
- Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
- gcs
OsPolicy Assignment Os Policy Resource Group Resource Exec Enforce File Gcs 
- A Cloud Storage object. Structure is documented below.
- local_path str
- A local path within the VM to use.
- remote
OsPolicy Assignment Os Policy Resource Group Resource Exec Enforce File Remote 
- A generic remote file. Structure is documented below.
- allowInsecure Boolean
- Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
- gcs Property Map
- A Cloud Storage object. Structure is documented below.
- localPath String
- A local path within the VM to use.
- remote Property Map
- A generic remote file. Structure is documented below.
OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileGcs, OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileGcsArgs                        
- Bucket string
- Bucket of the Cloud Storage object.
- Object string
- Name of the Cloud Storage object.
- Generation int
- Generation number of the Cloud Storage object.
- Bucket string
- Bucket of the Cloud Storage object.
- Object string
- Name of the Cloud Storage object.
- Generation int
- Generation number of the Cloud Storage object.
- bucket String
- Bucket of the Cloud Storage object.
- object String
- Name of the Cloud Storage object.
- generation Integer
- Generation number of the Cloud Storage object.
- bucket string
- Bucket of the Cloud Storage object.
- object string
- Name of the Cloud Storage object.
- generation number
- Generation number of the Cloud Storage object.
- bucket str
- Bucket of the Cloud Storage object.
- object str
- Name of the Cloud Storage object.
- generation int
- Generation number of the Cloud Storage object.
- bucket String
- Bucket of the Cloud Storage object.
- object String
- Name of the Cloud Storage object.
- generation Number
- Generation number of the Cloud Storage object.
OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileRemote, OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileRemoteArgs                        
- Uri string
- URI from which to fetch the object. It should contain
both the protocol and path following the format {protocol}://{location}.
- Sha256Checksum string
- SHA256 checksum of the remote file.
- Uri string
- URI from which to fetch the object. It should contain
both the protocol and path following the format {protocol}://{location}.
- Sha256Checksum string
- SHA256 checksum of the remote file.
- uri String
- URI from which to fetch the object. It should contain
both the protocol and path following the format {protocol}://{location}.
- sha256Checksum String
- SHA256 checksum of the remote file.
- uri string
- URI from which to fetch the object. It should contain
both the protocol and path following the format {protocol}://{location}.
- sha256Checksum string
- SHA256 checksum of the remote file.
- uri str
- URI from which to fetch the object. It should contain
both the protocol and path following the format {protocol}://{location}.
- sha256_checksum str
- SHA256 checksum of the remote file.
- uri String
- URI from which to fetch the object. It should contain
both the protocol and path following the format {protocol}://{location}.
- sha256Checksum String
- SHA256 checksum of the remote file.
OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidate, OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateArgs                    
- Interpreter string
- The script interpreter to use. Possible values
are: INTERPRETER_UNSPECIFIED,NONE,SHELL,POWERSHELL.
- Args List<string>
- Optional arguments to pass to the source during execution.
- File
OsPolicy Assignment Os Policy Resource Group Resource Exec Validate File 
- A remote or local file. Structure is documented below.
- OutputFile stringPath 
- Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
- Script string
- An inline script. The size of the script is limited to 1024 characters.
- Interpreter string
- The script interpreter to use. Possible values
are: INTERPRETER_UNSPECIFIED,NONE,SHELL,POWERSHELL.
- Args []string
- Optional arguments to pass to the source during execution.
- File
OsPolicy Assignment Os Policy Resource Group Resource Exec Validate File 
- A remote or local file. Structure is documented below.
- OutputFile stringPath 
- Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
- Script string
- An inline script. The size of the script is limited to 1024 characters.
- interpreter String
- The script interpreter to use. Possible values
are: INTERPRETER_UNSPECIFIED,NONE,SHELL,POWERSHELL.
- args List<String>
- Optional arguments to pass to the source during execution.
- file
OsPolicy Assignment Os Policy Resource Group Resource Exec Validate File 
- A remote or local file. Structure is documented below.
- outputFile StringPath 
- Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
- script String
- An inline script. The size of the script is limited to 1024 characters.
- interpreter string
- The script interpreter to use. Possible values
are: INTERPRETER_UNSPECIFIED,NONE,SHELL,POWERSHELL.
- args string[]
- Optional arguments to pass to the source during execution.
- file
OsPolicy Assignment Os Policy Resource Group Resource Exec Validate File 
- A remote or local file. Structure is documented below.
- outputFile stringPath 
- Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
- script string
- An inline script. The size of the script is limited to 1024 characters.
- interpreter str
- The script interpreter to use. Possible values
are: INTERPRETER_UNSPECIFIED,NONE,SHELL,POWERSHELL.
- args Sequence[str]
- Optional arguments to pass to the source during execution.
- file
OsPolicy Assignment Os Policy Resource Group Resource Exec Validate File 
- A remote or local file. Structure is documented below.
- output_file_ strpath 
- Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
- script str
- An inline script. The size of the script is limited to 1024 characters.
- interpreter String
- The script interpreter to use. Possible values
are: INTERPRETER_UNSPECIFIED,NONE,SHELL,POWERSHELL.
- args List<String>
- Optional arguments to pass to the source during execution.
- file Property Map
- A remote or local file. Structure is documented below.
- outputFile StringPath 
- Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
- script String
- An inline script. The size of the script is limited to 1024 characters.
OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFile, OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileArgs                      
- AllowInsecure bool
- Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
- Gcs
OsPolicy Assignment Os Policy Resource Group Resource Exec Validate File Gcs 
- A Cloud Storage object. Structure is documented below.
- LocalPath string
- A local path within the VM to use.
- Remote
OsPolicy Assignment Os Policy Resource Group Resource Exec Validate File Remote 
- A generic remote file. Structure is documented below.
- AllowInsecure bool
- Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
- Gcs
OsPolicy Assignment Os Policy Resource Group Resource Exec Validate File Gcs 
- A Cloud Storage object. Structure is documented below.
- LocalPath string
- A local path within the VM to use.
- Remote
OsPolicy Assignment Os Policy Resource Group Resource Exec Validate File Remote 
- A generic remote file. Structure is documented below.
- allowInsecure Boolean
- Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
- gcs
OsPolicy Assignment Os Policy Resource Group Resource Exec Validate File Gcs 
- A Cloud Storage object. Structure is documented below.
- localPath String
- A local path within the VM to use.
- remote
OsPolicy Assignment Os Policy Resource Group Resource Exec Validate File Remote 
- A generic remote file. Structure is documented below.
- allowInsecure boolean
- Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
- gcs
OsPolicy Assignment Os Policy Resource Group Resource Exec Validate File Gcs 
- A Cloud Storage object. Structure is documented below.
- localPath string
- A local path within the VM to use.
- remote
OsPolicy Assignment Os Policy Resource Group Resource Exec Validate File Remote 
- A generic remote file. Structure is documented below.
