in gcpdiag/runbook/crm/generalized_steps.py [0:0]
def execute(self):
"""Checking Organization policy"""
project_id = self.project or op.get(flags.PROJECT_ID)
project = crm.get_project(project_id)
constraint = orgpolicy.get_effective_org_policy(project_id, self.constraint)
expected_state = 'enforced' if self.is_enforced else 'not enforced'
actual_state = 'enforced' if constraint.is_enforced() else 'not enforced'
# Is effected to be enforced and is enforce or vice versa
if (self.is_enforced and
constraint.is_enforced()) or (not self.is_enforced and
not constraint.is_enforced()):
op.add_ok(resource=project,
reason=op.prep_msg(op.SUCCESS_REASON,
constraint=self.constraint,
expected_state=expected_state,
actual_state=actual_state))
# Is effected to be enforced and is enforce or vice versa
elif (self.is_enforced and
not constraint.is_enforced()) or (not self.is_enforced and
constraint.is_enforced()):
op.add_failed(resource=project,
reason=op.prep_msg(constants.FAILURE_REASON,
constraint=self.constraint,
expected_state=expected_state,
actual_state=actual_state),
remediation=op.prep_msg(constants.FAILURE_REMEDIATION))