Method: globalVmExtensionPolicies.aggregatedList

Retrieves the list of all VM Extension Policy resources available to the specified project.

To prevent failure, it's recommended that you set thereturnPartialSuccess parameter totrue.

HTTP request

GET https://compute.googleapis.com/compute/beta/projects/{project}/aggregated/vmExtensionPolicies

The URL usesgRPC Transcoding syntax. To know more about valid error responses that can be thrown by this HTTP request, please refer to theservice error catalog

Path parameters

Parameters
project

string

Name of the project scoping this request.

Query parameters

Parameters
maxResults

integer (uint32 format)

The maximum number of results per page that should be returned. If the number of available results is larger thanmaxResults, Compute Engine returns anextPageToken that can be used to get the next page of results in subsequent list requests. Acceptable values are0 to500, inclusive. (Default:500)

pageToken

string

Specifies a page token to use. SetpageToken to thenextPageToken returned by a previous list request to get the next page of results.

filter

string

A filter expression that filters resources listed in the response. Most Compute resources support two types of filter expressions: expressions that support regular expressions and expressions that follow API improvement proposalAIP-160. These two types of filter expressions cannot be mixed in one request.

If you want to use AIP-160, your expression must specify the field name, an operator, and the value that you want to use for filtering. The value must be a string, a number, or a boolean. The operator must be either=,!=,>,<,<=,>= or:.

For example, if you are filtering Compute Engine instances, you can exclude instances namedexample-instance by specifyingname != example-instance.

The:* comparison can be used to test whether a key has been defined. For example, to find all objects withowner label use:

labels.owner:*

You can also filter nested fields. For example, you could specifyscheduling.automaticRestart = false to include instances only if they are not scheduled for automatic restarts. You can use filtering on nested fields to filter based onresource labels.

To filter on multiple expressions, provide each separate expression within parentheses. For example:

(scheduling.automaticRestart = true)(cpuPlatform = "Intel Skylake")

By default, each expression is anAND expression. However, you can includeAND andOR expressions explicitly. For example:

(cpuPlatform = "Intel Skylake") OR(cpuPlatform = "Intel Broadwell") AND(scheduling.automaticRestart = true)

If you want to use a regular expression, use theeq (equal) orne (not equal) operator against a single un-parenthesized expression with or without quotes or against multiple parenthesized expressions. Examples:

fieldname eq unquoted literalfieldname eq 'single quoted literal'fieldname eq "double quoted literal"(fieldname1 eq literal) (fieldname2 ne "literal")

The literal value is interpreted as a regular expression using GoogleRE2 library syntax. The literal value must match the entire field.

For example, to filter for instances that do not end with name "instance", you would usename ne .*instance.

You cannot combine constraints on multiple fields using regular expressions.

orderBy

string

Sorts list results by a certain order. By default, results are returned in alphanumerical order based on the resource name.

You can also sort results in descending order based on the creation timestamp usingorderBy="creationTimestamp desc". This sorts results based on thecreationTimestamp field in reverse chronological order (newest result first). Use this to sort resources like operations so that the newest operation is returned first.

Currently, only sorting byname orcreationTimestamp desc is supported.

returnPartialSuccess

boolean

Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.

For example, when partial success behavior is enabled, aggregatedList for a single zone scope either returns all resources in the zone or no resources, with an error code.

includeAllScopes

boolean

Indicates whether every visible scope for each scope type (zone, region, global) should be included in the response. For new resource types added after this field, the flag has no effect as new resource types will always include every visible scope for each scope type in response. For resource types which predate this field, if this flag is omitted or false, only scopes of the scope types where the resource type is expected to be found will be included.

serviceProjectNumber

string (int64 format)

The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.

Request body

The request body must be empty.

Response body

Response for the aggregated list of VM extension policies.

If successful, the response body contains data with the following structure:

JSON representation
{"kind":string,"id":string,"items":{string:{"vmExtensionPolicies":[{"kind":string,"id":string,"creationTimestamp":string,"updateTimestamp":string,"name":string,"description":string,"selfLink":string,"selfLinkWithId":string,"extensionPolicies":{string:{"stringConfig":string,"pinnedVersion":string},...},"instanceSelectors":[{"labelSelector":{"inclusionLabels":{string:string,...}}}],"priority":integer,"managedByGlobal":boolean,"globalResourceLink":string,"state":enum}],"warning":{"code":enum,"message":string,"data":[{"key":string,"value":string}]}},...},"nextPageToken":string,"selfLink":string,"warning":{"code":enum,"message":string,"data":[{"key":string,"value":string}]},"etag":string,"unreachables":[string]}
Fields
kind

string

[Output Only] Type of resource. Alwayscompute#VmExtensionPolicyAggregatedList for lists of VmExtensionPolicies.

id

string

[Output Only] Unique identifier for the resource; defined by the server.

items

map (key: string, value: object)

A list of VmExtensionPoliciesScopedList resources.

