Docs Home Pulumi IaC Pulumi ESC Pulumi Cloud Packages Tutorials
  1. Packages
  2. Google Cloud Native
  3. API Docs
  4. osconfig
  5. osconfig/v1
  6. OsPolicyAssignment

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
pulumi/pulumi-google-native

google-native.osconfig/v1.OsPolicyAssignment

Explore with Pulumi AI

google-native logo

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
pulumi/pulumi-google-native

    Create an OS policy assignment. This method also creates the first revision of the OS policy assignment. This method returns a long running operation (LRO) that contains the rollout details. The rollout can be cancelled by cancelling the LRO. For more information, see Method: projects.locations.osPolicyAssignments.operations.cancel.

    Create OsPolicyAssignment Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new OsPolicyAssignment(name: string, args: OsPolicyAssignmentArgs, opts?: CustomResourceOptions);
    @overload
def OsPolicyAssignment(resource_name: str,
                       args: OsPolicyAssignmentArgs,
                       opts: Optional[ResourceOptions] = None)

@overload
def OsPolicyAssignment(resource_name: str,
                       opts: Optional[ResourceOptions] = None,
                       instance_filter: Optional[OSPolicyAssignmentInstanceFilterArgs] = None,
                       os_policies: Optional[Sequence[OSPolicyArgs]] = None,
                       os_policy_assignment_id: Optional[str] = None,
                       rollout: Optional[OSPolicyAssignmentRolloutArgs] = None,
                       description: Optional[str] = None,
                       etag: Optional[str] = None,
                       location: Optional[str] = None,
                       name: Optional[str] = None,
                       project: Optional[str] = None)
    func NewOsPolicyAssignment(ctx *Context, name string, args OsPolicyAssignmentArgs, opts ...ResourceOption) (*OsPolicyAssignment, error)
    public OsPolicyAssignment(string name, OsPolicyAssignmentArgs args, CustomResourceOptions? opts = null)
    public OsPolicyAssignment(String name, OsPolicyAssignmentArgs args)
public OsPolicyAssignment(String name, OsPolicyAssignmentArgs args, CustomResourceOptions options)

    type: google-native:osconfig/v1:OsPolicyAssignment
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args OsPolicyAssignmentArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args OsPolicyAssignmentArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args OsPolicyAssignmentArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args OsPolicyAssignmentArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args OsPolicyAssignmentArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var osPolicyAssignmentResource = new GoogleNative.OSConfig.V1.OsPolicyAssignment("osPolicyAssignmentResource", new()
{
    InstanceFilter = new GoogleNative.OSConfig.V1.Inputs.OSPolicyAssignmentInstanceFilterArgs
    {
        All = false,
        ExclusionLabels = new[]
        {
            new GoogleNative.OSConfig.V1.Inputs.OSPolicyAssignmentLabelSetArgs
            {
                Labels = 
                {
                    { "string", "string" },
                },
            },
        },
        InclusionLabels = new[]
        {
            new GoogleNative.OSConfig.V1.Inputs.OSPolicyAssignmentLabelSetArgs
            {
                Labels = 
                {
                    { "string", "string" },
                },
            },
        },
        Inventories = new[]
        {
            new GoogleNative.OSConfig.V1.Inputs.OSPolicyAssignmentInstanceFilterInventoryArgs
            {
                OsShortName = "string",
                OsVersion = "string",
            },
        },
    },
    OsPolicies = new[]
    {
        new GoogleNative.OSConfig.V1.Inputs.OSPolicyArgs
        {
            Id = "string",
            Mode = GoogleNative.OSConfig.V1.OSPolicyMode.ModeUnspecified,
            ResourceGroups = new[]
            {
                new GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceGroupArgs
                {
                    Resources = new[]
                    {
                        new GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceArgs
                        {
                            Id = "string",
                            Exec = new GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceExecResourceArgs
                            {
                                Validate = new GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceExecResourceExecArgs
                                {
                                    Interpreter = GoogleNative.OSConfig.V1.OSPolicyResourceExecResourceExecInterpreter.InterpreterUnspecified,
                                    Args = new[]
                                    {
                                        "string",
                                    },
                                    File = new GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceFileArgs
                                    {
                                        AllowInsecure = false,
                                        Gcs = new GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceFileGcsArgs
                                        {
                                            Bucket = "string",
                                            Object = "string",
                                            Generation = "string",
                                        },
                                        LocalPath = "string",
                                        Remote = new GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceFileRemoteArgs
                                        {
                                            Uri = "string",
                                            Sha256Checksum = "string",
                                        },
                                    },
                                    OutputFilePath = "string",
                                    Script = "string",
                                },
                                Enforce = new GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceExecResourceExecArgs
                                {
                                    Interpreter = GoogleNative.OSConfig.V1.OSPolicyResourceExecResourceExecInterpreter.InterpreterUnspecified,
                                    Args = new[]
                                    {
                                        "string",
                                    },
                                    File = new GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceFileArgs
                                    {
                                        AllowInsecure = false,
                                        Gcs = new GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceFileGcsArgs
                                        {
                                            Bucket = "string",
                                            Object = "string",
                                            Generation = "string",
                                        },
                                        LocalPath = "string",
                                        Remote = new GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceFileRemoteArgs
                                        {
                                            Uri = "string",
                                            Sha256Checksum = "string",
                                        },
                                    },
                                    OutputFilePath = "string",
                                    Script = "string",
                                },
                            },
                            File = new GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceFileResourceArgs
                            {
                                Path = "string",
                                State = GoogleNative.OSConfig.V1.OSPolicyResourceFileResourceState.DesiredStateUnspecified,
                                Content = "string",
                                File = new GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceFileArgs
                                {
                                    AllowInsecure = false,
                                    Gcs = new GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceFileGcsArgs
                                    {
                                        Bucket = "string",
                                        Object = "string",
                                        Generation = "string",
                                    },
                                    LocalPath = "string",
                                    Remote = new GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceFileRemoteArgs
                                    {
                                        Uri = "string",
                                        Sha256Checksum = "string",
                                    },
                                },
                                Permissions = "string",
                            },
                            Pkg = new GoogleNative.OSConfig.V1.Inputs.OSPolicyResourcePackageResourceArgs
                            {
                                DesiredState = GoogleNative.OSConfig.V1.OSPolicyResourcePackageResourceDesiredState.DesiredStateUnspecified,
                                Apt = new GoogleNative.OSConfig.V1.Inputs.OSPolicyResourcePackageResourceAPTArgs
                                {
                                    Name = "string",
                                },
                                Deb = new GoogleNative.OSConfig.V1.Inputs.OSPolicyResourcePackageResourceDebArgs
                                {
                                    Source = new GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceFileArgs
                                    {
                                        AllowInsecure = false,
                                        Gcs = new GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceFileGcsArgs
                                        {
                                            Bucket = "string",
                                            Object = "string",
                                            Generation = "string",
                                        },
                                        LocalPath = "string",
                                        Remote = new GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceFileRemoteArgs
                                        {
                                            Uri = "string",
                                            Sha256Checksum = "string",
                                        },
                                    },
                                    PullDeps = false,
                                },
                                Googet = new GoogleNative.OSConfig.V1.Inputs.OSPolicyResourcePackageResourceGooGetArgs
                                {
                                    Name = "string",
                                },
                                Msi = new GoogleNative.OSConfig.V1.Inputs.OSPolicyResourcePackageResourceMSIArgs
                                {
                                    Source = new GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceFileArgs
                                    {
                                        AllowInsecure = false,
                                        Gcs = new GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceFileGcsArgs
                                        {
                                            Bucket = "string",
                                            Object = "string",
                                            Generation = "string",
                                        },
                                        LocalPath = "string",
                                        Remote = new GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceFileRemoteArgs
                                        {
                                            Uri = "string",
                                            Sha256Checksum = "string",
                                        },
                                    },
                                    Properties = new[]
                                    {
                                        "string",
                                    },
                                },
                                Rpm = new GoogleNative.OSConfig.V1.Inputs.OSPolicyResourcePackageResourceRPMArgs
                                {
                                    Source = new GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceFileArgs
                                    {
                                        AllowInsecure = false,
                                        Gcs = new GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceFileGcsArgs
                                        {
                                            Bucket = "string",
                                            Object = "string",
                                            Generation = "string",
                                        },
                                        LocalPath = "string",
                                        Remote = new GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceFileRemoteArgs
                                        {
                                            Uri = "string",
                                            Sha256Checksum = "string",
                                        },
                                    },
                                    PullDeps = false,
                                },
                                Yum = new GoogleNative.OSConfig.V1.Inputs.OSPolicyResourcePackageResourceYUMArgs
                                {
                                    Name = "string",
                                },
                                Zypper = new GoogleNative.OSConfig.V1.Inputs.OSPolicyResourcePackageResourceZypperArgs
                                {
                                    Name = "string",
                                },
                            },
                            Repository = new GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceRepositoryResourceArgs
                            {
                                Apt = new GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceRepositoryResourceAptRepositoryArgs
                                {
                                    ArchiveType = GoogleNative.OSConfig.V1.OSPolicyResourceRepositoryResourceAptRepositoryArchiveType.ArchiveTypeUnspecified,
                                    Components = new[]
                                    {
                                        "string",
                                    },
                                    Distribution = "string",
                                    Uri = "string",
                                    GpgKey = "string",
                                },
                                Goo = new GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceRepositoryResourceGooRepositoryArgs
                                {
                                    Name = "string",
                                    Url = "string",
                                },
                                Yum = new GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceRepositoryResourceYumRepositoryArgs
                                {
                                    BaseUrl = "string",
                                    Id = "string",
                                    DisplayName = "string",
                                    GpgKeys = new[]
                                    {
                                        "string",
                                    },
                                },
                                Zypper = new GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceRepositoryResourceZypperRepositoryArgs
                                {
                                    BaseUrl = "string",
                                    Id = "string",
                                    DisplayName = "string",
                                    GpgKeys = new[]
                                    {
                                        "string",
                                    },
                                },
                            },
                        },
                    },
                    InventoryFilters = new[]
                    {
                        new GoogleNative.OSConfig.V1.Inputs.OSPolicyInventoryFilterArgs
                        {
                            OsShortName = "string",
                            OsVersion = "string",
                        },
                    },
                },
            },
            AllowNoResourceGroupMatch = false,
            Description = "string",
        },
    },
    OsPolicyAssignmentId = "string",
    Rollout = new GoogleNative.OSConfig.V1.Inputs.OSPolicyAssignmentRolloutArgs
    {
        DisruptionBudget = new GoogleNative.OSConfig.V1.Inputs.FixedOrPercentArgs
        {
            Fixed = 0,
            Percent = 0,
        },
        MinWaitDuration = "string",
    },
    Description = "string",
    Etag = "string",
    Location = "string",
    Name = "string",
    Project = "string",
});

    example, err := osconfig.NewOsPolicyAssignment(ctx, "osPolicyAssignmentResource", &osconfig.OsPolicyAssignmentArgs{
	InstanceFilter: &osconfig.OSPolicyAssignmentInstanceFilterArgs{
		All: pulumi.Bool(false),
		ExclusionLabels: osconfig.OSPolicyAssignmentLabelSetArray{
			&osconfig.OSPolicyAssignmentLabelSetArgs{
				Labels: pulumi.StringMap{
					"string": pulumi.String("string"),
				},
			},
		},
		InclusionLabels: osconfig.OSPolicyAssignmentLabelSetArray{
			&osconfig.OSPolicyAssignmentLabelSetArgs{
				Labels: pulumi.StringMap{
					"string": pulumi.String("string"),
				},
			},
		},
		Inventories: osconfig.OSPolicyAssignmentInstanceFilterInventoryArray{
			&osconfig.OSPolicyAssignmentInstanceFilterInventoryArgs{
				OsShortName: pulumi.String("string"),
				OsVersion:   pulumi.String("string"),
			},
		},
	},
	OsPolicies: osconfig.OSPolicyArray{
		&osconfig.OSPolicyArgs{
			Id:   pulumi.String("string"),
			Mode: osconfig.OSPolicyModeModeUnspecified,
			ResourceGroups: osconfig.OSPolicyResourceGroupArray{
				&osconfig.OSPolicyResourceGroupArgs{
					Resources: osconfig.OSPolicyResourceArray{
						&osconfig.OSPolicyResourceArgs{
							Id: pulumi.String("string"),
							Exec: &osconfig.OSPolicyResourceExecResourceArgs{
								Validate: &osconfig.OSPolicyResourceExecResourceExecArgs{
									Interpreter: osconfig.OSPolicyResourceExecResourceExecInterpreterInterpreterUnspecified,
									Args: pulumi.StringArray{
										pulumi.String("string"),
									},
									File: &osconfig.OSPolicyResourceFileArgs{
										AllowInsecure: pulumi.Bool(false),
										Gcs: &osconfig.OSPolicyResourceFileGcsArgs{
											Bucket:     pulumi.String("string"),
											Object:     pulumi.String("string"),
											Generation: pulumi.String("string"),
										},
										LocalPath: pulumi.String("string"),
										Remote: &osconfig.OSPolicyResourceFileRemoteArgs{
											Uri:            pulumi.String("string"),
											Sha256Checksum: pulumi.String("string"),
										},
									},
									OutputFilePath: pulumi.String("string"),
									Script:         pulumi.String("string"),
								},
								Enforce: &osconfig.OSPolicyResourceExecResourceExecArgs{
									Interpreter: osconfig.OSPolicyResourceExecResourceExecInterpreterInterpreterUnspecified,
									Args: pulumi.StringArray{
										pulumi.String("string"),
									},
									File: &osconfig.OSPolicyResourceFileArgs{
										AllowInsecure: pulumi.Bool(false),
										Gcs: &osconfig.OSPolicyResourceFileGcsArgs{
											Bucket:     pulumi.String("string"),
											Object:     pulumi.String("string"),
											Generation: pulumi.String("string"),
										},
										LocalPath: pulumi.String("string"),
										Remote: &osconfig.OSPolicyResourceFileRemoteArgs{
											Uri:            pulumi.String("string"),
											Sha256Checksum: pulumi.String("string"),
										},
									},
									OutputFilePath: pulumi.String("string"),
									Script:         pulumi.String("string"),
								},
							},
							File: &osconfig.OSPolicyResourceFileResourceArgs{
								Path:    pulumi.String("string"),
								State:   osconfig.OSPolicyResourceFileResourceStateDesiredStateUnspecified,
								Content: pulumi.String("string"),
								File: &osconfig.OSPolicyResourceFileArgs{
									AllowInsecure: pulumi.Bool(false),
									Gcs: &osconfig.OSPolicyResourceFileGcsArgs{
										Bucket:     pulumi.String("string"),
										Object:     pulumi.String("string"),
										Generation: pulumi.String("string"),
									},
									LocalPath: pulumi.String("string"),
									Remote: &osconfig.OSPolicyResourceFileRemoteArgs{
										Uri:            pulumi.String("string"),
										Sha256Checksum: pulumi.String("string"),
									},
								},
								Permissions: pulumi.String("string"),
							},
							Pkg: &osconfig.OSPolicyResourcePackageResourceArgs{
								DesiredState: osconfig.OSPolicyResourcePackageResourceDesiredStateDesiredStateUnspecified,
								Apt: &osconfig.OSPolicyResourcePackageResourceAPTArgs{
									Name: pulumi.String("string"),
								},
								Deb: &osconfig.OSPolicyResourcePackageResourceDebArgs{
									Source: &osconfig.OSPolicyResourceFileArgs{
										AllowInsecure: pulumi.Bool(false),
										Gcs: &osconfig.OSPolicyResourceFileGcsArgs{
											Bucket:     pulumi.String("string"),
											Object:     pulumi.String("string"),
											Generation: pulumi.String("string"),
										},
										LocalPath: pulumi.String("string"),
										Remote: &osconfig.OSPolicyResourceFileRemoteArgs{
											Uri:            pulumi.String("string"),
											Sha256Checksum: pulumi.String("string"),
										},
									},
									PullDeps: pulumi.Bool(false),
								},
								Googet: &osconfig.OSPolicyResourcePackageResourceGooGetArgs{
									Name: pulumi.String("string"),
								},
								Msi: &osconfig.OSPolicyResourcePackageResourceMSIArgs{
									Source: &osconfig.OSPolicyResourceFileArgs{
										AllowInsecure: pulumi.Bool(false),
										Gcs: &osconfig.OSPolicyResourceFileGcsArgs{
											Bucket:     pulumi.String("string"),
											Object:     pulumi.String("string"),
											Generation: pulumi.String("string"),
										},
										LocalPath: pulumi.String("string"),
										Remote: &osconfig.OSPolicyResourceFileRemoteArgs{
											Uri:            pulumi.String("string"),
											Sha256Checksum: pulumi.String("string"),
										},
									},
									Properties: pulumi.StringArray{
										pulumi.String("string"),
									},
								},
								Rpm: &osconfig.OSPolicyResourcePackageResourceRPMArgs{
									Source: &osconfig.OSPolicyResourceFileArgs{
										AllowInsecure: pulumi.Bool(false),
										Gcs: &osconfig.OSPolicyResourceFileGcsArgs{
											Bucket:     pulumi.String("string"),
											Object:     pulumi.String("string"),
											Generation: pulumi.String("string"),
										},
										LocalPath: pulumi.String("string"),
										Remote: &osconfig.OSPolicyResourceFileRemoteArgs{
											Uri:            pulumi.String("string"),
											Sha256Checksum: pulumi.String("string"),
										},
									},
									PullDeps: pulumi.Bool(false),
								},
								Yum: &osconfig.OSPolicyResourcePackageResourceYUMArgs{
									Name: pulumi.String("string"),
								},
								Zypper: &osconfig.OSPolicyResourcePackageResourceZypperArgs{
									Name: pulumi.String("string"),
								},
							},
							Repository: &osconfig.OSPolicyResourceRepositoryResourceArgs{
								Apt: &osconfig.OSPolicyResourceRepositoryResourceAptRepositoryArgs{
									ArchiveType: osconfig.OSPolicyResourceRepositoryResourceAptRepositoryArchiveTypeArchiveTypeUnspecified,
									Components: pulumi.StringArray{
										pulumi.String("string"),
									},
									Distribution: pulumi.String("string"),
									Uri:          pulumi.String("string"),
									GpgKey:       pulumi.String("string"),
								},
								Goo: &osconfig.OSPolicyResourceRepositoryResourceGooRepositoryArgs{
									Name: pulumi.String("string"),
									Url:  pulumi.String("string"),
								},
								Yum: &osconfig.OSPolicyResourceRepositoryResourceYumRepositoryArgs{
									BaseUrl:     pulumi.String("string"),
									Id:          pulumi.String("string"),
									DisplayName: pulumi.String("string"),
									GpgKeys: pulumi.StringArray{
										pulumi.String("string"),
									},
								},
								Zypper: &osconfig.OSPolicyResourceRepositoryResourceZypperRepositoryArgs{
									BaseUrl:     pulumi.String("string"),
									Id:          pulumi.String("string"),
									DisplayName: pulumi.String("string"),
									GpgKeys: pulumi.StringArray{
										pulumi.String("string"),
									},
								},
							},
						},
					},
					InventoryFilters: osconfig.OSPolicyInventoryFilterArray{
						&osconfig.OSPolicyInventoryFilterArgs{
							OsShortName: pulumi.String("string"),
							OsVersion:   pulumi.String("string"),
						},
					},
				},
			},
			AllowNoResourceGroupMatch: pulumi.Bool(false),
			Description:               pulumi.String("string"),
		},
	},
	OsPolicyAssignmentId: pulumi.String("string"),
	Rollout: &osconfig.OSPolicyAssignmentRolloutArgs{
		DisruptionBudget: &osconfig.FixedOrPercentArgs{
			Fixed:   pulumi.Int(0),
			Percent: pulumi.Int(0),
		},
		MinWaitDuration: pulumi.String("string"),
	},
	Description: pulumi.String("string"),
	Etag:        pulumi.String("string"),
	Location:    pulumi.String("string"),
	Name:        pulumi.String("string"),
	Project:     pulumi.String("string"),
})

