google-api-client 0.28.4 → 0.29.2

data/generated/google/apis/iam_v1/service.rb

@@ -88,7 +88,7 @@ module Google
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
         def lint_iam_policy_policy(lint_policy_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:post, 'v1/iamPolicies:lintPolicy', options)
+          command = make_simple_command(:post, 'v1/iamPolicies:lintPolicy', options)
           command.request_representation = Google::Apis::IamV1::LintPolicyRequest::Representation
           command.request_object = lint_policy_request_object
           command.response_representation = Google::Apis::IamV1::LintPolicyResponse::Representation
@@ -119,7 +119,7 @@ module Google
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
         def query_iam_policy_auditable_services(query_auditable_services_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:post, 'v1/iamPolicies:queryAuditableServices', options)
+          command = make_simple_command(:post, 'v1/iamPolicies:queryAuditableServices', options)
           command.request_representation = Google::Apis::IamV1::QueryAuditableServicesRequest::Representation
           command.request_object = query_auditable_services_request_object
           command.response_representation = Google::Apis::IamV1::QueryAuditableServicesResponse::Representation
@@ -153,7 +153,7 @@ module Google
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
         def create_organization_role(parent, create_role_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:post, 'v1/{+parent}/roles', options)
+          command = make_simple_command(:post, 'v1/{+parent}/roles', options)
           command.request_representation = Google::Apis::IamV1::CreateRoleRequest::Representation
           command.request_object = create_role_request_object
           command.response_representation = Google::Apis::IamV1::Role::Representation
@@ -195,7 +195,7 @@ module Google
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
         def delete_organization_role(name, etag: nil, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:delete, 'v1/{+name}', options)
+          command = make_simple_command(:delete, 'v1/{+name}', options)
           command.response_representation = Google::Apis::IamV1::Role::Representation
           command.response_class = Google::Apis::IamV1::Role
           command.params['name'] = name unless name.nil?
@@ -229,7 +229,7 @@ module Google
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
         def get_organization_role(name, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:get, 'v1/{+name}', options)
+          command = make_simple_command(:get, 'v1/{+name}', options)
           command.response_representation = Google::Apis::IamV1::Role::Representation
           command.response_class = Google::Apis::IamV1::Role
           command.params['name'] = name unless name.nil?
@@ -251,7 +251,10 @@ module Google
         # @param [Boolean] show_deleted
         #   Include Roles that have been deleted.
         # @param [String] view
-        #   Optional view for the returned Role objects.
+        #   Optional view for the returned Role objects. When `FULL` is specified,
+        #   the `includedPermissions` field is returned, which includes a list of all
+        #   permissions in the role. The default value is `BASIC`, which does not
+        #   return the `includedPermissions` field.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -270,7 +273,7 @@ module Google
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
         def list_organization_roles(parent, page_size: nil, page_token: nil, show_deleted: nil, view: nil, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:get, 'v1/{+parent}/roles', options)
+          command = make_simple_command(:get, 'v1/{+parent}/roles', options)
           command.response_representation = Google::Apis::IamV1::ListRolesResponse::Representation
           command.response_class = Google::Apis::IamV1::ListRolesResponse
           command.params['parent'] = parent unless parent.nil?
