google-api-client 0.31.0 → 0.32.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/.kokoro/continuous/linux.cfg +11 -1
- data/.kokoro/continuous/osx.cfg +5 -0
- data/.kokoro/continuous/windows.cfg +10 -0
- data/.kokoro/presubmit/linux.cfg +11 -1
- data/.kokoro/presubmit/osx.cfg +5 -0
- data/.kokoro/presubmit/windows.cfg +10 -0
- data/CHANGELOG.md +107 -0
- data/generated/google/apis/androidmanagement_v1.rb +1 -1
- data/generated/google/apis/androidmanagement_v1/classes.rb +12 -1
- data/generated/google/apis/androidmanagement_v1/representations.rb +1 -0
- data/generated/google/apis/bigquery_v2.rb +1 -1
- data/generated/google/apis/bigquery_v2/classes.rb +241 -0
- data/generated/google/apis/bigquery_v2/representations.rb +115 -0
- data/generated/google/apis/bigqueryconnection_v1beta1.rb +1 -1
- data/generated/google/apis/bigqueryconnection_v1beta1/classes.rb +62 -29
- data/generated/google/apis/bigquerydatatransfer_v1.rb +1 -1
- data/generated/google/apis/bigquerydatatransfer_v1/classes.rb +2 -2
- data/generated/google/apis/bigquerydatatransfer_v1/service.rb +30 -26
- data/generated/google/apis/bigqueryreservation_v1.rb +1 -1
- data/generated/google/apis/bigqueryreservation_v1/classes.rb +7 -7
- data/generated/google/apis/bigqueryreservation_v1/representations.rb +3 -3
- data/generated/google/apis/bigqueryreservation_v1alpha2.rb +1 -1
- data/generated/google/apis/bigqueryreservation_v1alpha2/classes.rb +0 -175
- data/generated/google/apis/bigqueryreservation_v1alpha2/representations.rb +0 -65
- data/generated/google/apis/bigqueryreservation_v1alpha2/service.rb +0 -140
- data/generated/google/apis/bigqueryreservation_v1beta1.rb +37 -0
- data/generated/google/apis/bigqueryreservation_v1beta1/classes.rb +497 -0
- data/generated/google/apis/bigqueryreservation_v1beta1/representations.rb +236 -0
- data/generated/google/apis/bigqueryreservation_v1beta1/service.rb +713 -0
- data/generated/google/apis/binaryauthorization_v1.rb +1 -1
- data/generated/google/apis/binaryauthorization_v1/classes.rb +307 -0
- data/generated/google/apis/binaryauthorization_v1/representations.rb +88 -0
- data/generated/google/apis/binaryauthorization_v1/service.rb +230 -0
- data/generated/google/apis/binaryauthorization_v1beta1.rb +1 -1
- data/generated/google/apis/binaryauthorization_v1beta1/classes.rb +62 -29
- data/generated/google/apis/blogger_v3.rb +1 -1
- data/generated/google/apis/blogger_v3/service.rb +6 -6
- data/generated/google/apis/calendar_v3.rb +1 -1
- data/generated/google/apis/calendar_v3/classes.rb +1 -0
- data/generated/google/apis/cloudasset_v1.rb +1 -1
- data/generated/google/apis/cloudasset_v1/classes.rb +72 -29
- data/generated/google/apis/cloudasset_v1/representations.rb +1 -0
- data/generated/google/apis/cloudasset_v1/service.rb +1 -1
- data/generated/google/apis/cloudasset_v1beta1.rb +1 -1
- data/generated/google/apis/cloudasset_v1beta1/classes.rb +62 -29
- data/generated/google/apis/cloudasset_v1beta1/service.rb +2 -2
- data/generated/google/apis/cloudfunctions_v1.rb +1 -1
- data/generated/google/apis/cloudfunctions_v1/classes.rb +7 -2
- data/generated/google/apis/cloudfunctions_v1/service.rb +10 -7
- data/generated/google/apis/cloudfunctions_v1beta2.rb +1 -1
- data/generated/google/apis/cloudfunctions_v1beta2/classes.rb +1 -1
- data/generated/google/apis/cloudfunctions_v1beta2/service.rb +7 -6
- data/generated/google/apis/cloudidentity_v1.rb +4 -1
- data/generated/google/apis/cloudidentity_v1beta1.rb +4 -1
- data/generated/google/apis/cloudiot_v1.rb +1 -1
- data/generated/google/apis/cloudiot_v1/classes.rb +68 -35
- data/generated/google/apis/cloudiot_v1/service.rb +18 -17
- data/generated/google/apis/cloudkms_v1.rb +1 -1
- data/generated/google/apis/cloudkms_v1/classes.rb +77 -35
- data/generated/google/apis/cloudkms_v1/service.rb +33 -27
- data/generated/google/apis/cloudprivatecatalogproducer_v1beta1.rb +1 -1
- data/generated/google/apis/cloudprivatecatalogproducer_v1beta1/classes.rb +62 -29
- data/generated/google/apis/cloudsearch_v1.rb +1 -1
- data/generated/google/apis/cloudsearch_v1/classes.rb +354 -0
- data/generated/google/apis/cloudsearch_v1/representations.rb +196 -0
- data/generated/google/apis/cloudsearch_v1/service.rb +314 -2
- data/generated/google/apis/cloudtasks_v2beta3.rb +1 -1
- data/generated/google/apis/cloudtasks_v2beta3/classes.rb +62 -29
- data/generated/google/apis/cloudtrace_v1.rb +1 -1
- data/generated/google/apis/cloudtrace_v1/classes.rb +1 -1
- data/generated/google/apis/cloudtrace_v1/service.rb +10 -10
- data/generated/google/apis/cloudtrace_v2.rb +1 -1
- data/generated/google/apis/cloudtrace_v2/classes.rb +3 -3
- data/generated/google/apis/commentanalyzer_v1alpha1.rb +1 -1
- data/generated/google/apis/commentanalyzer_v1alpha1/classes.rb +7 -10
- data/generated/google/apis/compute_alpha.rb +1 -1
- data/generated/google/apis/compute_alpha/classes.rb +38 -42
- data/generated/google/apis/compute_alpha/representations.rb +5 -16
- data/generated/google/apis/compute_beta.rb +1 -1
- data/generated/google/apis/compute_beta/classes.rb +10 -5
- data/generated/google/apis/compute_v1.rb +1 -1
- data/generated/google/apis/compute_v1/classes.rb +1327 -4
- data/generated/google/apis/compute_v1/representations.rb +439 -0
- data/generated/google/apis/container_v1.rb +1 -1
- data/generated/google/apis/container_v1/classes.rb +111 -0
- data/generated/google/apis/container_v1/representations.rb +51 -0
- data/generated/google/apis/containeranalysis_v1alpha1.rb +1 -1
- data/generated/google/apis/containeranalysis_v1alpha1/classes.rb +76 -30
- data/generated/google/apis/containeranalysis_v1alpha1/representations.rb +1 -0
- data/generated/google/apis/containeranalysis_v1beta1.rb +1 -1
- data/generated/google/apis/containeranalysis_v1beta1/classes.rb +70 -30
- data/generated/google/apis/content_v2.rb +1 -1
- data/generated/google/apis/content_v2/service.rb +0 -226
- data/generated/google/apis/dataflow_v1b3.rb +1 -1
- data/generated/google/apis/dataflow_v1b3/classes.rb +42 -0
- data/generated/google/apis/dataflow_v1b3/representations.rb +4 -0
- data/generated/google/apis/dataproc_v1.rb +1 -1
- data/generated/google/apis/dataproc_v1/classes.rb +324 -38
- data/generated/google/apis/dataproc_v1/representations.rb +97 -0
