@pulumi/gcp 6.4.0 → 6.6.0

package/osconfig/osPolicyAssignment.d.ts

@@ -0,0 +1,672 @@
+import * as pulumi from "@pulumi/pulumi";
+import { input as inputs, output as outputs } from "../types";
+/**
+ * Represents an OSPolicyAssignment resource.
+ *
+ * ## Example Usage
+ * ### Fixed_os_policy_assignment
+ * An example of an osconfig os policy assignment with fixed rollout disruption budget
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as gcp from "@pulumi/gcp";
+ *
+ * const primary = new gcp.osconfig.OsPolicyAssignment("primary", {
+ *     description: "A test os policy assignment",
+ *     instanceFilter: {
+ *         all: false,
+ *         exclusionLabels: [{
+ *             labels: {
+ *                 "label-two": "value-two",
+ *             },
+ *         }],
+ *         inclusionLabels: [{
+ *             labels: {
+ *                 "label-one": "value-one",
+ *             },
+ *         }],
+ *         inventories: [{
+ *             osShortName: "centos",
+ *             osVersion: "8.*",
+ *         }],
+ *     },
+ *     location: "us-west1-a",
+ *     osPolicies: [{
+ *         allowNoResourceGroupMatch: false,
+ *         description: "A test os policy",
+ *         id: "policy",
+ *         mode: "VALIDATION",
+ *         resourceGroups: [
+ *             {
+ *                 inventoryFilters: [{
+ *                     osShortName: "centos",
+ *                     osVersion: "8.*",
+ *                 }],
+ *                 resources: [
+ *                     {
+ *                         id: "apt",
+ *                         pkg: {
+ *                             apt: {
+ *                                 name: "bazel",
+ *                             },
+ *                             desiredState: "INSTALLED",
+ *                         },
+ *                     },
+ *                     {
+ *                         id: "deb1",
+ *                         pkg: {
+ *                             deb: {
+ *                                 source: {
+ *                                     localPath: "$HOME/package.deb",
+ *                                 },
+ *                             },
+ *                             desiredState: "INSTALLED",
+ *                         },
+ *                     },
+ *                     {
+ *                         id: "deb2",
+ *                         pkg: {
+ *                             deb: {
+ *                                 pullDeps: true,
+ *                                 source: {
+ *                                     allowInsecure: true,
+ *                                     remote: {
+ *                                         sha256Checksum: "3bbfd1043cd7afdb78cf9afec36c0c5370d2fea98166537b4e67f3816f256025",
+ *                                         uri: "ftp.us.debian.org/debian/package.deb",
+ *                                     },
+ *                                 },
+ *                             },
+ *                             desiredState: "INSTALLED",
+ *                         },
+ *                     },
+ *                     {
+ *                         id: "deb3",
+ *                         pkg: {
+ *                             deb: {
+ *                                 pullDeps: true,
+ *                                 source: {
+ *                                     gcs: {
+ *                                         bucket: "test-bucket",
+ *                                         generation: 1,
+ *                                         object: "test-object",
+ *                                     },
+ *                                 },
+ *                             },
+ *                             desiredState: "INSTALLED",
+ *                         },
+ *                     },
+ *                     {
+ *                         id: "yum",
+ *                         pkg: {
+ *                             desiredState: "INSTALLED",
+ *                             yum: {
+ *                                 name: "gstreamer-plugins-base-devel.x86_64",
+ *                             },
+ *                         },
+ *                     },
+ *                     {
+ *                         id: "zypper",
+ *                         pkg: {
+ *                             desiredState: "INSTALLED",
+ *                             zypper: {
+ *                                 name: "gcc",
+ *                             },
+ *                         },
+ *                     },
+ *                     {
+ *                         id: "rpm1",
+ *                         pkg: {
+ *                             desiredState: "INSTALLED",
+ *                             rpm: {
+ *                                 pullDeps: true,
+ *                                 source: {
+ *                                     localPath: "$HOME/package.rpm",
+ *                                 },
+ *                             },
+ *                         },
+ *                     },
+ *                     {
+ *                         id: "rpm2",
+ *                         pkg: {
+ *                             desiredState: "INSTALLED",
+ *                             rpm: {
+ *                                 source: {
+ *                                     allowInsecure: true,
+ *                                     remote: {
+ *                                         sha256Checksum: "3bbfd1043cd7afdb78cf9afec36c0c5370d2fea98166537b4e67f3816f256025",
+ *                                         uri: "https://mirror.jaleco.com/centos/8.3.2011/BaseOS/x86_64/os/Packages/efi-filesystem-3-2.el8.noarch.rpm",
