1. Packages
  2. Google Cloud (GCP) Classic
  3. API Docs
  4. osconfig
  5. OsPolicyAssignment
Google Cloud Classic v8.9.3 published on Monday, Nov 18, 2024 by Pulumi

gcp.osconfig.OsPolicyAssignment

Explore with Pulumi AI

gcp logo
Google Cloud Classic v8.9.3 published on Monday, Nov 18, 2024 by Pulumi

    OS policy assignment is an API resource that is used to apply a set of OS policies to a dynamically targeted group of Compute Engine VM instances. An OS policy is used to define the desired state configuration for a Compute Engine VM instance through a set of configuration resources that provide capabilities such as installing or removing software packages, or executing a script. For more information about the OS policy resource definitions and examples, see OS policy and OS policy assignment.

    To get more information about OSPolicyAssignment, see:

    Example Usage

    Os Config Os Policy Assignment Basic

    import * as pulumi from "@pulumi/pulumi";
    import * as gcp from "@pulumi/gcp";
    
    const primary = new gcp.osconfig.OsPolicyAssignment("primary", {
        instanceFilter: {
            all: false,
            exclusionLabels: [{
                labels: {
                    "label-two": "value-two",
                },
            }],
            inclusionLabels: [{
                labels: {
                    "label-one": "value-one",
                },
            }],
            inventories: [{
                osShortName: "centos",
                osVersion: "8.*",
            }],
        },
        location: "us-central1-a",
        name: "policy-assignment",
        osPolicies: [{
            id: "policy",
            mode: "VALIDATION",
            resourceGroups: [{
                resources: [
                    {
                        id: "apt-to-yum",
                        repository: {
                            apt: {
                                archiveType: "DEB",
                                components: ["doc"],
                                distribution: "debian",
                                uri: "https://atl.mirrors.clouvider.net/debian",
                                gpgKey: ".gnupg/pubring.kbx",
                            },
                        },
                    },
                    {
                        id: "exec1",
                        exec: {
                            validate: {
                                interpreter: "SHELL",
                                args: ["arg1"],
                                file: {
                                    localPath: "$HOME/script.sh",
                                },
                                outputFilePath: "$HOME/out",
                            },
                            enforce: {
                                interpreter: "SHELL",
                                args: ["arg1"],
                                file: {
                                    allowInsecure: true,
                                    remote: {
                                        uri: "https://www.example.com/script.sh",
                                        sha256Checksum: "c7938fed83afdccbb0e86a2a2e4cad7d5035012ca3214b4a61268393635c3063",
                                    },
                                },
                                outputFilePath: "$HOME/out",
                            },
                        },
                    },
                ],
                inventoryFilters: [{
                    osShortName: "centos",
                    osVersion: "8.*",
                }],
            }],
            allowNoResourceGroupMatch: false,
            description: "A test os policy",
        }],
        rollout: {
            disruptionBudget: {
                percent: 100,
            },
            minWaitDuration: "3s",
        },
        description: "A test os policy assignment",
    });
    
    import pulumi
    import pulumi_gcp as gcp
    
    primary = gcp.osconfig.OsPolicyAssignment("primary",
        instance_filter={
            "all": False,
            "exclusion_labels": [{
                "labels": {
                    "label-two": "value-two",
                },
            }],
            "inclusion_labels": [{
                "labels": {
                    "label-one": "value-one",
                },
            }],
            "inventories": [{
                "os_short_name": "centos",
                "os_version": "8.*",
            }],
        },
        location="us-central1-a",
        name="policy-assignment",
        os_policies=[{
            "id": "policy",
            "mode": "VALIDATION",
            "resource_groups": [{
                "resources": [
                    {
                        "id": "apt-to-yum",
                        "repository": {
                            "apt": {
                                "archive_type": "DEB",
                                "components": ["doc"],
                                "distribution": "debian",
                                "uri": "https://atl.mirrors.clouvider.net/debian",
                                "gpg_key": ".gnupg/pubring.kbx",
                            },
                        },
                    },
                    {
                        "id": "exec1",
                        "exec_": {
                            "validate": {
                                "interpreter": "SHELL",
                                "args": ["arg1"],
                                "file": {
                                    "local_path": "$HOME/script.sh",
                                },
                                "output_file_path": "$HOME/out",
                            },
                            "enforce": {
                                "interpreter": "SHELL",
                                "args": ["arg1"],
                                "file": {
                                    "allow_insecure": True,
                                    "remote": {
                                        "uri": "https://www.example.com/script.sh",
                                        "sha256_checksum": "c7938fed83afdccbb0e86a2a2e4cad7d5035012ca3214b4a61268393635c3063",
                                    },
                                },
                                "output_file_path": "$HOME/out",
                            },
                        },
                    },
                ],
                "inventory_filters": [{
                    "os_short_name": "centos",
                    "os_version": "8.*",
                }],
            }],
            "allow_no_resource_group_match": False,
            "description": "A test os policy",
        }],
        rollout={
            "disruption_budget": {
                "percent": 100,
            },
            "min_wait_duration": "3s",
        },
        description="A test os policy assignment")
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/osconfig"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		_, err := osconfig.NewOsPolicyAssignment(ctx, "primary", &osconfig.OsPolicyAssignmentArgs{
    			InstanceFilter: &osconfig.OsPolicyAssignmentInstanceFilterArgs{
    				All: pulumi.Bool(false),
    				ExclusionLabels: osconfig.OsPolicyAssignmentInstanceFilterExclusionLabelArray{
    					&osconfig.OsPolicyAssignmentInstanceFilterExclusionLabelArgs{
    						Labels: pulumi.StringMap{
    							"label-two": pulumi.String("value-two"),
    						},
    					},
    				},
    				InclusionLabels: osconfig.OsPolicyAssignmentInstanceFilterInclusionLabelArray{
    					&osconfig.OsPolicyAssignmentInstanceFilterInclusionLabelArgs{
    						Labels: pulumi.StringMap{
    							"label-one": pulumi.String("value-one"),
    						},
    					},
    				},
    				Inventories: osconfig.OsPolicyAssignmentInstanceFilterInventoryArray{
    					&osconfig.OsPolicyAssignmentInstanceFilterInventoryArgs{
    						OsShortName: pulumi.String("centos"),
    						OsVersion:   pulumi.String("8.*"),
    					},
    				},
    			},
    			Location: pulumi.String("us-central1-a"),
    			Name:     pulumi.String("policy-assignment"),
    			OsPolicies: osconfig.OsPolicyAssignmentOsPolicyArray{
    				&osconfig.OsPolicyAssignmentOsPolicyArgs{
    					Id:   pulumi.String("policy"),
    					Mode: pulumi.String("VALIDATION"),
    					ResourceGroups: osconfig.OsPolicyAssignmentOsPolicyResourceGroupArray{
    						&osconfig.OsPolicyAssignmentOsPolicyResourceGroupArgs{
    							Resources: osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceArray{
    								&osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceArgs{
    									Id: pulumi.String("apt-to-yum"),
    									Repository: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryArgs{
    										Apt: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryAptArgs{
    											ArchiveType: pulumi.String("DEB"),
    											Components: pulumi.StringArray{
    												pulumi.String("doc"),
    											},
    											Distribution: pulumi.String("debian"),
    											Uri:          pulumi.String("https://atl.mirrors.clouvider.net/debian"),
    											GpgKey:       pulumi.String(".gnupg/pubring.kbx"),
    										},
    									},
    								},
    								&osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceArgs{
    									Id: pulumi.String("exec1"),
    									Exec: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecArgs{
    										Validate: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateArgs{
    											Interpreter: pulumi.String("SHELL"),
    											Args: pulumi.StringArray{
    												pulumi.String("arg1"),
    											},
    											File: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileArgs{
    												LocalPath: pulumi.String("$HOME/script.sh"),
    											},
    											OutputFilePath: pulumi.String("$HOME/out"),
    										},
    										Enforce: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceArgs{
    											Interpreter: pulumi.String("SHELL"),
    											Args: pulumi.StringArray{
    												pulumi.String("arg1"),
    											},
    											File: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileArgs{
    												AllowInsecure: pulumi.Bool(true),
    												Remote: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileRemoteArgs{
    													Uri:            pulumi.String("https://www.example.com/script.sh"),
    													Sha256Checksum: pulumi.String("c7938fed83afdccbb0e86a2a2e4cad7d5035012ca3214b4a61268393635c3063"),
    												},
    											},
    											OutputFilePath: pulumi.String("$HOME/out"),
    										},
    									},
    								},
    							},
    							InventoryFilters: osconfig.OsPolicyAssignmentOsPolicyResourceGroupInventoryFilterArray{
    								&osconfig.OsPolicyAssignmentOsPolicyResourceGroupInventoryFilterArgs{
    									OsShortName: pulumi.String("centos"),
    									OsVersion:   pulumi.String("8.*"),
    								},
    							},
    						},
    					},
    					AllowNoResourceGroupMatch: pulumi.Bool(false),
    					Description:               pulumi.String("A test os policy"),
    				},
    			},
    			Rollout: &osconfig.OsPolicyAssignmentRolloutArgs{
    				DisruptionBudget: &osconfig.OsPolicyAssignmentRolloutDisruptionBudgetArgs{
    					Percent: pulumi.Int(100),
    				},
    				MinWaitDuration: pulumi.String("3s"),
    			},
    			Description: pulumi.String("A test os policy assignment"),
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Gcp = Pulumi.Gcp;
    
    return await Deployment.RunAsync(() => 
    {
        var primary = new Gcp.OsConfig.OsPolicyAssignment("primary", new()
        {
            InstanceFilter = new Gcp.OsConfig.Inputs.OsPolicyAssignmentInstanceFilterArgs
            {
                All = false,
                ExclusionLabels = new[]
                {
                    new Gcp.OsConfig.Inputs.OsPolicyAssignmentInstanceFilterExclusionLabelArgs
                    {
                        Labels = 
                        {
                            { "label-two", "value-two" },
                        },
                    },
                },
                InclusionLabels = new[]
                {
                    new Gcp.OsConfig.Inputs.OsPolicyAssignmentInstanceFilterInclusionLabelArgs
                    {
                        Labels = 
                        {
                            { "label-one", "value-one" },
                        },
                    },
                },
                Inventories = new[]
                {
                    new Gcp.OsConfig.Inputs.OsPolicyAssignmentInstanceFilterInventoryArgs
                    {
                        OsShortName = "centos",
                        OsVersion = "8.*",
                    },
                },
            },
            Location = "us-central1-a",
            Name = "policy-assignment",
            OsPolicies = new[]
            {
                new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyArgs
                {
                    Id = "policy",
                    Mode = "VALIDATION",
                    ResourceGroups = new[]
                    {
                        new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupArgs
                        {
                            Resources = new[]
                            {
                                new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceArgs
                                {
                                    Id = "apt-to-yum",
                                    Repository = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryArgs
                                    {
                                        Apt = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryAptArgs
                                        {
                                            ArchiveType = "DEB",
                                            Components = new[]
                                            {
                                                "doc",
                                            },
                                            Distribution = "debian",
                                            Uri = "https://atl.mirrors.clouvider.net/debian",
                                            GpgKey = ".gnupg/pubring.kbx",
                                        },
                                    },
                                },
                                new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceArgs
                                {
                                    Id = "exec1",
                                    Exec = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecArgs
                                    {
                                        Validate = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateArgs
                                        {
                                            Interpreter = "SHELL",
                                            Args = new[]
                                            {
                                                "arg1",
                                            },
                                            File = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileArgs
                                            {
                                                LocalPath = "$HOME/script.sh",
                                            },
                                            OutputFilePath = "$HOME/out",
                                        },
                                        Enforce = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceArgs
                                        {
                                            Interpreter = "SHELL",
                                            Args = new[]
                                            {
                                                "arg1",
                                            },
                                            File = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileArgs
                                            {
                                                AllowInsecure = true,
                                                Remote = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileRemoteArgs
                                                {
                                                    Uri = "https://www.example.com/script.sh",
                                                    Sha256Checksum = "c7938fed83afdccbb0e86a2a2e4cad7d5035012ca3214b4a61268393635c3063",
                                                },
                                            },
                                            OutputFilePath = "$HOME/out",
                                        },
                                    },
                                },
                            },
                            InventoryFilters = new[]
                            {
                                new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupInventoryFilterArgs
                                {
                                    OsShortName = "centos",
                                    OsVersion = "8.*",
                                },
                            },
                        },
                    },
                    AllowNoResourceGroupMatch = false,
                    Description = "A test os policy",
                },
            },
            Rollout = new Gcp.OsConfig.Inputs.OsPolicyAssignmentRolloutArgs
            {
                DisruptionBudget = new Gcp.OsConfig.Inputs.OsPolicyAssignmentRolloutDisruptionBudgetArgs
                {
                    Percent = 100,
                },
                MinWaitDuration = "3s",
            },
            Description = "A test os policy assignment",
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.gcp.osconfig.OsPolicyAssignment;
    import com.pulumi.gcp.osconfig.OsPolicyAssignmentArgs;
    import com.pulumi.gcp.osconfig.inputs.OsPolicyAssignmentInstanceFilterArgs;
    import com.pulumi.gcp.osconfig.inputs.OsPolicyAssignmentOsPolicyArgs;
    import com.pulumi.gcp.osconfig.inputs.OsPolicyAssignmentRolloutArgs;
    import com.pulumi.gcp.osconfig.inputs.OsPolicyAssignmentRolloutDisruptionBudgetArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var primary = new OsPolicyAssignment("primary", OsPolicyAssignmentArgs.builder()
                .instanceFilter(OsPolicyAssignmentInstanceFilterArgs.builder()
                    .all(false)
                    .exclusionLabels(OsPolicyAssignmentInstanceFilterExclusionLabelArgs.builder()
                        .labels(Map.of("label-two", "value-two"))
                        .build())
                    .inclusionLabels(OsPolicyAssignmentInstanceFilterInclusionLabelArgs.builder()
                        .labels(Map.of("label-one", "value-one"))
                        .build())
                    .inventories(OsPolicyAssignmentInstanceFilterInventoryArgs.builder()
                        .osShortName("centos")
                        .osVersion("8.*")
                        .build())
                    .build())
                .location("us-central1-a")
                .name("policy-assignment")
                .osPolicies(OsPolicyAssignmentOsPolicyArgs.builder()
                    .id("policy")
                    .mode("VALIDATION")
                    .resourceGroups(OsPolicyAssignmentOsPolicyResourceGroupArgs.builder()
                        .resources(                    
                            OsPolicyAssignmentOsPolicyResourceGroupResourceArgs.builder()
                                .id("apt-to-yum")
                                .repository(OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryArgs.builder()
                                    .apt(OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryAptArgs.builder()
                                        .archiveType("DEB")
                                        .components("doc")
                                        .distribution("debian")
                                        .uri("https://atl.mirrors.clouvider.net/debian")
                                        .gpgKey(".gnupg/pubring.kbx")
                                        .build())
                                    .build())
                                .build(),
                            OsPolicyAssignmentOsPolicyResourceGroupResourceArgs.builder()
                                .id("exec1")
                                .exec(OsPolicyAssignmentOsPolicyResourceGroupResourceExecArgs.builder()
                                    .validate(OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateArgs.builder()
                                        .interpreter("SHELL")
                                        .args("arg1")
                                        .file(OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileArgs.builder()
                                            .localPath("$HOME/script.sh")
                                            .build())
                                        .outputFilePath("$HOME/out")
                                        .build())
                                    .enforce(OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceArgs.builder()
                                        .interpreter("SHELL")
                                        .args("arg1")
                                        .file(OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileArgs.builder()
                                            .allowInsecure(true)
                                            .remote(OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileRemoteArgs.builder()
                                                .uri("https://www.example.com/script.sh")
                                                .sha256Checksum("c7938fed83afdccbb0e86a2a2e4cad7d5035012ca3214b4a61268393635c3063")
                                                .build())
                                            .build())
                                        .outputFilePath("$HOME/out")
                                        .build())
                                    .build())
                                .build())
                        .inventoryFilters(OsPolicyAssignmentOsPolicyResourceGroupInventoryFilterArgs.builder()
                            .osShortName("centos")
                            .osVersion("8.*")
                            .build())
                        .build())
                    .allowNoResourceGroupMatch(false)
                    .description("A test os policy")
                    .build())
                .rollout(OsPolicyAssignmentRolloutArgs.builder()
                    .disruptionBudget(OsPolicyAssignmentRolloutDisruptionBudgetArgs.builder()
                        .percent(100)
                        .build())
                    .minWaitDuration("3s")
                    .build())
                .description("A test os policy assignment")
                .build());
    
