type FoldersConstraintsListCall struct {// contains filtered or unexported fields}

func (*FoldersConstraintsListCall)Context¶

func (c *FoldersConstraintsListCall) Context(ctxcontext.Context) *FoldersConstraintsListCall

Context sets the context to be used in this call's Do method.

func (*FoldersConstraintsListCall)Do¶

func (c *FoldersConstraintsListCall) Do(opts ...googleapi.CallOption) (*GoogleCloudOrgpolicyV2ListConstraintsResponse,error)

Do executes the "orgpolicy.folders.constraints.list" call.Any non-2xx status code is an error. Response headers are in either*GoogleCloudOrgpolicyV2ListConstraintsResponse.ServerResponse.Header or (ifa response was returned at all) in error.(*googleapi.Error).Header. Usegoogleapi.IsNotModified to check whether the returned error was becausehttp.StatusNotModified was returned.

func (*FoldersConstraintsListCall)Fields¶

func (c *FoldersConstraintsListCall) Fields(s ...googleapi.Field) *FoldersConstraintsListCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*FoldersConstraintsListCall)Header¶

func (c *FoldersConstraintsListCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

func (*FoldersConstraintsListCall)IfNoneMatch¶

func (c *FoldersConstraintsListCall) IfNoneMatch(entityTagstring) *FoldersConstraintsListCall

IfNoneMatch sets an optional parameter which makes the operation fail if theobject's ETag matches the given value. This is useful for getting updatesonly after the object has changed since the last request.

func (*FoldersConstraintsListCall)PageSize¶

func (c *FoldersConstraintsListCall) PageSize(pageSizeint64) *FoldersConstraintsListCall

PageSize sets the optional parameter "pageSize": Size of the pages to bereturned. This is currently unsupported and will be ignored. The server mayat any point start using this field to limit page size.

func (*FoldersConstraintsListCall)PageToken¶

func (c *FoldersConstraintsListCall) PageToken(pageTokenstring) *FoldersConstraintsListCall

PageToken sets the optional parameter "pageToken": Page token used toretrieve the next page. This is currently unsupported and will be ignored.The server may at any point start using this field.

func (*FoldersConstraintsListCall)Pages¶

func (c *FoldersConstraintsListCall) Pages(ctxcontext.Context, f func(*GoogleCloudOrgpolicyV2ListConstraintsResponse)error)error

Pages invokes f for each page of results.A non-nil error returned from f will halt the iteration.The provided context supersedes any context provided to the Context method.

type FoldersConstraintsService struct {// contains filtered or unexported fields}

funcNewFoldersConstraintsService¶

func NewFoldersConstraintsService(s *Service) *FoldersConstraintsService

func (*FoldersConstraintsService)List¶

func (r *FoldersConstraintsService) List(parentstring) *FoldersConstraintsListCall

List: Lists constraints that could be applied on the specified resource.

• parent: The Google Cloud resource that parents the constraint. Must be inone of the following forms: * `projects/{project_number}` *`projects/{project_id}` * `folders/{folder_id}` *`organizations/{organization_id}`.

type FoldersPoliciesCreateCall struct {// contains filtered or unexported fields}

func (*FoldersPoliciesCreateCall)Context¶

func (c *FoldersPoliciesCreateCall) Context(ctxcontext.Context) *FoldersPoliciesCreateCall

Context sets the context to be used in this call's Do method.

func (*FoldersPoliciesCreateCall)Do¶

func (c *FoldersPoliciesCreateCall) Do(opts ...googleapi.CallOption) (*GoogleCloudOrgpolicyV2Policy,error)

Do executes the "orgpolicy.folders.policies.create" call.Any non-2xx status code is an error. Response headers are in either*GoogleCloudOrgpolicyV2Policy.ServerResponse.Header or (if a response wasreturned at all) in error.(*googleapi.Error).Header. Usegoogleapi.IsNotModified to check whether the returned error was becausehttp.StatusNotModified was returned.

func (*FoldersPoliciesCreateCall)Fields¶

func (c *FoldersPoliciesCreateCall) Fields(s ...googleapi.Field) *FoldersPoliciesCreateCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*FoldersPoliciesCreateCall)Header¶

func (c *FoldersPoliciesCreateCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

type FoldersPoliciesDeleteCall struct {// contains filtered or unexported fields}

func (*FoldersPoliciesDeleteCall)Context¶

func (c *FoldersPoliciesDeleteCall) Context(ctxcontext.Context) *FoldersPoliciesDeleteCall

Context sets the context to be used in this call's Do method.

func (*FoldersPoliciesDeleteCall)Do¶

func (c *FoldersPoliciesDeleteCall) Do(opts ...googleapi.CallOption) (*GoogleProtobufEmpty,error)

Do executes the "orgpolicy.folders.policies.delete" call.Any non-2xx status code is an error. Response headers are in either*GoogleProtobufEmpty.ServerResponse.Header or (if a response was returned atall) in error.(*googleapi.Error).Header. Use googleapi.IsNotModified tocheck whether the returned error was because http.StatusNotModified wasreturned.

func (*FoldersPoliciesDeleteCall)Etag¶added inv0.154.0

func (c *FoldersPoliciesDeleteCall) Etag(etagstring) *FoldersPoliciesDeleteCall

Etag sets the optional parameter "etag": The current etag of policy. If anetag is provided and does not match the current etag of the policy, deletionwill be blocked and an ABORTED error will be returned.

func (*FoldersPoliciesDeleteCall)Fields¶

func (c *FoldersPoliciesDeleteCall) Fields(s ...googleapi.Field) *FoldersPoliciesDeleteCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*FoldersPoliciesDeleteCall)Header¶

func (c *FoldersPoliciesDeleteCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

type FoldersPoliciesGetCall struct {// contains filtered or unexported fields}

func (*FoldersPoliciesGetCall)Context¶

func (c *FoldersPoliciesGetCall) Context(ctxcontext.Context) *FoldersPoliciesGetCall

Context sets the context to be used in this call's Do method.

func (*FoldersPoliciesGetCall)Do¶

func (c *FoldersPoliciesGetCall) Do(opts ...googleapi.CallOption) (*GoogleCloudOrgpolicyV2Policy,error)

Do executes the "orgpolicy.folders.policies.get" call.Any non-2xx status code is an error. Response headers are in either*GoogleCloudOrgpolicyV2Policy.ServerResponse.Header or (if a response wasreturned at all) in error.(*googleapi.Error).Header. Usegoogleapi.IsNotModified to check whether the returned error was becausehttp.StatusNotModified was returned.

func (*FoldersPoliciesGetCall)Fields¶

func (c *FoldersPoliciesGetCall) Fields(s ...googleapi.Field) *FoldersPoliciesGetCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*FoldersPoliciesGetCall)Header¶

func (c *FoldersPoliciesGetCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

func (*FoldersPoliciesGetCall)IfNoneMatch¶

func (c *FoldersPoliciesGetCall) IfNoneMatch(entityTagstring) *FoldersPoliciesGetCall

IfNoneMatch sets an optional parameter which makes the operation fail if theobject's ETag matches the given value. This is useful for getting updatesonly after the object has changed since the last request.

type FoldersPoliciesGetEffectivePolicyCall struct {// contains filtered or unexported fields}

func (*FoldersPoliciesGetEffectivePolicyCall)Context¶

func (c *FoldersPoliciesGetEffectivePolicyCall) Context(ctxcontext.Context) *FoldersPoliciesGetEffectivePolicyCall

Context sets the context to be used in this call's Do method.

func (*FoldersPoliciesGetEffectivePolicyCall)Do¶

func (c *FoldersPoliciesGetEffectivePolicyCall) Do(opts ...googleapi.CallOption) (*GoogleCloudOrgpolicyV2Policy,error)

Do executes the "orgpolicy.folders.policies.getEffectivePolicy" call.Any non-2xx status code is an error. Response headers are in either*GoogleCloudOrgpolicyV2Policy.ServerResponse.Header or (if a response wasreturned at all) in error.(*googleapi.Error).Header. Usegoogleapi.IsNotModified to check whether the returned error was becausehttp.StatusNotModified was returned.

func (*FoldersPoliciesGetEffectivePolicyCall)Fields¶

func (c *FoldersPoliciesGetEffectivePolicyCall) Fields(s ...googleapi.Field) *FoldersPoliciesGetEffectivePolicyCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*FoldersPoliciesGetEffectivePolicyCall)Header¶

func (c *FoldersPoliciesGetEffectivePolicyCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

func (*FoldersPoliciesGetEffectivePolicyCall)IfNoneMatch¶

func (c *FoldersPoliciesGetEffectivePolicyCall) IfNoneMatch(entityTagstring) *FoldersPoliciesGetEffectivePolicyCall

IfNoneMatch sets an optional parameter which makes the operation fail if theobject's ETag matches the given value. This is useful for getting updatesonly after the object has changed since the last request.

type FoldersPoliciesListCall struct {// contains filtered or unexported fields}

func (*FoldersPoliciesListCall)Context¶

func (c *FoldersPoliciesListCall) Context(ctxcontext.Context) *FoldersPoliciesListCall

Context sets the context to be used in this call's Do method.

func (*FoldersPoliciesListCall)Do¶

func (c *FoldersPoliciesListCall) Do(opts ...googleapi.CallOption) (*GoogleCloudOrgpolicyV2ListPoliciesResponse,error)

Do executes the "orgpolicy.folders.policies.list" call.Any non-2xx status code is an error. Response headers are in either*GoogleCloudOrgpolicyV2ListPoliciesResponse.ServerResponse.Header or (if aresponse was returned at all) in error.(*googleapi.Error).Header. Usegoogleapi.IsNotModified to check whether the returned error was becausehttp.StatusNotModified was returned.

func (*FoldersPoliciesListCall)Fields¶

func (c *FoldersPoliciesListCall) Fields(s ...googleapi.Field) *FoldersPoliciesListCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*FoldersPoliciesListCall)Header¶

func (c *FoldersPoliciesListCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

func (*FoldersPoliciesListCall)IfNoneMatch¶

func (c *FoldersPoliciesListCall) IfNoneMatch(entityTagstring) *FoldersPoliciesListCall

IfNoneMatch sets an optional parameter which makes the operation fail if theobject's ETag matches the given value. This is useful for getting updatesonly after the object has changed since the last request.

func (*FoldersPoliciesListCall)PageSize¶

func (c *FoldersPoliciesListCall) PageSize(pageSizeint64) *FoldersPoliciesListCall

PageSize sets the optional parameter "pageSize": Size of the pages to bereturned. This is currently unsupported and will be ignored. The server mayat any point start using this field to limit page size.

func (*FoldersPoliciesListCall)PageToken¶

func (c *FoldersPoliciesListCall) PageToken(pageTokenstring) *FoldersPoliciesListCall

PageToken sets the optional parameter "pageToken": Page token used toretrieve the next page. This is currently unsupported and will be ignored.The server may at any point start using this field.

