Package com.google.cloud.orgpolicy.v1

Interface Policy.BooleanPolicyOrBuilder

All Superinterfaces:
com.google.protobuf.MessageLiteOrBuilder, com.google.protobuf.MessageOrBuilder
All Known Implementing Classes:
Policy.BooleanPolicy, Policy.BooleanPolicy.Builder
Enclosing class:
Policy
public static interface Policy.BooleanPolicyOrBuilder extends com.google.protobuf.MessageOrBuilder

  • Method Summary

    Modifier and Type
    Method
    Description
    boolean
    getEnforced()
    If `true`, then the `Policy` is enforced.

    Methods inherited from interface com.google.protobuf.MessageLiteOrBuilder

    isInitialized

    Methods inherited from interface com.google.protobuf.MessageOrBuilder

    findInitializationErrors, getAllFields, getDefaultInstanceForType, getDescriptorForType, getField, getInitializationErrorString, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, getUnknownFields, hasField, hasOneof

  • Method Details

    • getEnforced

      boolean getEnforced()
       If `true`, then the `Policy` is enforced. If `false`, then any
 configuration is acceptable.

 Suppose you have a `Constraint`
 `constraints/compute.disableSerialPortAccess` with `constraint_default`
 set to `ALLOW`. A `Policy` for that `Constraint` exhibits the following
 behavior:
 - If the `Policy` at this resource has enforced set to `false`, serial
 port connection attempts will be allowed.
 - If the `Policy` at this resource has enforced set to `true`, serial
 port connection attempts will be refused.
 - If the `Policy` at this resource is `RestoreDefault`, serial port
 connection attempts will be allowed.
 - If no `Policy` is set at this resource or anywhere higher in the
 resource hierarchy, serial port connection attempts will be allowed.
 - If no `Policy` is set at this resource, but one exists higher in the
 resource hierarchy, the behavior is as if the`Policy` were set at
 this resource.

 The following examples demonstrate the different possible layerings:

 Example 1 (nearest `Constraint` wins):
 `organizations/foo` has a `Policy` with:
 {enforced: false}
 `projects/bar` has no `Policy` set.
 The constraint at `projects/bar` and `organizations/foo` will not be
 enforced.

 Example 2 (enforcement gets replaced):
 `organizations/foo` has a `Policy` with:
 {enforced: false}
 `projects/bar` has a `Policy` with:
 {enforced: true}
 The constraint at `organizations/foo` is not enforced.
 The constraint at `projects/bar` is enforced.

 Example 3 (RestoreDefault):
 `organizations/foo` has a `Policy` with:
 {enforced: true}
 `projects/bar` has a `Policy` with:
 {RestoreDefault: {}}
 The constraint at `organizations/foo` is enforced.
 The constraint at `projects/bar` is not enforced, because
 `constraint_default` for the `Constraint` is `ALLOW`.
      bool enforced = 1;
      Returns:
      The enforced.