- data/generated/google/apis/dataproc_v1/service.rb +613 -1
- data/generated/google/apis/dataproc_v1beta2.rb +1 -1
- data/generated/google/apis/dataproc_v1beta2/classes.rb +100 -54
- data/generated/google/apis/dataproc_v1beta2/service.rb +29 -22
- data/generated/google/apis/dialogflow_v2.rb +1 -1
- data/generated/google/apis/dialogflow_v2/classes.rb +363 -167
- data/generated/google/apis/dialogflow_v2/representations.rb +160 -49
- data/generated/google/apis/dialogflow_v2/service.rb +1 -1
- data/generated/google/apis/dialogflow_v2beta1.rb +1 -1
- data/generated/google/apis/dialogflow_v2beta1/classes.rb +433 -178
- data/generated/google/apis/dialogflow_v2beta1/representations.rb +199 -59
- data/generated/google/apis/dialogflow_v2beta1/service.rb +39 -0
- data/generated/google/apis/dlp_v2.rb +1 -1
- data/generated/google/apis/dlp_v2/classes.rb +3 -4
- data/generated/google/apis/doubleclickbidmanager_v1.rb +1 -1
- data/generated/google/apis/drive_v2.rb +1 -1
- data/generated/google/apis/drive_v2/classes.rb +2 -2
- data/generated/google/apis/drive_v3.rb +1 -1
- data/generated/google/apis/drive_v3/classes.rb +2 -2
- data/generated/google/apis/fcm_v1.rb +1 -1
- data/generated/google/apis/fcm_v1/classes.rb +9 -4
- data/generated/google/apis/file_v1.rb +1 -1
- data/generated/google/apis/file_v1/classes.rb +8 -0
- data/generated/google/apis/file_v1/representations.rb +1 -0
- data/generated/google/apis/file_v1/service.rb +2 -0
- data/generated/google/apis/file_v1beta1.rb +1 -1
- data/generated/google/apis/file_v1beta1/classes.rb +8 -0
- data/generated/google/apis/file_v1beta1/representations.rb +1 -0
- data/generated/google/apis/file_v1beta1/service.rb +2 -0
- data/generated/google/apis/firebase_v1beta1.rb +1 -1
- data/generated/google/apis/firebase_v1beta1/classes.rb +41 -4
- data/generated/google/apis/firebase_v1beta1/representations.rb +2 -0
- data/generated/google/apis/firebase_v1beta1/service.rb +22 -14
- data/generated/google/apis/fitness_v1.rb +19 -19
- data/generated/google/apis/healthcare_v1beta1.rb +1 -1
- data/generated/google/apis/healthcare_v1beta1/classes.rb +136 -100
- data/generated/google/apis/healthcare_v1beta1/representations.rb +1 -1
- data/generated/google/apis/healthcare_v1beta1/service.rb +124 -119
- data/generated/google/apis/iam_v1.rb +1 -1
- data/generated/google/apis/iam_v1/classes.rb +87 -41
- data/generated/google/apis/iap_v1.rb +1 -1
- data/generated/google/apis/iap_v1/classes.rb +62 -29
- data/generated/google/apis/iap_v1beta1.rb +1 -1
- data/generated/google/apis/iap_v1beta1/classes.rb +62 -29
- data/generated/google/apis/ml_v1.rb +1 -1
- data/generated/google/apis/ml_v1/classes.rb +114 -49
- data/generated/google/apis/ml_v1/representations.rb +2 -0
- data/generated/google/apis/ml_v1/service.rb +12 -6
- data/generated/google/apis/monitoring_v3.rb +1 -1
- data/generated/google/apis/monitoring_v3/classes.rb +14 -10
- data/generated/google/apis/monitoring_v3/representations.rb +1 -0
- data/generated/google/apis/oslogin_v1.rb +1 -1
- data/generated/google/apis/oslogin_v1/classes.rb +12 -0
- data/generated/google/apis/oslogin_v1/representations.rb +2 -0
- data/generated/google/apis/oslogin_v1alpha.rb +1 -1
- data/generated/google/apis/oslogin_v1alpha/classes.rb +12 -0
- data/generated/google/apis/oslogin_v1alpha/representations.rb +2 -0
- data/generated/google/apis/oslogin_v1beta.rb +1 -1
- data/generated/google/apis/oslogin_v1beta/classes.rb +12 -0
- data/generated/google/apis/oslogin_v1beta/representations.rb +2 -0
- data/generated/google/apis/policytroubleshooter_v1beta.rb +34 -0
- data/generated/google/apis/policytroubleshooter_v1beta/classes.rb +621 -0
- data/generated/google/apis/policytroubleshooter_v1beta/representations.rb +203 -0
- data/generated/google/apis/policytroubleshooter_v1beta/service.rb +91 -0
- data/generated/google/apis/proximitybeacon_v1beta1.rb +1 -1
- data/generated/google/apis/proximitybeacon_v1beta1/classes.rb +7 -4
- data/generated/google/apis/proximitybeacon_v1beta1/service.rb +60 -58
- data/generated/google/apis/recommender_v1beta1.rb +34 -0
- data/generated/google/apis/recommender_v1beta1/classes.rb +502 -0
- data/generated/google/apis/recommender_v1beta1/representations.rb +232 -0
- data/generated/google/apis/recommender_v1beta1/service.rb +262 -0
- data/generated/google/apis/remotebuildexecution_v1.rb +1 -1
- data/generated/google/apis/remotebuildexecution_v1/classes.rb +49 -1100
- data/generated/google/apis/remotebuildexecution_v1/representations.rb +1 -276
- data/generated/google/apis/remotebuildexecution_v1/service.rb +0 -77
- data/generated/google/apis/remotebuildexecution_v1alpha.rb +1 -1
- data/generated/google/apis/remotebuildexecution_v1alpha/classes.rb +12 -990
- data/generated/google/apis/remotebuildexecution_v1alpha/representations.rb +1 -245
- data/generated/google/apis/remotebuildexecution_v2.rb +1 -1
- data/generated/google/apis/remotebuildexecution_v2/classes.rb +12 -990
- data/generated/google/apis/remotebuildexecution_v2/representations.rb +1 -245
- data/generated/google/apis/run_v1.rb +1 -1
- data/generated/google/apis/run_v1/classes.rb +3553 -33
- data/generated/google/apis/run_v1/representations.rb +1186 -4
- data/generated/google/apis/run_v1/service.rb +2509 -23
- data/generated/google/apis/run_v1alpha1.rb +1 -1
- data/generated/google/apis/run_v1alpha1/classes.rb +103 -140
- data/generated/google/apis/run_v1alpha1/representations.rb +5 -43
- data/generated/google/apis/run_v1beta1.rb +35 -0
- data/generated/google/apis/run_v1beta1/classes.rb +1209 -0
- data/generated/google/apis/run_v1beta1/representations.rb +421 -0
- data/generated/google/apis/run_v1beta1/service.rb +172 -0
- data/generated/google/apis/runtimeconfig_v1beta1.rb +1 -1
- data/generated/google/apis/runtimeconfig_v1beta1/classes.rb +62 -29
- data/generated/google/apis/safebrowsing_v4.rb +5 -2
- data/generated/google/apis/safebrowsing_v4/service.rb +4 -1
- data/generated/google/apis/securitycenter_v1.rb +1 -1
- data/generated/google/apis/securitycenter_v1/classes.rb +70 -35
- data/generated/google/apis/securitycenter_v1/service.rb +13 -12
- data/generated/google/apis/securitycenter_v1beta1.rb +1 -1
- data/generated/google/apis/securitycenter_v1beta1/classes.rb +71 -35
- data/generated/google/apis/securitycenter_v1beta1/service.rb +13 -12