- allow_insecure bool
- Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
- gcs
OsPolicy Assignment Os Policy Resource Group Resource Exec Validate File Gcs 
- A Cloud Storage object. Structure is documented below.
- local_path str
- A local path within the VM to use.
- remote
OsPolicy Assignment Os Policy Resource Group Resource Exec Validate File Remote 
- A generic remote file. Structure is documented below.
- allowInsecure Boolean
- Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
- gcs Property Map
- A Cloud Storage object. Structure is documented below.
- localPath String
- A local path within the VM to use.
- remote Property Map
- A generic remote file. Structure is documented below.
OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileGcs, OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileGcsArgs                        
- Bucket string
- Bucket of the Cloud Storage object.
- Object string
- Name of the Cloud Storage object.
- Generation int
- Generation number of the Cloud Storage object.
- Bucket string
- Bucket of the Cloud Storage object.
- Object string
- Name of the Cloud Storage object.
- Generation int
- Generation number of the Cloud Storage object.
- bucket String
- Bucket of the Cloud Storage object.
- object String
- Name of the Cloud Storage object.
- generation Integer
- Generation number of the Cloud Storage object.
- bucket string
- Bucket of the Cloud Storage object.
- object string
- Name of the Cloud Storage object.
- generation number
- Generation number of the Cloud Storage object.
- bucket str
- Bucket of the Cloud Storage object.
- object str
- Name of the Cloud Storage object.
- generation int
- Generation number of the Cloud Storage object.
- bucket String
- Bucket of the Cloud Storage object.
- object String
- Name of the Cloud Storage object.
- generation Number
- Generation number of the Cloud Storage object.
OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileRemote, OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileRemoteArgs                        
- Uri string
- URI from which to fetch the object. It should contain
both the protocol and path following the format {protocol}://{location}.
- Sha256Checksum string
- SHA256 checksum of the remote file.
- Uri string
- URI from which to fetch the object. It should contain
both the protocol and path following the format {protocol}://{location}.
- Sha256Checksum string
- SHA256 checksum of the remote file.
- uri String
- URI from which to fetch the object. It should contain
both the protocol and path following the format {protocol}://{location}.
- sha256Checksum String
- SHA256 checksum of the remote file.
- uri string
- URI from which to fetch the object. It should contain
both the protocol and path following the format {protocol}://{location}.
- sha256Checksum string
- SHA256 checksum of the remote file.
- uri str
- URI from which to fetch the object. It should contain
both the protocol and path following the format {protocol}://{location}.
- sha256_checksum str
- SHA256 checksum of the remote file.
- uri String
- URI from which to fetch the object. It should contain
both the protocol and path following the format {protocol}://{location}.
- sha256Checksum String
- SHA256 checksum of the remote file.
OsPolicyAssignmentOsPolicyResourceGroupResourceFile, OsPolicyAssignmentOsPolicyResourceGroupResourceFileArgs                  
- Path string
- The absolute path of the file within the VM.
- State string
- Desired state of the file. Possible values are:
DESIRED_STATE_UNSPECIFIED,PRESENT,ABSENT,CONTENTS_MATCH.
- Content string
- A a file with this content. The size of the content is limited to 1024 characters.
- File
OsPolicy Assignment Os Policy Resource Group Resource File File 
- A remote or local source. Structure is documented below.
- Permissions string
- Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
- Path string
- The absolute path of the file within the VM.
- State string
- Desired state of the file. Possible values are:
DESIRED_STATE_UNSPECIFIED,PRESENT,ABSENT,CONTENTS_MATCH.
- Content string
- A a file with this content. The size of the content is limited to 1024 characters.
- File
OsPolicy Assignment Os Policy Resource Group Resource File File 
- A remote or local source. Structure is documented below.
- Permissions string
- Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
- path String
- The absolute path of the file within the VM.
- state String
- Desired state of the file. Possible values are:
DESIRED_STATE_UNSPECIFIED,PRESENT,ABSENT,CONTENTS_MATCH.
- content String
- A a file with this content. The size of the content is limited to 1024 characters.
- file
OsPolicy Assignment Os Policy Resource Group Resource File File 
- A remote or local source. Structure is documented below.
- permissions String
- Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
- path string
- The absolute path of the file within the VM.
- state string
- Desired state of the file. Possible values are:
DESIRED_STATE_UNSPECIFIED,PRESENT,ABSENT,CONTENTS_MATCH.
- content string
- A a file with this content. The size of the content is limited to 1024 characters.
- file
OsPolicy Assignment Os Policy Resource Group Resource File File 
- A remote or local source. Structure is documented below.
- permissions string
- Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
- path str
- The absolute path of the file within the VM.
- state str
- Desired state of the file. Possible values are:
DESIRED_STATE_UNSPECIFIED,PRESENT,ABSENT,CONTENTS_MATCH.
- content str
- A a file with this content. The size of the content is limited to 1024 characters.
- file
OsPolicy Assignment Os Policy Resource Group Resource File File 
- A remote or local source. Structure is documented below.
- permissions str
- Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
- path String
- The absolute path of the file within the VM.
- state String
- Desired state of the file. Possible values are:
DESIRED_STATE_UNSPECIFIED,PRESENT,ABSENT,CONTENTS_MATCH.
- content String
- A a file with this content. The size of the content is limited to 1024 characters.
- file Property Map
- A remote or local source. Structure is documented below.
- permissions String
- Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
OsPolicyAssignmentOsPolicyResourceGroupResourceFileFile, OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileArgs                    
- AllowInsecure bool
- Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
- Gcs
OsPolicy Assignment Os Policy Resource Group Resource File File Gcs 
- A Cloud Storage object. Structure is documented below.
- LocalPath string
- A local path within the VM to use.
- Remote
OsPolicy Assignment Os Policy Resource Group Resource File File Remote 
- A generic remote file. Structure is documented below.
- AllowInsecure bool
- Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
- Gcs
OsPolicy Assignment Os Policy Resource Group Resource File File Gcs 
- A Cloud Storage object. Structure is documented below.
- LocalPath string
- A local path within the VM to use.
- Remote
OsPolicy Assignment Os Policy Resource Group Resource File File Remote 
- A generic remote file. Structure is documented below.
- allowInsecure Boolean
- Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
- gcs
OsPolicy Assignment Os Policy Resource Group Resource File File Gcs 
- A Cloud Storage object. Structure is documented below.
- localPath String
- A local path within the VM to use.
- remote
OsPolicy Assignment Os Policy Resource Group Resource File File Remote 
- A generic remote file. Structure is documented below.
- allowInsecure boolean
- Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
- gcs
OsPolicy Assignment Os Policy Resource Group Resource File File Gcs 
- A Cloud Storage object. Structure is documented below.
- localPath string
- A local path within the VM to use.