+ *                                     },
+ *                                 },
+ *                             },
+ *                         },
+ *                     },
+ *                     {
+ *                         id: "rpm3",
+ *                         pkg: {
+ *                             desiredState: "INSTALLED",
+ *                             rpm: {
+ *                                 source: {
+ *                                     gcs: {
+ *                                         bucket: "test-bucket",
+ *                                         generation: 1,
+ *                                         object: "test-object",
+ *                                     },
+ *                                 },
+ *                             },
+ *                         },
+ *                     },
+ *                 ],
+ *             },
+ *             {
+ *                 resources: [
+ *                     {
+ *                         id: "apt-to-deb",
+ *                         pkg: {
+ *                             apt: {
+ *                                 name: "bazel",
+ *                             },
+ *                             desiredState: "INSTALLED",
+ *                         },
+ *                     },
+ *                     {
+ *                         id: "deb-local-path-to-gcs",
+ *                         pkg: {
+ *                             deb: {
+ *                                 source: {
+ *                                     localPath: "$HOME/package.deb",
+ *                                 },
+ *                             },
+ *                             desiredState: "INSTALLED",
+ *                         },
+ *                     },
+ *                     {
+ *                         id: "googet",
+ *                         pkg: {
+ *                             desiredState: "INSTALLED",
+ *                             googet: {
+ *                                 name: "gcc",
+ *                             },
+ *                         },
+ *                     },
+ *                     {
+ *                         id: "msi1",
+ *                         pkg: {
+ *                             desiredState: "INSTALLED",
+ *                             msi: {
+ *                                 properties: ["REBOOT=ReallySuppress"],
+ *                                 source: {
+ *                                     localPath: "$HOME/package.msi",
+ *                                 },
+ *                             },
+ *                         },
+ *                     },
+ *                     {
+ *                         id: "msi2",
+ *                         pkg: {
+ *                             desiredState: "INSTALLED",
+ *                             msi: {
+ *                                 source: {
+ *                                     allowInsecure: true,
+ *                                     remote: {
+ *                                         sha256Checksum: "3bbfd1043cd7afdb78cf9afec36c0c5370d2fea98166537b4e67f3816f256025",
+ *                                         uri: "https://remote.uri.com/package.msi",
+ *                                     },
+ *                                 },
+ *                             },
+ *                         },
+ *                     },
+ *                     {
+ *                         id: "msi3",
+ *                         pkg: {
+ *                             desiredState: "INSTALLED",
+ *                             msi: {
+ *                                 source: {
+ *                                     gcs: {
+ *                                         bucket: "test-bucket",
+ *                                         generation: 1,
+ *                                         object: "test-object",
+ *                                     },
+ *                                 },
+ *                             },
+ *                         },
+ *                     },
+ *                 ],
+ *             },
+ *         ],
+ *     }],
+ *     project: "my-project-name",
+ *     rollout: {
+ *         disruptionBudget: {
+ *             fixed: 1,
+ *         },
+ *         minWaitDuration: "3.5s",
+ *     },
+ * });
+ * ```
+ * ### Percent_os_policy_assignment
+ * An example of an osconfig os policy assignment with percent rollout disruption budget
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as gcp from "@pulumi/gcp";
+ *
+ * const primary = new gcp.osconfig.OsPolicyAssignment("primary", {
+ *     description: "A test os policy assignment",
+ *     instanceFilter: {
+ *         all: true,
+ *     },
+ *     location: "us-west1-a",
+ *     osPolicies: [{
+ *         id: "policy",
+ *         mode: "VALIDATION",
+ *         resourceGroups: [
+ *             {
+ *                 resources: [
+ *                     {
+ *                         id: "apt-to-yum",
+ *                         repository: {
+ *                             apt: {
+ *                                 archiveType: "DEB",
+ *                                 components: ["doc"],
+ *                                 distribution: "debian",
+ *                                 gpgKey: ".gnupg/pubring.kbx",
+ *                                 uri: "https://atl.mirrors.clouvider.net/debian",
+ *                             },
+ *                         },
+ *                     },
+ *                     {
+ *                         id: "yum",
+ *                         repository: {
+ *                             yum: {
