Constraint(mapping=None, *, ignore_unknown_fields=False, **kwargs)
constraint describes a way to restrict resource's
configuration. For example, you could enforce a constraint that
controls which cloud services can be activated across an
organization, or whether a Compute Engine instance can have serial
port connections established.
Constraints can be configured by
the organization's policy administrator to fit the needs of the
organization by setting a
policy that includes
at different locations in the organization's resource hierarchy.
Policies are inherited down the resource hierarchy from higher
levels, but can also be overridden. For details about the
inheritance rules please read about
Constraints have a default behavior determined by the
constraint_default field, which is the enforcement behavior that
is used in the absence of a
policy being defined or inherited
for the resource in question.
This message has
oneof_ fields (mutually exclusive fields).
For each oneof, at most one member field can be set at the same time.
Setting any member of the oneof automatically clears all other
Immutable. The resource name of the Constraint. Must be in one of the following forms: -
The human readable name. Mutable.
Detailed description of what this
The evaluation behavior of this constraint in the absence of 'Policy'.
Defines this constraint as being a ListConstraint. This field is a member of
Defines this constraint as being a BooleanConstraint. This field is a member of
BooleanConstraint(mapping=None, *, ignore_unknown_fields=False, **kwargs)
Constraint that is either enforced or not.
For example a constraint
constraints/compute.disableSerialPortAccess. If it is enforced
on a VM instance, serial port connections will not be opened to that
Specifies the default behavior in the absence of any
Constraint. This must not be
Immutable after creation.
Values: CONSTRAINT_DEFAULT_UNSPECIFIED (0): This is only used for distinguishing unset values and should never be used. ALLOW (1): Indicate that all values are allowed for list constraints. Indicate that enforcement is off for boolean constraints. DENY (2): Indicate that all values are denied for list constraints. Indicate that enforcement is on for boolean constraints.
ListConstraint(mapping=None, *, ignore_unknown_fields=False, **kwargs)
Constraint that allows or disallows a list of string values,
which are configured by an Organization's policy administrator with