@@ -310,7 +313,7 @@ module Google
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
         def patch_organization_role(name, role_object = nil, update_mask: nil, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:patch, 'v1/{+name}', options)
+          command = make_simple_command(:patch, 'v1/{+name}', options)
           command.request_representation = Google::Apis::IamV1::Role::Representation
           command.request_object = role_object
           command.response_representation = Google::Apis::IamV1::Role::Representation
@@ -346,7 +349,7 @@ module Google
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
         def undelete_organization_role(name, undelete_role_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:post, 'v1/{+name}:undelete', options)
+          command = make_simple_command(:post, 'v1/{+name}:undelete', options)
           command.request_representation = Google::Apis::IamV1::UndeleteRoleRequest::Representation
           command.request_object = undelete_role_request_object
           command.response_representation = Google::Apis::IamV1::Role::Representation
@@ -378,7 +381,7 @@ module Google
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
         def query_testable_permissions(query_testable_permissions_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:post, 'v1/permissions:queryTestablePermissions', options)
+          command = make_simple_command(:post, 'v1/permissions:queryTestablePermissions', options)
           command.request_representation = Google::Apis::IamV1::QueryTestablePermissionsRequest::Representation
           command.request_object = query_testable_permissions_request_object
           command.response_representation = Google::Apis::IamV1::QueryTestablePermissionsResponse::Representation
@@ -412,7 +415,7 @@ module Google
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
         def create_project_role(parent, create_role_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:post, 'v1/{+parent}/roles', options)
+          command = make_simple_command(:post, 'v1/{+parent}/roles', options)
           command.request_representation = Google::Apis::IamV1::CreateRoleRequest::Representation
           command.request_object = create_role_request_object
           command.response_representation = Google::Apis::IamV1::Role::Representation
@@ -454,7 +457,7 @@ module Google
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
         def delete_project_role(name, etag: nil, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:delete, 'v1/{+name}', options)
+          command = make_simple_command(:delete, 'v1/{+name}', options)
           command.response_representation = Google::Apis::IamV1::Role::Representation
           command.response_class = Google::Apis::IamV1::Role
           command.params['name'] = name unless name.nil?
@@ -488,7 +491,7 @@ module Google
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
         def get_project_role(name, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:get, 'v1/{+name}', options)
+          command = make_simple_command(:get, 'v1/{+name}', options)
           command.response_representation = Google::Apis::IamV1::Role::Representation
           command.response_class = Google::Apis::IamV1::Role
           command.params['name'] = name unless name.nil?
@@ -510,7 +513,10 @@ module Google
         # @param [Boolean] show_deleted
         #   Include Roles that have been deleted.
         # @param [String] view
-        #   Optional view for the returned Role objects.
+        #   Optional view for the returned Role objects. When `FULL` is specified,
+        #   the `includedPermissions` field is returned, which includes a list of all
+        #   permissions in the role. The default value is `BASIC`, which does not
+        #   return the `includedPermissions` field.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -529,7 +535,7 @@ module Google
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
         def list_project_roles(parent, page_size: nil, page_token: nil, show_deleted: nil, view: nil, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:get, 'v1/{+parent}/roles', options)
+          command = make_simple_command(:get, 'v1/{+parent}/roles', options)
           command.response_representation = Google::Apis::IamV1::ListRolesResponse::Representation
           command.response_class = Google::Apis::IamV1::ListRolesResponse
           command.params['parent'] = parent unless parent.nil?
@@ -569,7 +575,7 @@ module Google
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
         def patch_project_role(name, role_object = nil, update_mask: nil, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:patch, 'v1/{+name}', options)
+          command = make_simple_command(:patch, 'v1/{+name}', options)
           command.request_representation = Google::Apis::IamV1::Role::Representation
           command.request_object = role_object
           command.response_representation = Google::Apis::IamV1::Role::Representation
@@ -605,7 +611,7 @@ module Google
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
         def undelete_project_role(name, undelete_role_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:post, 'v1/{+name}:undelete', options)
+          command = make_simple_command(:post, 'v1/{+name}:undelete', options)
           command.request_representation = Google::Apis::IamV1::UndeleteRoleRequest::Representation
           command.request_object = undelete_role_request_object
           command.response_representation = Google::Apis::IamV1::Role::Representation
@@ -640,7 +646,7 @@ module Google
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
         def create_service_account(name, create_service_account_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:post, 'v1/{+name}/serviceAccounts', options)
+          command = make_simple_command(:post, 'v1/{+name}/serviceAccounts', options)
           command.request_representation = Google::Apis::IamV1::CreateServiceAccountRequest::Representation
           command.request_object = create_service_account_request_object
           command.response_representation = Google::Apis::IamV1::ServiceAccount::Representation
@@ -676,7 +682,100 @@ module Google
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
         def delete_project_service_account(name, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:delete, 'v1/{+name}', options)
+          command = make_simple_command(:delete, 'v1/{+name}', options)
+          command.response_representation = Google::Apis::IamV1::Empty::Representation
+          command.response_class = Google::Apis::IamV1::Empty
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # DisableServiceAccount is currently in the alpha launch stage.
+        # Disables a ServiceAccount,
+        # which immediately prevents the service account from authenticating and
+        # gaining access to APIs.
+        # Disabled service accounts can be safely restored by using
+        # EnableServiceAccount at any point. Deleted service accounts cannot be
+        # restored using this method.
