Guides

CLOUDDEPLOY

cloud.google.com
GCP documentation

clouddeploy.projects.locations.customTargetTypes.create

valid {
    input.Body.annotations.STRING == STRING
    input.Body.customActions.deployAction == STRING
    input.Body.customActions.includeSkaffoldModules[_].configs[_] == STRING
    input.Body.customActions.includeSkaffoldModules[_].git.path == STRING
    input.Body.customActions.includeSkaffoldModules[_].git.ref == STRING
    input.Body.customActions.includeSkaffoldModules[_].git.repo == STRING
    input.Body.customActions.includeSkaffoldModules[_].googleCloudBuildRepo.path == STRING
    input.Body.customActions.includeSkaffoldModules[_].googleCloudBuildRepo.ref == STRING
    input.Body.customActions.includeSkaffoldModules[_].googleCloudBuildRepo.repository == STRING
    input.Body.customActions.includeSkaffoldModules[_].googleCloudStorage.path == STRING
    input.Body.customActions.includeSkaffoldModules[_].googleCloudStorage.source == STRING
    input.Body.customActions.renderAction == STRING
    input.Body.description == STRING
    input.Body.etag == STRING
    input.Body.labels.STRING == STRING
    input.Body.name == STRING
    input.ReqMap.parent == STRING
    input.Qs.customTargetTypeId == STRING
    input.Qs.requestId == STRING
    input.Qs.validateOnly == BOOLEAN
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.customTargetTypes.delete

valid {
    input.ReqMap.name == STRING
    input.Qs.allowMissing == BOOLEAN
    input.Qs.etag == STRING
    input.Qs.requestId == STRING
    input.Qs.validateOnly == BOOLEAN
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.customTargetTypes.get

valid {
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.customTargetTypes.getIamPolicy

valid {
    input.ReqMap.resource == STRING
    input.Qs.options.requestedPolicyVersion == INTEGER
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.customTargetTypes.list

valid {
    input.ReqMap.parent == STRING
    input.Qs.filter == STRING
    input.Qs.orderBy == STRING
    input.Qs.pageSize == INTEGER
    input.Qs.pageToken == STRING
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.customTargetTypes.patch

valid {
    input.Body.annotations.STRING == STRING
    input.Body.customActions.deployAction == STRING
    input.Body.customActions.includeSkaffoldModules[_].configs[_] == STRING
    input.Body.customActions.includeSkaffoldModules[_].git.path == STRING
    input.Body.customActions.includeSkaffoldModules[_].git.ref == STRING
    input.Body.customActions.includeSkaffoldModules[_].git.repo == STRING
    input.Body.customActions.includeSkaffoldModules[_].googleCloudBuildRepo.path == STRING
    input.Body.customActions.includeSkaffoldModules[_].googleCloudBuildRepo.ref == STRING
    input.Body.customActions.includeSkaffoldModules[_].googleCloudBuildRepo.repository == STRING
    input.Body.customActions.includeSkaffoldModules[_].googleCloudStorage.path == STRING
    input.Body.customActions.includeSkaffoldModules[_].googleCloudStorage.source == STRING
    input.Body.customActions.renderAction == STRING
    input.Body.description == STRING
    input.Body.etag == STRING
    input.Body.labels.STRING == STRING
    input.Body.name == STRING
    input.ReqMap.name == STRING
    input.Qs.allowMissing == BOOLEAN
    input.Qs.requestId == STRING
    input.Qs.updateMask == STRING
    input.Qs.validateOnly == BOOLEAN
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.customTargetTypes.setIamPolicy

enum_AuditLogConfigLogType := [ "LOG_TYPE_UNSPECIFIED", "ADMIN_READ", "DATA_WRITE", "DATA_READ" ]

valid {
    input.Body.policy.auditConfigs[_].auditLogConfigs[_].exemptedMembers[_] == STRING
    input.Body.policy.auditConfigs[_].auditLogConfigs[_].logType == enum_AuditLogConfigLogType[_]
    input.Body.policy.auditConfigs[_].service == STRING
    input.Body.policy.bindings[_].condition.description == STRING
    input.Body.policy.bindings[_].condition.expression == STRING
    input.Body.policy.bindings[_].condition.location == STRING
    input.Body.policy.bindings[_].condition.title == STRING
    input.Body.policy.bindings[_].members[_] == STRING
    input.Body.policy.bindings[_].role == STRING
    input.Body.policy.etag == STRING
    input.Body.policy.version == INTEGER
    input.Body.updateMask == STRING
    input.ReqMap.resource == STRING
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deliveryPipelines.automationRuns.cancel

valid {
    input.Body.STRING == STRING
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deliveryPipelines.automationRuns.get

valid {
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deliveryPipelines.automationRuns.list

valid {
    input.ReqMap.parent == STRING
    input.Qs.filter == STRING
    input.Qs.orderBy == STRING
    input.Qs.pageSize == INTEGER
    input.Qs.pageToken == STRING
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deliveryPipelines.automations.create

enum_RetryBackoffMode := [ "BACKOFF_MODE_UNSPECIFIED", "BACKOFF_MODE_LINEAR", "BACKOFF_MODE_EXPONENTIAL" ]

