google-api-client 0.31.0 → 0.32.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/.kokoro/continuous/linux.cfg +11 -1
- data/.kokoro/continuous/osx.cfg +5 -0
- data/.kokoro/continuous/windows.cfg +10 -0
- data/.kokoro/presubmit/linux.cfg +11 -1
- data/.kokoro/presubmit/osx.cfg +5 -0
- data/.kokoro/presubmit/windows.cfg +10 -0
- data/CHANGELOG.md +107 -0
- data/generated/google/apis/androidmanagement_v1.rb +1 -1
- data/generated/google/apis/androidmanagement_v1/classes.rb +12 -1
- data/generated/google/apis/androidmanagement_v1/representations.rb +1 -0
- data/generated/google/apis/bigquery_v2.rb +1 -1
- data/generated/google/apis/bigquery_v2/classes.rb +241 -0
- data/generated/google/apis/bigquery_v2/representations.rb +115 -0
- data/generated/google/apis/bigqueryconnection_v1beta1.rb +1 -1
- data/generated/google/apis/bigqueryconnection_v1beta1/classes.rb +62 -29
- data/generated/google/apis/bigquerydatatransfer_v1.rb +1 -1
- data/generated/google/apis/bigquerydatatransfer_v1/classes.rb +2 -2
- data/generated/google/apis/bigquerydatatransfer_v1/service.rb +30 -26
- data/generated/google/apis/bigqueryreservation_v1.rb +1 -1
- data/generated/google/apis/bigqueryreservation_v1/classes.rb +7 -7
- data/generated/google/apis/bigqueryreservation_v1/representations.rb +3 -3
- data/generated/google/apis/bigqueryreservation_v1alpha2.rb +1 -1
- data/generated/google/apis/bigqueryreservation_v1alpha2/classes.rb +0 -175
- data/generated/google/apis/bigqueryreservation_v1alpha2/representations.rb +0 -65
- data/generated/google/apis/bigqueryreservation_v1alpha2/service.rb +0 -140
- data/generated/google/apis/bigqueryreservation_v1beta1.rb +37 -0
- data/generated/google/apis/bigqueryreservation_v1beta1/classes.rb +497 -0
- data/generated/google/apis/bigqueryreservation_v1beta1/representations.rb +236 -0
- data/generated/google/apis/bigqueryreservation_v1beta1/service.rb +713 -0
- data/generated/google/apis/binaryauthorization_v1.rb +1 -1
- data/generated/google/apis/binaryauthorization_v1/classes.rb +307 -0
- data/generated/google/apis/binaryauthorization_v1/representations.rb +88 -0
- data/generated/google/apis/binaryauthorization_v1/service.rb +230 -0
- data/generated/google/apis/binaryauthorization_v1beta1.rb +1 -1
- data/generated/google/apis/binaryauthorization_v1beta1/classes.rb +62 -29
- data/generated/google/apis/blogger_v3.rb +1 -1
- data/generated/google/apis/blogger_v3/service.rb +6 -6
- data/generated/google/apis/calendar_v3.rb +1 -1
- data/generated/google/apis/calendar_v3/classes.rb +1 -0
- data/generated/google/apis/cloudasset_v1.rb +1 -1
- data/generated/google/apis/cloudasset_v1/classes.rb +72 -29
- data/generated/google/apis/cloudasset_v1/representations.rb +1 -0
- data/generated/google/apis/cloudasset_v1/service.rb +1 -1
- data/generated/google/apis/cloudasset_v1beta1.rb +1 -1
- data/generated/google/apis/cloudasset_v1beta1/classes.rb +62 -29
- data/generated/google/apis/cloudasset_v1beta1/service.rb +2 -2
- data/generated/google/apis/cloudfunctions_v1.rb +1 -1
- data/generated/google/apis/cloudfunctions_v1/classes.rb +7 -2
- data/generated/google/apis/cloudfunctions_v1/service.rb +10 -7
- data/generated/google/apis/cloudfunctions_v1beta2.rb +1 -1
- data/generated/google/apis/cloudfunctions_v1beta2/classes.rb +1 -1
- data/generated/google/apis/cloudfunctions_v1beta2/service.rb +7 -6
- data/generated/google/apis/cloudidentity_v1.rb +4 -1
- data/generated/google/apis/cloudidentity_v1beta1.rb +4 -1
- data/generated/google/apis/cloudiot_v1.rb +1 -1
- data/generated/google/apis/cloudiot_v1/classes.rb +68 -35
- data/generated/google/apis/cloudiot_v1/service.rb +18 -17
- data/generated/google/apis/cloudkms_v1.rb +1 -1
- data/generated/google/apis/cloudkms_v1/classes.rb +77 -35
- data/generated/google/apis/cloudkms_v1/service.rb +33 -27
- data/generated/google/apis/cloudprivatecatalogproducer_v1beta1.rb +1 -1
- data/generated/google/apis/cloudprivatecatalogproducer_v1beta1/classes.rb +62 -29
- data/generated/google/apis/cloudsearch_v1.rb +1 -1
- data/generated/google/apis/cloudsearch_v1/classes.rb +354 -0
- data/generated/google/apis/cloudsearch_v1/representations.rb +196 -0
- data/generated/google/apis/cloudsearch_v1/service.rb +314 -2
- data/generated/google/apis/cloudtasks_v2beta3.rb +1 -1
- data/generated/google/apis/cloudtasks_v2beta3/classes.rb +62 -29
- data/generated/google/apis/cloudtrace_v1.rb +1 -1
- data/generated/google/apis/cloudtrace_v1/classes.rb +1 -1
- data/generated/google/apis/cloudtrace_v1/service.rb +10 -10
- data/generated/google/apis/cloudtrace_v2.rb +1 -1
- data/generated/google/apis/cloudtrace_v2/classes.rb +3 -3
- data/generated/google/apis/commentanalyzer_v1alpha1.rb +1 -1