+        # Disabling a service account that is bound to VMs, Apps, Functions, or
+        # other jobs will cause those jobs to lose access to resources if they are
+        # using the disabled service account.
+        # To improve reliability of your services and avoid unexpected outages, it
+        # is recommended to first disable a service account rather than delete it.
+        # After disabling the service account, wait at least 24 hours to verify there
+        # are no unintended consequences, and then delete the service account.
+        # @param [String] name
+        #   The resource name of the service account in the following format:
+        #   `projects/`PROJECT_ID`/serviceAccounts/`ACCOUNT``.
+        #   Using `-` as a wildcard for the `PROJECT_ID` will infer the project from
+        #   the account. The `ACCOUNT` value can be the `email` address or the
+        #   `unique_id` of the service account.
+        # @param [Google::Apis::IamV1::DisableServiceAccountRequest] disable_service_account_request_object
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::IamV1::Empty] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::IamV1::Empty]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def disable_service_account(name, disable_service_account_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:post, 'v1/{+name}:disable', options)
+          command.request_representation = Google::Apis::IamV1::DisableServiceAccountRequest::Representation
+          command.request_object = disable_service_account_request_object
+          command.response_representation = Google::Apis::IamV1::Empty::Representation
+          command.response_class = Google::Apis::IamV1::Empty
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # EnableServiceAccount is currently in the alpha launch stage.
+        # Restores a disabled ServiceAccount
+        # that has been manually disabled by using DisableServiceAccount. Service
+        # accounts that have been disabled by other means or for other reasons,
+        # such as abuse, cannot be restored using this method.
+        # EnableServiceAccount will have no effect on a service account that is
+        # not disabled.  Enabling an already enabled service account will have no
+        # effect.
+        # @param [String] name
+        #   The resource name of the service account in the following format:
+        #   `projects/`PROJECT_ID`/serviceAccounts/`ACCOUNT_UNIQUE_ID`'.
+        #   Using `-` as a wildcard for the `PROJECT_ID` will infer the project from
+        #   the account.
+        # @param [Google::Apis::IamV1::EnableServiceAccountRequest] enable_service_account_request_object
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::IamV1::Empty] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::IamV1::Empty]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def enable_service_account(name, enable_service_account_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:post, 'v1/{+name}:enable', options)
+          command.request_representation = Google::Apis::IamV1::EnableServiceAccountRequest::Representation
+          command.request_object = enable_service_account_request_object
           command.response_representation = Google::Apis::IamV1::Empty::Representation
           command.response_class = Google::Apis::IamV1::Empty
           command.params['name'] = name unless name.nil?
@@ -710,7 +809,7 @@ module Google
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
         def get_project_service_account(name, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:get, 'v1/{+name}', options)
+          command = make_simple_command(:get, 'v1/{+name}', options)
           command.response_representation = Google::Apis::IamV1::ServiceAccount::Representation
           command.response_class = Google::Apis::IamV1::ServiceAccount
           command.params['name'] = name unless name.nil?
@@ -719,8 +818,20 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Returns the IAM access control policy for a
+        # Returns the Cloud IAM access control policy for a
         # ServiceAccount.
+        # Note: Service accounts are both
+        # [resources and
+        # identities](/iam/docs/service-accounts#service_account_permissions). This
+        # method treats the service account as a resource. It returns the Cloud IAM
+        # policy that reflects what members have access to the service account.
+        # This method does not return what resources the service account has access
+        # to. To see if a service account has access to a resource, call the
+        # `getIamPolicy` method on the target resource. For example, to view grants
+        # for a project, call the
+        # [projects.getIamPolicy](/resource-manager/reference/rest/v1/projects/
+        # getIamPolicy)
+        # method.
         # @param [String] resource
         #   REQUIRED: The resource for which the policy is being requested.
         #   See the operation documentation for the appropriate value for this field.
@@ -742,7 +853,7 @@ module Google
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
         def get_project_service_account_iam_policy(resource, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:post, 'v1/{+resource}:getIamPolicy', options)
+          command = make_simple_command(:post, 'v1/{+resource}:getIamPolicy', options)
           command.response_representation = Google::Apis::IamV1::Policy::Representation
           command.response_class = Google::Apis::IamV1::Policy
           command.params['resource'] = resource unless resource.nil?
