ApplyWorkloadUpdateResponse

Response for ApplyWorkloadUpdate endpoint.

JSON representation 
{
  "appliedUpdate": {
    object (WorkloadUpdate)
  }
}
Fields
appliedUpdate

object (WorkloadUpdate)

The update that was applied.

WorkloadUpdate

A workload update is a change to the workload's compliance configuration.

JSON representation 
{
  "name": string,
  "state": enum (State),
  "createTime": string,
  "updateTime": string,
  "details": {
    object (UpdateDetails)
  }
}
Fields
name

string

Output only. Immutable. Identifier. Resource name of the WorkloadUpdate. Format: organizations/{organization}/locations/{location}/workloads/{workload}/updates/{update}
state

enum (State)

Output only. The state of the update.
createTime

string (Timestamp format)

The time the update was created.

A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
updateTime

string (Timestamp format)

The time the update was last updated.

A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
details

object (UpdateDetails)

The details of the update.

UpdateDetails

The details of the update.

JSON representation 
{

  // Union field kind can be only one of the following:
  "orgPolicyUpdate": {
    object (OrgPolicyUpdate)
  }
  // End of list of possible types for union field kind.
}
Fields
Union field kind. The type of the update. This can be an update to a org policy of a resource e.g. gcp.resourceLocation org policy. kind can be only one of the following:
orgPolicyUpdate

object (OrgPolicyUpdate)

Update to one org policy, e.g. gcp.resourceLocation.

OrgPolicyUpdate

Represents an update for an org policy control applied on an Assured Workload resource. The inherited org policy is not considered.

JSON representation 
{
  "appliedPolicy": {
    object (OrgPolicy)
  },
  "suggestedPolicy": {
    object (OrgPolicy)
  }
}
Fields
appliedPolicy

object (OrgPolicy)

The org policy currently applied on the assured workload resource.
suggestedPolicy

object (OrgPolicy)

The suggested org policy that replaces the applied policy.

OrgPolicy

This assured workload service object is used to represent the org policy attached to a resource. It servces the same purpose as the orgpolicy.v2.Policy object but with functionality that is limited to what is supported by Assured Workloads(e.g. only one rule under one OrgPolicy object, no conditions, etc).

JSON representation 
{
  "resource": string,
  "constraint": string,
  "rule": {
    object (PolicyRule)
  },
  "inherit": boolean,
  "reset": boolean
}
Fields
resource

string

Resource that the OrgPolicy attaches to. Format: folders/123" projects/123".
constraint

string

The constraint name of the OrgPolicy. e.g. "constraints/gcp.resourceLocations".
rule

object (PolicyRule)

The rule of the OrgPolicy.
inherit

boolean

If inherit is true, policy rules of the lowest ancestor in the resource hierarchy chain are inherited. If it is false, policy rules are not inherited.
reset

boolean

Ignores policies set above this resource and restores to the constraint_default value. reset can only be true when rules is empty and inherit is false.

PolicyRule

A rule used to express this policy.

JSON representation 
{

  // Union field kind can be only one of the following:
  "values": {
    object (StringValues)
  },
  "allowAll": boolean,
  "denyAll": boolean,
  "enforce": boolean
  // End of list of possible types for union field kind.
}
Fields
Union field kind. The kind of the rule. kind can be only one of the following:
values

object (StringValues)

ListPolicy only when custom values are specified.
allowAll

boolean

ListPolicy only when all values are allowed.
denyAll

boolean

ListPolicy only when all values are denied.
enforce

boolean

BooleanPolicy only.

StringValues

The values allowed for a ListPolicy.

JSON representation 
{
  "allowedValues": [
    string
  ],
  "deniedValues": [
    string
  ]
}
Fields
allowedValues[]

string

List of values allowed at this resource.
deniedValues[]

string

List of values denied at this resource.