Code:

package main

import (
	"<http://github.com/pulumi/pulumi-gcp/sdk/v4/go/gcp/organizations|github.com/pulumi/pulumi-gcp/sdk/v4/go/gcp/organizations>"
	"<http://github.com/pulumi/pulumi/sdk/v2/go/pulumi|github.com/pulumi/pulumi/sdk/v2/go/pulumi>"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := organizations.NewPolicy(ctx, "domain_restricted_sharing", &organizations.PolicyArgs{
			Constraint: pulumi.String("constraints/iam.allowedPolicyMemberDomains"),
			ListPolicy: &organizations.PolicyListPolicyArgs{
				Allow: &organizations.PolicyListPolicyAllowArgs{
					// All: pulumi.BoolPtr(true),
					Values: pulumi.StringArray{
						// <https://cloud.google.com/resource-manager/docs/organization-policy/restricting-domains#retrieving_customer_id>
						pulumi.String("C021xxxxx"),
					},
				},
			},
			OrgId: pulumi.String("11111111111"),
		}, pulumi.Protect(true))
		if err != nil {
			return err
		}
}

If I use

All: pulumi.BoolPtr(true),

inside the

ListPolicy

, it is accepted. If I use the Values, it does not.

Also, I imported it with the ListPolicy.Allow.Values, not ListPolicy.Allow.All. I am not trying to make any changes, just have it codified.