diff --git a/services/google/orgpolicy/alpha/policy.yaml b/services/google/orgpolicy/alpha/policy.yaml index 28085afef2..3bfa8ac920 100755 --- a/services/google/orgpolicy/alpha/policy.yaml +++ b/services/google/orgpolicy/alpha/policy.yaml @@ -130,8 +130,8 @@ components: allowAll: type: boolean x-dcl-go-name: AllowAll - description: Setting this to true means that all values are allowed. - This field can be set only in policies for list constraints. + description: Setting this to `"TRUE"` means that all values are + allowed. This field can be set only in policies for list constraints. x-dcl-conflicts: - values - denyAll @@ -177,8 +177,8 @@ components: denyAll: type: boolean x-dcl-go-name: DenyAll - description: Setting this to true means that all values are denied. - This field can be set only in policies for list constraints. + description: Setting this to `"TRUE"` means that all values are + denied. This field can be set only in policies for list constraints. x-dcl-conflicts: - values - allowAll @@ -186,7 +186,7 @@ components: enforce: type: boolean x-dcl-go-name: Enforce - description: If `true`, then the policy is enforced. If `false`, + description: If `"TRUE"`, then the policy is enforced. If `"FALSE"`, then any configuration is acceptable. This field can be set only in policies for boolean constraints. x-dcl-conflicts: @@ -319,8 +319,8 @@ components: allowAll: type: boolean x-dcl-go-name: AllowAll - description: Setting this to true means that all values are allowed. - This field can be set only in Policies for list constraints. + description: Setting this to `"TRUE"` means that all values are + allowed. This field can be set only in Policies for list constraints. x-dcl-conflicts: - values - denyAll @@ -366,8 +366,8 @@ components: denyAll: type: boolean x-dcl-go-name: DenyAll - description: Setting this to true means that all values are denied. - This field can be set only in Policies for list constraints. + description: Setting this to `"TRUE"` means that all values are + denied. This field can be set only in Policies for list constraints. x-dcl-conflicts: - values - allowAll @@ -375,7 +375,7 @@ components: enforce: type: boolean x-dcl-go-name: Enforce - description: If `true`, then the `Policy` is enforced. If `false`, + description: If `"TRUE"`, then the `Policy` is enforced. If `"FALSE"`, then any configuration is acceptable. This field can be set only in Policies for boolean constraints. x-dcl-conflicts: diff --git a/services/google/orgpolicy/alpha/policy_alpha_yaml_embed.go b/services/google/orgpolicy/alpha/policy_alpha_yaml_embed.go index 79285d3c04..c85624a2d4 100755 --- a/services/google/orgpolicy/alpha/policy_alpha_yaml_embed.go +++ b/services/google/orgpolicy/alpha/policy_alpha_yaml_embed.go @@ -17,7 +17,7 @@ package alpha // blaze-out/k8-fastbuild/genfiles/cloud/graphite/mmv2/services/google/orgpolicy/alpha/policy.yaml -var YAML_policy = []byte("info:\n title: OrgPolicy/Policy\n description: An organization policy gives you programmatic control over your organization's\n cloud resources. Using Organization Policies, you will be able to configure constraints\n across your entire resource hierarchy.\n x-dcl-struct-name: Policy\n x-dcl-has-iam: false\n x-dcl-ref:\n text: REST API\n url: https://cloud.google.com/resource-manager/docs/reference/orgpolicy/rest/v2/organizations.policies\n x-dcl-guides:\n - text: Understanding Org Policy concepts\n url: https://cloud.google.com/resource-manager/docs/organization-policy/overview\n - text: The resource hierarchy\n url: https://cloud.google.com/resource-manager/docs/cloud-platform-resource-hierarchy\n - text: All valid constraints\n url: https://cloud.google.com/resource-manager/docs/organization-policy/org-policy-constraints\npaths:\n get:\n description: The function used to get information about a Policy\n parameters:\n - name: policy\n required: true\n description: A full instance of a Policy\n apply:\n description: The function used to apply information about a Policy\n parameters:\n - name: policy\n required: true\n description: A full instance of a Policy\n delete:\n description: The function used to delete a Policy\n parameters:\n - name: policy\n required: true\n description: A full instance of a Policy\n deleteAll:\n description: The function used to delete all Policy\n parameters:\n - name: parent\n required: true\n schema:\n type: string\n list:\n description: The function used to list information about many Policy\n parameters:\n - name: parent\n required: true\n schema:\n type: string\ncomponents:\n schemas:\n Policy:\n title: Policy\n x-dcl-id: '{{parent}}/policies/{{name}}'\n x-dcl-has-create: true\n x-dcl-has-iam: false\n x-dcl-read-timeout: 0\n x-dcl-apply-timeout: 0\n x-dcl-delete-timeout: 0\n type: object\n required:\n - name\n - parent\n properties:\n dryRunSpec:\n type: object\n x-dcl-go-name: DryRunSpec\n x-dcl-go-type: PolicyDryRunSpec\n description: Dry-run policy. Audit-only policy, can be used to monitor how\n the policy would have impacted the existing and future resources if it's\n enforced.\n properties:\n etag:\n type: string\n x-dcl-go-name: Etag\n readOnly: true\n description: An opaque tag indicating the current version of the policy,\n used for concurrency control. This field is ignored if used in a `CreatePolicy`\n request. When the policy` is returned from either a `GetPolicy` or\n a `ListPolicies` request, this `etag` indicates the version of the\n current policy to use when executing a read-modify-write loop. When\n the policy is returned from a `GetEffectivePolicy` request, the `etag`\n will be unset.\n inheritFromParent:\n type: boolean\n x-dcl-go-name: InheritFromParent\n description: Determines the inheritance behavior for this policy. If\n `inherit_from_parent` is true, policy rules set higher up in the hierarchy\n (up to the closest root) are inherited and present in the effective\n policy. If it is false, then no rules are inherited, and this policy\n becomes the new root for evaluation. This field can be set only for\n policies which configure list constraints.\n reset:\n type: boolean\n x-dcl-go-name: Reset\n description: Ignores policies set above this resource and restores the\n `constraint_default` enforcement behavior of the specific constraint\n at this resource. This field can be set in policies for either list\n or boolean constraints. If set, `rules` must be empty and `inherit_from_parent`\n must be set to false.\n rules:\n type: array\n x-dcl-go-name: Rules\n description: 'In policies for boolean constraints, the following requirements\n apply: - There must be one and only one policy rule where condition\n is unset. - Boolean policy rules with conditions must set `enforced`\n to the opposite of the policy rule without a condition. - During policy\n evaluation, policy rules with conditions that are true for a target\n resource take precedence.'\n x-dcl-send-empty: true\n x-dcl-list-type: list\n items:\n type: object\n x-dcl-go-type: PolicyDryRunSpecRules\n properties:\n allowAll:\n type: boolean\n x-dcl-go-name: AllowAll\n description: Setting this to true means that all values are allowed.\n This field can be set only in policies for list constraints.\n x-dcl-conflicts:\n - values\n - denyAll\n - enforce\n condition:\n type: object\n x-dcl-go-name: Condition\n x-dcl-go-type: PolicyDryRunSpecRulesCondition\n description: 'A condition which determines whether this rule is\n used in the evaluation of the policy. When set, the `expression`\n field in the `Expr'' must include from 1 to 10 subexpressions,\n joined by the \"||\" or \"&&\" operators. Each subexpression must\n be of the form \"resource.matchTag(''/tag_key_short_name, ''tag_value_short_name'')\".\n or \"resource.matchTagId(''tagKeys/key_id'', ''tagValues/value_id'')\".\n where key_name and value_name are the resource names for Label\n Keys and Values. These names are available from the Tag Manager\n Service. An example expression is: \"resource.matchTag(''123456789/environment,\n ''prod'')\". or \"resource.matchTagId(''tagKeys/123'', ''tagValues/456'')\".'\n properties:\n description:\n type: string\n x-dcl-go-name: Description\n description: Optional. Description of the expression. This\n is a longer text which describes the expression, e.g. when\n hovered over it in a UI.\n expression:\n type: string\n x-dcl-go-name: Expression\n description: Textual representation of an expression in Common\n Expression Language syntax.\n location:\n type: string\n x-dcl-go-name: Location\n description: Optional. String indicating the location of the\n expression for error reporting, e.g. a file name and a position\n in the file.\n title:\n type: string\n x-dcl-go-name: Title\n description: Optional. Title for the expression, i.e. a short\n string describing its purpose. This can be used e.g. in\n UIs which allow to enter the expression.\n denyAll:\n type: boolean\n x-dcl-go-name: DenyAll\n description: Setting this to true means that all values are denied.\n This field can be set only in policies for list constraints.\n x-dcl-conflicts:\n - values\n - allowAll\n - enforce\n enforce:\n type: boolean\n x-dcl-go-name: Enforce\n description: If `true`, then the policy is enforced. If `false`,\n then any configuration is acceptable. This field can be set\n only in policies for boolean constraints.\n x-dcl-conflicts:\n - values\n - allowAll\n - denyAll\n values:\n type: object\n x-dcl-go-name: Values\n x-dcl-go-type: PolicyDryRunSpecRulesValues\n description: List of values to be used for this policy rule. This\n field can be set only in policies for list constraints.\n x-dcl-conflicts:\n - allowAll\n - denyAll\n - enforce\n properties:\n allowedValues:\n type: array\n x-dcl-go-name: AllowedValues\n description: List of values allowed at this resource.\n x-dcl-send-empty: true\n x-dcl-list-type: list\n items:\n type: string\n x-dcl-go-type: string\n deniedValues:\n type: array\n x-dcl-go-name: DeniedValues\n description: List of values denied at this resource.\n x-dcl-send-empty: true\n x-dcl-list-type: list\n items:\n type: string\n x-dcl-go-type: string\n updateTime:\n type: string\n format: date-time\n x-dcl-go-name: UpdateTime\n readOnly: true\n description: Output only. The time stamp this was previously updated.\n This represents the last time a call to `CreatePolicy` or `UpdatePolicy`\n was made for that policy.\n etag:\n type: string\n x-dcl-go-name: Etag\n readOnly: true\n description: Optional. An opaque tag indicating the current state of the\n policy, used for concurrency control. This 'etag' is computed by the server\n based on the value of other fields, and may be sent on update and delete\n requests to ensure the client has an up-to-date value before proceeding.\n x-kubernetes-immutable: true\n name:\n type: string\n x-dcl-go-name: Name\n description: 'Immutable. The resource name of the Policy. Must be one of\n the following forms, where constraint_name is the name of the constraint\n which this Policy configures: * `projects/{project_number}/policies/{constraint_name}`\n * `folders/{folder_id}/policies/{constraint_name}` * `organizations/{organization_id}/policies/{constraint_name}`\n For example, \"projects/123/policies/compute.disableSerialPortAccess\".\n Note: `projects/{project_id}/policies/{constraint_name}` is also an acceptable\n name for API requests, but responses will return the name using the equivalent\n project number.'\n x-kubernetes-immutable: true\n parent:\n type: string\n x-dcl-go-name: Parent\n description: The parent of the resource.\n x-kubernetes-immutable: true\n x-dcl-forward-slash-allowed: true\n x-dcl-references:\n - resource: Cloudresourcemanager/Folder\n field: name\n parent: true\n - resource: Cloudresourcemanager/Organization\n field: name\n parent: true\n - resource: Cloudresourcemanager/Project\n field: name\n parent: true\n spec:\n type: object\n x-dcl-go-name: Spec\n x-dcl-go-type: PolicySpec\n description: Basic information about the Organization Policy.\n properties:\n etag:\n type: string\n x-dcl-go-name: Etag\n readOnly: true\n description: An opaque tag indicating the current version of the `Policy`,\n used for concurrency control. This field is ignored if used in a `CreatePolicy`\n request. When the `Policy` is returned from either a `GetPolicy` or\n a `ListPolicies` request, this `etag` indicates the version of the\n current `Policy` to use when executing a read-modify-write loop. When\n the `Policy` is returned from a `GetEffectivePolicy` request, the\n `etag` will be unset.\n inheritFromParent:\n type: boolean\n x-dcl-go-name: InheritFromParent\n description: Determines the inheritance behavior for this `Policy`.\n If `inherit_from_parent` is true, PolicyRules set higher up in the\n hierarchy (up to the closest root) are inherited and present in the\n effective policy. If it is false, then no rules are inherited, and\n this Policy becomes the new root for evaluation. This field can be\n set only for Policies which configure list constraints.