Reference documentation and code samples for the Organization Policy V2 API class Google::Cloud::OrgPolicy::V2::PolicySpec::PolicyRule.
A rule used to express this policy.
Inherits
- Object
Extended By
- Google::Protobuf::MessageExts::ClassMethods
Includes
- Google::Protobuf::MessageExts
Methods
#allow_all
def allow_all() -> ::Boolean
Returns
- (::Boolean) — Setting this to true means that all values are allowed. This field can be set only in policies for list constraints.
#allow_all=
def allow_all=(value) -> ::Boolean
Parameter
- value (::Boolean) — Setting this to true means that all values are allowed. This field can be set only in policies for list constraints.
Returns
- (::Boolean) — Setting this to true means that all values are allowed. This field can be set only in policies for list constraints.
#condition
def condition() -> ::Google::Type::Expr
Returns
-
(::Google::Type::Expr) — A condition which determines whether this rule is used
in the evaluation of the policy. When set, the
expression
field in the `Expr' must include from 1 to 10 subexpressions, joined by the "||" or "&&" operators. Each subexpression must be of the form "resource.matchTag('
#condition=
def condition=(value) -> ::Google::Type::Expr
Parameter
-
value (::Google::Type::Expr) — A condition which determines whether this rule is used
in the evaluation of the policy. When set, the
expression
field in the `Expr' must include from 1 to 10 subexpressions, joined by the "||" or "&&" operators. Each subexpression must be of the form "resource.matchTag('
Returns
-
(::Google::Type::Expr) — A condition which determines whether this rule is used
in the evaluation of the policy. When set, the
expression
field in the `Expr' must include from 1 to 10 subexpressions, joined by the "||" or "&&" operators. Each subexpression must be of the form "resource.matchTag('
#deny_all
def deny_all() -> ::Boolean
Returns
- (::Boolean) — Setting this to true means that all values are denied. This field can be set only in policies for list constraints.
#deny_all=
def deny_all=(value) -> ::Boolean
Parameter
- value (::Boolean) — Setting this to true means that all values are denied. This field can be set only in policies for list constraints.
Returns
- (::Boolean) — Setting this to true means that all values are denied. This field can be set only in policies for list constraints.
#enforce
def enforce() -> ::Boolean
Returns
-
(::Boolean) — If
true
, then the policy is enforced. Iffalse
, then any configuration is acceptable. This field can be set only in policies for boolean constraints.
#enforce=
def enforce=(value) -> ::Boolean
Parameter
-
value (::Boolean) — If
true
, then the policy is enforced. Iffalse
, then any configuration is acceptable. This field can be set only in policies for boolean constraints.
Returns
-
(::Boolean) — If
true
, then the policy is enforced. Iffalse
, then any configuration is acceptable. This field can be set only in policies for boolean constraints.
#values
def values() -> ::Google::Cloud::OrgPolicy::V2::PolicySpec::PolicyRule::StringValues
Returns
- (::Google::Cloud::OrgPolicy::V2::PolicySpec::PolicyRule::StringValues) — List of values to be used for this policy rule. This field can be set only in policies for list constraints.
#values=
def values=(value) -> ::Google::Cloud::OrgPolicy::V2::PolicySpec::PolicyRule::StringValues
Parameter
- value (::Google::Cloud::OrgPolicy::V2::PolicySpec::PolicyRule::StringValues) — List of values to be used for this policy rule. This field can be set only in policies for list constraints.
Returns
- (::Google::Cloud::OrgPolicy::V2::PolicySpec::PolicyRule::StringValues) — List of values to be used for this policy rule. This field can be set only in policies for list constraints.