GoogleCloudOsconfigV2__PolicyOrchestrator

import type { GoogleCloudOsconfigV2__PolicyOrchestrator } from "https://googleapis.deno.dev/v1/osconfig:v2.ts";

PolicyOrchestrator helps managing project+zone level policy resources (e.g. OS Policy Assignments), by providing tools to create, update and delete them across projects and locations, at scale. Policy orchestrator functions as an endless loop. Each iteration orchestrator computes a set of resources that should be affected, then progressively applies changes to them. If for some reason this set of resources changes over time (e.g. new projects are added), the future loop iterations will address that. Orchestrator can either upsert or delete policy resources. For more details, see the description of the action, and orchestrated_resource fields. Note that policy orchestrator do not "manage" the resources it creates. Every iteration is independent and only minimal history of past actions is retained (apart from Cloud Logging). If orchestrator gets deleted, it does not affect the resources it created in the past. Those will remain where they were. Same applies if projects are removed from the orchestrator's scope.

interface GoogleCloudOsconfigV2__PolicyOrchestrator {

action?: string;

readonly createTime?: Date;

description?: string;

readonly etag?: string;

labels?: {

[key: string]: string;

};

name?: string;

orchestratedResource?: GoogleCloudOsconfigV2__OrchestratedResource;

orchestrationScope?: GoogleCloudOsconfigV2__OrchestrationScope;

readonly orchestrationState?: GoogleCloudOsconfigV2_PolicyOrchestrator_OrchestrationState;

readonly reconciling?: boolean;

state?: string;

readonly updateTime?: Date;

}

§Properties

action?: string

[src]

Required. Action to be done by the orchestrator in projects/{project_id}/zones/{zone_id} locations defined by the orchestration_scope. Allowed values: - UPSERT - Orchestrator will create or update target resources. - DELETE - Orchestrator will delete target resources, if they exist

readonly createTime?: Date

[src]

Output only. Timestamp when the policy orchestrator resource was created.

description?: string

[src]

Optional. Freeform text describing the purpose of the resource.

readonly etag?: string

[src]

Output only. This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.

labels?: {

[key: string]: string;

}

[src]

Optional. Labels as key value pairs

name?: string

[src]

Immutable. Identifier. In form of * organizations/{organization_id}/locations/global/policyOrchestrators/{orchestrator_id} * folders/{folder_id}/locations/global/policyOrchestrators/{orchestrator_id} * projects/{project_id_or_number}/locations/global/policyOrchestrators/{orchestrator_id}

orchestratedResource?: GoogleCloudOsconfigV2__OrchestratedResource

[src]

Required. Resource to be orchestrated by the policy orchestrator.

orchestrationScope?: GoogleCloudOsconfigV2__OrchestrationScope

[src]

Optional. Defines scope for the orchestration, in context of the enclosing PolicyOrchestrator resource. Scope is expanded into a list of pairs, in which the rollout action will take place. Expansion starts with a Folder resource parenting the PolicyOrchestrator resource: - All the descendant projects are listed. - List of project is cross joined with a list of all available zones. - Resulting list of pairs is filtered according to the selectors.

readonly orchestrationState?: GoogleCloudOsconfigV2_PolicyOrchestrator_OrchestrationState

[src]

Output only. State of the orchestration.

readonly reconciling?: boolean

[src]

Output only. Set to true, if the there are ongoing changes being applied by the orchestrator.

state?: string

[src]

Optional. State of the orchestrator. Can be updated to change orchestrator behaviour. Allowed values: - ACTIVE - orchestrator is actively looking for actions to be taken. - STOPPED - orchestrator won't make any changes. Note: There might be more states added in the future. We use string here instead of an enum, to avoid the need of propagating new states to all the client code.

readonly updateTime?: Date

[src]

Output only. Timestamp when the policy orchestrator resource was last modified.