    var osPolicyAssignmentResource = new OsPolicyAssignment("osPolicyAssignmentResource", OsPolicyAssignmentArgs.builder()
    .instanceFilter(OSPolicyAssignmentInstanceFilterArgs.builder()
        .all(false)
        .exclusionLabels(OSPolicyAssignmentLabelSetArgs.builder()
            .labels(Map.of("string", "string"))
            .build())
        .inclusionLabels(OSPolicyAssignmentLabelSetArgs.builder()
            .labels(Map.of("string", "string"))
            .build())
        .inventories(OSPolicyAssignmentInstanceFilterInventoryArgs.builder()
            .osShortName("string")
            .osVersion("string")
            .build())
        .build())
    .osPolicies(OSPolicyArgs.builder()
        .id("string")
        .mode("MODE_UNSPECIFIED")
        .resourceGroups(OSPolicyResourceGroupArgs.builder()
            .resources(OSPolicyResourceArgs.builder()
                .id("string")
                .exec(OSPolicyResourceExecResourceArgs.builder()
                    .validate(OSPolicyResourceExecResourceExecArgs.builder()
                        .interpreter("INTERPRETER_UNSPECIFIED")
                        .args("string")
                        .file(OSPolicyResourceFileArgs.builder()
                            .allowInsecure(false)
                            .gcs(OSPolicyResourceFileGcsArgs.builder()
                                .bucket("string")
                                .object("string")
                                .generation("string")
                                .build())
                            .localPath("string")
                            .remote(OSPolicyResourceFileRemoteArgs.builder()
                                .uri("string")
                                .sha256Checksum("string")
                                .build())
                            .build())
                        .outputFilePath("string")
                        .script("string")
                        .build())
                    .enforce(OSPolicyResourceExecResourceExecArgs.builder()
                        .interpreter("INTERPRETER_UNSPECIFIED")
                        .args("string")
                        .file(OSPolicyResourceFileArgs.builder()
                            .allowInsecure(false)
                            .gcs(OSPolicyResourceFileGcsArgs.builder()
                                .bucket("string")
                                .object("string")
                                .generation("string")
                                .build())
                            .localPath("string")
                            .remote(OSPolicyResourceFileRemoteArgs.builder()
                                .uri("string")
                                .sha256Checksum("string")
                                .build())
                            .build())
                        .outputFilePath("string")
                        .script("string")
                        .build())
                    .build())
                .file(OSPolicyResourceFileResourceArgs.builder()
                    .path("string")
                    .state("DESIRED_STATE_UNSPECIFIED")
                    .content("string")
                    .file(OSPolicyResourceFileArgs.builder()
                        .allowInsecure(false)
                        .gcs(OSPolicyResourceFileGcsArgs.builder()
                            .bucket("string")
                            .object("string")
                            .generation("string")
                            .build())
                        .localPath("string")
                        .remote(OSPolicyResourceFileRemoteArgs.builder()
                            .uri("string")
                            .sha256Checksum("string")
                            .build())
                        .build())
                    .permissions("string")
                    .build())
                .pkg(OSPolicyResourcePackageResourceArgs.builder()
                    .desiredState("DESIRED_STATE_UNSPECIFIED")
                    .apt(OSPolicyResourcePackageResourceAPTArgs.builder()
                        .name("string")
                        .build())
                    .deb(OSPolicyResourcePackageResourceDebArgs.builder()
                        .source(OSPolicyResourceFileArgs.builder()
                            .allowInsecure(false)
                            .gcs(OSPolicyResourceFileGcsArgs.builder()
                                .bucket("string")
                                .object("string")
                                .generation("string")
                                .build())
                            .localPath("string")
                            .remote(OSPolicyResourceFileRemoteArgs.builder()
                                .uri("string")
                                .sha256Checksum("string")
                                .build())
                            .build())
                        .pullDeps(false)
                        .build())
                    .googet(OSPolicyResourcePackageResourceGooGetArgs.builder()
                        .name("string")
                        .build())
                    .msi(OSPolicyResourcePackageResourceMSIArgs.builder()
                        .source(OSPolicyResourceFileArgs.builder()
                            .allowInsecure(false)
                            .gcs(OSPolicyResourceFileGcsArgs.builder()
                                .bucket("string")
                                .object("string")
                                .generation("string")
                                .build())
                            .localPath("string")
                            .remote(OSPolicyResourceFileRemoteArgs.builder()
                                .uri("string")
                                .sha256Checksum("string")
                                .build())
                            .build())
                        .properties("string")
                        .build())
                    .rpm(OSPolicyResourcePackageResourceRPMArgs.builder()
                        .source(OSPolicyResourceFileArgs.builder()
                            .allowInsecure(false)
                            .gcs(OSPolicyResourceFileGcsArgs.builder()
                                .bucket("string")
                                .object("string")
                                .generation("string")
                                .build())
                            .localPath("string")
                            .remote(OSPolicyResourceFileRemoteArgs.builder()
                                .uri("string")
                                .sha256Checksum("string")
                                .build())
                            .build())
                        .pullDeps(false)
                        .build())
                    .yum(OSPolicyResourcePackageResourceYUMArgs.builder()
                        .name("string")
                        .build())
                    .zypper(OSPolicyResourcePackageResourceZypperArgs.builder()
                        .name("string")
                        .build())
                    .build())
                .repository(OSPolicyResourceRepositoryResourceArgs.builder()
                    .apt(OSPolicyResourceRepositoryResourceAptRepositoryArgs.builder()
                        .archiveType("ARCHIVE_TYPE_UNSPECIFIED")
                        .components("string")
                        .distribution("string")
                        .uri("string")
                        .gpgKey("string")
                        .build())
                    .goo(OSPolicyResourceRepositoryResourceGooRepositoryArgs.builder()
                        .name("string")
                        .url("string")
                        .build())
                    .yum(OSPolicyResourceRepositoryResourceYumRepositoryArgs.builder()
                        .baseUrl("string")
                        .id("string")
                        .displayName("string")
                        .gpgKeys("string")
                        .build())
                    .zypper(OSPolicyResourceRepositoryResourceZypperRepositoryArgs.builder()
                        .baseUrl("string")
                        .id("string")
                        .displayName("string")
                        .gpgKeys("string")
                        .build())
                    .build())
                .build())
            .inventoryFilters(OSPolicyInventoryFilterArgs.builder()
                .osShortName("string")
                .osVersion("string")
                .build())
            .build())
        .allowNoResourceGroupMatch(false)
        .description("string")
        .build())
    .osPolicyAssignmentId("string")
    .rollout(OSPolicyAssignmentRolloutArgs.builder()
        .disruptionBudget(FixedOrPercentArgs.builder()
            .fixed(0)
            .percent(0)
            .build())
        .minWaitDuration("string")
        .build())
    .description("string")
    .etag("string")
    .location("string")
    .name("string")
    .project("string")
    .build());

    os_policy_assignment_resource = google_native.osconfig.v1.OsPolicyAssignment("osPolicyAssignmentResource",
    instance_filter=google_native.osconfig.v1.OSPolicyAssignmentInstanceFilterArgs(
        all=False,
        exclusion_labels=[google_native.osconfig.v1.OSPolicyAssignmentLabelSetArgs(
            labels={
                "string": "string",
            },
        )],
        inclusion_labels=[google_native.osconfig.v1.OSPolicyAssignmentLabelSetArgs(
            labels={
                "string": "string",
            },
        )],
        inventories=[google_native.osconfig.v1.OSPolicyAssignmentInstanceFilterInventoryArgs(
            os_short_name="string",
            os_version="string",
        )],
    ),
    os_policies=[google_native.osconfig.v1.OSPolicyArgs(
        id="string",
        mode=google_native.osconfig.v1.OSPolicyMode.MODE_UNSPECIFIED,
        resource_groups=[google_native.osconfig.v1.OSPolicyResourceGroupArgs(
            resources=[google_native.osconfig.v1.OSPolicyResourceArgs(
                id="string",
                exec_=google_native.osconfig.v1.OSPolicyResourceExecResourceArgs(
                    validate=google_native.osconfig.v1.OSPolicyResourceExecResourceExecArgs(
                        interpreter=google_native.osconfig.v1.OSPolicyResourceExecResourceExecInterpreter.INTERPRETER_UNSPECIFIED,
                        args=["string"],
                        file=google_native.osconfig.v1.OSPolicyResourceFileArgs(
                            allow_insecure=False,
                            gcs=google_native.osconfig.v1.OSPolicyResourceFileGcsArgs(
                                bucket="string",
                                object="string",
                                generation="string",
                            ),
                            local_path="string",
                            remote=google_native.osconfig.v1.OSPolicyResourceFileRemoteArgs(
                                uri="string",
                                sha256_checksum="string",
                            ),
                        ),
                        output_file_path="string",
                        script="string",
                    ),
                    enforce=google_native.osconfig.v1.OSPolicyResourceExecResourceExecArgs(
                        interpreter=google_native.osconfig.v1.OSPolicyResourceExecResourceExecInterpreter.INTERPRETER_UNSPECIFIED,
                        args=["string"],
                        file=google_native.osconfig.v1.OSPolicyResourceFileArgs(
                            allow_insecure=False,
                            gcs=google_native.osconfig.v1.OSPolicyResourceFileGcsArgs(
                                bucket="string",
                                object="string",
                                generation="string",
                            ),
                            local_path="string",
                            remote=google_native.osconfig.v1.OSPolicyResourceFileRemoteArgs(
                                uri="string",
                                sha256_checksum="string",
                            ),
                        ),
                        output_file_path="string",
                        script="string",
                    ),
                ),
                file=google_native.osconfig.v1.OSPolicyResourceFileResourceArgs(
                    path="string",
                    state=google_native.osconfig.v1.OSPolicyResourceFileResourceState.DESIRED_STATE_UNSPECIFIED,
                    content="string",
                    file=google_native.osconfig.v1.OSPolicyResourceFileArgs(
                        allow_insecure=False,
                        gcs=google_native.osconfig.v1.OSPolicyResourceFileGcsArgs(
                            bucket="string",
                            object="string",
                            generation="string",
                        ),
                        local_path="string",
                        remote=google_native.osconfig.v1.OSPolicyResourceFileRemoteArgs(
                            uri="string",
                            sha256_checksum="string",
                        ),
                    ),
                    permissions="string",
                ),
                pkg=google_native.osconfig.v1.OSPolicyResourcePackageResourceArgs(
                    desired_state=google_native.osconfig.v1.OSPolicyResourcePackageResourceDesiredState.DESIRED_STATE_UNSPECIFIED,
                    apt=google_native.osconfig.v1.OSPolicyResourcePackageResourceAPTArgs(
                        name="string",
                    ),
                    deb=google_native.osconfig.v1.OSPolicyResourcePackageResourceDebArgs(
                        source=google_native.osconfig.v1.OSPolicyResourceFileArgs(
                            allow_insecure=False,
                            gcs=google_native.osconfig.v1.OSPolicyResourceFileGcsArgs(
                                bucket="string",
                                object="string",
                                generation="string",
                            ),
                            local_path="string",
                            remote=google_native.osconfig.v1.OSPolicyResourceFileRemoteArgs(
                                uri="string",
                                sha256_checksum="string",
                            ),
                        ),
                        pull_deps=False,
                    ),
                    googet=google_native.osconfig.v1.OSPolicyResourcePackageResourceGooGetArgs(
                        name="string",
                    ),
                    msi=google_native.osconfig.v1.OSPolicyResourcePackageResourceMSIArgs(
                        source=google_native.osconfig.v1.OSPolicyResourceFileArgs(
                            allow_insecure=False,
                            gcs=google_native.osconfig.v1.OSPolicyResourceFileGcsArgs(
                                bucket="string",
                                object="string",
                                generation="string",
                            ),
                            local_path="string",
                            remote=google_native.osconfig.v1.OSPolicyResourceFileRemoteArgs(
                                uri="string",
                                sha256_checksum="string",
                            ),
                        ),
                        properties=["string"],
                    ),
                    rpm=google_native.osconfig.v1.OSPolicyResourcePackageResourceRPMArgs(
                        source=google_native.osconfig.v1.OSPolicyResourceFileArgs(
                            allow_insecure=False,
                            gcs=google_native.osconfig.v1.OSPolicyResourceFileGcsArgs(
                                bucket="string",
                                object="string",
                                generation="string",
                            ),
                            local_path="string",
                            remote=google_native.osconfig.v1.OSPolicyResourceFileRemoteArgs(
                                uri="string",
                                sha256_checksum="string",
                            ),
                        ),
                        pull_deps=False,
                    ),
                    yum=google_native.osconfig.v1.OSPolicyResourcePackageResourceYUMArgs(
                        name="string",
                    ),
                    zypper=google_native.osconfig.v1.OSPolicyResourcePackageResourceZypperArgs(
                        name="string",
                    ),
                ),
                repository=google_native.osconfig.v1.OSPolicyResourceRepositoryResourceArgs(
                    apt=google_native.osconfig.v1.OSPolicyResourceRepositoryResourceAptRepositoryArgs(
                        archive_type=google_native.osconfig.v1.OSPolicyResourceRepositoryResourceAptRepositoryArchiveType.ARCHIVE_TYPE_UNSPECIFIED,
                        components=["string"],
                        distribution="string",
                        uri="string",
                        gpg_key="string",
                    ),
                    goo=google_native.osconfig.v1.OSPolicyResourceRepositoryResourceGooRepositoryArgs(
                        name="string",
                        url="string",
                    ),
                    yum=google_native.osconfig.v1.OSPolicyResourceRepositoryResourceYumRepositoryArgs(
                        base_url="string",
                        id="string",
                        display_name="string",
                        gpg_keys=["string"],
                    ),
                    zypper=google_native.osconfig.v1.OSPolicyResourceRepositoryResourceZypperRepositoryArgs(
                        base_url="string",
                        id="string",
                        display_name="string",
                        gpg_keys=["string"],
                    ),
                ),
            )],
            inventory_filters=[google_native.osconfig.v1.OSPolicyInventoryFilterArgs(
                os_short_name="string",
                os_version="string",
            )],
        )],
        allow_no_resource_group_match=False,
        description="string",
    )],
    os_policy_assignment_id="string",
    rollout=google_native.osconfig.v1.OSPolicyAssignmentRolloutArgs(
        disruption_budget=google_native.osconfig.v1.FixedOrPercentArgs(
            fixed=0,
            percent=0,
        ),
        min_wait_duration="string",
    ),
    description="string",
    etag="string",
    location="string",
    name="string",
    project="string")