- data/generated/google/apis/servicebroker_v1.rb +1 -1
- data/generated/google/apis/servicebroker_v1/classes.rb +62 -29
- data/generated/google/apis/servicebroker_v1alpha1.rb +1 -1
- data/generated/google/apis/servicebroker_v1alpha1/classes.rb +62 -29
- data/generated/google/apis/servicebroker_v1beta1.rb +1 -1
- data/generated/google/apis/servicebroker_v1beta1/classes.rb +62 -29
- data/generated/google/apis/serviceconsumermanagement_v1.rb +1 -1
- data/generated/google/apis/serviceconsumermanagement_v1/classes.rb +11 -2
- data/generated/google/apis/serviceconsumermanagement_v1/representations.rb +1 -0
- data/generated/google/apis/servicemanagement_v1.rb +1 -1
- data/generated/google/apis/servicemanagement_v1/classes.rb +63 -33
- data/generated/google/apis/servicenetworking_v1.rb +1 -1
- data/generated/google/apis/servicenetworking_v1/classes.rb +11 -2
- data/generated/google/apis/servicenetworking_v1/representations.rb +1 -0
- data/generated/google/apis/servicenetworking_v1beta.rb +1 -1
- data/generated/google/apis/servicenetworking_v1beta/classes.rb +11 -2
- data/generated/google/apis/servicenetworking_v1beta/representations.rb +1 -0
- data/generated/google/apis/serviceusage_v1.rb +1 -1
- data/generated/google/apis/serviceusage_v1/classes.rb +11 -2
- data/generated/google/apis/serviceusage_v1/representations.rb +1 -0
- data/generated/google/apis/serviceusage_v1beta1.rb +1 -1
- data/generated/google/apis/serviceusage_v1beta1/classes.rb +11 -2
- data/generated/google/apis/serviceusage_v1beta1/representations.rb +1 -0
- data/generated/google/apis/spanner_v1.rb +1 -1
- data/generated/google/apis/spanner_v1/classes.rb +78 -2
- data/generated/google/apis/spanner_v1/representations.rb +44 -0
- data/generated/google/apis/spanner_v1/service.rb +35 -0
- data/generated/google/apis/speech_v1.rb +1 -1
- data/generated/google/apis/speech_v1/classes.rb +73 -19
- data/generated/google/apis/speech_v1/representations.rb +18 -0
- data/generated/google/apis/speech_v1p1beta1.rb +1 -1
- data/generated/google/apis/speech_v1p1beta1/classes.rb +31 -35
- data/generated/google/apis/speech_v2beta.rb +1 -1
- data/generated/google/apis/speech_v2beta/classes.rb +6 -6
- data/generated/google/apis/speech_v2beta/representations.rb +2 -2
- data/generated/google/apis/storage_v1.rb +1 -1
- data/generated/google/apis/storage_v1/classes.rb +1 -1
- data/generated/google/apis/storage_v1/representations.rb +2 -1
- data/generated/google/apis/storage_v1beta1.rb +1 -1
- data/generated/google/apis/storage_v1beta2.rb +1 -1
- data/generated/google/apis/streetviewpublish_v1.rb +1 -1
- data/generated/google/apis/streetviewpublish_v1/classes.rb +1 -1
- data/generated/google/apis/streetviewpublish_v1/service.rb +9 -5
- data/generated/google/apis/testing_v1.rb +1 -1
- data/generated/google/apis/testing_v1/classes.rb +42 -0
- data/generated/google/apis/testing_v1/representations.rb +18 -0
- data/generated/google/apis/texttospeech_v1.rb +1 -1
- data/generated/google/apis/texttospeech_v1/classes.rb +6 -5
- data/generated/google/apis/texttospeech_v1/service.rb +1 -1
- data/generated/google/apis/texttospeech_v1beta1.rb +1 -1
- data/generated/google/apis/texttospeech_v1beta1/classes.rb +6 -5
- data/generated/google/apis/texttospeech_v1beta1/service.rb +1 -1
- data/generated/google/apis/toolresults_v1beta3.rb +1 -1
- data/generated/google/apis/toolresults_v1beta3/classes.rb +1 -1
- data/generated/google/apis/translate_v3beta1.rb +1 -1
- data/generated/google/apis/translate_v3beta1/classes.rb +22 -16
- data/generated/google/apis/translate_v3beta1/service.rb +31 -31
- data/generated/google/apis/videointelligence_v1.rb +1 -1
- data/generated/google/apis/videointelligence_v1/classes.rb +45 -10
- data/generated/google/apis/videointelligence_v1beta2.rb +1 -1
- data/generated/google/apis/videointelligence_v1beta2/classes.rb +45 -10
- data/generated/google/apis/videointelligence_v1p1beta1.rb +1 -1
- data/generated/google/apis/videointelligence_v1p1beta1/classes.rb +45 -10
- data/generated/google/apis/videointelligence_v1p2beta1.rb +1 -1
- data/generated/google/apis/videointelligence_v1p2beta1/classes.rb +45 -10
- data/generated/google/apis/videointelligence_v1p3beta1.rb +1 -1
- data/generated/google/apis/videointelligence_v1p3beta1/classes.rb +45 -10
- data/generated/google/apis/vision_v1.rb +1 -1
- data/generated/google/apis/vision_v1/classes.rb +6 -156
- data/generated/google/apis/vision_v1/representations.rb +0 -44
- data/generated/google/apis/vision_v1p1beta1.rb +1 -1
- data/generated/google/apis/vision_v1p1beta1/classes.rb +6 -156
- data/generated/google/apis/vision_v1p1beta1/representations.rb +0 -44
- data/generated/google/apis/vision_v1p2beta1.rb +1 -1
- data/generated/google/apis/vision_v1p2beta1/classes.rb +6 -156
- data/generated/google/apis/vision_v1p2beta1/representations.rb +0 -44
- data/generated/google/apis/websecurityscanner_v1.rb +1 -1
- data/generated/google/apis/websecurityscanner_v1alpha.rb +1 -1
- data/generated/google/apis/websecurityscanner_v1alpha/classes.rb +21 -31
- data/generated/google/apis/websecurityscanner_v1alpha/service.rb +1 -1
- data/generated/google/apis/websecurityscanner_v1beta.rb +1 -1
- data/generated/google/apis/websecurityscanner_v1beta/classes.rb +30 -42
- data/generated/google/apis/websecurityscanner_v1beta/service.rb +1 -1
- data/generated/google/apis/youtube_partner_v1.rb +1 -1
- data/generated/google/apis/youtube_partner_v1/classes.rb +0 -83
- data/generated/google/apis/youtube_partner_v1/representations.rb +0 -35
- data/generated/google/apis/youtube_partner_v1/service.rb +0 -100
- data/lib/google/apis/version.rb +1 -1
- metadata +18 -6
- data/generated/google/apis/dfareporting_v3_1.rb +0 -40
- data/generated/google/apis/dfareporting_v3_1/classes.rb +0 -11998
- data/generated/google/apis/dfareporting_v3_1/representations.rb +0 -4313
- data/generated/google/apis/dfareporting_v3_1/service.rb +0 -8688
|
@@ -27,7 +27,7 @@ module Google
|
|
|
27
27
|
# @see https://cloud.google.com/iam/
|
|
28
28
|
module IamV1
|
|
29
29
|
VERSION = 'V1'
|
|
30
|
-
REVISION = '
|
|
30
|
+
REVISION = '20190927'
|
|
31
31
|
|
|
32
32
|
# View and manage your data across Google Cloud Platform services
|
|
33
33
|
AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'