\n reset:\n type: boolean\n x-dcl-go-name: Reset\n description: Ignores policies set above this resource and restores the\n `constraint_default` enforcement behavior of the specific `Constraint`\n at this resource. This field can be set in policies for either list\n or boolean constraints. If set, `rules` must be empty and `inherit_from_parent`\n must be set to false.\n rules:\n type: array\n x-dcl-go-name: Rules\n description: 'Up to 10 PolicyRules are allowed. In Policies for boolean\n constraints, the following requirements apply: - There must be one\n and only one PolicyRule where condition is unset. - BooleanPolicyRules\n with conditions must set `enforced` to the opposite of the PolicyRule\n without a condition. - During policy evaluation, PolicyRules with\n conditions that are true for a target resource take precedence.'\n x-dcl-send-empty: true\n x-dcl-list-type: list\n items:\n type: object\n x-dcl-go-type: PolicySpecRules\n properties:\n allowAll:\n type: boolean\n x-dcl-go-name: AllowAll\n description: Setting this to true means that all values are allowed.\n This field can be set only in Policies for list constraints.\n x-dcl-conflicts:\n - values\n - denyAll\n - enforce\n condition:\n type: object\n x-dcl-go-name: Condition\n x-dcl-go-type: PolicySpecRulesCondition\n description: 'A condition which determines whether this rule is\n used in the evaluation of the policy. When set, the `expression`\n field in the `Expr'' must include from 1 to 10 subexpressions,\n joined by the \"||\" or \"&&\" operators. Each subexpression must\n be of the form \"resource.matchTag(''/tag_key_short_name, ''tag_value_short_name'')\".\n or \"resource.matchTagId(''tagKeys/key_id'', ''tagValues/value_id'')\".\n where key_name and value_name are the resource names for Label\n Keys and Values. These names are available from the Tag Manager\n Service. An example expression is: \"resource.matchTag(''123456789/environment,\n ''prod'')\". or \"resource.matchTagId(''tagKeys/123'', ''tagValues/456'')\".'\n properties:\n description:\n type: string\n x-dcl-go-name: Description\n description: Optional. Description of the expression. This\n is a longer text which describes the expression, e.g. when\n hovered over it in a UI.\n expression:\n type: string\n x-dcl-go-name: Expression\n description: Textual representation of an expression in Common\n Expression Language syntax.\n location:\n type: string\n x-dcl-go-name: Location\n description: Optional. String indicating the location of the\n expression for error reporting, e.g. a file name and a position\n in the file.\n title:\n type: string\n x-dcl-go-name: Title\n description: Optional. Title for the expression, i.e. a short\n string describing its purpose. This can be used e.g. in\n UIs which allow to enter the expression.\n denyAll:\n type: boolean\n x-dcl-go-name: DenyAll\n description: Setting this to true means that all values are denied.\n This field can be set only in Policies for list constraints.\n x-dcl-conflicts:\n - values\n - allowAll\n - enforce\n enforce:\n type: boolean\n x-dcl-go-name: Enforce\n description: If `true`, then the `Policy` is enforced. If `false`,\n then any configuration is acceptable. This field can be set\n only in Policies for boolean constraints.\n x-dcl-conflicts:\n - values\n - allowAll\n - denyAll\n values:\n type: object\n x-dcl-go-name: Values\n x-dcl-go-type: PolicySpecRulesValues\n description: List of values to be used for this PolicyRule. This\n field can be set only in Policies for list constraints.\n x-dcl-conflicts:\n - allowAll\n - denyAll\n - enforce\n properties:\n allowedValues:\n type: array\n x-dcl-go-name: AllowedValues\n description: List of values allowed at this resource.\n x-dcl-send-empty: true\n x-dcl-list-type: list\n items:\n type: string\n x-dcl-go-type: string\n deniedValues:\n type: array\n x-dcl-go-name: DeniedValues\n description: List of values denied at this resource.\n x-dcl-send-empty: true\n x-dcl-list-type: list\n items:\n type: string\n x-dcl-go-type: string\n updateTime:\n type: string\n format: date-time\n x-dcl-go-name: UpdateTime\n readOnly: true\n description: Output only. The time stamp this was previously updated.\n This represents the last time a call to `CreatePolicy` or `UpdatePolicy`\n was made for that `Policy`.\n") +var YAML_policy = []byte("info:\n title: OrgPolicy/Policy\n description: An organization policy gives you programmatic control over your organization's\n cloud resources. Using Organization Policies, you will be able to configure constraints\n across your entire resource hierarchy.\n x-dcl-struct-name: Policy\n x-dcl-has-iam: false\n x-dcl-ref:\n text: REST API\n url: https://cloud.google.com/resource-manager/docs/reference/orgpolicy/rest/v2/organizations.policies\n x-dcl-guides:\n - text: Understanding Org Policy concepts\n url: https://cloud.google.com/resource-manager/docs/organization-policy/overview\n - text: The resource hierarchy\n url: https://cloud.google.com/resource-manager/docs/cloud-platform-resource-hierarchy\n - text: All valid constraints\n url: https://cloud.google.com/resource-manager/docs/organization-policy/org-policy-constraints\npaths:\n get:\n description: The function used to get information about a Policy\n parameters:\n - name: policy\n required: true\n description: A full instance of a Policy\n apply:\n description: The function used to apply information about a Policy\n parameters:\n - name: policy\n required: true\n description: A full instance of a Policy\n delete:\n description: The function used to delete a Policy\n parameters:\n - name: policy\n required: true\n description: A full instance of a Policy\n deleteAll:\n description: The function used to delete all Policy\n parameters:\n - name: parent\n required: true\n schema:\n type: string\n list:\n description: The function used to list information about many Policy\n parameters:\n - name: parent\n required: true\n schema:\n type: string\ncomponents:\n schemas:\n Policy:\n title: Policy\n x-dcl-id: '{{parent}}/policies/{{name}}'\n x-dcl-has-create: true\n x-dcl-has-iam: false\n x-dcl-read-timeout: 0\n x-dcl-apply-timeout: 0\n x-dcl-delete-timeout: 0\n type: object\n required:\n - name\n - parent\n properties:\n dryRunSpec:\n type: object\n x-dcl-go-name: DryRunSpec\n x-dcl-go-type: PolicyDryRunSpec\n description: Dry-run policy. Audit-only policy, can be used to monitor how\n the policy would have impacted the existing and future resources if it's\n enforced.\n properties:\n etag:\n type: string\n x-dcl-go-name: Etag\n readOnly: true\n description: An opaque tag indicating the current version of the policy,\n used for concurrency control. This field is ignored if used in a `CreatePolicy`\n request. When the policy` is returned from either a `GetPolicy` or\n a `ListPolicies` request, this `etag` indicates the version of the\n current policy to use when executing a read-modify-write loop. When\n the policy is returned from a `GetEffectivePolicy` request, the `etag`\n will be unset.\n inheritFromParent:\n type: boolean\n x-dcl-go-name: InheritFromParent\n description: Determines the inheritance behavior for this policy. If\n `inherit_from_parent` is true, policy rules set higher up in the hierarchy\n (up to the closest root) are inherited and present in the effective\n policy. If it is false, then no rules are inherited, and this policy\n becomes the new root for evaluation. This field can be set only for\n policies which configure list constraints.\n reset:\n type: boolean\n x-dcl-go-name: Reset\n description: Ignores policies set above this resource and restores the\n `constraint_default` enforcement behavior of the specific constraint\n at this resource. This field can be set in policies for either list\n or boolean constraints. If set, `rules` must be empty and `inherit_from_parent`\n must be set to false.\n rules:\n type: array\n x-dcl-go-name: Rules\n description: 'In policies for boolean constraints, the following requirements\n apply: - There must be one and only one policy rule where condition\n is unset. - Boolean policy rules with conditions must set `enforced`\n to the opposite of the policy rule without a condition. - During policy\n evaluation, policy rules with conditions that are true for a target\n resource take precedence.'\n x-dcl-send-empty: true\n x-dcl-list-type: list\n items:\n type: object\n x-dcl-go-type: PolicyDryRunSpecRules\n properties:\n allowAll:\n type: boolean\n x-dcl-go-name: AllowAll\n description: Setting this to `\"TRUE\"` means that all values are\n allowed. This field can be set only in policies for list constraints.\n x-dcl-conflicts:\n - values\n - denyAll\n - enforce\n condition:\n type: object\n x-dcl-go-name: Condition\n x-dcl-go-type: PolicyDryRunSpecRulesCondition\n description: 'A condition which determines whether this rule is\n used in the evaluation of the policy. When set, the `expression`\n field in the `Expr'' must include from 1 to 10 subexpressions,\n joined by the \"||\" or \"&&\" operators. Each subexpression must\n be of the form \"resource.matchTag(''/tag_key_short_name, ''tag_value_short_name'')\".\n or \"resource.matchTagId(''tagKeys/key_id'', ''tagValues/value_id'')\".\n where key_name and value_name are the resource names for Label\n Keys and Values. These names are available from the Tag Manager\n Service. An example expression is: \"resource.matchTag(''123456789/environment,\n ''prod'')\". or \"resource.matchTagId(''tagKeys/123'', ''tagValues/456'')\".'\n properties:\n description:\n type: string\n x-dcl-go-name: Description\n description: Optional. Description of the expression. This\n is a longer text which describes the expression, e.g. when\n hovered over it in a UI.\n expression:\n type: string\n x-dcl-go-name: Expression\n description: Textual representation of an expression in Common\n Expression Language syntax.\n location:\n type: string\n x-dcl-go-name: Location\n description: Optional. String indicating the location of the\n expression for error reporting, e.g. a file name and a position\n in the file.\n title:\n type: string\n x-dcl-go-name: Title\n description: Optional. Title for the expression, i.e. a short\n string describing its purpose. This can be used e.g. in\n UIs which allow to enter the expression.\n denyAll:\n type: boolean\n x-dcl-go-name: DenyAll\n description: Setting this to `\"TRUE\"` means that all values are\n denied. This field can be set only in policies for list constraints.\n x-dcl-conflicts:\n - values\n - allowAll\n - enforce\n enforce:\n type: boolean\n x-dcl-go-name: Enforce\n description: If `\"TRUE\"`, then the policy is enforced. If `\"FALSE\"`,\n then any configuration is acceptable. This field can be set\n only in policies for boolean constraints.\n x-dcl-conflicts:\n - values\n - allowAll\n - denyAll\n values:\n type: object\n x-dcl-go-name: Values\n x-dcl-go-type: PolicyDryRunSpecRulesValues\n description: List of values to be used for this policy rule. This\n field can be set only in policies for list constraints.\n x-dcl-conflicts:\n - allowAll\n - denyAll\n - enforce\n properties:\n allowedValues:\n type: array\n x-dcl-go-name: AllowedValues\n description: List of values allowed at this resource.\n x-dcl-send-empty: true\n x-dcl-list-type: list\n items:\n type: string\n x-dcl-go-type: string\n deniedValues:\n type: array\n x-dcl-go-name: DeniedValues\n description: List of values denied at this resource.\n x-dcl-send-empty: true\n x-dcl-list-type: list\n items:\n type: string\n x-dcl-go-type: string\n updateTime:\n type: string\n format: date-time\n x-dcl-go-name: UpdateTime\n readOnly: true\n description: Output only. The time stamp this was previously updated.\n This represents the last time a call to `CreatePolicy` or `UpdatePolicy`\n was made for that policy.\n etag:\n type: string\n x-dcl-go-name: Etag\n readOnly: true\n description: Optional. An opaque tag indicating the current state of the\n policy, used for concurrency control. This 'etag' is computed by the server\n based on the value of other fields, and may be sent on update and delete\n requests to ensure the client has an up-to-date value before proceeding.\n x-kubernetes-immutable: true\n name:\n type: string\n x-dcl-go-name: Name\n description: 'Immutable. The resource name of the Policy. Must be one of\n the following forms, where constraint_name is the name of the constraint\n which this Policy configures: * `projects/{project_number}/policies/{constraint_name}`\n * `folders/{folder_id}/policies/{constraint_name}` * `organizations/{organization_id}/policies/{constraint_name}`\n For example, \"projects/123/policies/compute.disableSerialPortAccess\".\n Note: `projects/{project_id}/policies/{constraint_name}` is also an acceptable\n name for API requests, but responses will return the name using the equivalent\n project number.'\n x-kubernetes-immutable: true\n parent:\n type: string\n x-dcl-go-name: Parent\n description: The parent of the resource.