Reference documentation and code samples for the Google Cloud Org Policy V2 Client class PolicySpec.
Defines a Google Cloud policy specification which is used to specify
constraints for configurations of Google Cloud resources.
Generated from protobuf message google.cloud.orgpolicy.v2.PolicySpec
Namespace
Google \ Cloud \ OrgPolicy \ V2
Methods
__construct
Constructor.
Parameters
Name
Description
data
array
Optional. Data for populating the Message object.
↳ etag
string
An opaque tag indicating the current version of the policySpec, used for concurrency control. This field is ignored if used in a CreatePolicy request. When the policy is returned from either a GetPolicy or a ListPolicies request, this etag indicates the version of the current policySpec to use when executing a read-modify-write loop. When the policy is returned from a GetEffectivePolicy request, the etag will be unset.
Output only. The time stamp this was previously updated. This represents the last time a call to CreatePolicy or UpdatePolicy was made for that policy.
In policies for boolean constraints, the following requirements apply: - There must be one and only one policy rule where condition is unset. - Boolean policy rules with conditions must set enforced to the opposite of the policy rule without a condition. - During policy evaluation, policy rules with conditions that are true for a target resource take precedence.
↳ inherit_from_parent
bool
Determines the inheritance behavior for this policy. If inherit_from_parent is true, policy rules set higher up in the hierarchy (up to the closest root) are inherited and present in the effective policy. If it is false, then no rules are inherited, and this policy becomes the new root for evaluation. This field can be set only for policies which configure list constraints.
↳ reset
bool
Ignores policies set above this resource and restores the constraint_default enforcement behavior of the specific constraint at this resource. This field can be set in policies for either list or boolean constraints. If set, rules must be empty and inherit_from_parent must be set to false.
getEtag
An opaque tag indicating the current version of the policySpec, used for
concurrency control.
This field is ignored if used in a CreatePolicy request.
When the policy is returned from either a GetPolicy or a
ListPolicies request, this etag indicates the version of the
current policySpec to use when executing a read-modify-write loop.
When the policy is returned from a GetEffectivePolicy request, the
etag will be unset.
Returns
Type
Description
string
setEtag
An opaque tag indicating the current version of the policySpec, used for
concurrency control.
This field is ignored if used in a CreatePolicy request.
When the policy is returned from either a GetPolicy or a
ListPolicies request, this etag indicates the version of the
current policySpec to use when executing a read-modify-write loop.
When the policy is returned from a GetEffectivePolicy request, the
etag will be unset.
Parameter
Name
Description
var
string
Returns
Type
Description
$this
getUpdateTime
Output only. The time stamp this was previously updated. This
represents the last time a call to CreatePolicy or UpdatePolicy was
made for that policy.
Output only. The time stamp this was previously updated. This
represents the last time a call to CreatePolicy or UpdatePolicy was
made for that policy.
Determines the inheritance behavior for this policy.
If inherit_from_parent is true, policy rules set higher up in the
hierarchy (up to the closest root) are inherited and present in the
effective policy. If it is false, then no rules are inherited, and this
policy becomes the new root for evaluation.
This field can be set only for policies which configure list constraints.
Returns
Type
Description
bool
setInheritFromParent
Determines the inheritance behavior for this policy.
If inherit_from_parent is true, policy rules set higher up in the
hierarchy (up to the closest root) are inherited and present in the
effective policy. If it is false, then no rules are inherited, and this
policy becomes the new root for evaluation.
This field can be set only for policies which configure list constraints.
Parameter
Name
Description
var
bool
Returns
Type
Description
$this
getReset
Ignores policies set above this resource and restores the
constraint_default enforcement behavior of the specific constraint at
this resource.
This field can be set in policies for either list or boolean
constraints. If set, rules must be empty and inherit_from_parent
must be set to false.
Returns
Type
Description
bool
setReset
Ignores policies set above this resource and restores the
constraint_default enforcement behavior of the specific constraint at
this resource.