func (*FoldersPoliciesListCall)Pages¶

func (c *FoldersPoliciesListCall) Pages(ctxcontext.Context, f func(*GoogleCloudOrgpolicyV2ListPoliciesResponse)error)error

Pages invokes f for each page of results.A non-nil error returned from f will halt the iteration.The provided context supersedes any context provided to the Context method.

type FoldersPoliciesPatchCall struct {// contains filtered or unexported fields}

func (*FoldersPoliciesPatchCall)Context¶

func (c *FoldersPoliciesPatchCall) Context(ctxcontext.Context) *FoldersPoliciesPatchCall

Context sets the context to be used in this call's Do method.

func (*FoldersPoliciesPatchCall)Do¶

func (c *FoldersPoliciesPatchCall) Do(opts ...googleapi.CallOption) (*GoogleCloudOrgpolicyV2Policy,error)

Do executes the "orgpolicy.folders.policies.patch" call.Any non-2xx status code is an error. Response headers are in either*GoogleCloudOrgpolicyV2Policy.ServerResponse.Header or (if a response wasreturned at all) in error.(*googleapi.Error).Header. Usegoogleapi.IsNotModified to check whether the returned error was becausehttp.StatusNotModified was returned.

func (*FoldersPoliciesPatchCall)Fields¶

func (c *FoldersPoliciesPatchCall) Fields(s ...googleapi.Field) *FoldersPoliciesPatchCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*FoldersPoliciesPatchCall)Header¶

func (c *FoldersPoliciesPatchCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

func (*FoldersPoliciesPatchCall)UpdateMask¶added inv0.108.0

func (c *FoldersPoliciesPatchCall) UpdateMask(updateMaskstring) *FoldersPoliciesPatchCall

UpdateMask sets the optional parameter "updateMask": Field mask used tospecify the fields to be overwritten in the policy by the set. The fieldsspecified in the update_mask are relative to the policy, not the fullrequest.

type FoldersPoliciesService struct {// contains filtered or unexported fields}

funcNewFoldersPoliciesService¶

func NewFoldersPoliciesService(s *Service) *FoldersPoliciesService

func (*FoldersPoliciesService)Create¶

func (r *FoldersPoliciesService) Create(parentstring, googlecloudorgpolicyv2policy *GoogleCloudOrgpolicyV2Policy) *FoldersPoliciesCreateCall

Create: Creates a policy. Returns a `google.rpc.Status` with`google.rpc.Code.NOT_FOUND` if the constraint does not exist. Returns a`google.rpc.Status` with `google.rpc.Code.ALREADY_EXISTS` if the policyalready exists on the given Google Cloud resource.

• parent: The Google Cloud resource that will parent the new policy. Must bein one of the following forms: * `projects/{project_number}` *`projects/{project_id}` * `folders/{folder_id}` *`organizations/{organization_id}`.

func (*FoldersPoliciesService)Delete¶

func (r *FoldersPoliciesService) Delete(namestring) *FoldersPoliciesDeleteCall

Delete: Deletes a policy. Returns a `google.rpc.Status` with`google.rpc.Code.NOT_FOUND` if the constraint or organization policy doesnot exist.

- name: Name of the policy to delete. See the policy entry for naming rules.

func (*FoldersPoliciesService)Get¶

func (r *FoldersPoliciesService) Get(namestring) *FoldersPoliciesGetCall

Get: Gets a policy on a resource. If no policy is set on the resource,`NOT_FOUND` is returned. The `etag` value can be used with `UpdatePolicy()`to update a policy during read-modify-write.

- name: Resource name of the policy. See Policy for naming requirements.

func (*FoldersPoliciesService)GetEffectivePolicy¶

func (r *FoldersPoliciesService) GetEffectivePolicy(namestring) *FoldersPoliciesGetEffectivePolicyCall

GetEffectivePolicy: Gets the effective policy on a resource. This is theresult of merging policies in the resource hierarchy and evaluatingconditions. The returned policy will not have an `etag` or `condition` setbecause it is an evaluated policy across multiple resources. Subtrees ofResource Manager resource hierarchy with 'under:' prefix will not beexpanded.

- name: The effective policy to compute. See Policy for naming requirements.

func (*FoldersPoliciesService)List¶

func (r *FoldersPoliciesService) List(parentstring) *FoldersPoliciesListCall

List: Retrieves all of the policies that exist on a particular resource.

• parent: The target Google Cloud resource that parents the set ofconstraints and policies that will be returned from this call. Must be inone of the following forms: * `projects/{project_number}` *`projects/{project_id}` * `folders/{folder_id}` *`organizations/{organization_id}`.

func (*FoldersPoliciesService)Patch¶

func (r *FoldersPoliciesService) Patch(namestring, googlecloudorgpolicyv2policy *GoogleCloudOrgpolicyV2Policy) *FoldersPoliciesPatchCall

Patch: Updates a policy. Returns a `google.rpc.Status` with`google.rpc.Code.NOT_FOUND` if the constraint or the policy do not exist.Returns a `google.rpc.Status` with `google.rpc.Code.ABORTED` if the etagsupplied in the request does not match the persisted etag of the policyNote: the supplied policy will perform a full overwrite of all fields.

• name: Immutable. The resource name of the policy. Must be one of thefollowing forms, where `constraint_name` is the name of the constraintwhich this policy configures: *`projects/{project_number}/policies/{constraint_name}` *`folders/{folder_id}/policies/{constraint_name}` *`organizations/{organization_id}/policies/{constraint_name}` For example,`projects/123/policies/compute.disableSerialPortAccess`. Note:`projects/{project_id}/policies/{constraint_name}` is also an acceptablename for API requests, but responses will return the name using theequivalent project number.

type FoldersService struct {Constraints *FoldersConstraintsServicePolicies *FoldersPoliciesService// contains filtered or unexported fields}

funcNewFoldersService¶

func NewFoldersService(s *Service) *FoldersService

type GoogleCloudOrgpolicyV2AlternatePolicySpec struct {// Launch: Reference to the launch that will be used while audit logging and to// control the launch. Should be set only in the alternate policy.Launchstring `json:"launch,omitempty"`// Spec: Specify constraint for configurations of Google Cloud resources.Spec *GoogleCloudOrgpolicyV2PolicySpec `json:"spec,omitempty"`// ForceSendFields is a list of field names (e.g. "Launch") to unconditionally// include in API requests. By default, fields with empty or default values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "Launch") to include in API// requests with the JSON null value. By default, fields with empty values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (GoogleCloudOrgpolicyV2AlternatePolicySpec)MarshalJSON¶added inv0.65.0

func (sGoogleCloudOrgpolicyV2AlternatePolicySpec) MarshalJSON() ([]byte,error)

type GoogleCloudOrgpolicyV2Constraint struct {// BooleanConstraint: Defines this constraint as being a boolean constraint.BooleanConstraint *GoogleCloudOrgpolicyV2ConstraintBooleanConstraint `json:"booleanConstraint,omitempty"`// ConstraintDefault: The evaluation behavior of this constraint in the absence// of a policy.//// Possible values://   "CONSTRAINT_DEFAULT_UNSPECIFIED" - This is only used for distinguishing// unset values and should never be used. Results in an error.//   "ALLOW" - Indicate that all values are allowed for list constraints.// Indicate that enforcement is off for boolean constraints.//   "DENY" - Indicate that all values are denied for list constraints.// Indicate that enforcement is on for boolean constraints.ConstraintDefaultstring `json:"constraintDefault,omitempty"`// Description: Detailed description of what this constraint controls as well// as how and where it is enforced. Mutable.Descriptionstring `json:"description,omitempty"`// DisplayName: The human readable name. Mutable.DisplayNamestring `json:"displayName,omitempty"`// EquivalentConstraint: Managed constraint and canned constraint sometimes can// have equivalents. This field is used to store the equivalent constraint// name.EquivalentConstraintstring `json:"equivalentConstraint,omitempty"`// ListConstraint: Defines this constraint as being a list constraint.ListConstraint *GoogleCloudOrgpolicyV2ConstraintListConstraint `json:"listConstraint,omitempty"`// Name: Immutable. The resource name of the constraint. Must be in one of the// following forms: * `projects/{project_number}/constraints/{constraint_name}`// * `folders/{folder_id}/constraints/{constraint_name}` *// `organizations/{organization_id}/constraints/{constraint_name}` For example,// "/projects/123/constraints/compute.disableSerialPortAccess".Namestring `json:"name,omitempty"`// SupportsDryRun: Shows if dry run is supported for this constraint or not.SupportsDryRunbool `json:"supportsDryRun,omitempty"`// SupportsSimulation: Shows if simulation is supported for this constraint or// not.SupportsSimulationbool `json:"supportsSimulation,omitempty"`// ForceSendFields is a list of field names (e.g. "BooleanConstraint") to// unconditionally include in API requests. By default, fields with empty or// default values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "BooleanConstraint") to include in// API requests with the JSON null value. By default, fields with empty values// are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (GoogleCloudOrgpolicyV2Constraint)MarshalJSON¶

func (sGoogleCloudOrgpolicyV2Constraint) MarshalJSON() ([]byte,error)

type GoogleCloudOrgpolicyV2ConstraintBooleanConstraint struct {// CustomConstraintDefinition: Custom constraint definition. Defines this as a// managed constraint.CustomConstraintDefinition *GoogleCloudOrgpolicyV2ConstraintCustomConstraintDefinition `json:"customConstraintDefinition,omitempty"`// ForceSendFields is a list of field names (e.g. "CustomConstraintDefinition")// to unconditionally include in API requests. By default, fields with empty or// default values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "CustomConstraintDefinition") to// include in API requests with the JSON null value. By default, fields with// empty values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (GoogleCloudOrgpolicyV2ConstraintBooleanConstraint)MarshalJSON¶added inv0.204.0

func (sGoogleCloudOrgpolicyV2ConstraintBooleanConstraint) MarshalJSON() ([]byte,error)

type GoogleCloudOrgpolicyV2ConstraintCustomConstraintDefinition struct {// ActionType: Allow or deny type.//// Possible values://   "ACTION_TYPE_UNSPECIFIED" - This is only used for distinguishing unset// values and should never be used. Results in an error.//   "ALLOW" - Allowed action type.//   "DENY" - Deny action type.ActionTypestring `json:"actionType,omitempty"`// Condition: Org policy condition/expression. For example:// `resource.instanceName.matches("[production|test]_.*_(\d)+")` or,// `resource.management.auto_upgrade == true` The max length of the condition// is 1000 characters.Conditionstring `json:"condition,omitempty"`// MethodTypes: All the operations being applied for this constraint.//// Possible values://   "METHOD_TYPE_UNSPECIFIED" - This is only used for distinguishing unset// values and should never be used. Results in an error.//   "CREATE" - Constraint applied when creating the resource.//   "UPDATE" - Constraint applied when updating the resource.//   "DELETE" - Constraint applied when deleting the resource. Not currently// supported.//   "REMOVE_GRANT" - Constraint applied when removing an IAM grant.//   "GOVERN_TAGS" - Constraint applied when enforcing forced tagging.MethodTypes []string `json:"methodTypes,omitempty"`// Parameters: Stores the structure of `Parameters` used by the constraint// condition. The key of `map` represents the name of the parameter.Parameters map[string]GoogleCloudOrgpolicyV2ConstraintCustomConstraintDefinitionParameter `json:"parameters,omitempty"`// ResourceTypes: The resource instance type on which this policy applies.// Format will be of the form : `/` Example: *// `compute.googleapis.com/Instance`.ResourceTypes []string `json:"resourceTypes,omitempty"`// ForceSendFields is a list of field names (e.g. "ActionType") to// unconditionally include in API requests. By default, fields with empty or// default values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "ActionType") to include in API// requests with the JSON null value. By default, fields with empty values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (GoogleCloudOrgpolicyV2ConstraintCustomConstraintDefinition)MarshalJSON¶added inv0.204.0