|
|
@@ -519,25 +519,34 @@ module Google
|
|
|
519
519
|
|
|
520
520
|
# Defines an Identity and Access Management (IAM) policy. It is used to
|
|
521
521
|
# specify access control policies for Cloud Platform resources.
|
|
522
|
-
# A `Policy`
|
|
523
|
-
# `members` to a `role
|
|
524
|
-
# Google
|
|
525
|
-
# defined by IAM.
|
|
522
|
+
# A `Policy` is a collection of `bindings`. A `binding` binds one or more
|
|
523
|
+
# `members` to a single `role`. Members can be user accounts, service accounts,
|
|
524
|
+
# Google groups, and domains (such as G Suite). A `role` is a named list of
|
|
525
|
+
# permissions (defined by IAM or configured by users). A `binding` can
|
|
526
|
+
# optionally specify a `condition`, which is a logic expression that further
|
|
527
|
+
# constrains the role binding based on attributes about the request and/or
|
|
528
|
+
# target resource.
|
|
526
529
|
# **JSON Example**
|
|
527
530
|
# `
|
|
528
531
|
# "bindings": [
|
|
529
532
|
# `
|
|
530
|
-
# "role": "roles/
|
|
533
|
+
# "role": "roles/resourcemanager.organizationAdmin",
|
|
531
534
|
# "members": [
|
|
532
535
|
# "user:mike@example.com",
|
|
533
536
|
# "group:admins@example.com",
|
|
534
537
|
# "domain:google.com",
|
|
535
|
-
# "serviceAccount:my-
|
|
538
|
+
# "serviceAccount:my-project-id@appspot.gserviceaccount.com"
|
|
536
539
|
# ]
|
|
537
540
|
# `,
|
|
538
541
|
# `
|
|
539
|
-
# "role": "roles/
|
|
540
|
-
# "members": ["user:
|
|
542
|
+
# "role": "roles/resourcemanager.organizationViewer",
|
|
543
|
+
# "members": ["user:eve@example.com"],
|
|
544
|
+
# "condition": `
|
|
545
|
+
# "title": "expirable access",
|
|
546
|
+
# "description": "Does not grant access after Sep 2020",
|
|
547
|
+
# "expression": "request.time <
|
|
548
|
+
# timestamp('2020-10-01T00:00:00.000Z')",
|
|
549
|
+
# `
|
|
541
550
|
# `
|
|
542
551
|
# ]
|
|
543
552
|
# `
|
|
@@ -547,11 +556,15 @@ module Google
|
|
|
547
556
|
# - user:mike@example.com
|
|
548
557
|
# - group:admins@example.com
|
|
549
558
|
# - domain:google.com
|
|
550
|
-
# - serviceAccount:my-
|
|
551
|
-
# role: roles/
|
|
559
|
+
# - serviceAccount:my-project-id@appspot.gserviceaccount.com
|
|
560
|
+
# role: roles/resourcemanager.organizationAdmin
|
|
552
561
|
# - members:
|
|
553
|
-
# - user:
|
|
554
|
-
# role: roles/
|
|
562
|
+
# - user:eve@example.com
|
|
563
|
+
# role: roles/resourcemanager.organizationViewer
|
|
564
|
+
# condition:
|
|
565
|
+
# title: expirable access
|
|
566
|
+
# description: Does not grant access after Sep 2020
|
|
567
|
+
# expression: request.time < timestamp('2020-10-01T00:00:00.000Z')
|
|
555
568
|
# For a description of IAM and its features, see the
|
|
556
569
|
# [IAM developer's guide](https://cloud.google.com/iam/docs).
|
|
557
570
|
# Corresponds to the JSON property `policy`
|
|
@@ -872,25 +885,34 @@ module Google
|
|
|
872
885
|
|
|
873
886
|
# Defines an Identity and Access Management (IAM) policy. It is used to
|
|
874
887
|
# specify access control policies for Cloud Platform resources.
|
|
875
|
-
# A `Policy`
|
|
876
|
-
# `members` to a `role
|
|
877
|
-
# Google
|
|
878
|
-
# defined by IAM.
|
|
888
|
+
# A `Policy` is a collection of `bindings`. A `binding` binds one or more
|
|
889
|
+
# `members` to a single `role`. Members can be user accounts, service accounts,
|
|
890
|
+
# Google groups, and domains (such as G Suite). A `role` is a named list of
|
|
891
|
+
# permissions (defined by IAM or configured by users). A `binding` can
|
|
892
|
+
# optionally specify a `condition`, which is a logic expression that further
|
|
893
|
+
# constrains the role binding based on attributes about the request and/or
|
|
894
|
+
# target resource.
|
|
879
895
|
# **JSON Example**
|
|
880
896
|
# `
|
|
881
897
|
# "bindings": [
|
|
882
898
|
# `
|
|
883
|
-
# "role": "roles/
|
|
899
|
+
# "role": "roles/resourcemanager.organizationAdmin",
|
|
884
900
|
# "members": [
|
|
885
901
|
# "user:mike@example.com",
|
|
886
902
|
# "group:admins@example.com",
|
|
887
903
|
# "domain:google.com",
|
|
888
|
-
# "serviceAccount:my-
|
|
904
|
+
# "serviceAccount:my-project-id@appspot.gserviceaccount.com"
|
|
889
905
|
# ]
|
|
890
906
|
# `,
|
|
891
907
|
# `
|
|
892
|
-
# "role": "roles/
|
|
893
|
-
# "members": ["user:
|
|
908
|
+
# "role": "roles/resourcemanager.organizationViewer",
|
|
909
|
+
# "members": ["user:eve@example.com"],
|
|
910
|
+
# "condition": `
|
|
911
|
+
# "title": "expirable access",
|
|
912
|
+
# "description": "Does not grant access after Sep 2020",
|
|
913
|
+
# "expression": "request.time <
|
|
914
|
+
# timestamp('2020-10-01T00:00:00.000Z')",
|
|
915
|
+
# `
|
|
894
916
|
# `
|
|
895
917
|
# ]
|
|
896
918
|
# `
|
|
@@ -900,11 +922,15 @@ module Google
|
|
|
900
922
|
# - user:mike@example.com
|
|
901
923
|
# - group:admins@example.com
|
|
902
924
|
# - domain:google.com
|
|
903
|
-
# - serviceAccount:my-
|
|
904
|
-
# role: roles/
|
|
925
|
+
# - serviceAccount:my-project-id@appspot.gserviceaccount.com
|
|
926
|
+
# role: roles/resourcemanager.organizationAdmin
|
|
905
927
|
# - members:
|
|
906
|
-
# - user:
|
|
907
|
-
# role: roles/
|
|
928
|
+
# - user:eve@example.com
|
|
929
|
+
# role: roles/resourcemanager.organizationViewer
|
|
930
|
+
# condition:
|
|
931
|
+
# title: expirable access
|
|
932
|
+
# description: Does not grant access after Sep 2020
|
|
933
|
+
# expression: request.time < timestamp('2020-10-01T00:00:00.000Z')
|
|
908
934
|
# For a description of IAM and its features, see the
|
|
909
935
|
# [IAM developer's guide](https://cloud.google.com/iam/docs).
|
