googleapis
diff --git a/‎discovery/orgpolicy-v2.json
Lines changed: 160 additions & 19 deletions b/‎discovery/orgpolicy-v2.json
Lines changed: 160 additions & 19 deletions
@@ -429,7 +429,7 @@
               ]
             },
             "get": {
-              "description": "Gets a custom constraint. Returns a `google.rpc.Status` with `google.rpc.Code.NOT_FOUND` if the custom constraint does not exist.",
+              "description": "Gets a custom or managed constraint. Returns a `google.rpc.Status` with `google.rpc.Code.NOT_FOUND` if the custom or managed constraint does not exist.",
               "flatPath": "v2/organizations/{organizationsId}/customConstraints/{customConstraintsId}",
               "httpMethod": "GET",
               "id": "orgpolicy.organizations.customConstraints.get",
@@ -438,7 +438,7 @@
               ],
               "parameters": {
                 "name": {
-                  "description": "Required. Resource name of the custom constraint. See the custom constraint entry for naming requirements.",
+                  "description": "Required. Resource name of the custom or managed constraint. See the custom constraint entry for naming requirements.",
                   "location": "path",
                   "pattern": "^organizations/[^/]+/customConstraints/[^/]+$",
                   "required": true,
@@ -930,11 +930,11 @@
       }
     }
   },
-  "revision": "20240524",
+  "revision": "20250117",
   "rootUrl": "https://orgpolicy.googleapis.com/",
   "schemas": {
     "GoogleCloudOrgpolicyV2AlternatePolicySpec": {
-      "description": "Similar to PolicySpec but with an extra 'launch' field for launch reference. The PolicySpec here is specific for dry-run/darklaunch.",
+      "description": "Similar to PolicySpec but with an extra 'launch' field for launch reference. The PolicySpec here is specific for dry-run.",
       "id": "GoogleCloudOrgpolicyV2AlternatePolicySpec",
       "properties": {
         "launch": {
@@ -949,12 +949,12 @@
       "type": "object"
     },
     "GoogleCloudOrgpolicyV2Constraint": {
-      "description": "A constraint describes a way to restrict resource's configuration. For example, you could enforce a constraint that controls which Google Cloud services can be activated across an organization, or whether a Compute Engine instance can have serial port connections established. Constraints can be configured by the organization policy administrator to fit the needs of the organization by setting a policy that includes constraints at different locations in the organization's resource hierarchy. Policies are inherited down the resource hierarchy from higher levels, but can also be overridden. For details about the inheritance rules please read about `policies`. Constraints have a default behavior determined by the `constraint_default` field, which is the enforcement behavior that is used in the absence of a policy being defined or inherited for the resource in question.",
+      "description": "A constraint describes a way to restrict resource's configuration. For example, you could enforce a constraint that controls which Google Cloud services can be activated across an organization, or whether a Compute Engine instance can have serial port connections established. Constraints can be configured by the organization policy administrator to fit the needs of the organization by setting a policy that includes constraints at different locations in the organization's resource hierarchy. Policies are inherited down the resource hierarchy from higher levels, but can also be overridden. For details about the inheritance rules, see `Policy`. Constraints have a default behavior determined by the `constraint_default` field, which is the enforcement behavior that is used in the absence of a policy being defined or inherited for the resource in question.",
       "id": "GoogleCloudOrgpolicyV2Constraint",
       "properties": {
         "booleanConstraint": {
           "$ref": "GoogleCloudOrgpolicyV2ConstraintBooleanConstraint",
-          "description": "Defines this constraint as being a BooleanConstraint."
+          "description": "Defines this constraint as being a boolean constraint."
         },
         "constraintDefault": {
           "description": "The evaluation behavior of this constraint in the absence of a policy.",
@@ -964,7 +964,7 @@
             "DENY"
           ],
           "enumDescriptions": [
-            "This is only used for distinguishing unset values and should never be used.",
+            "This is only used for distinguishing unset values and should never be used. Results in an error.",
             "Indicate that all values are allowed for list constraints. Indicate that enforcement is off for boolean constraints.",
             "Indicate that all values are denied for list constraints. Indicate that enforcement is on for boolean constraints."
           ],
@@ -980,7 +980,7 @@
         },
         "listConstraint": {
           "$ref": "GoogleCloudOrgpolicyV2ConstraintListConstraint",
-          "description": "Defines this constraint as being a ListConstraint."
+          "description": "Defines this constraint as being a list constraint."