valid {
    input.Body.annotations.STRING == STRING
    input.Body.description == STRING
    input.Body.etag == STRING
    input.Body.labels.STRING == STRING
    input.Body.rules[_].advanceRolloutRule.id == STRING
    input.Body.rules[_].advanceRolloutRule.sourcePhases[_] == STRING
    input.Body.rules[_].advanceRolloutRule.wait == STRING
    input.Body.rules[_].promoteReleaseRule.destinationPhase == STRING
    input.Body.rules[_].promoteReleaseRule.destinationTargetId == STRING
    input.Body.rules[_].promoteReleaseRule.id == STRING
    input.Body.rules[_].promoteReleaseRule.wait == STRING
    input.Body.rules[_].repairRolloutRule.id == STRING
    input.Body.rules[_].repairRolloutRule.jobs[_] == STRING
    input.Body.rules[_].repairRolloutRule.phases[_] == STRING
    input.Body.rules[_].repairRolloutRule.repairPhases[_].retry.attempts == STRING
    input.Body.rules[_].repairRolloutRule.repairPhases[_].retry.backoffMode == enum_RetryBackoffMode[_]
    input.Body.rules[_].repairRolloutRule.repairPhases[_].retry.wait == STRING
    input.Body.rules[_].repairRolloutRule.repairPhases[_].rollback.destinationPhase == STRING
    input.Body.rules[_].repairRolloutRule.repairPhases[_].rollback.disableRollbackIfRolloutPending == BOOLEAN
    input.Body.rules[_].timedPromoteReleaseRule.destinationPhase == STRING
    input.Body.rules[_].timedPromoteReleaseRule.destinationTargetId == STRING
    input.Body.rules[_].timedPromoteReleaseRule.id == STRING
    input.Body.rules[_].timedPromoteReleaseRule.schedule == STRING
    input.Body.rules[_].timedPromoteReleaseRule.timeZone == STRING
    input.Body.selector.targets[_].id == STRING
    input.Body.selector.targets[_].labels.STRING == STRING
    input.Body.serviceAccount == STRING
    input.Body.suspended == BOOLEAN
    input.ReqMap.parent == STRING
    input.Qs.automationId == STRING
    input.Qs.requestId == STRING
    input.Qs.validateOnly == BOOLEAN
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deliveryPipelines.automations.delete

valid {
    input.ReqMap.name == STRING
    input.Qs.allowMissing == BOOLEAN
    input.Qs.etag == STRING
    input.Qs.requestId == STRING
    input.Qs.validateOnly == BOOLEAN
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deliveryPipelines.automations.get

valid {
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deliveryPipelines.automations.list

valid {
    input.ReqMap.parent == STRING
    input.Qs.filter == STRING
    input.Qs.orderBy == STRING
    input.Qs.pageSize == INTEGER
    input.Qs.pageToken == STRING
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deliveryPipelines.automations.patch

enum_RetryBackoffMode := [ "BACKOFF_MODE_UNSPECIFIED", "BACKOFF_MODE_LINEAR", "BACKOFF_MODE_EXPONENTIAL" ]

valid {
    input.Body.annotations.STRING == STRING
    input.Body.description == STRING
    input.Body.etag == STRING
    input.Body.labels.STRING == STRING
    input.Body.rules[_].advanceRolloutRule.id == STRING
    input.Body.rules[_].advanceRolloutRule.sourcePhases[_] == STRING
    input.Body.rules[_].advanceRolloutRule.wait == STRING
    input.Body.rules[_].promoteReleaseRule.destinationPhase == STRING
    input.Body.rules[_].promoteReleaseRule.destinationTargetId == STRING
    input.Body.rules[_].promoteReleaseRule.id == STRING
    input.Body.rules[_].promoteReleaseRule.wait == STRING
    input.Body.rules[_].repairRolloutRule.id == STRING
    input.Body.rules[_].repairRolloutRule.jobs[_] == STRING
    input.Body.rules[_].repairRolloutRule.phases[_] == STRING
    input.Body.rules[_].repairRolloutRule.repairPhases[_].retry.attempts == STRING
    input.Body.rules[_].repairRolloutRule.repairPhases[_].retry.backoffMode == enum_RetryBackoffMode[_]
    input.Body.rules[_].repairRolloutRule.repairPhases[_].retry.wait == STRING
    input.Body.rules[_].repairRolloutRule.repairPhases[_].rollback.destinationPhase == STRING
    input.Body.rules[_].repairRolloutRule.repairPhases[_].rollback.disableRollbackIfRolloutPending == BOOLEAN
    input.Body.rules[_].timedPromoteReleaseRule.destinationPhase == STRING
    input.Body.rules[_].timedPromoteReleaseRule.destinationTargetId == STRING
    input.Body.rules[_].timedPromoteReleaseRule.id == STRING
    input.Body.rules[_].timedPromoteReleaseRule.schedule == STRING
    input.Body.rules[_].timedPromoteReleaseRule.timeZone == STRING
    input.Body.selector.targets[_].id == STRING
    input.Body.selector.targets[_].labels.STRING == STRING
    input.Body.serviceAccount == STRING
    input.Body.suspended == BOOLEAN
    input.ReqMap.name == STRING
    input.Qs.allowMissing == BOOLEAN
    input.Qs.requestId == STRING
    input.Qs.updateMask == STRING
    input.Qs.validateOnly == BOOLEAN
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deliveryPipelines.create