- remote
OsPolicy Assignment Os Policy Resource Group Resource File File Remote 
- A generic remote file. Structure is documented below.
- allow_insecure bool
- Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
- gcs
OsPolicy Assignment Os Policy Resource Group Resource File File Gcs 
- A Cloud Storage object. Structure is documented below.
- local_path str
- A local path within the VM to use.
- remote
OsPolicy Assignment Os Policy Resource Group Resource File File Remote 
- A generic remote file. Structure is documented below.
- allowInsecure Boolean
- Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
- gcs Property Map
- A Cloud Storage object. Structure is documented below.
- localPath String
- A local path within the VM to use.
- remote Property Map
- A generic remote file. Structure is documented below.
OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileGcs, OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileGcsArgs                      
- Bucket string
- Bucket of the Cloud Storage object.
- Object string
- Name of the Cloud Storage object.
- Generation int
- Generation number of the Cloud Storage object.
- Bucket string
- Bucket of the Cloud Storage object.
- Object string
- Name of the Cloud Storage object.
- Generation int
- Generation number of the Cloud Storage object.
- bucket String
- Bucket of the Cloud Storage object.
- object String
- Name of the Cloud Storage object.
- generation Integer
- Generation number of the Cloud Storage object.
- bucket string
- Bucket of the Cloud Storage object.
- object string
- Name of the Cloud Storage object.
- generation number
- Generation number of the Cloud Storage object.
- bucket str
- Bucket of the Cloud Storage object.
- object str
- Name of the Cloud Storage object.
- generation int
- Generation number of the Cloud Storage object.
- bucket String
- Bucket of the Cloud Storage object.
- object String
- Name of the Cloud Storage object.
- generation Number
- Generation number of the Cloud Storage object.
OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileRemote, OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileRemoteArgs                      
- Uri string
- URI from which to fetch the object. It should contain
both the protocol and path following the format {protocol}://{location}.
- Sha256Checksum string
- SHA256 checksum of the remote file.
- Uri string
- URI from which to fetch the object. It should contain
both the protocol and path following the format {protocol}://{location}.
- Sha256Checksum string
- SHA256 checksum of the remote file.
- uri String
- URI from which to fetch the object. It should contain
both the protocol and path following the format {protocol}://{location}.
- sha256Checksum String
- SHA256 checksum of the remote file.
- uri string
- URI from which to fetch the object. It should contain
both the protocol and path following the format {protocol}://{location}.
- sha256Checksum string
- SHA256 checksum of the remote file.
- uri str
- URI from which to fetch the object. It should contain
both the protocol and path following the format {protocol}://{location}.
- sha256_checksum str
- SHA256 checksum of the remote file.
- uri String
- URI from which to fetch the object. It should contain
both the protocol and path following the format {protocol}://{location}.
- sha256Checksum String
- SHA256 checksum of the remote file.
OsPolicyAssignmentOsPolicyResourceGroupResourcePkg, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgArgs                  
- DesiredState string
- The desired state the agent should maintain for
this package. Possible values are: DESIRED_STATE_UNSPECIFIED,INSTALLED,REMOVED.
- Apt
OsPolicy Assignment Os Policy Resource Group Resource Pkg Apt 
- A package managed by Apt. Structure is documented below.
- Deb
OsPolicy Assignment Os Policy Resource Group Resource Pkg Deb 
- A deb package file. Structure is documented below.
- Googet
OsPolicy Assignment Os Policy Resource Group Resource Pkg Googet 
- A package managed by GooGet. Structure is documented below.
- Msi
OsPolicy Assignment Os Policy Resource Group Resource Pkg Msi 
- An MSI package. Structure is documented below.
- Rpm
OsPolicy Assignment Os Policy Resource Group Resource Pkg Rpm 
- An rpm package file. Structure is documented below.
- Yum
OsPolicy Assignment Os Policy Resource Group Resource Pkg Yum 
- A package managed by YUM. Structure is documented below.
- Zypper
OsPolicy Assignment Os Policy Resource Group Resource Pkg Zypper 
- A package managed by Zypper. Structure is documented below.
- DesiredState string
- The desired state the agent should maintain for
this package. Possible values are: DESIRED_STATE_UNSPECIFIED,INSTALLED,REMOVED.
- Apt
OsPolicy Assignment Os Policy Resource Group Resource Pkg Apt 
- A package managed by Apt. Structure is documented below.
- Deb
OsPolicy Assignment Os Policy Resource Group Resource Pkg Deb 
- A deb package file. Structure is documented below.
- Googet
OsPolicy Assignment Os Policy Resource Group Resource Pkg Googet 
- A package managed by GooGet. Structure is documented below.
- Msi
OsPolicy Assignment Os Policy Resource Group Resource Pkg Msi 
- An MSI package. Structure is documented below.
- Rpm
OsPolicy Assignment Os Policy Resource Group Resource Pkg Rpm 
- An rpm package file. Structure is documented below.
- Yum
OsPolicy Assignment Os Policy Resource Group Resource Pkg Yum 
- A package managed by YUM. Structure is documented below.
- Zypper
OsPolicy Assignment Os Policy Resource Group Resource Pkg Zypper 
- A package managed by Zypper. Structure is documented below.
- desiredState String
- The desired state the agent should maintain for
this package. Possible values are: DESIRED_STATE_UNSPECIFIED,INSTALLED,REMOVED.
- apt
OsPolicy Assignment Os Policy Resource Group Resource Pkg Apt 
- A package managed by Apt. Structure is documented below.
- deb
OsPolicy Assignment Os Policy Resource Group Resource Pkg Deb 
- A deb package file. Structure is documented below.
- googet
OsPolicy Assignment Os Policy Resource Group Resource Pkg Googet 
- A package managed by GooGet. Structure is documented below.
- msi
OsPolicy Assignment Os Policy Resource Group Resource Pkg Msi 
- An MSI package. Structure is documented below.
- rpm
OsPolicy Assignment Os Policy Resource Group Resource Pkg Rpm 
- An rpm package file. Structure is documented below.
- yum
OsPolicy Assignment Os Policy Resource Group Resource Pkg Yum 
- A package managed by YUM. Structure is documented below.
- zypper
OsPolicy Assignment Os Policy Resource Group Resource Pkg Zypper 
- A package managed by Zypper. Structure is documented below.
- desiredState string
- The desired state the agent should maintain for
this package. Possible values are: DESIRED_STATE_UNSPECIFIED,INSTALLED,REMOVED.
- apt
OsPolicy Assignment Os Policy Resource Group Resource Pkg Apt 
- A package managed by Apt. Structure is documented below.
- deb
OsPolicy Assignment Os Policy Resource Group Resource Pkg Deb 
- A deb package file. Structure is documented below.
- googet
OsPolicy Assignment Os Policy Resource Group Resource Pkg Googet 
- A package managed by GooGet. Structure is documented below.