         },
         "name": {
           "description": "Immutable. The resource name of the constraint. Must be in one of the following forms: * `projects/{project_number}/constraints/{constraint_name}` * `folders/{folder_id}/constraints/{constraint_name}` * `organizations/{organization_id}/constraints/{constraint_name}` For example, \"/projects/123/constraints/compute.disableSerialPortAccess\".",
@@ -989,18 +989,151 @@
         "supportsDryRun": {
           "description": "Shows if dry run is supported for this constraint or not.",
           "type": "boolean"
+        },
+        "supportsSimulation": {
+          "description": "Shows if simulation is supported for this constraint or not.",
+          "type": "boolean"
         }
       },
       "type": "object"
     },
     "GoogleCloudOrgpolicyV2ConstraintBooleanConstraint": {
-      "description": "A constraint that is either enforced or not. For example, a constraint `constraints/compute.disableSerialPortAccess`. If it is enforced on a VM instance, serial port connections will not be opened to that instance.",
+      "description": "A constraint type is enforced or not enforced, which is configured in the `PolicyRule`. If `customConstraintDefinition` is defined, this constraint is a managed constraint.",
       "id": "GoogleCloudOrgpolicyV2ConstraintBooleanConstraint",
-      "properties": {},
+      "properties": {
+        "customConstraintDefinition": {
+          "$ref": "GoogleCloudOrgpolicyV2ConstraintCustomConstraintDefinition",
+          "description": "Custom constraint definition. Defines this as a managed constraint."
+        }
+      },
+      "type": "object"
+    },
+    "GoogleCloudOrgpolicyV2ConstraintCustomConstraintDefinition": {
+      "description": "Custom constraint definition. Defines this as a managed constraint.",
+      "id": "GoogleCloudOrgpolicyV2ConstraintCustomConstraintDefinition",
+      "properties": {
+        "actionType": {
+          "description": "Allow or deny type.",
+          "enum": [
+            "ACTION_TYPE_UNSPECIFIED",
+            "ALLOW",
+            "DENY"
+          ],
+          "enumDescriptions": [
+            "This is only used for distinguishing unset values and should never be used. Results in an error.",
+            "Allowed action type.",
+            "Deny action type."
+          ],
+          "type": "string"
+        },
+        "condition": {
+          "description": "Org policy condition/expression. For example: `resource.instanceName.matches(\"[production|test]_.*_(\\d)+\")` or, `resource.management.auto_upgrade == true` The max length of the condition is 1000 characters.",
+          "type": "string"
+        },
+        "methodTypes": {
+          "description": "All the operations being applied for this constraint.",
+          "items": {
+            "enum": [
+              "METHOD_TYPE_UNSPECIFIED",
+              "CREATE",
+              "UPDATE",
+              "DELETE",
+              "REMOVE_GRANT",
+              "GOVERN_TAGS"
+            ],
+            "enumDescriptions": [
+              "This is only used for distinguishing unset values and should never be used. Results in an error.",
+              "Constraint applied when creating the resource.",
+              "Constraint applied when updating the resource.",
+              "Constraint applied when deleting the resource. Not currently supported.",
+              "Constraint applied when removing an IAM grant.",
+              "Constraint applied when enforcing forced tagging."
+            ],
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "parameters": {
+          "additionalProperties": {
+            "$ref": "GoogleCloudOrgpolicyV2ConstraintCustomConstraintDefinitionParameter"
+          },
+          "description": "Stores the structure of `Parameters` used by the constraint condition. The key of `map` represents the name of the parameter.",
+          "type": "object"
+        },
+        "resourceTypes": {
+          "description": "The resource instance type on which this policy applies. Format will be of the form : `/` Example: * `compute.googleapis.com/Instance`.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        }
+      },
+      "type": "object"
+    },
+    "GoogleCloudOrgpolicyV2ConstraintCustomConstraintDefinitionParameter": {
+      "description": "Defines a parameter structure.",
+      "id": "GoogleCloudOrgpolicyV2ConstraintCustomConstraintDefinitionParameter",
+      "properties": {
+        "defaultValue": {
+          "description": "Sets the value of the parameter in an assignment if no value is given.",
+          "type": "any"
+        },
+        "item": {
+          "description": "Determines the parameter's value structure. For example, `LIST` can be specified by defining `type: LIST`, and `item: STRING`.",
+          "enum": [
+            "TYPE_UNSPECIFIED",
+            "LIST",
+            "STRING",
+            "BOOLEAN"
+          ],
+          "enumDescriptions": [
+            "This is only used for distinguishing unset values and should never be used. Results in an error.",
+            "List parameter type.",
+            "String parameter type.",
+            "Boolean parameter type."
+          ],
+          "type": "string"
+        },
+        "metadata": {
+          "$ref": "GoogleCloudOrgpolicyV2ConstraintCustomConstraintDefinitionParameterMetadata",
+          "description": "Defines subproperties primarily used by the UI to display user-friendly information."
+        },
+        "type": {
+          "description": "Type of the parameter.",
+          "enum": [
+            "TYPE_UNSPECIFIED",
+            "LIST",
+            "STRING",
+            "BOOLEAN"
+          ],
+          "enumDescriptions": [
+            "This is only used for distinguishing unset values and should never be used. Results in an error.",
+            "List parameter type.",
+            "String parameter type.",
+            "Boolean parameter type."