\n x-kubernetes-immutable: true\n x-dcl-forward-slash-allowed: true\n x-dcl-references:\n - resource: Cloudresourcemanager/Folder\n field: name\n parent: true\n - resource: Cloudresourcemanager/Organization\n field: name\n parent: true\n - resource: Cloudresourcemanager/Project\n field: name\n parent: true\n spec:\n type: object\n x-dcl-go-name: Spec\n x-dcl-go-type: PolicySpec\n description: Basic information about the Organization Policy.\n properties:\n etag:\n type: string\n x-dcl-go-name: Etag\n readOnly: true\n description: An opaque tag indicating the current version of the `Policy`,\n used for concurrency control. This field is ignored if used in a `CreatePolicy`\n request. When the `Policy` is returned from either a `GetPolicy` or\n a `ListPolicies` request, this `etag` indicates the version of the\n current `Policy` to use when executing a read-modify-write loop. When\n the `Policy` is returned from a `GetEffectivePolicy` request, the\n `etag` will be unset.\n inheritFromParent:\n type: boolean\n x-dcl-go-name: InheritFromParent\n description: Determines the inheritance behavior for this `Policy`.\n If `inherit_from_parent` is true, PolicyRules set higher up in the\n hierarchy (up to the closest root) are inherited and present in the\n effective policy. If it is false, then no rules are inherited, and\n this Policy becomes the new root for evaluation. This field can be\n set only for Policies which configure list constraints.\n reset:\n type: boolean\n x-dcl-go-name: Reset\n description: Ignores policies set above this resource and restores the\n `constraint_default` enforcement behavior of the specific `Constraint`\n at this resource. This field can be set in policies for either list\n or boolean constraints. If set, `rules` must be empty and `inherit_from_parent`\n must be set to false.\n rules:\n type: array\n x-dcl-go-name: Rules\n description: 'Up to 10 PolicyRules are allowed. In Policies for boolean\n constraints, the following requirements apply: - There must be one\n and only one PolicyRule where condition is unset. - BooleanPolicyRules\n with conditions must set `enforced` to the opposite of the PolicyRule\n without a condition. - During policy evaluation, PolicyRules with\n conditions that are true for a target resource take precedence.'\n x-dcl-send-empty: true\n x-dcl-list-type: list\n items:\n type: object\n x-dcl-go-type: PolicySpecRules\n properties:\n allowAll:\n type: boolean\n x-dcl-go-name: AllowAll\n description: Setting this to `\"TRUE\"` means that all values are\n allowed. This field can be set only in Policies for list constraints.\n x-dcl-conflicts:\n - values\n - denyAll\n - enforce\n condition:\n type: object\n x-dcl-go-name: Condition\n x-dcl-go-type: PolicySpecRulesCondition\n description: 'A condition which determines whether this rule is\n used in the evaluation of the policy. When set, the `expression`\n field in the `Expr'' must include from 1 to 10 subexpressions,\n joined by the \"||\" or \"&&\" operators. Each subexpression must\n be of the form \"resource.matchTag(''/tag_key_short_name, ''tag_value_short_name'')\".\n or \"resource.matchTagId(''tagKeys/key_id'', ''tagValues/value_id'')\".\n where key_name and value_name are the resource names for Label\n Keys and Values. These names are available from the Tag Manager\n Service. An example expression is: \"resource.matchTag(''123456789/environment,\n ''prod'')\". or \"resource.matchTagId(''tagKeys/123'', ''tagValues/456'')\".'\n properties:\n description:\n type: string\n x-dcl-go-name: Description\n description: Optional. Description of the expression. This\n is a longer text which describes the expression, e.g. when\n hovered over it in a UI.\n expression:\n type: string\n x-dcl-go-name: Expression\n description: Textual representation of an expression in Common\n Expression Language syntax.\n location:\n type: string\n x-dcl-go-name: Location\n description: Optional. String indicating the location of the\n expression for error reporting, e.g. a file name and a position\n in the file.\n title:\n type: string\n x-dcl-go-name: Title\n description: Optional. Title for the expression, i.e. a short\n string describing its purpose. This can be used e.g. in\n UIs which allow to enter the expression.\n denyAll:\n type: boolean\n x-dcl-go-name: DenyAll\n description: Setting this to `\"TRUE\"` means that all values are\n denied. This field can be set only in Policies for list constraints.\n x-dcl-conflicts:\n - values\n - allowAll\n - enforce\n enforce:\n type: boolean\n x-dcl-go-name: Enforce\n description: If `\"TRUE\"`, then the `Policy` is enforced. If `\"FALSE\"`,\n then any configuration is acceptable. This field can be set\n only in Policies for boolean constraints.\n x-dcl-conflicts:\n - values\n - allowAll\n - denyAll\n values:\n type: object\n x-dcl-go-name: Values\n x-dcl-go-type: PolicySpecRulesValues\n description: List of values to be used for this PolicyRule. This\n field can be set only in Policies for list constraints.\n x-dcl-conflicts:\n - allowAll\n - denyAll\n - enforce\n properties:\n allowedValues:\n type: array\n x-dcl-go-name: AllowedValues\n description: List of values allowed at this resource.\n x-dcl-send-empty: true\n x-dcl-list-type: list\n items:\n type: string\n x-dcl-go-type: string\n deniedValues:\n type: array\n x-dcl-go-name: DeniedValues\n description: List of values denied at this resource.\n x-dcl-send-empty: true\n x-dcl-list-type: list\n items:\n type: string\n x-dcl-go-type: string\n updateTime:\n type: string\n format: date-time\n x-dcl-go-name: UpdateTime\n readOnly: true\n description: Output only. The time stamp this was previously updated.\n This represents the last time a call to `CreatePolicy` or `UpdatePolicy`\n was made for that `Policy`.\n") -// 20052 bytes -// MD5: d1289c2626088e74da4bdc1bbf94663b +// 20076 bytes +// MD5: 4c66b24a2df5e99d72452e4ece24af43 diff --git a/services/google/orgpolicy/alpha/policy_schema.go b/services/google/orgpolicy/alpha/policy_schema.go index 5d719de97a..8a4bdabb52 100755 --- a/services/google/orgpolicy/alpha/policy_schema.go +++ b/services/google/orgpolicy/alpha/policy_schema.go @@ -146,7 +146,7 @@ func DCLPolicySchema() *dcl.Schema { "allowAll": &dcl.Property{ Type: "boolean", GoName: "AllowAll", - Description: "Setting this to true means that all values are allowed. This field can be set only in policies for list constraints.", + Description: "Setting this to `\"TRUE\"` means that all values are allowed. This field can be set only in policies for list constraints.", Conflicts: []string{ "values", "denyAll", @@ -184,7 +184,7 @@ func DCLPolicySchema() *dcl.Schema { "denyAll": &dcl.Property{ Type: "boolean", GoName: "DenyAll", - Description: "Setting this to true means that all values are denied. This field can be set only in policies for list constraints.", + Description: "Setting this to `\"TRUE\"` means that all values are denied. This field can be set only in policies for list constraints.", Conflicts: []string{ "values", "allowAll", @@ -194,7 +194,7 @@ func DCLPolicySchema() *dcl.Schema { "enforce": &dcl.Property{ Type: "boolean", GoName: "Enforce", - Description: "If `true`, then the policy is enforced. If `false`, then any configuration is acceptable. This field can be set only in policies for boolean constraints.", + Description: "If `\"TRUE\"`, then the policy is enforced. If `\"FALSE\"`, then any configuration is acceptable. This field can be set only in policies for boolean constraints.", Conflicts: []string{ "values", "allowAll", @@ -320,7 +320,7 @@ func DCLPolicySchema() *dcl.Schema { "allowAll": &dcl.Property{ Type: "boolean", GoName: "AllowAll", - Description: "Setting this to true means that all values are allowed. This field can be set only in Policies for list constraints.", + Description: "Setting this to `\"TRUE\"` means that all values are allowed. This field can be set only in Policies for list constraints.", Conflicts: []string{ "values", "denyAll", @@ -358,7 +358,7 @@ func DCLPolicySchema() *dcl.Schema { "denyAll": &dcl.Property{ Type: "boolean", GoName: "DenyAll", - Description: "Setting this to true means that all values are denied. This field can be set only in Policies for list constraints.", + Description: "Setting this to `\"TRUE\"` means that all values are denied. This field can be set only in Policies for list constraints.", Conflicts: []string{ "values", "allowAll", @@ -368,7 +368,7 @@ func DCLPolicySchema() *dcl.Schema { "enforce": &dcl.Property{ Type: "boolean", GoName: "Enforce", - Description: "If `true`, then the `Policy` is enforced. If `false`, then any configuration is acceptable. This field can be set only in Policies for boolean constraints.", + Description: "If `\"TRUE\"`, then the `Policy` is enforced. If `\"FALSE\"`, then any configuration is acceptable. This field can be set only in Policies for boolean constraints.", Conflicts: []string{ "values", "allowAll", diff --git a/services/google/orgpolicy/beta/policy.yaml b/services/google/orgpolicy/beta/policy.yaml index 28085afef2..3bfa8ac920 100755 --- a/services/google/orgpolicy/beta/policy.yaml +++ b/services/google/orgpolicy/beta/policy.yaml @@ -130,8 +130,8 @@ components: allowAll: type: boolean x-dcl-go-name: AllowAll - description: Setting this to true means that all values are allowed. - This field can be set only in policies for list constraints. + description: Setting this to `"TRUE"` means that all values are + allowed. This field can be set only in policies for list constraints. x-dcl-conflicts: - values - denyAll @@ -177,8 +177,8 @@ components: denyAll: type: boolean x-dcl-go-name: DenyAll - description: Setting this to true means that all values are denied. - This field can be set only in policies for list constraints. + description: Setting this to `"TRUE"` means that all values are + denied. This field can be set only in policies for list constraints. x-dcl-conflicts: - values - allowAll @@ -186,7 +186,7 @@ components: enforce: type: boolean x-dcl-go-name: Enforce - description: If `true`, then the policy is enforced. If `false`, + description: If `"TRUE"`, then the policy is enforced. If `"FALSE"`, then any configuration is acceptable. This field can be set only in policies for boolean constraints. x-dcl-conflicts: @@ -319,8 +319,8 @@ components: allowAll: type: boolean x-dcl-go-name: AllowAll - description: Setting this to true means that all values are allowed. - This field can be set only in Policies for list constraints. + description: Setting this to `"TRUE"` means that all values are + allowed. This field can be set only in Policies for list constraints. x-dcl-conflicts: - values - denyAll @@ -366,8 +366,8 @@ components: denyAll: type: boolean x-dcl-go-name: DenyAll - description: Setting this to true means that all values are denied. - This field can be set only in Policies for list constraints. + description: Setting this to `"TRUE"` means that all values are + denied. This field can be set only in Policies for list constraints. x-dcl-conflicts: - values - allowAll @@ -375,7 +375,7 @@ components: enforce: type: boolean x-dcl-go-name: Enforce - description: If `true`, then the `Policy` is enforced. If `false`, + description: If `"TRUE"`, then the `Policy` is enforced. If `"FALSE"`, then any configuration is acceptable. This field can be set only in Policies for boolean constraints. x-dcl-conflicts: diff --git a/services/google/orgpolicy/beta/policy_beta_yaml_embed.go b/services/google/orgpolicy/beta/policy_beta_yaml_embed.go index 42ee8b7e72..2039093e78 100755 --- a/services/google/orgpolicy/beta/policy_beta_yaml_embed.go +++ b/services/google/orgpolicy/beta/policy_beta_yaml_embed.go @@ -17,7 +17,7 @@ package beta // blaze-out/k8-fastbuild/genfiles/cloud/graphite/mmv2/services/google/orgpolicy/beta/policy.yaml -var YAML_policy = []byte("info:\n title: OrgPolicy/Policy\n description: An organization policy gives you programmatic control over your organization's\n cloud resources. Using Organization Policies, you will be able to configure constraints\n across your entire resource hierarchy.\n x-dcl-struct-name: Policy\n x-dcl-has-iam: false\n x-dcl-ref:\n text: REST API\n url: https://cloud.google.com/resource-manager/docs/reference/orgpolicy/rest/v2/organizations.policies\n x-dcl-guides:\n - text: Understanding Org Policy concepts\n url: https://cloud.google.com/resource-manager/docs/organization-policy/overview\n - text: The resource hierarchy\n url: https://cloud.google.com/resource-manager/docs/cloud-platform-resource-hierarchy\n - text: All valid constraints\n url: https://cloud.google.com/resource-manager/docs/organization-policy/org-policy-constraints\npaths:\n get:\n description: The function used to get information about a Policy\n parameters:\n - name: policy\n required: true\n description: A full instance of a Policy\n apply:\n description: The function used to apply information about a Policy\n parameters:\n - name: policy\n required: true\n description: A full instance of a Policy\n delete:\n description: The function used to delete a Policy\n parameters:\n - name: policy\n required: true\n description: A full instance of a Policy\n deleteAll:\n description: The function used to delete all Policy\n parameters:\n - name: parent\n required: true\n schema:\n type: string\n list:\n description: The function used to list information about many Policy\n parameters:\n - name: parent\n required: true\n schema:\n type: string\ncomponents:\n schemas:\n Policy:\n title: Policy\n x-dcl-id: '{{parent}}/policies/{{name}}'\n x-dcl-has-create: true\n x-dcl-has-iam: false\n x-dcl-read-timeout: 0\n x-dcl-apply-timeout: 0\n x-dcl-delete-timeout: 0\n type: object\n required:\n - name\n - parent\n properties:\n dryRunSpec:\n type: object\n x-dcl-go-name: DryRunSpec\n x-dcl-go-type: PolicyDryRunSpec\n description: Dry-run policy. Audit-only policy, can be used to monitor how\n the policy would have impacted the existing and future resources if it's\n enforced.