google-api-client 0.31.0 → 0.32.0

data/generated/google/apis/runtimeconfig_v1beta1.rb

@@ -28,7 +28,7 @@ module Google
     # @see https://cloud.google.com/deployment-manager/runtime-configurator/
     module RuntimeconfigV1beta1
       VERSION = 'V1beta1'
-      REVISION = '20190826'
+      REVISION = '20190923'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/runtimeconfig_v1beta1/classes.rb

@@ -360,25 +360,34 @@ module Google
       
       # Defines an Identity and Access Management (IAM) policy. It is used to
       # specify access control policies for Cloud Platform resources.
-      # A `Policy` consists of a list of `bindings`. A `binding` binds a list of
-      # `members` to a `role`, where the members can be user accounts, Google groups,
-      # Google domains, and service accounts. A `role` is a named list of permissions
-      # defined by IAM.
+      # A `Policy` is a collection of `bindings`. A `binding` binds one or more
+      # `members` to a single `role`. Members can be user accounts, service accounts,
+      # Google groups, and domains (such as G Suite). A `role` is a named list of
+      # permissions (defined by IAM or configured by users). A `binding` can
+      # optionally specify a `condition`, which is a logic expression that further
+      # constrains the role binding based on attributes about the request and/or
+      # target resource.
       # **JSON Example**
       # `
       # "bindings": [
       # `
-      # "role": "roles/owner",
+      # "role": "roles/resourcemanager.organizationAdmin",
       # "members": [
       # "user:mike@example.com",
       # "group:admins@example.com",
       # "domain:google.com",
-      # "serviceAccount:my-other-app@appspot.gserviceaccount.com"
+      # "serviceAccount:my-project-id@appspot.gserviceaccount.com"
       # ]
       # `,
       # `
-      # "role": "roles/viewer",
-      # "members": ["user:sean@example.com"]
+      # "role": "roles/resourcemanager.organizationViewer",
+      # "members": ["user:eve@example.com"],
+      # "condition": `
+      # "title": "expirable access",
+      # "description": "Does not grant access after Sep 2020",
+      # "expression": "request.time <
+      # timestamp('2020-10-01T00:00:00.000Z')",
+      # `
       # `
       # ]
       # `
@@ -388,17 +397,22 @@ module Google
       # - user:mike@example.com
       # - group:admins@example.com
       # - domain:google.com
-      # - serviceAccount:my-other-app@appspot.gserviceaccount.com
-      # role: roles/owner
+      # - serviceAccount:my-project-id@appspot.gserviceaccount.com
+      # role: roles/resourcemanager.organizationAdmin
       # - members:
-      # - user:sean@example.com
-      # role: roles/viewer
+      # - user:eve@example.com
+      # role: roles/resourcemanager.organizationViewer
+      # condition:
+      # title: expirable access
+      # description: Does not grant access after Sep 2020
+      # expression: request.time < timestamp('2020-10-01T00:00:00.000Z')
       # For a description of IAM and its features, see the
       # [IAM developer's guide](https://cloud.google.com/iam/docs).
       class Policy
         include Google::Apis::Core::Hashable
       
-        # Associates a list of `members` to a `role`.
+        # Associates a list of `members` to a `role`. Optionally may specify a
+        # `condition` that determines when binding is in effect.
         # `bindings` with no members will result in an error.
         # Corresponds to the JSON property `bindings`
         # @return [Array<Google::Apis::RuntimeconfigV1beta1::Binding>]
@@ -412,7 +426,9 @@ module Google
         # systems are expected to put that etag in the request to `setIamPolicy` to
         # ensure that their change will be applied to the same version of the policy.
         # If no `etag` is provided in the call to `setIamPolicy`, then the existing
-        # policy is overwritten.
+        # policy is overwritten. Due to blind-set semantics of an etag-less policy,
+        # 'setIamPolicy' will not fail even if either of incoming or stored policy
+        # does not meet the version requirements.
         # Corresponds to the JSON property `etag`
         # NOTE: Values are automatically base64 encoded/decoded in the client library.
         # @return [String]
@@ -421,9 +437,13 @@ module Google
         # Specifies the format of the policy.
         # Valid values are 0, 1, and 3. Requests specifying an invalid value will be
         # rejected.
-        # Policies with any conditional bindings must specify version 3. Policies
-        # without any conditional bindings may specify any valid value or leave the
-        # field unset.
+        # Operations affecting conditional bindings must specify version 3. This can
+        # be either setting a conditional policy, modifying a conditional binding,
+        # or removing a conditional binding from the stored conditional policy.
+        # Operations on non-conditional policies may specify any valid value or
+        # leave the field unset.
+        # If no etag is provided in the call to `setIamPolicy`, any version
+        # compliance checks on the incoming and/or stored policy is skipped.
         # Corresponds to the JSON property `version`
         # @return [Fixnum]
         attr_accessor :version
@@ -481,25 +501,34 @@ module Google
       