- data/generated/google/apis/commentanalyzer_v1alpha1/classes.rb +7 -10
- data/generated/google/apis/compute_alpha.rb +1 -1
- data/generated/google/apis/compute_alpha/classes.rb +38 -42
- data/generated/google/apis/compute_alpha/representations.rb +5 -16
- data/generated/google/apis/compute_beta.rb +1 -1
- data/generated/google/apis/compute_beta/classes.rb +10 -5
- data/generated/google/apis/compute_v1.rb +1 -1
- data/generated/google/apis/compute_v1/classes.rb +1327 -4
- data/generated/google/apis/compute_v1/representations.rb +439 -0
- data/generated/google/apis/container_v1.rb +1 -1
- data/generated/google/apis/container_v1/classes.rb +111 -0
- data/generated/google/apis/container_v1/representations.rb +51 -0
- data/generated/google/apis/containeranalysis_v1alpha1.rb +1 -1
- data/generated/google/apis/containeranalysis_v1alpha1/classes.rb +76 -30
- data/generated/google/apis/containeranalysis_v1alpha1/representations.rb +1 -0
- data/generated/google/apis/containeranalysis_v1beta1.rb +1 -1
- data/generated/google/apis/containeranalysis_v1beta1/classes.rb +70 -30
- data/generated/google/apis/content_v2.rb +1 -1
- data/generated/google/apis/content_v2/service.rb +0 -226
- data/generated/google/apis/dataflow_v1b3.rb +1 -1
- data/generated/google/apis/dataflow_v1b3/classes.rb +42 -0
- data/generated/google/apis/dataflow_v1b3/representations.rb +4 -0
- data/generated/google/apis/dataproc_v1.rb +1 -1
- data/generated/google/apis/dataproc_v1/classes.rb +324 -38
- data/generated/google/apis/dataproc_v1/representations.rb +97 -0
- data/generated/google/apis/dataproc_v1/service.rb +613 -1
- data/generated/google/apis/dataproc_v1beta2.rb +1 -1
- data/generated/google/apis/dataproc_v1beta2/classes.rb +100 -54
- data/generated/google/apis/dataproc_v1beta2/service.rb +29 -22
- data/generated/google/apis/dialogflow_v2.rb +1 -1
- data/generated/google/apis/dialogflow_v2/classes.rb +363 -167
- data/generated/google/apis/dialogflow_v2/representations.rb +160 -49
- data/generated/google/apis/dialogflow_v2/service.rb +1 -1
- data/generated/google/apis/dialogflow_v2beta1.rb +1 -1
- data/generated/google/apis/dialogflow_v2beta1/classes.rb +433 -178
- data/generated/google/apis/dialogflow_v2beta1/representations.rb +199 -59
- data/generated/google/apis/dialogflow_v2beta1/service.rb +39 -0
- data/generated/google/apis/dlp_v2.rb +1 -1
- data/generated/google/apis/dlp_v2/classes.rb +3 -4
- data/generated/google/apis/doubleclickbidmanager_v1.rb +1 -1
- data/generated/google/apis/drive_v2.rb +1 -1
- data/generated/google/apis/drive_v2/classes.rb +2 -2
- data/generated/google/apis/drive_v3.rb +1 -1
- data/generated/google/apis/drive_v3/classes.rb +2 -2
- data/generated/google/apis/fcm_v1.rb +1 -1
- data/generated/google/apis/fcm_v1/classes.rb +9 -4
- data/generated/google/apis/file_v1.rb +1 -1
- data/generated/google/apis/file_v1/classes.rb +8 -0
- data/generated/google/apis/file_v1/representations.rb +1 -0
- data/generated/google/apis/file_v1/service.rb +2 -0
- data/generated/google/apis/file_v1beta1.rb +1 -1
- data/generated/google/apis/file_v1beta1/classes.rb +8 -0
- data/generated/google/apis/file_v1beta1/representations.rb +1 -0
- data/generated/google/apis/file_v1beta1/service.rb +2 -0
- data/generated/google/apis/firebase_v1beta1.rb +1 -1
- data/generated/google/apis/firebase_v1beta1/classes.rb +41 -4
- data/generated/google/apis/firebase_v1beta1/representations.rb +2 -0
- data/generated/google/apis/firebase_v1beta1/service.rb +22 -14
- data/generated/google/apis/fitness_v1.rb +19 -19
- data/generated/google/apis/healthcare_v1beta1.rb +1 -1
- data/generated/google/apis/healthcare_v1beta1/classes.rb +136 -100
- data/generated/google/apis/healthcare_v1beta1/representations.rb +1 -1
- data/generated/google/apis/healthcare_v1beta1/service.rb +124 -119
- data/generated/google/apis/iam_v1.rb +1 -1
- data/generated/google/apis/iam_v1/classes.rb +87 -41
- data/generated/google/apis/iap_v1.rb +1 -1
- data/generated/google/apis/iap_v1/classes.rb +62 -29
- data/generated/google/apis/iap_v1beta1.rb +1 -1
- data/generated/google/apis/iap_v1beta1/classes.rb +62 -29
- data/generated/google/apis/ml_v1.rb +1 -1
- data/generated/google/apis/ml_v1/classes.rb +114 -49
- data/generated/google/apis/ml_v1/representations.rb +2 -0
- data/generated/google/apis/ml_v1/service.rb +12 -6
- data/generated/google/apis/monitoring_v3.rb +1 -1
- data/generated/google/apis/monitoring_v3/classes.rb +14 -10
- data/generated/google/apis/monitoring_v3/representations.rb +1 -0
- data/generated/google/apis/oslogin_v1.rb +1 -1
- data/generated/google/apis/oslogin_v1/classes.rb +12 -0
- data/generated/google/apis/oslogin_v1/representations.rb +2 -0