\n properties:\n etag:\n type: string\n x-dcl-go-name: Etag\n readOnly: true\n description: An opaque tag indicating the current version of the policy,\n used for concurrency control. This field is ignored if used in a `CreatePolicy`\n request. When the policy` is returned from either a `GetPolicy` or\n a `ListPolicies` request, this `etag` indicates the version of the\n current policy to use when executing a read-modify-write loop. When\n the policy is returned from a `GetEffectivePolicy` request, the `etag`\n will be unset.\n inheritFromParent:\n type: boolean\n x-dcl-go-name: InheritFromParent\n description: Determines the inheritance behavior for this policy. If\n `inherit_from_parent` is true, policy rules set higher up in the hierarchy\n (up to the closest root) are inherited and present in the effective\n policy. If it is false, then no rules are inherited, and this policy\n becomes the new root for evaluation. This field can be set only for\n policies which configure list constraints.\n reset:\n type: boolean\n x-dcl-go-name: Reset\n description: Ignores policies set above this resource and restores the\n `constraint_default` enforcement behavior of the specific constraint\n at this resource. This field can be set in policies for either list\n or boolean constraints. If set, `rules` must be empty and `inherit_from_parent`\n must be set to false.\n rules:\n type: array\n x-dcl-go-name: Rules\n description: 'In policies for boolean constraints, the following requirements\n apply: - There must be one and only one policy rule where condition\n is unset. - Boolean policy rules with conditions must set `enforced`\n to the opposite of the policy rule without a condition. - During policy\n evaluation, policy rules with conditions that are true for a target\n resource take precedence.'\n x-dcl-send-empty: true\n x-dcl-list-type: list\n items:\n type: object\n x-dcl-go-type: PolicyDryRunSpecRules\n properties:\n allowAll:\n type: boolean\n x-dcl-go-name: AllowAll\n description: Setting this to true means that all values are allowed.\n This field can be set only in policies for list constraints.\n x-dcl-conflicts:\n - values\n - denyAll\n - enforce\n condition:\n type: object\n x-dcl-go-name: Condition\n x-dcl-go-type: PolicyDryRunSpecRulesCondition\n description: 'A condition which determines whether this rule is\n used in the evaluation of the policy. When set, the `expression`\n field in the `Expr'' must include from 1 to 10 subexpressions,\n joined by the \"||\" or \"&&\" operators. Each subexpression must\n be of the form \"resource.matchTag(''/tag_key_short_name, ''tag_value_short_name'')\".\n or \"resource.matchTagId(''tagKeys/key_id'', ''tagValues/value_id'')\".\n where key_name and value_name are the resource names for Label\n Keys and Values. These names are available from the Tag Manager\n Service. An example expression is: \"resource.matchTag(''123456789/environment,\n ''prod'')\". or \"resource.matchTagId(''tagKeys/123'', ''tagValues/456'')\".'\n properties:\n description:\n type: string\n x-dcl-go-name: Description\n description: Optional. Description of the expression. This\n is a longer text which describes the expression, e.g. when\n hovered over it in a UI.\n expression:\n type: string\n x-dcl-go-name: Expression\n description: Textual representation of an expression in Common\n Expression Language syntax.\n location:\n type: string\n x-dcl-go-name: Location\n description: Optional. String indicating the location of the\n expression for error reporting, e.g. a file name and a position\n in the file.\n title:\n type: string\n x-dcl-go-name: Title\n description: Optional. Title for the expression, i.e. a short\n string describing its purpose. This can be used e.g. in\n UIs which allow to enter the expression.\n denyAll:\n type: boolean\n x-dcl-go-name: DenyAll\n description: Setting this to true means that all values are denied.\n This field can be set only in policies for list constraints.\n x-dcl-conflicts:\n - values\n - allowAll\n - enforce\n enforce:\n type: boolean\n x-dcl-go-name: Enforce\n description: If `true`, then the policy is enforced. If `false`,\n then any configuration is acceptable. This field can be set\n only in policies for boolean constraints.\n x-dcl-conflicts:\n - values\n - allowAll\n - denyAll\n values:\n type: object\n x-dcl-go-name: Values\n x-dcl-go-type: PolicyDryRunSpecRulesValues\n description: List of values to be used for this policy rule. This\n field can be set only in policies for list constraints.\n x-dcl-conflicts:\n - allowAll\n - denyAll\n - enforce\n properties:\n allowedValues:\n type: array\n x-dcl-go-name: AllowedValues\n description: List of values allowed at this resource.\n x-dcl-send-empty: true\n x-dcl-list-type: list\n items:\n type: string\n x-dcl-go-type: string\n deniedValues:\n type: array\n x-dcl-go-name: DeniedValues\n description: List of values denied at this resource.\n x-dcl-send-empty: true\n x-dcl-list-type: list\n items:\n type: string\n x-dcl-go-type: string\n updateTime:\n type: string\n format: date-time\n x-dcl-go-name: UpdateTime\n readOnly: true\n description: Output only. The time stamp this was previously updated.\n This represents the last time a call to `CreatePolicy` or `UpdatePolicy`\n was made for that policy.\n etag:\n type: string\n x-dcl-go-name: Etag\n readOnly: true\n description: Optional. An opaque tag indicating the current state of the\n policy, used for concurrency control. This 'etag' is computed by the server\n based on the value of other fields, and may be sent on update and delete\n requests to ensure the client has an up-to-date value before proceeding.\n x-kubernetes-immutable: true\n name:\n type: string\n x-dcl-go-name: Name\n description: 'Immutable. The resource name of the Policy. Must be one of\n the following forms, where constraint_name is the name of the constraint\n which this Policy configures: * `projects/{project_number}/policies/{constraint_name}`\n * `folders/{folder_id}/policies/{constraint_name}` * `organizations/{organization_id}/policies/{constraint_name}`\n For example, \"projects/123/policies/compute.disableSerialPortAccess\".\n Note: `projects/{project_id}/policies/{constraint_name}` is also an acceptable\n name for API requests, but responses will return the name using the equivalent\n project number.'\n x-kubernetes-immutable: true\n parent:\n type: string\n x-dcl-go-name: Parent\n description: The parent of the resource.\n x-kubernetes-immutable: true\n x-dcl-forward-slash-allowed: true\n x-dcl-references:\n - resource: Cloudresourcemanager/Folder\n field: name\n parent: true\n - resource: Cloudresourcemanager/Organization\n field: name\n parent: true\n - resource: Cloudresourcemanager/Project\n field: name\n parent: true\n spec:\n type: object\n x-dcl-go-name: Spec\n x-dcl-go-type: PolicySpec\n description: Basic information about the Organization Policy.\n properties:\n etag:\n type: string\n x-dcl-go-name: Etag\n readOnly: true\n description: An opaque tag indicating the current version of the `Policy`,\n used for concurrency control. This field is ignored if used in a `CreatePolicy`\n request. When the `Policy` is returned from either a `GetPolicy` or\n a `ListPolicies` request, this `etag` indicates the version of the\n current `Policy` to use when executing a read-modify-write loop. When\n the `Policy` is returned from a `GetEffectivePolicy` request, the\n `etag` will be unset.\n inheritFromParent:\n type: boolean\n x-dcl-go-name: InheritFromParent\n description: Determines the inheritance behavior for this `Policy`.\n If `inherit_from_parent` is true, PolicyRules set higher up in the\n hierarchy (up to the closest root) are inherited and present in the\n effective policy. If it is false, then no rules are inherited, and\n this Policy becomes the new root for evaluation. This field can be\n set only for Policies which configure list constraints.\n reset:\n type: boolean\n x-dcl-go-name: Reset\n description: Ignores policies set above this resource and restores the\n `constraint_default` enforcement behavior of the specific `Constraint`\n at this resource. This field can be set in policies for either list\n or boolean constraints. If set, `rules` must be empty and `inherit_from_parent`\n must be set to false.\n rules:\n type: array\n x-dcl-go-name: Rules\n description: 'Up to 10 PolicyRules are allowed. In Policies for boolean\n constraints, the following requirements apply: - There must be one\n and only one PolicyRule where condition is unset. - BooleanPolicyRules\n with conditions must set `enforced` to the opposite of the PolicyRule\n without a condition. - During policy evaluation, PolicyRules with\n conditions that are true for a target resource take precedence.'\n x-dcl-send-empty: true\n x-dcl-list-type: list\n items:\n type: object\n x-dcl-go-type: PolicySpecRules\n properties:\n allowAll:\n type: boolean\n x-dcl-go-name: AllowAll\n description: Setting this to true means that all values are allowed.\n This field can be set only in Policies for list constraints.\n x-dcl-conflicts:\n - values\n - denyAll\n - enforce\n condition:\n type: object\n x-dcl-go-name: Condition\n x-dcl-go-type: PolicySpecRulesCondition\n description: 'A condition which determines whether this rule is\n used in the evaluation of the policy. When set, the `expression`\n field in the `Expr'' must include from 1 to 10 subexpressions,\n joined by the \"||\" or \"&&\" operators. Each subexpression must\n be of the form \"resource.matchTag(''/tag_key_short_name, ''tag_value_short_name'')\".\n or \"resource.matchTagId(''tagKeys/key_id'', ''tagValues/value_id'')\".\n where key_name and value_name are the resource names for Label\n Keys and Values. These names are available from the Tag Manager\n Service. An example expression is: \"resource.matchTag(''123456789/environment,\n ''prod'')\". or \"resource.matchTagId(''tagKeys/123'', ''tagValues/456'')\".'\n properties:\n description:\n type: string\n x-dcl-go-name: Description\n description: Optional. Description of the expression. This\n is a longer text which describes the expression, e.g. when\n hovered over it in a UI.\n expression:\n type: string\n x-dcl-go-name: Expression\n description: Textual representation of an expression in Common\n Expression Language syntax.\n location:\n type: string\n x-dcl-go-name: Location\n description: Optional. String indicating the location of the\n expression for error reporting, e.g. a file name and a position\n in the file.\n title:\n type: string\n x-dcl-go-name: Title\n description: Optional. Title for the expression, i.e. a short\n string describing its purpose. This can be used e.g. in\n UIs which allow to enter the expression.\n denyAll:\n type: boolean\n x-dcl-go-name: DenyAll\n description: Setting this to true means that all values are denied.\n This field can be set only in Policies for list constraints.\n x-dcl-conflicts:\n - values\n - allowAll\n - enforce\n enforce:\n type: boolean\n x-dcl-go-name: Enforce\n description: If `true`, then the `Policy` is enforced. If `false`,\n then any configuration is acceptable. This field can be set\n only in Policies for boolean constraints.\n x-dcl-conflicts:\n - values\n - allowAll\n - denyAll\n values:\n type: object\n x-dcl-go-name: Values\n x-dcl-go-type: PolicySpecRulesValues\n description: List of values to be used for this PolicyRule. This\n field can be set only in Policies for list constraints.\n x-dcl-conflicts:\n - allowAll\n - denyAll\n - enforce\n properties:\n allowedValues:\n type: array\n x-dcl-go-name: AllowedValues\n description: List of values allowed at this resource.\n x-dcl-send-empty: true\n x-dcl-list-type: list\n items:\n type: string\n x-dcl-go-type: string\n deniedValues:\n type: array\n x-dcl-go-name: DeniedValues\n description: List of values denied at this resource.\n x-dcl-send-empty: true\n x-dcl-list-type: list\n items:\n type: string\n x-dcl-go-type: string\n updateTime:\n type: string\n format: date-time\n x-dcl-go-name: UpdateTime\n readOnly: true\n description: Output only. The time stamp this was previously updated.\n This represents the last time a call to `CreatePolicy` or `UpdatePolicy`\n was made for that `Policy`.