    const osPolicyAssignmentResource = new google_native.osconfig.v1.OsPolicyAssignment("osPolicyAssignmentResource", {
    instanceFilter: {
        all: false,
        exclusionLabels: [{
            labels: {
                string: "string",
            },
        }],
        inclusionLabels: [{
            labels: {
                string: "string",
            },
        }],
        inventories: [{
            osShortName: "string",
            osVersion: "string",
        }],
    },
    osPolicies: [{
        id: "string",
        mode: google_native.osconfig.v1.OSPolicyMode.ModeUnspecified,
        resourceGroups: [{
            resources: [{
                id: "string",
                exec: {
                    validate: {
                        interpreter: google_native.osconfig.v1.OSPolicyResourceExecResourceExecInterpreter.InterpreterUnspecified,
                        args: ["string"],
                        file: {
                            allowInsecure: false,
                            gcs: {
                                bucket: "string",
                                object: "string",
                                generation: "string",
                            },
                            localPath: "string",
                            remote: {
                                uri: "string",
                                sha256Checksum: "string",
                            },
                        },
                        outputFilePath: "string",
                        script: "string",
                    },
                    enforce: {
                        interpreter: google_native.osconfig.v1.OSPolicyResourceExecResourceExecInterpreter.InterpreterUnspecified,
                        args: ["string"],
                        file: {
                            allowInsecure: false,
                            gcs: {
                                bucket: "string",
                                object: "string",
                                generation: "string",
                            },
                            localPath: "string",
                            remote: {
                                uri: "string",
                                sha256Checksum: "string",
                            },
                        },
                        outputFilePath: "string",
                        script: "string",
                    },
                },
                file: {
                    path: "string",
                    state: google_native.osconfig.v1.OSPolicyResourceFileResourceState.DesiredStateUnspecified,
                    content: "string",
                    file: {
                        allowInsecure: false,
                        gcs: {
                            bucket: "string",
                            object: "string",
                            generation: "string",
                        },
                        localPath: "string",
                        remote: {
                            uri: "string",
                            sha256Checksum: "string",
                        },
                    },
                    permissions: "string",
                },
                pkg: {
                    desiredState: google_native.osconfig.v1.OSPolicyResourcePackageResourceDesiredState.DesiredStateUnspecified,
                    apt: {
                        name: "string",
                    },
                    deb: {
                        source: {
                            allowInsecure: false,
                            gcs: {
                                bucket: "string",
                                object: "string",
                                generation: "string",
                            },
                            localPath: "string",
                            remote: {
                                uri: "string",
                                sha256Checksum: "string",
                            },
                        },
                        pullDeps: false,
                    },
                    googet: {
                        name: "string",
                    },
                    msi: {
                        source: {
                            allowInsecure: false,
                            gcs: {
                                bucket: "string",
                                object: "string",
                                generation: "string",
                            },
                            localPath: "string",
                            remote: {
                                uri: "string",
                                sha256Checksum: "string",
                            },
                        },
                        properties: ["string"],
                    },
                    rpm: {
                        source: {
                            allowInsecure: false,
                            gcs: {
                                bucket: "string",
                                object: "string",
                                generation: "string",
                            },
                            localPath: "string",
                            remote: {
                                uri: "string",
                                sha256Checksum: "string",
                            },
                        },
                        pullDeps: false,
                    },
                    yum: {
                        name: "string",
                    },
                    zypper: {
                        name: "string",
                    },
                },
                repository: {
                    apt: {
                        archiveType: google_native.osconfig.v1.OSPolicyResourceRepositoryResourceAptRepositoryArchiveType.ArchiveTypeUnspecified,
                        components: ["string"],
                        distribution: "string",
                        uri: "string",
                        gpgKey: "string",
                    },
                    goo: {
                        name: "string",
                        url: "string",
                    },
                    yum: {
                        baseUrl: "string",
                        id: "string",
                        displayName: "string",
                        gpgKeys: ["string"],
                    },
                    zypper: {
                        baseUrl: "string",
                        id: "string",
                        displayName: "string",
                        gpgKeys: ["string"],
                    },
                },
            }],
            inventoryFilters: [{
                osShortName: "string",
                osVersion: "string",
            }],
        }],
        allowNoResourceGroupMatch: false,
        description: "string",
    }],
    osPolicyAssignmentId: "string",
    rollout: {
        disruptionBudget: {
            fixed: 0,
            percent: 0,
        },
        minWaitDuration: "string",
    },
    description: "string",
    etag: "string",
    location: "string",
    name: "string",
    project: "string",
});

    type: google-native:osconfig/v1:OsPolicyAssignment
properties:
    description: string
    etag: string
    instanceFilter:
        all: false
        exclusionLabels:
            - labels:
                string: string
        inclusionLabels:
            - labels:
                string: string
        inventories:
            - osShortName: string
              osVersion: string
    location: string
    name: string
    osPolicies:
        - allowNoResourceGroupMatch: false
          description: string
          id: string
          mode: MODE_UNSPECIFIED
          resourceGroups:
            - inventoryFilters:
                - osShortName: string
                  osVersion: string
              resources:
                - exec:
                    enforce:
                        args:
                            - string
                        file:
                            allowInsecure: false
                            gcs:
                                bucket: string
                                generation: string
                                object: string
                            localPath: string
                            remote:
                                sha256Checksum: string
                                uri: string
                        interpreter: INTERPRETER_UNSPECIFIED
                        outputFilePath: string
                        script: string
                    validate:
                        args:
                            - string
                        file:
                            allowInsecure: false
                            gcs:
                                bucket: string
                                generation: string
                                object: string
                            localPath: string
                            remote:
                                sha256Checksum: string
                                uri: string
                        interpreter: INTERPRETER_UNSPECIFIED
                        outputFilePath: string
                        script: string
                  file:
                    content: string
                    file:
                        allowInsecure: false
                        gcs:
                            bucket: string
                            generation: string
                            object: string
                        localPath: string
                        remote:
                            sha256Checksum: string
                            uri: string
                    path: string
                    permissions: string
                    state: DESIRED_STATE_UNSPECIFIED
                  id: string
                  pkg:
                    apt:
                        name: string
                    deb:
                        pullDeps: false
                        source:
                            allowInsecure: false
                            gcs:
                                bucket: string
                                generation: string
                                object: string
                            localPath: string
                            remote:
                                sha256Checksum: string
                                uri: string
                    desiredState: DESIRED_STATE_UNSPECIFIED
                    googet:
                        name: string
                    msi:
                        properties:
                            - string
                        source:
                            allowInsecure: false
                            gcs:
                                bucket: string
                                generation: string
                                object: string
                            localPath: string
                            remote:
                                sha256Checksum: string
                                uri: string
                    rpm:
                        pullDeps: false
                        source:
                            allowInsecure: false
                            gcs:
                                bucket: string
                                generation: string
                                object: string
                            localPath: string
                            remote:
                                sha256Checksum: string
                                uri: string
                    yum:
                        name: string
                    zypper:
                        name: string
                  repository:
                    apt:
                        archiveType: ARCHIVE_TYPE_UNSPECIFIED
                        components:
                            - string
                        distribution: string
                        gpgKey: string
                        uri: string
                    goo:
                        name: string
                        url: string
                    yum:
                        baseUrl: string
                        displayName: string
                        gpgKeys:
                            - string
                        id: string
                    zypper:
                        baseUrl: string
                        displayName: string
                        gpgKeys:
                            - string
                        id: string
    osPolicyAssignmentId: string
    project: string
    rollout:
        disruptionBudget:
            fixed: 0
            percent: 0
        minWaitDuration: string

    OsPolicyAssignment Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    The OsPolicyAssignment resource accepts the following input properties:

    InstanceFilter Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyAssignmentInstanceFilter
    Filter to select VMs.
    OsPolicies List<Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicy>
    List of OS policies to be applied to the VMs.
    OsPolicyAssignmentId string
    Required. The logical name of the OS policy assignment in the project with the following restrictions: * Must contain only lowercase letters, numbers, and hyphens. * Must start with a letter. * Must be between 1-63 characters. * Must end with a number or a letter. * Must be unique within the project.
    Rollout Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyAssignmentRollout
    Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted.
    Description string
    OS policy assignment description. Length of the description is limited to 1024 characters.
    Etag string
    The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
    Location string
    Name string
    Resource name. Format: projects/{project_number}/locations/{location}/osPolicyAssignments/{os_policy_assignment_id} This field is ignored when you create an OS policy assignment.
    Project string
    InstanceFilter OSPolicyAssignmentInstanceFilterArgs
    Filter to select VMs.
    OsPolicies []OSPolicyArgs
    List of OS policies to be applied to the VMs.
    OsPolicyAssignmentId string
    Required. The logical name of the OS policy assignment in the project with the following restrictions: * Must contain only lowercase letters, numbers, and hyphens. * Must start with a letter. * Must be between 1-63 characters. * Must end with a number or a letter. * Must be unique within the project.
    Rollout OSPolicyAssignmentRolloutArgs
    Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted.
    Description string
    OS policy assignment description. Length of the description is limited to 1024 characters.
    Etag string
    The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
    Location string
    Name string
    Resource name. Format: projects/{project_number}/locations/{location}/osPolicyAssignments/{os_policy_assignment_id} This field is ignored when you create an OS policy assignment.
    Project string
    instanceFilter OSPolicyAssignmentInstanceFilter
    Filter to select VMs.
    osPolicies List<OSPolicy>
    List of OS policies to be applied to the VMs.
    osPolicyAssignmentId String
    Required. The logical name of the OS policy assignment in the project with the following restrictions: * Must contain only lowercase letters, numbers, and hyphens. * Must start with a letter. * Must be between 1-63 characters. * Must end with a number or a letter. * Must be unique within the project.
    rollout OSPolicyAssignmentRollout
    Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted.
    description String
    OS policy assignment description. Length of the description is limited to 1024 characters.
    etag String
    The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
    location String
    name String
    Resource name. Format: projects/{project_number}/locations/{location}/osPolicyAssignments/{os_policy_assignment_id} This field is ignored when you create an OS policy assignment.
    project String
    instanceFilter OSPolicyAssignmentInstanceFilter
    Filter to select VMs.
    osPolicies OSPolicy[]
    List of OS policies to be applied to the VMs.
    osPolicyAssignmentId string
    Required. The logical name of the OS policy assignment in the project with the following restrictions: * Must contain only lowercase letters, numbers, and hyphens. * Must start with a letter. * Must be between 1-63 characters. * Must end with a number or a letter. * Must be unique within the project.
    rollout OSPolicyAssignmentRollout
    Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted.
    description string
    OS policy assignment description. Length of the description is limited to 1024 characters.
    etag string
    The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
    location string
    name string
    Resource name. Format: projects/{project_number}/locations/{location}/osPolicyAssignments/{os_policy_assignment_id} This field is ignored when you create an OS policy assignment.
    project string
    instance_filter OSPolicyAssignmentInstanceFilterArgs
    Filter to select VMs.
    os_policies Sequence[OSPolicyArgs]
    List of OS policies to be applied to the VMs.
    os_policy_assignment_id str
    Required. The logical name of the OS policy assignment in the project with the following restrictions: * Must contain only lowercase letters, numbers, and hyphens. * Must start with a letter. * Must be between 1-63 characters. * Must end with a number or a letter. * Must be unique within the project.
    rollout OSPolicyAssignmentRolloutArgs
    Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted.
    description str
    OS policy assignment description. Length of the description is limited to 1024 characters.
    etag str
    The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
    location str
    name str
    Resource name. Format: projects/{project_number}/locations/{location}/osPolicyAssignments/{os_policy_assignment_id} This field is ignored when you create an OS policy assignment.
    project str
    instanceFilter Property Map
    Filter to select VMs.
    osPolicies List<Property Map>
    List of OS policies to be applied to the VMs.
    osPolicyAssignmentId String
    Required. The logical name of the OS policy assignment in the project with the following restrictions: * Must contain only lowercase letters, numbers, and hyphens. * Must start with a letter. * Must be between 1-63 characters. * Must end with a number or a letter. * Must be unique within the project.
    rollout Property Map
    Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted.
    description String
    OS policy assignment description. Length of the description is limited to 1024 characters.
    etag String
    The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
    location String
    name String
    Resource name. Format: projects/{project_number}/locations/{location}/osPolicyAssignments/{os_policy_assignment_id} This field is ignored when you create an OS policy assignment.
    project String

    Outputs

    All input properties are implicitly available as output properties. Additionally, the OsPolicyAssignment resource produces the following output properties:

    Baseline bool
    Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision. For a given OS policy assignment, there is only one revision with a value of true for this field.
    Deleted bool
    Indicates that this revision deletes the OS policy assignment.
    Id string
    The provider-assigned unique ID for this managed resource.
    Reconciling bool
    Indicates that reconciliation is in progress for the revision. This value is true when the rollout_state is one of: * IN_PROGRESS * CANCELLING
    RevisionCreateTime string
    The timestamp that the revision was created.
    RevisionId string
    The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
    RolloutState string
    OS policy assignment rollout state
    Uid string
    Server generated unique id for the OS policy assignment resource.
    Baseline bool
    Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision. For a given OS policy assignment, there is only one revision with a value of true for this field.
    Deleted bool
    Indicates that this revision deletes the OS policy assignment.
    Id string
    The provider-assigned unique ID for this managed resource.
    Reconciling bool
    Indicates that reconciliation is in progress for the revision. This value is true when the rollout_state is one of: * IN_PROGRESS * CANCELLING
    RevisionCreateTime string
    The timestamp that the revision was created.
    RevisionId string
    The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
    RolloutState string
    OS policy assignment rollout state
    Uid string
    Server generated unique id for the OS policy assignment resource.
    baseline Boolean
    Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision. For a given OS policy assignment, there is only one revision with a value of true for this field.
    deleted Boolean
    Indicates that this revision deletes the OS policy assignment.
    id String
    The provider-assigned unique ID for this managed resource.
    reconciling Boolean
    Indicates that reconciliation is in progress for the revision. This value is true when the rollout_state is one of: * IN_PROGRESS * CANCELLING
    revisionCreateTime String
    The timestamp that the revision was created.
    revisionId String
    The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
    rolloutState String
    OS policy assignment rollout state
    uid String
    Server generated unique id for the OS policy assignment resource.
    baseline boolean
    Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision. For a given OS policy assignment, there is only one revision with a value of true for this field.
    deleted boolean
    Indicates that this revision deletes the OS policy assignment.
    id string
    The provider-assigned unique ID for this managed resource.
    reconciling boolean
    Indicates that reconciliation is in progress for the revision. This value is true when the rollout_state is one of: * IN_PROGRESS * CANCELLING
    revisionCreateTime string
    The timestamp that the revision was created.
    revisionId string
    The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
    rolloutState string
    OS policy assignment rollout state
    uid string
    Server generated unique id for the OS policy assignment resource.
    baseline bool
    Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision. For a given OS policy assignment, there is only one revision with a value of true for this field.
    deleted bool
    Indicates that this revision deletes the OS policy assignment.
    id str
    The provider-assigned unique ID for this managed resource.
    reconciling bool
    Indicates that reconciliation is in progress for the revision. This value is true when the rollout_state is one of: * IN_PROGRESS * CANCELLING
    revision_create_time str
    The timestamp that the revision was created.
    revision_id str
    The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
    rollout_state str
    OS policy assignment rollout state
    uid str
    Server generated unique id for the OS policy assignment resource.
    baseline Boolean
    Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision. For a given OS policy assignment, there is only one revision with a value of true for this field.
    deleted Boolean
    Indicates that this revision deletes the OS policy assignment.
    id String
    The provider-assigned unique ID for this managed resource.
    reconciling Boolean
    Indicates that reconciliation is in progress for the revision. This value is true when the rollout_state is one of: * IN_PROGRESS * CANCELLING
    revisionCreateTime String
    The timestamp that the revision was created.
    revisionId String
    The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
    rolloutState String
    OS policy assignment rollout state
    uid String
    Server generated unique id for the OS policy assignment resource.

    Supporting Types

    FixedOrPercent, FixedOrPercentArgs

    Fixed int
    Specifies a fixed value.
    Percent int
    Specifies the relative value defined as a percentage, which will be multiplied by a reference value.
    Fixed int
    Specifies a fixed value.
    Percent int
    Specifies the relative value defined as a percentage, which will be multiplied by a reference value.
    fixed Integer
    Specifies a fixed value.
    percent Integer
    Specifies the relative value defined as a percentage, which will be multiplied by a reference value.
    fixed number
    Specifies a fixed value.
    percent number
    Specifies the relative value defined as a percentage, which will be multiplied by a reference value.
    fixed int
    Specifies a fixed value.
    percent int
    Specifies the relative value defined as a percentage, which will be multiplied by a reference value.
    fixed Number
    Specifies a fixed value.
    percent Number
    Specifies the relative value defined as a percentage, which will be multiplied by a reference value.

    FixedOrPercentResponse, FixedOrPercentResponseArgs

    Fixed int
    Specifies a fixed value.
    Percent int
    Specifies the relative value defined as a percentage, which will be multiplied by a reference value.
    Fixed int
    Specifies a fixed value.
    Percent int
    Specifies the relative value defined as a percentage, which will be multiplied by a reference value.
    fixed Integer
    Specifies a fixed value.
    percent Integer
    Specifies the relative value defined as a percentage, which will be multiplied by a reference value.
    fixed number
    Specifies a fixed value.
    percent number
    Specifies the relative value defined as a percentage, which will be multiplied by a reference value.
    fixed int
    Specifies a fixed value.
    percent int
    Specifies the relative value defined as a percentage, which will be multiplied by a reference value.
    fixed Number
    Specifies a fixed value.
    percent Number
    Specifies the relative value defined as a percentage, which will be multiplied by a reference value.

    OSPolicy, OSPolicyArgs

    Id string
    The id of the OS policy with the following restrictions: * Must contain only lowercase letters, numbers, and hyphens. * Must start with a letter. * Must be between 1-63 characters. * Must end with a number or a letter. * Must be unique within the assignment.
    Mode Pulumi.GoogleNative.OSConfig.V1.OSPolicyMode
    Policy mode
    ResourceGroups List<Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceGroup>
    List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match
    AllowNoResourceGroupMatch bool
    This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
    Description string
    Policy description. Length of the description is limited to 1024 characters.
    Id string
    The id of the OS policy with the following restrictions: * Must contain only lowercase letters, numbers, and hyphens. * Must start with a letter. * Must be between 1-63 characters. * Must end with a number or a letter. * Must be unique within the assignment.
    Mode OSPolicyMode
    Policy mode
    ResourceGroups []OSPolicyResourceGroup
    List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match
    AllowNoResourceGroupMatch bool
    This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
    Description string
    Policy description. Length of the description is limited to 1024 characters.
    id String
    The id of the OS policy with the following restrictions: * Must contain only lowercase letters, numbers, and hyphens. * Must start with a letter. * Must be between 1-63 characters. * Must end with a number or a letter. * Must be unique within the assignment.
    mode OSPolicyMode
    Policy mode
    resourceGroups List<OSPolicyResourceGroup>
    List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match
    allowNoResourceGroupMatch Boolean
    This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
    description String
    Policy description. Length of the description is limited to 1024 characters.
    id string
    The id of the OS policy with the following restrictions: * Must contain only lowercase letters, numbers, and hyphens. * Must start with a letter. * Must be between 1-63 characters. * Must end with a number or a letter. * Must be unique within the assignment.
    mode OSPolicyMode
    Policy mode
    resourceGroups OSPolicyResourceGroup[]
    List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match
    allowNoResourceGroupMatch boolean
    This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
    description string
    Policy description. Length of the description is limited to 1024 characters.
    id str
    The id of the OS policy with the following restrictions: * Must contain only lowercase letters, numbers, and hyphens. * Must start with a letter. * Must be between 1-63 characters. * Must end with a number or a letter. * Must be unique within the assignment.
    mode OSPolicyMode
    Policy mode
    resource_groups Sequence[OSPolicyResourceGroup]
    List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match
    allow_no_resource_group_match bool
    This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
    description str
    Policy description. Length of the description is limited to 1024 characters.
    id String
    The id of the OS policy with the following restrictions: * Must contain only lowercase letters, numbers, and hyphens. * Must start with a letter. * Must be between 1-63 characters. * Must end with a number or a letter. * Must be unique within the assignment.
    mode "MODE_UNSPECIFIED" | "VALIDATION" | "ENFORCEMENT"
    Policy mode
    resourceGroups List<Property Map>
    List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match
    allowNoResourceGroupMatch Boolean
    This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
    description String
    Policy description. Length of the description is limited to 1024 characters.

    OSPolicyAssignmentInstanceFilter, OSPolicyAssignmentInstanceFilterArgs

    All bool
    Target all VMs in the project. If true, no other criteria is permitted.
    ExclusionLabels List<Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyAssignmentLabelSet>
    List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM.
    InclusionLabels List<Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyAssignmentLabelSet>
    List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM.
    Inventories List<Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyAssignmentInstanceFilterInventory>
    List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories.
    All bool
    Target all VMs in the project. If true, no other criteria is permitted.
    ExclusionLabels []OSPolicyAssignmentLabelSet
    List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM.
    InclusionLabels []OSPolicyAssignmentLabelSet
    List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM.
    Inventories []OSPolicyAssignmentInstanceFilterInventory
    List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories.
    all Boolean
    Target all VMs in the project. If true, no other criteria is permitted.
    exclusionLabels List<OSPolicyAssignmentLabelSet>
    List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM.
    inclusionLabels List<OSPolicyAssignmentLabelSet>
    List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM.
    inventories List<OSPolicyAssignmentInstanceFilterInventory>
    List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories.
    all boolean
    Target all VMs in the project. If true, no other criteria is permitted.
    exclusionLabels OSPolicyAssignmentLabelSet[]
    List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM.
    inclusionLabels OSPolicyAssignmentLabelSet[]
    List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM.
    inventories OSPolicyAssignmentInstanceFilterInventory[]
    List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories.
    all bool
    Target all VMs in the project. If true, no other criteria is permitted.
    exclusion_labels Sequence[OSPolicyAssignmentLabelSet]
    List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM.
    inclusion_labels Sequence[OSPolicyAssignmentLabelSet]
    List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM.
    inventories Sequence[OSPolicyAssignmentInstanceFilterInventory]
    List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories.
    all Boolean
    Target all VMs in the project. If true, no other criteria is permitted.
    exclusionLabels List<Property Map>
    List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM.
    inclusionLabels List<Property Map>
    List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM.
    inventories List<Property Map>
    List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories.

    OSPolicyAssignmentInstanceFilterInventory, OSPolicyAssignmentInstanceFilterInventoryArgs

    OsShortName string
    The OS short name
    OsVersion string
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    OsShortName string
    The OS short name
    OsVersion string
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    osShortName String
    The OS short name
    osVersion String
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    osShortName string
    The OS short name
    osVersion string
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    os_short_name str
    The OS short name
    os_version str
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    osShortName String
    The OS short name
    osVersion String
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.

    OSPolicyAssignmentInstanceFilterInventoryResponse, OSPolicyAssignmentInstanceFilterInventoryResponseArgs

    OsShortName string
    The OS short name
    OsVersion string
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    OsShortName string
    The OS short name
    OsVersion string
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    osShortName String
    The OS short name
    osVersion String
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    osShortName string
    The OS short name
    osVersion string
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    os_short_name str
    The OS short name
    os_version str
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    osShortName String
    The OS short name
    osVersion String
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.

    OSPolicyAssignmentInstanceFilterResponse, OSPolicyAssignmentInstanceFilterResponseArgs

    All bool
    Target all VMs in the project. If true, no other criteria is permitted.
    ExclusionLabels List<Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyAssignmentLabelSetResponse>
    List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM.
    InclusionLabels List<Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyAssignmentLabelSetResponse>
    List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM.
    Inventories List<Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyAssignmentInstanceFilterInventoryResponse>
    List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories.
    All bool
    Target all VMs in the project. If true, no other criteria is permitted.
    ExclusionLabels []OSPolicyAssignmentLabelSetResponse
    List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM.
    InclusionLabels []OSPolicyAssignmentLabelSetResponse
    List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM.
    Inventories []OSPolicyAssignmentInstanceFilterInventoryResponse
    List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories.
    all Boolean
    Target all VMs in the project. If true, no other criteria is permitted.
    exclusionLabels List<OSPolicyAssignmentLabelSetResponse>
    List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM.
    inclusionLabels List<OSPolicyAssignmentLabelSetResponse>
    List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM.
    inventories List<OSPolicyAssignmentInstanceFilterInventoryResponse>
    List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories.
    all boolean
    Target all VMs in the project. If true, no other criteria is permitted.
    exclusionLabels OSPolicyAssignmentLabelSetResponse[]
    List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM.
    inclusionLabels OSPolicyAssignmentLabelSetResponse[]
    List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM.
    inventories OSPolicyAssignmentInstanceFilterInventoryResponse[]
    List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories.
    all bool
    Target all VMs in the project. If true, no other criteria is permitted.
    exclusion_labels Sequence[OSPolicyAssignmentLabelSetResponse]
    List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM.
    inclusion_labels Sequence[OSPolicyAssignmentLabelSetResponse]
    List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM.
    inventories Sequence[OSPolicyAssignmentInstanceFilterInventoryResponse]
    List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories.
    all Boolean
    Target all VMs in the project. If true, no other criteria is permitted.
    exclusionLabels List<Property Map>
    List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM.
    inclusionLabels List<Property Map>
    List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM.
    inventories List<Property Map>
    List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories.

    OSPolicyAssignmentLabelSet, OSPolicyAssignmentLabelSetArgs

    Labels Dictionary<string, string>
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    Labels map[string]string
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    labels Map<String,String>
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    labels {[key: string]: string}
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    labels Mapping[str, str]
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    labels Map<String>
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.

    OSPolicyAssignmentLabelSetResponse, OSPolicyAssignmentLabelSetResponseArgs

    Labels Dictionary<string, string>
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    Labels map[string]string
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    labels Map<String,String>
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    labels {[key: string]: string}
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    labels Mapping[str, str]
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    labels Map<String>
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.

    OSPolicyAssignmentRollout, OSPolicyAssignmentRolloutArgs

    DisruptionBudget Pulumi.GoogleNative.OSConfig.V1.Inputs.FixedOrPercent
    The maximum number (or percentage) of VMs per zone to disrupt at any given moment.
    MinWaitDuration string
    This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.
    DisruptionBudget FixedOrPercent
    The maximum number (or percentage) of VMs per zone to disrupt at any given moment.
    MinWaitDuration string
    This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.
    disruptionBudget FixedOrPercent
    The maximum number (or percentage) of VMs per zone to disrupt at any given moment.
    minWaitDuration String
    This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.
    disruptionBudget FixedOrPercent
    The maximum number (or percentage) of VMs per zone to disrupt at any given moment.
    minWaitDuration string
    This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.
    disruption_budget FixedOrPercent
    The maximum number (or percentage) of VMs per zone to disrupt at any given moment.
    min_wait_duration str
    This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.
    disruptionBudget Property Map
    The maximum number (or percentage) of VMs per zone to disrupt at any given moment.
    minWaitDuration String
    This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.

    OSPolicyAssignmentRolloutResponse, OSPolicyAssignmentRolloutResponseArgs

    DisruptionBudget Pulumi.GoogleNative.OSConfig.V1.Inputs.FixedOrPercentResponse
    The maximum number (or percentage) of VMs per zone to disrupt at any given moment.
    MinWaitDuration string
    This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.
    DisruptionBudget FixedOrPercentResponse
    The maximum number (or percentage) of VMs per zone to disrupt at any given moment.
    MinWaitDuration string
    This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.
    disruptionBudget FixedOrPercentResponse
    The maximum number (or percentage) of VMs per zone to disrupt at any given moment.
    minWaitDuration String
    This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.
    disruptionBudget FixedOrPercentResponse
    The maximum number (or percentage) of VMs per zone to disrupt at any given moment.
    minWaitDuration string
    This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.
    disruption_budget FixedOrPercentResponse
    The maximum number (or percentage) of VMs per zone to disrupt at any given moment.
    min_wait_duration str
    This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.
    disruptionBudget Property Map
    The maximum number (or percentage) of VMs per zone to disrupt at any given moment.
    minWaitDuration String
    This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.