func (sGoogleCloudOrgpolicyV2ConstraintCustomConstraintDefinition) MarshalJSON() ([]byte,error)

type GoogleCloudOrgpolicyV2ConstraintCustomConstraintDefinitionParameter struct {// DefaultValue: Sets the value of the parameter in an assignment if no value// is given.DefaultValue interface{} `json:"defaultValue,omitempty"`// Item: Determines the parameter's value structure. For example, `LIST` can be// specified by defining `type: LIST`, and `item: STRING`.//// Possible values://   "TYPE_UNSPECIFIED" - This is only used for distinguishing unset values and// should never be used. Results in an error.//   "LIST" - List parameter type.//   "STRING" - String parameter type.//   "BOOLEAN" - Boolean parameter type.Itemstring `json:"item,omitempty"`// Metadata: Defines subproperties primarily used by the UI to display// user-friendly information.Metadata *GoogleCloudOrgpolicyV2ConstraintCustomConstraintDefinitionParameterMetadata `json:"metadata,omitempty"`// Type: Type of the parameter.//// Possible values://   "TYPE_UNSPECIFIED" - This is only used for distinguishing unset values and// should never be used. Results in an error.//   "LIST" - List parameter type.//   "STRING" - String parameter type.//   "BOOLEAN" - Boolean parameter type.Typestring `json:"type,omitempty"`// ValidValuesExpr: Provides a CEL expression to specify the acceptable// parameter values during assignment. For example, parameterName in// ("parameterValue1", "parameterValue2")ValidValuesExprstring `json:"validValuesExpr,omitempty"`// ForceSendFields is a list of field names (e.g. "DefaultValue") to// unconditionally include in API requests. By default, fields with empty or// default values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "DefaultValue") to include in API// requests with the JSON null value. By default, fields with empty values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (GoogleCloudOrgpolicyV2ConstraintCustomConstraintDefinitionParameter)MarshalJSON¶added inv0.204.0

func (sGoogleCloudOrgpolicyV2ConstraintCustomConstraintDefinitionParameter) MarshalJSON() ([]byte,error)

type GoogleCloudOrgpolicyV2ConstraintCustomConstraintDefinitionParameterMetadata struct {// Description: Detailed description of what this `parameter` is and use of it.// Mutable.Descriptionstring `json:"description,omitempty"`// ForceSendFields is a list of field names (e.g. "Description") to// unconditionally include in API requests. By default, fields with empty or// default values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "Description") to include in API// requests with the JSON null value. By default, fields with empty values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (GoogleCloudOrgpolicyV2ConstraintCustomConstraintDefinitionParameterMetadata)MarshalJSON¶added inv0.204.0

func (sGoogleCloudOrgpolicyV2ConstraintCustomConstraintDefinitionParameterMetadata) MarshalJSON() ([]byte,error)

type GoogleCloudOrgpolicyV2ConstraintListConstraint struct {// SupportsIn: Indicates whether values grouped into categories can be used in// `Policy.allowed_values` and `Policy.denied_values`. For example,// "in:Python" would match any value in the 'Python' group.SupportsInbool `json:"supportsIn,omitempty"`// SupportsUnder: Indicates whether subtrees of the Resource Manager resource// hierarchy can be used in `Policy.allowed_values` and `Policy.denied_values`.// For example, "under:folders/123" would match any resource under the// 'folders/123' folder.SupportsUnderbool `json:"supportsUnder,omitempty"`// ForceSendFields is a list of field names (e.g. "SupportsIn") to// unconditionally include in API requests. By default, fields with empty or// default values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "SupportsIn") to include in API// requests with the JSON null value. By default, fields with empty values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (GoogleCloudOrgpolicyV2ConstraintListConstraint)MarshalJSON¶

func (sGoogleCloudOrgpolicyV2ConstraintListConstraint) MarshalJSON() ([]byte,error)

type GoogleCloudOrgpolicyV2CustomConstraint struct {// ActionType: Allow or deny type.//// Possible values://   "ACTION_TYPE_UNSPECIFIED" - This is only used for distinguishing unset// values and should never be used. Results in an error.//   "ALLOW" - Allowed action type.//   "DENY" - Deny action type.ActionTypestring `json:"actionType,omitempty"`// Condition: A Common Expression Language (CEL) condition which is used in the// evaluation of the constraint. For example:// `resource.instanceName.matches("[production|test]_.*_(\d)+")` or,// `resource.management.auto_upgrade == true` The max length of the condition// is 1000 characters.Conditionstring `json:"condition,omitempty"`// Description: Detailed information about this custom policy constraint. The// max length of the description is 2000 characters.Descriptionstring `json:"description,omitempty"`// DisplayName: One line display name for the UI. The max length of the// display_name is 200 characters.DisplayNamestring `json:"displayName,omitempty"`// MethodTypes: All the operations being applied for this constraint.//// Possible values://   "METHOD_TYPE_UNSPECIFIED" - This is only used for distinguishing unset// values and should never be used. Results in an error.//   "CREATE" - Constraint applied when creating the resource.//   "UPDATE" - Constraint applied when updating the resource.//   "DELETE" - Constraint applied when deleting the resource. Not currently// supported.//   "REMOVE_GRANT" - Constraint applied when removing an IAM grant.//   "GOVERN_TAGS" - Constraint applied when enforcing forced tagging.MethodTypes []string `json:"methodTypes,omitempty"`// Name: Immutable. Name of the constraint. This is unique within the// organization. Format of the name should be *// `organizations/{organization_id}/customConstraints/{custom_constraint_id}`// Example: `organizations/123/customConstraints/custom.createOnlyE2TypeVms`// The max length is 70 characters and the minimum length is 1. Note that the// prefix `organizations/{organization_id}/customConstraints/` is not counted.Namestring `json:"name,omitempty"`// ResourceTypes: Immutable. The resource instance type on which this policy// applies. Format will be of the form : `/` Example: *// `compute.googleapis.com/Instance`.ResourceTypes []string `json:"resourceTypes,omitempty"`// UpdateTime: Output only. The last time this custom constraint was updated.// This represents the last time that the `CreateCustomConstraint` or// `UpdateCustomConstraint` methods were called.UpdateTimestring `json:"updateTime,omitempty"`// ServerResponse contains the HTTP response code and headers from the server.googleapi.ServerResponse `json:"-"`// ForceSendFields is a list of field names (e.g. "ActionType") to// unconditionally include in API requests. By default, fields with empty or// default values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "ActionType") to include in API// requests with the JSON null value. By default, fields with empty values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (GoogleCloudOrgpolicyV2CustomConstraint)MarshalJSON¶added inv0.61.0

func (sGoogleCloudOrgpolicyV2CustomConstraint) MarshalJSON() ([]byte,error)

type GoogleCloudOrgpolicyV2ListConstraintsResponse struct {// Constraints: The collection of constraints that are available on the// targeted resource.Constraints []*GoogleCloudOrgpolicyV2Constraint `json:"constraints,omitempty"`// NextPageToken: Page token used to retrieve the next page. This is currently// not used.NextPageTokenstring `json:"nextPageToken,omitempty"`// ServerResponse contains the HTTP response code and headers from the server.googleapi.ServerResponse `json:"-"`// ForceSendFields is a list of field names (e.g. "Constraints") to// unconditionally include in API requests. By default, fields with empty or// default values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "Constraints") to include in API// requests with the JSON null value. By default, fields with empty values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (GoogleCloudOrgpolicyV2ListConstraintsResponse)MarshalJSON¶

func (sGoogleCloudOrgpolicyV2ListConstraintsResponse) MarshalJSON() ([]byte,error)

type GoogleCloudOrgpolicyV2ListCustomConstraintsResponse struct {// CustomConstraints: All custom and managed constraints that exist on the// organization resource. It will be empty if no custom constraints are set.CustomConstraints []*GoogleCloudOrgpolicyV2CustomConstraint `json:"customConstraints,omitempty"`// NextPageToken: Page token used to retrieve the next page. This is currently// not used, but the server may at any point start supplying a valid token.NextPageTokenstring `json:"nextPageToken,omitempty"`// ServerResponse contains the HTTP response code and headers from the server.googleapi.ServerResponse `json:"-"`// ForceSendFields is a list of field names (e.g. "CustomConstraints") to// unconditionally include in API requests. By default, fields with empty or// default values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "CustomConstraints") to include in// API requests with the JSON null value. By default, fields with empty values// are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (GoogleCloudOrgpolicyV2ListCustomConstraintsResponse)MarshalJSON¶added inv0.94.0

func (sGoogleCloudOrgpolicyV2ListCustomConstraintsResponse) MarshalJSON() ([]byte,error)

type GoogleCloudOrgpolicyV2ListPoliciesResponse struct {// NextPageToken: Page token used to retrieve the next page. This is currently// not used, but the server may at any point start supplying a valid token.NextPageTokenstring `json:"nextPageToken,omitempty"`// Policies: All policies that exist on the resource. It will be empty if no// policies are set.Policies []*GoogleCloudOrgpolicyV2Policy `json:"policies,omitempty"`// ServerResponse contains the HTTP response code and headers from the server.googleapi.ServerResponse `json:"-"`// ForceSendFields is a list of field names (e.g. "NextPageToken") to// unconditionally include in API requests. By default, fields with empty or// default values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "NextPageToken") to include in API// requests with the JSON null value. By default, fields with empty values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (GoogleCloudOrgpolicyV2ListPoliciesResponse)MarshalJSON¶

func (sGoogleCloudOrgpolicyV2ListPoliciesResponse) MarshalJSON() ([]byte,error)