- msi
OsPolicy Assignment Os Policy Resource Group Resource Pkg Msi 
- An MSI package. Structure is documented below.
- rpm
OsPolicy Assignment Os Policy Resource Group Resource Pkg Rpm 
- An rpm package file. Structure is documented below.
- yum
OsPolicy Assignment Os Policy Resource Group Resource Pkg Yum 
- A package managed by YUM. Structure is documented below.
- zypper
OsPolicy Assignment Os Policy Resource Group Resource Pkg Zypper 
- A package managed by Zypper. Structure is documented below.
- desired_state str
- The desired state the agent should maintain for
this package. Possible values are: DESIRED_STATE_UNSPECIFIED,INSTALLED,REMOVED.
- apt
OsPolicy Assignment Os Policy Resource Group Resource Pkg Apt 
- A package managed by Apt. Structure is documented below.
- deb
OsPolicy Assignment Os Policy Resource Group Resource Pkg Deb 
- A deb package file. Structure is documented below.
- googet
OsPolicy Assignment Os Policy Resource Group Resource Pkg Googet 
- A package managed by GooGet. Structure is documented below.
- msi
OsPolicy Assignment Os Policy Resource Group Resource Pkg Msi 
- An MSI package. Structure is documented below.
- rpm
OsPolicy Assignment Os Policy Resource Group Resource Pkg Rpm 
- An rpm package file. Structure is documented below.
- yum
OsPolicy Assignment Os Policy Resource Group Resource Pkg Yum 
- A package managed by YUM. Structure is documented below.
- zypper
OsPolicy Assignment Os Policy Resource Group Resource Pkg Zypper 
- A package managed by Zypper. Structure is documented below.
- desiredState String
- The desired state the agent should maintain for
this package. Possible values are: DESIRED_STATE_UNSPECIFIED,INSTALLED,REMOVED.
- apt Property Map
- A package managed by Apt. Structure is documented below.
- deb Property Map
- A deb package file. Structure is documented below.
- googet Property Map
- A package managed by GooGet. Structure is documented below.
- msi Property Map
- An MSI package. Structure is documented below.
- rpm Property Map
- An rpm package file. Structure is documented below.
- yum Property Map
- A package managed by YUM. Structure is documented below.
- zypper Property Map
- A package managed by Zypper. Structure is documented below.
OsPolicyAssignmentOsPolicyResourceGroupResourcePkgApt, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgAptArgs                    
- Name string
- Package name.
- Name string
- Package name.
- name String
- Package name.
- name string
- Package name.
- name str
- Package name.
- name String
- Package name.
OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDeb, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebArgs                    
- Source
OsPolicy Assignment Os Policy Resource Group Resource Pkg Deb Source 
- A deb package. Structure is documented below.
- PullDeps bool
- Whether dependencies should also be installed. -
install when false: dpkg -i package- install when true:apt-get update && apt-get -y install package.deb
- Source
OsPolicy Assignment Os Policy Resource Group Resource Pkg Deb Source 
- A deb package. Structure is documented below.
- PullDeps bool
- Whether dependencies should also be installed. -
install when false: dpkg -i package- install when true:apt-get update && apt-get -y install package.deb
- source
OsPolicy Assignment Os Policy Resource Group Resource Pkg Deb Source 
- A deb package. Structure is documented below.
- pullDeps Boolean
- Whether dependencies should also be installed. -
install when false: dpkg -i package- install when true:apt-get update && apt-get -y install package.deb
- source
OsPolicy Assignment Os Policy Resource Group Resource Pkg Deb Source 
- A deb package. Structure is documented below.
- pullDeps boolean
- Whether dependencies should also be installed. -
install when false: dpkg -i package- install when true:apt-get update && apt-get -y install package.deb
- source
OsPolicy Assignment Os Policy Resource Group Resource Pkg Deb Source 
- A deb package. Structure is documented below.
- pull_deps bool
- Whether dependencies should also be installed. -
install when false: dpkg -i package- install when true:apt-get update && apt-get -y install package.deb
- source Property Map
- A deb package. Structure is documented below.
- pullDeps Boolean
- Whether dependencies should also be installed. -
install when false: dpkg -i package- install when true:apt-get update && apt-get -y install package.deb
OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSource, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceArgs                      
- AllowInsecure bool
- Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
- Gcs
OsPolicy Assignment Os Policy Resource Group Resource Pkg Deb Source Gcs 
- A Cloud Storage object. Structure is documented below.
- LocalPath string
- A local path within the VM to use.
- Remote
OsPolicy Assignment Os Policy Resource Group Resource Pkg Deb Source Remote 
- A generic remote file. Structure is documented below.
- AllowInsecure bool
- Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
- Gcs
OsPolicy Assignment Os Policy Resource Group Resource Pkg Deb Source Gcs 
- A Cloud Storage object. Structure is documented below.
- LocalPath string
- A local path within the VM to use.
- Remote
OsPolicy Assignment Os Policy Resource Group Resource Pkg Deb Source Remote 
- A generic remote file. Structure is documented below.
- allowInsecure Boolean
- Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
- gcs
OsPolicy Assignment Os Policy Resource Group Resource Pkg Deb Source Gcs 
- A Cloud Storage object. Structure is documented below.
- localPath String
- A local path within the VM to use.
- remote
OsPolicy Assignment Os Policy Resource Group Resource Pkg Deb Source Remote 
- A generic remote file. Structure is documented below.
- allowInsecure boolean
- Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
- gcs
OsPolicy Assignment Os Policy Resource Group Resource Pkg Deb Source Gcs 
- A Cloud Storage object. Structure is documented below.
- localPath string
- A local path within the VM to use.
- remote
OsPolicy Assignment Os Policy Resource Group Resource Pkg Deb Source Remote 
- A generic remote file. Structure is documented below.
- allow_insecure bool
- Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
- gcs
OsPolicy Assignment Os Policy Resource Group Resource Pkg Deb Source Gcs 
- A Cloud Storage object. Structure is documented below.
- local_path str
- A local path within the VM to use.
- remote
OsPolicy Assignment Os Policy Resource Group Resource Pkg Deb Source Remote 
- A generic remote file. Structure is documented below.
- allowInsecure Boolean
- Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
- gcs Property Map
- A Cloud Storage object. Structure is documented below.
- localPath String
- A local path within the VM to use.
- remote Property Map
- A generic remote file. Structure is documented below.
OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceGcs, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceGcsArgs                        
- Bucket string
- Bucket of the Cloud Storage object.
- Object string
- Name of the Cloud Storage object.
- Generation int
- Generation number of the Cloud Storage object.
- Bucket string
- Bucket of the Cloud Storage object.
- Object string
- Name of the Cloud Storage object.
- Generation int
- Generation number of the Cloud Storage object.
- bucket String
- Bucket of the Cloud Storage object.
- object String
- Name of the Cloud Storage object.