+ *                                 baseUrl: "http://centos.s.uw.edu/centos/",
+ *                                 displayName: "yum",
+ *                                 gpgKeys: ["RPM-GPG-KEY-CentOS-7"],
+ *                                 id: "yum",
+ *                             },
+ *                         },
+ *                     },
+ *                     {
+ *                         id: "zypper",
+ *                         repository: {
+ *                             zypper: {
+ *                                 baseUrl: "http://mirror.dal10.us.leaseweb.net/opensuse",
+ *                                 displayName: "zypper",
+ *                                 gpgKeys: ["sample-key-uri"],
+ *                                 id: "zypper",
+ *                             },
+ *                         },
+ *                     },
+ *                     {
+ *                         id: "goo",
+ *                         repository: {
+ *                             goo: {
+ *                                 name: "goo",
+ *                                 url: "https://foo.com/googet/bar",
+ *                             },
+ *                         },
+ *                     },
+ *                     {
+ *                         exec: {
+ *                             enforce: {
+ *                                 args: ["arg1"],
+ *                                 file: {
+ *                                     allowInsecure: true,
+ *                                     remote: {
+ *                                         sha256Checksum: "c7938fed83afdccbb0e86a2a2e4cad7d5035012ca3214b4a61268393635c3063",
+ *                                         uri: "https://www.example.com/script.sh",
+ *                                     },
+ *                                 },
+ *                                 interpreter: "SHELL",
+ *                                 outputFilePath: "$HOME/out",
+ *                             },
+ *                             validate: {
+ *                                 args: ["arg1"],
+ *                                 file: {
+ *                                     localPath: "$HOME/script.sh",
+ *                                 },
+ *                                 interpreter: "SHELL",
+ *                                 outputFilePath: "$HOME/out",
+ *                             },
+ *                         },
+ *                         id: "exec1",
+ *                     },
+ *                     {
+ *                         exec: {
+ *                             enforce: {
+ *                                 args: ["arg1"],
+ *                                 file: {
+ *                                     localPath: "$HOME/script.sh",
+ *                                 },
+ *                                 interpreter: "SHELL",
+ *                                 outputFilePath: "$HOME/out",
+ *                             },
+ *                             validate: {
+ *                                 args: ["arg1"],
+ *                                 file: {
+ *                                     allowInsecure: true,
+ *                                     remote: {
+ *                                         sha256Checksum: "c7938fed83afdccbb0e86a2a2e4cad7d5035012ca3214b4a61268393635c3063",
+ *                                         uri: "https://www.example.com/script.sh",
+ *                                     },
+ *                                 },
+ *                                 interpreter: "SHELL",
+ *                                 outputFilePath: "$HOME/out",
+ *                             },
+ *                         },
+ *                         id: "exec2",
+ *                     },
+ *                     {
+ *                         exec: {
+ *                             enforce: {
+ *                                 interpreter: "SHELL",
+ *                                 outputFilePath: "$HOME/out",
+ *                                 script: "pwd",
+ *                             },
+ *                             validate: {
+ *                                 file: {
+ *                                     allowInsecure: true,
+ *                                     gcs: {
+ *                                         bucket: "test-bucket",
+ *                                         generation: 1,
+ *                                         object: "test-object",
+ *                                     },
+ *                                 },
+ *                                 interpreter: "SHELL",
+ *                                 outputFilePath: "$HOME/out",
+ *                             },
+ *                         },
+ *                         id: "exec3",
+ *                     },
+ *                     {
+ *                         exec: {
+ *                             enforce: {
+ *                                 file: {
+ *                                     allowInsecure: true,
+ *                                     gcs: {
+ *                                         bucket: "test-bucket",
+ *                                         generation: 1,
+ *                                         object: "test-object",
+ *                                     },
+ *                                 },
+ *                                 interpreter: "SHELL",
+ *                                 outputFilePath: "$HOME/out",
+ *                             },
+ *                             validate: {
+ *                                 interpreter: "SHELL",