- data/generated/google/apis/oslogin_v1alpha.rb +1 -1
- data/generated/google/apis/oslogin_v1alpha/classes.rb +12 -0
- data/generated/google/apis/oslogin_v1alpha/representations.rb +2 -0
- data/generated/google/apis/oslogin_v1beta.rb +1 -1
- data/generated/google/apis/oslogin_v1beta/classes.rb +12 -0
- data/generated/google/apis/oslogin_v1beta/representations.rb +2 -0
- data/generated/google/apis/policytroubleshooter_v1beta.rb +34 -0
- data/generated/google/apis/policytroubleshooter_v1beta/classes.rb +621 -0
- data/generated/google/apis/policytroubleshooter_v1beta/representations.rb +203 -0
- data/generated/google/apis/policytroubleshooter_v1beta/service.rb +91 -0
- data/generated/google/apis/proximitybeacon_v1beta1.rb +1 -1
- data/generated/google/apis/proximitybeacon_v1beta1/classes.rb +7 -4
- data/generated/google/apis/proximitybeacon_v1beta1/service.rb +60 -58
- data/generated/google/apis/recommender_v1beta1.rb +34 -0
- data/generated/google/apis/recommender_v1beta1/classes.rb +502 -0
- data/generated/google/apis/recommender_v1beta1/representations.rb +232 -0
- data/generated/google/apis/recommender_v1beta1/service.rb +262 -0
- data/generated/google/apis/remotebuildexecution_v1.rb +1 -1
- data/generated/google/apis/remotebuildexecution_v1/classes.rb +49 -1100
- data/generated/google/apis/remotebuildexecution_v1/representations.rb +1 -276
- data/generated/google/apis/remotebuildexecution_v1/service.rb +0 -77
- data/generated/google/apis/remotebuildexecution_v1alpha.rb +1 -1
- data/generated/google/apis/remotebuildexecution_v1alpha/classes.rb +12 -990
- data/generated/google/apis/remotebuildexecution_v1alpha/representations.rb +1 -245
- data/generated/google/apis/remotebuildexecution_v2.rb +1 -1
- data/generated/google/apis/remotebuildexecution_v2/classes.rb +12 -990
- data/generated/google/apis/remotebuildexecution_v2/representations.rb +1 -245
- data/generated/google/apis/run_v1.rb +1 -1
- data/generated/google/apis/run_v1/classes.rb +3553 -33
- data/generated/google/apis/run_v1/representations.rb +1186 -4
- data/generated/google/apis/run_v1/service.rb +2509 -23
- data/generated/google/apis/run_v1alpha1.rb +1 -1
- data/generated/google/apis/run_v1alpha1/classes.rb +103 -140
- data/generated/google/apis/run_v1alpha1/representations.rb +5 -43
- data/generated/google/apis/run_v1beta1.rb +35 -0
- data/generated/google/apis/run_v1beta1/classes.rb +1209 -0
- data/generated/google/apis/run_v1beta1/representations.rb +421 -0
- data/generated/google/apis/run_v1beta1/service.rb +172 -0
- data/generated/google/apis/runtimeconfig_v1beta1.rb +1 -1
- data/generated/google/apis/runtimeconfig_v1beta1/classes.rb +62 -29
- data/generated/google/apis/safebrowsing_v4.rb +5 -2
- data/generated/google/apis/safebrowsing_v4/service.rb +4 -1
- data/generated/google/apis/securitycenter_v1.rb +1 -1
- data/generated/google/apis/securitycenter_v1/classes.rb +70 -35
- data/generated/google/apis/securitycenter_v1/service.rb +13 -12
- data/generated/google/apis/securitycenter_v1beta1.rb +1 -1
- data/generated/google/apis/securitycenter_v1beta1/classes.rb +71 -35
- data/generated/google/apis/securitycenter_v1beta1/service.rb +13 -12
- data/generated/google/apis/servicebroker_v1.rb +1 -1
- data/generated/google/apis/servicebroker_v1/classes.rb +62 -29
- data/generated/google/apis/servicebroker_v1alpha1.rb +1 -1
- data/generated/google/apis/servicebroker_v1alpha1/classes.rb +62 -29
- data/generated/google/apis/servicebroker_v1beta1.rb +1 -1
- data/generated/google/apis/servicebroker_v1beta1/classes.rb +62 -29
- data/generated/google/apis/serviceconsumermanagement_v1.rb +1 -1
- data/generated/google/apis/serviceconsumermanagement_v1/classes.rb +11 -2
- data/generated/google/apis/serviceconsumermanagement_v1/representations.rb +1 -0
- data/generated/google/apis/servicemanagement_v1.rb +1 -1
- data/generated/google/apis/servicemanagement_v1/classes.rb +63 -33
- data/generated/google/apis/servicenetworking_v1.rb +1 -1
- data/generated/google/apis/servicenetworking_v1/classes.rb +11 -2
- data/generated/google/apis/servicenetworking_v1/representations.rb +1 -0
- data/generated/google/apis/servicenetworking_v1beta.rb +1 -1
- data/generated/google/apis/servicenetworking_v1beta/classes.rb +11 -2
- data/generated/google/apis/servicenetworking_v1beta/representations.rb +1 -0
- data/generated/google/apis/serviceusage_v1.rb +1 -1
- data/generated/google/apis/serviceusage_v1/classes.rb +11 -2
- data/generated/google/apis/serviceusage_v1/representations.rb +1 -0
- data/generated/google/apis/serviceusage_v1beta1.rb +1 -1
- data/generated/google/apis/serviceusage_v1beta1/classes.rb +11 -2
- data/generated/google/apis/serviceusage_v1beta1/representations.rb +1 -0