\n") +var YAML_policy = []byte("info:\n title: OrgPolicy/Policy\n description: An organization policy gives you programmatic control over your organization's\n cloud resources. Using Organization Policies, you will be able to configure constraints\n across your entire resource hierarchy.\n x-dcl-struct-name: Policy\n x-dcl-has-iam: false\n x-dcl-ref:\n text: REST API\n url: https://cloud.google.com/resource-manager/docs/reference/orgpolicy/rest/v2/organizations.policies\n x-dcl-guides:\n - text: Understanding Org Policy concepts\n url: https://cloud.google.com/resource-manager/docs/organization-policy/overview\n - text: The resource hierarchy\n url: https://cloud.google.com/resource-manager/docs/cloud-platform-resource-hierarchy\n - text: All valid constraints\n url: https://cloud.google.com/resource-manager/docs/organization-policy/org-policy-constraints\npaths:\n get:\n description: The function used to get information about a Policy\n parameters:\n - name: policy\n required: true\n description: A full instance of a Policy\n apply:\n description: The function used to apply information about a Policy\n parameters:\n - name: policy\n required: true\n description: A full instance of a Policy\n delete:\n description: The function used to delete a Policy\n parameters:\n - name: policy\n required: true\n description: A full instance of a Policy\n deleteAll:\n description: The function used to delete all Policy\n parameters:\n - name: parent\n required: true\n schema:\n type: string\n list:\n description: The function used to list information about many Policy\n parameters:\n - name: parent\n required: true\n schema:\n type: string\ncomponents:\n schemas:\n Policy:\n title: Policy\n x-dcl-id: '{{parent}}/policies/{{name}}'\n x-dcl-has-create: true\n x-dcl-has-iam: false\n x-dcl-read-timeout: 0\n x-dcl-apply-timeout: 0\n x-dcl-delete-timeout: 0\n type: object\n required:\n - name\n - parent\n properties:\n dryRunSpec:\n type: object\n x-dcl-go-name: DryRunSpec\n x-dcl-go-type: PolicyDryRunSpec\n description: Dry-run policy. Audit-only policy, can be used to monitor how\n the policy would have impacted the existing and future resources if it's\n enforced.\n properties:\n etag:\n type: string\n x-dcl-go-name: Etag\n readOnly: true\n description: An opaque tag indicating the current version of the policy,\n used for concurrency control. This field is ignored if used in a `CreatePolicy`\n request. When the policy` is returned from either a `GetPolicy` or\n a `ListPolicies` request, this `etag` indicates the version of the\n current policy to use when executing a read-modify-write loop. When\n the policy is returned from a `GetEffectivePolicy` request, the `etag`\n will be unset.\n inheritFromParent:\n type: boolean\n x-dcl-go-name: InheritFromParent\n description: Determines the inheritance behavior for this policy. If\n `inherit_from_parent` is true, policy rules set higher up in the hierarchy\n (up to the closest root) are inherited and present in the effective\n policy. If it is false, then no rules are inherited, and this policy\n becomes the new root for evaluation. This field can be set only for\n policies which configure list constraints.\n reset:\n type: boolean\n x-dcl-go-name: Reset\n description: Ignores policies set above this resource and restores the\n `constraint_default` enforcement behavior of the specific constraint\n at this resource. This field can be set in policies for either list\n or boolean constraints. If set, `rules` must be empty and `inherit_from_parent`\n must be set to false.\n rules:\n type: array\n x-dcl-go-name: Rules\n description: 'In policies for boolean constraints, the following requirements\n apply: - There must be one and only one policy rule where condition\n is unset. - Boolean policy rules with conditions must set `enforced`\n to the opposite of the policy rule without a condition. - During policy\n evaluation, policy rules with conditions that are true for a target\n resource take precedence.'\n x-dcl-send-empty: true\n x-dcl-list-type: list\n items:\n type: object\n x-dcl-go-type: PolicyDryRunSpecRules\n properties:\n allowAll:\n type: boolean\n x-dcl-go-name: AllowAll\n description: Setting this to `\"TRUE\"` means that all values are\n allowed. This field can be set only in policies for list constraints.\n x-dcl-conflicts:\n - values\n - denyAll\n - enforce\n condition:\n type: object\n x-dcl-go-name: Condition\n x-dcl-go-type: PolicyDryRunSpecRulesCondition\n description: 'A condition which determines whether this rule is\n used in the evaluation of the policy. When set, the `expression`\n field in the `Expr'' must include from 1 to 10 subexpressions,\n joined by the \"||\" or \"&&\" operators. Each subexpression must\n be of the form \"resource.matchTag(''/tag_key_short_name, ''tag_value_short_name'')\".\n or \"resource.matchTagId(''tagKeys/key_id'', ''tagValues/value_id'')\".\n where key_name and value_name are the resource names for Label\n Keys and Values. These names are available from the Tag Manager\n Service. An example expression is: \"resource.matchTag(''123456789/environment,\n ''prod'')\". or \"resource.matchTagId(''tagKeys/123'', ''tagValues/456'')\".'\n properties:\n description:\n type: string\n x-dcl-go-name: Description\n description: Optional. Description of the expression. This\n is a longer text which describes the expression, e.g. when\n hovered over it in a UI.\n expression:\n type: string\n x-dcl-go-name: Expression\n description: Textual representation of an expression in Common\n Expression Language syntax.\n location:\n type: string\n x-dcl-go-name: Location\n description: Optional. String indicating the location of the\n expression for error reporting, e.g. a file name and a position\n in the file.\n title:\n type: string\n x-dcl-go-name: Title\n description: Optional. Title for the expression, i.e. a short\n string describing its purpose. This can be used e.g. in\n UIs which allow to enter the expression.\n denyAll:\n type: boolean\n x-dcl-go-name: DenyAll\n description: Setting this to `\"TRUE\"` means that all values are\n denied. This field can be set only in policies for list constraints.\n x-dcl-conflicts:\n - values\n - allowAll\n - enforce\n enforce:\n type: boolean\n x-dcl-go-name: Enforce\n description: If `\"TRUE\"`, then the policy is enforced. If `\"FALSE\"`,\n then any configuration is acceptable. This field can be set\n only in policies for boolean constraints.\n x-dcl-conflicts:\n - values\n - allowAll\n - denyAll\n values:\n type: object\n x-dcl-go-name: Values\n x-dcl-go-type: PolicyDryRunSpecRulesValues\n description: List of values to be used for this policy rule. This\n field can be set only in policies for list constraints.\n x-dcl-conflicts:\n - allowAll\n - denyAll\n - enforce\n properties:\n allowedValues:\n type: array\n x-dcl-go-name: AllowedValues\n description: List of values allowed at this resource.\n x-dcl-send-empty: true\n x-dcl-list-type: list\n items:\n type: string\n x-dcl-go-type: string\n deniedValues:\n type: array\n x-dcl-go-name: DeniedValues\n description: List of values denied at this resource.\n x-dcl-send-empty: true\n x-dcl-list-type: list\n items:\n type: string\n x-dcl-go-type: string\n updateTime:\n type: string\n format: date-time\n x-dcl-go-name: UpdateTime\n readOnly: true\n description: Output only. The time stamp this was previously updated.\n This represents the last time a call to `CreatePolicy` or `UpdatePolicy`\n was made for that policy.\n etag:\n type: string\n x-dcl-go-name: Etag\n readOnly: true\n description: Optional. An opaque tag indicating the current state of the\n policy, used for concurrency control. This 'etag' is computed by the server\n based on the value of other fields, and may be sent on update and delete\n requests to ensure the client has an up-to-date value before proceeding.\n x-kubernetes-immutable: true\n name:\n type: string\n x-dcl-go-name: Name\n description: 'Immutable. The resource name of the Policy. Must be one of\n the following forms, where constraint_name is the name of the constraint\n which this Policy configures: * `projects/{project_number}/policies/{constraint_name}`\n * `folders/{folder_id}/policies/{constraint_name}` * `organizations/{organization_id}/policies/{constraint_name}`\n For example, \"projects/123/policies/compute.disableSerialPortAccess\".\n Note: `projects/{project_id}/policies/{constraint_name}` is also an acceptable\n name for API requests, but responses will return the name using the equivalent\n project number.'\n x-kubernetes-immutable: true\n parent:\n type: string\n x-dcl-go-name: Parent\n description: The parent of the resource.\n x-kubernetes-immutable: true\n x-dcl-forward-slash-allowed: true\n x-dcl-references:\n - resource: Cloudresourcemanager/Folder\n field: name\n parent: true\n - resource: Cloudresourcemanager/Organization\n field: name\n parent: true\n - resource: Cloudresourcemanager/Project\n field: name\n parent: true\n spec:\n type: object\n x-dcl-go-name: Spec\n x-dcl-go-type: PolicySpec\n description: Basic information about the Organization Policy.\n properties:\n etag:\n type: string\n x-dcl-go-name: Etag\n readOnly: true\n description: An opaque tag indicating the current version of the `Policy`,\n used for concurrency control. This field is ignored if used in a `CreatePolicy`\n request. When the `Policy` is returned from either a `GetPolicy` or\n a `ListPolicies` request, this `etag` indicates the version of the\n current `Policy` to use when executing a read-modify-write loop. When\n the `Policy` is returned from a `GetEffectivePolicy` request, the\n `etag` will be unset.\n inheritFromParent:\n type: boolean\n x-dcl-go-name: InheritFromParent\n description: Determines the inheritance behavior for this `Policy`.\n If `inherit_from_parent` is true, PolicyRules set higher up in the\n hierarchy (up to the closest root) are inherited and present in the\n effective policy. If it is false, then no rules are inherited, and\n this Policy becomes the new root for evaluation. This field can be\n set only for Policies which configure list constraints.\n reset:\n type: boolean\n x-dcl-go-name: Reset\n description: Ignores policies set above this resource and restores the\n `constraint_default` enforcement behavior of the specific `Constraint`\n at this resource. This field can be set in policies for either list\n or boolean constraints. If set, `rules` must be empty and `inherit_from_parent`\n must be set to false.\n rules:\n type: array\n x-dcl-go-name: Rules\n description: 'Up to 10 PolicyRules are allowed. In Policies for boolean\n constraints, the following requirements apply: - There must be one\n and only one PolicyRule where condition is unset. - BooleanPolicyRules\n with conditions must set `enforced` to the opposite of the PolicyRule\n without a condition. - During policy evaluation, PolicyRules with\n conditions that are true for a target resource take precedence.'\n x-dcl-send-empty: true\n x-dcl-list-type: list\n items:\n type: object\n x-dcl-go-type: PolicySpecRules\n properties:\n allowAll:\n type: boolean\n x-dcl-go-name: AllowAll\n description: Setting this to `\"TRUE\"` means that all values are\n allowed. This field can be set only in Policies for list constraints.\n x-dcl-conflicts:\n - values\n - denyAll\n - enforce\n condition:\n type: object\n x-dcl-go-name: Condition\n x-dcl-go-type: PolicySpecRulesCondition\n description: 'A condition which determines whether this rule is\n used in the evaluation of the policy. When set, the `expression`\n field in the `Expr'' must include from 1 to 10 subexpressions,\n joined by the \"||\" or \"&&\" operators. Each subexpression must\n be of the form \"resource.matchTag(''/tag_key_short_name, ''tag_value_short_name'')\".\n or \"resource.matchTagId(''tagKeys/key_id'', ''tagValues/value_id'')\".\n where key_name and value_name are the resource names for Label\n Keys and Values. These names are available from the Tag Manager\n Service. An example expression is: \"resource.matchTag(''123456789/environment,\n ''prod'')\". or \"resource.matchTagId(''tagKeys/123'', ''tagValues/456'')\".'\n properties:\n description:\n type: string\n x-dcl-go-name: Description\n description: Optional. Description of the expression. This\n is a longer text which describes the expression, e.g. when\n hovered over it in a UI.\n expression:\n type: string\n x-dcl-go-name: Expression\n description: Textual representation of an expression in Common\n Expression Language syntax.\n location:\n type: string\n x-dcl-go-name: Location\n description: Optional. String indicating the location of the\n expression for error reporting, e.g. a file name and a position\n in the file.\n title:\n type: string\n x-dcl-go-name: Title\n description: Optional. Title for the expression, i.e. a short\n string describing its purpose. This can be used e.g. in\n UIs which allow to enter the expression.\n denyAll:\n type: boolean\n x-dcl-go-name: DenyAll\n description: Setting this to `\"TRUE\"` means that all values are\n denied. This field can be set only in Policies for list constraints.