type GoogleCloudOrgpolicyV2Policy struct {// Alternate: Deprecated.Alternate *GoogleCloudOrgpolicyV2AlternatePolicySpec `json:"alternate,omitempty"`// DryRunSpec: Dry-run policy. Audit-only policy, can be used to monitor how// the policy would have impacted the existing and future resources if it's// enforced.DryRunSpec *GoogleCloudOrgpolicyV2PolicySpec `json:"dryRunSpec,omitempty"`// Etag: Optional. An opaque tag indicating the current state of the policy,// used for concurrency control. This 'etag' is computed by the server based on// the value of other fields, and may be sent on update and delete requests to// ensure the client has an up-to-date value before proceeding.Etagstring `json:"etag,omitempty"`// Name: Immutable. The resource name of the policy. Must be one of the// following forms, where `constraint_name` is the name of the constraint which// this policy configures: *// `projects/{project_number}/policies/{constraint_name}` *// `folders/{folder_id}/policies/{constraint_name}` *// `organizations/{organization_id}/policies/{constraint_name}` For example,// `projects/123/policies/compute.disableSerialPortAccess`. Note:// `projects/{project_id}/policies/{constraint_name}` is also an acceptable// name for API requests, but responses will return the name using the// equivalent project number.Namestring `json:"name,omitempty"`// Spec: Basic information about the organization policy.Spec *GoogleCloudOrgpolicyV2PolicySpec `json:"spec,omitempty"`// ServerResponse contains the HTTP response code and headers from the server.googleapi.ServerResponse `json:"-"`// ForceSendFields is a list of field names (e.g. "Alternate") to// unconditionally include in API requests. By default, fields with empty or// default values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "Alternate") to include in API// requests with the JSON null value. By default, fields with empty values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (GoogleCloudOrgpolicyV2Policy)MarshalJSON¶

func (sGoogleCloudOrgpolicyV2Policy) MarshalJSON() ([]byte,error)

type GoogleCloudOrgpolicyV2PolicySpec struct {// Etag: An opaque tag indicating the current version of the policySpec, used// for concurrency control. This field is ignored if used in a `CreatePolicy`// request. When the policy is returned from either a `GetPolicy` or a// `ListPolicies` request, this `etag` indicates the version of the current// policySpec to use when executing a read-modify-write loop. When the policy// is returned from a `GetEffectivePolicy` request, the `etag` will be unset.Etagstring `json:"etag,omitempty"`// InheritFromParent: Determines the inheritance behavior for this policy. If// `inherit_from_parent` is true, policy rules set higher up in the hierarchy// (up to the closest root) are inherited and present in the effective policy.// If it is false, then no rules are inherited, and this policy becomes the new// root for evaluation. This field can be set only for policies which configure// list constraints.InheritFromParentbool `json:"inheritFromParent,omitempty"`// Reset: Ignores policies set above this resource and restores the// `constraint_default` enforcement behavior of the specific constraint at this// resource. This field can be set in policies for either list or boolean// constraints. If set, `rules` must be empty and `inherit_from_parent` must be// set to false.Resetbool `json:"reset,omitempty"`// Rules: In policies for boolean constraints, the following requirements// apply: - There must be one and only one policy rule where condition is// unset. - Boolean policy rules with conditions must set `enforced` to the// opposite of the policy rule without a condition. - During policy evaluation,// policy rules with conditions that are true for a target resource take// precedence.Rules []*GoogleCloudOrgpolicyV2PolicySpecPolicyRule `json:"rules,omitempty"`// UpdateTime: Output only. The time stamp this was previously updated. This// represents the last time a call to `CreatePolicy` or `UpdatePolicy` was made// for that policy.UpdateTimestring `json:"updateTime,omitempty"`// ForceSendFields is a list of field names (e.g. "Etag") to unconditionally// include in API requests. By default, fields with empty or default values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "Etag") to include in API requests// with the JSON null value. By default, fields with empty values are omitted// from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (GoogleCloudOrgpolicyV2PolicySpec)MarshalJSON¶

func (sGoogleCloudOrgpolicyV2PolicySpec) MarshalJSON() ([]byte,error)

type GoogleCloudOrgpolicyV2PolicySpecPolicyRule struct {// AllowAll: Setting this to true means that all values are allowed. This field// can be set only in policies for list constraints.AllowAllbool `json:"allowAll,omitempty"`// Condition: A condition which determines whether this rule is used in the// evaluation of the policy. When set, the `expression` field in the `Expr'// must include from 1 to 10 subexpressions, joined by the "||" or "&&"// operators. Each subexpression must be of the form// "resource.matchTag('/tag_key_short_name, 'tag_value_short_name')". or// "resource.matchTagId('tagKeys/key_id', 'tagValues/value_id')". where// key_name and value_name are the resource names for Label Keys and Values.// These names are available from the Tag Manager Service. An example// expression is: "resource.matchTag('123456789/environment, 'prod')". or// "resource.matchTagId('tagKeys/123', 'tagValues/456')".Condition *GoogleTypeExpr `json:"condition,omitempty"`// DenyAll: Setting this to true means that all values are denied. This field// can be set only in policies for list constraints.DenyAllbool `json:"denyAll,omitempty"`// Enforce: If `true`, then the policy is enforced. If `false`, then any// configuration is acceptable. This field can be set in policies for boolean// constraints, custom constraints and managed constraints.Enforcebool `json:"enforce,omitempty"`// Parameters: Optional. Required for managed constraints if parameters are// defined. Passes parameter values when policy enforcement is enabled. Ensure// that parameter value types match those defined in the constraint definition.// For example: “` { "allowedLocations" : ["us-east1", "us-west1"], "allowAll"// : true } “`Parametersgoogleapi.RawMessage `json:"parameters,omitempty"`// Values: List of values to be used for this policy rule. This field can be// set only in policies for list constraints.Values *GoogleCloudOrgpolicyV2PolicySpecPolicyRuleStringValues `json:"values,omitempty"`// ForceSendFields is a list of field names (e.g. "AllowAll") to// unconditionally include in API requests. By default, fields with empty or// default values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "AllowAll") to include in API// requests with the JSON null value. By default, fields with empty values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (GoogleCloudOrgpolicyV2PolicySpecPolicyRule)MarshalJSON¶

func (sGoogleCloudOrgpolicyV2PolicySpecPolicyRule) MarshalJSON() ([]byte,error)

type GoogleCloudOrgpolicyV2PolicySpecPolicyRuleStringValues struct {// AllowedValues: List of values allowed at this resource.AllowedValues []string `json:"allowedValues,omitempty"`// DeniedValues: List of values denied at this resource.DeniedValues []string `json:"deniedValues,omitempty"`// ForceSendFields is a list of field names (e.g. "AllowedValues") to// unconditionally include in API requests. By default, fields with empty or// default values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "AllowedValues") to include in API// requests with the JSON null value. By default, fields with empty values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (GoogleCloudOrgpolicyV2PolicySpecPolicyRuleStringValues)MarshalJSON¶

func (sGoogleCloudOrgpolicyV2PolicySpecPolicyRuleStringValues) MarshalJSON() ([]byte,error)

type GoogleProtobufEmpty struct {// ServerResponse contains the HTTP response code and headers from the server.googleapi.ServerResponse `json:"-"`}

type GoogleTypeExpr struct {// Description: Optional. Description of the expression. This is a longer text// which describes the expression, e.g. when hovered over it in a UI.Descriptionstring `json:"description,omitempty"`// Expression: Textual representation of an expression in Common Expression// Language syntax.Expressionstring `json:"expression,omitempty"`// Location: Optional. String indicating the location of the expression for// error reporting, e.g. a file name and a position in the file.Locationstring `json:"location,omitempty"`// Title: Optional. Title for the expression, i.e. a short string describing// its purpose. This can be used e.g. in UIs which allow to enter the// expression.Titlestring `json:"title,omitempty"`// ForceSendFields is a list of field names (e.g. "Description") to// unconditionally include in API requests. By default, fields with empty or// default values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "Description") to include in API// requests with the JSON null value. By default, fields with empty values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (GoogleTypeExpr)MarshalJSON¶

func (sGoogleTypeExpr) MarshalJSON() ([]byte,error)

type OrganizationsConstraintsListCall struct {// contains filtered or unexported fields}

func (*OrganizationsConstraintsListCall)Context¶

func (c *OrganizationsConstraintsListCall) Context(ctxcontext.Context) *OrganizationsConstraintsListCall

Context sets the context to be used in this call's Do method.

func (*OrganizationsConstraintsListCall)Do¶

func (c *OrganizationsConstraintsListCall) Do(opts ...googleapi.CallOption) (*GoogleCloudOrgpolicyV2ListConstraintsResponse,error)

Do executes the "orgpolicy.organizations.constraints.list" call.Any non-2xx status code is an error. Response headers are in either*GoogleCloudOrgpolicyV2ListConstraintsResponse.ServerResponse.Header or (ifa response was returned at all) in error.(*googleapi.Error).Header. Usegoogleapi.IsNotModified to check whether the returned error was becausehttp.StatusNotModified was returned.

func (*OrganizationsConstraintsListCall)Fields¶

func (c *OrganizationsConstraintsListCall) Fields(s ...googleapi.Field) *OrganizationsConstraintsListCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*OrganizationsConstraintsListCall)Header¶

func (c *OrganizationsConstraintsListCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

func (*OrganizationsConstraintsListCall)IfNoneMatch¶

func (c *OrganizationsConstraintsListCall) IfNoneMatch(entityTagstring) *OrganizationsConstraintsListCall

IfNoneMatch sets an optional parameter which makes the operation fail if theobject's ETag matches the given value. This is useful for getting updatesonly after the object has changed since the last request.

func (*OrganizationsConstraintsListCall)PageSize¶

func (c *OrganizationsConstraintsListCall) PageSize(pageSizeint64) *OrganizationsConstraintsListCall

PageSize sets the optional parameter "pageSize": Size of the pages to bereturned. This is currently unsupported and will be ignored. The server mayat any point start using this field to limit page size.

func (*OrganizationsConstraintsListCall)PageToken¶

func (c *OrganizationsConstraintsListCall) PageToken(pageTokenstring) *OrganizationsConstraintsListCall

PageToken sets the optional parameter "pageToken": Page token used toretrieve the next page. This is currently unsupported and will be ignored.The server may at any point start using this field.

func (*OrganizationsConstraintsListCall)Pages¶

func (c *OrganizationsConstraintsListCall) Pages(ctxcontext.Context, f func(*GoogleCloudOrgpolicyV2ListConstraintsResponse)error)error

Pages invokes f for each page of results.A non-nil error returned from f will halt the iteration.The provided context supersedes any context provided to the Context method.

type OrganizationsConstraintsService struct {// contains filtered or unexported fields}

funcNewOrganizationsConstraintsService¶

func NewOrganizationsConstraintsService(s *Service) *OrganizationsConstraintsService

func (*OrganizationsConstraintsService)List¶

func (r *OrganizationsConstraintsService) List(parentstring) *OrganizationsConstraintsListCall

List: Lists constraints that could be applied on the specified resource.