- data/generated/google/apis/spanner_v1.rb +1 -1
- data/generated/google/apis/spanner_v1/classes.rb +78 -2
- data/generated/google/apis/spanner_v1/representations.rb +44 -0
- data/generated/google/apis/spanner_v1/service.rb +35 -0
- data/generated/google/apis/speech_v1.rb +1 -1
- data/generated/google/apis/speech_v1/classes.rb +73 -19
- data/generated/google/apis/speech_v1/representations.rb +18 -0
- data/generated/google/apis/speech_v1p1beta1.rb +1 -1
- data/generated/google/apis/speech_v1p1beta1/classes.rb +31 -35
- data/generated/google/apis/speech_v2beta.rb +1 -1
- data/generated/google/apis/speech_v2beta/classes.rb +6 -6
- data/generated/google/apis/speech_v2beta/representations.rb +2 -2
- data/generated/google/apis/storage_v1.rb +1 -1
- data/generated/google/apis/storage_v1/classes.rb +1 -1
- data/generated/google/apis/storage_v1/representations.rb +2 -1
- data/generated/google/apis/storage_v1beta1.rb +1 -1
- data/generated/google/apis/storage_v1beta2.rb +1 -1
- data/generated/google/apis/streetviewpublish_v1.rb +1 -1
- data/generated/google/apis/streetviewpublish_v1/classes.rb +1 -1
- data/generated/google/apis/streetviewpublish_v1/service.rb +9 -5
- data/generated/google/apis/testing_v1.rb +1 -1
- data/generated/google/apis/testing_v1/classes.rb +42 -0
- data/generated/google/apis/testing_v1/representations.rb +18 -0
- data/generated/google/apis/texttospeech_v1.rb +1 -1
- data/generated/google/apis/texttospeech_v1/classes.rb +6 -5
- data/generated/google/apis/texttospeech_v1/service.rb +1 -1
- data/generated/google/apis/texttospeech_v1beta1.rb +1 -1
- data/generated/google/apis/texttospeech_v1beta1/classes.rb +6 -5
- data/generated/google/apis/texttospeech_v1beta1/service.rb +1 -1
- data/generated/google/apis/toolresults_v1beta3.rb +1 -1
- data/generated/google/apis/toolresults_v1beta3/classes.rb +1 -1
- data/generated/google/apis/translate_v3beta1.rb +1 -1
- data/generated/google/apis/translate_v3beta1/classes.rb +22 -16
- data/generated/google/apis/translate_v3beta1/service.rb +31 -31
- data/generated/google/apis/videointelligence_v1.rb +1 -1
- data/generated/google/apis/videointelligence_v1/classes.rb +45 -10
- data/generated/google/apis/videointelligence_v1beta2.rb +1 -1
- data/generated/google/apis/videointelligence_v1beta2/classes.rb +45 -10
- data/generated/google/apis/videointelligence_v1p1beta1.rb +1 -1
- data/generated/google/apis/videointelligence_v1p1beta1/classes.rb +45 -10
- data/generated/google/apis/videointelligence_v1p2beta1.rb +1 -1
- data/generated/google/apis/videointelligence_v1p2beta1/classes.rb +45 -10
- data/generated/google/apis/videointelligence_v1p3beta1.rb +1 -1
- data/generated/google/apis/videointelligence_v1p3beta1/classes.rb +45 -10
- data/generated/google/apis/vision_v1.rb +1 -1
- data/generated/google/apis/vision_v1/classes.rb +6 -156
- data/generated/google/apis/vision_v1/representations.rb +0 -44
- data/generated/google/apis/vision_v1p1beta1.rb +1 -1
- data/generated/google/apis/vision_v1p1beta1/classes.rb +6 -156
- data/generated/google/apis/vision_v1p1beta1/representations.rb +0 -44
- data/generated/google/apis/vision_v1p2beta1.rb +1 -1
- data/generated/google/apis/vision_v1p2beta1/classes.rb +6 -156
- data/generated/google/apis/vision_v1p2beta1/representations.rb +0 -44
- data/generated/google/apis/websecurityscanner_v1.rb +1 -1
- data/generated/google/apis/websecurityscanner_v1alpha.rb +1 -1
- data/generated/google/apis/websecurityscanner_v1alpha/classes.rb +21 -31
- data/generated/google/apis/websecurityscanner_v1alpha/service.rb +1 -1
- data/generated/google/apis/websecurityscanner_v1beta.rb +1 -1
- data/generated/google/apis/websecurityscanner_v1beta/classes.rb +30 -42
- data/generated/google/apis/websecurityscanner_v1beta/service.rb +1 -1
- data/generated/google/apis/youtube_partner_v1.rb +1 -1
- data/generated/google/apis/youtube_partner_v1/classes.rb +0 -83
- data/generated/google/apis/youtube_partner_v1/representations.rb +0 -35
- data/generated/google/apis/youtube_partner_v1/service.rb +0 -100
- data/lib/google/apis/version.rb +1 -1
- metadata +18 -6
- data/generated/google/apis/dfareporting_v3_1.rb +0 -40
- data/generated/google/apis/dfareporting_v3_1/classes.rb +0 -11998
- data/generated/google/apis/dfareporting_v3_1/representations.rb +0 -4313
- data/generated/google/apis/dfareporting_v3_1/service.rb +0 -8688
@@ -27,7 +27,7 @@ module Google
|
|
27
27
|
# @see https://cloud.google.com/iam/
|
28
28
|
module IamV1
|
29
29
|
VERSION = 'V1'
|
30
|
-
REVISION = '
|
30
|
+
REVISION = '20190927'
|
31
31
|
|
32
32
|
# View and manage your data across Google Cloud Platform services
|
33
33
|
AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'