valid {
    input.Body.annotations.STRING == STRING
    input.Body.description == STRING
    input.Body.etag == STRING
    input.Body.labels.STRING == STRING
    input.Body.name == STRING
    input.Body.serialPipeline.stages[_].deployParameters[_].matchTargetLabels.STRING == STRING
    input.Body.serialPipeline.stages[_].deployParameters[_].values.STRING == STRING
    input.Body.serialPipeline.stages[_].profiles[_] == STRING
    input.Body.serialPipeline.stages[_].strategy.canary.canaryDeployment.percentages[_] == INTEGER
    input.Body.serialPipeline.stages[_].strategy.canary.canaryDeployment.postdeploy.actions[_] == STRING
    input.Body.serialPipeline.stages[_].strategy.canary.canaryDeployment.predeploy.actions[_] == STRING
    input.Body.serialPipeline.stages[_].strategy.canary.canaryDeployment.verify == BOOLEAN
    input.Body.serialPipeline.stages[_].strategy.canary.customCanaryDeployment.phaseConfigs[_].percentage == INTEGER
    input.Body.serialPipeline.stages[_].strategy.canary.customCanaryDeployment.phaseConfigs[_].phaseId == STRING
    input.Body.serialPipeline.stages[_].strategy.canary.customCanaryDeployment.phaseConfigs[_].postdeploy.actions[_] == STRING
    input.Body.serialPipeline.stages[_].strategy.canary.customCanaryDeployment.phaseConfigs[_].predeploy.actions[_] == STRING
    input.Body.serialPipeline.stages[_].strategy.canary.customCanaryDeployment.phaseConfigs[_].profiles[_] == STRING
    input.Body.serialPipeline.stages[_].strategy.canary.customCanaryDeployment.phaseConfigs[_].verify == BOOLEAN
    input.Body.serialPipeline.stages[_].strategy.canary.runtimeConfig.cloudRun.automaticTrafficControl == BOOLEAN
    input.Body.serialPipeline.stages[_].strategy.canary.runtimeConfig.cloudRun.canaryRevisionTags[_] == STRING
    input.Body.serialPipeline.stages[_].strategy.canary.runtimeConfig.cloudRun.priorRevisionTags[_] == STRING
    input.Body.serialPipeline.stages[_].strategy.canary.runtimeConfig.cloudRun.stableRevisionTags[_] == STRING
    input.Body.serialPipeline.stages[_].strategy.canary.runtimeConfig.kubernetes.gatewayServiceMesh.deployment == STRING
    input.Body.serialPipeline.stages[_].strategy.canary.runtimeConfig.kubernetes.gatewayServiceMesh.httpRoute == STRING
    input.Body.serialPipeline.stages[_].strategy.canary.runtimeConfig.kubernetes.gatewayServiceMesh.podSelectorLabel == STRING
    input.Body.serialPipeline.stages[_].strategy.canary.runtimeConfig.kubernetes.gatewayServiceMesh.routeDestinations.destinationIds[_] == STRING
    input.Body.serialPipeline.stages[_].strategy.canary.runtimeConfig.kubernetes.gatewayServiceMesh.routeDestinations.propagateService == BOOLEAN
    input.Body.serialPipeline.stages[_].strategy.canary.runtimeConfig.kubernetes.gatewayServiceMesh.routeUpdateWaitTime == STRING
    input.Body.serialPipeline.stages[_].strategy.canary.runtimeConfig.kubernetes.gatewayServiceMesh.service == STRING
    input.Body.serialPipeline.stages[_].strategy.canary.runtimeConfig.kubernetes.gatewayServiceMesh.stableCutbackDuration == STRING
    input.Body.serialPipeline.stages[_].strategy.canary.runtimeConfig.kubernetes.serviceNetworking.deployment == STRING
    input.Body.serialPipeline.stages[_].strategy.canary.runtimeConfig.kubernetes.serviceNetworking.disablePodOverprovisioning == BOOLEAN
    input.Body.serialPipeline.stages[_].strategy.canary.runtimeConfig.kubernetes.serviceNetworking.podSelectorLabel == STRING
    input.Body.serialPipeline.stages[_].strategy.canary.runtimeConfig.kubernetes.serviceNetworking.service == STRING
    input.Body.serialPipeline.stages[_].strategy.standard.postdeploy.actions[_] == STRING
    input.Body.serialPipeline.stages[_].strategy.standard.predeploy.actions[_] == STRING
    input.Body.serialPipeline.stages[_].strategy.standard.verify == BOOLEAN
    input.Body.serialPipeline.stages[_].targetId == STRING
    input.Body.suspended == BOOLEAN
    input.ReqMap.parent == STRING
    input.Qs.deliveryPipelineId == STRING
    input.Qs.requestId == STRING
    input.Qs.validateOnly == BOOLEAN
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deliveryPipelines.delete

valid {
    input.ReqMap.name == STRING
    input.Qs.allowMissing == BOOLEAN
    input.Qs.etag == STRING
    input.Qs.force == BOOLEAN
    input.Qs.requestId == STRING
    input.Qs.validateOnly == BOOLEAN
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deliveryPipelines.get

valid {
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deliveryPipelines.getIamPolicy