\n x-dcl-conflicts:\n - values\n - allowAll\n - enforce\n enforce:\n type: boolean\n x-dcl-go-name: Enforce\n description: If `\"TRUE\"`, then the `Policy` is enforced. If `\"FALSE\"`,\n then any configuration is acceptable. This field can be set\n only in Policies for boolean constraints.\n x-dcl-conflicts:\n - values\n - allowAll\n - denyAll\n values:\n type: object\n x-dcl-go-name: Values\n x-dcl-go-type: PolicySpecRulesValues\n description: List of values to be used for this PolicyRule. This\n field can be set only in Policies for list constraints.\n x-dcl-conflicts:\n - allowAll\n - denyAll\n - enforce\n properties:\n allowedValues:\n type: array\n x-dcl-go-name: AllowedValues\n description: List of values allowed at this resource.\n x-dcl-send-empty: true\n x-dcl-list-type: list\n items:\n type: string\n x-dcl-go-type: string\n deniedValues:\n type: array\n x-dcl-go-name: DeniedValues\n description: List of values denied at this resource.\n x-dcl-send-empty: true\n x-dcl-list-type: list\n items:\n type: string\n x-dcl-go-type: string\n updateTime:\n type: string\n format: date-time\n x-dcl-go-name: UpdateTime\n readOnly: true\n description: Output only. The time stamp this was previously updated.\n This represents the last time a call to `CreatePolicy` or `UpdatePolicy`\n was made for that `Policy`.\n") -// 20052 bytes -// MD5: d1289c2626088e74da4bdc1bbf94663b +// 20076 bytes +// MD5: 4c66b24a2df5e99d72452e4ece24af43 diff --git a/services/google/orgpolicy/beta/policy_schema.go b/services/google/orgpolicy/beta/policy_schema.go index 33bc407c5e..2524c29908 100755 --- a/services/google/orgpolicy/beta/policy_schema.go +++ b/services/google/orgpolicy/beta/policy_schema.go @@ -146,7 +146,7 @@ func DCLPolicySchema() *dcl.Schema { "allowAll": &dcl.Property{ Type: "boolean", GoName: "AllowAll", - Description: "Setting this to true means that all values are allowed. This field can be set only in policies for list constraints.", + Description: "Setting this to `\"TRUE\"` means that all values are allowed. This field can be set only in policies for list constraints.", Conflicts: []string{ "values", "denyAll", @@ -184,7 +184,7 @@ func DCLPolicySchema() *dcl.Schema { "denyAll": &dcl.Property{ Type: "boolean", GoName: "DenyAll", - Description: "Setting this to true means that all values are denied. This field can be set only in policies for list constraints.", + Description: "Setting this to `\"TRUE\"` means that all values are denied. This field can be set only in policies for list constraints.", Conflicts: []string{ "values", "allowAll", @@ -194,7 +194,7 @@ func DCLPolicySchema() *dcl.Schema { "enforce": &dcl.Property{ Type: "boolean", GoName: "Enforce", - Description: "If `true`, then the policy is enforced. If `false`, then any configuration is acceptable. This field can be set only in policies for boolean constraints.", + Description: "If `\"TRUE\"`, then the policy is enforced. If `\"FALSE\"`, then any configuration is acceptable. This field can be set only in policies for boolean constraints.", Conflicts: []string{ "values", "allowAll", @@ -320,7 +320,7 @@ func DCLPolicySchema() *dcl.Schema { "allowAll": &dcl.Property{ Type: "boolean", GoName: "AllowAll", - Description: "Setting this to true means that all values are allowed. This field can be set only in Policies for list constraints.", + Description: "Setting this to `\"TRUE\"` means that all values are allowed. This field can be set only in Policies for list constraints.", Conflicts: []string{ "values", "denyAll", @@ -358,7 +358,7 @@ func DCLPolicySchema() *dcl.Schema { "denyAll": &dcl.Property{ Type: "boolean", GoName: "DenyAll", - Description: "Setting this to true means that all values are denied. This field can be set only in Policies for list constraints.", + Description: "Setting this to `\"TRUE\"` means that all values are denied. This field can be set only in Policies for list constraints.", Conflicts: []string{ "values", "allowAll", @@ -368,7 +368,7 @@ func DCLPolicySchema() *dcl.Schema { "enforce": &dcl.Property{ Type: "boolean", GoName: "Enforce", - Description: "If `true`, then the `Policy` is enforced. If `false`, then any configuration is acceptable. This field can be set only in Policies for boolean constraints.", + Description: "If `\"TRUE\"`, then the `Policy` is enforced. If `\"FALSE\"`, then any configuration is acceptable. This field can be set only in Policies for boolean constraints.", Conflicts: []string{ "values", "allowAll", diff --git a/services/google/orgpolicy/policy.yaml b/services/google/orgpolicy/policy.yaml index 28085afef2..3bfa8ac920 100755 --- a/services/google/orgpolicy/policy.yaml +++ b/services/google/orgpolicy/policy.yaml @@ -130,8 +130,8 @@ components: allowAll: type: boolean x-dcl-go-name: AllowAll - description: Setting this to true means that all values are allowed. - This field can be set only in policies for list constraints. + description: Setting this to `"TRUE"` means that all values are + allowed. This field can be set only in policies for list constraints. x-dcl-conflicts: - values - denyAll @@ -177,8 +177,8 @@ components: denyAll: type: boolean x-dcl-go-name: DenyAll - description: Setting this to true means that all values are denied. - This field can be set only in policies for list constraints. + description: Setting this to `"TRUE"` means that all values are + denied. This field can be set only in policies for list constraints. x-dcl-conflicts: - values - allowAll @@ -186,7 +186,7 @@ components: enforce: type: boolean x-dcl-go-name: Enforce - description: If `true`, then the policy is enforced. If `false`, + description: If `"TRUE"`, then the policy is enforced. If `"FALSE"`, then any configuration is acceptable. This field can be set only in policies for boolean constraints. x-dcl-conflicts: @@ -319,8 +319,8 @@ components: allowAll: type: boolean x-dcl-go-name: AllowAll - description: Setting this to true means that all values are allowed. - This field can be set only in Policies for list constraints. + description: Setting this to `"TRUE"` means that all values are + allowed. This field can be set only in Policies for list constraints. x-dcl-conflicts: - values - denyAll @@ -366,8 +366,8 @@ components: denyAll: type: boolean x-dcl-go-name: DenyAll - description: Setting this to true means that all values are denied. - This field can be set only in Policies for list constraints. + description: Setting this to `"TRUE"` means that all values are + denied. This field can be set only in Policies for list constraints. x-dcl-conflicts: - values - allowAll @@ -375,7 +375,7 @@ components: enforce: type: boolean x-dcl-go-name: Enforce - description: If `true`, then the `Policy` is enforced. If `false`, + description: If `"TRUE"`, then the `Policy` is enforced. If `"FALSE"`, then any configuration is acceptable. This field can be set only in Policies for boolean constraints. x-dcl-conflicts: diff --git a/services/google/orgpolicy/policy_schema.go b/services/google/orgpolicy/policy_schema.go index f8d81ff1e9..ef2e00e574 100755 --- a/services/google/orgpolicy/policy_schema.go +++ b/services/google/orgpolicy/policy_schema.go @@ -146,7 +146,7 @@ func DCLPolicySchema() *dcl.Schema { "allowAll": &dcl.Property{ Type: "boolean", GoName: "AllowAll", - Description: "Setting this to true means that all values are allowed. This field can be set only in policies for list constraints.", + Description: "Setting this to `\"TRUE\"` means that all values are allowed. This field can be set only in policies for list constraints.", Conflicts: []string{ "values", "denyAll", @@ -184,7 +184,7 @@ func DCLPolicySchema() *dcl.Schema { "denyAll": &dcl.Property{ Type: "boolean", GoName: "DenyAll", - Description: "Setting this to true means that all values are denied. This field can be set only in policies for list constraints.", + Description: "Setting this to `\"TRUE\"` means that all values are denied. This field can be set only in policies for list constraints.", Conflicts: []string{ "values", "allowAll", @@ -194,7 +194,7 @@ func DCLPolicySchema() *dcl.Schema { "enforce": &dcl.Property{ Type: "boolean", GoName: "Enforce", - Description: "If `true`, then the policy is enforced. If `false`, then any configuration is acceptable. This field can be set only in policies for boolean constraints.", + Description: "If `\"TRUE\"`, then the policy is enforced. If `\"FALSE\"`, then any configuration is acceptable. This field can be set only in policies for boolean constraints.", Conflicts: []string{ "values", "allowAll", @@ -320,7 +320,7 @@ func DCLPolicySchema() *dcl.Schema { "allowAll": &dcl.Property{ Type: "boolean", GoName: "AllowAll", - Description: "Setting this to true means that all values are allowed. This field can be set only in Policies for list constraints.", + Description: "Setting this to `\"TRUE\"` means that all values are allowed. This field can be set only in Policies for list constraints.", Conflicts: []string{ "values", "denyAll", @@ -358,7 +358,7 @@ func DCLPolicySchema() *dcl.Schema { "denyAll": &dcl.Property{ Type: "boolean", GoName: "DenyAll", - Description: "Setting this to true means that all values are denied. This field can be set only in Policies for list constraints.", + Description: "Setting this to `\"TRUE\"` means that all values are denied. This field can be set only in Policies for list constraints.", Conflicts: []string{ "values", "allowAll", @@ -368,7 +368,7 @@ func DCLPolicySchema() *dcl.Schema { "enforce": &dcl.Property{ Type: "boolean", GoName: "Enforce", - Description: "If `true`, then the `Policy` is enforced. If `false`, then any configuration is acceptable. This field can be set only in Policies for boolean constraints.", + Description: "If `\"TRUE\"`, then the `Policy` is enforced. If `\"FALSE\"`, then any configuration is acceptable. This field can be set only in Policies for boolean constraints.", Conflicts: []string{ "values", "allowAll", diff --git a/services/google/orgpolicy/policy_yaml_embed.go b/services/google/orgpolicy/policy_yaml_embed.go index 287f6c5ee3..cbcf4a3bb7 100755 --- a/services/google/orgpolicy/policy_yaml_embed.go +++ b/services/google/orgpolicy/policy_yaml_embed.go @@ -17,7 +17,7 @@ package orgpolicy // blaze-out/k8-fastbuild/genfiles/cloud/graphite/mmv2/services/google/orgpolicy/policy.yaml -var YAML_policy = []byte("info:\n title: OrgPolicy/Policy\n description: An organization policy gives you programmatic control over your organization's\n cloud resources. Using Organization Policies, you will be able to configure constraints\n across your entire resource hierarchy.\n x-dcl-struct-name: Policy\n x-dcl-has-iam: false\n x-dcl-ref:\n text: REST API\n url: https://cloud.google.com/resource-manager/docs/reference/orgpolicy/rest/v2/organizations.policies\n x-dcl-guides:\n - text: Understanding Org Policy concepts\n url: https://cloud.google.com/resource-manager/docs/organization-policy/overview\n - text: The resource hierarchy\n url: https://cloud.google.com/resource-manager/docs/cloud-platform-resource-hierarchy\n - text: All valid constraints\n url: https://cloud.google.com/resource-manager/docs/organization-policy/org-policy-constraints\npaths:\n get:\n description: The function used to get information about a Policy\n parameters:\n - name: policy\n required: true\n description: A full instance of a Policy\n apply:\n description: The function used to apply information about a Policy\n parameters:\n - name: policy\n required: true\n description: A full instance of a Policy\n delete:\n description: The function used to delete a Policy\n parameters:\n - name: policy\n required: true\n description: A full instance of a Policy\n deleteAll:\n description: The function used to delete all Policy\n parameters:\n - name: parent\n required: true\n schema:\n type: string\n list:\n description: The function used to list information about many Policy\n parameters:\n - name: parent\n required: true\n schema:\n type: string\ncomponents:\n schemas:\n Policy:\n title: Policy\n x-dcl-id: '{{parent}}/policies/{{name}}'\n x-dcl-has-create: true\n x-dcl-has-iam: false\n x-dcl-read-timeout: 0\n x-dcl-apply-timeout: 0\n x-dcl-delete-timeout: 0\n type: object\n required:\n - name\n - parent\n properties:\n dryRunSpec:\n type: object\n x-dcl-go-name: DryRunSpec\n x-dcl-go-type: PolicyDryRunSpec\n description: Dry-run policy. Audit-only policy, can be used to monitor how\n the policy would have impacted the existing and future resources if it's\n enforced.\n properties:\n etag:\n type: string\n x-dcl-go-name: Etag\n readOnly: true\n description: An opaque tag indicating the current version of the policy,\n used for concurrency control. This field is ignored if used in a `CreatePolicy`\n request. When the policy` is returned from either a `GetPolicy` or\n a `ListPolicies` request, this `etag` indicates the version of the\n current policy to use when executing a read-modify-write loop. When\n the policy is returned from a `GetEffectivePolicy` request, the `etag`\n will be unset.