    OSPolicyInventoryFilter, OSPolicyInventoryFilterArgs

    OsShortName string
    The OS short name
    OsVersion string
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    OsShortName string
    The OS short name
    OsVersion string
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    osShortName String
    The OS short name
    osVersion String
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    osShortName string
    The OS short name
    osVersion string
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    os_short_name str
    The OS short name
    os_version str
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    osShortName String
    The OS short name
    osVersion String
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.

    OSPolicyInventoryFilterResponse, OSPolicyInventoryFilterResponseArgs

    OsShortName string
    The OS short name
    OsVersion string
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    OsShortName string
    The OS short name
    OsVersion string
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    osShortName String
    The OS short name
    osVersion String
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    osShortName string
    The OS short name
    osVersion string
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    os_short_name str
    The OS short name
    os_version str
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    osShortName String
    The OS short name
    osVersion String
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.

    OSPolicyMode, OSPolicyModeArgs

    ModeUnspecified
    MODE_UNSPECIFIEDInvalid mode
    Validation
    VALIDATIONThis mode checks if the configuration resources in the policy are in their desired state. No actions are performed if they are not in the desired state. This mode is used for reporting purposes.
    Enforcement
    ENFORCEMENTThis mode checks if the configuration resources in the policy are in their desired state, and if not, enforces the desired state.
    OSPolicyModeModeUnspecified
    MODE_UNSPECIFIEDInvalid mode
    OSPolicyModeValidation
    VALIDATIONThis mode checks if the configuration resources in the policy are in their desired state. No actions are performed if they are not in the desired state. This mode is used for reporting purposes.
    OSPolicyModeEnforcement
    ENFORCEMENTThis mode checks if the configuration resources in the policy are in their desired state, and if not, enforces the desired state.
    ModeUnspecified
    MODE_UNSPECIFIEDInvalid mode
    Validation
    VALIDATIONThis mode checks if the configuration resources in the policy are in their desired state. No actions are performed if they are not in the desired state. This mode is used for reporting purposes.
    Enforcement
    ENFORCEMENTThis mode checks if the configuration resources in the policy are in their desired state, and if not, enforces the desired state.
    ModeUnspecified
    MODE_UNSPECIFIEDInvalid mode
    Validation
    VALIDATIONThis mode checks if the configuration resources in the policy are in their desired state. No actions are performed if they are not in the desired state. This mode is used for reporting purposes.
    Enforcement
    ENFORCEMENTThis mode checks if the configuration resources in the policy are in their desired state, and if not, enforces the desired state.
    MODE_UNSPECIFIED
    MODE_UNSPECIFIEDInvalid mode
    VALIDATION
    VALIDATIONThis mode checks if the configuration resources in the policy are in their desired state. No actions are performed if they are not in the desired state. This mode is used for reporting purposes.
    ENFORCEMENT
    ENFORCEMENTThis mode checks if the configuration resources in the policy are in their desired state, and if not, enforces the desired state.
    "MODE_UNSPECIFIED"
    MODE_UNSPECIFIEDInvalid mode
    "VALIDATION"
    VALIDATIONThis mode checks if the configuration resources in the policy are in their desired state. No actions are performed if they are not in the desired state. This mode is used for reporting purposes.
    "ENFORCEMENT"
    ENFORCEMENTThis mode checks if the configuration resources in the policy are in their desired state, and if not, enforces the desired state.

    OSPolicyResource, OSPolicyResourceArgs

    Id string
    The id of the resource with the following restrictions: * Must contain only lowercase letters, numbers, and hyphens. * Must start with a letter. * Must be between 1-63 characters. * Must end with a number or a letter. * Must be unique within the OS policy.
    Exec Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceExecResource
    Exec resource
    File Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceFileResource
    File resource
    Pkg Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourcePackageResource
    Package resource
    Repository Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceRepositoryResource
    Package repository resource
    Id string
    The id of the resource with the following restrictions: * Must contain only lowercase letters, numbers, and hyphens. * Must start with a letter. * Must be between 1-63 characters. * Must end with a number or a letter. * Must be unique within the OS policy.
    Exec OSPolicyResourceExecResource
    Exec resource
    File OSPolicyResourceFileResource
    File resource
    Pkg OSPolicyResourcePackageResource
    Package resource
    Repository OSPolicyResourceRepositoryResource
    Package repository resource
    id String
    The id of the resource with the following restrictions: * Must contain only lowercase letters, numbers, and hyphens. * Must start with a letter. * Must be between 1-63 characters. * Must end with a number or a letter. * Must be unique within the OS policy.
    exec OSPolicyResourceExecResource
    Exec resource
    file OSPolicyResourceFileResource
    File resource
    pkg OSPolicyResourcePackageResource
    Package resource
    repository OSPolicyResourceRepositoryResource
    Package repository resource
    id string
    The id of the resource with the following restrictions: * Must contain only lowercase letters, numbers, and hyphens. * Must start with a letter. * Must be between 1-63 characters. * Must end with a number or a letter. * Must be unique within the OS policy.
    exec OSPolicyResourceExecResource
    Exec resource
    file OSPolicyResourceFileResource
    File resource
    pkg OSPolicyResourcePackageResource
    Package resource
    repository OSPolicyResourceRepositoryResource
    Package repository resource
    id str
    The id of the resource with the following restrictions: * Must contain only lowercase letters, numbers, and hyphens. * Must start with a letter. * Must be between 1-63 characters. * Must end with a number or a letter. * Must be unique within the OS policy.
    exec_ OSPolicyResourceExecResource
    Exec resource
    file OSPolicyResourceFileResource
    File resource
    pkg OSPolicyResourcePackageResource
    Package resource
    repository OSPolicyResourceRepositoryResource
    Package repository resource
    id String
    The id of the resource with the following restrictions: * Must contain only lowercase letters, numbers, and hyphens. * Must start with a letter. * Must be between 1-63 characters. * Must end with a number or a letter. * Must be unique within the OS policy.
    exec Property Map
    Exec resource
    file Property Map
    File resource
    pkg Property Map
    Package resource
    repository Property Map
    Package repository resource

    OSPolicyResourceExecResource, OSPolicyResourceExecResourceArgs

    Validate Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceExecResourceExec
    What to run to validate this resource is in the desired state. An exit code of 100 indicates "in desired state", and exit code of 101 indicates "not in desired state". Any other exit code indicates a failure running validate.
    Enforce Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceExecResourceExec
    What to run to bring this resource into the desired state. An exit code of 100 indicates "success", any other exit code indicates a failure running enforce.
    Validate OSPolicyResourceExecResourceExec
    What to run to validate this resource is in the desired state. An exit code of 100 indicates "in desired state", and exit code of 101 indicates "not in desired state". Any other exit code indicates a failure running validate.
    Enforce OSPolicyResourceExecResourceExec
    What to run to bring this resource into the desired state. An exit code of 100 indicates "success", any other exit code indicates a failure running enforce.
    validate OSPolicyResourceExecResourceExec
    What to run to validate this resource is in the desired state. An exit code of 100 indicates "in desired state", and exit code of 101 indicates "not in desired state". Any other exit code indicates a failure running validate.
    enforce OSPolicyResourceExecResourceExec
    What to run to bring this resource into the desired state. An exit code of 100 indicates "success", any other exit code indicates a failure running enforce.
    validate OSPolicyResourceExecResourceExec
    What to run to validate this resource is in the desired state. An exit code of 100 indicates "in desired state", and exit code of 101 indicates "not in desired state". Any other exit code indicates a failure running validate.
    enforce OSPolicyResourceExecResourceExec
    What to run to bring this resource into the desired state. An exit code of 100 indicates "success", any other exit code indicates a failure running enforce.
    validate OSPolicyResourceExecResourceExec
    What to run to validate this resource is in the desired state. An exit code of 100 indicates "in desired state", and exit code of 101 indicates "not in desired state". Any other exit code indicates a failure running validate.
    enforce OSPolicyResourceExecResourceExec
    What to run to bring this resource into the desired state. An exit code of 100 indicates "success", any other exit code indicates a failure running enforce.
    validate Property Map
    What to run to validate this resource is in the desired state. An exit code of 100 indicates "in desired state", and exit code of 101 indicates "not in desired state". Any other exit code indicates a failure running validate.
    enforce Property Map
    What to run to bring this resource into the desired state. An exit code of 100 indicates "success", any other exit code indicates a failure running enforce.

    OSPolicyResourceExecResourceExec, OSPolicyResourceExecResourceExecArgs

    Interpreter Pulumi.GoogleNative.OSConfig.V1.OSPolicyResourceExecResourceExecInterpreter
    The script interpreter to use.
    Args List<string>
    Optional arguments to pass to the source during execution.
    File Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceFile
    A remote or local file.
    OutputFilePath string
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
    Script string
    An inline script. The size of the script is limited to 32KiB.
    Interpreter OSPolicyResourceExecResourceExecInterpreter
    The script interpreter to use.
    Args []string
    Optional arguments to pass to the source during execution.
    File OSPolicyResourceFile
    A remote or local file.
    OutputFilePath string
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
    Script string
    An inline script. The size of the script is limited to 32KiB.
    interpreter OSPolicyResourceExecResourceExecInterpreter
    The script interpreter to use.
    args List<String>
    Optional arguments to pass to the source during execution.
    file OSPolicyResourceFile
    A remote or local file.
    outputFilePath String
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
    script String
    An inline script. The size of the script is limited to 32KiB.
    interpreter OSPolicyResourceExecResourceExecInterpreter
    The script interpreter to use.
    args string[]
    Optional arguments to pass to the source during execution.
    file OSPolicyResourceFile
    A remote or local file.
    outputFilePath string
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
    script string
    An inline script. The size of the script is limited to 32KiB.
    interpreter OSPolicyResourceExecResourceExecInterpreter
    The script interpreter to use.
    args Sequence[str]
    Optional arguments to pass to the source during execution.
    file OSPolicyResourceFile
    A remote or local file.
    output_file_path str
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
    script str
    An inline script. The size of the script is limited to 32KiB.
    interpreter "INTERPRETER_UNSPECIFIED" | "NONE" | "SHELL" | "POWERSHELL"
    The script interpreter to use.
    args List<String>
    Optional arguments to pass to the source during execution.
    file Property Map
    A remote or local file.
    outputFilePath String
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
    script String
    An inline script. The size of the script is limited to 32KiB.

    OSPolicyResourceExecResourceExecInterpreter, OSPolicyResourceExecResourceExecInterpreterArgs

    InterpreterUnspecified
    INTERPRETER_UNSPECIFIEDInvalid value, the request will return validation error.
    None
    NONEIf an interpreter is not specified, the source is executed directly. This execution, without an interpreter, only succeeds for executables and scripts that have shebang lines.
    Shell
    SHELLIndicates that the script runs with /bin/sh on Linux and cmd.exe on Windows.
    Powershell
    POWERSHELLIndicates that the script runs with PowerShell.
    OSPolicyResourceExecResourceExecInterpreterInterpreterUnspecified
    INTERPRETER_UNSPECIFIEDInvalid value, the request will return validation error.
    OSPolicyResourceExecResourceExecInterpreterNone
    NONEIf an interpreter is not specified, the source is executed directly. This execution, without an interpreter, only succeeds for executables and scripts that have shebang lines.
    OSPolicyResourceExecResourceExecInterpreterShell
    SHELLIndicates that the script runs with /bin/sh on Linux and cmd.exe on Windows.
    OSPolicyResourceExecResourceExecInterpreterPowershell
    POWERSHELLIndicates that the script runs with PowerShell.
    InterpreterUnspecified
    INTERPRETER_UNSPECIFIEDInvalid value, the request will return validation error.
    None
    NONEIf an interpreter is not specified, the source is executed directly. This execution, without an interpreter, only succeeds for executables and scripts that have shebang lines.
    Shell
    SHELLIndicates that the script runs with /bin/sh on Linux and cmd.exe on Windows.
    Powershell
    POWERSHELLIndicates that the script runs with PowerShell.
    InterpreterUnspecified
    INTERPRETER_UNSPECIFIEDInvalid value, the request will return validation error.
    None
    NONEIf an interpreter is not specified, the source is executed directly. This execution, without an interpreter, only succeeds for executables and scripts that have shebang lines.
    Shell
    SHELLIndicates that the script runs with /bin/sh on Linux and cmd.exe on Windows.
    Powershell
    POWERSHELLIndicates that the script runs with PowerShell.
    INTERPRETER_UNSPECIFIED
    INTERPRETER_UNSPECIFIEDInvalid value, the request will return validation error.
    NONE
    NONEIf an interpreter is not specified, the source is executed directly. This execution, without an interpreter, only succeeds for executables and scripts that have shebang lines.
    SHELL
    SHELLIndicates that the script runs with /bin/sh on Linux and cmd.exe on Windows.
    POWERSHELL
    POWERSHELLIndicates that the script runs with PowerShell.
    "INTERPRETER_UNSPECIFIED"
    INTERPRETER_UNSPECIFIEDInvalid value, the request will return validation error.
    "NONE"
    NONEIf an interpreter is not specified, the source is executed directly. This execution, without an interpreter, only succeeds for executables and scripts that have shebang lines.
    "SHELL"
    SHELLIndicates that the script runs with /bin/sh on Linux and cmd.exe on Windows.
    "POWERSHELL"
    POWERSHELLIndicates that the script runs with PowerShell.

    OSPolicyResourceExecResourceExecResponse, OSPolicyResourceExecResourceExecResponseArgs

    Args List<string>
    Optional arguments to pass to the source during execution.
    File Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceFileResponse
    A remote or local file.
    Interpreter string
    The script interpreter to use.
    OutputFilePath string
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
    Script string
    An inline script. The size of the script is limited to 32KiB.
    Args []string
    Optional arguments to pass to the source during execution.
    File OSPolicyResourceFileResponse
    A remote or local file.
    Interpreter string
    The script interpreter to use.
    OutputFilePath string
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
    Script string
    An inline script. The size of the script is limited to 32KiB.
    args List<String>
    Optional arguments to pass to the source during execution.
    file OSPolicyResourceFileResponse
    A remote or local file.
    interpreter String
    The script interpreter to use.
    outputFilePath String
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
    script String
    An inline script. The size of the script is limited to 32KiB.
    args string[]
    Optional arguments to pass to the source during execution.
    file OSPolicyResourceFileResponse
    A remote or local file.
    interpreter string
    The script interpreter to use.
    outputFilePath string
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
    script string
    An inline script. The size of the script is limited to 32KiB.
    args Sequence[str]
    Optional arguments to pass to the source during execution.
    file OSPolicyResourceFileResponse
    A remote or local file.
    interpreter str
    The script interpreter to use.
    output_file_path str
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
    script str
    An inline script. The size of the script is limited to 32KiB.
    args List<String>
    Optional arguments to pass to the source during execution.
    file Property Map
    A remote or local file.
    interpreter String
    The script interpreter to use.
    outputFilePath String
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
    script String
    An inline script. The size of the script is limited to 32KiB.