valid {
    input.ReqMap.resource == STRING
    input.Qs.options.requestedPolicyVersion == INTEGER
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deliveryPipelines.list

valid {
    input.ReqMap.parent == STRING
    input.Qs.filter == STRING
    input.Qs.orderBy == STRING
    input.Qs.pageSize == INTEGER
    input.Qs.pageToken == STRING
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deliveryPipelines.patch

valid {
    input.Body.annotations.STRING == STRING
    input.Body.description == STRING
    input.Body.etag == STRING
    input.Body.labels.STRING == STRING
    input.Body.name == STRING
    input.Body.serialPipeline.stages[_].deployParameters[_].matchTargetLabels.STRING == STRING
    input.Body.serialPipeline.stages[_].deployParameters[_].values.STRING == STRING
    input.Body.serialPipeline.stages[_].profiles[_] == STRING
    input.Body.serialPipeline.stages[_].strategy.canary.canaryDeployment.percentages[_] == INTEGER
    input.Body.serialPipeline.stages[_].strategy.canary.canaryDeployment.postdeploy.actions[_] == STRING
    input.Body.serialPipeline.stages[_].strategy.canary.canaryDeployment.predeploy.actions[_] == STRING
    input.Body.serialPipeline.stages[_].strategy.canary.canaryDeployment.verify == BOOLEAN
    input.Body.serialPipeline.stages[_].strategy.canary.customCanaryDeployment.phaseConfigs[_].percentage == INTEGER
    input.Body.serialPipeline.stages[_].strategy.canary.customCanaryDeployment.phaseConfigs[_].phaseId == STRING
    input.Body.serialPipeline.stages[_].strategy.canary.customCanaryDeployment.phaseConfigs[_].postdeploy.actions[_] == STRING
    input.Body.serialPipeline.stages[_].strategy.canary.customCanaryDeployment.phaseConfigs[_].predeploy.actions[_] == STRING
    input.Body.serialPipeline.stages[_].strategy.canary.customCanaryDeployment.phaseConfigs[_].profiles[_] == STRING
    input.Body.serialPipeline.stages[_].strategy.canary.customCanaryDeployment.phaseConfigs[_].verify == BOOLEAN
    input.Body.serialPipeline.stages[_].strategy.canary.runtimeConfig.cloudRun.automaticTrafficControl == BOOLEAN
    input.Body.serialPipeline.stages[_].strategy.canary.runtimeConfig.cloudRun.canaryRevisionTags[_] == STRING
    input.Body.serialPipeline.stages[_].strategy.canary.runtimeConfig.cloudRun.priorRevisionTags[_] == STRING
    input.Body.serialPipeline.stages[_].strategy.canary.runtimeConfig.cloudRun.stableRevisionTags[_] == STRING
    input.Body.serialPipeline.stages[_].strategy.canary.runtimeConfig.kubernetes.gatewayServiceMesh.deployment == STRING
    input.Body.serialPipeline.stages[_].strategy.canary.runtimeConfig.kubernetes.gatewayServiceMesh.httpRoute == STRING
    input.Body.serialPipeline.stages[_].strategy.canary.runtimeConfig.kubernetes.gatewayServiceMesh.podSelectorLabel == STRING
    input.Body.serialPipeline.stages[_].strategy.canary.runtimeConfig.kubernetes.gatewayServiceMesh.routeDestinations.destinationIds[_] == STRING
    input.Body.serialPipeline.stages[_].strategy.canary.runtimeConfig.kubernetes.gatewayServiceMesh.routeDestinations.propagateService == BOOLEAN
    input.Body.serialPipeline.stages[_].strategy.canary.runtimeConfig.kubernetes.gatewayServiceMesh.routeUpdateWaitTime == STRING
    input.Body.serialPipeline.stages[_].strategy.canary.runtimeConfig.kubernetes.gatewayServiceMesh.service == STRING
    input.Body.serialPipeline.stages[_].strategy.canary.runtimeConfig.kubernetes.gatewayServiceMesh.stableCutbackDuration == STRING
    input.Body.serialPipeline.stages[_].strategy.canary.runtimeConfig.kubernetes.serviceNetworking.deployment == STRING
    input.Body.serialPipeline.stages[_].strategy.canary.runtimeConfig.kubernetes.serviceNetworking.disablePodOverprovisioning == BOOLEAN
    input.Body.serialPipeline.stages[_].strategy.canary.runtimeConfig.kubernetes.serviceNetworking.podSelectorLabel == STRING
    input.Body.serialPipeline.stages[_].strategy.canary.runtimeConfig.kubernetes.serviceNetworking.service == STRING
    input.Body.serialPipeline.stages[_].strategy.standard.postdeploy.actions[_] == STRING
    input.Body.serialPipeline.stages[_].strategy.standard.predeploy.actions[_] == STRING
    input.Body.serialPipeline.stages[_].strategy.standard.verify == BOOLEAN
    input.Body.serialPipeline.stages[_].targetId == STRING
    input.Body.suspended == BOOLEAN
    input.ReqMap.name == STRING
    input.Qs.allowMissing == BOOLEAN
    input.Qs.requestId == STRING
    input.Qs.updateMask == STRING
    input.Qs.validateOnly == BOOLEAN
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deliveryPipelines.releases.abandon