- generation Integer
- Generation number of the Cloud Storage object.
- bucket string
- Bucket of the Cloud Storage object.
- object string
- Name of the Cloud Storage object.
- generation number
- Generation number of the Cloud Storage object.
- bucket str
- Bucket of the Cloud Storage object.
- object str
- Name of the Cloud Storage object.
- generation int
- Generation number of the Cloud Storage object.
- bucket String
- Bucket of the Cloud Storage object.
- object String
- Name of the Cloud Storage object.
- generation Number
- Generation number of the Cloud Storage object.
OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceRemote, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceRemoteArgs                        
- Uri string
- URI from which to fetch the object. It should contain
both the protocol and path following the format {protocol}://{location}.
- Sha256Checksum string
- SHA256 checksum of the remote file.
- Uri string
- URI from which to fetch the object. It should contain
both the protocol and path following the format {protocol}://{location}.
- Sha256Checksum string
- SHA256 checksum of the remote file.
- uri String
- URI from which to fetch the object. It should contain
both the protocol and path following the format {protocol}://{location}.
- sha256Checksum String
- SHA256 checksum of the remote file.
- uri string
- URI from which to fetch the object. It should contain
both the protocol and path following the format {protocol}://{location}.
- sha256Checksum string
- SHA256 checksum of the remote file.
- uri str
- URI from which to fetch the object. It should contain
both the protocol and path following the format {protocol}://{location}.
- sha256_checksum str
- SHA256 checksum of the remote file.
- uri String
- URI from which to fetch the object. It should contain
both the protocol and path following the format {protocol}://{location}.
- sha256Checksum String
- SHA256 checksum of the remote file.
OsPolicyAssignmentOsPolicyResourceGroupResourcePkgGooget, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgGoogetArgs                    
- Name string
- Package name.
- Name string
- Package name.
- name String
- Package name.
- name string
- Package name.
- name str
- Package name.
- name String
- Package name.
OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsi, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiArgs                    
- Source
OsPolicy Assignment Os Policy Resource Group Resource Pkg Msi Source 
- The MSI package. Structure is documented below.
- Properties List<string>
- Additional properties to use during installation.
This should be in the format of Property=Setting. Appended to the defaults
of ACTION=INSTALL REBOOT=ReallySuppress.
- Source
OsPolicy Assignment Os Policy Resource Group Resource Pkg Msi Source 
- The MSI package. Structure is documented below.
- Properties []string
- Additional properties to use during installation.
This should be in the format of Property=Setting. Appended to the defaults
of ACTION=INSTALL REBOOT=ReallySuppress.
- source
OsPolicy Assignment Os Policy Resource Group Resource Pkg Msi Source 
- The MSI package. Structure is documented below.
- properties List<String>
- Additional properties to use during installation.
This should be in the format of Property=Setting. Appended to the defaults
of ACTION=INSTALL REBOOT=ReallySuppress.
- source
OsPolicy Assignment Os Policy Resource Group Resource Pkg Msi Source 
- The MSI package. Structure is documented below.
- properties string[]
- Additional properties to use during installation.
This should be in the format of Property=Setting. Appended to the defaults
of ACTION=INSTALL REBOOT=ReallySuppress.
- source
OsPolicy Assignment Os Policy Resource Group Resource Pkg Msi Source 
- The MSI package. Structure is documented below.
- properties Sequence[str]
- Additional properties to use during installation.
This should be in the format of Property=Setting. Appended to the defaults
of ACTION=INSTALL REBOOT=ReallySuppress.
- source Property Map
- The MSI package. Structure is documented below.
- properties List<String>
- Additional properties to use during installation.
This should be in the format of Property=Setting. Appended to the defaults
of ACTION=INSTALL REBOOT=ReallySuppress.
OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSource, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceArgs                      
- AllowInsecure bool
- Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
- Gcs
OsPolicy Assignment Os Policy Resource Group Resource Pkg Msi Source Gcs 
- A Cloud Storage object. Structure is documented below.
- LocalPath string
- A local path within the VM to use.
- Remote
OsPolicy Assignment Os Policy Resource Group Resource Pkg Msi Source Remote 
- A generic remote file. Structure is documented below.
- AllowInsecure bool
- Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
- Gcs
OsPolicy Assignment Os Policy Resource Group Resource Pkg Msi Source Gcs 
- A Cloud Storage object. Structure is documented below.
- LocalPath string
- A local path within the VM to use.
- Remote
OsPolicy Assignment Os Policy Resource Group Resource Pkg Msi Source Remote 
- A generic remote file. Structure is documented below.
- allowInsecure Boolean
- Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
- gcs
OsPolicy Assignment Os Policy Resource Group Resource Pkg Msi Source Gcs 
- A Cloud Storage object. Structure is documented below.
- localPath String
- A local path within the VM to use.
- remote
OsPolicy Assignment Os Policy Resource Group Resource Pkg Msi Source Remote 
- A generic remote file. Structure is documented below.
- allowInsecure boolean
- Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
- gcs
OsPolicy Assignment Os Policy Resource Group Resource Pkg Msi Source Gcs 
- A Cloud Storage object. Structure is documented below.
- localPath string
- A local path within the VM to use.
- remote
OsPolicy Assignment Os Policy Resource Group Resource Pkg Msi Source Remote 
- A generic remote file. Structure is documented below.
- allow_insecure bool
- Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
- gcs
OsPolicy Assignment Os Policy Resource Group Resource Pkg Msi Source Gcs 
- A Cloud Storage object. Structure is documented below.
- local_path str
- A local path within the VM to use.
- remote
OsPolicy Assignment Os Policy Resource Group Resource Pkg Msi Source Remote 
- A generic remote file. Structure is documented below.
- allowInsecure Boolean
- Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
- gcs Property Map
- A Cloud Storage object. Structure is documented below.
- localPath String
- A local path within the VM to use.
- remote Property Map
- A generic remote file. Structure is documented below.
OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceGcs, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceGcsArgs                        
- Bucket string
- Bucket of the Cloud Storage object.
- Object string
- Name of the Cloud Storage object.
- Generation int
- Generation number of the Cloud Storage object.
- Bucket string
- Bucket of the Cloud Storage object.
- Object string
- Name of the Cloud Storage object.
- Generation int
- Generation number of the Cloud Storage object.
- bucket String
- Bucket of the Cloud Storage object.
- object String
- Name of the Cloud Storage object.
- generation Integer
- Generation number of the Cloud Storage object.
- bucket string
- Bucket of the Cloud Storage object.
- object string
- Name of the Cloud Storage object.
- generation number
- Generation number of the Cloud Storage object.
- bucket str
- Bucket of the Cloud Storage object.
- object str
- Name of the Cloud Storage object.
- generation int
- Generation number of the Cloud Storage object.
- bucket String
- Bucket of the Cloud Storage object.
- object String
- Name of the Cloud Storage object.