|
910
936
|
class Policy
|
|
@@ -915,7 +941,8 @@ module Google
|
|
|
915
941
|
# @return [Array<Google::Apis::IamV1::AuditConfig>]
|
|
916
942
|
attr_accessor :audit_configs
|
|
917
943
|
|
|
918
|
-
# Associates a list of `members` to a `role`.
|
|
944
|
+
# Associates a list of `members` to a `role`. Optionally may specify a
|
|
945
|
+
# `condition` that determines when binding is in effect.
|
|
919
946
|
# `bindings` with no members will result in an error.
|
|
920
947
|
# Corresponds to the JSON property `bindings`
|
|
921
948
|
# @return [Array<Google::Apis::IamV1::Binding>]
|
|
@@ -929,7 +956,9 @@ module Google
|
|
|
929
956
|
# systems are expected to put that etag in the request to `setIamPolicy` to
|
|
930
957
|
# ensure that their change will be applied to the same version of the policy.
|
|
931
958
|
# If no `etag` is provided in the call to `setIamPolicy`, then the existing
|
|
932
|
-
# policy is overwritten.
|
|
959
|
+
# policy is overwritten. Due to blind-set semantics of an etag-less policy,
|
|
960
|
+
# 'setIamPolicy' will not fail even if either of incoming or stored policy
|
|
961
|
+
# does not meet the version requirements.
|
|
933
962
|
# Corresponds to the JSON property `etag`
|
|
934
963
|
# NOTE: Values are automatically base64 encoded/decoded in the client library.
|
|
935
964
|
# @return [String]
|
|
@@ -938,9 +967,13 @@ module Google
|
|
|
938
967
|
# Specifies the format of the policy.
|
|
939
968
|
# Valid values are 0, 1, and 3. Requests specifying an invalid value will be
|
|
940
969
|
# rejected.
|
|
941
|
-
#
|
|
942
|
-
#
|
|
943
|
-
#
|
|
970
|
+
# Operations affecting conditional bindings must specify version 3. This can
|
|
971
|
+
# be either setting a conditional policy, modifying a conditional binding,
|
|
972
|
+
# or removing a conditional binding from the stored conditional policy.
|
|
973
|
+
# Operations on non-conditional policies may specify any valid value or
|
|
974
|
+
# leave the field unset.
|
|
975
|
+
# If no etag is provided in the call to `setIamPolicy`, any version
|
|
976
|
+
# compliance checks on the incoming and/or stored policy is skipped.
|
|
944
977
|
# Corresponds to the JSON property `version`
|
|
945
978
|
# @return [Fixnum]
|
|
946
979
|
attr_accessor :version
|
|
@@ -1402,25 +1435,34 @@ module Google
|
|
|
1402
1435
|
|
|
1403
1436
|
# Defines an Identity and Access Management (IAM) policy. It is used to
|
|
1404
1437
|
# specify access control policies for Cloud Platform resources.
|
|
1405
|
-
# A `Policy`
|
|
1406
|
-
# `members` to a `role
|
|
1407
|
-
# Google
|
|
1408
|
-
# defined by IAM.
|
|
1438
|
+
# A `Policy` is a collection of `bindings`. A `binding` binds one or more
|
|
1439
|
+
# `members` to a single `role`. Members can be user accounts, service accounts,
|
|
1440
|
+
# Google groups, and domains (such as G Suite). A `role` is a named list of
|
|
1441
|
+
# permissions (defined by IAM or configured by users). A `binding` can
|
|
1442
|
+
# optionally specify a `condition`, which is a logic expression that further
|
|
1443
|
+
# constrains the role binding based on attributes about the request and/or
|
|
1444
|
+
# target resource.
|
|
1409
1445
|
# **JSON Example**
|
|
1410
1446
|
# `
|
|
1411
1447
|
# "bindings": [
|
|
1412
1448
|
# `
|
|
1413
|
-
# "role": "roles/
|
|
1449
|
+
# "role": "roles/resourcemanager.organizationAdmin",
|
|
1414
1450
|
# "members": [
|
|
1415
1451
|
# "user:mike@example.com",
|
|
1416
1452
|
# "group:admins@example.com",
|
|
1417
1453
|
# "domain:google.com",
|
|
1418
|
-
# "serviceAccount:my-
|
|
1454
|
+
# "serviceAccount:my-project-id@appspot.gserviceaccount.com"
|
|
1419
1455
|
# ]
|
|
1420
1456
|
# `,
|
|
1421
1457
|
# `
|
|
1422
|
-
# "role": "roles/
|
|
1423
|
-
# "members": ["user:
|
|
1458
|
+
# "role": "roles/resourcemanager.organizationViewer",
|
|
1459
|
+
# "members": ["user:eve@example.com"],
|
|
1460
|
+
# "condition": `
|
|
1461
|
+
# "title": "expirable access",
|
|
1462
|
+
# "description": "Does not grant access after Sep 2020",
|
|
1463
|
+
# "expression": "request.time <
|
|
1464
|
+
# timestamp('2020-10-01T00:00:00.000Z')",
|
|
1465
|
+
# `
|
|
1424
1466
|
# `
|
|
1425
1467
|
# ]
|
|
1426
1468
|
# `
|
|
@@ -1430,11 +1472,15 @@ module Google
|
|
|
1430
1472
|
# - user:mike@example.com
|
|
1431
1473
|
# - group:admins@example.com
|
|
1432
1474
|
# - domain:google.com
|
|
1433
|
-
# - serviceAccount:my-
|
|
1434
|
-
# role: roles/
|
|
1475
|
+
# - serviceAccount:my-project-id@appspot.gserviceaccount.com
|
|
1476
|
+
# role: roles/resourcemanager.organizationAdmin
|
|
1435
1477
|
# - members:
|
|
1436
|
-
# - user:
|
|
1437
|
-
# role: roles/
|
|
1478
|
+
# - user:eve@example.com
|
|
1479
|
+
# role: roles/resourcemanager.organizationViewer
|
|
1480
|
+
# condition:
|
|
1481
|
+
# title: expirable access
|
|
1482
|
+
# description: Does not grant access after Sep 2020
|
|
1483
|
+
# expression: request.time < timestamp('2020-10-01T00:00:00.000Z')
|
|
1438
1484
|
# For a description of IAM and its features, see the
|
|
1439
1485
|
# [IAM developer's guide](https://cloud.google.com/iam/docs).
|
|
1440
1486
|
# Corresponds to the JSON property `policy`
|
|
@@ -25,7 +25,7 @@ module Google
|
|
|
25
25
|
# @see https://cloud.google.com/iap
|
|
26
26
|
module IapV1
|
|
27
27
|
VERSION = 'V1'
|
|
28
|
-
REVISION = '
|
|
28
|
+
REVISION = '20190920'
|
|
29
29
|
|
|
30
30
|
# View and manage your data across Google Cloud Platform services
|
|
31
31
|
AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'