        }
    }
    
    resources:
      primary:
        type: gcp:osconfig:OsPolicyAssignment
        properties:
          instanceFilter:
            all: false
            exclusionLabels:
              - labels:
                  label-two: value-two
            inclusionLabels:
              - labels:
                  label-one: value-one
            inventories:
              - osShortName: centos
                osVersion: 8.*
          location: us-central1-a
          name: policy-assignment
          osPolicies:
            - id: policy
              mode: VALIDATION
              resourceGroups:
                - resources:
                    - id: apt-to-yum
                      repository:
                        apt:
                          archiveType: DEB
                          components:
                            - doc
                          distribution: debian
                          uri: https://atl.mirrors.clouvider.net/debian
                          gpgKey: .gnupg/pubring.kbx
                    - id: exec1
                      exec:
                        validate:
                          interpreter: SHELL
                          args:
                            - arg1
                          file:
                            localPath: $HOME/script.sh
                          outputFilePath: $HOME/out
                        enforce:
                          interpreter: SHELL
                          args:
                            - arg1
                          file:
                            allowInsecure: true
                            remote:
                              uri: https://www.example.com/script.sh
                              sha256Checksum: c7938fed83afdccbb0e86a2a2e4cad7d5035012ca3214b4a61268393635c3063
                          outputFilePath: $HOME/out
                  inventoryFilters:
                    - osShortName: centos
                      osVersion: 8.*
              allowNoResourceGroupMatch: false
              description: A test os policy
          rollout:
            disruptionBudget:
              percent: 100
            minWaitDuration: 3s
          description: A test os policy assignment
    

    Create OsPolicyAssignment Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new OsPolicyAssignment(name: string, args: OsPolicyAssignmentArgs, opts?: CustomResourceOptions);
    @overload
    def OsPolicyAssignment(resource_name: str,
                           args: OsPolicyAssignmentArgs,
                           opts: Optional[ResourceOptions] = None)
    
    @overload
    def OsPolicyAssignment(resource_name: str,
                           opts: Optional[ResourceOptions] = None,
                           instance_filter: Optional[OsPolicyAssignmentInstanceFilterArgs] = None,
                           location: Optional[str] = None,
                           os_policies: Optional[Sequence[OsPolicyAssignmentOsPolicyArgs]] = None,
                           rollout: Optional[OsPolicyAssignmentRolloutArgs] = None,
                           description: Optional[str] = None,
                           name: Optional[str] = None,
                           project: Optional[str] = None,
                           skip_await_rollout: Optional[bool] = None)
    func NewOsPolicyAssignment(ctx *Context, name string, args OsPolicyAssignmentArgs, opts ...ResourceOption) (*OsPolicyAssignment, error)
    public OsPolicyAssignment(string name, OsPolicyAssignmentArgs args, CustomResourceOptions? opts = null)
    public OsPolicyAssignment(String name, OsPolicyAssignmentArgs args)
    public OsPolicyAssignment(String name, OsPolicyAssignmentArgs args, CustomResourceOptions options)
    
    type: gcp:osconfig:OsPolicyAssignment
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    

    Parameters

    name string
    The unique name of the resource.
    args OsPolicyAssignmentArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args OsPolicyAssignmentArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args OsPolicyAssignmentArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args OsPolicyAssignmentArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args OsPolicyAssignmentArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var osPolicyAssignmentResource = new Gcp.OsConfig.OsPolicyAssignment("osPolicyAssignmentResource", new()
    {
        InstanceFilter = new Gcp.OsConfig.Inputs.OsPolicyAssignmentInstanceFilterArgs
        {
            All = false,
            ExclusionLabels = new[]
            {
                new Gcp.OsConfig.Inputs.OsPolicyAssignmentInstanceFilterExclusionLabelArgs
                {
                    Labels = 
                    {
                        { "string", "string" },
                    },
                },
            },
            InclusionLabels = new[]
            {
                new Gcp.OsConfig.Inputs.OsPolicyAssignmentInstanceFilterInclusionLabelArgs
                {
                    Labels = 
                    {
                        { "string", "string" },
                    },
                },
            },
            Inventories = new[]
            {
                new Gcp.OsConfig.Inputs.OsPolicyAssignmentInstanceFilterInventoryArgs
                {
                    OsShortName = "string",
                    OsVersion = "string",
                },
            },
        },
        Location = "string",
        OsPolicies = new[]
        {
            new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyArgs
            {
                Id = "string",
                Mode = "string",
                ResourceGroups = new[]
                {
                    new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupArgs
                    {
                        Resources = new[]
                        {
                            new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceArgs
                            {
                                Id = "string",
                                Exec = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecArgs
                                {
                                    Validate = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateArgs
                                    {
                                        Interpreter = "string",
                                        Args = new[]
                                        {
                                            "string",
                                        },
                                        File = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileArgs
                                        {
                                            AllowInsecure = false,
                                            Gcs = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileGcsArgs
                                            {
                                                Bucket = "string",
                                                Object = "string",
                                                Generation = 0,
                                            },
                                            LocalPath = "string",
                                            Remote = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileRemoteArgs
                                            {
                                                Uri = "string",
                                                Sha256Checksum = "string",
                                            },
                                        },
                                        OutputFilePath = "string",
                                        Script = "string",
                                    },
                                    Enforce = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceArgs
                                    {
                                        Interpreter = "string",
                                        Args = new[]
                                        {
                                            "string",
                                        },
                                        File = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileArgs
                                        {
                                            AllowInsecure = false,
                                            Gcs = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileGcsArgs
                                            {
                                                Bucket = "string",
                                                Object = "string",
                                                Generation = 0,
                                            },
                                            LocalPath = "string",
                                            Remote = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileRemoteArgs
                                            {
                                                Uri = "string",
                                                Sha256Checksum = "string",
                                            },
                                        },
                                        OutputFilePath = "string",
                                        Script = "string",
                                    },
                                },
                                File = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceFileArgs
                                {
                                    Path = "string",
                                    State = "string",
                                    Content = "string",
                                    File = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileArgs
                                    {
                                        AllowInsecure = false,
                                        Gcs = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileGcsArgs
                                        {
                                            Bucket = "string",
                                            Object = "string",
                                            Generation = 0,
                                        },
                                        LocalPath = "string",
                                        Remote = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileRemoteArgs
                                        {
                                            Uri = "string",
                                            Sha256Checksum = "string",
                                        },
                                    },
                                    Permissions = "string",
                                },
                                Pkg = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgArgs
                                {
                                    DesiredState = "string",
                                    Apt = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgAptArgs
                                    {
                                        Name = "string",
                                    },
                                    Deb = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebArgs
                                    {
                                        Source = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceArgs
                                        {
                                            AllowInsecure = false,
                                            Gcs = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceGcsArgs
                                            {
                                                Bucket = "string",
                                                Object = "string",
                                                Generation = 0,
                                            },
                                            LocalPath = "string",
                                            Remote = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceRemoteArgs
                                            {
                                                Uri = "string",
                                                Sha256Checksum = "string",
                                            },
                                        },
                                        PullDeps = false,
                                    },
                                    Googet = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgGoogetArgs
                                    {
                                        Name = "string",
                                    },
                                    Msi = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiArgs
                                    {
                                        Source = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceArgs
                                        {
                                            AllowInsecure = false,
                                            Gcs = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceGcsArgs
                                            {
                                                Bucket = "string",
                                                Object = "string",
                                                Generation = 0,
                                            },
                                            LocalPath = "string",
                                            Remote = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceRemoteArgs
                                            {
                                                Uri = "string",
                                                Sha256Checksum = "string",
                                            },
                                        },
                                        Properties = new[]
                                        {
                                            "string",
                                        },
                                    },
                                    Rpm = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmArgs
                                    {
                                        Source = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceArgs
                                        {
                                            AllowInsecure = false,
                                            Gcs = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceGcsArgs
                                            {
                                                Bucket = "string",
                                                Object = "string",
                                                Generation = 0,
                                            },
                                            LocalPath = "string",
                                            Remote = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceRemoteArgs
                                            {
                                                Uri = "string",
                                                Sha256Checksum = "string",
                                            },
                                        },
                                        PullDeps = false,
                                    },
                                    Yum = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgYumArgs
                                    {
                                        Name = "string",
                                    },
                                    Zypper = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgZypperArgs
                                    {
                                        Name = "string",
                                    },
                                },
                                Repository = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryArgs
                                {
                                    Apt = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryAptArgs
                                    {
                                        ArchiveType = "string",
                                        Components = new[]
                                        {
                                            "string",
                                        },
                                        Distribution = "string",
                                        Uri = "string",
                                        GpgKey = "string",
                                    },
                                    Goo = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryGooArgs
                                    {
                                        Name = "string",
                                        Url = "string",
                                    },
                                    Yum = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryYumArgs
                                    {
                                        BaseUrl = "string",
                                        Id = "string",
                                        DisplayName = "string",
                                        GpgKeys = new[]
                                        {
                                            "string",
                                        },
                                    },
                                    Zypper = new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryZypperArgs
                                    {
                                        BaseUrl = "string",
                                        Id = "string",
                                        DisplayName = "string",
                                        GpgKeys = new[]
                                        {
                                            "string",
                                        },
                                    },
                                },
                            },
                        },
                        InventoryFilters = new[]
                        {
                            new Gcp.OsConfig.Inputs.OsPolicyAssignmentOsPolicyResourceGroupInventoryFilterArgs
                            {
                                OsShortName = "string",
                                OsVersion = "string",
                            },
                        },
                    },
                },
                AllowNoResourceGroupMatch = false,
                Description = "string",
            },
        },
        Rollout = new Gcp.OsConfig.Inputs.OsPolicyAssignmentRolloutArgs
        {
            DisruptionBudget = new Gcp.OsConfig.Inputs.OsPolicyAssignmentRolloutDisruptionBudgetArgs
            {
                Fixed = 0,
                Percent = 0,
            },
            MinWaitDuration = "string",
        },
        Description = "string",
        Name = "string",
        Project = "string",
        SkipAwaitRollout = false,
    });
    
    example, err := osconfig.NewOsPolicyAssignment(ctx, "osPolicyAssignmentResource", &osconfig.OsPolicyAssignmentArgs{
    	InstanceFilter: &osconfig.OsPolicyAssignmentInstanceFilterArgs{
    		All: pulumi.Bool(false),
    		ExclusionLabels: osconfig.OsPolicyAssignmentInstanceFilterExclusionLabelArray{
    			&osconfig.OsPolicyAssignmentInstanceFilterExclusionLabelArgs{
    				Labels: pulumi.StringMap{
    					"string": pulumi.String("string"),
    				},
    			},
    		},
    		InclusionLabels: osconfig.OsPolicyAssignmentInstanceFilterInclusionLabelArray{
    			&osconfig.OsPolicyAssignmentInstanceFilterInclusionLabelArgs{
    				Labels: pulumi.StringMap{
    					"string": pulumi.String("string"),
    				},
    			},
    		},
    		Inventories: osconfig.OsPolicyAssignmentInstanceFilterInventoryArray{
    			&osconfig.OsPolicyAssignmentInstanceFilterInventoryArgs{
    				OsShortName: pulumi.String("string"),
    				OsVersion:   pulumi.String("string"),
    			},
    		},
    	},
    	Location: pulumi.String("string"),
    	OsPolicies: osconfig.OsPolicyAssignmentOsPolicyArray{
    		&osconfig.OsPolicyAssignmentOsPolicyArgs{
    			Id:   pulumi.String("string"),
    			Mode: pulumi.String("string"),
    			ResourceGroups: osconfig.OsPolicyAssignmentOsPolicyResourceGroupArray{
    				&osconfig.OsPolicyAssignmentOsPolicyResourceGroupArgs{
    					Resources: osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceArray{
    						&osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceArgs{
    							Id: pulumi.String("string"),
    							Exec: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecArgs{
    								Validate: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateArgs{
    									Interpreter: pulumi.String("string"),
    									Args: pulumi.StringArray{
    										pulumi.String("string"),
    									},
    									File: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileArgs{
    										AllowInsecure: pulumi.Bool(false),
    										Gcs: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileGcsArgs{
    											Bucket:     pulumi.String("string"),
    											Object:     pulumi.String("string"),
    											Generation: pulumi.Int(0),
    										},
    										LocalPath: pulumi.String("string"),
    										Remote: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileRemoteArgs{
    											Uri:            pulumi.String("string"),
    											Sha256Checksum: pulumi.String("string"),
    										},
    									},
    									OutputFilePath: pulumi.String("string"),
    									Script:         pulumi.String("string"),
    								},
    								Enforce: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceArgs{
    									Interpreter: pulumi.String("string"),
    									Args: pulumi.StringArray{
    										pulumi.String("string"),
    									},
    									File: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileArgs{
    										AllowInsecure: pulumi.Bool(false),
    										Gcs: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileGcsArgs{
    											Bucket:     pulumi.String("string"),
    											Object:     pulumi.String("string"),
    											Generation: pulumi.Int(0),
    										},
    										LocalPath: pulumi.String("string"),
    										Remote: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileRemoteArgs{
    											Uri:            pulumi.String("string"),
    											Sha256Checksum: pulumi.String("string"),
    										},
    									},
    									OutputFilePath: pulumi.String("string"),
    									Script:         pulumi.String("string"),
    								},
    							},
    							File: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceFileArgs{
    								Path:    pulumi.String("string"),
    								State:   pulumi.String("string"),
    								Content: pulumi.String("string"),
    								File: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileArgs{
    									AllowInsecure: pulumi.Bool(false),
    									Gcs: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileGcsArgs{
    										Bucket:     pulumi.String("string"),
    										Object:     pulumi.String("string"),
    										Generation: pulumi.Int(0),
    									},
    									LocalPath: pulumi.String("string"),
    									Remote: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileRemoteArgs{
    										Uri:            pulumi.String("string"),
    										Sha256Checksum: pulumi.String("string"),
    									},
    								},
    								Permissions: pulumi.String("string"),
    							},
    							Pkg: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgArgs{
    								DesiredState: pulumi.String("string"),
    								Apt: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgAptArgs{
    									Name: pulumi.String("string"),
    								},
    								Deb: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebArgs{
    									Source: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceArgs{
    										AllowInsecure: pulumi.Bool(false),
    										Gcs: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceGcsArgs{
    											Bucket:     pulumi.String("string"),
    											Object:     pulumi.String("string"),
    											Generation: pulumi.Int(0),
    										},
    										LocalPath: pulumi.String("string"),
    										Remote: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceRemoteArgs{
    											Uri:            pulumi.String("string"),
    											Sha256Checksum: pulumi.String("string"),
    										},
    									},
    									PullDeps: pulumi.Bool(false),
    								},
    								Googet: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgGoogetArgs{
    									Name: pulumi.String("string"),
    								},
    								Msi: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiArgs{
    									Source: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceArgs{
    										AllowInsecure: pulumi.Bool(false),
    										Gcs: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceGcsArgs{
    											Bucket:     pulumi.String("string"),
    											Object:     pulumi.String("string"),
    											Generation: pulumi.Int(0),
    										},
    										LocalPath: pulumi.String("string"),
    										Remote: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceRemoteArgs{
    											Uri:            pulumi.String("string"),
    											Sha256Checksum: pulumi.String("string"),
    										},
    									},
    									Properties: pulumi.StringArray{
    										pulumi.String("string"),
    									},
    								},
    								Rpm: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmArgs{
    									Source: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceArgs{
    										AllowInsecure: pulumi.Bool(false),
    										Gcs: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceGcsArgs{
    											Bucket:     pulumi.String("string"),
    											Object:     pulumi.String("string"),
    											Generation: pulumi.Int(0),
    										},
    										LocalPath: pulumi.String("string"),
    										Remote: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceRemoteArgs{
    											Uri:            pulumi.String("string"),
    											Sha256Checksum: pulumi.String("string"),
    										},
    									},
    									PullDeps: pulumi.Bool(false),
    								},
    								Yum: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgYumArgs{
    									Name: pulumi.String("string"),
    								},
    								Zypper: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourcePkgZypperArgs{
    									Name: pulumi.String("string"),
    								},
    							},
    							Repository: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryArgs{
    								Apt: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryAptArgs{
    									ArchiveType: pulumi.String("string"),
    									Components: pulumi.StringArray{
    										pulumi.String("string"),
    									},
    									Distribution: pulumi.String("string"),
    									Uri:          pulumi.String("string"),
    									GpgKey:       pulumi.String("string"),
    								},
    								Goo: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryGooArgs{
    									Name: pulumi.String("string"),
    									Url:  pulumi.String("string"),
    								},
    								Yum: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryYumArgs{
    									BaseUrl:     pulumi.String("string"),
    									Id:          pulumi.String("string"),
    									DisplayName: pulumi.String("string"),
    									GpgKeys: pulumi.StringArray{
    										pulumi.String("string"),
    									},
    								},
    								Zypper: &osconfig.OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryZypperArgs{
    									BaseUrl:     pulumi.String("string"),
    									Id:          pulumi.String("string"),
    									DisplayName: pulumi.String("string"),
    									GpgKeys: pulumi.StringArray{
    										pulumi.String("string"),
    									},
    								},
    							},
    						},
    					},
    					InventoryFilters: osconfig.OsPolicyAssignmentOsPolicyResourceGroupInventoryFilterArray{
    						&osconfig.OsPolicyAssignmentOsPolicyResourceGroupInventoryFilterArgs{
    							OsShortName: pulumi.String("string"),
    							OsVersion:   pulumi.String("string"),
    						},
    					},
    				},
    			},
    			AllowNoResourceGroupMatch: pulumi.Bool(false),
    			Description:               pulumi.String("string"),
    		},
    	},
    	Rollout: &osconfig.OsPolicyAssignmentRolloutArgs{
    		DisruptionBudget: &osconfig.OsPolicyAssignmentRolloutDisruptionBudgetArgs{
    			Fixed:   pulumi.Int(0),
    			Percent: pulumi.Int(0),
    		},
    		MinWaitDuration: pulumi.String("string"),
    	},
    	Description:      pulumi.String("string"),
    	Name:             pulumi.String("string"),
    	Project:          pulumi.String("string"),
    	SkipAwaitRollout: pulumi.Bool(false),
    })
    