- generation Number
- Generation number of the Cloud Storage object.
OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceRemote, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceRemoteArgs                        
- Uri string
- URI from which to fetch the object. It should contain
both the protocol and path following the format {protocol}://{location}.
- Sha256Checksum string
- SHA256 checksum of the remote file.
- Uri string
- URI from which to fetch the object. It should contain
both the protocol and path following the format {protocol}://{location}.
- Sha256Checksum string
- SHA256 checksum of the remote file.
- uri String
- URI from which to fetch the object. It should contain
both the protocol and path following the format {protocol}://{location}.
- sha256Checksum String
- SHA256 checksum of the remote file.
- uri string
- URI from which to fetch the object. It should contain
both the protocol and path following the format {protocol}://{location}.
- sha256Checksum string
- SHA256 checksum of the remote file.
- uri str
- URI from which to fetch the object. It should contain
both the protocol and path following the format {protocol}://{location}.
- sha256_checksum str
- SHA256 checksum of the remote file.
- uri String
- URI from which to fetch the object. It should contain
both the protocol and path following the format {protocol}://{location}.
- sha256Checksum String
- SHA256 checksum of the remote file.
OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpm, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmArgs                    
- Source
OsPolicy Assignment Os Policy Resource Group Resource Pkg Rpm Source 
- An rpm package. Structure is documented below.
- PullDeps bool
- Whether dependencies should also be installed. -
install when false: rpm --upgrade --replacepkgs package.rpm- install when true:yum -y install package.rpmorzypper -y install package.rpm
- Source
OsPolicy Assignment Os Policy Resource Group Resource Pkg Rpm Source 
- An rpm package. Structure is documented below.
- PullDeps bool
- Whether dependencies should also be installed. -
install when false: rpm --upgrade --replacepkgs package.rpm- install when true:yum -y install package.rpmorzypper -y install package.rpm
- source
OsPolicy Assignment Os Policy Resource Group Resource Pkg Rpm Source 
- An rpm package. Structure is documented below.
- pullDeps Boolean
- Whether dependencies should also be installed. -
install when false: rpm --upgrade --replacepkgs package.rpm- install when true:yum -y install package.rpmorzypper -y install package.rpm
- source
OsPolicy Assignment Os Policy Resource Group Resource Pkg Rpm Source 
- An rpm package. Structure is documented below.
- pullDeps boolean
- Whether dependencies should also be installed. -
install when false: rpm --upgrade --replacepkgs package.rpm- install when true:yum -y install package.rpmorzypper -y install package.rpm
- source
OsPolicy Assignment Os Policy Resource Group Resource Pkg Rpm Source 
- An rpm package. Structure is documented below.
- pull_deps bool
- Whether dependencies should also be installed. -
install when false: rpm --upgrade --replacepkgs package.rpm- install when true:yum -y install package.rpmorzypper -y install package.rpm
- source Property Map
- An rpm package. Structure is documented below.
- pullDeps Boolean
- Whether dependencies should also be installed. -
install when false: rpm --upgrade --replacepkgs package.rpm- install when true:yum -y install package.rpmorzypper -y install package.rpm
OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSource, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceArgs                      
- AllowInsecure bool
- Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
- Gcs
OsPolicy Assignment Os Policy Resource Group Resource Pkg Rpm Source Gcs 
- A Cloud Storage object. Structure is documented below.
- LocalPath string
- A local path within the VM to use.
- Remote
OsPolicy Assignment Os Policy Resource Group Resource Pkg Rpm Source Remote 
- A generic remote file. Structure is documented below.
- AllowInsecure bool
- Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
- Gcs
OsPolicy Assignment Os Policy Resource Group Resource Pkg Rpm Source Gcs 
- A Cloud Storage object. Structure is documented below.
- LocalPath string
- A local path within the VM to use.
- Remote
OsPolicy Assignment Os Policy Resource Group Resource Pkg Rpm Source Remote 
- A generic remote file. Structure is documented below.
- allowInsecure Boolean
- Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
- gcs
OsPolicy Assignment Os Policy Resource Group Resource Pkg Rpm Source Gcs 
- A Cloud Storage object. Structure is documented below.
- localPath String
- A local path within the VM to use.
- remote
OsPolicy Assignment Os Policy Resource Group Resource Pkg Rpm Source Remote 
- A generic remote file. Structure is documented below.
- allowInsecure boolean
- Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
- gcs
OsPolicy Assignment Os Policy Resource Group Resource Pkg Rpm Source Gcs 
- A Cloud Storage object. Structure is documented below.
- localPath string
- A local path within the VM to use.
- remote
OsPolicy Assignment Os Policy Resource Group Resource Pkg Rpm Source Remote 
- A generic remote file. Structure is documented below.
- allow_insecure bool
- Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
- gcs
OsPolicy Assignment Os Policy Resource Group Resource Pkg Rpm Source Gcs 
- A Cloud Storage object. Structure is documented below.
- local_path str
- A local path within the VM to use.
- remote
OsPolicy Assignment Os Policy Resource Group Resource Pkg Rpm Source Remote 
- A generic remote file. Structure is documented below.
- allowInsecure Boolean
- Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
- gcs Property Map
- A Cloud Storage object. Structure is documented below.
- localPath String
- A local path within the VM to use.
- remote Property Map
- A generic remote file. Structure is documented below.
OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceGcs, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceGcsArgs                        
- Bucket string
- Bucket of the Cloud Storage object.
- Object string
- Name of the Cloud Storage object.
- Generation int
- Generation number of the Cloud Storage object.
- Bucket string
- Bucket of the Cloud Storage object.
- Object string
- Name of the Cloud Storage object.
- Generation int
- Generation number of the Cloud Storage object.
- bucket String
- Bucket of the Cloud Storage object.
- object String
- Name of the Cloud Storage object.
- generation Integer
- Generation number of the Cloud Storage object.
- bucket string
- Bucket of the Cloud Storage object.
- object string
- Name of the Cloud Storage object.
- generation number
- Generation number of the Cloud Storage object.
- bucket str
- Bucket of the Cloud Storage object.
- object str
- Name of the Cloud Storage object.
- generation int
- Generation number of the Cloud Storage object.
- bucket String
- Bucket of the Cloud Storage object.
- object String
- Name of the Cloud Storage object.
- generation Number
- Generation number of the Cloud Storage object.
OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceRemote, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceRemoteArgs                        
- Uri string
- URI from which to fetch the object. It should contain
both the protocol and path following the format {protocol}://{location}.
- Sha256Checksum string
- SHA256 checksum of the remote file.
- Uri string
- URI from which to fetch the object. It should contain
both the protocol and path following the format {protocol}://{location}.
- Sha256Checksum string
- SHA256 checksum of the remote file.
- uri String
- URI from which to fetch the object. It should contain
both the protocol and path following the format {protocol}://{location}.