|
|
@@ -162,25 +162,34 @@ module Google
|
|
|
162
162
|
|
|
163
163
|
# Defines an Identity and Access Management (IAM) policy. It is used to
|
|
164
164
|
# specify access control policies for Cloud Platform resources.
|
|
165
|
-
# A `Policy`
|
|
166
|
-
# `members` to a `role
|
|
167
|
-
# Google
|
|
168
|
-
# defined by IAM.
|
|
165
|
+
# A `Policy` is a collection of `bindings`. A `binding` binds one or more
|
|
166
|
+
# `members` to a single `role`. Members can be user accounts, service accounts,
|
|
167
|
+
# Google groups, and domains (such as G Suite). A `role` is a named list of
|
|
168
|
+
# permissions (defined by IAM or configured by users). A `binding` can
|
|
169
|
+
# optionally specify a `condition`, which is a logic expression that further
|
|
170
|
+
# constrains the role binding based on attributes about the request and/or
|
|
171
|
+
# target resource.
|
|
169
172
|
# **JSON Example**
|
|
170
173
|
# `
|
|
171
174
|
# "bindings": [
|
|
172
175
|
# `
|
|
173
|
-
# "role": "
|
|
176
|
+
# "role": "role/resourcemanager.organizationAdmin",
|
|
174
177
|
# "members": [
|
|
175
178
|
# "user:mike@example.com",
|
|
176
179
|
# "group:admins@example.com",
|
|
177
180
|
# "domain:google.com",
|
|
178
|
-
# "serviceAccount:my-
|
|
181
|
+
# "serviceAccount:my-project-id@appspot.gserviceaccount.com"
|
|
179
182
|
# ]
|
|
180
183
|
# `,
|
|
181
184
|
# `
|
|
182
|
-
# "role": "roles/
|
|
183
|
-
# "members": ["user:
|
|
185
|
+
# "role": "roles/resourcemanager.organizationViewer",
|
|
186
|
+
# "members": ["user:eve@example.com"],
|
|
187
|
+
# "condition": `
|
|
188
|
+
# "title": "expirable access",
|
|
189
|
+
# "description": "Does not grant access after Sep 2020",
|
|
190
|
+
# "expression": "request.time <
|
|
191
|
+
# timestamp('2020-10-01T00:00:00.000Z')",
|
|
192
|
+
# `
|
|
184
193
|
# `
|
|
185
194
|
# ]
|
|
186
195
|
# `
|
|
@@ -190,17 +199,22 @@ module Google
|
|
|
190
199
|
# - user:mike@example.com
|
|
191
200
|
# - group:admins@example.com
|
|
192
201
|
# - domain:google.com
|
|
193
|
-
# - serviceAccount:my-
|
|
194
|
-
# role: roles/
|
|
202
|
+
# - serviceAccount:my-project-id@appspot.gserviceaccount.com
|
|
203
|
+
# role: roles/resourcemanager.organizationAdmin
|
|
195
204
|
# - members:
|
|
196
|
-
# - user:
|
|
197
|
-
# role: roles/
|
|
205
|
+
# - user:eve@example.com
|
|
206
|
+
# role: roles/resourcemanager.organizationViewer
|
|
207
|
+
# condition:
|
|
208
|
+
# title: expirable access
|
|
209
|
+
# description: Does not grant access after Sep 2020
|
|
210
|
+
# expression: request.time < timestamp('2020-10-01T00:00:00.000Z')
|
|
198
211
|
# For a description of IAM and its features, see the
|
|
199
212
|
# [IAM developer's guide](https://cloud.google.com/iam/docs).
|
|
200
213
|
class Policy
|
|
201
214
|
include Google::Apis::Core::Hashable
|
|
202
215
|
|
|
203
|
-
# Associates a list of `members` to a `role`.
|
|
216
|
+
# Associates a list of `members` to a `role`. Optionally may specify a
|
|
217
|
+
# `condition` that determines when binding is in effect.
|
|
204
218
|
# `bindings` with no members will result in an error.
|
|
205
219
|
# Corresponds to the JSON property `bindings`
|
|
206
220
|
# @return [Array<Google::Apis::IapV1::Binding>]
|
|
@@ -214,7 +228,9 @@ module Google
|
|
|
214
228
|
# systems are expected to put that etag in the request to `setIamPolicy` to
|
|
215
229
|
# ensure that their change will be applied to the same version of the policy.
|
|
216
230
|
# If no `etag` is provided in the call to `setIamPolicy`, then the existing
|
|
217
|
-
# policy is overwritten.
|
|
231
|
+
# policy is overwritten. Due to blind-set semantics of an etag-less policy,
|
|
232
|
+
# 'setIamPolicy' will not fail even if either of incoming or stored policy
|
|
233
|
+
# does not meet the version requirements.
|
|
218
234
|
# Corresponds to the JSON property `etag`
|
|
219
235
|
# NOTE: Values are automatically base64 encoded/decoded in the client library.
|
|
220
236
|
# @return [String]
|
|
@@ -223,9 +239,13 @@ module Google
|
|
|