    OSPolicyResourceExecResourceResponse, OSPolicyResourceExecResourceResponseArgs

    Enforce Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceExecResourceExecResponse
    What to run to bring this resource into the desired state. An exit code of 100 indicates "success", any other exit code indicates a failure running enforce.
    Validate Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceExecResourceExecResponse
    What to run to validate this resource is in the desired state. An exit code of 100 indicates "in desired state", and exit code of 101 indicates "not in desired state". Any other exit code indicates a failure running validate.
    Enforce OSPolicyResourceExecResourceExecResponse
    What to run to bring this resource into the desired state. An exit code of 100 indicates "success", any other exit code indicates a failure running enforce.
    Validate OSPolicyResourceExecResourceExecResponse
    What to run to validate this resource is in the desired state. An exit code of 100 indicates "in desired state", and exit code of 101 indicates "not in desired state". Any other exit code indicates a failure running validate.
    enforce OSPolicyResourceExecResourceExecResponse
    What to run to bring this resource into the desired state. An exit code of 100 indicates "success", any other exit code indicates a failure running enforce.
    validate OSPolicyResourceExecResourceExecResponse
    What to run to validate this resource is in the desired state. An exit code of 100 indicates "in desired state", and exit code of 101 indicates "not in desired state". Any other exit code indicates a failure running validate.
    enforce OSPolicyResourceExecResourceExecResponse
    What to run to bring this resource into the desired state. An exit code of 100 indicates "success", any other exit code indicates a failure running enforce.
    validate OSPolicyResourceExecResourceExecResponse
    What to run to validate this resource is in the desired state. An exit code of 100 indicates "in desired state", and exit code of 101 indicates "not in desired state". Any other exit code indicates a failure running validate.
    enforce OSPolicyResourceExecResourceExecResponse
    What to run to bring this resource into the desired state. An exit code of 100 indicates "success", any other exit code indicates a failure running enforce.
    validate OSPolicyResourceExecResourceExecResponse
    What to run to validate this resource is in the desired state. An exit code of 100 indicates "in desired state", and exit code of 101 indicates "not in desired state". Any other exit code indicates a failure running validate.
    enforce Property Map
    What to run to bring this resource into the desired state. An exit code of 100 indicates "success", any other exit code indicates a failure running enforce.
    validate Property Map
    What to run to validate this resource is in the desired state. An exit code of 100 indicates "in desired state", and exit code of 101 indicates "not in desired state". Any other exit code indicates a failure running validate.

    OSPolicyResourceFile, OSPolicyResourceFileArgs

    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceFileGcs
    A Cloud Storage object.
    LocalPath string
    A local path within the VM to use.
    Remote Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceFileRemote
    A generic remote file.
    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs OSPolicyResourceFileGcs
    A Cloud Storage object.
    LocalPath string
    A local path within the VM to use.
    Remote OSPolicyResourceFileRemote
    A generic remote file.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs OSPolicyResourceFileGcs
    A Cloud Storage object.
    localPath String
    A local path within the VM to use.
    remote OSPolicyResourceFileRemote
    A generic remote file.
    allowInsecure boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs OSPolicyResourceFileGcs
    A Cloud Storage object.
    localPath string
    A local path within the VM to use.
    remote OSPolicyResourceFileRemote
    A generic remote file.
    allow_insecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs OSPolicyResourceFileGcs
    A Cloud Storage object.
    local_path str
    A local path within the VM to use.
    remote OSPolicyResourceFileRemote
    A generic remote file.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs Property Map
    A Cloud Storage object.
    localPath String
    A local path within the VM to use.
    remote Property Map
    A generic remote file.

    OSPolicyResourceFileGcs, OSPolicyResourceFileGcsArgs

    Bucket string
    Bucket of the Cloud Storage object.
    Object string
    Name of the Cloud Storage object.
    Generation string
    Generation number of the Cloud Storage object.
    Bucket string
    Bucket of the Cloud Storage object.
    Object string
    Name of the Cloud Storage object.
    Generation string
    Generation number of the Cloud Storage object.
    bucket String
    Bucket of the Cloud Storage object.
    object String
    Name of the Cloud Storage object.
    generation String
    Generation number of the Cloud Storage object.
    bucket string
    Bucket of the Cloud Storage object.
    object string
    Name of the Cloud Storage object.
    generation string
    Generation number of the Cloud Storage object.
    bucket str
    Bucket of the Cloud Storage object.
    object str
    Name of the Cloud Storage object.
    generation str
    Generation number of the Cloud Storage object.
    bucket String
    Bucket of the Cloud Storage object.
    object String
    Name of the Cloud Storage object.
    generation String
    Generation number of the Cloud Storage object.

    OSPolicyResourceFileGcsResponse, OSPolicyResourceFileGcsResponseArgs

    Bucket string
    Bucket of the Cloud Storage object.
    Generation string
    Generation number of the Cloud Storage object.
    Object string
    Name of the Cloud Storage object.
    Bucket string
    Bucket of the Cloud Storage object.
    Generation string
    Generation number of the Cloud Storage object.
    Object string
    Name of the Cloud Storage object.
    bucket String
    Bucket of the Cloud Storage object.
    generation String
    Generation number of the Cloud Storage object.
    object String
    Name of the Cloud Storage object.
    bucket string
    Bucket of the Cloud Storage object.
    generation string
    Generation number of the Cloud Storage object.
    object string
    Name of the Cloud Storage object.
    bucket str
    Bucket of the Cloud Storage object.
    generation str
    Generation number of the Cloud Storage object.
    object str
    Name of the Cloud Storage object.
    bucket String
    Bucket of the Cloud Storage object.
    generation String
    Generation number of the Cloud Storage object.
    object String
    Name of the Cloud Storage object.

    OSPolicyResourceFileRemote, OSPolicyResourceFileRemoteArgs

    Uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    Uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    uri String
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.
    uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum string
    SHA256 checksum of the remote file.
    uri str
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256_checksum str
    SHA256 checksum of the remote file.
    uri String
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.

    OSPolicyResourceFileRemoteResponse, OSPolicyResourceFileRemoteResponseArgs

    Sha256Checksum string
    SHA256 checksum of the remote file.
    Uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    Uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.
    uri String
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum string
    SHA256 checksum of the remote file.
    uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256_checksum str
    SHA256 checksum of the remote file.
    uri str
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.
    uri String
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.

    OSPolicyResourceFileResource, OSPolicyResourceFileResourceArgs

    Path string
    The absolute path of the file within the VM.
    State Pulumi.GoogleNative.OSConfig.V1.OSPolicyResourceFileResourceState
    Desired state of the file.
    Content string
    A a file with this content. The size of the content is limited to 32KiB.
    File Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceFile
    A remote or local source.
    Permissions string
    Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
    Path string
    The absolute path of the file within the VM.
    State OSPolicyResourceFileResourceState
    Desired state of the file.
    Content string
    A a file with this content. The size of the content is limited to 32KiB.
    File OSPolicyResourceFile
    A remote or local source.
    Permissions string
    Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
    path String
    The absolute path of the file within the VM.
    state OSPolicyResourceFileResourceState
    Desired state of the file.
    content String
    A a file with this content. The size of the content is limited to 32KiB.
    file OSPolicyResourceFile
    A remote or local source.
    permissions String
    Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
    path string
    The absolute path of the file within the VM.
    state OSPolicyResourceFileResourceState
    Desired state of the file.
    content string
    A a file with this content. The size of the content is limited to 32KiB.
    file OSPolicyResourceFile
    A remote or local source.
    permissions string
    Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
    path str
    The absolute path of the file within the VM.
    state OSPolicyResourceFileResourceState
    Desired state of the file.
    content str
    A a file with this content. The size of the content is limited to 32KiB.
    file OSPolicyResourceFile
    A remote or local source.
    permissions str
    Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
    path String
    The absolute path of the file within the VM.
    state "DESIRED_STATE_UNSPECIFIED" | "PRESENT" | "ABSENT" | "CONTENTS_MATCH"
    Desired state of the file.
    content String
    A a file with this content. The size of the content is limited to 32KiB.
    file Property Map
    A remote or local source.
    permissions String
    Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4

    OSPolicyResourceFileResourceResponse, OSPolicyResourceFileResourceResponseArgs

    Content string
    A a file with this content. The size of the content is limited to 32KiB.
    File Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceFileResponse
    A remote or local source.
    Path string
    The absolute path of the file within the VM.
    Permissions string
    Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
    State string
    Desired state of the file.
    Content string
    A a file with this content. The size of the content is limited to 32KiB.
    File OSPolicyResourceFileResponse
    A remote or local source.
    Path string
    The absolute path of the file within the VM.
    Permissions string
    Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
    State string
    Desired state of the file.
    content String
    A a file with this content. The size of the content is limited to 32KiB.
    file OSPolicyResourceFileResponse
    A remote or local source.
    path String
    The absolute path of the file within the VM.
    permissions String
    Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
    state String
    Desired state of the file.
    content string
    A a file with this content. The size of the content is limited to 32KiB.
    file OSPolicyResourceFileResponse
    A remote or local source.
    path string
    The absolute path of the file within the VM.
    permissions string
    Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
    state string
    Desired state of the file.
    content str
    A a file with this content. The size of the content is limited to 32KiB.
    file OSPolicyResourceFileResponse
    A remote or local source.
    path str
    The absolute path of the file within the VM.
    permissions str
    Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
    state str
    Desired state of the file.
    content String
    A a file with this content. The size of the content is limited to 32KiB.
    file Property Map
    A remote or local source.
    path String
    The absolute path of the file within the VM.
    permissions String
    Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
    state String
    Desired state of the file.

    OSPolicyResourceFileResourceState, OSPolicyResourceFileResourceStateArgs

    DesiredStateUnspecified
    DESIRED_STATE_UNSPECIFIEDUnspecified is invalid.
    Present
    PRESENTEnsure file at path is present.
    Absent
    ABSENTEnsure file at path is absent.
    ContentsMatch
    CONTENTS_MATCHEnsure the contents of the file at path matches. If the file does not exist it will be created.
    OSPolicyResourceFileResourceStateDesiredStateUnspecified
    DESIRED_STATE_UNSPECIFIEDUnspecified is invalid.
    OSPolicyResourceFileResourceStatePresent
    PRESENTEnsure file at path is present.
    OSPolicyResourceFileResourceStateAbsent
    ABSENTEnsure file at path is absent.
    OSPolicyResourceFileResourceStateContentsMatch
    CONTENTS_MATCHEnsure the contents of the file at path matches. If the file does not exist it will be created.
    DesiredStateUnspecified
    DESIRED_STATE_UNSPECIFIEDUnspecified is invalid.
    Present
    PRESENTEnsure file at path is present.
    Absent
    ABSENTEnsure file at path is absent.
    ContentsMatch
    CONTENTS_MATCHEnsure the contents of the file at path matches. If the file does not exist it will be created.
    DesiredStateUnspecified
    DESIRED_STATE_UNSPECIFIEDUnspecified is invalid.
    Present
    PRESENTEnsure file at path is present.
    Absent
    ABSENTEnsure file at path is absent.
    ContentsMatch
    CONTENTS_MATCHEnsure the contents of the file at path matches. If the file does not exist it will be created.
    DESIRED_STATE_UNSPECIFIED
    DESIRED_STATE_UNSPECIFIEDUnspecified is invalid.
    PRESENT
    PRESENTEnsure file at path is present.
    ABSENT
    ABSENTEnsure file at path is absent.
    CONTENTS_MATCH
    CONTENTS_MATCHEnsure the contents of the file at path matches. If the file does not exist it will be created.
    "DESIRED_STATE_UNSPECIFIED"
    DESIRED_STATE_UNSPECIFIEDUnspecified is invalid.
    "PRESENT"
    PRESENTEnsure file at path is present.
    "ABSENT"
    ABSENTEnsure file at path is absent.
    "CONTENTS_MATCH"
    CONTENTS_MATCHEnsure the contents of the file at path matches. If the file does not exist it will be created.

    OSPolicyResourceFileResponse, OSPolicyResourceFileResponseArgs

    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceFileGcsResponse
    A Cloud Storage object.
    LocalPath string
    A local path within the VM to use.
    Remote Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceFileRemoteResponse
    A generic remote file.
    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs OSPolicyResourceFileGcsResponse
    A Cloud Storage object.
    LocalPath string
    A local path within the VM to use.
    Remote OSPolicyResourceFileRemoteResponse
    A generic remote file.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs OSPolicyResourceFileGcsResponse
    A Cloud Storage object.
    localPath String
    A local path within the VM to use.
    remote OSPolicyResourceFileRemoteResponse
    A generic remote file.
    allowInsecure boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs OSPolicyResourceFileGcsResponse
    A Cloud Storage object.
    localPath string
    A local path within the VM to use.
    remote OSPolicyResourceFileRemoteResponse
    A generic remote file.
    allow_insecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs OSPolicyResourceFileGcsResponse
    A Cloud Storage object.
    local_path str
    A local path within the VM to use.
    remote OSPolicyResourceFileRemoteResponse
    A generic remote file.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs Property Map
    A Cloud Storage object.
    localPath String
    A local path within the VM to use.
    remote Property Map
    A generic remote file.

    OSPolicyResourceGroup, OSPolicyResourceGroupArgs

    Resources List<Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResource>
    List of resources configured for this resource group. The resources are executed in the exact order specified here.
    InventoryFilters List<Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyInventoryFilter>
    List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally.
    Resources []OSPolicyResource
    List of resources configured for this resource group. The resources are executed in the exact order specified here.
    InventoryFilters []OSPolicyInventoryFilter
    List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally.
    resources List<OSPolicyResource>
    List of resources configured for this resource group. The resources are executed in the exact order specified here.
    inventoryFilters List<OSPolicyInventoryFilter>
    List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally.
    resources OSPolicyResource[]
    List of resources configured for this resource group. The resources are executed in the exact order specified here.
    inventoryFilters OSPolicyInventoryFilter[]
    List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally.
    resources Sequence[OSPolicyResource]
    List of resources configured for this resource group. The resources are executed in the exact order specified here.
    inventory_filters Sequence[OSPolicyInventoryFilter]
    List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally.
    resources List<Property Map>
    List of resources configured for this resource group. The resources are executed in the exact order specified here.
    inventoryFilters List<Property Map>
    List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally.

    OSPolicyResourceGroupResponse, OSPolicyResourceGroupResponseArgs

    InventoryFilters List<Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyInventoryFilterResponse>
    List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally.
    Resources List<Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceResponse>
    List of resources configured for this resource group. The resources are executed in the exact order specified here.
    InventoryFilters []OSPolicyInventoryFilterResponse
    List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally.
    Resources []OSPolicyResourceResponse
    List of resources configured for this resource group. The resources are executed in the exact order specified here.
    inventoryFilters List<OSPolicyInventoryFilterResponse>
    List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally.
    resources List<OSPolicyResourceResponse>
    List of resources configured for this resource group. The resources are executed in the exact order specified here.
    inventoryFilters OSPolicyInventoryFilterResponse[]
    List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally.
    resources OSPolicyResourceResponse[]
    List of resources configured for this resource group. The resources are executed in the exact order specified here.
    inventory_filters Sequence[OSPolicyInventoryFilterResponse]
    List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally.
    resources Sequence[OSPolicyResourceResponse]
    List of resources configured for this resource group. The resources are executed in the exact order specified here.
    inventoryFilters List<Property Map>
    List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally.
    resources List<Property Map>
    List of resources configured for this resource group. The resources are executed in the exact order specified here.