    var osPolicyAssignmentResource = new OsPolicyAssignment("osPolicyAssignmentResource", OsPolicyAssignmentArgs.builder()
        .instanceFilter(OsPolicyAssignmentInstanceFilterArgs.builder()
            .all(false)
            .exclusionLabels(OsPolicyAssignmentInstanceFilterExclusionLabelArgs.builder()
                .labels(Map.of("string", "string"))
                .build())
            .inclusionLabels(OsPolicyAssignmentInstanceFilterInclusionLabelArgs.builder()
                .labels(Map.of("string", "string"))
                .build())
            .inventories(OsPolicyAssignmentInstanceFilterInventoryArgs.builder()
                .osShortName("string")
                .osVersion("string")
                .build())
            .build())
        .location("string")
        .osPolicies(OsPolicyAssignmentOsPolicyArgs.builder()
            .id("string")
            .mode("string")
            .resourceGroups(OsPolicyAssignmentOsPolicyResourceGroupArgs.builder()
                .resources(OsPolicyAssignmentOsPolicyResourceGroupResourceArgs.builder()
                    .id("string")
                    .exec(OsPolicyAssignmentOsPolicyResourceGroupResourceExecArgs.builder()
                        .validate(OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateArgs.builder()
                            .interpreter("string")
                            .args("string")
                            .file(OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileArgs.builder()
                                .allowInsecure(false)
                                .gcs(OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileGcsArgs.builder()
                                    .bucket("string")
                                    .object("string")
                                    .generation(0)
                                    .build())
                                .localPath("string")
                                .remote(OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileRemoteArgs.builder()
                                    .uri("string")
                                    .sha256Checksum("string")
                                    .build())
                                .build())
                            .outputFilePath("string")
                            .script("string")
                            .build())
                        .enforce(OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceArgs.builder()
                            .interpreter("string")
                            .args("string")
                            .file(OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileArgs.builder()
                                .allowInsecure(false)
                                .gcs(OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileGcsArgs.builder()
                                    .bucket("string")
                                    .object("string")
                                    .generation(0)
                                    .build())
                                .localPath("string")
                                .remote(OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileRemoteArgs.builder()
                                    .uri("string")
                                    .sha256Checksum("string")
                                    .build())
                                .build())
                            .outputFilePath("string")
                            .script("string")
                            .build())
                        .build())
                    .file(OsPolicyAssignmentOsPolicyResourceGroupResourceFileArgs.builder()
                        .path("string")
                        .state("string")
                        .content("string")
                        .file(OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileArgs.builder()
                            .allowInsecure(false)
                            .gcs(OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileGcsArgs.builder()
                                .bucket("string")
                                .object("string")
                                .generation(0)
                                .build())
                            .localPath("string")
                            .remote(OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileRemoteArgs.builder()
                                .uri("string")
                                .sha256Checksum("string")
                                .build())
                            .build())
                        .permissions("string")
                        .build())
                    .pkg(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgArgs.builder()
                        .desiredState("string")
                        .apt(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgAptArgs.builder()
                            .name("string")
                            .build())
                        .deb(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebArgs.builder()
                            .source(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceArgs.builder()
                                .allowInsecure(false)
                                .gcs(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceGcsArgs.builder()
                                    .bucket("string")
                                    .object("string")
                                    .generation(0)
                                    .build())
                                .localPath("string")
                                .remote(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceRemoteArgs.builder()
                                    .uri("string")
                                    .sha256Checksum("string")
                                    .build())
                                .build())
                            .pullDeps(false)
                            .build())
                        .googet(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgGoogetArgs.builder()
                            .name("string")
                            .build())
                        .msi(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiArgs.builder()
                            .source(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceArgs.builder()
                                .allowInsecure(false)
                                .gcs(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceGcsArgs.builder()
                                    .bucket("string")
                                    .object("string")
                                    .generation(0)
                                    .build())
                                .localPath("string")
                                .remote(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceRemoteArgs.builder()
                                    .uri("string")
                                    .sha256Checksum("string")
                                    .build())
                                .build())
                            .properties("string")
                            .build())
                        .rpm(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmArgs.builder()
                            .source(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceArgs.builder()
                                .allowInsecure(false)
                                .gcs(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceGcsArgs.builder()
                                    .bucket("string")
                                    .object("string")
                                    .generation(0)
                                    .build())
                                .localPath("string")
                                .remote(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceRemoteArgs.builder()
                                    .uri("string")
                                    .sha256Checksum("string")
                                    .build())
                                .build())
                            .pullDeps(false)
                            .build())
                        .yum(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgYumArgs.builder()
                            .name("string")
                            .build())
                        .zypper(OsPolicyAssignmentOsPolicyResourceGroupResourcePkgZypperArgs.builder()
                            .name("string")
                            .build())
                        .build())
                    .repository(OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryArgs.builder()
                        .apt(OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryAptArgs.builder()
                            .archiveType("string")
                            .components("string")
                            .distribution("string")
                            .uri("string")
                            .gpgKey("string")
                            .build())
                        .goo(OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryGooArgs.builder()
                            .name("string")
                            .url("string")
                            .build())
                        .yum(OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryYumArgs.builder()
                            .baseUrl("string")
                            .id("string")
                            .displayName("string")
                            .gpgKeys("string")
                            .build())
                        .zypper(OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryZypperArgs.builder()
                            .baseUrl("string")
                            .id("string")
                            .displayName("string")
                            .gpgKeys("string")
                            .build())
                        .build())
                    .build())
                .inventoryFilters(OsPolicyAssignmentOsPolicyResourceGroupInventoryFilterArgs.builder()
                    .osShortName("string")
                    .osVersion("string")
                    .build())
                .build())
            .allowNoResourceGroupMatch(false)
            .description("string")
            .build())
        .rollout(OsPolicyAssignmentRolloutArgs.builder()
            .disruptionBudget(OsPolicyAssignmentRolloutDisruptionBudgetArgs.builder()
                .fixed(0)
                .percent(0)
                .build())
            .minWaitDuration("string")
            .build())
        .description("string")
        .name("string")
        .project("string")
        .skipAwaitRollout(false)
        .build());
    
    os_policy_assignment_resource = gcp.osconfig.OsPolicyAssignment("osPolicyAssignmentResource",
        instance_filter={
            "all": False,
            "exclusion_labels": [{
                "labels": {
                    "string": "string",
                },
            }],
            "inclusion_labels": [{
                "labels": {
                    "string": "string",
                },
            }],
            "inventories": [{
                "os_short_name": "string",
                "os_version": "string",
            }],
        },
        location="string",
        os_policies=[{
            "id": "string",
            "mode": "string",
            "resource_groups": [{
                "resources": [{
                    "id": "string",
                    "exec_": {
                        "validate": {
                            "interpreter": "string",
                            "args": ["string"],
                            "file": {
                                "allow_insecure": False,
                                "gcs": {
                                    "bucket": "string",
                                    "object": "string",
                                    "generation": 0,
                                },
                                "local_path": "string",
                                "remote": {
                                    "uri": "string",
                                    "sha256_checksum": "string",
                                },
                            },
                            "output_file_path": "string",
                            "script": "string",
                        },
                        "enforce": {
                            "interpreter": "string",
                            "args": ["string"],
                            "file": {
                                "allow_insecure": False,
                                "gcs": {
                                    "bucket": "string",
                                    "object": "string",
                                    "generation": 0,
                                },
                                "local_path": "string",
                                "remote": {
                                    "uri": "string",
                                    "sha256_checksum": "string",
                                },
                            },
                            "output_file_path": "string",
                            "script": "string",
                        },
                    },
                    "file": {
                        "path": "string",
                        "state": "string",
                        "content": "string",
                        "file": {
                            "allow_insecure": False,
                            "gcs": {
                                "bucket": "string",
                                "object": "string",
                                "generation": 0,
                            },
                            "local_path": "string",
                            "remote": {
                                "uri": "string",
                                "sha256_checksum": "string",
                            },
                        },
                        "permissions": "string",
                    },
                    "pkg": {
                        "desired_state": "string",
                        "apt": {
                            "name": "string",
                        },
                        "deb": {
                            "source": {
                                "allow_insecure": False,
                                "gcs": {
                                    "bucket": "string",
                                    "object": "string",
                                    "generation": 0,
                                },
                                "local_path": "string",
                                "remote": {
                                    "uri": "string",
                                    "sha256_checksum": "string",
                                },
                            },
                            "pull_deps": False,
                        },
                        "googet": {
                            "name": "string",
                        },
                        "msi": {
                            "source": {
                                "allow_insecure": False,
                                "gcs": {
                                    "bucket": "string",
                                    "object": "string",
                                    "generation": 0,
                                },
                                "local_path": "string",
                                "remote": {
                                    "uri": "string",
                                    "sha256_checksum": "string",
                                },
                            },
                            "properties": ["string"],
                        },
                        "rpm": {
                            "source": {
                                "allow_insecure": False,
                                "gcs": {
                                    "bucket": "string",
                                    "object": "string",
                                    "generation": 0,
                                },
                                "local_path": "string",
                                "remote": {
                                    "uri": "string",
                                    "sha256_checksum": "string",
                                },
                            },
                            "pull_deps": False,
                        },
                        "yum": {
                            "name": "string",
                        },
                        "zypper": {
                            "name": "string",
                        },
                    },
                    "repository": {
                        "apt": {
                            "archive_type": "string",
                            "components": ["string"],
                            "distribution": "string",
                            "uri": "string",
                            "gpg_key": "string",
                        },
                        "goo": {
                            "name": "string",
                            "url": "string",
                        },
                        "yum": {
                            "base_url": "string",
                            "id": "string",
                            "display_name": "string",
                            "gpg_keys": ["string"],
                        },
                        "zypper": {
                            "base_url": "string",
                            "id": "string",
                            "display_name": "string",
                            "gpg_keys": ["string"],
                        },
                    },
                }],
                "inventory_filters": [{
                    "os_short_name": "string",
                    "os_version": "string",
                }],
            }],
            "allow_no_resource_group_match": False,
            "description": "string",
        }],
        rollout={
            "disruption_budget": {
                "fixed": 0,
                "percent": 0,
            },
            "min_wait_duration": "string",
        },
        description="string",
        name="string",
        project="string",
        skip_await_rollout=False)
    
