Gets details of a global VM extension policy.
GET https://compute.googleapis.com/compute/v1/projects/{project}/global/vmExtensionPolicies/{globalVmExtensionPolicy}
The URL uses gRPC Transcoding syntax. To know more about valid error responses that can be thrown by this HTTP request, please refer to the service error catalog
| Parameters | |
|---|---|
project |
Project ID for this request. |
globalVmExtensionPolicy |
Name of the GlobalVmExtensionPolicy resource to return. |
The request body must be empty.
Message describing GlobalVmExtensionPolicy object.
If successful, the response body contains data with the following structure:
| JSON representation |
|---|
{ "kind": string, "id": string, "creationTimestamp": string, "updateTimestamp": string, "name": string, "description": string, "selfLink": string, "selfLinkWithId": string, "extensionPolicies": { string: { "stringConfig": string, "pinnedVersion": string }, ... }, "instanceSelectors": [ { "labelSelector": { "inclusionLabels": { string: string, ... } } } ], "priority": integer, "scopedResourceStatus": enum, "rolloutOperation": { "rolloutInput": { "retryUuid": string, "conflictBehavior": string, // Union field |
kindstring
Output only. Type of the resource. Always compute#globalVmExtensionPolicy for globalVmExtensionPolicies.
idstring (uint64 format)
Output only. The unique identifier for the resource. This identifier is defined by the server.
creationTimestampstring
Output only. Creation timestamp in RFC3339 text format.
updateTimestampstring
Output only. globalVmExtensionPolicies.update timestamp in RFC3339 text format.
namestring
Name of the resource. Provided by the client when the resource is created. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression [a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
descriptionstring
An optional description of this resource. Provide this property when you create the resource.
selfLinkstring
Output only. Server-defined fully-qualified URL for this resource.
selfLinkWithIdstring
Output only. Server-defined URL for this resource's resource id.
extensionPolicies[]map (key: string, value: object)
Required. Map from extension (eg: "cloudops") to its policy configuration. The key is the name of the extension.
extensionPolicies[].stringConfigstring
Optional. String configuration. Any string payload that the extension understands.
extensionPolicies[].pinnedVersionstring
Optional. The version pinning for the extension. If empty, the extension will be installed with the latest version released by the extension producer.
instanceSelectors[]object
Optional. Selector to target VMs for a policy. There is a logical "AND" between instanceSelectors.
instanceSelectors[].labelSelectorobject
Optional. Labels within the LabelSelector are OR'd.
instanceSelectors[].labelSelector.inclusionLabelsmap (key: string, value: string)
Optional. Labels as key value pairs. A VM should contain all the pairs specified in this map to be selected; Labels within the LabelSelector are OR'ed.
priorityinteger
Optional. Used to resolve conflicts when multiple policies are active for the same extension. Defaults to 0.
Larger the number, higher the priority. When the priority is the same, the policy with the newer create time has higher priority.
scopedResourceStatusenum
Output only. The scoped resource status. It's only for tracking the purging status of the policy.
rolloutOperationobject
Required. The rollout strategy and status.
rolloutOperation.rolloutInputobject
Required. The rollout input which defines the rollout plan.
rolloutOperation.rolloutInput.namestring
rolloutOperation.rolloutInput.predefinedRolloutPlanenum
Optional. Specifies the predefined rollout plan for the policy. Valid values are SLOW_ROLLOUT and FAST_ROLLOUT. The recommended value is SLOW_ROLLOUT for progressive rollout. For more information, see Rollout plans for global policies.
rolloutOperation.rolloutInput.retryUuidstring
Optional. The UUID that identifies a policy rollout retry attempt for update and delete operations. Set this field only when retrying a rollout for an existing extension policy.
update method: Lets you retry policy rollout without changes. An error occurs if you set retryUuid but the policy is modified.delete method: Lets you retry policy deletion rollout if the previous deletion rollout is not finished and the policy is in the DELETING state. If you set this field when the policy is not in the DELETING state, an error occurs.rolloutOperation.rolloutInput.conflictBehaviorstring
Optional. Specifies the behavior of the rollout if a conflict is detected in a project during a rollout. This only applies to insert and update methods.
A conflict occurs in the following cases:
insert method: If the zonal policy already exists when the insert happens.update method: If the zonal policy was modified by a zonal API call outside of this rollout.Possible values are the following:
"" (empty string): If a conflict occurs, the local value is not overwritten. This is the default behavior."overwrite": If a conflict occurs, the local value is overwritten with the rollout value.rolloutOperation.rolloutStatusobject
Output only. The rollout status of the policy.
rolloutOperation.rolloutStatus.currentRollouts[]object
Output only. The current rollouts for the latest version of the resource. There should be only one current rollout, but for scalability, we make it repeated.
rolloutOperation.rolloutStatus.currentRollouts[].rolloutstring
rolloutOperation.rolloutStatus.currentRollouts[].rolloutPlanstring
rolloutOperation.rolloutStatus.currentRollouts[].stateenum
Output only. The overall state of the rollout.
rolloutOperation.rolloutStatus.currentRollouts[].locationRolloutStatus[]map (key: string, value: object)
Output only. The rollout status for each location. The list of the locations is the same as the list of locations in the rollout plan.
rolloutOperation.rolloutStatus.currentRollouts[].locationRolloutStatus[].stateenum
Output only. The state of the location rollout.
rolloutOperation.rolloutStatus.previousRolloutobject
Output only. The last completed rollout resource. This field will not be populated until the first rollout is completed.
rolloutOperation.rolloutStatus.previousRollout.rolloutstring
rolloutOperation.rolloutStatus.previousRollout.rolloutPlanstring
rolloutOperation.rolloutStatus.previousRollout.stateenum
Output only. The overall state of the rollout.
rolloutOperation.rolloutStatus.previousRollout.locationRolloutStatus[]map (key: string, value: object)
Output only. The rollout status for each location. The list of the locations is the same as the list of locations in the rollout plan.
rolloutOperation.rolloutStatus.previousRollout.locationRolloutStatus[].stateenum
Output only. The state of the location rollout.
Requires one of the following OAuth scopes:
https://www.googleapis.com/auth/compute.readonly
https://www.googleapis.com/auth/compute
https://www.googleapis.com/auth/cloud-platformFor more information, see the Authentication Overview.
In addition to any permissions specified on the fields above, authorization requires one or more of the following IAM permissions:
compute.vmExtensionPolicies.getTo find predefined roles that contain those permissions, see Compute Engine IAM Roles.
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2026-05-13 UTC.