Key: Name of the scope containing this set of VmExtensionPolicies.

items.vmExtensionPolicies[]

object

globalVmExtensionPolicies.list of VmExtensionPolicy resources contained in this scope.

items.vmExtensionPolicies[].kind

string

[Output Only] Type of the resource. Alwayscompute#vmExtensionPolicy.

items.vmExtensionPolicies[].id

string (uint64 format)

[Output Only] The unique identifier for the resource. This identifier is defined by the server.

items.vmExtensionPolicies[].creationTimestamp

string

[Output Only] Creation timestamp inRFC3339 text format.

items.vmExtensionPolicies[].updateTimestamp

string

[Output Only] globalVmExtensionPolicies.update timestamp inRFC3339 text format.

items.vmExtensionPolicies[].name

string

Name of the resource. Provided by the client when the resource is created. The name must be 1-63 characters long, and comply withRFC1035. Specifically, the name must be 1-63 characters long and match the regular expression[a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.

items.vmExtensionPolicies[].description

string

An optional description of this resource.

items.vmExtensionPolicies[].selfLink

string

[Output Only] Server-defined fully-qualified URL for this resource.

items.vmExtensionPolicies[].selfLinkWithId

string

[Output Only] Server-defined URL for this resource's resource id.

items.vmExtensionPolicies[].extensionPolicies[]

map (key: string, value: object)

Required. A map of extension names (e.g., "cloudops") to their corresponding policy configurations.

items.vmExtensionPolicies[].extensionPolicies[].stringConfig

string

Optional. String-based configuration data for the extension.

items.vmExtensionPolicies[].extensionPolicies[].pinnedVersion

string

Optional. The specific version of the extension to install. If not set, the latest version is used.

items.vmExtensionPolicies[].instanceSelectors[]

object

Optional. Selectors to target VMs for this policy. VMs are selected if they matchany of the provided selectors (logical OR). If this list is empty, the policy applies to all VMs.

items.vmExtensionPolicies[].instanceSelectors[].labelSelector

object

Optional. LabelSelector selects VMs based on their labels.

items.vmExtensionPolicies[].instanceSelectors[].labelSelector.inclusionLabels

map (key: string, value: string)

Optional. A map of key-value pairs representing VM labels. VMs must have all of the labels specified in this map to be selected (logical AND).

e.g. If theinclusionLabels are {("key1", "value1"), ("key2", "value2")}, the VM labels must contain both ("key1", "value1") and ("key2", "value2") to be selected. If the VM labels are ("key1", "value1") and ("something", "else"), it will not be selected.

If the map is empty, it's considered a match.

items.vmExtensionPolicies[].priority

integer

Optional. Priority of this policy. Used to resolve conflicts when multiple policies apply to the same extension. The policy priority is an integer from 0 to 65535, inclusive. Lower integers indicate higher priorities. If you do not specify a priority when creating a rule, it is assigned a priority of 1000. If priorities are equal, the policy with the more recent creation timestamp takes precedence.

items.vmExtensionPolicies[].managedByGlobal

boolean

Optional. [Output Only] Indicates if this policy is managed by a global policy.

items.vmExtensionPolicies[].globalResourceLink

string

Optional. [Output Only] Link to the global policy that manages this zone policy, if applicable.

items.vmExtensionPolicies[].state

enum

Optional. [Output Only] Current state of the policy: ACTIVE or DELETING.

items.warning

object

Informational warning which replaces the list of backend services when the list is empty.

items.warning.code

enum

[Output Only] A warning code, if applicable. For example, Compute Engine returnsNO_RESULTS_ON_PAGE if there are no results in the response.

items.warning.message

string

[Output Only] A human-readable description of the warning code.

items.warning.data[]

object

[Output Only] Metadata about this warning inkey: value format. For example:

"data": [  {  "key": "scope",  "value": "zones/us-east1-d"  }

items.warning.data[].key

string

[Output Only] A key that provides more detail on the warning being returned. For example, for warnings where there are no results in a list request for a particular zone, this key might bescope and the key value might be the zone name. Other examples might be a key indicating a deprecated resource and a suggested replacement, or a warning about invalid network settings (for example, if an instance attempts to perform IP forwarding but is not enabled for IP forwarding).

items.warning.data[].value

string

[Output Only] A warning data value corresponding to the key.

nextPageToken

string

[Output Only] This token allows you to get the next page of results for list requests. If the number of results is larger thanmaxResults, use thenextPageToken as a value for the query parameterpageToken in the next list request. Subsequent list requests will have their ownnextPageToken to continue paging through the results.

selfLink

string

[Output Only] Server-defined URL for this resource.

warning

object

[Output Only] Informational warning message.

warning.code

enum

[Output Only] A warning code, if applicable. For example, Compute Engine returnsNO_RESULTS_ON_PAGE if there are no results in the response.

warning.message

string

[Output Only] A human-readable description of the warning code.

warning.data[]

object

[Output Only] Metadata about this warning inkey: value format. For example:

"data": [  {  "key": "scope",  "value": "zones/us-east1-d"  }

warning.data[].key

string

[Output Only] A key that provides more detail on the warning being returned. For example, for warnings where there are no results in a list request for a particular zone, this key might bescope and the key value might be the zone name. Other examples might be a key indicating a deprecated resource and a suggested replacement, or a warning about invalid network settings (for example, if an instance attempts to perform IP forwarding but is not enabled for IP forwarding).

warning.data[].value

string

[Output Only] A warning data value corresponding to the key.

etag

string

unreachables[]

string

[Output Only] Unreachable resources.

Authorization scopes

Requires one of the following OAuth scopes:

  • https://www.googleapis.com/auth/compute.readonly
  • https://www.googleapis.com/auth/compute
  • https://www.googleapis.com/auth/cloud-platform

For more information, see theAuthentication Overview.

IAM Permissions

In addition to any permissions specified on the fields above, authorization requires one or more of the followingIAM permissions:

  • compute.vmExtensionPolicies.list

To find predefined roles that contain those permissions, seeCompute Engine IAM Roles.

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-11-10 UTC.