This field can be set in policies for either list or boolean
constraints. If set, rules must be empty and inherit_from_parent
must be set to false.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-09-04 UTC."],[],[],null,["# Google Cloud Org Policy V2 Client - Class PolicySpec (1.2.2)\n\nVersion latestkeyboard_arrow_down\n\n- [1.2.2 (latest)](/php/docs/reference/cloud-org-policy/latest/V2.PolicySpec)\n- [1.2.1](/php/docs/reference/cloud-org-policy/1.2.1/V2.PolicySpec)\n- [1.1.3](/php/docs/reference/cloud-org-policy/1.1.3/V2.PolicySpec)\n- [1.0.0](/php/docs/reference/cloud-org-policy/1.0.0/V2.PolicySpec)\n- [0.7.0](/php/docs/reference/cloud-org-policy/0.7.0/V2.PolicySpec)\n- [0.6.5](/php/docs/reference/cloud-org-policy/0.6.5/V2.PolicySpec)\n- [0.5.3](/php/docs/reference/cloud-org-policy/0.5.3/V2.PolicySpec)\n- [0.4.2](/php/docs/reference/cloud-org-policy/0.4.2/V2.PolicySpec)\n- [0.3.7](/php/docs/reference/cloud-org-policy/0.3.7/V2.PolicySpec) \nReference documentation and code samples for the Google Cloud Org Policy V2 Client class PolicySpec.\n\nDefines a Google Cloud policy specification which is used to specify\nconstraints for configurations of Google Cloud resources.\n\nGenerated from protobuf message `google.cloud.orgpolicy.v2.PolicySpec`\n\nNamespace\n---------\n\nGoogle \\\\ Cloud \\\\ OrgPolicy \\\\ V2\n\nMethods\n-------\n\n### __construct\n\nConstructor.\n\n### getEtag\n\nAn opaque tag indicating the current version of the policySpec, used for\nconcurrency control.\n\nThis field is ignored if used in a `CreatePolicy` request.\nWhen the policy is returned from either a `GetPolicy` or a\n`ListPolicies` request, this `etag` indicates the version of the\ncurrent policySpec to use when executing a read-modify-write loop.\nWhen the policy is returned from a `GetEffectivePolicy` request, the\n`etag` will be unset.\n\n### setEtag\n\nAn opaque tag indicating the current version of the policySpec, used for\nconcurrency control.\n\nThis field is ignored if used in a `CreatePolicy` request.\nWhen the policy is returned from either a `GetPolicy` or a\n`ListPolicies` request, this `etag` indicates the version of the\ncurrent policySpec to use when executing a read-modify-write loop.\nWhen the policy is returned from a `GetEffectivePolicy` request, the\n`etag` will be unset.\n\n### getUpdateTime\n\nOutput only. The time stamp this was previously updated. This\nrepresents the last time a call to `CreatePolicy` or `UpdatePolicy` was\nmade for that policy.\n\n### hasUpdateTime\n\n### clearUpdateTime\n\n### setUpdateTime\n\nOutput only. The time stamp this was previously updated. This\nrepresents the last time a call to `CreatePolicy` or `UpdatePolicy` was\nmade for that policy.\n\n### getRules\n\nIn policies for boolean constraints, the following requirements apply:\n\n- There must be one and only one policy rule where condition is unset.\n\n\u003c!-- --\u003e\n\n- Boolean policy rules with conditions must set `enforced` to the opposite of the policy rule without a condition.\n - During policy evaluation, policy rules with conditions that are true for a target resource take precedence.\n\n### setRules\n\nIn policies for boolean constraints, the following requirements apply:\n\n- There must be one and only one policy rule where condition is unset.\n\n\u003c!-- --\u003e\n\n- Boolean policy rules with conditions must set `enforced` to the opposite of the policy rule without a condition.\n - During policy evaluation, policy rules with conditions that are true for a target resource take precedence.\n\n### getInheritFromParent\n\nDetermines the inheritance behavior for this policy.\n\nIf `inherit_from_parent` is true, policy rules set higher up in the\nhierarchy (up to the closest root) are inherited and present in the\neffective policy. If it is false, then no rules are inherited, and this\npolicy becomes the new root for evaluation.\nThis field can be set only for policies which configure list constraints.\n\n### setInheritFromParent\n\nDetermines the inheritance behavior for this policy.\n\nIf `inherit_from_parent` is true, policy rules set higher up in the\nhierarchy (up to the closest root) are inherited and present in the\neffective policy. If it is false, then no rules are inherited, and this\npolicy becomes the new root for evaluation.\nThis field can be set only for policies which configure list constraints.\n\n### getReset\n\nIgnores policies set above this resource and restores the\n`constraint_default` enforcement behavior of the specific constraint at\nthis resource.\n\nThis field can be set in policies for either list or boolean\nconstraints. If set, `rules` must be empty and `inherit_from_parent`\nmust be set to false.\n\n### setReset\n\nIgnores policies set above this resource and restores the\n`constraint_default` enforcement behavior of the specific constraint at\nthis resource.\n\nThis field can be set in policies for either list or boolean\nconstraints. If set, `rules` must be empty and `inherit_from_parent`\nmust be set to false."]]
