ResourceGroupPolicyAssignment - upbound/provider-azure@v0.32.0

Specifies a list of Resource Scopes (for example a Subscription, or a Resource Group) within this Management Group which are excluded from this Policy.

overrides

array

One or more overrides blocks as defined below. More detail about overrides and resource_selectors see policy assignment structure

selectors

array

One or more override_selector as defined below.

array

The list of allowed values for the specified kind. Cannot be used with not_in. Can contain up to 50 values.

notIn

array

The list of not-allowed values for the specified kind. Cannot be used with in. Can contain up to 50 values.

value

requiredstring

parameters

string

policyDefinitionId

string

policyDefinitionIdRef

object

Reference to a PolicyDefinition in authorization to populate policyDefinitionId.

name

requiredstring

policy

object

Policies for referencing.

resolution

string

resolve

string

policyDefinitionIdSelector

object

Selector for a PolicyDefinition in authorization to populate policyDefinitionId.

matchControllerRef

boolean

matchLabels

object

policy

object

Policies for selection.

string

string

string

object

Reference to a ResourceGroup in azure to populate resourceGroupId.

name

requiredstring

policy

object

Policies for referencing.

resolution

string

resolve

string

resourceGroupIdSelector

object

Selector for a ResourceGroup in azure to populate resourceGroupId.

matchControllerRef

boolean

matchLabels

object

policy

object

Policies for selection.

resolution

string

resolve

string

resourceSelectors

array

One or more resource_selectors blocks as defined below to filter polices by resource properties.

name

string

selectors

requiredarray

One or more resource_selector block as defined below.

array

The list of allowed values for the specified kind. Cannot be used with not_in. Can contain up to 50 values.

kind

requiredstring

notIn

array

The list of not-allowed values for the specified kind. Cannot be used with in. Can contain up to 50 values.

managementPolicy

string

providerConfigRef

object

ProviderConfigReference specifies how the provider that will be used to create, observe, update, and delete this managed resource should be configured.

name

requiredstring

policy

object

Policies for referencing.

resolution

string

resolve

string

providerRef

object

ProviderReference specifies the provider that will be used to create, observe, update, and delete this managed resource. Deprecated: Please use ProviderConfigReference, i.e. providerConfigRef

name

requiredstring

policy

object

Policies for referencing.

resolution

string

resolve

string

publishConnectionDetailsTo

object

PublishConnectionDetailsTo specifies the connection secret config which contains a name, metadata and a reference to secret store config to which any connection details for this managed resource should be written. Connection details frequently include the endpoint, username, and password required to connect to the managed resource.

configRef

object

SecretStoreConfigRef specifies which secret store config should be used for this ConnectionSecret.

name

requiredstring

policy

object

Policies for referencing.

resolution

string

resolve

string

metadata

object

Metadata is the metadata for connection secret.

object

object

string

requiredstring

writeConnectionSecretToRef

object

WriteConnectionSecretToReference specifies the namespace and name of a Secret to which any connection details for this managed resource should be written. Connection details frequently include the endpoint, username, and password required to connect to the managed resource. This field is planned to be replaced in a future release in favor of PublishConnectionDetailsTo. Currently, both could be set independently and connection details would be published to both without affecting each other.

name

requiredstring

namespace

requiredstring

status

object

ResourceGroupPolicyAssignmentStatus defines the observed state of ResourceGroupPolicyAssignment.

atProvider

object

No description provided.

description

string

displayName

string

enforce

boolean

string

identity

array

An identity block as defined below.

identityIds

array

A list of User Managed Identity IDs which should be assigned to the Policy Definition.

string

string

string

string

string

array

One or more non_compliance_message blocks as defined below.

content

string

policyDefinitionReferenceId

string

notScopes

array

Specifies a list of Resource Scopes (for example a Subscription, or a Resource Group) within this Management Group which are excluded from this Policy.

overrides

array

One or more overrides blocks as defined below. More detail about overrides and resource_selectors see policy assignment structure

selectors

array

One or more override_selector as defined below.

array

The list of allowed values for the specified kind. Cannot be used with not_in. Can contain up to 50 values.

kind

string

notIn

array

The list of not-allowed values for the specified kind. Cannot be used with in. Can contain up to 50 values.

string

string

string

string

array

One or more resource_selectors blocks as defined below to filter polices by resource properties.

name

string

selectors

array

One or more resource_selector block as defined below.

array

The list of allowed values for the specified kind. Cannot be used with not_in. Can contain up to 50 values.

kind

string

notIn

array

The list of not-allowed values for the specified kind. Cannot be used with in. Can contain up to 50 values.

conditions

array

Conditions of the resource.

requiredstring

string

requiredstring

requiredstring

requiredstring

rgpolicyassignment

apiVersion: authorization.azure.upbound.io/v1beta1
kind: ResourceGroupPolicyAssignment
metadata:
  annotations:
    meta.upbound.io/example-id: policyinsights/v1beta1/resourcepolicyremediation
  labels:
    testing.upbound.io/example-name: rgpolicyassignment
  name: rgpolicyassignment
spec:
  forProvider:
    policyDefinitionIdSelector:
      matchLabels:
        testing.upbound.io/example-name: examplepolicy
    resourceGroupIdSelector:
      matchLabels:
        testing.upbound.io/example-name: example

example

apiVersion: authorization.azure.upbound.io/v1beta1
kind: ResourceGroupPolicyAssignment
metadata:
  labels:
    testing.upbound.io/example-name: example
  name: example
spec:
  forProvider:
    policyDefinitionIdSelector:
      matchLabels:
        testing.upbound.io/example-name: example
    resourceGroupIdSelector:
      matchLabels:
        testing.upbound.io/example-name: example-auth

Marketplace

Discover the building blocks for your internal cloud platform.

SolutionsProviders Configurations

LearnDocumentation Try for Free

CompanyAbout Contact Us

MorePrivacy Policy Terms & Conditions

Marketplace

Discover the building blocksfor your internal cloud platform.