    const osPolicyAssignmentResource = new gcp.osconfig.OsPolicyAssignment("osPolicyAssignmentResource", {
        instanceFilter: {
            all: false,
            exclusionLabels: [{
                labels: {
                    string: "string",
                },
            }],
            inclusionLabels: [{
                labels: {
                    string: "string",
                },
            }],
            inventories: [{
                osShortName: "string",
                osVersion: "string",
            }],
        },
        location: "string",
        osPolicies: [{
            id: "string",
            mode: "string",
            resourceGroups: [{
                resources: [{
                    id: "string",
                    exec: {
                        validate: {
                            interpreter: "string",
                            args: ["string"],
                            file: {
                                allowInsecure: false,
                                gcs: {
                                    bucket: "string",
                                    object: "string",
                                    generation: 0,
                                },
                                localPath: "string",
                                remote: {
                                    uri: "string",
                                    sha256Checksum: "string",
                                },
                            },
                            outputFilePath: "string",
                            script: "string",
                        },
                        enforce: {
                            interpreter: "string",
                            args: ["string"],
                            file: {
                                allowInsecure: false,
                                gcs: {
                                    bucket: "string",
                                    object: "string",
                                    generation: 0,
                                },
                                localPath: "string",
                                remote: {
                                    uri: "string",
                                    sha256Checksum: "string",
                                },
                            },
                            outputFilePath: "string",
                            script: "string",
                        },
                    },
                    file: {
                        path: "string",
                        state: "string",
                        content: "string",
                        file: {
                            allowInsecure: false,
                            gcs: {
                                bucket: "string",
                                object: "string",
                                generation: 0,
                            },
                            localPath: "string",
                            remote: {
                                uri: "string",
                                sha256Checksum: "string",
                            },
                        },
                        permissions: "string",
                    },
                    pkg: {
                        desiredState: "string",
                        apt: {
                            name: "string",
                        },
                        deb: {
                            source: {
                                allowInsecure: false,
                                gcs: {
                                    bucket: "string",
                                    object: "string",
                                    generation: 0,
                                },
                                localPath: "string",
                                remote: {
                                    uri: "string",
                                    sha256Checksum: "string",
                                },
                            },
                            pullDeps: false,
                        },
                        googet: {
                            name: "string",
                        },
                        msi: {
                            source: {
                                allowInsecure: false,
                                gcs: {
                                    bucket: "string",
                                    object: "string",
                                    generation: 0,
                                },
                                localPath: "string",
                                remote: {
                                    uri: "string",
                                    sha256Checksum: "string",
                                },
                            },
                            properties: ["string"],
                        },
                        rpm: {
                            source: {
                                allowInsecure: false,
                                gcs: {
                                    bucket: "string",
                                    object: "string",
                                    generation: 0,
                                },
                                localPath: "string",
                                remote: {
                                    uri: "string",
                                    sha256Checksum: "string",
                                },
                            },
                            pullDeps: false,
                        },
                        yum: {
                            name: "string",
                        },
                        zypper: {
                            name: "string",
                        },
                    },
                    repository: {
                        apt: {
                            archiveType: "string",
                            components: ["string"],
                            distribution: "string",
                            uri: "string",
                            gpgKey: "string",
                        },
                        goo: {
                            name: "string",
                            url: "string",
                        },
                        yum: {
                            baseUrl: "string",
                            id: "string",
                            displayName: "string",
                            gpgKeys: ["string"],
                        },
                        zypper: {
                            baseUrl: "string",
                            id: "string",
                            displayName: "string",
                            gpgKeys: ["string"],
                        },
                    },
                }],
                inventoryFilters: [{
                    osShortName: "string",
                    osVersion: "string",
                }],
            }],
            allowNoResourceGroupMatch: false,
            description: "string",
        }],
        rollout: {
            disruptionBudget: {
                fixed: 0,
                percent: 0,
            },
            minWaitDuration: "string",
        },
        description: "string",
        name: "string",
        project: "string",
        skipAwaitRollout: false,
    });
    
    type: gcp:osconfig:OsPolicyAssignment
    properties:
        description: string
        instanceFilter:
            all: false
            exclusionLabels:
                - labels:
                    string: string
            inclusionLabels:
                - labels:
                    string: string
            inventories:
                - osShortName: string
                  osVersion: string
        location: string
        name: string
        osPolicies:
            - allowNoResourceGroupMatch: false
              description: string
              id: string
              mode: string
              resourceGroups:
                - inventoryFilters:
                    - osShortName: string
                      osVersion: string
                  resources:
                    - exec:
                        enforce:
                            args:
                                - string
                            file:
                                allowInsecure: false
                                gcs:
                                    bucket: string
                                    generation: 0
                                    object: string
                                localPath: string
                                remote:
                                    sha256Checksum: string
                                    uri: string
                            interpreter: string
                            outputFilePath: string
                            script: string
                        validate:
                            args:
                                - string
                            file:
                                allowInsecure: false
                                gcs:
                                    bucket: string
                                    generation: 0
                                    object: string
                                localPath: string
                                remote:
                                    sha256Checksum: string
                                    uri: string
                            interpreter: string
                            outputFilePath: string
                            script: string
                      file:
                        content: string
                        file:
                            allowInsecure: false
                            gcs:
                                bucket: string
                                generation: 0
                                object: string
                            localPath: string
                            remote:
                                sha256Checksum: string
                                uri: string
                        path: string
                        permissions: string
                        state: string
                      id: string
                      pkg:
                        apt:
                            name: string
                        deb:
                            pullDeps: false
                            source:
                                allowInsecure: false
                                gcs:
                                    bucket: string
                                    generation: 0
                                    object: string
                                localPath: string
                                remote:
                                    sha256Checksum: string
                                    uri: string
                        desiredState: string
                        googet:
                            name: string
                        msi:
                            properties:
                                - string
                            source:
                                allowInsecure: false
                                gcs:
                                    bucket: string
                                    generation: 0
                                    object: string
                                localPath: string
                                remote:
                                    sha256Checksum: string
                                    uri: string
                        rpm:
                            pullDeps: false
                            source:
                                allowInsecure: false
                                gcs:
                                    bucket: string
                                    generation: 0
                                    object: string
                                localPath: string
                                remote:
                                    sha256Checksum: string
                                    uri: string
                        yum:
                            name: string
                        zypper:
                            name: string
                      repository:
                        apt:
                            archiveType: string
                            components:
                                - string
                            distribution: string
                            gpgKey: string
                            uri: string
                        goo:
                            name: string
                            url: string
                        yum:
                            baseUrl: string
                            displayName: string
                            gpgKeys:
                                - string
                            id: string
                        zypper:
                            baseUrl: string
                            displayName: string
                            gpgKeys:
                                - string
                            id: string
        project: string
        rollout:
            disruptionBudget:
                fixed: 0
                percent: 0
            minWaitDuration: string
        skipAwaitRollout: false
    

    OsPolicyAssignment Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The OsPolicyAssignment resource accepts the following input properties:

    InstanceFilter OsPolicyAssignmentInstanceFilter
    Filter to select VMs. Structure is documented below.
    Location string
    The location for the resource
    OsPolicies List<OsPolicyAssignmentOsPolicy>
    List of OS policies to be applied to the VMs. Structure is documented below.
    Rollout OsPolicyAssignmentRollout
    Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted. Structure is documented below.
    Description string
    OS policy assignment description. Length of the description is limited to 1024 characters.
    Name string
    Resource name.
    Project string
    The project for the resource
    SkipAwaitRollout bool
    Set to true to skip awaiting rollout during resource creation and update.
    InstanceFilter OsPolicyAssignmentInstanceFilterArgs
    Filter to select VMs. Structure is documented below.
    Location string
    The location for the resource
    OsPolicies []OsPolicyAssignmentOsPolicyArgs
    List of OS policies to be applied to the VMs. Structure is documented below.
    Rollout OsPolicyAssignmentRolloutArgs
    Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted. Structure is documented below.
    Description string
    OS policy assignment description. Length of the description is limited to 1024 characters.
    Name string
    Resource name.
    Project string
    The project for the resource
    SkipAwaitRollout bool
    Set to true to skip awaiting rollout during resource creation and update.
    instanceFilter OsPolicyAssignmentInstanceFilter
    Filter to select VMs. Structure is documented below.
    location String
    The location for the resource
    osPolicies List<OsPolicyAssignmentOsPolicy>
    List of OS policies to be applied to the VMs. Structure is documented below.
    rollout OsPolicyAssignmentRollout
    Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted. Structure is documented below.
    description String
    OS policy assignment description. Length of the description is limited to 1024 characters.
    name String
    Resource name.
    project String
    The project for the resource
    skipAwaitRollout Boolean
    Set to true to skip awaiting rollout during resource creation and update.
    instanceFilter OsPolicyAssignmentInstanceFilter
    Filter to select VMs. Structure is documented below.
    location string
    The location for the resource
    osPolicies OsPolicyAssignmentOsPolicy[]
    List of OS policies to be applied to the VMs. Structure is documented below.
    rollout OsPolicyAssignmentRollout
    Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted. Structure is documented below.
    description string
    OS policy assignment description. Length of the description is limited to 1024 characters.
    name string
    Resource name.
    project string
    The project for the resource
    skipAwaitRollout boolean
    Set to true to skip awaiting rollout during resource creation and update.
    instance_filter OsPolicyAssignmentInstanceFilterArgs
    Filter to select VMs. Structure is documented below.
    location str
    The location for the resource
    os_policies Sequence[OsPolicyAssignmentOsPolicyArgs]
    List of OS policies to be applied to the VMs. Structure is documented below.
    rollout OsPolicyAssignmentRolloutArgs
    Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted. Structure is documented below.
    description str
    OS policy assignment description. Length of the description is limited to 1024 characters.
    name str
    Resource name.
    project str
    The project for the resource
    skip_await_rollout bool
    Set to true to skip awaiting rollout during resource creation and update.
    instanceFilter Property Map
    Filter to select VMs. Structure is documented below.
    location String
    The location for the resource
    osPolicies List<Property Map>
    List of OS policies to be applied to the VMs. Structure is documented below.
    rollout Property Map
    Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted. Structure is documented below.
    description String
    OS policy assignment description. Length of the description is limited to 1024 characters.
    name String
    Resource name.
    project String
    The project for the resource
    skipAwaitRollout Boolean
    Set to true to skip awaiting rollout during resource creation and update.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the OsPolicyAssignment resource produces the following output properties:

    Baseline bool
    Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision. For a given OS policy assignment, there is only one revision with a value of true for this field.
    Deleted bool
    Output only. Indicates that this revision deletes the OS policy assignment.
    Etag string
    The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
    Id string
    The provider-assigned unique ID for this managed resource.
    Reconciling bool
    Output only. Indicates that reconciliation is in progress for the revision. This value is true when the rollout_state is one of:
    RevisionCreateTime string
    Output only. The timestamp that the revision was created.
    RevisionId string
    Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
    RolloutState string
    Output only. OS policy assignment rollout state
    Uid string
    Output only. Server generated unique id for the OS policy assignment resource.
    Baseline bool
    Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision. For a given OS policy assignment, there is only one revision with a value of true for this field.
    Deleted bool
    Output only. Indicates that this revision deletes the OS policy assignment.
    Etag string
    The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
    Id string
    The provider-assigned unique ID for this managed resource.
    Reconciling bool
    Output only. Indicates that reconciliation is in progress for the revision. This value is true when the rollout_state is one of:
    RevisionCreateTime string
    Output only. The timestamp that the revision was created.
    RevisionId string
    Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
    RolloutState string
    Output only. OS policy assignment rollout state
    Uid string
    Output only. Server generated unique id for the OS policy assignment resource.
    baseline Boolean
    Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision. For a given OS policy assignment, there is only one revision with a value of true for this field.
    deleted Boolean
    Output only. Indicates that this revision deletes the OS policy assignment.
    etag String
    The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
    id String
    The provider-assigned unique ID for this managed resource.
    reconciling Boolean
    Output only. Indicates that reconciliation is in progress for the revision. This value is true when the rollout_state is one of:
    revisionCreateTime String
    Output only. The timestamp that the revision was created.
    revisionId String
    Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
    rolloutState String
    Output only. OS policy assignment rollout state
    uid String
    Output only. Server generated unique id for the OS policy assignment resource.
    baseline boolean
    Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision. For a given OS policy assignment, there is only one revision with a value of true for this field.
    deleted boolean
    Output only. Indicates that this revision deletes the OS policy assignment.
    etag string
    The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
    id string
    The provider-assigned unique ID for this managed resource.
    reconciling boolean
    Output only. Indicates that reconciliation is in progress for the revision. This value is true when the rollout_state is one of:
    revisionCreateTime string
    Output only. The timestamp that the revision was created.
    revisionId string
    Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
    rolloutState string
    Output only. OS policy assignment rollout state
    uid string
    Output only. Server generated unique id for the OS policy assignment resource.
    baseline bool
    Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision. For a given OS policy assignment, there is only one revision with a value of true for this field.
    deleted bool
    Output only. Indicates that this revision deletes the OS policy assignment.
    etag str
    The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
    id str
    The provider-assigned unique ID for this managed resource.
    reconciling bool
    Output only. Indicates that reconciliation is in progress for the revision. This value is true when the rollout_state is one of:
    revision_create_time str
    Output only. The timestamp that the revision was created.
    revision_id str
    Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
    rollout_state str
    Output only. OS policy assignment rollout state
    uid str
    Output only. Server generated unique id for the OS policy assignment resource.
    baseline Boolean
    Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision. For a given OS policy assignment, there is only one revision with a value of true for this field.
    deleted Boolean
    Output only. Indicates that this revision deletes the OS policy assignment.
    etag String
    The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
    id String
    The provider-assigned unique ID for this managed resource.
    reconciling Boolean
    Output only. Indicates that reconciliation is in progress for the revision. This value is true when the rollout_state is one of:
    revisionCreateTime String
    Output only. The timestamp that the revision was created.
    revisionId String
    Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
    rolloutState String
    Output only. OS policy assignment rollout state
    uid String
    Output only. Server generated unique id for the OS policy assignment resource.