- sha256Checksum String
- SHA256 checksum of the remote file.
- uri string
- URI from which to fetch the object. It should contain
both the protocol and path following the format {protocol}://{location}.
- sha256Checksum string
- SHA256 checksum of the remote file.
- uri str
- URI from which to fetch the object. It should contain
both the protocol and path following the format {protocol}://{location}.
- sha256_checksum str
- SHA256 checksum of the remote file.
- uri String
- URI from which to fetch the object. It should contain
both the protocol and path following the format {protocol}://{location}.
- sha256Checksum String
- SHA256 checksum of the remote file.
OsPolicyAssignmentOsPolicyResourceGroupResourcePkgYum, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgYumArgs                    
- Name string
- Package name.
- Name string
- Package name.
- name String
- Package name.
- name string
- Package name.
- name str
- Package name.
- name String
- Package name.
OsPolicyAssignmentOsPolicyResourceGroupResourcePkgZypper, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgZypperArgs                    
- Name string
- Package name.
- Name string
- Package name.
- name String
- Package name.
- name string
- Package name.
- name str
- Package name.
- name String
- Package name.
OsPolicyAssignmentOsPolicyResourceGroupResourceRepository, OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryArgs                  
- Apt
OsPolicy Assignment Os Policy Resource Group Resource Repository Apt 
- An Apt Repository. Structure is documented below.
- Goo
OsPolicy Assignment Os Policy Resource Group Resource Repository Goo 
- A Goo Repository. Structure is documented below.
- Yum
OsPolicy Assignment Os Policy Resource Group Resource Repository Yum 
- A Yum Repository. Structure is documented below.
- Zypper
OsPolicy Assignment Os Policy Resource Group Resource Repository Zypper 
- A Zypper Repository. Structure is documented below.
- Apt
OsPolicy Assignment Os Policy Resource Group Resource Repository Apt 
- An Apt Repository. Structure is documented below.
- Goo
OsPolicy Assignment Os Policy Resource Group Resource Repository Goo 
- A Goo Repository. Structure is documented below.
- Yum
OsPolicy Assignment Os Policy Resource Group Resource Repository Yum 
- A Yum Repository. Structure is documented below.
- Zypper
OsPolicy Assignment Os Policy Resource Group Resource Repository Zypper 
- A Zypper Repository. Structure is documented below.
- apt
OsPolicy Assignment Os Policy Resource Group Resource Repository Apt 
- An Apt Repository. Structure is documented below.
- goo
OsPolicy Assignment Os Policy Resource Group Resource Repository Goo 
- A Goo Repository. Structure is documented below.
- yum
OsPolicy Assignment Os Policy Resource Group Resource Repository Yum 
- A Yum Repository. Structure is documented below.
- zypper
OsPolicy Assignment Os Policy Resource Group Resource Repository Zypper 
- A Zypper Repository. Structure is documented below.
- apt
OsPolicy Assignment Os Policy Resource Group Resource Repository Apt 
- An Apt Repository. Structure is documented below.
- goo
OsPolicy Assignment Os Policy Resource Group Resource Repository Goo 
- A Goo Repository. Structure is documented below.
- yum
OsPolicy Assignment Os Policy Resource Group Resource Repository Yum 
- A Yum Repository. Structure is documented below.
- zypper
OsPolicy Assignment Os Policy Resource Group Resource Repository Zypper 
- A Zypper Repository. Structure is documented below.
- apt
OsPolicy Assignment Os Policy Resource Group Resource Repository Apt 
- An Apt Repository. Structure is documented below.
- goo
OsPolicy Assignment Os Policy Resource Group Resource Repository Goo 
- A Goo Repository. Structure is documented below.
- yum
OsPolicy Assignment Os Policy Resource Group Resource Repository Yum 
- A Yum Repository. Structure is documented below.
- zypper
OsPolicy Assignment Os Policy Resource Group Resource Repository Zypper 
- A Zypper Repository. Structure is documented below.
- apt Property Map
- An Apt Repository. Structure is documented below.
- goo Property Map
- A Goo Repository. Structure is documented below.
- yum Property Map
- A Yum Repository. Structure is documented below.
- zypper Property Map
- A Zypper Repository. Structure is documented below.
OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryApt, OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryAptArgs                    
- ArchiveType string
- Type of archive files in this repository.
Possible values are: ARCHIVE_TYPE_UNSPECIFIED,DEB,DEB_SRC.
- Components List<string>
- List of components for this repository. Must contain at least one item.
- Distribution string
- Distribution of this repository.
- Uri string
- URI for this repository.
- GpgKey string
- URI of the key file for this repository. The agent
maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
- ArchiveType string
- Type of archive files in this repository.
Possible values are: ARCHIVE_TYPE_UNSPECIFIED,DEB,DEB_SRC.
- Components []string
- List of components for this repository. Must contain at least one item.
- Distribution string
- Distribution of this repository.
- Uri string
- URI for this repository.
- GpgKey string
- URI of the key file for this repository. The agent
maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
- archiveType String
- Type of archive files in this repository.
Possible values are: ARCHIVE_TYPE_UNSPECIFIED,DEB,DEB_SRC.
- components List<String>
- List of components for this repository. Must contain at least one item.
- distribution String
- Distribution of this repository.
- uri String
- URI for this repository.
- gpgKey String
- URI of the key file for this repository. The agent
maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
- archiveType string
- Type of archive files in this repository.
Possible values are: ARCHIVE_TYPE_UNSPECIFIED,DEB,DEB_SRC.
- components string[]
- List of components for this repository. Must contain at least one item.
- distribution string
- Distribution of this repository.
- uri string
- URI for this repository.
- gpgKey string
- URI of the key file for this repository. The agent
maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
- archive_type str
- Type of archive files in this repository.
Possible values are: ARCHIVE_TYPE_UNSPECIFIED,DEB,DEB_SRC.
- components Sequence[str]
- List of components for this repository. Must contain at least one item.
- distribution str
- Distribution of this repository.
- uri str
- URI for this repository.
- gpg_key str
- URI of the key file for this repository. The agent
maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
- archiveType String
- Type of archive files in this repository.
Possible values are: ARCHIVE_TYPE_UNSPECIFIED,DEB,DEB_SRC.
- components List<String>
- List of components for this repository. Must contain at least one item.
- distribution String
- Distribution of this repository.
- uri String
- URI for this repository.
- gpgKey String
- URI of the key file for this repository. The agent
maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryGoo, OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryGooArgs                    
OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryYum, OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryYumArgs                    
- BaseUrl string
- The location of the repository directory.
- Id string
- A one word, unique name for this repository. This is the
repo idin the yum config file and also thedisplay_nameifdisplay_nameis omitted. This id is also used as the unique identifier when checking for resource conflicts.
- DisplayName string
- The display name of the repository.