• parent: The Google Cloud resource that parents the constraint. Must be inone of the following forms: * `projects/{project_number}` *`projects/{project_id}` * `folders/{folder_id}` *`organizations/{organization_id}`.

type OrganizationsCustomConstraintsCreateCall struct {// contains filtered or unexported fields}

func (*OrganizationsCustomConstraintsCreateCall)Context¶added inv0.94.0

func (c *OrganizationsCustomConstraintsCreateCall) Context(ctxcontext.Context) *OrganizationsCustomConstraintsCreateCall

Context sets the context to be used in this call's Do method.

func (*OrganizationsCustomConstraintsCreateCall)Do¶added inv0.94.0

func (c *OrganizationsCustomConstraintsCreateCall) Do(opts ...googleapi.CallOption) (*GoogleCloudOrgpolicyV2CustomConstraint,error)

Do executes the "orgpolicy.organizations.customConstraints.create" call.Any non-2xx status code is an error. Response headers are in either*GoogleCloudOrgpolicyV2CustomConstraint.ServerResponse.Header or (if aresponse was returned at all) in error.(*googleapi.Error).Header. Usegoogleapi.IsNotModified to check whether the returned error was becausehttp.StatusNotModified was returned.

func (*OrganizationsCustomConstraintsCreateCall)Fields¶added inv0.94.0

func (c *OrganizationsCustomConstraintsCreateCall) Fields(s ...googleapi.Field) *OrganizationsCustomConstraintsCreateCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*OrganizationsCustomConstraintsCreateCall)Header¶added inv0.94.0

func (c *OrganizationsCustomConstraintsCreateCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

type OrganizationsCustomConstraintsDeleteCall struct {// contains filtered or unexported fields}

func (*OrganizationsCustomConstraintsDeleteCall)Context¶added inv0.94.0

func (c *OrganizationsCustomConstraintsDeleteCall) Context(ctxcontext.Context) *OrganizationsCustomConstraintsDeleteCall

Context sets the context to be used in this call's Do method.

func (*OrganizationsCustomConstraintsDeleteCall)Do¶added inv0.94.0

func (c *OrganizationsCustomConstraintsDeleteCall) Do(opts ...googleapi.CallOption) (*GoogleProtobufEmpty,error)

Do executes the "orgpolicy.organizations.customConstraints.delete" call.Any non-2xx status code is an error. Response headers are in either*GoogleProtobufEmpty.ServerResponse.Header or (if a response was returned atall) in error.(*googleapi.Error).Header. Use googleapi.IsNotModified tocheck whether the returned error was because http.StatusNotModified wasreturned.

func (*OrganizationsCustomConstraintsDeleteCall)Fields¶added inv0.94.0

func (c *OrganizationsCustomConstraintsDeleteCall) Fields(s ...googleapi.Field) *OrganizationsCustomConstraintsDeleteCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*OrganizationsCustomConstraintsDeleteCall)Header¶added inv0.94.0

func (c *OrganizationsCustomConstraintsDeleteCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

type OrganizationsCustomConstraintsGetCall struct {// contains filtered or unexported fields}

func (*OrganizationsCustomConstraintsGetCall)Context¶added inv0.94.0

func (c *OrganizationsCustomConstraintsGetCall) Context(ctxcontext.Context) *OrganizationsCustomConstraintsGetCall

Context sets the context to be used in this call's Do method.

func (*OrganizationsCustomConstraintsGetCall)Do¶added inv0.94.0

func (c *OrganizationsCustomConstraintsGetCall) Do(opts ...googleapi.CallOption) (*GoogleCloudOrgpolicyV2CustomConstraint,error)

Do executes the "orgpolicy.organizations.customConstraints.get" call.Any non-2xx status code is an error. Response headers are in either*GoogleCloudOrgpolicyV2CustomConstraint.ServerResponse.Header or (if aresponse was returned at all) in error.(*googleapi.Error).Header. Usegoogleapi.IsNotModified to check whether the returned error was becausehttp.StatusNotModified was returned.

func (*OrganizationsCustomConstraintsGetCall)Fields¶added inv0.94.0

func (c *OrganizationsCustomConstraintsGetCall) Fields(s ...googleapi.Field) *OrganizationsCustomConstraintsGetCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*OrganizationsCustomConstraintsGetCall)Header¶added inv0.94.0

func (c *OrganizationsCustomConstraintsGetCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

func (*OrganizationsCustomConstraintsGetCall)IfNoneMatch¶added inv0.94.0

func (c *OrganizationsCustomConstraintsGetCall) IfNoneMatch(entityTagstring) *OrganizationsCustomConstraintsGetCall

IfNoneMatch sets an optional parameter which makes the operation fail if theobject's ETag matches the given value. This is useful for getting updatesonly after the object has changed since the last request.

type OrganizationsCustomConstraintsListCall struct {// contains filtered or unexported fields}

func (*OrganizationsCustomConstraintsListCall)Context¶added inv0.94.0

func (c *OrganizationsCustomConstraintsListCall) Context(ctxcontext.Context) *OrganizationsCustomConstraintsListCall

Context sets the context to be used in this call's Do method.

func (*OrganizationsCustomConstraintsListCall)Do¶added inv0.94.0

func (c *OrganizationsCustomConstraintsListCall) Do(opts ...googleapi.CallOption) (*GoogleCloudOrgpolicyV2ListCustomConstraintsResponse,error)

Do executes the "orgpolicy.organizations.customConstraints.list" call.Any non-2xx status code is an error. Response headers are in either*GoogleCloudOrgpolicyV2ListCustomConstraintsResponse.ServerResponse.Headeror (if a response was returned at all) in error.(*googleapi.Error).Header.Use googleapi.IsNotModified to check whether the returned error was becausehttp.StatusNotModified was returned.

func (*OrganizationsCustomConstraintsListCall)Fields¶added inv0.94.0

func (c *OrganizationsCustomConstraintsListCall) Fields(s ...googleapi.Field) *OrganizationsCustomConstraintsListCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*OrganizationsCustomConstraintsListCall)Header¶added inv0.94.0

func (c *OrganizationsCustomConstraintsListCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

func (*OrganizationsCustomConstraintsListCall)IfNoneMatch¶added inv0.94.0

func (c *OrganizationsCustomConstraintsListCall) IfNoneMatch(entityTagstring) *OrganizationsCustomConstraintsListCall

IfNoneMatch sets an optional parameter which makes the operation fail if theobject's ETag matches the given value. This is useful for getting updatesonly after the object has changed since the last request.

func (*OrganizationsCustomConstraintsListCall)PageSize¶added inv0.94.0

func (c *OrganizationsCustomConstraintsListCall) PageSize(pageSizeint64) *OrganizationsCustomConstraintsListCall

PageSize sets the optional parameter "pageSize": Size of the pages to bereturned. This is currently unsupported and will be ignored. The server mayat any point start using this field to limit page size.

func (*OrganizationsCustomConstraintsListCall)PageToken¶added inv0.94.0

func (c *OrganizationsCustomConstraintsListCall) PageToken(pageTokenstring) *OrganizationsCustomConstraintsListCall

PageToken sets the optional parameter "pageToken": Page token used toretrieve the next page. This is currently unsupported and will be ignored.The server may at any point start using this field.

func (*OrganizationsCustomConstraintsListCall)Pages¶added inv0.94.0

func (c *OrganizationsCustomConstraintsListCall) Pages(ctxcontext.Context, f func(*GoogleCloudOrgpolicyV2ListCustomConstraintsResponse)error)error

Pages invokes f for each page of results.A non-nil error returned from f will halt the iteration.The provided context supersedes any context provided to the Context method.

type OrganizationsCustomConstraintsPatchCall struct {// contains filtered or unexported fields}

func (*OrganizationsCustomConstraintsPatchCall)Context¶added inv0.61.0

func (c *OrganizationsCustomConstraintsPatchCall) Context(ctxcontext.Context) *OrganizationsCustomConstraintsPatchCall

Context sets the context to be used in this call's Do method.

func (*OrganizationsCustomConstraintsPatchCall)Do¶added inv0.61.0

func (c *OrganizationsCustomConstraintsPatchCall) Do(opts ...googleapi.CallOption) (*GoogleCloudOrgpolicyV2CustomConstraint,error)

Do executes the "orgpolicy.organizations.customConstraints.patch" call.Any non-2xx status code is an error. Response headers are in either*GoogleCloudOrgpolicyV2CustomConstraint.ServerResponse.Header or (if aresponse was returned at all) in error.(*googleapi.Error).Header. Usegoogleapi.IsNotModified to check whether the returned error was becausehttp.StatusNotModified was returned.

func (*OrganizationsCustomConstraintsPatchCall)Fields¶added inv0.61.0

func (c *OrganizationsCustomConstraintsPatchCall) Fields(s ...googleapi.Field) *OrganizationsCustomConstraintsPatchCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*OrganizationsCustomConstraintsPatchCall)Header¶added inv0.61.0

func (c *OrganizationsCustomConstraintsPatchCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

type OrganizationsCustomConstraintsService struct {// contains filtered or unexported fields}

funcNewOrganizationsCustomConstraintsService¶added inv0.61.0

func NewOrganizationsCustomConstraintsService(s *Service) *OrganizationsCustomConstraintsService

func (*OrganizationsCustomConstraintsService)Create¶added inv0.94.0

func (r *OrganizationsCustomConstraintsService) Create(parentstring, googlecloudorgpolicyv2customconstraint *GoogleCloudOrgpolicyV2CustomConstraint) *OrganizationsCustomConstraintsCreateCall

Create: Creates a custom constraint. Returns a `google.rpc.Status` with`google.rpc.Code.NOT_FOUND` if the organization does not exist. Returns a`google.rpc.Status` with `google.rpc.Code.ALREADY_EXISTS` if the constraintalready exists on the given organization.

- parent: Must be in the following form: * `organizations/{organization_id}`.

func (*OrganizationsCustomConstraintsService)Delete¶added inv0.94.0

func (r *OrganizationsCustomConstraintsService) Delete(namestring) *OrganizationsCustomConstraintsDeleteCall

Delete: Deletes a custom constraint. Returns a `google.rpc.Status` with`google.rpc.Code.NOT_FOUND` if the constraint does not exist.

• name: Name of the custom constraint to delete. See the custom constraintentry for naming rules.

func (*OrganizationsCustomConstraintsService)Get¶added inv0.94.0

func (r *OrganizationsCustomConstraintsService) Get(namestring) *OrganizationsCustomConstraintsGetCall

Get: Gets a custom or managed constraint. Returns a `google.rpc.Status` with`google.rpc.Code.NOT_FOUND` if the custom or managed constraint does notexist.

• name: Resource name of the custom or managed constraint. See the customconstraint entry for naming requirements.

func (*OrganizationsCustomConstraintsService)List¶added inv0.94.0

func (r *OrganizationsCustomConstraintsService) List(parentstring) *OrganizationsCustomConstraintsListCall

List: Retrieves all of the custom constraints that exist on a particularorganization resource.