|
@@ -519,25 +519,34 @@ module Google
|
|
519
519
|
|
520
520
|
# Defines an Identity and Access Management (IAM) policy. It is used to
|
521
521
|
# specify access control policies for Cloud Platform resources.
|
522
|
-
# A `Policy`
|
523
|
-
# `members` to a `role
|
524
|
-
# Google
|
525
|
-
# defined by IAM.
|
522
|
+
# A `Policy` is a collection of `bindings`. A `binding` binds one or more
|
523
|
+
# `members` to a single `role`. Members can be user accounts, service accounts,
|
524
|
+
# Google groups, and domains (such as G Suite). A `role` is a named list of
|
525
|
+
# permissions (defined by IAM or configured by users). A `binding` can
|
526
|
+
# optionally specify a `condition`, which is a logic expression that further
|
527
|
+
# constrains the role binding based on attributes about the request and/or
|
528
|
+
# target resource.
|
526
529
|
# **JSON Example**
|
527
530
|
# `
|
528
531
|
# "bindings": [
|
529
532
|
# `
|
530
|
-
# "role": "roles/
|
533
|
+
# "role": "roles/resourcemanager.organizationAdmin",
|
531
534
|
# "members": [
|
532
535
|
# "user:mike@example.com",
|
533
536
|
# "group:admins@example.com",
|
534
537
|
# "domain:google.com",
|
535
|
-
# "serviceAccount:my-
|
538
|
+
# "serviceAccount:my-project-id@appspot.gserviceaccount.com"
|
536
539
|
# ]
|
537
540
|
# `,
|
538
541
|
# `
|
539
|
-
# "role": "roles/
|
540
|
-
# "members": ["user:
|
542
|
+
# "role": "roles/resourcemanager.organizationViewer",
|
543
|
+
# "members": ["user:eve@example.com"],
|
544
|
+
# "condition": `
|
545
|
+
# "title": "expirable access",
|
546
|
+
# "description": "Does not grant access after Sep 2020",
|
547
|
+
# "expression": "request.time <
|
548
|
+
# timestamp('2020-10-01T00:00:00.000Z')",
|
549
|
+
# `
|
541
550
|
# `
|
542
551
|
# ]
|
543
552
|
# `
|
@@ -547,11 +556,15 @@ module Google
|
|
547
556
|
# - user:mike@example.com
|
548
557
|
# - group:admins@example.com
|
549
558
|
# - domain:google.com
|
550
|
-
# - serviceAccount:my-
|
551
|
-
# role: roles/
|
559
|
+
# - serviceAccount:my-project-id@appspot.gserviceaccount.com
|
560
|
+
# role: roles/resourcemanager.organizationAdmin
|
552
561
|
# - members:
|
553
|
-
# - user:
|
554
|
-
# role: roles/
|
562
|
+
# - user:eve@example.com
|
563
|
+
# role: roles/resourcemanager.organizationViewer
|
564
|
+
# condition:
|
565
|
+
# title: expirable access
|
566
|
+
# description: Does not grant access after Sep 2020
|
567
|
+
# expression: request.time < timestamp('2020-10-01T00:00:00.000Z')
|
555
568
|
# For a description of IAM and its features, see the
|
556
569
|
# [IAM developer's guide](https://cloud.google.com/iam/docs).
|
557
570
|
# Corresponds to the JSON property `policy`
|
@@ -872,25 +885,34 @@ module Google
|
|
872
885
|
|
873
886
|
# Defines an Identity and Access Management (IAM) policy. It is used to
|
874
887
|
# specify access control policies for Cloud Platform resources.
|
875
|
-
# A `Policy`
|
876
|
-
# `members` to a `role
|
877
|
-
# Google
|
878
|
-
# defined by IAM.
|
888
|
+
# A `Policy` is a collection of `bindings`. A `binding` binds one or more
|
889
|
+
# `members` to a single `role`. Members can be user accounts, service accounts,
|
890
|
+
# Google groups, and domains (such as G Suite). A `role` is a named list of
|
891
|
+
# permissions (defined by IAM or configured by users). A `binding` can
|
892
|
+
# optionally specify a `condition`, which is a logic expression that further
|
893
|
+
# constrains the role binding based on attributes about the request and/or
|
894
|
+
# target resource.
|
879
895
|
# **JSON Example**
|
880
896
|
# `
|
881
897
|
# "bindings": [
|
882
898
|
# `
|
883
|
-
# "role": "roles/
|
899
|
+
# "role": "roles/resourcemanager.organizationAdmin",
|
884
900
|
# "members": [
|
885
901
|
# "user:mike@example.com",
|
886
902
|
# "group:admins@example.com",
|
887
903
|
# "domain:google.com",
|
888
|
-
# "serviceAccount:my-
|
904
|
+
# "serviceAccount:my-project-id@appspot.gserviceaccount.com"
|
889
905
|
# ]
|
890
906
|
# `,
|
891
907
|
# `
|
892
|
-
# "role": "roles/
|
893
|
-
# "members": ["user:
|
908
|
+
# "role": "roles/resourcemanager.organizationViewer",
|
909
|
+
# "members": ["user:eve@example.com"],
|
910
|
+
# "condition": `
|
911
|
+
# "title": "expirable access",
|
912
|
+
# "description": "Does not grant access after Sep 2020",
|
913
|
+
# "expression": "request.time <
|
914
|
+
# timestamp('2020-10-01T00:00:00.000Z')",
|
915
|
+
# `
|
894
916
|
# `
|
895
917
|
# ]
|
896
918
|
# `
|
@@ -900,11 +922,15 @@ module Google
|
|
900
922
|
# - user:mike@example.com
|
901
923
|
# - group:admins@example.com
|
902
924
|
# - domain:google.com
|
903
|
-
# - serviceAccount:my-
|
904
|
-
# role: roles/
|
925
|
+
# - serviceAccount:my-project-id@appspot.gserviceaccount.com
|
926
|
+
# role: roles/resourcemanager.organizationAdmin
|
905
927
|
# - members:
|
906
|
-
# - user:
|
907
|
-
# role: roles/
|
928
|
+
# - user:eve@example.com
|
929
|
+
# role: roles/resourcemanager.organizationViewer
|
930
|
+
# condition:
|
931
|
+
# title: expirable access
|
932
|
+
# description: Does not grant access after Sep 2020
|
933
|
+
# expression: request.time < timestamp('2020-10-01T00:00:00.000Z')
|
908
934
|
# For a description of IAM and its features, see the
|
909
935
|
# [IAM developer's guide](https://cloud.google.com/iam/docs).
|