valid {
    input.Body.STRING == STRING
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deliveryPipelines.releases.create

valid {
    input.Body.annotations.STRING == STRING
    input.Body.buildArtifacts[_].image == STRING
    input.Body.buildArtifacts[_].tag == STRING
    input.Body.deployParameters.STRING == STRING
    input.Body.description == STRING
    input.Body.etag == STRING
    input.Body.labels.STRING == STRING
    input.Body.name == STRING
    input.Body.skaffoldConfigPath == STRING
    input.Body.skaffoldConfigUri == STRING
    input.Body.skaffoldVersion == STRING
    input.ReqMap.parent == STRING
    input.Qs.overrideDeployPolicy == STRING
    input.Qs.releaseId == STRING
    input.Qs.requestId == STRING
    input.Qs.validateOnly == BOOLEAN
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deliveryPipelines.releases.get

valid {
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deliveryPipelines.releases.list

valid {
    input.ReqMap.parent == STRING
    input.Qs.filter == STRING
    input.Qs.orderBy == STRING
    input.Qs.pageSize == INTEGER
    input.Qs.pageToken == STRING
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deliveryPipelines.releases.rollouts.advance

valid {
    input.Body.overrideDeployPolicy[_] == STRING
    input.Body.phaseId == STRING
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deliveryPipelines.releases.rollouts.approve

valid {
    input.Body.approved == BOOLEAN
    input.Body.overrideDeployPolicy[_] == STRING
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deliveryPipelines.releases.rollouts.cancel

valid {
    input.Body.overrideDeployPolicy[_] == STRING
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deliveryPipelines.releases.rollouts.create

valid {
    input.Body.annotations.STRING == STRING
    input.Body.description == STRING
    input.Body.etag == STRING
    input.Body.labels.STRING == STRING
    input.Body.name == STRING
    input.Body.targetId == STRING
    input.ReqMap.parent == STRING
    input.Qs.overrideDeployPolicy == STRING
    input.Qs.requestId == STRING
    input.Qs.rolloutId == STRING
    input.Qs.startingPhaseId == STRING
    input.Qs.validateOnly == BOOLEAN
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deliveryPipelines.releases.rollouts.get

valid {
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deliveryPipelines.releases.rollouts.ignoreJob

valid {
    input.Body.jobId == STRING
    input.Body.overrideDeployPolicy[_] == STRING
    input.Body.phaseId == STRING
    input.ReqMap.rollout == STRING
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deliveryPipelines.releases.rollouts.jobRuns.get

valid {
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deliveryPipelines.releases.rollouts.jobRuns.list

valid {
    input.ReqMap.parent == STRING
    input.Qs.filter == STRING
    input.Qs.orderBy == STRING
    input.Qs.pageSize == INTEGER
    input.Qs.pageToken == STRING
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deliveryPipelines.releases.rollouts.jobRuns.terminate

valid {
    input.Body.overrideDeployPolicy[_] == STRING
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deliveryPipelines.releases.rollouts.list

valid {
    input.ReqMap.parent == STRING
    input.Qs.filter == STRING
    input.Qs.orderBy == STRING
    input.Qs.pageSize == INTEGER
    input.Qs.pageToken == STRING
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deliveryPipelines.releases.rollouts.retryJob

valid {
    input.Body.jobId == STRING
    input.Body.overrideDeployPolicy[_] == STRING
    input.Body.phaseId == STRING
    input.ReqMap.rollout == STRING
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deliveryPipelines.rollbackTarget

valid {
    input.Body.overrideDeployPolicy[_] == STRING
    input.Body.releaseId == STRING
    input.Body.rollbackConfig.rollout.annotations.STRING == STRING
    input.Body.rollbackConfig.rollout.description == STRING
    input.Body.rollbackConfig.rollout.etag == STRING
    input.Body.rollbackConfig.rollout.labels.STRING == STRING
    input.Body.rollbackConfig.rollout.name == STRING
    input.Body.rollbackConfig.rollout.targetId == STRING
    input.Body.rollbackConfig.startingPhaseId == STRING
    input.Body.rolloutId == STRING
    input.Body.rolloutToRollBack == STRING
    input.Body.targetId == STRING
    input.Body.validateOnly == BOOLEAN
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deliveryPipelines.setIamPolicy

enum_AuditLogConfigLogType := [ "LOG_TYPE_UNSPECIFIED", "ADMIN_READ", "DATA_WRITE", "DATA_READ" ]

valid {
    input.Body.policy.auditConfigs[_].auditLogConfigs[_].exemptedMembers[_] == STRING
    input.Body.policy.auditConfigs[_].auditLogConfigs[_].logType == enum_AuditLogConfigLogType[_]
    input.Body.policy.auditConfigs[_].service == STRING
    input.Body.policy.bindings[_].condition.description == STRING
    input.Body.policy.bindings[_].condition.expression == STRING
    input.Body.policy.bindings[_].condition.location == STRING
    input.Body.policy.bindings[_].condition.title == STRING
    input.Body.policy.bindings[_].members[_] == STRING
    input.Body.policy.bindings[_].role == STRING
    input.Body.policy.etag == STRING
    input.Body.policy.version == INTEGER
    input.Body.updateMask == STRING
    input.ReqMap.resource == STRING
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deliveryPipelines.testIamPermissions