• parent: The target Google Cloud resource that parents the set of customconstraints that will be returned from this call. Must be in one of thefollowing forms: * `organizations/{organization_id}`.

func (*OrganizationsCustomConstraintsService)Patch¶added inv0.61.0

func (r *OrganizationsCustomConstraintsService) Patch(namestring, googlecloudorgpolicyv2customconstraint *GoogleCloudOrgpolicyV2CustomConstraint) *OrganizationsCustomConstraintsPatchCall

Patch: Updates a custom constraint. Returns a `google.rpc.Status` with`google.rpc.Code.NOT_FOUND` if the constraint does not exist. Note: thesupplied policy will perform a full overwrite of all fields.

• name: Immutable. Name of the constraint. This is unique within theorganization. Format of the name should be *`organizations/{organization_id}/customConstraints/{custom_constraint_id}`Example: `organizations/123/customConstraints/custom.createOnlyE2TypeVms`The max length is 70 characters and the minimum length is 1. Note that theprefix `organizations/{organization_id}/customConstraints/` is notcounted.

type OrganizationsPoliciesCreateCall struct {// contains filtered or unexported fields}

func (*OrganizationsPoliciesCreateCall)Context¶

func (c *OrganizationsPoliciesCreateCall) Context(ctxcontext.Context) *OrganizationsPoliciesCreateCall

Context sets the context to be used in this call's Do method.

func (*OrganizationsPoliciesCreateCall)Do¶

func (c *OrganizationsPoliciesCreateCall) Do(opts ...googleapi.CallOption) (*GoogleCloudOrgpolicyV2Policy,error)

Do executes the "orgpolicy.organizations.policies.create" call.Any non-2xx status code is an error. Response headers are in either*GoogleCloudOrgpolicyV2Policy.ServerResponse.Header or (if a response wasreturned at all) in error.(*googleapi.Error).Header. Usegoogleapi.IsNotModified to check whether the returned error was becausehttp.StatusNotModified was returned.

func (*OrganizationsPoliciesCreateCall)Fields¶

func (c *OrganizationsPoliciesCreateCall) Fields(s ...googleapi.Field) *OrganizationsPoliciesCreateCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*OrganizationsPoliciesCreateCall)Header¶

func (c *OrganizationsPoliciesCreateCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

type OrganizationsPoliciesDeleteCall struct {// contains filtered or unexported fields}

func (*OrganizationsPoliciesDeleteCall)Context¶

func (c *OrganizationsPoliciesDeleteCall) Context(ctxcontext.Context) *OrganizationsPoliciesDeleteCall

Context sets the context to be used in this call's Do method.

func (*OrganizationsPoliciesDeleteCall)Do¶

func (c *OrganizationsPoliciesDeleteCall) Do(opts ...googleapi.CallOption) (*GoogleProtobufEmpty,error)

Do executes the "orgpolicy.organizations.policies.delete" call.Any non-2xx status code is an error. Response headers are in either*GoogleProtobufEmpty.ServerResponse.Header or (if a response was returned atall) in error.(*googleapi.Error).Header. Use googleapi.IsNotModified tocheck whether the returned error was because http.StatusNotModified wasreturned.

func (*OrganizationsPoliciesDeleteCall)Etag¶added inv0.154.0

func (c *OrganizationsPoliciesDeleteCall) Etag(etagstring) *OrganizationsPoliciesDeleteCall

Etag sets the optional parameter "etag": The current etag of policy. If anetag is provided and does not match the current etag of the policy, deletionwill be blocked and an ABORTED error will be returned.

func (*OrganizationsPoliciesDeleteCall)Fields¶

func (c *OrganizationsPoliciesDeleteCall) Fields(s ...googleapi.Field) *OrganizationsPoliciesDeleteCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*OrganizationsPoliciesDeleteCall)Header¶

func (c *OrganizationsPoliciesDeleteCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

type OrganizationsPoliciesGetCall struct {// contains filtered or unexported fields}

func (*OrganizationsPoliciesGetCall)Context¶

func (c *OrganizationsPoliciesGetCall) Context(ctxcontext.Context) *OrganizationsPoliciesGetCall

Context sets the context to be used in this call's Do method.

func (*OrganizationsPoliciesGetCall)Do¶

func (c *OrganizationsPoliciesGetCall) Do(opts ...googleapi.CallOption) (*GoogleCloudOrgpolicyV2Policy,error)

Do executes the "orgpolicy.organizations.policies.get" call.Any non-2xx status code is an error. Response headers are in either*GoogleCloudOrgpolicyV2Policy.ServerResponse.Header or (if a response wasreturned at all) in error.(*googleapi.Error).Header. Usegoogleapi.IsNotModified to check whether the returned error was becausehttp.StatusNotModified was returned.

func (*OrganizationsPoliciesGetCall)Fields¶

func (c *OrganizationsPoliciesGetCall) Fields(s ...googleapi.Field) *OrganizationsPoliciesGetCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*OrganizationsPoliciesGetCall)Header¶

func (c *OrganizationsPoliciesGetCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

func (*OrganizationsPoliciesGetCall)IfNoneMatch¶

func (c *OrganizationsPoliciesGetCall) IfNoneMatch(entityTagstring) *OrganizationsPoliciesGetCall

IfNoneMatch sets an optional parameter which makes the operation fail if theobject's ETag matches the given value. This is useful for getting updatesonly after the object has changed since the last request.

type OrganizationsPoliciesGetEffectivePolicyCall struct {// contains filtered or unexported fields}

func (*OrganizationsPoliciesGetEffectivePolicyCall)Context¶

func (c *OrganizationsPoliciesGetEffectivePolicyCall) Context(ctxcontext.Context) *OrganizationsPoliciesGetEffectivePolicyCall

Context sets the context to be used in this call's Do method.

func (*OrganizationsPoliciesGetEffectivePolicyCall)Do¶

func (c *OrganizationsPoliciesGetEffectivePolicyCall) Do(opts ...googleapi.CallOption) (*GoogleCloudOrgpolicyV2Policy,error)

Do executes the "orgpolicy.organizations.policies.getEffectivePolicy" call.Any non-2xx status code is an error. Response headers are in either*GoogleCloudOrgpolicyV2Policy.ServerResponse.Header or (if a response wasreturned at all) in error.(*googleapi.Error).Header. Usegoogleapi.IsNotModified to check whether the returned error was becausehttp.StatusNotModified was returned.

func (*OrganizationsPoliciesGetEffectivePolicyCall)Fields¶

func (c *OrganizationsPoliciesGetEffectivePolicyCall) Fields(s ...googleapi.Field) *OrganizationsPoliciesGetEffectivePolicyCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*OrganizationsPoliciesGetEffectivePolicyCall)Header¶

func (c *OrganizationsPoliciesGetEffectivePolicyCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

func (*OrganizationsPoliciesGetEffectivePolicyCall)IfNoneMatch¶

func (c *OrganizationsPoliciesGetEffectivePolicyCall) IfNoneMatch(entityTagstring) *OrganizationsPoliciesGetEffectivePolicyCall

IfNoneMatch sets an optional parameter which makes the operation fail if theobject's ETag matches the given value. This is useful for getting updatesonly after the object has changed since the last request.

type OrganizationsPoliciesListCall struct {// contains filtered or unexported fields}

func (*OrganizationsPoliciesListCall)Context¶

func (c *OrganizationsPoliciesListCall) Context(ctxcontext.Context) *OrganizationsPoliciesListCall

Context sets the context to be used in this call's Do method.

func (*OrganizationsPoliciesListCall)Do¶

func (c *OrganizationsPoliciesListCall) Do(opts ...googleapi.CallOption) (*GoogleCloudOrgpolicyV2ListPoliciesResponse,error)

Do executes the "orgpolicy.organizations.policies.list" call.Any non-2xx status code is an error. Response headers are in either*GoogleCloudOrgpolicyV2ListPoliciesResponse.ServerResponse.Header or (if aresponse was returned at all) in error.(*googleapi.Error).Header. Usegoogleapi.IsNotModified to check whether the returned error was becausehttp.StatusNotModified was returned.

func (*OrganizationsPoliciesListCall)Fields¶

func (c *OrganizationsPoliciesListCall) Fields(s ...googleapi.Field) *OrganizationsPoliciesListCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*OrganizationsPoliciesListCall)Header¶

func (c *OrganizationsPoliciesListCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

func (*OrganizationsPoliciesListCall)IfNoneMatch¶

func (c *OrganizationsPoliciesListCall) IfNoneMatch(entityTagstring) *OrganizationsPoliciesListCall

IfNoneMatch sets an optional parameter which makes the operation fail if theobject's ETag matches the given value. This is useful for getting updatesonly after the object has changed since the last request.

func (*OrganizationsPoliciesListCall)PageSize¶

func (c *OrganizationsPoliciesListCall) PageSize(pageSizeint64) *OrganizationsPoliciesListCall

PageSize sets the optional parameter "pageSize": Size of the pages to bereturned. This is currently unsupported and will be ignored. The server mayat any point start using this field to limit page size.

func (*OrganizationsPoliciesListCall)PageToken¶

func (c *OrganizationsPoliciesListCall) PageToken(pageTokenstring) *OrganizationsPoliciesListCall

PageToken sets the optional parameter "pageToken": Page token used toretrieve the next page. This is currently unsupported and will be ignored.The server may at any point start using this field.

func (*OrganizationsPoliciesListCall)Pages¶

func (c *OrganizationsPoliciesListCall) Pages(ctxcontext.Context, f func(*GoogleCloudOrgpolicyV2ListPoliciesResponse)error)error

Pages invokes f for each page of results.A non-nil error returned from f will halt the iteration.The provided context supersedes any context provided to the Context method.

type OrganizationsPoliciesPatchCall struct {// contains filtered or unexported fields}

func (*OrganizationsPoliciesPatchCall)Context¶

func (c *OrganizationsPoliciesPatchCall) Context(ctxcontext.Context) *OrganizationsPoliciesPatchCall

Context sets the context to be used in this call's Do method.

func (*OrganizationsPoliciesPatchCall)Do¶

func (c *OrganizationsPoliciesPatchCall) Do(opts ...googleapi.CallOption) (*GoogleCloudOrgpolicyV2Policy,error)

Do executes the "orgpolicy.organizations.policies.patch" call.Any non-2xx status code is an error. Response headers are in either*GoogleCloudOrgpolicyV2Policy.ServerResponse.Header or (if a response wasreturned at all) in error.(*googleapi.Error).Header. Usegoogleapi.IsNotModified to check whether the returned error was becausehttp.StatusNotModified was returned.

func (*OrganizationsPoliciesPatchCall)Fields¶

func (c *OrganizationsPoliciesPatchCall) Fields(s ...googleapi.Field) *OrganizationsPoliciesPatchCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*OrganizationsPoliciesPatchCall)Header¶

func (c *OrganizationsPoliciesPatchCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

func (*OrganizationsPoliciesPatchCall)UpdateMask¶added inv0.108.0

func (c *OrganizationsPoliciesPatchCall) UpdateMask(updateMaskstring) *OrganizationsPoliciesPatchCall

UpdateMask sets the optional parameter "updateMask": Field mask used tospecify the fields to be overwritten in the policy by the set. The fieldsspecified in the update_mask are relative to the policy, not the fullrequest.

type OrganizationsPoliciesService struct {// contains filtered or unexported fields}

funcNewOrganizationsPoliciesService¶

func NewOrganizationsPoliciesService(s *Service) *OrganizationsPoliciesService

func (*OrganizationsPoliciesService)Create¶

func (r *OrganizationsPoliciesService) Create(parentstring, googlecloudorgpolicyv2policy *GoogleCloudOrgpolicyV2Policy) *OrganizationsPoliciesCreateCall

Create: Creates a policy. Returns a `google.rpc.Status` with`google.rpc.Code.NOT_FOUND` if the constraint does not exist. Returns a`google.rpc.Status` with `google.rpc.Code.ALREADY_EXISTS` if the policyalready exists on the given Google Cloud resource.