910
936
|
class Policy
|
@@ -915,7 +941,8 @@ module Google
|
|
915
941
|
# @return [Array<Google::Apis::IamV1::AuditConfig>]
|
916
942
|
attr_accessor :audit_configs
|
917
943
|
|
918
|
-
# Associates a list of `members` to a `role`.
|
944
|
+
# Associates a list of `members` to a `role`. Optionally may specify a
|
945
|
+
# `condition` that determines when binding is in effect.
|
919
946
|
# `bindings` with no members will result in an error.
|
920
947
|
# Corresponds to the JSON property `bindings`
|
921
948
|
# @return [Array<Google::Apis::IamV1::Binding>]
|
@@ -929,7 +956,9 @@ module Google
|
|
929
956
|
# systems are expected to put that etag in the request to `setIamPolicy` to
|
930
957
|
# ensure that their change will be applied to the same version of the policy.
|
931
958
|
# If no `etag` is provided in the call to `setIamPolicy`, then the existing
|
932
|
-
# policy is overwritten.
|
959
|
+
# policy is overwritten. Due to blind-set semantics of an etag-less policy,
|
960
|
+
# 'setIamPolicy' will not fail even if either of incoming or stored policy
|
961
|
+
# does not meet the version requirements.
|
933
962
|
# Corresponds to the JSON property `etag`
|
934
963
|
# NOTE: Values are automatically base64 encoded/decoded in the client library.
|
935
964
|
# @return [String]
|
@@ -938,9 +967,13 @@ module Google
|
|
938
967
|
# Specifies the format of the policy.
|
939
968
|
# Valid values are 0, 1, and 3. Requests specifying an invalid value will be
|
940
969
|
# rejected.
|
941
|
-
#
|
942
|
-
#
|
943
|
-
#
|
970
|
+
# Operations affecting conditional bindings must specify version 3. This can
|
971
|
+
# be either setting a conditional policy, modifying a conditional binding,
|
972
|
+
# or removing a conditional binding from the stored conditional policy.
|
973
|
+
# Operations on non-conditional policies may specify any valid value or
|
974
|
+
# leave the field unset.
|
975
|
+
# If no etag is provided in the call to `setIamPolicy`, any version
|
976
|
+
# compliance checks on the incoming and/or stored policy is skipped.
|
944
977
|
# Corresponds to the JSON property `version`
|
945
978
|
# @return [Fixnum]
|
946
979
|
attr_accessor :version
|
@@ -1402,25 +1435,34 @@ module Google
|
|
1402
1435
|
|
1403
1436
|
# Defines an Identity and Access Management (IAM) policy. It is used to
|
1404
1437
|
# specify access control policies for Cloud Platform resources.
|
1405
|
-
# A `Policy`
|
1406
|
-
# `members` to a `role
|
1407
|
-
# Google
|
1408
|
-
# defined by IAM.
|
1438
|
+
# A `Policy` is a collection of `bindings`. A `binding` binds one or more
|
1439
|
+
# `members` to a single `role`. Members can be user accounts, service accounts,
|
1440
|
+
# Google groups, and domains (such as G Suite). A `role` is a named list of
|
1441
|
+
# permissions (defined by IAM or configured by users). A `binding` can
|
1442
|
+
# optionally specify a `condition`, which is a logic expression that further
|
1443
|
+
# constrains the role binding based on attributes about the request and/or
|
1444
|
+
# target resource.
|
1409
1445
|
# **JSON Example**
|
1410
1446
|
# `
|
1411
1447
|
# "bindings": [
|
1412
1448
|
# `
|
1413
|
-
# "role": "roles/
|
1449
|
+
# "role": "roles/resourcemanager.organizationAdmin",
|
1414
1450
|
# "members": [
|
1415
1451
|
# "user:mike@example.com",
|
1416
1452
|
# "group:admins@example.com",
|
1417
1453
|
# "domain:google.com",
|
1418
|
-
# "serviceAccount:my-
|
1454
|
+
# "serviceAccount:my-project-id@appspot.gserviceaccount.com"
|
1419
1455
|
# ]
|
1420
1456
|
# `,
|
1421
1457
|
# `
|
1422
|
-
# "role": "roles/
|
1423
|
-
# "members": ["user:
|
1458
|
+
# "role": "roles/resourcemanager.organizationViewer",
|
1459
|
+
# "members": ["user:eve@example.com"],
|
1460
|
+
# "condition": `
|
1461
|
+
# "title": "expirable access",
|
1462
|
+
# "description": "Does not grant access after Sep 2020",
|
1463
|
+
# "expression": "request.time <
|
1464
|
+
# timestamp('2020-10-01T00:00:00.000Z')",
|
1465
|
+
# `
|
1424
1466
|
# `
|
1425
1467
|
# ]
|
1426
1468
|
# `
|
@@ -1430,11 +1472,15 @@ module Google
|
|
1430
1472
|
# - user:mike@example.com
|
1431
1473
|
# - group:admins@example.com
|
1432
1474
|
# - domain:google.com
|
1433
|
-
# - serviceAccount:my-
|
1434
|
-
# role: roles/
|
1475
|
+
# - serviceAccount:my-project-id@appspot.gserviceaccount.com
|
1476
|
+
# role: roles/resourcemanager.organizationAdmin
|
1435
1477
|
# - members:
|
1436
|
-
# - user:
|
1437
|
-
# role: roles/
|
1478
|
+
# - user:eve@example.com
|
1479
|
+
# role: roles/resourcemanager.organizationViewer
|
1480
|
+
# condition:
|
1481
|
+
# title: expirable access
|
1482
|
+
# description: Does not grant access after Sep 2020
|
1483
|
+
# expression: request.time < timestamp('2020-10-01T00:00:00.000Z')
|
1438
1484
|
# For a description of IAM and its features, see the
|
1439
1485
|
# [IAM developer's guide](https://cloud.google.com/iam/docs).
|
1440
1486
|
# Corresponds to the JSON property `policy`
|
@@ -25,7 +25,7 @@ module Google
|
|
25
25
|
# @see https://cloud.google.com/iap
|
26
26
|
module IapV1
|
27
27
|
VERSION = 'V1'
|
28
|
-
REVISION = '
|
28
|
+
REVISION = '20190920'
|
29
29
|
|
30
30
|
# View and manage your data across Google Cloud Platform services
|
31
31
|
AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'