@@ -781,7 +892,7 @@ module Google
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
         def list_project_service_accounts(name, page_size: nil, page_token: nil, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:get, 'v1/{+name}/serviceAccounts', options)
+          command = make_simple_command(:get, 'v1/{+name}/serviceAccounts', options)
           command.response_representation = Google::Apis::IamV1::ListServiceAccountsResponse::Representation
           command.response_class = Google::Apis::IamV1::ListServiceAccountsResponse
           command.params['name'] = name unless name.nil?
@@ -792,8 +903,65 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Sets the IAM access control policy for a
+        # Patches a ServiceAccount.
+        # Currently, only the following fields are updatable:
+        # `display_name` and `description`.
+        # Only fields specified in the request are guaranteed to be returned in
+        # the response. Other fields in the response may be empty.
+        # Note: The field mask is required.
+        # @param [String] name
+        #   The resource name of the service account in the following format:
+        #   `projects/`PROJECT_ID`/serviceAccounts/`ACCOUNT``.
+        #   Requests using `-` as a wildcard for the `PROJECT_ID` will infer the
+        #   project from the `account` and the `ACCOUNT` value can be the `email`
+        #   address or the `unique_id` of the service account.
+        #   In responses the resource name will always be in the format
+        #   `projects/`PROJECT_ID`/serviceAccounts/`ACCOUNT``.
+        # @param [Google::Apis::IamV1::PatchServiceAccountRequest] patch_service_account_request_object
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::IamV1::ServiceAccount] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::IamV1::ServiceAccount]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def patch_service_account(name, patch_service_account_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:patch, 'v1/{+name}', options)
+          command.request_representation = Google::Apis::IamV1::PatchServiceAccountRequest::Representation
+          command.request_object = patch_service_account_request_object
+          command.response_representation = Google::Apis::IamV1::ServiceAccount::Representation
+          command.response_class = Google::Apis::IamV1::ServiceAccount
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Sets the Cloud IAM access control policy for a
         # ServiceAccount.
+        # Note: Service accounts are both
+        # [resources and
+        # identities](/iam/docs/service-accounts#service_account_permissions). This
+        # method treats the service account as a resource. Use it to grant members
+        # access to the service account, such as when they need to impersonate it.
+        # This method does not grant the service account access to other resources,
+        # such as projects. To grant a service account access to resources, include
+        # the service account in the Cloud IAM policy for the desired resource, then
+        # call the appropriate `setIamPolicy` method on the target resource. For
+        # example, to grant a service account access to a project, call the
+        # [projects.setIamPolicy](/resource-manager/reference/rest/v1/projects/
+        # setIamPolicy)
+        # method.
         # @param [String] resource
         #   REQUIRED: The resource for which the policy is being specified.
         #   See the operation documentation for the appropriate value for this field.
@@ -816,7 +984,7 @@ module Google
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
         def set_service_account_iam_policy(resource, set_iam_policy_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:post, 'v1/{+resource}:setIamPolicy', options)
+          command = make_simple_command(:post, 'v1/{+resource}:setIamPolicy', options)
           command.request_representation = Google::Apis::IamV1::SetIamPolicyRequest::Representation
           command.request_object = set_iam_policy_request_object
           command.response_representation = Google::Apis::IamV1::Policy::Representation
@@ -857,7 +1025,7 @@ module Google
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
         def sign_service_account_blob(name, sign_blob_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:post, 'v1/{+name}:signBlob', options)
+          command = make_simple_command(:post, 'v1/{+name}:signBlob', options)
           command.request_representation = Google::Apis::IamV1::SignBlobRequest::Representation
           command.request_object = sign_blob_request_object
           command.response_representation = Google::Apis::IamV1::SignBlobResponse::Representation
@@ -901,7 +1069,7 @@ module Google
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
         def sign_service_account_jwt(name, sign_jwt_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:post, 'v1/{+name}:signJwt', options)
+          command = make_simple_command(:post, 'v1/{+name}:signJwt', options)
           command.request_representation = Google::Apis::IamV1::SignJwtRequest::Representation
           command.request_object = sign_jwt_request_object
           command.response_representation = Google::Apis::IamV1::SignJwtResponse::Representation
@@ -936,7 +1104,7 @@ module Google
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
         def test_service_account_iam_permissions(resource, test_iam_permissions_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:post, 'v1/{+resource}:testIamPermissions', options)
+          command = make_simple_command(:post, 'v1/{+resource}:testIamPermissions', options)
           command.request_representation = Google::Apis::IamV1::TestIamPermissionsRequest::Representation
           command.request_object = test_iam_permissions_request_object
           command.response_representation = Google::Apis::IamV1::TestIamPermissionsResponse::Representation
@@ -947,10 +1115,49 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
+        # Restores a deleted ServiceAccount.