    Look up Existing OsPolicyAssignment Resource

    Get an existing OsPolicyAssignment resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: OsPolicyAssignmentState, opts?: CustomResourceOptions): OsPolicyAssignment
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            baseline: Optional[bool] = None,
            deleted: Optional[bool] = None,
            description: Optional[str] = None,
            etag: Optional[str] = None,
            instance_filter: Optional[OsPolicyAssignmentInstanceFilterArgs] = None,
            location: Optional[str] = None,
            name: Optional[str] = None,
            os_policies: Optional[Sequence[OsPolicyAssignmentOsPolicyArgs]] = None,
            project: Optional[str] = None,
            reconciling: Optional[bool] = None,
            revision_create_time: Optional[str] = None,
            revision_id: Optional[str] = None,
            rollout: Optional[OsPolicyAssignmentRolloutArgs] = None,
            rollout_state: Optional[str] = None,
            skip_await_rollout: Optional[bool] = None,
            uid: Optional[str] = None) -> OsPolicyAssignment
    func GetOsPolicyAssignment(ctx *Context, name string, id IDInput, state *OsPolicyAssignmentState, opts ...ResourceOption) (*OsPolicyAssignment, error)
    public static OsPolicyAssignment Get(string name, Input<string> id, OsPolicyAssignmentState? state, CustomResourceOptions? opts = null)
    public static OsPolicyAssignment get(String name, Output<String> id, OsPolicyAssignmentState state, CustomResourceOptions options)
    Resource lookup is not supported in YAML
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Baseline bool
    Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision. For a given OS policy assignment, there is only one revision with a value of true for this field.
    Deleted bool
    Output only. Indicates that this revision deletes the OS policy assignment.
    Description string
    OS policy assignment description. Length of the description is limited to 1024 characters.
    Etag string
    The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
    InstanceFilter OsPolicyAssignmentInstanceFilter
    Filter to select VMs. Structure is documented below.
    Location string
    The location for the resource
    Name string
    Resource name.
    OsPolicies List<OsPolicyAssignmentOsPolicy>
    List of OS policies to be applied to the VMs. Structure is documented below.
    Project string
    The project for the resource
    Reconciling bool
    Output only. Indicates that reconciliation is in progress for the revision. This value is true when the rollout_state is one of:
    RevisionCreateTime string
    Output only. The timestamp that the revision was created.
    RevisionId string
    Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
    Rollout OsPolicyAssignmentRollout
    Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted. Structure is documented below.
    RolloutState string
    Output only. OS policy assignment rollout state
    SkipAwaitRollout bool
    Set to true to skip awaiting rollout during resource creation and update.
    Uid string
    Output only. Server generated unique id for the OS policy assignment resource.
    Baseline bool
    Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision. For a given OS policy assignment, there is only one revision with a value of true for this field.
    Deleted bool
    Output only. Indicates that this revision deletes the OS policy assignment.
    Description string
    OS policy assignment description. Length of the description is limited to 1024 characters.
    Etag string
    The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
    InstanceFilter OsPolicyAssignmentInstanceFilterArgs
    Filter to select VMs. Structure is documented below.
    Location string
    The location for the resource
    Name string
    Resource name.
    OsPolicies []OsPolicyAssignmentOsPolicyArgs
    List of OS policies to be applied to the VMs. Structure is documented below.
    Project string
    The project for the resource
    Reconciling bool
    Output only. Indicates that reconciliation is in progress for the revision. This value is true when the rollout_state is one of:
    RevisionCreateTime string
    Output only. The timestamp that the revision was created.
    RevisionId string
    Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
    Rollout OsPolicyAssignmentRolloutArgs
    Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted. Structure is documented below.
    RolloutState string
    Output only. OS policy assignment rollout state
    SkipAwaitRollout bool
    Set to true to skip awaiting rollout during resource creation and update.
    Uid string
    Output only. Server generated unique id for the OS policy assignment resource.
    baseline Boolean
    Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision. For a given OS policy assignment, there is only one revision with a value of true for this field.
    deleted Boolean
    Output only. Indicates that this revision deletes the OS policy assignment.
    description String
    OS policy assignment description. Length of the description is limited to 1024 characters.
    etag String
    The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
    instanceFilter OsPolicyAssignmentInstanceFilter
    Filter to select VMs. Structure is documented below.
    location String
    The location for the resource
    name String
    Resource name.
    osPolicies List<OsPolicyAssignmentOsPolicy>
    List of OS policies to be applied to the VMs. Structure is documented below.
    project String
    The project for the resource
    reconciling Boolean
    Output only. Indicates that reconciliation is in progress for the revision. This value is true when the rollout_state is one of:
    revisionCreateTime String
    Output only. The timestamp that the revision was created.
    revisionId String
    Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
    rollout OsPolicyAssignmentRollout
    Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted. Structure is documented below.
    rolloutState String
    Output only. OS policy assignment rollout state
    skipAwaitRollout Boolean
    Set to true to skip awaiting rollout during resource creation and update.
    uid String
    Output only. Server generated unique id for the OS policy assignment resource.
    baseline boolean
    Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision. For a given OS policy assignment, there is only one revision with a value of true for this field.
    deleted boolean
    Output only. Indicates that this revision deletes the OS policy assignment.
    description string
    OS policy assignment description. Length of the description is limited to 1024 characters.
    etag string
    The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
    instanceFilter OsPolicyAssignmentInstanceFilter
    Filter to select VMs. Structure is documented below.
    location string
    The location for the resource
    name string
    Resource name.
    osPolicies OsPolicyAssignmentOsPolicy[]
    List of OS policies to be applied to the VMs. Structure is documented below.
    project string
    The project for the resource
    reconciling boolean
    Output only. Indicates that reconciliation is in progress for the revision. This value is true when the rollout_state is one of:
    revisionCreateTime string
    Output only. The timestamp that the revision was created.
    revisionId string
    Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
    rollout OsPolicyAssignmentRollout
    Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted. Structure is documented below.
    rolloutState string
    Output only. OS policy assignment rollout state
    skipAwaitRollout boolean
    Set to true to skip awaiting rollout during resource creation and update.
    uid string
    Output only. Server generated unique id for the OS policy assignment resource.
    baseline bool
    Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision. For a given OS policy assignment, there is only one revision with a value of true for this field.
    deleted bool
    Output only. Indicates that this revision deletes the OS policy assignment.
    description str
    OS policy assignment description. Length of the description is limited to 1024 characters.
    etag str
    The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
    instance_filter OsPolicyAssignmentInstanceFilterArgs
    Filter to select VMs. Structure is documented below.
    location str
    The location for the resource
    name str
    Resource name.
    os_policies Sequence[OsPolicyAssignmentOsPolicyArgs]
    List of OS policies to be applied to the VMs. Structure is documented below.
    project str
    The project for the resource
    reconciling bool
    Output only. Indicates that reconciliation is in progress for the revision. This value is true when the rollout_state is one of:
    revision_create_time str
    Output only. The timestamp that the revision was created.
    revision_id str
    Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
    rollout OsPolicyAssignmentRolloutArgs
    Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted. Structure is documented below.
    rollout_state str
    Output only. OS policy assignment rollout state
    skip_await_rollout bool
    Set to true to skip awaiting rollout during resource creation and update.
    uid str
    Output only. Server generated unique id for the OS policy assignment resource.
    baseline Boolean
    Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision. For a given OS policy assignment, there is only one revision with a value of true for this field.
    deleted Boolean
    Output only. Indicates that this revision deletes the OS policy assignment.
    description String
    OS policy assignment description. Length of the description is limited to 1024 characters.
    etag String
    The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
    instanceFilter Property Map
    Filter to select VMs. Structure is documented below.
    location String
    The location for the resource
    name String
    Resource name.
    osPolicies List<Property Map>
    List of OS policies to be applied to the VMs. Structure is documented below.
    project String
    The project for the resource
    reconciling Boolean
    Output only. Indicates that reconciliation is in progress for the revision. This value is true when the rollout_state is one of:
    revisionCreateTime String
    Output only. The timestamp that the revision was created.
    revisionId String
    Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment
    rollout Property Map
    Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted. Structure is documented below.
    rolloutState String
    Output only. OS policy assignment rollout state
    skipAwaitRollout Boolean
    Set to true to skip awaiting rollout during resource creation and update.
    uid String
    Output only. Server generated unique id for the OS policy assignment resource.

    Supporting Types

    OsPolicyAssignmentInstanceFilter, OsPolicyAssignmentInstanceFilterArgs

    All bool
    Target all VMs in the project. If true, no other criteria is permitted.
    ExclusionLabels List<OsPolicyAssignmentInstanceFilterExclusionLabel>
    List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM. Structure is documented below.
    InclusionLabels List<OsPolicyAssignmentInstanceFilterInclusionLabel>
    List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM. Structure is documented below.
    Inventories List<OsPolicyAssignmentInstanceFilterInventory>
    List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories. Structure is documented below.
    All bool
    Target all VMs in the project. If true, no other criteria is permitted.
    ExclusionLabels []OsPolicyAssignmentInstanceFilterExclusionLabel
    List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM. Structure is documented below.
    InclusionLabels []OsPolicyAssignmentInstanceFilterInclusionLabel
    List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM. Structure is documented below.
    Inventories []OsPolicyAssignmentInstanceFilterInventory
    List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories. Structure is documented below.
    all Boolean
    Target all VMs in the project. If true, no other criteria is permitted.
    exclusionLabels List<OsPolicyAssignmentInstanceFilterExclusionLabel>
    List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM. Structure is documented below.
    inclusionLabels List<OsPolicyAssignmentInstanceFilterInclusionLabel>
    List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM. Structure is documented below.
    inventories List<OsPolicyAssignmentInstanceFilterInventory>
    List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories. Structure is documented below.
    all boolean
    Target all VMs in the project. If true, no other criteria is permitted.
    exclusionLabels OsPolicyAssignmentInstanceFilterExclusionLabel[]
    List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM. Structure is documented below.
    inclusionLabels OsPolicyAssignmentInstanceFilterInclusionLabel[]
    List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM. Structure is documented below.
    inventories OsPolicyAssignmentInstanceFilterInventory[]
    List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories. Structure is documented below.
    all bool
    Target all VMs in the project. If true, no other criteria is permitted.
    exclusion_labels Sequence[OsPolicyAssignmentInstanceFilterExclusionLabel]
    List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM. Structure is documented below.
    inclusion_labels Sequence[OsPolicyAssignmentInstanceFilterInclusionLabel]
    List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM. Structure is documented below.
    inventories Sequence[OsPolicyAssignmentInstanceFilterInventory]
    List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories. Structure is documented below.
    all Boolean
    Target all VMs in the project. If true, no other criteria is permitted.
    exclusionLabels List<Property Map>
    List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM. Structure is documented below.
    inclusionLabels List<Property Map>
    List of label sets used for VM inclusion. If the list has more than one LabelSet, the VM is included if any of the label sets are applicable for the VM. Structure is documented below.
    inventories List<Property Map>
    List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories. Structure is documented below.

    OsPolicyAssignmentInstanceFilterExclusionLabel, OsPolicyAssignmentInstanceFilterExclusionLabelArgs

    Labels Dictionary<string, string>
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    Labels map[string]string
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    labels Map<String,String>
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    labels {[key: string]: string}
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    labels Mapping[str, str]
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    labels Map<String>
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.

    OsPolicyAssignmentInstanceFilterInclusionLabel, OsPolicyAssignmentInstanceFilterInclusionLabelArgs

    Labels Dictionary<string, string>
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    Labels map[string]string
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    labels Map<String,String>
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    labels {[key: string]: string}
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    labels Mapping[str, str]
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.
    labels Map<String>
    Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected.

    OsPolicyAssignmentInstanceFilterInventory, OsPolicyAssignmentInstanceFilterInventoryArgs

    OsShortName string
    The OS short name
    OsVersion string
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    OsShortName string
    The OS short name
    OsVersion string
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    osShortName String
    The OS short name
    osVersion String
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    osShortName string
    The OS short name
    osVersion string
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    os_short_name str
    The OS short name
    os_version str
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    osShortName String
    The OS short name
    osVersion String
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.

    OsPolicyAssignmentOsPolicy, OsPolicyAssignmentOsPolicyArgs

    Id string
    The id of the OS policy with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the assignment.
    Mode string
    Policy mode Possible values are: MODE_UNSPECIFIED, VALIDATION, ENFORCEMENT.
    ResourceGroups List<OsPolicyAssignmentOsPolicyResourceGroup>
    List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match Structure is documented below.
    AllowNoResourceGroupMatch bool
    This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
    Description string
    Policy description. Length of the description is limited to 1024 characters.
    Id string
    The id of the OS policy with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the assignment.
    Mode string
    Policy mode Possible values are: MODE_UNSPECIFIED, VALIDATION, ENFORCEMENT.
    ResourceGroups []OsPolicyAssignmentOsPolicyResourceGroup
    List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match Structure is documented below.
    AllowNoResourceGroupMatch bool
    This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
    Description string
    Policy description. Length of the description is limited to 1024 characters.
    id String
    The id of the OS policy with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the assignment.
    mode String
    Policy mode Possible values are: MODE_UNSPECIFIED, VALIDATION, ENFORCEMENT.
    resourceGroups List<OsPolicyAssignmentOsPolicyResourceGroup>
    List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match Structure is documented below.
    allowNoResourceGroupMatch Boolean
    This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
    description String
    Policy description. Length of the description is limited to 1024 characters.
    id string
    The id of the OS policy with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the assignment.
    mode string
    Policy mode Possible values are: MODE_UNSPECIFIED, VALIDATION, ENFORCEMENT.
    resourceGroups OsPolicyAssignmentOsPolicyResourceGroup[]
    List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match Structure is documented below.
    allowNoResourceGroupMatch boolean
    This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
    description string
    Policy description. Length of the description is limited to 1024 characters.
    id str
    The id of the OS policy with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the assignment.
    mode str
    Policy mode Possible values are: MODE_UNSPECIFIED, VALIDATION, ENFORCEMENT.
    resource_groups Sequence[OsPolicyAssignmentOsPolicyResourceGroup]
    List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match Structure is documented below.
    allow_no_resource_group_match bool
    This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
    description str
    Policy description. Length of the description is limited to 1024 characters.
    id String
    The id of the OS policy with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the assignment.
    mode String
    Policy mode Possible values are: MODE_UNSPECIFIED, VALIDATION, ENFORCEMENT.
    resourceGroups List<Property Map>
    List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag allow_no_resource_group_match Structure is documented below.
    allowNoResourceGroupMatch Boolean
    This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to true if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce.
    description String
    Policy description. Length of the description is limited to 1024 characters.

    OsPolicyAssignmentOsPolicyResourceGroup, OsPolicyAssignmentOsPolicyResourceGroupArgs

    Resources List<OsPolicyAssignmentOsPolicyResourceGroupResource>
    List of resources configured for this resource group. The resources are executed in the exact order specified here. Structure is documented below.
    InventoryFilters List<OsPolicyAssignmentOsPolicyResourceGroupInventoryFilter>
    List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally. Structure is documented below.
    Resources []OsPolicyAssignmentOsPolicyResourceGroupResource
    List of resources configured for this resource group. The resources are executed in the exact order specified here. Structure is documented below.
    InventoryFilters []OsPolicyAssignmentOsPolicyResourceGroupInventoryFilter
    List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally. Structure is documented below.
    resources List<OsPolicyAssignmentOsPolicyResourceGroupResource>
    List of resources configured for this resource group. The resources are executed in the exact order specified here. Structure is documented below.
    inventoryFilters List<OsPolicyAssignmentOsPolicyResourceGroupInventoryFilter>
    List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally. Structure is documented below.
    resources OsPolicyAssignmentOsPolicyResourceGroupResource[]
    List of resources configured for this resource group. The resources are executed in the exact order specified here. Structure is documented below.
    inventoryFilters OsPolicyAssignmentOsPolicyResourceGroupInventoryFilter[]
    List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally. Structure is documented below.
    resources Sequence[OsPolicyAssignmentOsPolicyResourceGroupResource]
    List of resources configured for this resource group. The resources are executed in the exact order specified here. Structure is documented below.
    inventory_filters Sequence[OsPolicyAssignmentOsPolicyResourceGroupInventoryFilter]
    List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally. Structure is documented below.
    resources List<Property Map>
    List of resources configured for this resource group. The resources are executed in the exact order specified here. Structure is documented below.
    inventoryFilters List<Property Map>
    List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either RHEL or CentOS operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally. Structure is documented below.

    OsPolicyAssignmentOsPolicyResourceGroupInventoryFilter, OsPolicyAssignmentOsPolicyResourceGroupInventoryFilterArgs

    OsShortName string
    The OS short name
    OsVersion string
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    OsShortName string
    The OS short name
    OsVersion string
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    osShortName String
    The OS short name
    osVersion String
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    osShortName string
    The OS short name
    osVersion string
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    os_short_name str
    The OS short name
    os_version str
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.
    osShortName String
    The OS short name
    osVersion String
    The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of 7, specify the following value for this field 7.* An empty string matches all OS versions.