- GpgKeys List<string>
- URIs of GPG keys.
- BaseUrl string
- The location of the repository directory.
- Id string
- A one word, unique name for this repository. This is the
repo idin the yum config file and also thedisplay_nameifdisplay_nameis omitted. This id is also used as the unique identifier when checking for resource conflicts.
- DisplayName string
- The display name of the repository.
- GpgKeys []string
- URIs of GPG keys.
- baseUrl String
- The location of the repository directory.
- id String
- A one word, unique name for this repository. This is the
repo idin the yum config file and also thedisplay_nameifdisplay_nameis omitted. This id is also used as the unique identifier when checking for resource conflicts.
- displayName String
- The display name of the repository.
- gpgKeys List<String>
- URIs of GPG keys.
- baseUrl string
- The location of the repository directory.
- id string
- A one word, unique name for this repository. This is the
repo idin the yum config file and also thedisplay_nameifdisplay_nameis omitted. This id is also used as the unique identifier when checking for resource conflicts.
- displayName string
- The display name of the repository.
- gpgKeys string[]
- URIs of GPG keys.
- base_url str
- The location of the repository directory.
- id str
- A one word, unique name for this repository. This is the
repo idin the yum config file and also thedisplay_nameifdisplay_nameis omitted. This id is also used as the unique identifier when checking for resource conflicts.
- display_name str
- The display name of the repository.
- gpg_keys Sequence[str]
- URIs of GPG keys.
- baseUrl String
- The location of the repository directory.
- id String
- A one word, unique name for this repository. This is the
repo idin the yum config file and also thedisplay_nameifdisplay_nameis omitted. This id is also used as the unique identifier when checking for resource conflicts.
- displayName String
- The display name of the repository.
- gpgKeys List<String>
- URIs of GPG keys.
OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryZypper, OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryZypperArgs                    
- BaseUrl string
- The location of the repository directory.
- Id string
- A one word, unique name for this repository. This is the
repo idin the zypper config file and also thedisplay_nameifdisplay_nameis omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
- DisplayName string
- The display name of the repository.
- GpgKeys List<string>
- URIs of GPG keys.
- BaseUrl string
- The location of the repository directory.
- Id string
- A one word, unique name for this repository. This is the
repo idin the zypper config file and also thedisplay_nameifdisplay_nameis omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
- DisplayName string
- The display name of the repository.
- GpgKeys []string
- URIs of GPG keys.
- baseUrl String
- The location of the repository directory.
- id String
- A one word, unique name for this repository. This is the
repo idin the zypper config file and also thedisplay_nameifdisplay_nameis omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
- displayName String
- The display name of the repository.
- gpgKeys List<String>
- URIs of GPG keys.
- baseUrl string
- The location of the repository directory.
- id string
- A one word, unique name for this repository. This is the
repo idin the zypper config file and also thedisplay_nameifdisplay_nameis omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
- displayName string
- The display name of the repository.
- gpgKeys string[]
- URIs of GPG keys.
- base_url str
- The location of the repository directory.
- id str
- A one word, unique name for this repository. This is the
repo idin the zypper config file and also thedisplay_nameifdisplay_nameis omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
- display_name str
- The display name of the repository.
- gpg_keys Sequence[str]
- URIs of GPG keys.
- baseUrl String
- The location of the repository directory.
- id String
- A one word, unique name for this repository. This is the
repo idin the zypper config file and also thedisplay_nameifdisplay_nameis omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
- displayName String
- The display name of the repository.
- gpgKeys List<String>
- URIs of GPG keys.
OsPolicyAssignmentRollout, OsPolicyAssignmentRolloutArgs        
- DisruptionBudget OsPolicy Assignment Rollout Disruption Budget 
- The maximum number (or percentage) of VMs per zone to disrupt at any given moment. Structure is documented below.
- MinWait stringDuration 
- This determines the minimum duration of
time to wait after the configuration changes are applied through the current
rollout. A VM continues to count towards the disruption_budgetat least until this duration of time has passed after configuration changes are applied.
- DisruptionBudget OsPolicy Assignment Rollout Disruption Budget 
- The maximum number (or percentage) of VMs per zone to disrupt at any given moment. Structure is documented below.
- MinWait stringDuration 
- This determines the minimum duration of
time to wait after the configuration changes are applied through the current
rollout. A VM continues to count towards the disruption_budgetat least until this duration of time has passed after configuration changes are applied.
- disruptionBudget OsPolicy Assignment Rollout Disruption Budget 
- The maximum number (or percentage) of VMs per zone to disrupt at any given moment. Structure is documented below.
- minWait StringDuration 
- This determines the minimum duration of
time to wait after the configuration changes are applied through the current
rollout. A VM continues to count towards the disruption_budgetat least until this duration of time has passed after configuration changes are applied.
- disruptionBudget OsPolicy Assignment Rollout Disruption Budget 
- The maximum number (or percentage) of VMs per zone to disrupt at any given moment. Structure is documented below.
- minWait stringDuration 
- This determines the minimum duration of
time to wait after the configuration changes are applied through the current
rollout. A VM continues to count towards the disruption_budgetat least until this duration of time has passed after configuration changes are applied.
- disruption_budget OsPolicy Assignment Rollout Disruption Budget 
- The maximum number (or percentage) of VMs per zone to disrupt at any given moment. Structure is documented below.
- min_wait_ strduration 
- This determines the minimum duration of
time to wait after the configuration changes are applied through the current
rollout. A VM continues to count towards the disruption_budgetat least until this duration of time has passed after configuration changes are applied.
- disruptionBudget Property Map
- The maximum number (or percentage) of VMs per zone to disrupt at any given moment. Structure is documented below.
- minWait StringDuration 
- This determines the minimum duration of
time to wait after the configuration changes are applied through the current
rollout. A VM continues to count towards the disruption_budgetat least until this duration of time has passed after configuration changes are applied.
OsPolicyAssignmentRolloutDisruptionBudget, OsPolicyAssignmentRolloutDisruptionBudgetArgs            
Import
OSPolicyAssignment can be imported using any of these accepted formats:
- projects/{{project}}/locations/{{location}}/osPolicyAssignments/{{name}}
- {{project}}/{{location}}/{{name}}
- {{location}}/{{name}}
When using the pulumi import command, OSPolicyAssignment can be imported using one of the formats above. For example:
$ pulumi import gcp:osconfig/osPolicyAssignment:OsPolicyAssignment default projects/{{project}}/locations/{{location}}/osPolicyAssignments/{{name}}
$ pulumi import gcp:osconfig/osPolicyAssignment:OsPolicyAssignment default {{project}}/{{location}}/{{name}}
$ pulumi import gcp:osconfig/osPolicyAssignment:OsPolicyAssignment default {{location}}/{{name}}
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- Google Cloud (GCP) Classic pulumi/pulumi-gcp
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the google-betaTerraform Provider.