|
@@ -162,25 +162,34 @@ module Google
|
|
162
162
|
|
163
163
|
# Defines an Identity and Access Management (IAM) policy. It is used to
|
164
164
|
# specify access control policies for Cloud Platform resources.
|
165
|
-
# A `Policy`
|
166
|
-
# `members` to a `role
|
167
|
-
# Google
|
168
|
-
# defined by IAM.
|
165
|
+
# A `Policy` is a collection of `bindings`. A `binding` binds one or more
|
166
|
+
# `members` to a single `role`. Members can be user accounts, service accounts,
|
167
|
+
# Google groups, and domains (such as G Suite). A `role` is a named list of
|
168
|
+
# permissions (defined by IAM or configured by users). A `binding` can
|
169
|
+
# optionally specify a `condition`, which is a logic expression that further
|
170
|
+
# constrains the role binding based on attributes about the request and/or
|
171
|
+
# target resource.
|
169
172
|
# **JSON Example**
|
170
173
|
# `
|
171
174
|
# "bindings": [
|
172
175
|
# `
|
173
|
-
# "role": "
|
176
|
+
# "role": "role/resourcemanager.organizationAdmin",
|
174
177
|
# "members": [
|
175
178
|
# "user:mike@example.com",
|
176
179
|
# "group:admins@example.com",
|
177
180
|
# "domain:google.com",
|
178
|
-
# "serviceAccount:my-
|
181
|
+
# "serviceAccount:my-project-id@appspot.gserviceaccount.com"
|
179
182
|
# ]
|
180
183
|
# `,
|
181
184
|
# `
|
182
|
-
# "role": "roles/
|
183
|
-
# "members": ["user:
|
185
|
+
# "role": "roles/resourcemanager.organizationViewer",
|
186
|
+
# "members": ["user:eve@example.com"],
|
187
|
+
# "condition": `
|
188
|
+
# "title": "expirable access",
|
189
|
+
# "description": "Does not grant access after Sep 2020",
|
190
|
+
# "expression": "request.time <
|
191
|
+
# timestamp('2020-10-01T00:00:00.000Z')",
|
192
|
+
# `
|
184
193
|
# `
|
185
194
|
# ]
|
186
195
|
# `
|
@@ -190,17 +199,22 @@ module Google
|
|
190
199
|
# - user:mike@example.com
|
191
200
|
# - group:admins@example.com
|
192
201
|
# - domain:google.com
|
193
|
-
# - serviceAccount:my-
|
194
|
-
# role: roles/
|
202
|
+
# - serviceAccount:my-project-id@appspot.gserviceaccount.com
|
203
|
+
# role: roles/resourcemanager.organizationAdmin
|
195
204
|
# - members:
|
196
|
-
# - user:
|
197
|
-
# role: roles/
|
205
|
+
# - user:eve@example.com
|
206
|
+
# role: roles/resourcemanager.organizationViewer
|
207
|
+
# condition:
|
208
|
+
# title: expirable access
|
209
|
+
# description: Does not grant access after Sep 2020
|
210
|
+
# expression: request.time < timestamp('2020-10-01T00:00:00.000Z')
|
198
211
|
# For a description of IAM and its features, see the
|
199
212
|
# [IAM developer's guide](https://cloud.google.com/iam/docs).
|
200
213
|
class Policy
|
201
214
|
include Google::Apis::Core::Hashable
|
202
215
|
|
203
|
-
# Associates a list of `members` to a `role`.
|
216
|
+
# Associates a list of `members` to a `role`. Optionally may specify a
|
217
|
+
# `condition` that determines when binding is in effect.
|
204
218
|
# `bindings` with no members will result in an error.
|
205
219
|
# Corresponds to the JSON property `bindings`
|
206
220
|
# @return [Array<Google::Apis::IapV1::Binding>]
|
@@ -214,7 +228,9 @@ module Google
|
|
214
228
|
# systems are expected to put that etag in the request to `setIamPolicy` to
|
215
229
|
# ensure that their change will be applied to the same version of the policy.
|
216
230
|
# If no `etag` is provided in the call to `setIamPolicy`, then the existing
|
217
|
-
# policy is overwritten.
|
231
|
+
# policy is overwritten. Due to blind-set semantics of an etag-less policy,
|
232
|
+
# 'setIamPolicy' will not fail even if either of incoming or stored policy
|
233
|
+
# does not meet the version requirements.
|
218
234
|
# Corresponds to the JSON property `etag`
|
219
235
|
# NOTE: Values are automatically base64 encoded/decoded in the client library.
|
220
236
|
# @return [String]
|
@@ -223,9 +239,13 @@ module Google
|
|
223
239
|
# Specifies the format of the policy.
|
224
240
|
# Valid values are 0, 1, and 3. Requests specifying an invalid value will be
|
225
241
|
# rejected.
|
226
|
-
#
|
227
|
-
#
|
228
|
-
#
|
242
|
+
# Operations affecting conditional bindings must specify version 3. This can
|
243
|
+
# be either setting a conditional policy, modifying a conditional binding,
|
244
|
+
# or removing a conditional binding from the stored conditional policy.
|
245
|
+
# Operations on non-conditional policies may specify any valid value or
|
246
|
+
# leave the field unset.
|
247
|
+
# If no etag is provided in the call to `setIamPolicy`, any version
|
248
|
+
# compliance checks on the incoming and/or stored policy is skipped.
|
229
249
|
# Corresponds to the JSON property `version`
|
230
250
|
# @return [Fixnum]
|
231
251
|
attr_accessor :version
|
@@ -248,25 +268,34 @@ module Google
|
|
248
268
|
|
249
269
|
# Defines an Identity and Access Management (IAM) policy. It is used to
|
250
270
|
# specify access control policies for Cloud Platform resources.
|
251
|
-
# A `Policy`
|
252
|
-
# `members` to a `role
|
253
|
-
# Google
|
254
|
-
# defined by IAM.
|
271
|
+
# A `Policy` is a collection of `bindings`. A `binding` binds one or more
|
272
|
+
# `members` to a single `role`. Members can be user accounts, service accounts,
|
273
|
+
# Google groups, and domains (such as G Suite). A `role` is a named list of
|
274
|
+
# permissions (defined by IAM or configured by users). A `binding` can
|
275
|
+
# optionally specify a `condition`, which is a logic expression that further
|
276
|
+
# constrains the role binding based on attributes about the request and/or
|
277
|
+
# target resource.
|
255
278
|
# **JSON Example**
|
256
279
|
# `
|
257
280
|
# "bindings": [
|
258
281
|
# `
|
259
|
-
# "role": "
|
282
|
+
# "role": "role/resourcemanager.organizationAdmin",
|
260
283
|
# "members": [
|
261
284
|
# "user:mike@example.com",
|
262
285
|
# "group:admins@example.com",
|
263
286
|
# "domain:google.com",
|
264
|
-
# "serviceAccount:my-
|
287
|
+
# "serviceAccount:my-project-id@appspot.gserviceaccount.com"
|
265
288
|
# ]
|
266
289
|
# `,
|
267
290
|
# `
|
268
|
-
# "role": "roles/
|
269
|
-
# "members": ["user:
|
291
|
+
# "role": "roles/resourcemanager.organizationViewer",
|
292
|
+
# "members": ["user:eve@example.com"],
|
293
|
+
# "condition": `
|
294
|
+
# "title": "expirable access",
|
295
|
+
# "description": "Does not grant access after Sep 2020",
|
296
|
+
# "expression": "request.time <
|
297
|
+
# timestamp('2020-10-01T00:00:00.000Z')",
|
298
|
+
# `
|
270
299
|
# `
|
271
300
|
# ]
|
272
301
|
# `
|
@@ -276,11 +305,15 @@ module Google
|
|
276
305
|
# - user:mike@example.com
|
277
306
|
# - group:admins@example.com
|
278
307
|
# - domain:google.com
|
279
|
-
# - serviceAccount:my-
|
280
|
-
# role: roles/
|
308
|
+
# - serviceAccount:my-project-id@appspot.gserviceaccount.com
|
309
|
+
# role: roles/resourcemanager.organizationAdmin
|
281
310
|
# - members:
|
282
|
-
# - user:
|
283
|
-
# role: roles/
|
311
|
+
# - user:eve@example.com
|
312
|
+
# role: roles/resourcemanager.organizationViewer
|
313
|
+
# condition:
|
314
|
+
# title: expirable access
|
315
|
+
# description: Does not grant access after Sep 2020
|
316
|
+
# expression: request.time < timestamp('2020-10-01T00:00:00.000Z')
|
284
317
|
# For a description of IAM and its features, see the
|
285
318
|
# [IAM developer's guide](https://cloud.google.com/iam/docs).
|
286
319
|
# Corresponds to the JSON property `policy`
|
@@ -25,7 +25,7 @@ module Google
|
|
25
25
|
# @see https://cloud.google.com/iap
|
26
26
|
module IapV1beta1
|
27
27
|
VERSION = 'V1beta1'
|
28
|
-
REVISION = '
|
28
|
+
REVISION = '20190920'
|
29
29
|
|
30
30
|
# View and manage your data across Google Cloud Platform services
|
31
31
|
AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'