+        # This is to be used as an action of last resort.  A service account may
+        # not always be restorable.
+        # @param [String] name
+        #   The resource name of the service account in the following format:
+        #   `projects/`PROJECT_ID`/serviceAccounts/`ACCOUNT_UNIQUE_ID`'.
+        #   Using `-` as a wildcard for the `PROJECT_ID` will infer the project from
+        #   the account.
+        # @param [Google::Apis::IamV1::UndeleteServiceAccountRequest] undelete_service_account_request_object
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::IamV1::UndeleteServiceAccountResponse] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::IamV1::UndeleteServiceAccountResponse]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def undelete_service_account(name, undelete_service_account_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:post, 'v1/{+name}:undelete', options)
+          command.request_representation = Google::Apis::IamV1::UndeleteServiceAccountRequest::Representation
+          command.request_object = undelete_service_account_request_object
+          command.response_representation = Google::Apis::IamV1::UndeleteServiceAccountResponse::Representation
+          command.response_class = Google::Apis::IamV1::UndeleteServiceAccountResponse
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Note: This method is in the process of being deprecated. Use
+        # PatchServiceAccount instead.
         # Updates a ServiceAccount.
         # Currently, only the following fields are updatable:
-        # `display_name` .
-        # The `etag` is mandatory.
+        # `display_name` and `description`.
         # @param [String] name
         #   The resource name of the service account in the following format:
         #   `projects/`PROJECT_ID`/serviceAccounts/`ACCOUNT``.
@@ -978,7 +1185,7 @@ module Google
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
         def update_project_service_account(name, service_account_object = nil, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:put, 'v1/{+name}', options)
+          command = make_simple_command(:put, 'v1/{+name}', options)
           command.request_representation = Google::Apis::IamV1::ServiceAccount::Representation
           command.request_object = service_account_object
           command.response_representation = Google::Apis::IamV1::ServiceAccount::Representation
@@ -1016,7 +1223,7 @@ module Google
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
         def create_service_account_key(name, create_service_account_key_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:post, 'v1/{+name}/keys', options)
+          command = make_simple_command(:post, 'v1/{+name}/keys', options)
           command.request_representation = Google::Apis::IamV1::CreateServiceAccountKeyRequest::Representation
           command.request_object = create_service_account_key_request_object
           command.response_representation = Google::Apis::IamV1::ServiceAccountKey::Representation
@@ -1052,7 +1259,7 @@ module Google
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
         def delete_project_service_account_key(name, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:delete, 'v1/{+name}', options)
+          command = make_simple_command(:delete, 'v1/{+name}', options)
           command.response_representation = Google::Apis::IamV1::Empty::Representation
           command.response_class = Google::Apis::IamV1::Empty
           command.params['name'] = name unless name.nil?
@@ -1090,7 +1297,7 @@ module Google
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
         def get_project_service_account_key(name, public_key_type: nil, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:get, 'v1/{+name}', options)
+          command = make_simple_command(:get, 'v1/{+name}', options)
           command.response_representation = Google::Apis::IamV1::ServiceAccountKey::Representation
           command.response_class = Google::Apis::IamV1::ServiceAccountKey
           command.params['name'] = name unless name.nil?
@@ -1129,7 +1336,7 @@ module Google
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
         def list_project_service_account_keys(name, key_types: nil, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:get, 'v1/{+name}/keys', options)
+          command = make_simple_command(:get, 'v1/{+name}/keys', options)
           command.response_representation = Google::Apis::IamV1::ListServiceAccountKeysResponse::Representation
           command.response_class = Google::Apis::IamV1::ListServiceAccountKeysResponse
           command.params['name'] = name unless name.nil?