    OSPolicyResourcePackageResource, OSPolicyResourcePackageResourceArgs

    DesiredState Pulumi.GoogleNative.OSConfig.V1.OSPolicyResourcePackageResourceDesiredState
    The desired state the agent should maintain for this package.
    Apt Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourcePackageResourceAPT
    A package managed by Apt.
    Deb Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourcePackageResourceDeb
    A deb package file.
    Googet Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourcePackageResourceGooGet
    A package managed by GooGet.
    Msi Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourcePackageResourceMSI
    An MSI package.
    Rpm Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourcePackageResourceRPM
    An rpm package file.
    Yum Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourcePackageResourceYUM
    A package managed by YUM.
    Zypper Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourcePackageResourceZypper
    A package managed by Zypper.
    DesiredState OSPolicyResourcePackageResourceDesiredState
    The desired state the agent should maintain for this package.
    Apt OSPolicyResourcePackageResourceAPT
    A package managed by Apt.
    Deb OSPolicyResourcePackageResourceDeb
    A deb package file.
    Googet OSPolicyResourcePackageResourceGooGet
    A package managed by GooGet.
    Msi OSPolicyResourcePackageResourceMSI
    An MSI package.
    Rpm OSPolicyResourcePackageResourceRPM
    An rpm package file.
    Yum OSPolicyResourcePackageResourceYUM
    A package managed by YUM.
    Zypper OSPolicyResourcePackageResourceZypper
    A package managed by Zypper.
    desiredState OSPolicyResourcePackageResourceDesiredState
    The desired state the agent should maintain for this package.
    apt OSPolicyResourcePackageResourceAPT
    A package managed by Apt.
    deb OSPolicyResourcePackageResourceDeb
    A deb package file.
    googet OSPolicyResourcePackageResourceGooGet
    A package managed by GooGet.
    msi OSPolicyResourcePackageResourceMSI
    An MSI package.
    rpm OSPolicyResourcePackageResourceRPM
    An rpm package file.
    yum OSPolicyResourcePackageResourceYUM
    A package managed by YUM.
    zypper OSPolicyResourcePackageResourceZypper
    A package managed by Zypper.
    desiredState OSPolicyResourcePackageResourceDesiredState
    The desired state the agent should maintain for this package.
    apt OSPolicyResourcePackageResourceAPT
    A package managed by Apt.
    deb OSPolicyResourcePackageResourceDeb
    A deb package file.
    googet OSPolicyResourcePackageResourceGooGet
    A package managed by GooGet.
    msi OSPolicyResourcePackageResourceMSI
    An MSI package.
    rpm OSPolicyResourcePackageResourceRPM
    An rpm package file.
    yum OSPolicyResourcePackageResourceYUM
    A package managed by YUM.
    zypper OSPolicyResourcePackageResourceZypper
    A package managed by Zypper.
    desired_state OSPolicyResourcePackageResourceDesiredState
    The desired state the agent should maintain for this package.
    apt OSPolicyResourcePackageResourceAPT
    A package managed by Apt.
    deb OSPolicyResourcePackageResourceDeb
    A deb package file.
    googet OSPolicyResourcePackageResourceGooGet
    A package managed by GooGet.
    msi OSPolicyResourcePackageResourceMSI
    An MSI package.
    rpm OSPolicyResourcePackageResourceRPM
    An rpm package file.
    yum OSPolicyResourcePackageResourceYUM
    A package managed by YUM.
    zypper OSPolicyResourcePackageResourceZypper
    A package managed by Zypper.
    desiredState "DESIRED_STATE_UNSPECIFIED" | "INSTALLED" | "REMOVED"
    The desired state the agent should maintain for this package.
    apt Property Map
    A package managed by Apt.
    deb Property Map
    A deb package file.
    googet Property Map
    A package managed by GooGet.
    msi Property Map
    An MSI package.
    rpm Property Map
    An rpm package file.
    yum Property Map
    A package managed by YUM.
    zypper Property Map
    A package managed by Zypper.

    OSPolicyResourcePackageResourceAPT, OSPolicyResourcePackageResourceAPTArgs

    Name string
    Package name.
    Name string
    Package name.
    name String
    Package name.
    name string
    Package name.
    name str
    Package name.
    name String
    Package name.

    OSPolicyResourcePackageResourceAPTResponse, OSPolicyResourcePackageResourceAPTResponseArgs

    Name string
    Package name.
    Name string
    Package name.
    name String
    Package name.
    name string
    Package name.
    name str
    Package name.
    name String
    Package name.

    OSPolicyResourcePackageResourceDeb, OSPolicyResourcePackageResourceDebArgs

    Source Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceFile
    A deb package.
    PullDeps bool
    Whether dependencies should also be installed. - install when false: dpkg -i package - install when true: apt-get update && apt-get -y install package.deb
    Source OSPolicyResourceFile
    A deb package.
    PullDeps bool
    Whether dependencies should also be installed. - install when false: dpkg -i package - install when true: apt-get update && apt-get -y install package.deb
    source OSPolicyResourceFile
    A deb package.
    pullDeps Boolean
    Whether dependencies should also be installed. - install when false: dpkg -i package - install when true: apt-get update && apt-get -y install package.deb
    source OSPolicyResourceFile
    A deb package.
    pullDeps boolean
    Whether dependencies should also be installed. - install when false: dpkg -i package - install when true: apt-get update && apt-get -y install package.deb
    source OSPolicyResourceFile
    A deb package.
    pull_deps bool
    Whether dependencies should also be installed. - install when false: dpkg -i package - install when true: apt-get update && apt-get -y install package.deb
    source Property Map
    A deb package.
    pullDeps Boolean
    Whether dependencies should also be installed. - install when false: dpkg -i package - install when true: apt-get update && apt-get -y install package.deb

    OSPolicyResourcePackageResourceDebResponse, OSPolicyResourcePackageResourceDebResponseArgs

    PullDeps bool
    Whether dependencies should also be installed. - install when false: dpkg -i package - install when true: apt-get update && apt-get -y install package.deb
    Source Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceFileResponse
    A deb package.
    PullDeps bool
    Whether dependencies should also be installed. - install when false: dpkg -i package - install when true: apt-get update && apt-get -y install package.deb
    Source OSPolicyResourceFileResponse
    A deb package.
    pullDeps Boolean
    Whether dependencies should also be installed. - install when false: dpkg -i package - install when true: apt-get update && apt-get -y install package.deb
    source OSPolicyResourceFileResponse
    A deb package.
    pullDeps boolean
    Whether dependencies should also be installed. - install when false: dpkg -i package - install when true: apt-get update && apt-get -y install package.deb
    source OSPolicyResourceFileResponse
    A deb package.
    pull_deps bool
    Whether dependencies should also be installed. - install when false: dpkg -i package - install when true: apt-get update && apt-get -y install package.deb
    source OSPolicyResourceFileResponse
    A deb package.
    pullDeps Boolean
    Whether dependencies should also be installed. - install when false: dpkg -i package - install when true: apt-get update && apt-get -y install package.deb
    source Property Map
    A deb package.

    OSPolicyResourcePackageResourceDesiredState, OSPolicyResourcePackageResourceDesiredStateArgs

    DesiredStateUnspecified
    DESIRED_STATE_UNSPECIFIEDUnspecified is invalid.
    Installed
    INSTALLEDEnsure that the package is installed.
    Removed
    REMOVEDThe agent ensures that the package is not installed and uninstalls it if detected.
    OSPolicyResourcePackageResourceDesiredStateDesiredStateUnspecified
    DESIRED_STATE_UNSPECIFIEDUnspecified is invalid.
    OSPolicyResourcePackageResourceDesiredStateInstalled
    INSTALLEDEnsure that the package is installed.
    OSPolicyResourcePackageResourceDesiredStateRemoved
    REMOVEDThe agent ensures that the package is not installed and uninstalls it if detected.
    DesiredStateUnspecified
    DESIRED_STATE_UNSPECIFIEDUnspecified is invalid.
    Installed
    INSTALLEDEnsure that the package is installed.
    Removed
    REMOVEDThe agent ensures that the package is not installed and uninstalls it if detected.
    DesiredStateUnspecified
    DESIRED_STATE_UNSPECIFIEDUnspecified is invalid.
    Installed
    INSTALLEDEnsure that the package is installed.
    Removed
    REMOVEDThe agent ensures that the package is not installed and uninstalls it if detected.
    DESIRED_STATE_UNSPECIFIED
    DESIRED_STATE_UNSPECIFIEDUnspecified is invalid.
    INSTALLED
    INSTALLEDEnsure that the package is installed.
    REMOVED
    REMOVEDThe agent ensures that the package is not installed and uninstalls it if detected.
    "DESIRED_STATE_UNSPECIFIED"
    DESIRED_STATE_UNSPECIFIEDUnspecified is invalid.
    "INSTALLED"
    INSTALLEDEnsure that the package is installed.
    "REMOVED"
    REMOVEDThe agent ensures that the package is not installed and uninstalls it if detected.

    OSPolicyResourcePackageResourceGooGet, OSPolicyResourcePackageResourceGooGetArgs

    Name string
    Package name.
    Name string
    Package name.
    name String
    Package name.
    name string
    Package name.
    name str
    Package name.
    name String
    Package name.

    OSPolicyResourcePackageResourceGooGetResponse, OSPolicyResourcePackageResourceGooGetResponseArgs

    Name string
    Package name.
    Name string
    Package name.
    name String
    Package name.
    name string
    Package name.
    name str
    Package name.
    name String
    Package name.

    OSPolicyResourcePackageResourceMSI, OSPolicyResourcePackageResourceMSIArgs

    Source Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceFile
    The MSI package.
    Properties List<string>
    Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.
    Source OSPolicyResourceFile
    The MSI package.
    Properties []string
    Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.
    source OSPolicyResourceFile
    The MSI package.
    properties List<String>
    Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.
    source OSPolicyResourceFile
    The MSI package.
    properties string[]
    Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.
    source OSPolicyResourceFile
    The MSI package.
    properties Sequence[str]
    Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.
    source Property Map
    The MSI package.
    properties List<String>
    Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.

    OSPolicyResourcePackageResourceMSIResponse, OSPolicyResourcePackageResourceMSIResponseArgs

    Properties List<string>
    Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.
    Source Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceFileResponse
    The MSI package.
    Properties []string
    Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.
    Source OSPolicyResourceFileResponse
    The MSI package.
    properties List<String>
    Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.
    source OSPolicyResourceFileResponse
    The MSI package.
    properties string[]
    Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.
    source OSPolicyResourceFileResponse
    The MSI package.
    properties Sequence[str]
    Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.
    source OSPolicyResourceFileResponse
    The MSI package.
    properties List<String>
    Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.
    source Property Map
    The MSI package.

    OSPolicyResourcePackageResourceRPM, OSPolicyResourcePackageResourceRPMArgs

    Source Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceFile
    An rpm package.
    PullDeps bool
    Whether dependencies should also be installed. - install when false: rpm --upgrade --replacepkgs package.rpm - install when true: yum -y install package.rpm or zypper -y install package.rpm
    Source OSPolicyResourceFile
    An rpm package.
    PullDeps bool
    Whether dependencies should also be installed. - install when false: rpm --upgrade --replacepkgs package.rpm - install when true: yum -y install package.rpm or zypper -y install package.rpm
    source OSPolicyResourceFile
    An rpm package.
    pullDeps Boolean
    Whether dependencies should also be installed. - install when false: rpm --upgrade --replacepkgs package.rpm - install when true: yum -y install package.rpm or zypper -y install package.rpm
    source OSPolicyResourceFile
    An rpm package.
    pullDeps boolean
    Whether dependencies should also be installed. - install when false: rpm --upgrade --replacepkgs package.rpm - install when true: yum -y install package.rpm or zypper -y install package.rpm
    source OSPolicyResourceFile
    An rpm package.
    pull_deps bool
    Whether dependencies should also be installed. - install when false: rpm --upgrade --replacepkgs package.rpm - install when true: yum -y install package.rpm or zypper -y install package.rpm
    source Property Map
    An rpm package.
    pullDeps Boolean
    Whether dependencies should also be installed. - install when false: rpm --upgrade --replacepkgs package.rpm - install when true: yum -y install package.rpm or zypper -y install package.rpm

    OSPolicyResourcePackageResourceRPMResponse, OSPolicyResourcePackageResourceRPMResponseArgs

    PullDeps bool
    Whether dependencies should also be installed. - install when false: rpm --upgrade --replacepkgs package.rpm - install when true: yum -y install package.rpm or zypper -y install package.rpm
    Source Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceFileResponse
    An rpm package.
    PullDeps bool
    Whether dependencies should also be installed. - install when false: rpm --upgrade --replacepkgs package.rpm - install when true: yum -y install package.rpm or zypper -y install package.rpm
    Source OSPolicyResourceFileResponse
    An rpm package.
    pullDeps Boolean
    Whether dependencies should also be installed. - install when false: rpm --upgrade --replacepkgs package.rpm - install when true: yum -y install package.rpm or zypper -y install package.rpm
    source OSPolicyResourceFileResponse
    An rpm package.
    pullDeps boolean
    Whether dependencies should also be installed. - install when false: rpm --upgrade --replacepkgs package.rpm - install when true: yum -y install package.rpm or zypper -y install package.rpm
    source OSPolicyResourceFileResponse
    An rpm package.
    pull_deps bool
    Whether dependencies should also be installed. - install when false: rpm --upgrade --replacepkgs package.rpm - install when true: yum -y install package.rpm or zypper -y install package.rpm
    source OSPolicyResourceFileResponse
    An rpm package.
    pullDeps Boolean
    Whether dependencies should also be installed. - install when false: rpm --upgrade --replacepkgs package.rpm - install when true: yum -y install package.rpm or zypper -y install package.rpm
    source Property Map
    An rpm package.

    OSPolicyResourcePackageResourceResponse, OSPolicyResourcePackageResourceResponseArgs

    Apt Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourcePackageResourceAPTResponse
    A package managed by Apt.
    Deb Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourcePackageResourceDebResponse
    A deb package file.
    DesiredState string
    The desired state the agent should maintain for this package.
    Googet Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourcePackageResourceGooGetResponse
    A package managed by GooGet.
    Msi Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourcePackageResourceMSIResponse
    An MSI package.
    Rpm Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourcePackageResourceRPMResponse
    An rpm package file.
    Yum Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourcePackageResourceYUMResponse
    A package managed by YUM.
    Zypper Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourcePackageResourceZypperResponse
    A package managed by Zypper.
    Apt OSPolicyResourcePackageResourceAPTResponse
    A package managed by Apt.
    Deb OSPolicyResourcePackageResourceDebResponse
    A deb package file.
    DesiredState string
    The desired state the agent should maintain for this package.
    Googet OSPolicyResourcePackageResourceGooGetResponse
    A package managed by GooGet.
    Msi OSPolicyResourcePackageResourceMSIResponse
    An MSI package.
    Rpm OSPolicyResourcePackageResourceRPMResponse
    An rpm package file.
    Yum OSPolicyResourcePackageResourceYUMResponse
    A package managed by YUM.
    Zypper OSPolicyResourcePackageResourceZypperResponse
    A package managed by Zypper.
    apt OSPolicyResourcePackageResourceAPTResponse
    A package managed by Apt.
    deb OSPolicyResourcePackageResourceDebResponse
    A deb package file.
    desiredState String
    The desired state the agent should maintain for this package.
    googet OSPolicyResourcePackageResourceGooGetResponse
    A package managed by GooGet.
    msi OSPolicyResourcePackageResourceMSIResponse
    An MSI package.
    rpm OSPolicyResourcePackageResourceRPMResponse
    An rpm package file.
    yum OSPolicyResourcePackageResourceYUMResponse
    A package managed by YUM.
    zypper OSPolicyResourcePackageResourceZypperResponse
    A package managed by Zypper.
    apt OSPolicyResourcePackageResourceAPTResponse
    A package managed by Apt.
    deb OSPolicyResourcePackageResourceDebResponse
    A deb package file.
    desiredState string
    The desired state the agent should maintain for this package.
    googet OSPolicyResourcePackageResourceGooGetResponse
    A package managed by GooGet.
    msi OSPolicyResourcePackageResourceMSIResponse
    An MSI package.
    rpm OSPolicyResourcePackageResourceRPMResponse
    An rpm package file.
    yum OSPolicyResourcePackageResourceYUMResponse
    A package managed by YUM.
    zypper OSPolicyResourcePackageResourceZypperResponse
    A package managed by Zypper.
    apt OSPolicyResourcePackageResourceAPTResponse
    A package managed by Apt.
    deb OSPolicyResourcePackageResourceDebResponse
    A deb package file.
    desired_state str
    The desired state the agent should maintain for this package.
    googet OSPolicyResourcePackageResourceGooGetResponse
    A package managed by GooGet.
    msi OSPolicyResourcePackageResourceMSIResponse
    An MSI package.
    rpm OSPolicyResourcePackageResourceRPMResponse
    An rpm package file.
    yum OSPolicyResourcePackageResourceYUMResponse
    A package managed by YUM.
    zypper OSPolicyResourcePackageResourceZypperResponse
    A package managed by Zypper.
    apt Property Map
    A package managed by Apt.
    deb Property Map
    A deb package file.
    desiredState String
    The desired state the agent should maintain for this package.
    googet Property Map
    A package managed by GooGet.
    msi Property Map
    An MSI package.
    rpm Property Map
    An rpm package file.
    yum Property Map
    A package managed by YUM.
    zypper Property Map
    A package managed by Zypper.