valid {
    input.Body.permissions[_] == STRING
    input.ReqMap.resource == STRING
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deployPolicies.create

enum_RolloutRestrictionActions := [ "ROLLOUT_ACTIONS_UNSPECIFIED", "ADVANCE", "APPROVE", "CANCEL", "CREATE", "IGNORE_JOB", "RETRY_JOB", "ROLLBACK", "TERMINATE_JOBRUN" ]
enum_RolloutRestrictionInvokers := [ "INVOKER_UNSPECIFIED", "USER", "DEPLOY_AUTOMATION" ]
enum_WeeklyWindowDaysOfWeek := [ "DAY_OF_WEEK_UNSPECIFIED", "MONDAY", "TUESDAY", "WEDNESDAY", "THURSDAY", "FRIDAY", "SATURDAY", "SUNDAY" ]

valid {
    input.Body.annotations.STRING == STRING
    input.Body.description == STRING
    input.Body.etag == STRING
    input.Body.labels.STRING == STRING
    input.Body.rules[_].rolloutRestriction.actions[_] == enum_RolloutRestrictionActions[_]
    input.Body.rules[_].rolloutRestriction.id == STRING
    input.Body.rules[_].rolloutRestriction.invokers[_] == enum_RolloutRestrictionInvokers[_]
    input.Body.rules[_].rolloutRestriction.timeWindows.oneTimeWindows[_].endDate.day == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.oneTimeWindows[_].endDate.month == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.oneTimeWindows[_].endDate.year == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.oneTimeWindows[_].endTime.hours == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.oneTimeWindows[_].endTime.minutes == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.oneTimeWindows[_].endTime.nanos == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.oneTimeWindows[_].endTime.seconds == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.oneTimeWindows[_].startDate.day == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.oneTimeWindows[_].startDate.month == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.oneTimeWindows[_].startDate.year == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.oneTimeWindows[_].startTime.hours == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.oneTimeWindows[_].startTime.minutes == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.oneTimeWindows[_].startTime.nanos == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.oneTimeWindows[_].startTime.seconds == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.timeZone == STRING
    input.Body.rules[_].rolloutRestriction.timeWindows.weeklyWindows[_].daysOfWeek[_] == enum_WeeklyWindowDaysOfWeek[_]
    input.Body.rules[_].rolloutRestriction.timeWindows.weeklyWindows[_].endTime.hours == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.weeklyWindows[_].endTime.minutes == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.weeklyWindows[_].endTime.nanos == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.weeklyWindows[_].endTime.seconds == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.weeklyWindows[_].startTime.hours == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.weeklyWindows[_].startTime.minutes == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.weeklyWindows[_].startTime.nanos == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.weeklyWindows[_].startTime.seconds == INTEGER
    input.Body.selectors[_].deliveryPipeline.id == STRING
    input.Body.selectors[_].deliveryPipeline.labels.STRING == STRING
    input.Body.selectors[_].target.id == STRING
    input.Body.selectors[_].target.labels.STRING == STRING
    input.Body.suspended == BOOLEAN
    input.ReqMap.parent == STRING
    input.Qs.deployPolicyId == STRING
    input.Qs.requestId == STRING
    input.Qs.validateOnly == BOOLEAN
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deployPolicies.delete

valid {
    input.ReqMap.name == STRING
    input.Qs.allowMissing == BOOLEAN
    input.Qs.etag == STRING
    input.Qs.requestId == STRING
    input.Qs.validateOnly == BOOLEAN
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deployPolicies.get

valid {
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deployPolicies.getIamPolicy

valid {
    input.ReqMap.resource == STRING
    input.Qs.options.requestedPolicyVersion == INTEGER
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deployPolicies.list

valid {
    input.ReqMap.parent == STRING
    input.Qs.filter == STRING
    input.Qs.orderBy == STRING
    input.Qs.pageSize == INTEGER
    input.Qs.pageToken == STRING
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deployPolicies.patch

enum_RolloutRestrictionActions := [ "ROLLOUT_ACTIONS_UNSPECIFIED", "ADVANCE", "APPROVE", "CANCEL", "CREATE", "IGNORE_JOB", "RETRY_JOB", "ROLLBACK", "TERMINATE_JOBRUN" ]
enum_RolloutRestrictionInvokers := [ "INVOKER_UNSPECIFIED", "USER", "DEPLOY_AUTOMATION" ]
enum_WeeklyWindowDaysOfWeek := [ "DAY_OF_WEEK_UNSPECIFIED", "MONDAY", "TUESDAY", "WEDNESDAY", "THURSDAY", "FRIDAY", "SATURDAY", "SUNDAY" ]