+ *                                 outputFilePath: "$HOME/out",
+ *                                 script: "pwd",
+ *                             },
+ *                         },
+ *                         id: "exec4",
+ *                     },
+ *                     {
+ *                         file: {
+ *                             file: {
+ *                                 localPath: "$HOME/file",
+ *                             },
+ *                             path: "$HOME/file",
+ *                             state: "PRESENT",
+ *                         },
+ *                         id: "file1",
+ *                     },
+ *                 ],
+ *             },
+ *             {
+ *                 resources: [
+ *                     {
+ *                         file: {
+ *                             file: {
+ *                                 allowInsecure: true,
+ *                                 remote: {
+ *                                     sha256Checksum: "c7938fed83afdccbb0e86a2a2e4cad7d5035012ca3214b4a61268393635c3063",
+ *                                     uri: "https://www.example.com/file",
+ *                                 },
+ *                             },
+ *                             path: "$HOME/file",
+ *                             state: "PRESENT",
+ *                         },
+ *                         id: "file2",
+ *                     },
+ *                     {
+ *                         file: {
+ *                             file: {
+ *                                 gcs: {
+ *                                     bucket: "test-bucket",
+ *                                     generation: 1,
+ *                                     object: "test-object",
+ *                                 },
+ *                             },
+ *                             path: "$HOME/file",
+ *                             state: "PRESENT",
+ *                         },
+ *                         id: "file3",
+ *                     },
+ *                     {
+ *                         file: {
+ *                             content: "sample-content",
+ *                             path: "$HOME/file",
+ *                             state: "PRESENT",
+ *                         },
+ *                         id: "file4",
+ *                     },
+ *                 ],
+ *             },
+ *         ],
+ *     }],
+ *     project: "my-project-name",
+ *     rollout: {
+ *         disruptionBudget: {
+ *             percent: 1,
+ *         },
+ *         minWaitDuration: "3.5s",
+ *     },
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * OSPolicyAssignment can be imported using any of these accepted formats
+ *
+ * ```sh
+ *  $ pulumi import gcp:osconfig/osPolicyAssignment:OsPolicyAssignment default projects/{{project}}/locations/{{location}}/osPolicyAssignments/{{name}}
+ * ```
+ *
+ * ```sh
+ *  $ pulumi import gcp:osconfig/osPolicyAssignment:OsPolicyAssignment default {{project}}/{{location}}/{{name}}
+ * ```
+ *
+ * ```sh
+ *  $ pulumi import gcp:osconfig/osPolicyAssignment:OsPolicyAssignment default {{location}}/{{name}}
+ * ```
+ */
+export declare class OsPolicyAssignment extends pulumi.CustomResource {
+    /**
+     * Get an existing OsPolicyAssignment resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: OsPolicyAssignmentState, opts?: pulumi.CustomResourceOptions): OsPolicyAssignment;
+    /**
+     * Returns true if the given object is an instance of OsPolicyAssignment.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is OsPolicyAssignment;
+    /**
+     * Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS
+     * policies from this revision. For a given OS policy assignment, there is only one revision with a value of `true` for
+     * this field.
+     */
+    readonly baseline: pulumi.Output<boolean>;
+    /**
+     * Output only. Indicates that this revision deletes the OS policy assignment.
+     */
+    readonly deleted: pulumi.Output<boolean>;
+    /**
+     * OS policy assignment description. Length of the description is limited to 1024 characters.
+     */
+    readonly description: pulumi.Output<string | undefined>;
+    /**
+     * The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
+     */
+    readonly etag: pulumi.Output<string>;
+    /**
+     * Required. Filter to select VMs.
+     */
+    readonly instanceFilter: pulumi.Output<outputs.osconfig.OsPolicyAssignmentInstanceFilter>;
+    /**
+     * The location for the resource
+     */
+    readonly location: pulumi.Output<string>;
+    /**
+     * Required. The name of the repository.
+     */
+    readonly name: pulumi.Output<string>;
+    /**
+     * Required. List of OS policies to be applied to the VMs.
+     */
+    readonly osPolicies: pulumi.Output<outputs.osconfig.OsPolicyAssignmentOsPolicy[]>;
+    /**
+     * The project for the resource
+     */
+    readonly project: pulumi.Output<string>;
+    /**
+     * Output only. Indicates that reconciliation is in progress for the revision. This value is `true` when the
+     * `rollout_state` is one of: * IN_PROGRESS * CANCELLING
+     */
+    readonly reconciling: pulumi.Output<boolean>;
+    /**
+     * Output only. The timestamp that the revision was created.
+     */
+    readonly revisionCreateTime: pulumi.Output<string>;
+    /**
+     * Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy
+     * assignment
+     */
+    readonly revisionId: pulumi.Output<string>;
+    /**
+     * Required. Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instanceFilter - osPolicies 3) OSPolicyAssignment is deleted.