223
239
|
# Specifies the format of the policy.
|
|
224
240
|
# Valid values are 0, 1, and 3. Requests specifying an invalid value will be
|
|
225
241
|
# rejected.
|
|
226
|
-
#
|
|
227
|
-
#
|
|
228
|
-
#
|
|
242
|
+
# Operations affecting conditional bindings must specify version 3. This can
|
|
243
|
+
# be either setting a conditional policy, modifying a conditional binding,
|
|
244
|
+
# or removing a conditional binding from the stored conditional policy.
|
|
245
|
+
# Operations on non-conditional policies may specify any valid value or
|
|
246
|
+
# leave the field unset.
|
|
247
|
+
# If no etag is provided in the call to `setIamPolicy`, any version
|
|
248
|
+
# compliance checks on the incoming and/or stored policy is skipped.
|
|
229
249
|
# Corresponds to the JSON property `version`
|
|
230
250
|
# @return [Fixnum]
|
|
231
251
|
attr_accessor :version
|
|
@@ -248,25 +268,34 @@ module Google
|
|
|
248
268
|
|
|
249
269
|
# Defines an Identity and Access Management (IAM) policy. It is used to
|
|
250
270
|
# specify access control policies for Cloud Platform resources.
|
|
251
|
-
# A `Policy`
|
|
252
|
-
# `members` to a `role
|
|
253
|
-
# Google
|
|
254
|
-
# defined by IAM.
|
|
271
|
+
# A `Policy` is a collection of `bindings`. A `binding` binds one or more
|
|
272
|
+
# `members` to a single `role`. Members can be user accounts, service accounts,
|
|
273
|
+
# Google groups, and domains (such as G Suite). A `role` is a named list of
|
|
274
|
+
# permissions (defined by IAM or configured by users). A `binding` can
|
|
275
|
+
# optionally specify a `condition`, which is a logic expression that further
|
|
276
|
+
# constrains the role binding based on attributes about the request and/or
|
|
277
|
+
# target resource.
|
|
255
278
|
# **JSON Example**
|
|
256
279
|
# `
|
|
257
280
|
# "bindings": [
|
|
258
281
|
# `
|
|
259
|
-
# "role": "
|
|
282
|
+
# "role": "role/resourcemanager.organizationAdmin",
|
|
260
283
|
# "members": [
|
|
261
284
|
# "user:mike@example.com",
|
|
262
285
|
# "group:admins@example.com",
|
|
263
286
|
# "domain:google.com",
|
|
264
|
-
# "serviceAccount:my-
|
|
287
|
+
# "serviceAccount:my-project-id@appspot.gserviceaccount.com"
|
|
265
288
|
# ]
|
|
266
289
|
# `,
|
|
267
290
|
# `
|
|
268
|
-
# "role": "roles/
|
|
269
|
-
# "members": ["user:
|
|
291
|
+
# "role": "roles/resourcemanager.organizationViewer",
|
|
292
|
+
# "members": ["user:eve@example.com"],
|
|
293
|
+
# "condition": `
|
|
294
|
+
# "title": "expirable access",
|
|
295
|
+
# "description": "Does not grant access after Sep 2020",
|
|
296
|
+
# "expression": "request.time <
|
|
297
|
+
# timestamp('2020-10-01T00:00:00.000Z')",
|
|
298
|
+
# `
|
|
270
299
|
# `
|
|
271
300
|
# ]
|
|
272
301
|
# `
|
|
@@ -276,11 +305,15 @@ module Google
|
|
|
276
305
|
# - user:mike@example.com
|
|
277
306
|
# - group:admins@example.com
|
|
278
307
|
# - domain:google.com
|
|
279
|
-
# - serviceAccount:my-
|
|
280
|
-
# role: roles/
|
|
308
|
+
# - serviceAccount:my-project-id@appspot.gserviceaccount.com
|
|
309
|
+
# role: roles/resourcemanager.organizationAdmin
|
|
281
310
|
# - members:
|
|
282
|
-
# - user:
|
|
283
|
-
# role: roles/
|
|
311
|
+
# - user:eve@example.com
|
|
312
|
+
# role: roles/resourcemanager.organizationViewer
|
|
313
|
+
# condition:
|
|
314
|
+
# title: expirable access
|
|
315
|
+
# description: Does not grant access after Sep 2020
|
|
316
|
+
# expression: request.time < timestamp('2020-10-01T00:00:00.000Z')
|
|
284
317
|
# For a description of IAM and its features, see the
|
|
285
318
|
# [IAM developer's guide](https://cloud.google.com/iam/docs).
|
|
286
319
|
# Corresponds to the JSON property `policy`
|
|
@@ -25,7 +25,7 @@ module Google
|
|
|
25
25
|
# @see https://cloud.google.com/iap
|
|
26
26
|
module IapV1beta1
|
|
27
27
|
VERSION = 'V1beta1'
|
|
28
|
-
REVISION = '
|
|
28
|
+
REVISION = '20190920'
|
|
29
29
|
|
|
30
30
|
# View and manage your data across Google Cloud Platform services
|
|
31
31
|
AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'