|
@@ -162,25 +162,34 @@ module Google
|
|
162
162
|
|
163
163
|
# Defines an Identity and Access Management (IAM) policy. It is used to
|
164
164
|
# specify access control policies for Cloud Platform resources.
|
165
|
-
# A `Policy`
|
166
|
-
# `members` to a `role
|
167
|
-
# Google
|
168
|
-
# defined by IAM.
|
165
|
+
# A `Policy` is a collection of `bindings`. A `binding` binds one or more
|
166
|
+
# `members` to a single `role`. Members can be user accounts, service accounts,
|
167
|
+
# Google groups, and domains (such as G Suite). A `role` is a named list of
|
168
|
+
# permissions (defined by IAM or configured by users). A `binding` can
|
169
|
+
# optionally specify a `condition`, which is a logic expression that further
|
170
|
+
# constrains the role binding based on attributes about the request and/or
|
171
|
+
# target resource.
|
169
172
|
# **JSON Example**
|
170
173
|
# `
|
171
174
|
# "bindings": [
|
172
175
|
# `
|
173
|
-
# "role": "
|
176
|
+
# "role": "role/resourcemanager.organizationAdmin",
|
174
177
|
# "members": [
|
175
178
|
# "user:mike@example.com",
|
176
179
|
# "group:admins@example.com",
|
177
180
|
# "domain:google.com",
|
178
|
-
# "serviceAccount:my-
|
181
|
+
# "serviceAccount:my-project-id@appspot.gserviceaccount.com"
|
179
182
|
# ]
|
180
183
|
# `,
|
181
184
|
# `
|
182
|
-
# "role": "roles/
|
183
|
-
# "members": ["user:
|
185
|
+
# "role": "roles/resourcemanager.organizationViewer",
|
186
|
+
# "members": ["user:eve@example.com"],
|
187
|
+
# "condition": `
|
188
|
+
# "title": "expirable access",
|
189
|
+
# "description": "Does not grant access after Sep 2020",
|
190
|
+
# "expression": "request.time <
|
191
|
+
# timestamp('2020-10-01T00:00:00.000Z')",
|
192
|
+
# `
|
184
193
|
# `
|
185
194
|
# ]
|
186
195
|
# `
|
@@ -190,17 +199,22 @@ module Google
|
|
190
199
|
# - user:mike@example.com
|
191
200
|
# - group:admins@example.com
|
192
201
|
# - domain:google.com
|
193
|
-
# - serviceAccount:my-
|
194
|
-
# role: roles/
|
202
|
+
# - serviceAccount:my-project-id@appspot.gserviceaccount.com
|
203
|
+
# role: roles/resourcemanager.organizationAdmin
|
195
204
|
# - members:
|
196
|
-
# - user:
|
197
|
-
# role: roles/
|
205
|
+
# - user:eve@example.com
|
206
|
+
# role: roles/resourcemanager.organizationViewer
|
207
|
+
# condition:
|
208
|
+
# title: expirable access
|
209
|
+
# description: Does not grant access after Sep 2020
|
210
|
+
# expression: request.time < timestamp('2020-10-01T00:00:00.000Z')
|
198
211
|
# For a description of IAM and its features, see the
|
199
212
|
# [IAM developer's guide](https://cloud.google.com/iam/docs).
|
200
213
|
class Policy
|
201
214
|
include Google::Apis::Core::Hashable
|
202
215
|
|
203
|
-
# Associates a list of `members` to a `role`.
|
216
|
+
# Associates a list of `members` to a `role`. Optionally may specify a
|
217
|
+
# `condition` that determines when binding is in effect.
|
204
218
|
# `bindings` with no members will result in an error.
|
205
219
|
# Corresponds to the JSON property `bindings`
|
206
220
|
# @return [Array<Google::Apis::IapV1beta1::Binding>]
|
@@ -214,7 +228,9 @@ module Google
|
|
214
228
|
# systems are expected to put that etag in the request to `setIamPolicy` to
|
215
229
|
# ensure that their change will be applied to the same version of the policy.
|
216
230
|
# If no `etag` is provided in the call to `setIamPolicy`, then the existing
|
217
|
-
# policy is overwritten.
|
231
|
+
# policy is overwritten. Due to blind-set semantics of an etag-less policy,
|
232
|
+
# 'setIamPolicy' will not fail even if either of incoming or stored policy
|
233
|
+
# does not meet the version requirements.
|
218
234
|
# Corresponds to the JSON property `etag`
|
219
235
|
# NOTE: Values are automatically base64 encoded/decoded in the client library.
|
220
236
|
# @return [String]
|
@@ -223,9 +239,13 @@ module Google
|
|
223
239
|
# Specifies the format of the policy.
|
224
240
|
# Valid values are 0, 1, and 3. Requests specifying an invalid value will be
|
225
241
|
# rejected.
|
226
|
-
#
|
227
|
-
#
|
228
|
-
#
|
242
|
+
# Operations affecting conditional bindings must specify version 3. This can
|
243
|
+
# be either setting a conditional policy, modifying a conditional binding,
|
244
|
+
# or removing a conditional binding from the stored conditional policy.
|
245
|
+
# Operations on non-conditional policies may specify any valid value or
|
246
|
+
# leave the field unset.
|
247
|
+
# If no etag is provided in the call to `setIamPolicy`, any version
|
248
|
+
# compliance checks on the incoming and/or stored policy is skipped.
|
229
249
|
# Corresponds to the JSON property `version`
|
230
250
|
# @return [Fixnum]
|
231
251
|
attr_accessor :version
|
@@ -248,25 +268,34 @@ module Google
|
|
248
268
|
|
249
269
|
# Defines an Identity and Access Management (IAM) policy. It is used to
|
250
270
|
# specify access control policies for Cloud Platform resources.
|
251
|
-
# A `Policy`
|
252
|
-
# `members` to a `role
|
253
|
-
# Google
|
254
|
-
# defined by IAM.
|
271
|
+
# A `Policy` is a collection of `bindings`. A `binding` binds one or more
|
272
|
+
# `members` to a single `role`. Members can be user accounts, service accounts,
|
273
|
+
# Google groups, and domains (such as G Suite). A `role` is a named list of
|
274
|
+
# permissions (defined by IAM or configured by users). A `binding` can
|
275
|
+
# optionally specify a `condition`, which is a logic expression that further
|
276
|
+
# constrains the role binding based on attributes about the request and/or
|
277
|
+
# target resource.
|
255
278
|
# **JSON Example**
|
256
279
|
# `
|
257
280
|
# "bindings": [
|
258
281
|
# `
|
259
|
-
# "role": "
|
282
|
+
# "role": "role/resourcemanager.organizationAdmin",
|
260
283
|
# "members": [
|
261
284
|
# "user:mike@example.com",
|
262
285
|
# "group:admins@example.com",
|
263
286
|
# "domain:google.com",
|
264
|
-
# "serviceAccount:my-
|
287
|
+
# "serviceAccount:my-project-id@appspot.gserviceaccount.com"
|
265
288
|
# ]
|
266
289
|
# `,
|
267
290
|
# `
|
268
|
-
# "role": "roles/
|
269
|
-
# "members": ["user:
|
291
|
+
# "role": "roles/resourcemanager.organizationViewer",
|
292
|
+
# "members": ["user:eve@example.com"],
|
293
|
+
# "condition": `
|
294
|
+
# "title": "expirable access",
|
295
|
+
# "description": "Does not grant access after Sep 2020",
|
296
|
+
# "expression": "request.time <
|
297
|
+
# timestamp('2020-10-01T00:00:00.000Z')",
|
298
|
+
# `
|
270
299
|
# `
|
271
300
|
# ]
|
272
301
|
# `
|
@@ -276,11 +305,15 @@ module Google
|
|
276
305
|
# - user:mike@example.com
|
277
306
|
# - group:admins@example.com
|
278
307
|
# - domain:google.com
|
279
|
-
# - serviceAccount:my-
|
280
|
-
# role: roles/
|
308
|
+
# - serviceAccount:my-project-id@appspot.gserviceaccount.com
|
309
|
+
# role: roles/resourcemanager.organizationAdmin
|
281
310
|
# - members:
|
282
|
-
# - user:
|
283
|
-
# role: roles/
|
311
|
+
# - user:eve@example.com
|
312
|
+
# role: roles/resourcemanager.organizationViewer
|
313
|
+
# condition:
|
314
|
+
# title: expirable access
|
315
|
+
# description: Does not grant access after Sep 2020
|
316
|
+
# expression: request.time < timestamp('2020-10-01T00:00:00.000Z')
|
284
317
|
# For a description of IAM and its features, see the
|
285
318
|
# [IAM developer's guide](https://cloud.google.com/iam/docs).
|
286
319
|
# Corresponds to the JSON property `policy`
|