    OSPolicyResourcePackageResourceYUM, OSPolicyResourcePackageResourceYUMArgs

    Name string
    Package name.
    Name string
    Package name.
    name String
    Package name.
    name string
    Package name.
    name str
    Package name.
    name String
    Package name.

    OSPolicyResourcePackageResourceYUMResponse, OSPolicyResourcePackageResourceYUMResponseArgs

    Name string
    Package name.
    Name string
    Package name.
    name String
    Package name.
    name string
    Package name.
    name str
    Package name.
    name String
    Package name.

    OSPolicyResourcePackageResourceZypper, OSPolicyResourcePackageResourceZypperArgs

    Name string
    Package name.
    Name string
    Package name.
    name String
    Package name.
    name string
    Package name.
    name str
    Package name.
    name String
    Package name.

    OSPolicyResourcePackageResourceZypperResponse, OSPolicyResourcePackageResourceZypperResponseArgs

    Name string
    Package name.
    Name string
    Package name.
    name String
    Package name.
    name string
    Package name.
    name str
    Package name.
    name String
    Package name.

    OSPolicyResourceRepositoryResource, OSPolicyResourceRepositoryResourceArgs

    apt Property Map
    An Apt Repository.
    goo Property Map
    A Goo Repository.
    yum Property Map
    A Yum Repository.
    zypper Property Map
    A Zypper Repository.

    OSPolicyResourceRepositoryResourceAptRepository, OSPolicyResourceRepositoryResourceAptRepositoryArgs

    ArchiveType Pulumi.GoogleNative.OSConfig.V1.OSPolicyResourceRepositoryResourceAptRepositoryArchiveType
    Type of archive files in this repository.
    Components List<string>
    List of components for this repository. Must contain at least one item.
    Distribution string
    Distribution of this repository.
    Uri string
    URI for this repository.
    GpgKey string
    URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
    ArchiveType OSPolicyResourceRepositoryResourceAptRepositoryArchiveType
    Type of archive files in this repository.
    Components []string
    List of components for this repository. Must contain at least one item.
    Distribution string
    Distribution of this repository.
    Uri string
    URI for this repository.
    GpgKey string
    URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
    archiveType OSPolicyResourceRepositoryResourceAptRepositoryArchiveType
    Type of archive files in this repository.
    components List<String>
    List of components for this repository. Must contain at least one item.
    distribution String
    Distribution of this repository.
    uri String
    URI for this repository.
    gpgKey String
    URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
    archiveType OSPolicyResourceRepositoryResourceAptRepositoryArchiveType
    Type of archive files in this repository.
    components string[]
    List of components for this repository. Must contain at least one item.
    distribution string
    Distribution of this repository.
    uri string
    URI for this repository.
    gpgKey string
    URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
    archive_type OSPolicyResourceRepositoryResourceAptRepositoryArchiveType
    Type of archive files in this repository.
    components Sequence[str]
    List of components for this repository. Must contain at least one item.
    distribution str
    Distribution of this repository.
    uri str
    URI for this repository.
    gpg_key str
    URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
    archiveType "ARCHIVE_TYPE_UNSPECIFIED" | "DEB" | "DEB_SRC"
    Type of archive files in this repository.
    components List<String>
    List of components for this repository. Must contain at least one item.
    distribution String
    Distribution of this repository.
    uri String
    URI for this repository.
    gpgKey String
    URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.

    OSPolicyResourceRepositoryResourceAptRepositoryArchiveType, OSPolicyResourceRepositoryResourceAptRepositoryArchiveTypeArgs

    ArchiveTypeUnspecified
    ARCHIVE_TYPE_UNSPECIFIEDUnspecified is invalid.
    Deb
    DEBDeb indicates that the archive contains binary files.
    DebSrc
    DEB_SRCDeb-src indicates that the archive contains source files.
    OSPolicyResourceRepositoryResourceAptRepositoryArchiveTypeArchiveTypeUnspecified
    ARCHIVE_TYPE_UNSPECIFIEDUnspecified is invalid.
    OSPolicyResourceRepositoryResourceAptRepositoryArchiveTypeDeb
    DEBDeb indicates that the archive contains binary files.
    OSPolicyResourceRepositoryResourceAptRepositoryArchiveTypeDebSrc
    DEB_SRCDeb-src indicates that the archive contains source files.
    ArchiveTypeUnspecified
    ARCHIVE_TYPE_UNSPECIFIEDUnspecified is invalid.
    Deb
    DEBDeb indicates that the archive contains binary files.
    DebSrc
    DEB_SRCDeb-src indicates that the archive contains source files.
    ArchiveTypeUnspecified
    ARCHIVE_TYPE_UNSPECIFIEDUnspecified is invalid.
    Deb
    DEBDeb indicates that the archive contains binary files.
    DebSrc
    DEB_SRCDeb-src indicates that the archive contains source files.
    ARCHIVE_TYPE_UNSPECIFIED
    ARCHIVE_TYPE_UNSPECIFIEDUnspecified is invalid.
    DEB
    DEBDeb indicates that the archive contains binary files.
    DEB_SRC
    DEB_SRCDeb-src indicates that the archive contains source files.
    "ARCHIVE_TYPE_UNSPECIFIED"
    ARCHIVE_TYPE_UNSPECIFIEDUnspecified is invalid.
    "DEB"
    DEBDeb indicates that the archive contains binary files.
    "DEB_SRC"
    DEB_SRCDeb-src indicates that the archive contains source files.

    OSPolicyResourceRepositoryResourceAptRepositoryResponse, OSPolicyResourceRepositoryResourceAptRepositoryResponseArgs

    ArchiveType string
    Type of archive files in this repository.
    Components List<string>
    List of components for this repository. Must contain at least one item.
    Distribution string
    Distribution of this repository.
    GpgKey string
    URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
    Uri string
    URI for this repository.
    ArchiveType string
    Type of archive files in this repository.
    Components []string
    List of components for this repository. Must contain at least one item.
    Distribution string
    Distribution of this repository.
    GpgKey string
    URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
    Uri string
    URI for this repository.
    archiveType String
    Type of archive files in this repository.
    components List<String>
    List of components for this repository. Must contain at least one item.
    distribution String
    Distribution of this repository.
    gpgKey String
    URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
    uri String
    URI for this repository.
    archiveType string
    Type of archive files in this repository.
    components string[]
    List of components for this repository. Must contain at least one item.
    distribution string
    Distribution of this repository.
    gpgKey string
    URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
    uri string
    URI for this repository.
    archive_type str
    Type of archive files in this repository.
    components Sequence[str]
    List of components for this repository. Must contain at least one item.
    distribution str
    Distribution of this repository.
    gpg_key str
    URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
    uri str
    URI for this repository.
    archiveType String
    Type of archive files in this repository.
    components List<String>
    List of components for this repository. Must contain at least one item.
    distribution String
    Distribution of this repository.
    gpgKey String
    URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
    uri String
    URI for this repository.

    OSPolicyResourceRepositoryResourceGooRepository, OSPolicyResourceRepositoryResourceGooRepositoryArgs

    Name string
    The name of the repository.
    Url string
    The url of the repository.
    Name string
    The name of the repository.
    Url string
    The url of the repository.
    name String
    The name of the repository.
    url String
    The url of the repository.
    name string
    The name of the repository.
    url string
    The url of the repository.
    name str
    The name of the repository.
    url str
    The url of the repository.
    name String
    The name of the repository.
    url String
    The url of the repository.

    OSPolicyResourceRepositoryResourceGooRepositoryResponse, OSPolicyResourceRepositoryResourceGooRepositoryResponseArgs

    Name string
    The name of the repository.
    Url string
    The url of the repository.
    Name string
    The name of the repository.
    Url string
    The url of the repository.
    name String
    The name of the repository.
    url String
    The url of the repository.
    name string
    The name of the repository.
    url string
    The url of the repository.
    name str
    The name of the repository.
    url str
    The url of the repository.
    name String
    The name of the repository.
    url String
    The url of the repository.

    OSPolicyResourceRepositoryResourceResponse, OSPolicyResourceRepositoryResourceResponseArgs

    apt Property Map
    An Apt Repository.
    goo Property Map
    A Goo Repository.
    yum Property Map
    A Yum Repository.
    zypper Property Map
    A Zypper Repository.

    OSPolicyResourceRepositoryResourceYumRepository, OSPolicyResourceRepositoryResourceYumRepositoryArgs

    BaseUrl string
    The location of the repository directory.
    Id string
    A one word, unique name for this repository. This is the repo id in the yum config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for resource conflicts.
    DisplayName string
    The display name of the repository.
    GpgKeys List<string>
    URIs of GPG keys.
    BaseUrl string
    The location of the repository directory.
    Id string
    A one word, unique name for this repository. This is the repo id in the yum config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for resource conflicts.
    DisplayName string
    The display name of the repository.
    GpgKeys []string
    URIs of GPG keys.
    baseUrl String
    The location of the repository directory.
    id String
    A one word, unique name for this repository. This is the repo id in the yum config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for resource conflicts.
    displayName String
    The display name of the repository.
    gpgKeys List<String>
    URIs of GPG keys.
    baseUrl string
    The location of the repository directory.
    id string
    A one word, unique name for this repository. This is the repo id in the yum config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for resource conflicts.
    displayName string
    The display name of the repository.
    gpgKeys string[]
    URIs of GPG keys.
    base_url str
    The location of the repository directory.
    id str
    A one word, unique name for this repository. This is the repo id in the yum config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for resource conflicts.
    display_name str
    The display name of the repository.
    gpg_keys Sequence[str]
    URIs of GPG keys.
    baseUrl String
    The location of the repository directory.
    id String
    A one word, unique name for this repository. This is the repo id in the yum config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for resource conflicts.
    displayName String
    The display name of the repository.
    gpgKeys List<String>
    URIs of GPG keys.

    OSPolicyResourceRepositoryResourceYumRepositoryResponse, OSPolicyResourceRepositoryResourceYumRepositoryResponseArgs

    BaseUrl string
    The location of the repository directory.
    DisplayName string
    The display name of the repository.
    GpgKeys List<string>
    URIs of GPG keys.
    BaseUrl string
    The location of the repository directory.
    DisplayName string
    The display name of the repository.
    GpgKeys []string
    URIs of GPG keys.
    baseUrl String
    The location of the repository directory.
    displayName String
    The display name of the repository.
    gpgKeys List<String>
    URIs of GPG keys.
    baseUrl string
    The location of the repository directory.
    displayName string
    The display name of the repository.
    gpgKeys string[]
    URIs of GPG keys.
    base_url str
    The location of the repository directory.
    display_name str
    The display name of the repository.
    gpg_keys Sequence[str]
    URIs of GPG keys.
    baseUrl String
    The location of the repository directory.
    displayName String
    The display name of the repository.
    gpgKeys List<String>
    URIs of GPG keys.

    OSPolicyResourceRepositoryResourceZypperRepository, OSPolicyResourceRepositoryResourceZypperRepositoryArgs

    BaseUrl string
    The location of the repository directory.
    Id string
    A one word, unique name for this repository. This is the repo id in the zypper config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
    DisplayName string
    The display name of the repository.
    GpgKeys List<string>
    URIs of GPG keys.
    BaseUrl string
    The location of the repository directory.
    Id string
    A one word, unique name for this repository. This is the repo id in the zypper config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
    DisplayName string
    The display name of the repository.
    GpgKeys []string
    URIs of GPG keys.
    baseUrl String
    The location of the repository directory.
    id String
    A one word, unique name for this repository. This is the repo id in the zypper config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
    displayName String
    The display name of the repository.
    gpgKeys List<String>
    URIs of GPG keys.
    baseUrl string
    The location of the repository directory.
    id string
    A one word, unique name for this repository. This is the repo id in the zypper config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
    displayName string
    The display name of the repository.
    gpgKeys string[]
    URIs of GPG keys.
    base_url str
    The location of the repository directory.
    id str
    A one word, unique name for this repository. This is the repo id in the zypper config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
    display_name str
    The display name of the repository.
    gpg_keys Sequence[str]
    URIs of GPG keys.
    baseUrl String
    The location of the repository directory.
    id String
    A one word, unique name for this repository. This is the repo id in the zypper config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
    displayName String
    The display name of the repository.
    gpgKeys List<String>
    URIs of GPG keys.

    OSPolicyResourceRepositoryResourceZypperRepositoryResponse, OSPolicyResourceRepositoryResourceZypperRepositoryResponseArgs

    BaseUrl string
    The location of the repository directory.
    DisplayName string
    The display name of the repository.
    GpgKeys List<string>
    URIs of GPG keys.
    BaseUrl string
    The location of the repository directory.
    DisplayName string
    The display name of the repository.
    GpgKeys []string
    URIs of GPG keys.
    baseUrl String
    The location of the repository directory.
    displayName String
    The display name of the repository.
    gpgKeys List<String>
    URIs of GPG keys.
    baseUrl string
    The location of the repository directory.
    displayName string
    The display name of the repository.
    gpgKeys string[]
    URIs of GPG keys.
    base_url str
    The location of the repository directory.
    display_name str
    The display name of the repository.
    gpg_keys Sequence[str]
    URIs of GPG keys.
    baseUrl String
    The location of the repository directory.
    displayName String
    The display name of the repository.
    gpgKeys List<String>
    URIs of GPG keys.

    OSPolicyResourceResponse, OSPolicyResourceResponseArgs

    exec Property Map
    Exec resource
    file Property Map
    File resource
    pkg Property Map
    Package resource
    repository Property Map
    Package repository resource

    OSPolicyResponse, OSPolicyResponseArgs

    AllowNoResourceGroupMatch bool
    This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
    Description string
    Policy description. Length of the description is limited to 1024 characters.
    Mode string
    Policy mode
    ResourceGroups List<Pulumi.GoogleNative.OSConfig.V1.Inputs.OSPolicyResourceGroupResponse>
    List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match
    AllowNoResourceGroupMatch bool
    This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
    Description string
    Policy description. Length of the description is limited to 1024 characters.
    Mode string
    Policy mode
    ResourceGroups []OSPolicyResourceGroupResponse
    List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match
    allowNoResourceGroupMatch Boolean
    This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
    description String
    Policy description. Length of the description is limited to 1024 characters.
    mode String
    Policy mode
    resourceGroups List<OSPolicyResourceGroupResponse>
    List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match
    allowNoResourceGroupMatch boolean
    This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
    description string
    Policy description. Length of the description is limited to 1024 characters.
    mode string
    Policy mode
    resourceGroups OSPolicyResourceGroupResponse[]
    List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match
    allow_no_resource_group_match bool
    This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
    description str
    Policy description. Length of the description is limited to 1024 characters.
    mode str
    Policy mode
    resource_groups Sequence[OSPolicyResourceGroupResponse]
    List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match
    allowNoResourceGroupMatch Boolean
    This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
    description String
    Policy description. Length of the description is limited to 1024 characters.
    mode String
    Policy mode
    resourceGroups List<Property Map>
    List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match

    Package Details

    Repository
    Google Cloud Native pulumi/pulumi-google-native
    License
    Apache-2.0
    google-native logo

    Google Cloud Native is in preview. Google Cloud Classic is fully supported.

    Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
    pulumi/pulumi-google-native