    OsPolicyAssignmentOsPolicyResourceGroupResource, OsPolicyAssignmentOsPolicyResourceGroupResourceArgs

    Id string
    The id of the resource with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the OS policy.
    Exec OsPolicyAssignmentOsPolicyResourceGroupResourceExec
    Exec resource Structure is documented below.
    File OsPolicyAssignmentOsPolicyResourceGroupResourceFile
    File resource Structure is documented below.
    Pkg OsPolicyAssignmentOsPolicyResourceGroupResourcePkg
    Package resource Structure is documented below.
    Repository OsPolicyAssignmentOsPolicyResourceGroupResourceRepository
    Package repository resource Structure is documented below.
    Id string
    The id of the resource with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the OS policy.
    Exec OsPolicyAssignmentOsPolicyResourceGroupResourceExec
    Exec resource Structure is documented below.
    File OsPolicyAssignmentOsPolicyResourceGroupResourceFile
    File resource Structure is documented below.
    Pkg OsPolicyAssignmentOsPolicyResourceGroupResourcePkg
    Package resource Structure is documented below.
    Repository OsPolicyAssignmentOsPolicyResourceGroupResourceRepository
    Package repository resource Structure is documented below.
    id String
    The id of the resource with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the OS policy.
    exec OsPolicyAssignmentOsPolicyResourceGroupResourceExec
    Exec resource Structure is documented below.
    file OsPolicyAssignmentOsPolicyResourceGroupResourceFile
    File resource Structure is documented below.
    pkg OsPolicyAssignmentOsPolicyResourceGroupResourcePkg
    Package resource Structure is documented below.
    repository OsPolicyAssignmentOsPolicyResourceGroupResourceRepository
    Package repository resource Structure is documented below.
    id string
    The id of the resource with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the OS policy.
    exec OsPolicyAssignmentOsPolicyResourceGroupResourceExec
    Exec resource Structure is documented below.
    file OsPolicyAssignmentOsPolicyResourceGroupResourceFile
    File resource Structure is documented below.
    pkg OsPolicyAssignmentOsPolicyResourceGroupResourcePkg
    Package resource Structure is documented below.
    repository OsPolicyAssignmentOsPolicyResourceGroupResourceRepository
    Package repository resource Structure is documented below.
    id str
    The id of the resource with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the OS policy.
    exec_ OsPolicyAssignmentOsPolicyResourceGroupResourceExec
    Exec resource Structure is documented below.
    file OsPolicyAssignmentOsPolicyResourceGroupResourceFile
    File resource Structure is documented below.
    pkg OsPolicyAssignmentOsPolicyResourceGroupResourcePkg
    Package resource Structure is documented below.
    repository OsPolicyAssignmentOsPolicyResourceGroupResourceRepository
    Package repository resource Structure is documented below.
    id String
    The id of the resource with the following restrictions:

    • Must contain only lowercase letters, numbers, and hyphens.
    • Must start with a letter.
    • Must be between 1-63 characters.
    • Must end with a number or a letter.
    • Must be unique within the OS policy.
    exec Property Map
    Exec resource Structure is documented below.
    file Property Map
    File resource Structure is documented below.
    pkg Property Map
    Package resource Structure is documented below.
    repository Property Map
    Package repository resource Structure is documented below.

    OsPolicyAssignmentOsPolicyResourceGroupResourceExec, OsPolicyAssignmentOsPolicyResourceGroupResourceExecArgs

    Validate OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidate
    What to run to validate this resource is in the desired state. An exit code of 100 indicates "in desired state", and exit code of 101 indicates "not in desired state". Any other exit code indicates a failure running validate. Structure is documented below.
    Enforce OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforce
    What to run to bring this resource into the desired state. An exit code of 100 indicates "success", any other exit code indicates a failure running enforce. Structure is documented below.
    Validate OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidate
    What to run to validate this resource is in the desired state. An exit code of 100 indicates "in desired state", and exit code of 101 indicates "not in desired state". Any other exit code indicates a failure running validate. Structure is documented below.
    Enforce OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforce
    What to run to bring this resource into the desired state. An exit code of 100 indicates "success", any other exit code indicates a failure running enforce. Structure is documented below.
    validate OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidate
    What to run to validate this resource is in the desired state. An exit code of 100 indicates "in desired state", and exit code of 101 indicates "not in desired state". Any other exit code indicates a failure running validate. Structure is documented below.
    enforce OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforce
    What to run to bring this resource into the desired state. An exit code of 100 indicates "success", any other exit code indicates a failure running enforce. Structure is documented below.
    validate OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidate
    What to run to validate this resource is in the desired state. An exit code of 100 indicates "in desired state", and exit code of 101 indicates "not in desired state". Any other exit code indicates a failure running validate. Structure is documented below.
    enforce OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforce
    What to run to bring this resource into the desired state. An exit code of 100 indicates "success", any other exit code indicates a failure running enforce. Structure is documented below.
    validate OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidate
    What to run to validate this resource is in the desired state. An exit code of 100 indicates "in desired state", and exit code of 101 indicates "not in desired state". Any other exit code indicates a failure running validate. Structure is documented below.
    enforce OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforce
    What to run to bring this resource into the desired state. An exit code of 100 indicates "success", any other exit code indicates a failure running enforce. Structure is documented below.
    validate Property Map
    What to run to validate this resource is in the desired state. An exit code of 100 indicates "in desired state", and exit code of 101 indicates "not in desired state". Any other exit code indicates a failure running validate. Structure is documented below.
    enforce Property Map
    What to run to bring this resource into the desired state. An exit code of 100 indicates "success", any other exit code indicates a failure running enforce. Structure is documented below.

    OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforce, OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceArgs

    Interpreter string
    The script interpreter to use. Possible values are: INTERPRETER_UNSPECIFIED, NONE, SHELL, POWERSHELL.
    Args List<string>
    Optional arguments to pass to the source during execution.
    File OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFile
    A remote or local file. Structure is documented below.
    OutputFilePath string
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
    Script string
    An inline script. The size of the script is limited to 1024 characters.
    Interpreter string
    The script interpreter to use. Possible values are: INTERPRETER_UNSPECIFIED, NONE, SHELL, POWERSHELL.
    Args []string
    Optional arguments to pass to the source during execution.
    File OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFile
    A remote or local file. Structure is documented below.
    OutputFilePath string
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
    Script string
    An inline script. The size of the script is limited to 1024 characters.
    interpreter String
    The script interpreter to use. Possible values are: INTERPRETER_UNSPECIFIED, NONE, SHELL, POWERSHELL.
    args List<String>
    Optional arguments to pass to the source during execution.
    file OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFile
    A remote or local file. Structure is documented below.
    outputFilePath String
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
    script String
    An inline script. The size of the script is limited to 1024 characters.
    interpreter string
    The script interpreter to use. Possible values are: INTERPRETER_UNSPECIFIED, NONE, SHELL, POWERSHELL.
    args string[]
    Optional arguments to pass to the source during execution.
    file OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFile
    A remote or local file. Structure is documented below.
    outputFilePath string
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
    script string
    An inline script. The size of the script is limited to 1024 characters.
    interpreter str
    The script interpreter to use. Possible values are: INTERPRETER_UNSPECIFIED, NONE, SHELL, POWERSHELL.
    args Sequence[str]
    Optional arguments to pass to the source during execution.
    file OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFile
    A remote or local file. Structure is documented below.
    output_file_path str
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
    script str
    An inline script. The size of the script is limited to 1024 characters.
    interpreter String
    The script interpreter to use. Possible values are: INTERPRETER_UNSPECIFIED, NONE, SHELL, POWERSHELL.
    args List<String>
    Optional arguments to pass to the source during execution.
    file Property Map
    A remote or local file. Structure is documented below.
    outputFilePath String
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
    script String
    An inline script. The size of the script is limited to 1024 characters.

    OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFile, OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileArgs

    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileGcs
    A Cloud Storage object. Structure is documented below.
    LocalPath string
    A local path within the VM to use.
    Remote OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileRemote
    A generic remote file. Structure is documented below.
    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileGcs
    A Cloud Storage object. Structure is documented below.
    LocalPath string
    A local path within the VM to use.
    Remote OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileRemote
    A generic remote file. Structure is documented below.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileGcs
    A Cloud Storage object. Structure is documented below.
    localPath String
    A local path within the VM to use.
    remote OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileRemote
    A generic remote file. Structure is documented below.
    allowInsecure boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileGcs
    A Cloud Storage object. Structure is documented below.
    localPath string
    A local path within the VM to use.
    remote OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileRemote
    A generic remote file. Structure is documented below.
    allow_insecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileGcs
    A Cloud Storage object. Structure is documented below.
    local_path str
    A local path within the VM to use.
    remote OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileRemote
    A generic remote file. Structure is documented below.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs Property Map
    A Cloud Storage object. Structure is documented below.
    localPath String
    A local path within the VM to use.
    remote Property Map
    A generic remote file. Structure is documented below.

    OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileGcs, OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileGcsArgs

    Bucket string
    Bucket of the Cloud Storage object.
    Object string
    Name of the Cloud Storage object.
    Generation int
    Generation number of the Cloud Storage object.
    Bucket string
    Bucket of the Cloud Storage object.
    Object string
    Name of the Cloud Storage object.
    Generation int
    Generation number of the Cloud Storage object.
    bucket String
    Bucket of the Cloud Storage object.
    object String
    Name of the Cloud Storage object.
    generation Integer
    Generation number of the Cloud Storage object.
    bucket string
    Bucket of the Cloud Storage object.
    object string
    Name of the Cloud Storage object.
    generation number
    Generation number of the Cloud Storage object.
    bucket str
    Bucket of the Cloud Storage object.
    object str
    Name of the Cloud Storage object.
    generation int
    Generation number of the Cloud Storage object.
    bucket String
    Bucket of the Cloud Storage object.
    object String
    Name of the Cloud Storage object.
    generation Number
    Generation number of the Cloud Storage object.

    OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileRemote, OsPolicyAssignmentOsPolicyResourceGroupResourceExecEnforceFileRemoteArgs

    Uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    Uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    uri String
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.
    uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum string
    SHA256 checksum of the remote file.
    uri str
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256_checksum str
    SHA256 checksum of the remote file.
    uri String
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.

    OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidate, OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateArgs

    Interpreter string
    The script interpreter to use. Possible values are: INTERPRETER_UNSPECIFIED, NONE, SHELL, POWERSHELL.
    Args List<string>
    Optional arguments to pass to the source during execution.
    File OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFile
    A remote or local file. Structure is documented below.
    OutputFilePath string
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
    Script string
    An inline script. The size of the script is limited to 1024 characters.
    Interpreter string
    The script interpreter to use. Possible values are: INTERPRETER_UNSPECIFIED, NONE, SHELL, POWERSHELL.
    Args []string
    Optional arguments to pass to the source during execution.
    File OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFile
    A remote or local file. Structure is documented below.
    OutputFilePath string
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
    Script string
    An inline script. The size of the script is limited to 1024 characters.
    interpreter String
    The script interpreter to use. Possible values are: INTERPRETER_UNSPECIFIED, NONE, SHELL, POWERSHELL.
    args List<String>
    Optional arguments to pass to the source during execution.
    file OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFile
    A remote or local file. Structure is documented below.
    outputFilePath String
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
    script String
    An inline script. The size of the script is limited to 1024 characters.
    interpreter string
    The script interpreter to use. Possible values are: INTERPRETER_UNSPECIFIED, NONE, SHELL, POWERSHELL.
    args string[]
    Optional arguments to pass to the source during execution.
    file OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFile
    A remote or local file. Structure is documented below.
    outputFilePath string
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
    script string
    An inline script. The size of the script is limited to 1024 characters.
    interpreter str
    The script interpreter to use. Possible values are: INTERPRETER_UNSPECIFIED, NONE, SHELL, POWERSHELL.
    args Sequence[str]
    Optional arguments to pass to the source during execution.
    file OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFile
    A remote or local file. Structure is documented below.
    output_file_path str
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
    script str
    An inline script. The size of the script is limited to 1024 characters.
    interpreter String
    The script interpreter to use. Possible values are: INTERPRETER_UNSPECIFIED, NONE, SHELL, POWERSHELL.
    args List<String>
    Optional arguments to pass to the source during execution.
    file Property Map
    A remote or local file. Structure is documented below.
    outputFilePath String
    Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 100K bytes.
    script String
    An inline script. The size of the script is limited to 1024 characters.

    OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFile, OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileArgs

    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileGcs
    A Cloud Storage object. Structure is documented below.
    LocalPath string
    A local path within the VM to use.
    Remote OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileRemote
    A generic remote file. Structure is documented below.
    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileGcs
    A Cloud Storage object. Structure is documented below.
    LocalPath string
    A local path within the VM to use.
    Remote OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileRemote
    A generic remote file. Structure is documented below.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileGcs
    A Cloud Storage object. Structure is documented below.
    localPath String
    A local path within the VM to use.
    remote OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileRemote
    A generic remote file. Structure is documented below.
    allowInsecure boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileGcs
    A Cloud Storage object. Structure is documented below.
    localPath string
    A local path within the VM to use.
    remote OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileRemote
    A generic remote file. Structure is documented below.
    allow_insecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileGcs
    A Cloud Storage object. Structure is documented below.
    local_path str
    A local path within the VM to use.
    remote OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileRemote
    A generic remote file. Structure is documented below.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs Property Map
    A Cloud Storage object. Structure is documented below.
    localPath String
    A local path within the VM to use.
    remote Property Map
    A generic remote file. Structure is documented below.

    OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileGcs, OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileGcsArgs

    Bucket string
    Bucket of the Cloud Storage object.
    Object string
    Name of the Cloud Storage object.
    Generation int
    Generation number of the Cloud Storage object.
    Bucket string
    Bucket of the Cloud Storage object.
    Object string
    Name of the Cloud Storage object.
    Generation int
    Generation number of the Cloud Storage object.
    bucket String
    Bucket of the Cloud Storage object.
    object String
    Name of the Cloud Storage object.
    generation Integer
    Generation number of the Cloud Storage object.
    bucket string
    Bucket of the Cloud Storage object.
    object string
    Name of the Cloud Storage object.
    generation number
    Generation number of the Cloud Storage object.
    bucket str
    Bucket of the Cloud Storage object.
    object str
    Name of the Cloud Storage object.
    generation int
    Generation number of the Cloud Storage object.
    bucket String
    Bucket of the Cloud Storage object.
    object String
    Name of the Cloud Storage object.
    generation Number
    Generation number of the Cloud Storage object.

    OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileRemote, OsPolicyAssignmentOsPolicyResourceGroupResourceExecValidateFileRemoteArgs

    Uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    Uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    uri String
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.
    uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum string
    SHA256 checksum of the remote file.
    uri str
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256_checksum str
    SHA256 checksum of the remote file.
    uri String
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.