@@ -1163,7 +1370,7 @@ module Google
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
         def get_role(name, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:get, 'v1/{+name}', options)
+          command = make_simple_command(:get, 'v1/{+name}', options)
           command.response_representation = Google::Apis::IamV1::Role::Representation
           command.response_class = Google::Apis::IamV1::Role
           command.params['name'] = name unless name.nil?
@@ -1185,7 +1392,10 @@ module Google
         # @param [Boolean] show_deleted
         #   Include Roles that have been deleted.
         # @param [String] view
-        #   Optional view for the returned Role objects.
+        #   Optional view for the returned Role objects. When `FULL` is specified,
+        #   the `includedPermissions` field is returned, which includes a list of all
+        #   permissions in the role. The default value is `BASIC`, which does not
+        #   return the `includedPermissions` field.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -1204,7 +1414,7 @@ module Google
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
         def list_roles(page_size: nil, page_token: nil, parent: nil, show_deleted: nil, view: nil, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:get, 'v1/roles', options)
+          command = make_simple_command(:get, 'v1/roles', options)
           command.response_representation = Google::Apis::IamV1::ListRolesResponse::Representation
           command.response_class = Google::Apis::IamV1::ListRolesResponse
           command.query['pageSize'] = page_size unless page_size.nil?
@@ -1239,7 +1449,7 @@ module Google
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
         def query_grantable_roles(query_grantable_roles_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:post, 'v1/roles:queryGrantableRoles', options)
+          command = make_simple_command(:post, 'v1/roles:queryGrantableRoles', options)
           command.request_representation = Google::Apis::IamV1::QueryGrantableRolesRequest::Representation
           command.request_object = query_grantable_roles_request_object
           command.response_representation = Google::Apis::IamV1::QueryGrantableRolesResponse::Representation

data/generated/google/apis/iam_v1.rb

@@ -27,7 +27,7 @@ module Google
     # @see https://cloud.google.com/iam/
     module IamV1
       VERSION = 'V1'
-      REVISION = '20190201'
+      REVISION = '20190429'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/iamcredentials_v1/classes.rb

@@ -33,7 +33,8 @@ module Google
         # on the service account that is specified in the `name` field of the
         # request.
         # The delegates must have the following format:
-        # `projects/-/serviceAccounts/`ACCOUNT_EMAIL_OR_UNIQUEID``
+        # `projects/-/serviceAccounts/`ACCOUNT_EMAIL_OR_UNIQUEID``. The `-` wildcard
+        # character is required; replacing it with a project ID is invalid.
         # Corresponds to the JSON property `delegates`
         # @return [Array<String>]
         attr_accessor :delegates
@@ -109,7 +110,8 @@ module Google
         # on the service account that is specified in the `name` field of the
         # request.
         # The delegates must have the following format:
-        # `projects/-/serviceAccounts/`ACCOUNT_EMAIL_OR_UNIQUEID``
+        # `projects/-/serviceAccounts/`ACCOUNT_EMAIL_OR_UNIQUEID``. The `-` wildcard
+        # character is required; replacing it with a project ID is invalid.
         # Corresponds to the JSON property `delegates`
         # @return [Array<String>]
         attr_accessor :delegates
@@ -260,7 +262,8 @@ module Google
         # on the service account that is specified in the `name` field of the
         # request.
         # The delegates must have the following format:
-        # `projects/-/serviceAccounts/`ACCOUNT_EMAIL_OR_UNIQUEID``
+        # `projects/-/serviceAccounts/`ACCOUNT_EMAIL_OR_UNIQUEID``. The `-` wildcard
+        # character is required; replacing it with a project ID is invalid.
         # Corresponds to the JSON property `delegates`
         # @return [Array<String>]
         attr_accessor :delegates
@@ -319,7 +322,8 @@ module Google
         # on the service account that is specified in the `name` field of the
         # request.
         # The delegates must have the following format:
-        # `projects/-/serviceAccounts/`ACCOUNT_EMAIL_OR_UNIQUEID``
+        # `projects/-/serviceAccounts/`ACCOUNT_EMAIL_OR_UNIQUEID``. The `-` wildcard
+        # character is required; replacing it with a project ID is invalid.
         # Corresponds to the JSON property `delegates`
         # @return [Array<String>]
         attr_accessor :delegates