• parent: The Google Cloud resource that will parent the new policy. Must bein one of the following forms: * `projects/{project_number}` *`projects/{project_id}` * `folders/{folder_id}` *`organizations/{organization_id}`.

func (*OrganizationsPoliciesService)Delete¶

func (r *OrganizationsPoliciesService) Delete(namestring) *OrganizationsPoliciesDeleteCall

Delete: Deletes a policy. Returns a `google.rpc.Status` with`google.rpc.Code.NOT_FOUND` if the constraint or organization policy doesnot exist.

- name: Name of the policy to delete. See the policy entry for naming rules.

func (*OrganizationsPoliciesService)Get¶

func (r *OrganizationsPoliciesService) Get(namestring) *OrganizationsPoliciesGetCall

Get: Gets a policy on a resource. If no policy is set on the resource,`NOT_FOUND` is returned. The `etag` value can be used with `UpdatePolicy()`to update a policy during read-modify-write.

- name: Resource name of the policy. See Policy for naming requirements.

func (*OrganizationsPoliciesService)GetEffectivePolicy¶

func (r *OrganizationsPoliciesService) GetEffectivePolicy(namestring) *OrganizationsPoliciesGetEffectivePolicyCall

GetEffectivePolicy: Gets the effective policy on a resource. This is theresult of merging policies in the resource hierarchy and evaluatingconditions. The returned policy will not have an `etag` or `condition` setbecause it is an evaluated policy across multiple resources. Subtrees ofResource Manager resource hierarchy with 'under:' prefix will not beexpanded.

- name: The effective policy to compute. See Policy for naming requirements.

func (*OrganizationsPoliciesService)List¶

func (r *OrganizationsPoliciesService) List(parentstring) *OrganizationsPoliciesListCall

List: Retrieves all of the policies that exist on a particular resource.

• parent: The target Google Cloud resource that parents the set ofconstraints and policies that will be returned from this call. Must be inone of the following forms: * `projects/{project_number}` *`projects/{project_id}` * `folders/{folder_id}` *`organizations/{organization_id}`.

func (*OrganizationsPoliciesService)Patch¶

func (r *OrganizationsPoliciesService) Patch(namestring, googlecloudorgpolicyv2policy *GoogleCloudOrgpolicyV2Policy) *OrganizationsPoliciesPatchCall

Patch: Updates a policy. Returns a `google.rpc.Status` with`google.rpc.Code.NOT_FOUND` if the constraint or the policy do not exist.Returns a `google.rpc.Status` with `google.rpc.Code.ABORTED` if the etagsupplied in the request does not match the persisted etag of the policyNote: the supplied policy will perform a full overwrite of all fields.

• name: Immutable. The resource name of the policy. Must be one of thefollowing forms, where `constraint_name` is the name of the constraintwhich this policy configures: *`projects/{project_number}/policies/{constraint_name}` *`folders/{folder_id}/policies/{constraint_name}` *`organizations/{organization_id}/policies/{constraint_name}` For example,`projects/123/policies/compute.disableSerialPortAccess`. Note:`projects/{project_id}/policies/{constraint_name}` is also an acceptablename for API requests, but responses will return the name using theequivalent project number.

type OrganizationsService struct {Constraints *OrganizationsConstraintsServiceCustomConstraints *OrganizationsCustomConstraintsServicePolicies *OrganizationsPoliciesService// contains filtered or unexported fields}

funcNewOrganizationsService¶

func NewOrganizationsService(s *Service) *OrganizationsService

type ProjectsConstraintsListCall struct {// contains filtered or unexported fields}

func (*ProjectsConstraintsListCall)Context¶

func (c *ProjectsConstraintsListCall) Context(ctxcontext.Context) *ProjectsConstraintsListCall

Context sets the context to be used in this call's Do method.

func (*ProjectsConstraintsListCall)Do¶

func (c *ProjectsConstraintsListCall) Do(opts ...googleapi.CallOption) (*GoogleCloudOrgpolicyV2ListConstraintsResponse,error)

Do executes the "orgpolicy.projects.constraints.list" call.Any non-2xx status code is an error. Response headers are in either*GoogleCloudOrgpolicyV2ListConstraintsResponse.ServerResponse.Header or (ifa response was returned at all) in error.(*googleapi.Error).Header. Usegoogleapi.IsNotModified to check whether the returned error was becausehttp.StatusNotModified was returned.

func (*ProjectsConstraintsListCall)Fields¶

func (c *ProjectsConstraintsListCall) Fields(s ...googleapi.Field) *ProjectsConstraintsListCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*ProjectsConstraintsListCall)Header¶

func (c *ProjectsConstraintsListCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

func (*ProjectsConstraintsListCall)IfNoneMatch¶

func (c *ProjectsConstraintsListCall) IfNoneMatch(entityTagstring) *ProjectsConstraintsListCall

IfNoneMatch sets an optional parameter which makes the operation fail if theobject's ETag matches the given value. This is useful for getting updatesonly after the object has changed since the last request.

func (*ProjectsConstraintsListCall)PageSize¶

func (c *ProjectsConstraintsListCall) PageSize(pageSizeint64) *ProjectsConstraintsListCall

PageSize sets the optional parameter "pageSize": Size of the pages to bereturned. This is currently unsupported and will be ignored. The server mayat any point start using this field to limit page size.

func (*ProjectsConstraintsListCall)PageToken¶

func (c *ProjectsConstraintsListCall) PageToken(pageTokenstring) *ProjectsConstraintsListCall

PageToken sets the optional parameter "pageToken": Page token used toretrieve the next page. This is currently unsupported and will be ignored.The server may at any point start using this field.

func (*ProjectsConstraintsListCall)Pages¶

func (c *ProjectsConstraintsListCall) Pages(ctxcontext.Context, f func(*GoogleCloudOrgpolicyV2ListConstraintsResponse)error)error

Pages invokes f for each page of results.A non-nil error returned from f will halt the iteration.The provided context supersedes any context provided to the Context method.

type ProjectsConstraintsService struct {// contains filtered or unexported fields}

funcNewProjectsConstraintsService¶

func NewProjectsConstraintsService(s *Service) *ProjectsConstraintsService

func (*ProjectsConstraintsService)List¶

func (r *ProjectsConstraintsService) List(parentstring) *ProjectsConstraintsListCall

List: Lists constraints that could be applied on the specified resource.

• parent: The Google Cloud resource that parents the constraint. Must be inone of the following forms: * `projects/{project_number}` *`projects/{project_id}` * `folders/{folder_id}` *`organizations/{organization_id}`.

type ProjectsPoliciesCreateCall struct {// contains filtered or unexported fields}

func (*ProjectsPoliciesCreateCall)Context¶

func (c *ProjectsPoliciesCreateCall) Context(ctxcontext.Context) *ProjectsPoliciesCreateCall

Context sets the context to be used in this call's Do method.

func (*ProjectsPoliciesCreateCall)Do¶

func (c *ProjectsPoliciesCreateCall) Do(opts ...googleapi.CallOption) (*GoogleCloudOrgpolicyV2Policy,error)

Do executes the "orgpolicy.projects.policies.create" call.Any non-2xx status code is an error. Response headers are in either*GoogleCloudOrgpolicyV2Policy.ServerResponse.Header or (if a response wasreturned at all) in error.(*googleapi.Error).Header. Usegoogleapi.IsNotModified to check whether the returned error was becausehttp.StatusNotModified was returned.

func (*ProjectsPoliciesCreateCall)Fields¶

func (c *ProjectsPoliciesCreateCall) Fields(s ...googleapi.Field) *ProjectsPoliciesCreateCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*ProjectsPoliciesCreateCall)Header¶

func (c *ProjectsPoliciesCreateCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

type ProjectsPoliciesDeleteCall struct {// contains filtered or unexported fields}

func (*ProjectsPoliciesDeleteCall)Context¶

func (c *ProjectsPoliciesDeleteCall) Context(ctxcontext.Context) *ProjectsPoliciesDeleteCall

Context sets the context to be used in this call's Do method.

func (*ProjectsPoliciesDeleteCall)Do¶

func (c *ProjectsPoliciesDeleteCall) Do(opts ...googleapi.CallOption) (*GoogleProtobufEmpty,error)

Do executes the "orgpolicy.projects.policies.delete" call.Any non-2xx status code is an error. Response headers are in either*GoogleProtobufEmpty.ServerResponse.Header or (if a response was returned atall) in error.(*googleapi.Error).Header. Use googleapi.IsNotModified tocheck whether the returned error was because http.StatusNotModified wasreturned.

func (*ProjectsPoliciesDeleteCall)Etag¶added inv0.154.0

func (c *ProjectsPoliciesDeleteCall) Etag(etagstring) *ProjectsPoliciesDeleteCall

Etag sets the optional parameter "etag": The current etag of policy. If anetag is provided and does not match the current etag of the policy, deletionwill be blocked and an ABORTED error will be returned.

func (*ProjectsPoliciesDeleteCall)Fields¶

func (c *ProjectsPoliciesDeleteCall) Fields(s ...googleapi.Field) *ProjectsPoliciesDeleteCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*ProjectsPoliciesDeleteCall)Header¶

func (c *ProjectsPoliciesDeleteCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

type ProjectsPoliciesGetCall struct {// contains filtered or unexported fields}

func (*ProjectsPoliciesGetCall)Context¶

func (c *ProjectsPoliciesGetCall) Context(ctxcontext.Context) *ProjectsPoliciesGetCall

Context sets the context to be used in this call's Do method.

func (*ProjectsPoliciesGetCall)Do¶

func (c *ProjectsPoliciesGetCall) Do(opts ...googleapi.CallOption) (*GoogleCloudOrgpolicyV2Policy,error)

Do executes the "orgpolicy.projects.policies.get" call.Any non-2xx status code is an error. Response headers are in either*GoogleCloudOrgpolicyV2Policy.ServerResponse.Header or (if a response wasreturned at all) in error.(*googleapi.Error).Header. Usegoogleapi.IsNotModified to check whether the returned error was becausehttp.StatusNotModified was returned.