\n inheritFromParent:\n type: boolean\n x-dcl-go-name: InheritFromParent\n description: Determines the inheritance behavior for this policy. If\n `inherit_from_parent` is true, policy rules set higher up in the hierarchy\n (up to the closest root) are inherited and present in the effective\n policy. If it is false, then no rules are inherited, and this policy\n becomes the new root for evaluation. This field can be set only for\n policies which configure list constraints.\n reset:\n type: boolean\n x-dcl-go-name: Reset\n description: Ignores policies set above this resource and restores the\n `constraint_default` enforcement behavior of the specific constraint\n at this resource. This field can be set in policies for either list\n or boolean constraints. If set, `rules` must be empty and `inherit_from_parent`\n must be set to false.\n rules:\n type: array\n x-dcl-go-name: Rules\n description: 'In policies for boolean constraints, the following requirements\n apply: - There must be one and only one policy rule where condition\n is unset. - Boolean policy rules with conditions must set `enforced`\n to the opposite of the policy rule without a condition. - During policy\n evaluation, policy rules with conditions that are true for a target\n resource take precedence.'\n x-dcl-send-empty: true\n x-dcl-list-type: list\n items:\n type: object\n x-dcl-go-type: PolicyDryRunSpecRules\n properties:\n allowAll:\n type: boolean\n x-dcl-go-name: AllowAll\n description: Setting this to true means that all values are allowed.\n This field can be set only in policies for list constraints.\n x-dcl-conflicts:\n - values\n - denyAll\n - enforce\n condition:\n type: object\n x-dcl-go-name: Condition\n x-dcl-go-type: PolicyDryRunSpecRulesCondition\n description: 'A condition which determines whether this rule is\n used in the evaluation of the policy. When set, the `expression`\n field in the `Expr'' must include from 1 to 10 subexpressions,\n joined by the \"||\" or \"&&\" operators. Each subexpression must\n be of the form \"resource.matchTag(''/tag_key_short_name, ''tag_value_short_name'')\".\n or \"resource.matchTagId(''tagKeys/key_id'', ''tagValues/value_id'')\".\n where key_name and value_name are the resource names for Label\n Keys and Values. These names are available from the Tag Manager\n Service. An example expression is: \"resource.matchTag(''123456789/environment,\n ''prod'')\". or \"resource.matchTagId(''tagKeys/123'', ''tagValues/456'')\".'\n properties:\n description:\n type: string\n x-dcl-go-name: Description\n description: Optional. Description of the expression. This\n is a longer text which describes the expression, e.g. when\n hovered over it in a UI.\n expression:\n type: string\n x-dcl-go-name: Expression\n description: Textual representation of an expression in Common\n Expression Language syntax.\n location:\n type: string\n x-dcl-go-name: Location\n description: Optional. String indicating the location of the\n expression for error reporting, e.g. a file name and a position\n in the file.\n title:\n type: string\n x-dcl-go-name: Title\n description: Optional. Title for the expression, i.e. a short\n string describing its purpose. This can be used e.g. in\n UIs which allow to enter the expression.\n denyAll:\n type: boolean\n x-dcl-go-name: DenyAll\n description: Setting this to true means that all values are denied.\n This field can be set only in policies for list constraints.\n x-dcl-conflicts:\n - values\n - allowAll\n - enforce\n enforce:\n type: boolean\n x-dcl-go-name: Enforce\n description: If `true`, then the policy is enforced. If `false`,\n then any configuration is acceptable. This field can be set\n only in policies for boolean constraints.\n x-dcl-conflicts:\n - values\n - allowAll\n - denyAll\n values:\n type: object\n x-dcl-go-name: Values\n x-dcl-go-type: PolicyDryRunSpecRulesValues\n description: List of values to be used for this policy rule. This\n field can be set only in policies for list constraints.\n x-dcl-conflicts:\n - allowAll\n - denyAll\n - enforce\n properties:\n allowedValues:\n type: array\n x-dcl-go-name: AllowedValues\n description: List of values allowed at this resource.\n x-dcl-send-empty: true\n x-dcl-list-type: list\n items:\n type: string\n x-dcl-go-type: string\n deniedValues:\n type: array\n x-dcl-go-name: DeniedValues\n description: List of values denied at this resource.\n x-dcl-send-empty: true\n x-dcl-list-type: list\n items:\n type: string\n x-dcl-go-type: string\n updateTime:\n type: string\n format: date-time\n x-dcl-go-name: UpdateTime\n readOnly: true\n description: Output only. The time stamp this was previously updated.\n This represents the last time a call to `CreatePolicy` or `UpdatePolicy`\n was made for that policy.\n etag:\n type: string\n x-dcl-go-name: Etag\n readOnly: true\n description: Optional. An opaque tag indicating the current state of the\n policy, used for concurrency control. This 'etag' is computed by the server\n based on the value of other fields, and may be sent on update and delete\n requests to ensure the client has an up-to-date value before proceeding.\n x-kubernetes-immutable: true\n name:\n type: string\n x-dcl-go-name: Name\n description: 'Immutable. The resource name of the Policy. Must be one of\n the following forms, where constraint_name is the name of the constraint\n which this Policy configures: * `projects/{project_number}/policies/{constraint_name}`\n * `folders/{folder_id}/policies/{constraint_name}` * `organizations/{organization_id}/policies/{constraint_name}`\n For example, \"projects/123/policies/compute.disableSerialPortAccess\".\n Note: `projects/{project_id}/policies/{constraint_name}` is also an acceptable\n name for API requests, but responses will return the name using the equivalent\n project number.'\n x-kubernetes-immutable: true\n parent:\n type: string\n x-dcl-go-name: Parent\n description: The parent of the resource.\n x-kubernetes-immutable: true\n x-dcl-forward-slash-allowed: true\n x-dcl-references:\n - resource: Cloudresourcemanager/Folder\n field: name\n parent: true\n - resource: Cloudresourcemanager/Organization\n field: name\n parent: true\n - resource: Cloudresourcemanager/Project\n field: name\n parent: true\n spec:\n type: object\n x-dcl-go-name: Spec\n x-dcl-go-type: PolicySpec\n description: Basic information about the Organization Policy.\n properties:\n etag:\n type: string\n x-dcl-go-name: Etag\n readOnly: true\n description: An opaque tag indicating the current version of the `Policy`,\n used for concurrency control. This field is ignored if used in a `CreatePolicy`\n request. When the `Policy` is returned from either a `GetPolicy` or\n a `ListPolicies` request, this `etag` indicates the version of the\n current `Policy` to use when executing a read-modify-write loop. When\n the `Policy` is returned from a `GetEffectivePolicy` request, the\n `etag` will be unset.\n inheritFromParent:\n type: boolean\n x-dcl-go-name: InheritFromParent\n description: Determines the inheritance behavior for this `Policy`.\n If `inherit_from_parent` is true, PolicyRules set higher up in the\n hierarchy (up to the closest root) are inherited and present in the\n effective policy. If it is false, then no rules are inherited, and\n this Policy becomes the new root for evaluation. This field can be\n set only for Policies which configure list constraints.\n reset:\n type: boolean\n x-dcl-go-name: Reset\n description: Ignores policies set above this resource and restores the\n `constraint_default` enforcement behavior of the specific `Constraint`\n at this resource. This field can be set in policies for either list\n or boolean constraints. If set, `rules` must be empty and `inherit_from_parent`\n must be set to false.\n rules:\n type: array\n x-dcl-go-name: Rules\n description: 'Up to 10 PolicyRules are allowed. In Policies for boolean\n constraints, the following requirements apply: - There must be one\n and only one PolicyRule where condition is unset. - BooleanPolicyRules\n with conditions must set `enforced` to the opposite of the PolicyRule\n without a condition. - During policy evaluation, PolicyRules with\n conditions that are true for a target resource take precedence.'\n x-dcl-send-empty: true\n x-dcl-list-type: list\n items:\n type: object\n x-dcl-go-type: PolicySpecRules\n properties:\n allowAll:\n type: boolean\n x-dcl-go-name: AllowAll\n description: Setting this to true means that all values are allowed.\n This field can be set only in Policies for list constraints.\n x-dcl-conflicts:\n - values\n - denyAll\n - enforce\n condition:\n type: object\n x-dcl-go-name: Condition\n x-dcl-go-type: PolicySpecRulesCondition\n description: 'A condition which determines whether this rule is\n used in the evaluation of the policy. When set, the `expression`\n field in the `Expr'' must include from 1 to 10 subexpressions,\n joined by the \"||\" or \"&&\" operators. Each subexpression must\n be of the form \"resource.matchTag(''/tag_key_short_name, ''tag_value_short_name'')\".\n or \"resource.matchTagId(''tagKeys/key_id'', ''tagValues/value_id'')\".\n where key_name and value_name are the resource names for Label\n Keys and Values. These names are available from the Tag Manager\n Service. An example expression is: \"resource.matchTag(''123456789/environment,\n ''prod'')\". or \"resource.matchTagId(''tagKeys/123'', ''tagValues/456'')\".'\n properties:\n description:\n type: string\n x-dcl-go-name: Description\n description: Optional. Description of the expression. This\n is a longer text which describes the expression, e.g. when\n hovered over it in a UI.\n expression:\n type: string\n x-dcl-go-name: Expression\n description: Textual representation of an expression in Common\n Expression Language syntax.\n location:\n type: string\n x-dcl-go-name: Location\n description: Optional. String indicating the location of the\n expression for error reporting, e.g. a file name and a position\n in the file.\n title:\n type: string\n x-dcl-go-name: Title\n description: Optional. Title for the expression, i.e. a short\n string describing its purpose. This can be used e.g. in\n UIs which allow to enter the expression.\n denyAll:\n type: boolean\n x-dcl-go-name: DenyAll\n description: Setting this to true means that all values are denied.\n This field can be set only in Policies for list constraints.\n x-dcl-conflicts:\n - values\n - allowAll\n - enforce\n enforce:\n type: boolean\n x-dcl-go-name: Enforce\n description: If `true`, then the `Policy` is enforced. If `false`,\n then any configuration is acceptable. This field can be set\n only in Policies for boolean constraints.\n x-dcl-conflicts:\n - values\n - allowAll\n - denyAll\n values:\n type: object\n x-dcl-go-name: Values\n x-dcl-go-type: PolicySpecRulesValues\n description: List of values to be used for this PolicyRule. This\n field can be set only in Policies for list constraints.\n x-dcl-conflicts:\n - allowAll\n - denyAll\n - enforce\n properties:\n allowedValues:\n type: array\n x-dcl-go-name: AllowedValues\n description: List of values allowed at this resource.\n x-dcl-send-empty: true\n x-dcl-list-type: list\n items:\n type: string\n x-dcl-go-type: string\n deniedValues:\n type: array\n x-dcl-go-name: DeniedValues\n description: List of values denied at this resource.\n x-dcl-send-empty: true\n x-dcl-list-type: list\n items:\n type: string\n x-dcl-go-type: string\n updateTime:\n type: string\n format: date-time\n x-dcl-go-name: UpdateTime\n readOnly: true\n description: Output only. The time stamp this was previously updated.\n This represents the last time a call to `CreatePolicy` or `UpdatePolicy`\n was made for that `Policy`.\n") +var YAML_policy = []byte("info:\n title: OrgPolicy/Policy\n description: An organization policy gives you programmatic control over your organization's\n cloud resources. Using Organization Policies, you will be able to configure constraints\n across your entire resource hierarchy.\n x-dcl-struct-name: Policy\n x-dcl-has-iam: false\n x-dcl-ref:\n text: REST API\n url: https://cloud.google.com/resource-manager/docs/reference/orgpolicy/rest/v2/organizations.policies\n x-dcl-guides:\n - text: Understanding Org Policy concepts\n url: https://cloud.google.com/resource-manager/docs/organization-policy/overview\n - text: The resource hierarchy\n url: https://cloud.google.com/resource-manager/docs/cloud-platform-resource-hierarchy\n - text: All valid constraints\n url: https://cloud.google.com/resource-manager/docs/organization-policy/org-policy-constraints\npaths:\n get:\n description: The function used to get information about a Policy\n parameters:\n - name: policy\n required: true\n description: A full instance of a Policy\n apply:\n description: The function used to apply information about a Policy\n parameters:\n - name: policy\n required: true\n description: A full instance of a Policy\n delete:\n description: The function used to delete a Policy\n parameters:\n - name: policy\n required: true\n description: A full instance of a Policy\n deleteAll:\n description: The function used to delete all Policy\n parameters:\n - name: parent\n required: true\n schema:\n type: string\n list:\n description: The function used to list information about many Policy\n parameters:\n - name: parent\n required: true\n schema:\n type: string\ncomponents:\n schemas:\n Policy:\n title: Policy\n x-dcl-id: '{{parent}}/policies/{{name}}'\n x-dcl-has-create: true\n x-dcl-has-iam: false\n x-dcl-read-timeout: 0\n x-dcl-apply-timeout: 0\n x-dcl-delete-timeout: 0\n type: object\n required:\n - name\n - parent\n properties:\n dryRunSpec:\n type: object\n x-dcl-go-name: DryRunSpec\n x-dcl-go-type: PolicyDryRunSpec\n description: Dry-run policy. Audit-only policy, can be used to monitor how\n the policy would have impacted the existing and future resources if it's\n enforced.