From 5baf98d874c829695ac32460c94bdd7efa5eda5f Mon Sep 17 00:00:00 2001 From: Aleksandr Averbukh Date: Fri, 8 Jul 2022 16:02:32 +0200 Subject: [PATCH] Fix documentation for organization-policy module --- modules/organization-policy/README.md | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/modules/organization-policy/README.md b/modules/organization-policy/README.md index ab94832b7a..84429e8cc2 100644 --- a/modules/organization-policy/README.md +++ b/modules/organization-policy/README.md @@ -125,7 +125,7 @@ cat ./policies/baseline.yaml organizations/1234567890: constraints/compute.vmExternalIpAccess: rules: - - deny_all: true + - deny: [] # Stands for deny_all = true folders/1234567890: compute.vmCanIpForward: inherit_from_parent: false @@ -136,13 +136,12 @@ projects/my-project-id: run.allowedIngress: inherit_from_parent: true rules: - - condition: + - allow: ['internal'] # Stands for values.allowed_values + condition: description: allow internal ingress expression: resource.matchTag("123456789/environment", "prod") location: test.log title: allow-for-prod - values: - allowed_values: ['internal'] iam.allowServiceAccountCredentialLifetimeExtension: rules: - deny: [] # Stands for deny_all = true