|
|
@@ -162,25 +162,34 @@ module Google
|
|
|
162
162
|
|
|
163
163
|
# Defines an Identity and Access Management (IAM) policy. It is used to
|
|
164
164
|
# specify access control policies for Cloud Platform resources.
|
|
165
|
-
# A `Policy`
|
|
166
|
-
# `members` to a `role
|
|
167
|
-
# Google
|
|
168
|
-
# defined by IAM.
|
|
165
|
+
# A `Policy` is a collection of `bindings`. A `binding` binds one or more
|
|
166
|
+
# `members` to a single `role`. Members can be user accounts, service accounts,
|
|
167
|
+
# Google groups, and domains (such as G Suite). A `role` is a named list of
|
|
168
|
+
# permissions (defined by IAM or configured by users). A `binding` can
|
|
169
|
+
# optionally specify a `condition`, which is a logic expression that further
|
|
170
|
+
# constrains the role binding based on attributes about the request and/or
|
|
171
|
+
# target resource.
|
|
169
172
|
# **JSON Example**
|
|
170
173
|
# `
|
|
171
174
|
# "bindings": [
|
|
172
175
|
# `
|
|
173
|
-
# "role": "
|
|
176
|
+
# "role": "role/resourcemanager.organizationAdmin",
|
|
174
177
|
# "members": [
|
|
175
178
|
# "user:mike@example.com",
|
|
176
179
|
# "group:admins@example.com",
|
|
177
180
|
# "domain:google.com",
|
|
178
|
-
# "serviceAccount:my-
|
|
181
|
+
# "serviceAccount:my-project-id@appspot.gserviceaccount.com"
|
|
179
182
|
# ]
|
|
180
183
|
# `,
|
|
181
184
|
# `
|
|
182
|
-
# "role": "roles/
|
|
183
|
-
# "members": ["user:
|
|
185
|
+
# "role": "roles/resourcemanager.organizationViewer",
|
|
186
|
+
# "members": ["user:eve@example.com"],
|
|
187
|
+
# "condition": `
|
|
188
|
+
# "title": "expirable access",
|
|
189
|
+
# "description": "Does not grant access after Sep 2020",
|
|
190
|
+
# "expression": "request.time <
|
|
191
|
+
# timestamp('2020-10-01T00:00:00.000Z')",
|
|
192
|
+
# `
|
|
184
193
|
# `
|
|
185
194
|
# ]
|
|
186
195
|
# `
|
|
@@ -190,17 +199,22 @@ module Google
|
|
|
190
199
|
# - user:mike@example.com
|
|
191
200
|
# - group:admins@example.com
|
|
192
201
|
# - domain:google.com
|
|
193
|
-
# - serviceAccount:my-
|
|
194
|
-
# role: roles/
|
|
202
|
+
# - serviceAccount:my-project-id@appspot.gserviceaccount.com
|
|
203
|
+
# role: roles/resourcemanager.organizationAdmin
|
|
195
204
|
# - members:
|
|
196
|
-
# - user:
|
|
197
|
-
# role: roles/
|
|
205
|
+
# - user:eve@example.com
|
|
206
|
+
# role: roles/resourcemanager.organizationViewer
|
|
207
|
+
# condition:
|
|
208
|
+
# title: expirable access
|
|
209
|
+
# description: Does not grant access after Sep 2020
|
|
210
|
+
# expression: request.time < timestamp('2020-10-01T00:00:00.000Z')
|
|
198
211
|
# For a description of IAM and its features, see the
|
|
199
212
|
# [IAM developer's guide](https://cloud.google.com/iam/docs).
|
|
200
213
|
class Policy
|
|
201
214
|
include Google::Apis::Core::Hashable
|
|
202
215
|
|
|
203
|
-
# Associates a list of `members` to a `role`.
|
|
216
|
+
# Associates a list of `members` to a `role`. Optionally may specify a
|
|
217
|
+
# `condition` that determines when binding is in effect.
|
|
204
218
|
# `bindings` with no members will result in an error.
|
|
205
219
|
# Corresponds to the JSON property `bindings`
|
|
206
220
|
# @return [Array<Google::Apis::IapV1beta1::Binding>]
|
|
@@ -214,7 +228,9 @@ module Google
|
|
|
214
228
|
# systems are expected to put that etag in the request to `setIamPolicy` to
|
|
215
229
|
# ensure that their change will be applied to the same version of the policy.
|
|
216
230
|
# If no `etag` is provided in the call to `setIamPolicy`, then the existing
|
|
217
|
-
# policy is overwritten.
|
|
231
|
+
# policy is overwritten. Due to blind-set semantics of an etag-less policy,
|
|
232
|
+
# 'setIamPolicy' will not fail even if either of incoming or stored policy
|
|
233
|
+
# does not meet the version requirements.
|
|
218
234
|
# Corresponds to the JSON property `etag`
|
|
219
235
|
# NOTE: Values are automatically base64 encoded/decoded in the client library.
|
|
220
236
|
# @return [String]
|
|
@@ -223,9 +239,13 @@ module Google
|
|
|
223
239
|
# Specifies the format of the policy.
|
|
224
240
|
# Valid values are 0, 1, and 3. Requests specifying an invalid value will be
|
|
225
241
|
# rejected.
|
|
226
|
-
#
|
|
227
|
-
#
|
|
228
|
-
#
|
|
242
|
+
# Operations affecting conditional bindings must specify version 3. This can
|
|
243
|
+
# be either setting a conditional policy, modifying a conditional binding,
|
|
244
|
+
# or removing a conditional binding from the stored conditional policy.
|
|
245
|
+
# Operations on non-conditional policies may specify any valid value or
|
|
246
|
+
# leave the field unset.
|
|
247
|
+
# If no etag is provided in the call to `setIamPolicy`, any version
|
|
248
|
+
# compliance checks on the incoming and/or stored policy is skipped.
|
|
229
249
|
# Corresponds to the JSON property `version`
|
|
230
250
|
# @return [Fixnum]
|
|
231
251
|
attr_accessor :version
|
|
@@ -248,25 +268,34 @@ module Google
|
|
|
248
268
|
|
|
249
269
|
# Defines an Identity and Access Management (IAM) policy. It is used to
|
|
250
270
|
# specify access control policies for Cloud Platform resources.
|
|
251
|
-
# A `Policy`
|
|
252
|
-
# `members` to a `role
|
|
253
|
-
# Google
|
|
254
|
-
# defined by IAM.
|
|
271
|
+
# A `Policy` is a collection of `bindings`. A `binding` binds one or more
|
|
272
|
+
# `members` to a single `role`. Members can be user accounts, service accounts,
|
|
273
|
+
# Google groups, and domains (such as G Suite). A `role` is a named list of
|
|
274
|
+
# permissions (defined by IAM or configured by users). A `binding` can
|
|
275
|
+
# optionally specify a `condition`, which is a logic expression that further
|
|
276
|
+
# constrains the role binding based on attributes about the request and/or
|
|
277
|
+
# target resource.
|
|
255
278
|
# **JSON Example**
|
|
256
279
|
# `
|
|
257
280
|
# "bindings": [
|
|
258
281
|
# `
|
|
259
|
-
# "role": "
|
|
282
|
+
# "role": "role/resourcemanager.organizationAdmin",
|
|
260
283
|
# "members": [
|
|
261
284
|
# "user:mike@example.com",
|
|
262
285
|
# "group:admins@example.com",
|
|
263
286
|
# "domain:google.com",
|
|
264
|
-
# "serviceAccount:my-
|
|
287
|
+
# "serviceAccount:my-project-id@appspot.gserviceaccount.com"
|
|
265
288
|
# ]
|
|
266
289
|
# `,
|
|
267
290
|
# `
|
|
268
|
-
# "role": "roles/
|
|
269
|
-
# "members": ["user:
|
|
291
|
+
# "role": "roles/resourcemanager.organizationViewer",
|
|
292
|
+
# "members": ["user:eve@example.com"],
|
|
293
|
+
# "condition": `
|
|
294
|
+
# "title": "expirable access",
|
|
295
|
+
# "description": "Does not grant access after Sep 2020",
|
|
296
|
+
# "expression": "request.time <
|
|
297
|
+
# timestamp('2020-10-01T00:00:00.000Z')",
|
|
298
|
+
# `
|
|
270
299
|
# `
|
|
271
300
|
# ]
|
|
272
301
|
# `
|
|
@@ -276,11 +305,15 @@ module Google
|
|
|
276
305
|
# - user:mike@example.com
|
|
277
306
|
# - group:admins@example.com
|
|
278
307
|
# - domain:google.com
|
|
279
|
-
# - serviceAccount:my-
|
|
280
|
-
# role: roles/
|
|
308
|
+
# - serviceAccount:my-project-id@appspot.gserviceaccount.com
|
|
309
|
+
# role: roles/resourcemanager.organizationAdmin
|
|
281
310
|
# - members:
|
|
282
|
-
# - user:
|
|
283
|
-
# role: roles/
|
|
311
|
+
# - user:eve@example.com
|
|
312
|
+
# role: roles/resourcemanager.organizationViewer
|
|
313
|
+
# condition:
|
|
314
|
+
# title: expirable access
|
|
315
|
+
# description: Does not grant access after Sep 2020
|
|
316
|
+
# expression: request.time < timestamp('2020-10-01T00:00:00.000Z')
|
|
284
317
|
# For a description of IAM and its features, see the
|
|
285
318
|
# [IAM developer's guide](https://cloud.google.com/iam/docs).
|
|
286
319
|
# Corresponds to the JSON property `policy`
|