+          ],
+          "type": "string"
+        },
+        "validValuesExpr": {
+          "description": "Provides a CEL expression to specify the acceptable parameter values during assignment. For example, parameterName in (\"parameterValue1\", \"parameterValue2\")",
+          "type": "string"
+        }
+      },
+      "type": "object"
+    },
+    "GoogleCloudOrgpolicyV2ConstraintCustomConstraintDefinitionParameterMetadata": {
+      "description": "Defines Metadata structure.",
+      "id": "GoogleCloudOrgpolicyV2ConstraintCustomConstraintDefinitionParameterMetadata",
+      "properties": {
+        "description": {
+          "description": "Detailed description of what this `parameter` is and use of it. Mutable.",
+          "type": "string"
+        }
+      },
       "type": "object"
     },
     "GoogleCloudOrgpolicyV2ConstraintListConstraint": {
-      "description": "A constraint that allows or disallows a list of string values, which are configured by an Organization Policy administrator with a policy.",
+      "description": "A constraint type that allows or disallows a list of string values, which are configured in the `PolicyRule`.",
       "id": "GoogleCloudOrgpolicyV2ConstraintListConstraint",
       "properties": {
         "supportsIn": {
@@ -1026,14 +1159,14 @@
             "DENY"
           ],
           "enumDescriptions": [
-            "Unspecified. Results in an error.",
+            "This is only used for distinguishing unset values and should never be used. Results in an error.",
             "Allowed action type.",
             "Deny action type."
           ],
           "type": "string"
         },
         "condition": {
-          "description": "Org policy condition/expression. For example: `resource.instanceName.matches(\"[production|test]_.*_(\\d)+\")` or, `resource.management.auto_upgrade == true` The max length of the condition is 1000 characters.",
+          "description": "A Common Expression Language (CEL) condition which is used in the evaluation of the constraint. For example: `resource.instanceName.matches(\"[production|test]_.*_(\\d)+\")` or, `resource.management.auto_upgrade == true` The max length of the condition is 1000 characters.",
           "type": "string"
         },
         "description": {
@@ -1056,10 +1189,10 @@
               "GOVERN_TAGS"
             ],
             "enumDescriptions": [
-              "Unspecified. Results in an error.",
+              "This is only used for distinguishing unset values and should never be used. Results in an error.",
               "Constraint applied when creating the resource.",
               "Constraint applied when updating the resource.",
-              "Constraint applied when deleting the resource. Not supported yet.",
+              "Constraint applied when deleting the resource. Not currently supported.",
               "Constraint applied when removing an IAM grant.",
               "Constraint applied when enforcing forced tagging."
             ],
@@ -1079,7 +1212,7 @@
           "type": "array"
         },
         "updateTime": {
-          "description": "Output only. The last time this custom constraint was updated. This represents the last time that the `CreateCustomConstraint` or `UpdateCustomConstraint` RPC was called",
+          "description": "Output only. The last time this custom constraint was updated. This represents the last time that the `CreateCustomConstraint` or `UpdateCustomConstraint` methods were called.",
           "format": "google-datetime",
           "readOnly": true,
           "type": "string"
@@ -1106,11 +1239,11 @@
       "type": "object"
     },
     "GoogleCloudOrgpolicyV2ListCustomConstraintsResponse": {
-      "description": "The response returned from the ListCustomConstraints method. It will be empty if no custom constraints are set on the organization resource.",
+      "description": "The response returned from the ListCustomConstraints method. It will be empty if no custom or managed constraints are set on the organization resource.",
       "id": "GoogleCloudOrgpolicyV2ListCustomConstraintsResponse",
       "properties": {
         "customConstraints": {
-          "description": "All custom constraints that exist on the organization resource. It will be empty if no custom constraints are set.",
+          "description": "All custom and managed constraints that exist on the organization resource. It will be empty if no custom constraints are set.",
           "items": {
             "$ref": "GoogleCloudOrgpolicyV2CustomConstraint"
           },
@@ -1164,7 +1297,7 @@
         },
         "spec": {
           "$ref": "GoogleCloudOrgpolicyV2PolicySpec",
-          "description": "Basic information about the Organization Policy."
+          "description": "Basic information about the organization policy."
         }
       },
       "type": "object"
@@ -1221,6 +1354,14 @@
           "description": "If `true`, then the policy is enforced. If `false`, then any configuration is acceptable. This field can be set only in policies for boolean constraints.",
           "type": "boolean"
         },
+        "parameters": {
+          "additionalProperties": {
+            "description": "Properties of the object.",
+            "type": "any"
+          },
+          "description": "Optional. Required for managed constraints if parameters are defined. Passes parameter values when policy enforcement is enabled. Ensure that parameter value types match those defined in the constraint definition. For example: { \"allowedLocations\" : [\"us-east1\", \"us-west1\"], \"allowAll\" : true }",
+          "type": "object"
+        },
         "values": {
           "$ref": "GoogleCloudOrgpolicyV2PolicySpecPolicyRuleStringValues",
           "description": "List of values to be used for this policy rule. This field can be set only in policies for list constraints."