\n properties:\n etag:\n type: string\n x-dcl-go-name: Etag\n readOnly: true\n description: An opaque tag indicating the current version of the policy,\n used for concurrency control. This field is ignored if used in a `CreatePolicy`\n request. When the policy` is returned from either a `GetPolicy` or\n a `ListPolicies` request, this `etag` indicates the version of the\n current policy to use when executing a read-modify-write loop. When\n the policy is returned from a `GetEffectivePolicy` request, the `etag`\n will be unset.\n inheritFromParent:\n type: boolean\n x-dcl-go-name: InheritFromParent\n description: Determines the inheritance behavior for this policy. If\n `inherit_from_parent` is true, policy rules set higher up in the hierarchy\n (up to the closest root) are inherited and present in the effective\n policy. If it is false, then no rules are inherited, and this policy\n becomes the new root for evaluation. This field can be set only for\n policies which configure list constraints.\n reset:\n type: boolean\n x-dcl-go-name: Reset\n description: Ignores policies set above this resource and restores the\n `constraint_default` enforcement behavior of the specific constraint\n at this resource. This field can be set in policies for either list\n or boolean constraints. If set, `rules` must be empty and `inherit_from_parent`\n must be set to false.\n rules:\n type: array\n x-dcl-go-name: Rules\n description: 'In policies for boolean constraints, the following requirements\n apply: - There must be one and only one policy rule where condition\n is unset. - Boolean policy rules with conditions must set `enforced`\n to the opposite of the policy rule without a condition. - During policy\n evaluation, policy rules with conditions that are true for a target\n resource take precedence.'\n x-dcl-send-empty: true\n x-dcl-list-type: list\n items:\n type: object\n x-dcl-go-type: PolicyDryRunSpecRules\n properties:\n allowAll:\n type: boolean\n x-dcl-go-name: AllowAll\n description: Setting this to `\"TRUE\"` means that all values are\n allowed. This field can be set only in policies for list constraints.\n x-dcl-conflicts:\n - values\n - denyAll\n - enforce\n condition:\n type: object\n x-dcl-go-name: Condition\n x-dcl-go-type: PolicyDryRunSpecRulesCondition\n description: 'A condition which determines whether this rule is\n used in the evaluation of the policy. When set, the `expression`\n field in the `Expr'' must include from 1 to 10 subexpressions,\n joined by the \"||\" or \"&&\" operators. Each subexpression must\n be of the form \"resource.matchTag(''/tag_key_short_name, ''tag_value_short_name'')\".\n or \"resource.matchTagId(''tagKeys/key_id'', ''tagValues/value_id'')\".\n where key_name and value_name are the resource names for Label\n Keys and Values. These names are available from the Tag Manager\n Service. An example expression is: \"resource.matchTag(''123456789/environment,\n ''prod'')\". or \"resource.matchTagId(''tagKeys/123'', ''tagValues/456'')\".'\n properties:\n description:\n type: string\n x-dcl-go-name: Description\n description: Optional. Description of the expression. This\n is a longer text which describes the expression, e.g. when\n hovered over it in a UI.\n expression:\n type: string\n x-dcl-go-name: Expression\n description: Textual representation of an expression in Common\n Expression Language syntax.\n location:\n type: string\n x-dcl-go-name: Location\n description: Optional. String indicating the location of the\n expression for error reporting, e.g. a file name and a position\n in the file.\n title:\n type: string\n x-dcl-go-name: Title\n description: Optional. Title for the expression, i.e. a short\n string describing its purpose. This can be used e.g. in\n UIs which allow to enter the expression.\n denyAll:\n type: boolean\n x-dcl-go-name: DenyAll\n description: Setting this to `\"TRUE\"` means that all values are\n denied. This field can be set only in policies for list constraints.\n x-dcl-conflicts:\n - values\n - allowAll\n - enforce\n enforce:\n type: boolean\n x-dcl-go-name: Enforce\n description: If `\"TRUE\"`, then the policy is enforced. If `\"FALSE\"`,\n then any configuration is acceptable. This field can be set\n only in policies for boolean constraints.\n x-dcl-conflicts:\n - values\n - allowAll\n - denyAll\n values:\n type: object\n x-dcl-go-name: Values\n x-dcl-go-type: PolicyDryRunSpecRulesValues\n description: List of values to be used for this policy rule. This\n field can be set only in policies for list constraints.\n x-dcl-conflicts:\n - allowAll\n - denyAll\n - enforce\n properties:\n allowedValues:\n type: array\n x-dcl-go-name: AllowedValues\n description: List of values allowed at this resource.\n x-dcl-send-empty: true\n x-dcl-list-type: list\n items:\n type: string\n x-dcl-go-type: string\n deniedValues:\n type: array\n x-dcl-go-name: DeniedValues\n description: List of values denied at this resource.\n x-dcl-send-empty: true\n x-dcl-list-type: list\n items:\n type: string\n x-dcl-go-type: string\n updateTime:\n type: string\n format: date-time\n x-dcl-go-name: UpdateTime\n readOnly: true\n description: Output only. The time stamp this was previously updated.\n This represents the last time a call to `CreatePolicy` or `UpdatePolicy`\n was made for that policy.\n etag:\n type: string\n x-dcl-go-name: Etag\n readOnly: true\n description: Optional. An opaque tag indicating the current state of the\n policy, used for concurrency control. This 'etag' is computed by the server\n based on the value of other fields, and may be sent on update and delete\n requests to ensure the client has an up-to-date value before proceeding.\n x-kubernetes-immutable: true\n name:\n type: string\n x-dcl-go-name: Name\n description: 'Immutable. The resource name of the Policy. Must be one of\n the following forms, where constraint_name is the name of the constraint\n which this Policy configures: * `projects/{project_number}/policies/{constraint_name}`\n * `folders/{folder_id}/policies/{constraint_name}` * `organizations/{organization_id}/policies/{constraint_name}`\n For example, \"projects/123/policies/compute.disableSerialPortAccess\".\n Note: `projects/{project_id}/policies/{constraint_name}` is also an acceptable\n name for API requests, but responses will return the name using the equivalent\n project number.'\n x-kubernetes-immutable: true\n parent:\n type: string\n x-dcl-go-name: Parent\n description: The parent of the resource.\n x-kubernetes-immutable: true\n x-dcl-forward-slash-allowed: true\n x-dcl-references:\n - resource: Cloudresourcemanager/Folder\n field: name\n parent: true\n - resource: Cloudresourcemanager/Organization\n field: name\n parent: true\n - resource: Cloudresourcemanager/Project\n field: name\n parent: true\n spec:\n type: object\n x-dcl-go-name: Spec\n x-dcl-go-type: PolicySpec\n description: Basic information about the Organization Policy.\n properties:\n etag:\n type: string\n x-dcl-go-name: Etag\n readOnly: true\n description: An opaque tag indicating the current version of the `Policy`,\n used for concurrency control. This field is ignored if used in a `CreatePolicy`\n request. When the `Policy` is returned from either a `GetPolicy` or\n a `ListPolicies` request, this `etag` indicates the version of the\n current `Policy` to use when executing a read-modify-write loop. When\n the `Policy` is returned from a `GetEffectivePolicy` request, the\n `etag` will be unset.\n inheritFromParent:\n type: boolean\n x-dcl-go-name: InheritFromParent\n description: Determines the inheritance behavior for this `Policy`.\n If `inherit_from_parent` is true, PolicyRules set higher up in the\n hierarchy (up to the closest root) are inherited and present in the\n effective policy. If it is false, then no rules are inherited, and\n this Policy becomes the new root for evaluation. This field can be\n set only for Policies which configure list constraints.\n reset:\n type: boolean\n x-dcl-go-name: Reset\n description: Ignores policies set above this resource and restores the\n `constraint_default` enforcement behavior of the specific `Constraint`\n at this resource. This field can be set in policies for either list\n or boolean constraints. If set, `rules` must be empty and `inherit_from_parent`\n must be set to false.\n rules:\n type: array\n x-dcl-go-name: Rules\n description: 'Up to 10 PolicyRules are allowed. In Policies for boolean\n constraints, the following requirements apply: - There must be one\n and only one PolicyRule where condition is unset. - BooleanPolicyRules\n with conditions must set `enforced` to the opposite of the PolicyRule\n without a condition. - During policy evaluation, PolicyRules with\n conditions that are true for a target resource take precedence.'\n x-dcl-send-empty: true\n x-dcl-list-type: list\n items:\n type: object\n x-dcl-go-type: PolicySpecRules\n properties:\n allowAll:\n type: boolean\n x-dcl-go-name: AllowAll\n description: Setting this to `\"TRUE\"` means that all values are\n allowed. This field can be set only in Policies for list constraints.\n x-dcl-conflicts:\n - values\n - denyAll\n - enforce\n condition:\n type: object\n x-dcl-go-name: Condition\n x-dcl-go-type: PolicySpecRulesCondition\n description: 'A condition which determines whether this rule is\n used in the evaluation of the policy. When set, the `expression`\n field in the `Expr'' must include from 1 to 10 subexpressions,\n joined by the \"||\" or \"&&\" operators. Each subexpression must\n be of the form \"resource.matchTag(''/tag_key_short_name, ''tag_value_short_name'')\".\n or \"resource.matchTagId(''tagKeys/key_id'', ''tagValues/value_id'')\".\n where key_name and value_name are the resource names for Label\n Keys and Values. These names are available from the Tag Manager\n Service. An example expression is: \"resource.matchTag(''123456789/environment,\n ''prod'')\". or \"resource.matchTagId(''tagKeys/123'', ''tagValues/456'')\".'\n properties:\n description:\n type: string\n x-dcl-go-name: Description\n description: Optional. Description of the expression. This\n is a longer text which describes the expression, e.g. when\n hovered over it in a UI.\n expression:\n type: string\n x-dcl-go-name: Expression\n description: Textual representation of an expression in Common\n Expression Language syntax.\n location:\n type: string\n x-dcl-go-name: Location\n description: Optional. String indicating the location of the\n expression for error reporting, e.g. a file name and a position\n in the file.\n title:\n type: string\n x-dcl-go-name: Title\n description: Optional. Title for the expression, i.e. a short\n string describing its purpose. This can be used e.g. in\n UIs which allow to enter the expression.\n denyAll:\n type: boolean\n x-dcl-go-name: DenyAll\n description: Setting this to `\"TRUE\"` means that all values are\n denied. This field can be set only in Policies for list constraints.\n x-dcl-conflicts:\n - values\n - allowAll\n - enforce\n enforce:\n type: boolean\n x-dcl-go-name: Enforce\n description: If `\"TRUE\"`, then the `Policy` is enforced. If `\"FALSE\"`,\n then any configuration is acceptable. This field can be set\n only in Policies for boolean constraints.\n x-dcl-conflicts:\n - values\n - allowAll\n - denyAll\n values:\n type: object\n x-dcl-go-name: Values\n x-dcl-go-type: PolicySpecRulesValues\n description: List of values to be used for this PolicyRule. This\n field can be set only in Policies for list constraints.\n x-dcl-conflicts:\n - allowAll\n - denyAll\n - enforce\n properties:\n allowedValues:\n type: array\n x-dcl-go-name: AllowedValues\n description: List of values allowed at this resource.\n x-dcl-send-empty: true\n x-dcl-list-type: list\n items:\n type: string\n x-dcl-go-type: string\n deniedValues:\n type: array\n x-dcl-go-name: DeniedValues\n description: List of values denied at this resource.\n x-dcl-send-empty: true\n x-dcl-list-type: list\n items:\n type: string\n x-dcl-go-type: string\n updateTime:\n type: string\n format: date-time\n x-dcl-go-name: UpdateTime\n readOnly: true\n description: Output only. The time stamp this was previously updated.\n This represents the last time a call to `CreatePolicy` or `UpdatePolicy`\n was made for that `Policy`.\n") -// 20052 bytes -// MD5: d1289c2626088e74da4bdc1bbf94663b +// 20076 bytes +// MD5: 4c66b24a2df5e99d72452e4ece24af43