    OsPolicyAssignmentOsPolicyResourceGroupResourceFile, OsPolicyAssignmentOsPolicyResourceGroupResourceFileArgs

    Path string
    The absolute path of the file within the VM.
    State string
    Desired state of the file. Possible values are: DESIRED_STATE_UNSPECIFIED, PRESENT, ABSENT, CONTENTS_MATCH.
    Content string
    A a file with this content. The size of the content is limited to 1024 characters.
    File OsPolicyAssignmentOsPolicyResourceGroupResourceFileFile
    A remote or local source. Structure is documented below.
    Permissions string
    Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
    Path string
    The absolute path of the file within the VM.
    State string
    Desired state of the file. Possible values are: DESIRED_STATE_UNSPECIFIED, PRESENT, ABSENT, CONTENTS_MATCH.
    Content string
    A a file with this content. The size of the content is limited to 1024 characters.
    File OsPolicyAssignmentOsPolicyResourceGroupResourceFileFile
    A remote or local source. Structure is documented below.
    Permissions string
    Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
    path String
    The absolute path of the file within the VM.
    state String
    Desired state of the file. Possible values are: DESIRED_STATE_UNSPECIFIED, PRESENT, ABSENT, CONTENTS_MATCH.
    content String
    A a file with this content. The size of the content is limited to 1024 characters.
    file OsPolicyAssignmentOsPolicyResourceGroupResourceFileFile
    A remote or local source. Structure is documented below.
    permissions String
    Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
    path string
    The absolute path of the file within the VM.
    state string
    Desired state of the file. Possible values are: DESIRED_STATE_UNSPECIFIED, PRESENT, ABSENT, CONTENTS_MATCH.
    content string
    A a file with this content. The size of the content is limited to 1024 characters.
    file OsPolicyAssignmentOsPolicyResourceGroupResourceFileFile
    A remote or local source. Structure is documented below.
    permissions string
    Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
    path str
    The absolute path of the file within the VM.
    state str
    Desired state of the file. Possible values are: DESIRED_STATE_UNSPECIFIED, PRESENT, ABSENT, CONTENTS_MATCH.
    content str
    A a file with this content. The size of the content is limited to 1024 characters.
    file OsPolicyAssignmentOsPolicyResourceGroupResourceFileFile
    A remote or local source. Structure is documented below.
    permissions str
    Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4
    path String
    The absolute path of the file within the VM.
    state String
    Desired state of the file. Possible values are: DESIRED_STATE_UNSPECIFIED, PRESENT, ABSENT, CONTENTS_MATCH.
    content String
    A a file with this content. The size of the content is limited to 1024 characters.
    file Property Map
    A remote or local source. Structure is documented below.
    permissions String
    Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4

    OsPolicyAssignmentOsPolicyResourceGroupResourceFileFile, OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileArgs

    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileGcs
    A Cloud Storage object. Structure is documented below.
    LocalPath string
    A local path within the VM to use.
    Remote OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileRemote
    A generic remote file. Structure is documented below.
    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileGcs
    A Cloud Storage object. Structure is documented below.
    LocalPath string
    A local path within the VM to use.
    Remote OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileRemote
    A generic remote file. Structure is documented below.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileGcs
    A Cloud Storage object. Structure is documented below.
    localPath String
    A local path within the VM to use.
    remote OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileRemote
    A generic remote file. Structure is documented below.
    allowInsecure boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileGcs
    A Cloud Storage object. Structure is documented below.
    localPath string
    A local path within the VM to use.
    remote OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileRemote
    A generic remote file. Structure is documented below.
    allow_insecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileGcs
    A Cloud Storage object. Structure is documented below.
    local_path str
    A local path within the VM to use.
    remote OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileRemote
    A generic remote file. Structure is documented below.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs Property Map
    A Cloud Storage object. Structure is documented below.
    localPath String
    A local path within the VM to use.
    remote Property Map
    A generic remote file. Structure is documented below.

    OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileGcs, OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileGcsArgs

    Bucket string
    Bucket of the Cloud Storage object.
    Object string
    Name of the Cloud Storage object.
    Generation int
    Generation number of the Cloud Storage object.
    Bucket string
    Bucket of the Cloud Storage object.
    Object string
    Name of the Cloud Storage object.
    Generation int
    Generation number of the Cloud Storage object.
    bucket String
    Bucket of the Cloud Storage object.
    object String
    Name of the Cloud Storage object.
    generation Integer
    Generation number of the Cloud Storage object.
    bucket string
    Bucket of the Cloud Storage object.
    object string
    Name of the Cloud Storage object.
    generation number
    Generation number of the Cloud Storage object.
    bucket str
    Bucket of the Cloud Storage object.
    object str
    Name of the Cloud Storage object.
    generation int
    Generation number of the Cloud Storage object.
    bucket String
    Bucket of the Cloud Storage object.
    object String
    Name of the Cloud Storage object.
    generation Number
    Generation number of the Cloud Storage object.

    OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileRemote, OsPolicyAssignmentOsPolicyResourceGroupResourceFileFileRemoteArgs

    Uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    Uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    uri String
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.
    uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum string
    SHA256 checksum of the remote file.
    uri str
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256_checksum str
    SHA256 checksum of the remote file.
    uri String
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.

    OsPolicyAssignmentOsPolicyResourceGroupResourcePkg, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgArgs

    DesiredState string
    The desired state the agent should maintain for this package. Possible values are: DESIRED_STATE_UNSPECIFIED, INSTALLED, REMOVED.
    Apt OsPolicyAssignmentOsPolicyResourceGroupResourcePkgApt
    A package managed by Apt. Structure is documented below.
    Deb OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDeb
    A deb package file. Structure is documented below.
    Googet OsPolicyAssignmentOsPolicyResourceGroupResourcePkgGooget
    A package managed by GooGet. Structure is documented below.
    Msi OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsi
    An MSI package. Structure is documented below.
    Rpm OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpm
    An rpm package file. Structure is documented below.
    Yum OsPolicyAssignmentOsPolicyResourceGroupResourcePkgYum
    A package managed by YUM. Structure is documented below.
    Zypper OsPolicyAssignmentOsPolicyResourceGroupResourcePkgZypper
    A package managed by Zypper. Structure is documented below.
    DesiredState string
    The desired state the agent should maintain for this package. Possible values are: DESIRED_STATE_UNSPECIFIED, INSTALLED, REMOVED.
    Apt OsPolicyAssignmentOsPolicyResourceGroupResourcePkgApt
    A package managed by Apt. Structure is documented below.
    Deb OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDeb
    A deb package file. Structure is documented below.
    Googet OsPolicyAssignmentOsPolicyResourceGroupResourcePkgGooget
    A package managed by GooGet. Structure is documented below.
    Msi OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsi
    An MSI package. Structure is documented below.
    Rpm OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpm
    An rpm package file. Structure is documented below.
    Yum OsPolicyAssignmentOsPolicyResourceGroupResourcePkgYum
    A package managed by YUM. Structure is documented below.
    Zypper OsPolicyAssignmentOsPolicyResourceGroupResourcePkgZypper
    A package managed by Zypper. Structure is documented below.
    desiredState String
    The desired state the agent should maintain for this package. Possible values are: DESIRED_STATE_UNSPECIFIED, INSTALLED, REMOVED.
    apt OsPolicyAssignmentOsPolicyResourceGroupResourcePkgApt
    A package managed by Apt. Structure is documented below.
    deb OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDeb
    A deb package file. Structure is documented below.
    googet OsPolicyAssignmentOsPolicyResourceGroupResourcePkgGooget
    A package managed by GooGet. Structure is documented below.
    msi OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsi
    An MSI package. Structure is documented below.
    rpm OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpm
    An rpm package file. Structure is documented below.
    yum OsPolicyAssignmentOsPolicyResourceGroupResourcePkgYum
    A package managed by YUM. Structure is documented below.
    zypper OsPolicyAssignmentOsPolicyResourceGroupResourcePkgZypper
    A package managed by Zypper. Structure is documented below.
    desiredState string
    The desired state the agent should maintain for this package. Possible values are: DESIRED_STATE_UNSPECIFIED, INSTALLED, REMOVED.
    apt OsPolicyAssignmentOsPolicyResourceGroupResourcePkgApt
    A package managed by Apt. Structure is documented below.
    deb OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDeb
    A deb package file. Structure is documented below.
    googet OsPolicyAssignmentOsPolicyResourceGroupResourcePkgGooget
    A package managed by GooGet. Structure is documented below.
    msi OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsi
    An MSI package. Structure is documented below.
    rpm OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpm
    An rpm package file. Structure is documented below.
    yum OsPolicyAssignmentOsPolicyResourceGroupResourcePkgYum
    A package managed by YUM. Structure is documented below.
    zypper OsPolicyAssignmentOsPolicyResourceGroupResourcePkgZypper
    A package managed by Zypper. Structure is documented below.
    desired_state str
    The desired state the agent should maintain for this package. Possible values are: DESIRED_STATE_UNSPECIFIED, INSTALLED, REMOVED.
    apt OsPolicyAssignmentOsPolicyResourceGroupResourcePkgApt
    A package managed by Apt. Structure is documented below.
    deb OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDeb
    A deb package file. Structure is documented below.
    googet OsPolicyAssignmentOsPolicyResourceGroupResourcePkgGooget
    A package managed by GooGet. Structure is documented below.
    msi OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsi
    An MSI package. Structure is documented below.
    rpm OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpm
    An rpm package file. Structure is documented below.
    yum OsPolicyAssignmentOsPolicyResourceGroupResourcePkgYum
    A package managed by YUM. Structure is documented below.
    zypper OsPolicyAssignmentOsPolicyResourceGroupResourcePkgZypper
    A package managed by Zypper. Structure is documented below.
    desiredState String
    The desired state the agent should maintain for this package. Possible values are: DESIRED_STATE_UNSPECIFIED, INSTALLED, REMOVED.
    apt Property Map
    A package managed by Apt. Structure is documented below.
    deb Property Map
    A deb package file. Structure is documented below.
    googet Property Map
    A package managed by GooGet. Structure is documented below.
    msi Property Map
    An MSI package. Structure is documented below.
    rpm Property Map
    An rpm package file. Structure is documented below.
    yum Property Map
    A package managed by YUM. Structure is documented below.
    zypper Property Map
    A package managed by Zypper. Structure is documented below.

    OsPolicyAssignmentOsPolicyResourceGroupResourcePkgApt, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgAptArgs

    Name string
    Package name.
    Name string
    Package name.
    name String
    Package name.
    name string
    Package name.
    name str
    Package name.
    name String
    Package name.

    OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDeb, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebArgs

    Source OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSource
    A deb package. Structure is documented below.
    PullDeps bool
    Whether dependencies should also be installed. - install when false: dpkg -i package - install when true: apt-get update && apt-get -y install package.deb
    Source OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSource
    A deb package. Structure is documented below.
    PullDeps bool
    Whether dependencies should also be installed. - install when false: dpkg -i package - install when true: apt-get update && apt-get -y install package.deb
    source OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSource
    A deb package. Structure is documented below.
    pullDeps Boolean
    Whether dependencies should also be installed. - install when false: dpkg -i package - install when true: apt-get update && apt-get -y install package.deb
    source OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSource
    A deb package. Structure is documented below.
    pullDeps boolean
    Whether dependencies should also be installed. - install when false: dpkg -i package - install when true: apt-get update && apt-get -y install package.deb
    source OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSource
    A deb package. Structure is documented below.
    pull_deps bool
    Whether dependencies should also be installed. - install when false: dpkg -i package - install when true: apt-get update && apt-get -y install package.deb
    source Property Map
    A deb package. Structure is documented below.
    pullDeps Boolean
    Whether dependencies should also be installed. - install when false: dpkg -i package - install when true: apt-get update && apt-get -y install package.deb

    OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSource, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceArgs

    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceGcs
    A Cloud Storage object. Structure is documented below.
    LocalPath string
    A local path within the VM to use.
    Remote OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceRemote
    A generic remote file. Structure is documented below.
    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceGcs
    A Cloud Storage object. Structure is documented below.
    LocalPath string
    A local path within the VM to use.
    Remote OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceRemote
    A generic remote file. Structure is documented below.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceGcs
    A Cloud Storage object. Structure is documented below.
    localPath String
    A local path within the VM to use.
    remote OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceRemote
    A generic remote file. Structure is documented below.
    allowInsecure boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceGcs
    A Cloud Storage object. Structure is documented below.
    localPath string
    A local path within the VM to use.
    remote OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceRemote
    A generic remote file. Structure is documented below.
    allow_insecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceGcs
    A Cloud Storage object. Structure is documented below.
    local_path str
    A local path within the VM to use.
    remote OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceRemote
    A generic remote file. Structure is documented below.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs Property Map
    A Cloud Storage object. Structure is documented below.
    localPath String
    A local path within the VM to use.
    remote Property Map
    A generic remote file. Structure is documented below.

    OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceGcs, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceGcsArgs

    Bucket string
    Bucket of the Cloud Storage object.
    Object string
    Name of the Cloud Storage object.
    Generation int
    Generation number of the Cloud Storage object.
    Bucket string
    Bucket of the Cloud Storage object.
    Object string
    Name of the Cloud Storage object.
    Generation int
    Generation number of the Cloud Storage object.
    bucket String
    Bucket of the Cloud Storage object.
    object String
    Name of the Cloud Storage object.
    generation Integer
    Generation number of the Cloud Storage object.
    bucket string
    Bucket of the Cloud Storage object.
    object string
    Name of the Cloud Storage object.
    generation number
    Generation number of the Cloud Storage object.
    bucket str
    Bucket of the Cloud Storage object.
    object str
    Name of the Cloud Storage object.
    generation int
    Generation number of the Cloud Storage object.
    bucket String
    Bucket of the Cloud Storage object.
    object String
    Name of the Cloud Storage object.
    generation Number
    Generation number of the Cloud Storage object.

    OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceRemote, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgDebSourceRemoteArgs

    Uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    Uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    uri String
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.
    uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum string
    SHA256 checksum of the remote file.
    uri str
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256_checksum str
    SHA256 checksum of the remote file.
    uri String
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.

    OsPolicyAssignmentOsPolicyResourceGroupResourcePkgGooget, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgGoogetArgs

    Name string
    Package name.
    Name string
    Package name.
    name String
    Package name.
    name string
    Package name.
    name str
    Package name.
    name String
    Package name.

    OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsi, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiArgs

    Source OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSource
    The MSI package. Structure is documented below.
    Properties List<string>
    Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.
    Source OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSource
    The MSI package. Structure is documented below.
    Properties []string
    Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.
    source OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSource
    The MSI package. Structure is documented below.
    properties List<String>
    Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.
    source OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSource
    The MSI package. Structure is documented below.
    properties string[]
    Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.
    source OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSource
    The MSI package. Structure is documented below.
    properties Sequence[str]
    Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.
    source Property Map
    The MSI package. Structure is documented below.
    properties List<String>
    Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of ACTION=INSTALL REBOOT=ReallySuppress.

    OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSource, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceArgs

    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceGcs
    A Cloud Storage object. Structure is documented below.
    LocalPath string
    A local path within the VM to use.
    Remote OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceRemote
    A generic remote file. Structure is documented below.
    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceGcs
    A Cloud Storage object. Structure is documented below.
    LocalPath string
    A local path within the VM to use.
    Remote OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceRemote
    A generic remote file. Structure is documented below.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceGcs
    A Cloud Storage object. Structure is documented below.
    localPath String
    A local path within the VM to use.
    remote OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceRemote
    A generic remote file. Structure is documented below.
    allowInsecure boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceGcs
    A Cloud Storage object. Structure is documented below.
    localPath string
    A local path within the VM to use.
    remote OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceRemote
    A generic remote file. Structure is documented below.
    allow_insecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceGcs
    A Cloud Storage object. Structure is documented below.
    local_path str
    A local path within the VM to use.
    remote OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceRemote
    A generic remote file. Structure is documented below.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs Property Map
    A Cloud Storage object. Structure is documented below.
    localPath String
    A local path within the VM to use.
    remote Property Map
    A generic remote file. Structure is documented below.

    OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceGcs, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceGcsArgs

    Bucket string
    Bucket of the Cloud Storage object.
    Object string
    Name of the Cloud Storage object.
    Generation int
    Generation number of the Cloud Storage object.
    Bucket string
    Bucket of the Cloud Storage object.
    Object string
    Name of the Cloud Storage object.
    Generation int
    Generation number of the Cloud Storage object.
    bucket String
    Bucket of the Cloud Storage object.
    object String
    Name of the Cloud Storage object.
    generation Integer
    Generation number of the Cloud Storage object.
    bucket string
    Bucket of the Cloud Storage object.
    object string
    Name of the Cloud Storage object.
    generation number
    Generation number of the Cloud Storage object.
    bucket str
    Bucket of the Cloud Storage object.
    object str
    Name of the Cloud Storage object.
    generation int
    Generation number of the Cloud Storage object.
    bucket String
    Bucket of the Cloud Storage object.
    object String
    Name of the Cloud Storage object.
    generation Number
    Generation number of the Cloud Storage object.

    OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceRemote, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgMsiSourceRemoteArgs

    Uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    Uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    uri String
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.
    uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum string
    SHA256 checksum of the remote file.
    uri str
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256_checksum str
    SHA256 checksum of the remote file.
    uri String
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.

    OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpm, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmArgs

    Source OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSource
    An rpm package. Structure is documented below.
    PullDeps bool
    Whether dependencies should also be installed. - install when false: rpm --upgrade --replacepkgs package.rpm - install when true: yum -y install package.rpm or zypper -y install package.rpm
    Source OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSource
    An rpm package. Structure is documented below.
    PullDeps bool
    Whether dependencies should also be installed. - install when false: rpm --upgrade --replacepkgs package.rpm - install when true: yum -y install package.rpm or zypper -y install package.rpm
    source OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSource
    An rpm package. Structure is documented below.
    pullDeps Boolean
    Whether dependencies should also be installed. - install when false: rpm --upgrade --replacepkgs package.rpm - install when true: yum -y install package.rpm or zypper -y install package.rpm
    source OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSource
    An rpm package. Structure is documented below.
    pullDeps boolean
    Whether dependencies should also be installed. - install when false: rpm --upgrade --replacepkgs package.rpm - install when true: yum -y install package.rpm or zypper -y install package.rpm
    source OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSource
    An rpm package. Structure is documented below.
    pull_deps bool
    Whether dependencies should also be installed. - install when false: rpm --upgrade --replacepkgs package.rpm - install when true: yum -y install package.rpm or zypper -y install package.rpm
    source Property Map
    An rpm package. Structure is documented below.
    pullDeps Boolean
    Whether dependencies should also be installed. - install when false: rpm --upgrade --replacepkgs package.rpm - install when true: yum -y install package.rpm or zypper -y install package.rpm

    OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSource, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceArgs

    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceGcs
    A Cloud Storage object. Structure is documented below.
    LocalPath string
    A local path within the VM to use.
    Remote OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceRemote
    A generic remote file. Structure is documented below.
    AllowInsecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    Gcs OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceGcs
    A Cloud Storage object. Structure is documented below.
    LocalPath string
    A local path within the VM to use.
    Remote OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceRemote
    A generic remote file. Structure is documented below.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceGcs
    A Cloud Storage object. Structure is documented below.
    localPath String
    A local path within the VM to use.
    remote OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceRemote
    A generic remote file. Structure is documented below.
    allowInsecure boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceGcs
    A Cloud Storage object. Structure is documented below.
    localPath string
    A local path within the VM to use.
    remote OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceRemote
    A generic remote file. Structure is documented below.
    allow_insecure bool
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceGcs
    A Cloud Storage object. Structure is documented below.
    local_path str
    A local path within the VM to use.
    remote OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceRemote
    A generic remote file. Structure is documented below.
    allowInsecure Boolean
    Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.
    gcs Property Map
    A Cloud Storage object. Structure is documented below.
    localPath String
    A local path within the VM to use.
    remote Property Map
    A generic remote file. Structure is documented below.

    OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceGcs, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceGcsArgs

    Bucket string
    Bucket of the Cloud Storage object.
    Object string
    Name of the Cloud Storage object.
    Generation int
    Generation number of the Cloud Storage object.
    Bucket string
    Bucket of the Cloud Storage object.
    Object string
    Name of the Cloud Storage object.
    Generation int
    Generation number of the Cloud Storage object.
    bucket String
    Bucket of the Cloud Storage object.
    object String
    Name of the Cloud Storage object.
    generation Integer
    Generation number of the Cloud Storage object.
    bucket string
    Bucket of the Cloud Storage object.
    object string
    Name of the Cloud Storage object.
    generation number
    Generation number of the Cloud Storage object.
    bucket str
    Bucket of the Cloud Storage object.
    object str
    Name of the Cloud Storage object.
    generation int
    Generation number of the Cloud Storage object.
    bucket String
    Bucket of the Cloud Storage object.
    object String
    Name of the Cloud Storage object.
    generation Number
    Generation number of the Cloud Storage object.

    OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceRemote, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgRpmSourceRemoteArgs

    Uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    Uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    Sha256Checksum string
    SHA256 checksum of the remote file.
    uri String
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.
    uri string
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum string
    SHA256 checksum of the remote file.
    uri str
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256_checksum str
    SHA256 checksum of the remote file.
    uri String
    URI from which to fetch the object. It should contain both the protocol and path following the format {protocol}://{location}.
    sha256Checksum String
    SHA256 checksum of the remote file.

    OsPolicyAssignmentOsPolicyResourceGroupResourcePkgYum, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgYumArgs

    Name string
    Package name.
    Name string
    Package name.
    name String
    Package name.
    name string
    Package name.
    name str
    Package name.
    name String
    Package name.

    OsPolicyAssignmentOsPolicyResourceGroupResourcePkgZypper, OsPolicyAssignmentOsPolicyResourceGroupResourcePkgZypperArgs

    Name string
    Package name.
    Name string
    Package name.
    name String
    Package name.
    name string
    Package name.
    name str
    Package name.
    name String
    Package name.

    OsPolicyAssignmentOsPolicyResourceGroupResourceRepository, OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryArgs

    Apt OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryApt
    An Apt Repository. Structure is documented below.
    Goo OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryGoo
    A Goo Repository. Structure is documented below.
    Yum OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryYum
    A Yum Repository. Structure is documented below.
    Zypper OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryZypper
    A Zypper Repository. Structure is documented below.
    Apt OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryApt
    An Apt Repository. Structure is documented below.
    Goo OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryGoo
    A Goo Repository. Structure is documented below.
    Yum OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryYum
    A Yum Repository. Structure is documented below.
    Zypper OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryZypper
    A Zypper Repository. Structure is documented below.
    apt OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryApt
    An Apt Repository. Structure is documented below.
    goo OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryGoo
    A Goo Repository. Structure is documented below.
    yum OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryYum
    A Yum Repository. Structure is documented below.
    zypper OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryZypper
    A Zypper Repository. Structure is documented below.
    apt OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryApt
    An Apt Repository. Structure is documented below.
    goo OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryGoo
    A Goo Repository. Structure is documented below.
    yum OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryYum
    A Yum Repository. Structure is documented below.
    zypper OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryZypper
    A Zypper Repository. Structure is documented below.
    apt OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryApt
    An Apt Repository. Structure is documented below.
    goo OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryGoo
    A Goo Repository. Structure is documented below.
    yum OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryYum
    A Yum Repository. Structure is documented below.
    zypper OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryZypper
    A Zypper Repository. Structure is documented below.
    apt Property Map
    An Apt Repository. Structure is documented below.
    goo Property Map
    A Goo Repository. Structure is documented below.
    yum Property Map
    A Yum Repository. Structure is documented below.
    zypper Property Map
    A Zypper Repository. Structure is documented below.

    OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryApt, OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryAptArgs

    ArchiveType string
    Type of archive files in this repository. Possible values are: ARCHIVE_TYPE_UNSPECIFIED, DEB, DEB_SRC.
    Components List<string>
    List of components for this repository. Must contain at least one item.
    Distribution string
    Distribution of this repository.
    Uri string
    URI for this repository.
    GpgKey string
    URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
    ArchiveType string
    Type of archive files in this repository. Possible values are: ARCHIVE_TYPE_UNSPECIFIED, DEB, DEB_SRC.
    Components []string
    List of components for this repository. Must contain at least one item.
    Distribution string
    Distribution of this repository.
    Uri string
    URI for this repository.
    GpgKey string
    URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
    archiveType String
    Type of archive files in this repository. Possible values are: ARCHIVE_TYPE_UNSPECIFIED, DEB, DEB_SRC.
    components List<String>
    List of components for this repository. Must contain at least one item.
    distribution String
    Distribution of this repository.
    uri String
    URI for this repository.
    gpgKey String
    URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
    archiveType string
    Type of archive files in this repository. Possible values are: ARCHIVE_TYPE_UNSPECIFIED, DEB, DEB_SRC.
    components string[]
    List of components for this repository. Must contain at least one item.
    distribution string
    Distribution of this repository.
    uri string
    URI for this repository.
    gpgKey string
    URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
    archive_type str
    Type of archive files in this repository. Possible values are: ARCHIVE_TYPE_UNSPECIFIED, DEB, DEB_SRC.
    components Sequence[str]
    List of components for this repository. Must contain at least one item.
    distribution str
    Distribution of this repository.
    uri str
    URI for this repository.
    gpg_key str
    URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.
    archiveType String
    Type of archive files in this repository. Possible values are: ARCHIVE_TYPE_UNSPECIFIED, DEB, DEB_SRC.
    components List<String>
    List of components for this repository. Must contain at least one item.
    distribution String
    Distribution of this repository.
    uri String
    URI for this repository.
    gpgKey String
    URI of the key file for this repository. The agent maintains a keyring at /etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg.

    OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryGoo, OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryGooArgs

    Name string
    The name of the repository.
    Url string
    The url of the repository.
    Name string
    The name of the repository.
    Url string
    The url of the repository.
    name String
    The name of the repository.
    url String
    The url of the repository.
    name string
    The name of the repository.
    url string
    The url of the repository.
    name str
    The name of the repository.
    url str
    The url of the repository.
    name String
    The name of the repository.
    url String
    The url of the repository.

    OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryYum, OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryYumArgs

    BaseUrl string
    The location of the repository directory.
    Id string
    A one word, unique name for this repository. This is the repo id in the yum config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for resource conflicts.
    DisplayName string
    The display name of the repository.
    GpgKeys List<string>
    URIs of GPG keys.
    BaseUrl string
    The location of the repository directory.
    Id string
    A one word, unique name for this repository. This is the repo id in the yum config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for resource conflicts.
    DisplayName string
    The display name of the repository.
    GpgKeys []string
    URIs of GPG keys.
    baseUrl String
    The location of the repository directory.
    id String
    A one word, unique name for this repository. This is the repo id in the yum config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for resource conflicts.
    displayName String
    The display name of the repository.
    gpgKeys List<String>
    URIs of GPG keys.
    baseUrl string
    The location of the repository directory.
    id string
    A one word, unique name for this repository. This is the repo id in the yum config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for resource conflicts.
    displayName string
    The display name of the repository.
    gpgKeys string[]
    URIs of GPG keys.
    base_url str
    The location of the repository directory.
    id str
    A one word, unique name for this repository. This is the repo id in the yum config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for resource conflicts.
    display_name str
    The display name of the repository.
    gpg_keys Sequence[str]
    URIs of GPG keys.
    baseUrl String
    The location of the repository directory.
    id String
    A one word, unique name for this repository. This is the repo id in the yum config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for resource conflicts.
    displayName String
    The display name of the repository.
    gpgKeys List<String>
    URIs of GPG keys.

    OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryZypper, OsPolicyAssignmentOsPolicyResourceGroupResourceRepositoryZypperArgs

    BaseUrl string
    The location of the repository directory.
    Id string
    A one word, unique name for this repository. This is the repo id in the zypper config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
    DisplayName string
    The display name of the repository.
    GpgKeys List<string>
    URIs of GPG keys.
    BaseUrl string
    The location of the repository directory.
    Id string
    A one word, unique name for this repository. This is the repo id in the zypper config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
    DisplayName string
    The display name of the repository.
    GpgKeys []string
    URIs of GPG keys.
    baseUrl String
    The location of the repository directory.
    id String
    A one word, unique name for this repository. This is the repo id in the zypper config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
    displayName String
    The display name of the repository.
    gpgKeys List<String>
    URIs of GPG keys.
    baseUrl string
    The location of the repository directory.
    id string
    A one word, unique name for this repository. This is the repo id in the zypper config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
    displayName string
    The display name of the repository.
    gpgKeys string[]
    URIs of GPG keys.
    base_url str
    The location of the repository directory.
    id str
    A one word, unique name for this repository. This is the repo id in the zypper config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
    display_name str
    The display name of the repository.
    gpg_keys Sequence[str]
    URIs of GPG keys.
    baseUrl String
    The location of the repository directory.
    id String
    A one word, unique name for this repository. This is the repo id in the zypper config file and also the display_name if display_name is omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.
    displayName String
    The display name of the repository.
    gpgKeys List<String>
    URIs of GPG keys.

    OsPolicyAssignmentRollout, OsPolicyAssignmentRolloutArgs

    DisruptionBudget OsPolicyAssignmentRolloutDisruptionBudget
    The maximum number (or percentage) of VMs per zone to disrupt at any given moment. Structure is documented below.
    MinWaitDuration string
    This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.
    DisruptionBudget OsPolicyAssignmentRolloutDisruptionBudget
    The maximum number (or percentage) of VMs per zone to disrupt at any given moment. Structure is documented below.
    MinWaitDuration string
    This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.
    disruptionBudget OsPolicyAssignmentRolloutDisruptionBudget
    The maximum number (or percentage) of VMs per zone to disrupt at any given moment. Structure is documented below.
    minWaitDuration String
    This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.
    disruptionBudget OsPolicyAssignmentRolloutDisruptionBudget
    The maximum number (or percentage) of VMs per zone to disrupt at any given moment. Structure is documented below.
    minWaitDuration string
    This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.
    disruption_budget OsPolicyAssignmentRolloutDisruptionBudget
    The maximum number (or percentage) of VMs per zone to disrupt at any given moment. Structure is documented below.
    min_wait_duration str
    This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.
    disruptionBudget Property Map
    The maximum number (or percentage) of VMs per zone to disrupt at any given moment. Structure is documented below.
    minWaitDuration String
    This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the disruption_budget at least until this duration of time has passed after configuration changes are applied.

    OsPolicyAssignmentRolloutDisruptionBudget, OsPolicyAssignmentRolloutDisruptionBudgetArgs

    Fixed int
    Specifies a fixed value.
    Percent int
    Specifies the relative value defined as a percentage, which will be multiplied by a reference value.


    Fixed int
    Specifies a fixed value.
    Percent int
    Specifies the relative value defined as a percentage, which will be multiplied by a reference value.


    fixed Integer
    Specifies a fixed value.
    percent Integer
    Specifies the relative value defined as a percentage, which will be multiplied by a reference value.


    fixed number
    Specifies a fixed value.
    percent number
    Specifies the relative value defined as a percentage, which will be multiplied by a reference value.


    fixed int
    Specifies a fixed value.
    percent int
    Specifies the relative value defined as a percentage, which will be multiplied by a reference value.


    fixed Number
    Specifies a fixed value.
    percent Number
    Specifies the relative value defined as a percentage, which will be multiplied by a reference value.


    Import

    OSPolicyAssignment can be imported using any of these accepted formats:

    • projects/{{project}}/locations/{{location}}/osPolicyAssignments/{{name}}

    • {{project}}/{{location}}/{{name}}

    • {{location}}/{{name}}

    When using the pulumi import command, OSPolicyAssignment can be imported using one of the formats above. For example:

    $ pulumi import gcp:osconfig/osPolicyAssignment:OsPolicyAssignment default projects/{{project}}/locations/{{location}}/osPolicyAssignments/{{name}}
    
    $ pulumi import gcp:osconfig/osPolicyAssignment:OsPolicyAssignment default {{project}}/{{location}}/{{name}}
    
    $ pulumi import gcp:osconfig/osPolicyAssignment:OsPolicyAssignment default {{location}}/{{name}}
    

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Google Cloud (GCP) Classic pulumi/pulumi-gcp
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the google-beta Terraform Provider.
    gcp logo
    Google Cloud Classic v8.9.3 published on Monday, Nov 18, 2024 by Pulumi