valid {
    input.Body.annotations.STRING == STRING
    input.Body.description == STRING
    input.Body.etag == STRING
    input.Body.labels.STRING == STRING
    input.Body.rules[_].rolloutRestriction.actions[_] == enum_RolloutRestrictionActions[_]
    input.Body.rules[_].rolloutRestriction.id == STRING
    input.Body.rules[_].rolloutRestriction.invokers[_] == enum_RolloutRestrictionInvokers[_]
    input.Body.rules[_].rolloutRestriction.timeWindows.oneTimeWindows[_].endDate.day == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.oneTimeWindows[_].endDate.month == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.oneTimeWindows[_].endDate.year == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.oneTimeWindows[_].endTime.hours == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.oneTimeWindows[_].endTime.minutes == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.oneTimeWindows[_].endTime.nanos == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.oneTimeWindows[_].endTime.seconds == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.oneTimeWindows[_].startDate.day == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.oneTimeWindows[_].startDate.month == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.oneTimeWindows[_].startDate.year == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.oneTimeWindows[_].startTime.hours == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.oneTimeWindows[_].startTime.minutes == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.oneTimeWindows[_].startTime.nanos == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.oneTimeWindows[_].startTime.seconds == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.timeZone == STRING
    input.Body.rules[_].rolloutRestriction.timeWindows.weeklyWindows[_].daysOfWeek[_] == enum_WeeklyWindowDaysOfWeek[_]
    input.Body.rules[_].rolloutRestriction.timeWindows.weeklyWindows[_].endTime.hours == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.weeklyWindows[_].endTime.minutes == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.weeklyWindows[_].endTime.nanos == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.weeklyWindows[_].endTime.seconds == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.weeklyWindows[_].startTime.hours == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.weeklyWindows[_].startTime.minutes == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.weeklyWindows[_].startTime.nanos == INTEGER
    input.Body.rules[_].rolloutRestriction.timeWindows.weeklyWindows[_].startTime.seconds == INTEGER
    input.Body.selectors[_].deliveryPipeline.id == STRING
    input.Body.selectors[_].deliveryPipeline.labels.STRING == STRING
    input.Body.selectors[_].target.id == STRING
    input.Body.selectors[_].target.labels.STRING == STRING
    input.Body.suspended == BOOLEAN
    input.ReqMap.name == STRING
    input.Qs.allowMissing == BOOLEAN
    input.Qs.requestId == STRING
    input.Qs.updateMask == STRING
    input.Qs.validateOnly == BOOLEAN
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.deployPolicies.setIamPolicy

enum_AuditLogConfigLogType := [ "LOG_TYPE_UNSPECIFIED", "ADMIN_READ", "DATA_WRITE", "DATA_READ" ]

valid {
    input.Body.policy.auditConfigs[_].auditLogConfigs[_].exemptedMembers[_] == STRING
    input.Body.policy.auditConfigs[_].auditLogConfigs[_].logType == enum_AuditLogConfigLogType[_]
    input.Body.policy.auditConfigs[_].service == STRING
    input.Body.policy.bindings[_].condition.description == STRING
    input.Body.policy.bindings[_].condition.expression == STRING
    input.Body.policy.bindings[_].condition.location == STRING
    input.Body.policy.bindings[_].condition.title == STRING
    input.Body.policy.bindings[_].members[_] == STRING
    input.Body.policy.bindings[_].role == STRING
    input.Body.policy.etag == STRING
    input.Body.policy.version == INTEGER
    input.Body.updateMask == STRING
    input.ReqMap.resource == STRING
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.get

valid {
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.getConfig

valid {
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.list

valid {
    input.ReqMap.name == STRING
    input.Qs.extraLocationTypes == STRING
    input.Qs.filter == STRING
    input.Qs.pageSize == INTEGER
    input.Qs.pageToken == STRING
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.operations.cancel

valid {
    input.Body.STRING == STRING
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.operations.delete

valid {
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.operations.get

valid {
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.operations.list

valid {
    input.ReqMap.name == STRING
    input.Qs.filter == STRING
    input.Qs.pageSize == INTEGER
    input.Qs.pageToken == STRING
    input.Qs.returnPartialSuccess == BOOLEAN
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.targets.create

enum_ExecutionConfigUsages := [ "EXECUTION_ENVIRONMENT_USAGE_UNSPECIFIED", "RENDER", "DEPLOY", "VERIFY", "PREDEPLOY", "POSTDEPLOY" ]

valid {
    input.Body.annotations.STRING == STRING
    input.Body.anthosCluster.membership == STRING
    input.Body.associatedEntities.STRING.anthosClusters[_].membership == STRING
    input.Body.associatedEntities.STRING.gkeClusters[_].cluster == STRING
    input.Body.associatedEntities.STRING.gkeClusters[_].dnsEndpoint == BOOLEAN
    input.Body.associatedEntities.STRING.gkeClusters[_].internalIp == BOOLEAN
    input.Body.associatedEntities.STRING.gkeClusters[_].proxyUrl == STRING
    input.Body.customTarget.customTargetType == STRING
    input.Body.deployParameters.STRING == STRING
    input.Body.description == STRING
    input.Body.etag == STRING
    input.Body.executionConfigs[_].artifactStorage == STRING
    input.Body.executionConfigs[_].defaultPool.artifactStorage == STRING
    input.Body.executionConfigs[_].defaultPool.serviceAccount == STRING
    input.Body.executionConfigs[_].executionTimeout == STRING
    input.Body.executionConfigs[_].privatePool.artifactStorage == STRING
    input.Body.executionConfigs[_].privatePool.serviceAccount == STRING
    input.Body.executionConfigs[_].privatePool.workerPool == STRING
    input.Body.executionConfigs[_].serviceAccount == STRING
    input.Body.executionConfigs[_].usages[_] == enum_ExecutionConfigUsages[_]
    input.Body.executionConfigs[_].verbose == BOOLEAN
    input.Body.executionConfigs[_].workerPool == STRING
    input.Body.gke.cluster == STRING
    input.Body.gke.dnsEndpoint == BOOLEAN
    input.Body.gke.internalIp == BOOLEAN
    input.Body.gke.proxyUrl == STRING
    input.Body.labels.STRING == STRING
    input.Body.multiTarget.targetIds[_] == STRING
    input.Body.name == STRING
    input.Body.requireApproval == BOOLEAN
    input.Body.run.location == STRING
    input.ReqMap.parent == STRING
    input.Qs.requestId == STRING
    input.Qs.targetId == STRING
    input.Qs.validateOnly == BOOLEAN
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.targets.delete