+     */
+    readonly rollout: pulumi.Output<outputs.osconfig.OsPolicyAssignmentRollout>;
+    /**
+     * Output only. OS policy assignment rollout state Possible values: ROLLOUT_STATE_UNSPECIFIED, IN_PROGRESS, CANCELLING,
+     * CANCELLED, SUCCEEDED
+     */
+    readonly rolloutState: pulumi.Output<string>;
+    /**
+     * Output only. Server generated unique id for the OS policy assignment resource.
+     */
+    readonly uid: pulumi.Output<string>;
+    /**
+     * Create a OsPolicyAssignment resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: OsPolicyAssignmentArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering OsPolicyAssignment resources.
+ */
+export interface OsPolicyAssignmentState {
+    /**
+     * Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS
+     * policies from this revision. For a given OS policy assignment, there is only one revision with a value of `true` for
+     * this field.
+     */
+    baseline?: pulumi.Input<boolean>;
+    /**
+     * Output only. Indicates that this revision deletes the OS policy assignment.
+     */
+    deleted?: pulumi.Input<boolean>;
+    /**
+     * OS policy assignment description. Length of the description is limited to 1024 characters.
+     */
+    description?: pulumi.Input<string>;
+    /**
+     * The etag for this OS policy assignment. If this is provided on update, it must match the server's etag.
+     */
+    etag?: pulumi.Input<string>;
+    /**
+     * Required. Filter to select VMs.
+     */
+    instanceFilter?: pulumi.Input<inputs.osconfig.OsPolicyAssignmentInstanceFilter>;
+    /**
+     * The location for the resource
+     */
+    location?: pulumi.Input<string>;
+    /**
+     * Required. The name of the repository.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * Required. List of OS policies to be applied to the VMs.
+     */
+    osPolicies?: pulumi.Input<pulumi.Input<inputs.osconfig.OsPolicyAssignmentOsPolicy>[]>;
+    /**
+     * The project for the resource
+     */
+    project?: pulumi.Input<string>;
+    /**
+     * Output only. Indicates that reconciliation is in progress for the revision. This value is `true` when the
+     * `rollout_state` is one of: * IN_PROGRESS * CANCELLING
+     */
+    reconciling?: pulumi.Input<boolean>;
+    /**
+     * Output only. The timestamp that the revision was created.
+     */
+    revisionCreateTime?: pulumi.Input<string>;
+    /**
+     * Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy
+     * assignment
+     */
+    revisionId?: pulumi.Input<string>;
+    /**
+     * Required. Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instanceFilter - osPolicies 3) OSPolicyAssignment is deleted.
+     */
+    rollout?: pulumi.Input<inputs.osconfig.OsPolicyAssignmentRollout>;
+    /**
+     * Output only. OS policy assignment rollout state Possible values: ROLLOUT_STATE_UNSPECIFIED, IN_PROGRESS, CANCELLING,
+     * CANCELLED, SUCCEEDED
+     */
+    rolloutState?: pulumi.Input<string>;
+    /**
+     * Output only. Server generated unique id for the OS policy assignment resource.
+     */
+    uid?: pulumi.Input<string>;
+}
+/**
+ * The set of arguments for constructing a OsPolicyAssignment resource.
+ */
+export interface OsPolicyAssignmentArgs {
+    /**
+     * OS policy assignment description. Length of the description is limited to 1024 characters.
+     */
+    description?: pulumi.Input<string>;
+    /**
+     * Required. Filter to select VMs.
+     */
+    instanceFilter: pulumi.Input<inputs.osconfig.OsPolicyAssignmentInstanceFilter>;
+    /**
+     * The location for the resource
+     */
+    location: pulumi.Input<string>;
+    /**
+     * Required. The name of the repository.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * Required. List of OS policies to be applied to the VMs.
+     */
+    osPolicies: pulumi.Input<pulumi.Input<inputs.osconfig.OsPolicyAssignmentOsPolicy>[]>;
+    /**
+     * The project for the resource
+     */
+    project?: pulumi.Input<string>;
+    /**
+     * Required. Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instanceFilter - osPolicies 3) OSPolicyAssignment is deleted.
+     */
+    rollout: pulumi.Input<inputs.osconfig.OsPolicyAssignmentRollout>;
+}