func (*ProjectsPoliciesGetCall)Fields¶

func (c *ProjectsPoliciesGetCall) Fields(s ...googleapi.Field) *ProjectsPoliciesGetCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*ProjectsPoliciesGetCall)Header¶

func (c *ProjectsPoliciesGetCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

func (*ProjectsPoliciesGetCall)IfNoneMatch¶

func (c *ProjectsPoliciesGetCall) IfNoneMatch(entityTagstring) *ProjectsPoliciesGetCall

IfNoneMatch sets an optional parameter which makes the operation fail if theobject's ETag matches the given value. This is useful for getting updatesonly after the object has changed since the last request.

type ProjectsPoliciesGetEffectivePolicyCall struct {// contains filtered or unexported fields}

func (*ProjectsPoliciesGetEffectivePolicyCall)Context¶

func (c *ProjectsPoliciesGetEffectivePolicyCall) Context(ctxcontext.Context) *ProjectsPoliciesGetEffectivePolicyCall

Context sets the context to be used in this call's Do method.

func (*ProjectsPoliciesGetEffectivePolicyCall)Do¶

func (c *ProjectsPoliciesGetEffectivePolicyCall) Do(opts ...googleapi.CallOption) (*GoogleCloudOrgpolicyV2Policy,error)

Do executes the "orgpolicy.projects.policies.getEffectivePolicy" call.Any non-2xx status code is an error. Response headers are in either*GoogleCloudOrgpolicyV2Policy.ServerResponse.Header or (if a response wasreturned at all) in error.(*googleapi.Error).Header. Usegoogleapi.IsNotModified to check whether the returned error was becausehttp.StatusNotModified was returned.

func (*ProjectsPoliciesGetEffectivePolicyCall)Fields¶

func (c *ProjectsPoliciesGetEffectivePolicyCall) Fields(s ...googleapi.Field) *ProjectsPoliciesGetEffectivePolicyCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*ProjectsPoliciesGetEffectivePolicyCall)Header¶

func (c *ProjectsPoliciesGetEffectivePolicyCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

func (*ProjectsPoliciesGetEffectivePolicyCall)IfNoneMatch¶

func (c *ProjectsPoliciesGetEffectivePolicyCall) IfNoneMatch(entityTagstring) *ProjectsPoliciesGetEffectivePolicyCall

IfNoneMatch sets an optional parameter which makes the operation fail if theobject's ETag matches the given value. This is useful for getting updatesonly after the object has changed since the last request.

type ProjectsPoliciesListCall struct {// contains filtered or unexported fields}

func (*ProjectsPoliciesListCall)Context¶

func (c *ProjectsPoliciesListCall) Context(ctxcontext.Context) *ProjectsPoliciesListCall

Context sets the context to be used in this call's Do method.

func (*ProjectsPoliciesListCall)Do¶

func (c *ProjectsPoliciesListCall) Do(opts ...googleapi.CallOption) (*GoogleCloudOrgpolicyV2ListPoliciesResponse,error)

Do executes the "orgpolicy.projects.policies.list" call.Any non-2xx status code is an error. Response headers are in either*GoogleCloudOrgpolicyV2ListPoliciesResponse.ServerResponse.Header or (if aresponse was returned at all) in error.(*googleapi.Error).Header. Usegoogleapi.IsNotModified to check whether the returned error was becausehttp.StatusNotModified was returned.

func (*ProjectsPoliciesListCall)Fields¶

func (c *ProjectsPoliciesListCall) Fields(s ...googleapi.Field) *ProjectsPoliciesListCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*ProjectsPoliciesListCall)Header¶

func (c *ProjectsPoliciesListCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

func (*ProjectsPoliciesListCall)IfNoneMatch¶

func (c *ProjectsPoliciesListCall) IfNoneMatch(entityTagstring) *ProjectsPoliciesListCall

IfNoneMatch sets an optional parameter which makes the operation fail if theobject's ETag matches the given value. This is useful for getting updatesonly after the object has changed since the last request.

func (*ProjectsPoliciesListCall)PageSize¶

func (c *ProjectsPoliciesListCall) PageSize(pageSizeint64) *ProjectsPoliciesListCall

PageSize sets the optional parameter "pageSize": Size of the pages to bereturned. This is currently unsupported and will be ignored. The server mayat any point start using this field to limit page size.

func (*ProjectsPoliciesListCall)PageToken¶

func (c *ProjectsPoliciesListCall) PageToken(pageTokenstring) *ProjectsPoliciesListCall

PageToken sets the optional parameter "pageToken": Page token used toretrieve the next page. This is currently unsupported and will be ignored.The server may at any point start using this field.

func (*ProjectsPoliciesListCall)Pages¶

func (c *ProjectsPoliciesListCall) Pages(ctxcontext.Context, f func(*GoogleCloudOrgpolicyV2ListPoliciesResponse)error)error

Pages invokes f for each page of results.A non-nil error returned from f will halt the iteration.The provided context supersedes any context provided to the Context method.

type ProjectsPoliciesPatchCall struct {// contains filtered or unexported fields}

func (*ProjectsPoliciesPatchCall)Context¶

func (c *ProjectsPoliciesPatchCall) Context(ctxcontext.Context) *ProjectsPoliciesPatchCall

Context sets the context to be used in this call's Do method.

func (*ProjectsPoliciesPatchCall)Do¶

func (c *ProjectsPoliciesPatchCall) Do(opts ...googleapi.CallOption) (*GoogleCloudOrgpolicyV2Policy,error)

Do executes the "orgpolicy.projects.policies.patch" call.Any non-2xx status code is an error. Response headers are in either*GoogleCloudOrgpolicyV2Policy.ServerResponse.Header or (if a response wasreturned at all) in error.(*googleapi.Error).Header. Usegoogleapi.IsNotModified to check whether the returned error was becausehttp.StatusNotModified was returned.

func (*ProjectsPoliciesPatchCall)Fields¶

func (c *ProjectsPoliciesPatchCall) Fields(s ...googleapi.Field) *ProjectsPoliciesPatchCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*ProjectsPoliciesPatchCall)Header¶

func (c *ProjectsPoliciesPatchCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

func (*ProjectsPoliciesPatchCall)UpdateMask¶added inv0.108.0

func (c *ProjectsPoliciesPatchCall) UpdateMask(updateMaskstring) *ProjectsPoliciesPatchCall

UpdateMask sets the optional parameter "updateMask": Field mask used tospecify the fields to be overwritten in the policy by the set. The fieldsspecified in the update_mask are relative to the policy, not the fullrequest.

type ProjectsPoliciesService struct {// contains filtered or unexported fields}

funcNewProjectsPoliciesService¶

func NewProjectsPoliciesService(s *Service) *ProjectsPoliciesService

func (*ProjectsPoliciesService)Create¶

func (r *ProjectsPoliciesService) Create(parentstring, googlecloudorgpolicyv2policy *GoogleCloudOrgpolicyV2Policy) *ProjectsPoliciesCreateCall

Create: Creates a policy. Returns a `google.rpc.Status` with`google.rpc.Code.NOT_FOUND` if the constraint does not exist. Returns a`google.rpc.Status` with `google.rpc.Code.ALREADY_EXISTS` if the policyalready exists on the given Google Cloud resource.

• parent: The Google Cloud resource that will parent the new policy. Must bein one of the following forms: * `projects/{project_number}` *`projects/{project_id}` * `folders/{folder_id}` *`organizations/{organization_id}`.

func (*ProjectsPoliciesService)Delete¶

func (r *ProjectsPoliciesService) Delete(namestring) *ProjectsPoliciesDeleteCall

Delete: Deletes a policy. Returns a `google.rpc.Status` with`google.rpc.Code.NOT_FOUND` if the constraint or organization policy doesnot exist.

- name: Name of the policy to delete. See the policy entry for naming rules.

func (*ProjectsPoliciesService)Get¶

func (r *ProjectsPoliciesService) Get(namestring) *ProjectsPoliciesGetCall

Get: Gets a policy on a resource. If no policy is set on the resource,`NOT_FOUND` is returned. The `etag` value can be used with `UpdatePolicy()`to update a policy during read-modify-write.

- name: Resource name of the policy. See Policy for naming requirements.

func (*ProjectsPoliciesService)GetEffectivePolicy¶

func (r *ProjectsPoliciesService) GetEffectivePolicy(namestring) *ProjectsPoliciesGetEffectivePolicyCall

GetEffectivePolicy: Gets the effective policy on a resource. This is theresult of merging policies in the resource hierarchy and evaluatingconditions. The returned policy will not have an `etag` or `condition` setbecause it is an evaluated policy across multiple resources. Subtrees ofResource Manager resource hierarchy with 'under:' prefix will not beexpanded.

- name: The effective policy to compute. See Policy for naming requirements.

func (*ProjectsPoliciesService)List¶

func (r *ProjectsPoliciesService) List(parentstring) *ProjectsPoliciesListCall

List: Retrieves all of the policies that exist on a particular resource.

• parent: The target Google Cloud resource that parents the set ofconstraints and policies that will be returned from this call. Must be inone of the following forms: * `projects/{project_number}` *`projects/{project_id}` * `folders/{folder_id}` *`organizations/{organization_id}`.

func (*ProjectsPoliciesService)Patch¶

func (r *ProjectsPoliciesService) Patch(namestring, googlecloudorgpolicyv2policy *GoogleCloudOrgpolicyV2Policy) *ProjectsPoliciesPatchCall

Patch: Updates a policy. Returns a `google.rpc.Status` with`google.rpc.Code.NOT_FOUND` if the constraint or the policy do not exist.Returns a `google.rpc.Status` with `google.rpc.Code.ABORTED` if the etagsupplied in the request does not match the persisted etag of the policyNote: the supplied policy will perform a full overwrite of all fields.

• name: Immutable. The resource name of the policy. Must be one of thefollowing forms, where `constraint_name` is the name of the constraintwhich this policy configures: *`projects/{project_number}/policies/{constraint_name}` *`folders/{folder_id}/policies/{constraint_name}` *`organizations/{organization_id}/policies/{constraint_name}` For example,`projects/123/policies/compute.disableSerialPortAccess`. Note:`projects/{project_id}/policies/{constraint_name}` is also an acceptablename for API requests, but responses will return the name using theequivalent project number.

type ProjectsService struct {Constraints *ProjectsConstraintsServicePolicies *ProjectsPoliciesService// contains filtered or unexported fields}

funcNewProjectsService¶

func NewProjectsService(s *Service) *ProjectsService

type Service struct {BasePathstring// API endpoint base URLUserAgentstring// optional additional User-Agent fragmentFolders *FoldersServiceOrganizations *OrganizationsServiceProjects *ProjectsService// contains filtered or unexported fields}

funcNewService¶

func NewService(ctxcontext.Context, opts ...option.ClientOption) (*Service,error)

NewService creates a new Service.