valid {
    input.ReqMap.name == STRING
    input.Qs.allowMissing == BOOLEAN
    input.Qs.etag == STRING
    input.Qs.requestId == STRING
    input.Qs.validateOnly == BOOLEAN
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.targets.get

valid {
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.targets.getIamPolicy

valid {
    input.ReqMap.resource == STRING
    input.Qs.options.requestedPolicyVersion == INTEGER
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.targets.list

valid {
    input.ReqMap.parent == STRING
    input.Qs.filter == STRING
    input.Qs.orderBy == STRING
    input.Qs.pageSize == INTEGER
    input.Qs.pageToken == STRING
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.targets.patch

enum_ExecutionConfigUsages := [ "EXECUTION_ENVIRONMENT_USAGE_UNSPECIFIED", "RENDER", "DEPLOY", "VERIFY", "PREDEPLOY", "POSTDEPLOY" ]

valid {
    input.Body.annotations.STRING == STRING
    input.Body.anthosCluster.membership == STRING
    input.Body.associatedEntities.STRING.anthosClusters[_].membership == STRING
    input.Body.associatedEntities.STRING.gkeClusters[_].cluster == STRING
    input.Body.associatedEntities.STRING.gkeClusters[_].dnsEndpoint == BOOLEAN
    input.Body.associatedEntities.STRING.gkeClusters[_].internalIp == BOOLEAN
    input.Body.associatedEntities.STRING.gkeClusters[_].proxyUrl == STRING
    input.Body.customTarget.customTargetType == STRING
    input.Body.deployParameters.STRING == STRING
    input.Body.description == STRING
    input.Body.etag == STRING
    input.Body.executionConfigs[_].artifactStorage == STRING
    input.Body.executionConfigs[_].defaultPool.artifactStorage == STRING
    input.Body.executionConfigs[_].defaultPool.serviceAccount == STRING
    input.Body.executionConfigs[_].executionTimeout == STRING
    input.Body.executionConfigs[_].privatePool.artifactStorage == STRING
    input.Body.executionConfigs[_].privatePool.serviceAccount == STRING
    input.Body.executionConfigs[_].privatePool.workerPool == STRING
    input.Body.executionConfigs[_].serviceAccount == STRING
    input.Body.executionConfigs[_].usages[_] == enum_ExecutionConfigUsages[_]
    input.Body.executionConfigs[_].verbose == BOOLEAN
    input.Body.executionConfigs[_].workerPool == STRING
    input.Body.gke.cluster == STRING
    input.Body.gke.dnsEndpoint == BOOLEAN
    input.Body.gke.internalIp == BOOLEAN
    input.Body.gke.proxyUrl == STRING
    input.Body.labels.STRING == STRING
    input.Body.multiTarget.targetIds[_] == STRING
    input.Body.name == STRING
    input.Body.requireApproval == BOOLEAN
    input.Body.run.location == STRING
    input.ReqMap.name == STRING
    input.Qs.allowMissing == BOOLEAN
    input.Qs.requestId == STRING
    input.Qs.updateMask == STRING
    input.Qs.validateOnly == BOOLEAN
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.targets.setIamPolicy

enum_AuditLogConfigLogType := [ "LOG_TYPE_UNSPECIFIED", "ADMIN_READ", "DATA_WRITE", "DATA_READ" ]

valid {
    input.Body.policy.auditConfigs[_].auditLogConfigs[_].exemptedMembers[_] == STRING
    input.Body.policy.auditConfigs[_].auditLogConfigs[_].logType == enum_AuditLogConfigLogType[_]
    input.Body.policy.auditConfigs[_].service == STRING
    input.Body.policy.bindings[_].condition.description == STRING
    input.Body.policy.bindings[_].condition.expression == STRING
    input.Body.policy.bindings[_].condition.location == STRING
    input.Body.policy.bindings[_].condition.title == STRING
    input.Body.policy.bindings[_].members[_] == STRING
    input.Body.policy.bindings[_].role == STRING
    input.Body.policy.etag == STRING
    input.Body.policy.version == INTEGER
    input.Body.updateMask == STRING
    input.ReqMap.resource == STRING
    input.ProviderMetadata.Region == STRING
}

clouddeploy.projects.locations.targets.testIamPermissions

valid {
    input.Body.permissions[_] == STRING
    input.ReqMap.resource == STRING
    input.ProviderMetadata.Region == STRING
}