         # Defines an Identity and Access Management (IAM) policy. It is used to
         # specify access control policies for Cloud Platform resources.
-        # A `Policy` consists of a list of `bindings`. A `binding` binds a list of
-        # `members` to a `role`, where the members can be user accounts, Google groups,
-        # Google domains, and service accounts. A `role` is a named list of permissions
-        # defined by IAM.
+        # A `Policy` is a collection of `bindings`. A `binding` binds one or more
+        # `members` to a single `role`. Members can be user accounts, service accounts,
+        # Google groups, and domains (such as G Suite). A `role` is a named list of
+        # permissions (defined by IAM or configured by users). A `binding` can
+        # optionally specify a `condition`, which is a logic expression that further
+        # constrains the role binding based on attributes about the request and/or
+        # target resource.
         # **JSON Example**
         # `
         # "bindings": [
         # `
-        # "role": "roles/owner",
+        # "role": "roles/resourcemanager.organizationAdmin",
         # "members": [
         # "user:mike@example.com",
         # "group:admins@example.com",
         # "domain:google.com",
-        # "serviceAccount:my-other-app@appspot.gserviceaccount.com"
+        # "serviceAccount:my-project-id@appspot.gserviceaccount.com"
         # ]
         # `,
         # `
-        # "role": "roles/viewer",
-        # "members": ["user:sean@example.com"]
+        # "role": "roles/resourcemanager.organizationViewer",
+        # "members": ["user:eve@example.com"],
+        # "condition": `
+        # "title": "expirable access",
+        # "description": "Does not grant access after Sep 2020",
+        # "expression": "request.time <
+        # timestamp('2020-10-01T00:00:00.000Z')",
+        # `
         # `
         # ]
         # `
@@ -509,11 +538,15 @@ module Google
         # - user:mike@example.com
         # - group:admins@example.com
         # - domain:google.com
-        # - serviceAccount:my-other-app@appspot.gserviceaccount.com
-        # role: roles/owner
+        # - serviceAccount:my-project-id@appspot.gserviceaccount.com
+        # role: roles/resourcemanager.organizationAdmin
         # - members:
-        # - user:sean@example.com
-        # role: roles/viewer
+        # - user:eve@example.com
+        # role: roles/resourcemanager.organizationViewer
+        # condition:
+        # title: expirable access
+        # description: Does not grant access after Sep 2020
+        # expression: request.time < timestamp('2020-10-01T00:00:00.000Z')
         # For a description of IAM and its features, see the
         # [IAM developer's guide](https://cloud.google.com/iam/docs).
         # Corresponds to the JSON property `policy`

data/generated/google/apis/safebrowsing_v4.rb

@@ -21,12 +21,15 @@ module Google
     # Safe Browsing API
     #
     # Enables client applications to check web resources (most commonly URLs)
-    # against Google-generated lists of unsafe web resources.
+    # against Google-generated lists of unsafe web resources. The Safe Browsing APIs
+    # are for non-commercial use only. If you need to use APIs to detect malicious
+    # URLs for commercial purposes – meaning “for sale or revenue-generating
+    # purposes” – please refer to the Web Risk API.
     #
     # @see https://developers.google.com/safe-browsing/
     module SafebrowsingV4
       VERSION = 'V4'
-      REVISION = '20190520'
+      REVISION = '20190923'
     end
   end
 end

data/generated/google/apis/safebrowsing_v4/service.rb

@@ -23,7 +23,10 @@ module Google
       # Safe Browsing API
       #
       # Enables client applications to check web resources (most commonly URLs)
-      #  against Google-generated lists of unsafe web resources.
+      #  against Google-generated lists of unsafe web resources. The Safe Browsing APIs
+      #  are for non-commercial use only. If you need to use APIs to detect malicious
+      #  URLs for commercial purposes – meaning “for sale or revenue-generating
+      #  purposes” – please refer to the Web Risk API.
       #
       # @example
       #    require 'google/apis/safebrowsing_v4'

data/generated/google/apis/securitycenter_v1.rb

@@ -26,7 +26,7 @@ module Google
     # @see https://console.cloud.google.com/apis/api/securitycenter.googleapis.com/overview
     module SecuritycenterV1
       VERSION = 'V1'
-      REVISION = '20190906'
+      REVISION = '20190920'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/securitycenter_v1/classes.rb

@@ -602,7 +602,7 @@ module Google
         # "create_time = 1560208038000"
         # * iam_policy.policy_blob: `=`, `:`
         # * resource_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
-        # * security_marks: `=`, `:`
+        # * security_marks.marks: `=`, `:`
         # * security_center_properties.resource_name: `=`, `:`
         # * security_center_properties.resource_type: `=`, `:`
         # * security_center_properties.resource_parent: `=`, `:`
@@ -613,7 +613,8 @@ module Google
         # @return [String]
         attr_accessor :filter
       
-        # Expression that defines what assets fields to use for grouping. The string
+        # Required. Expression that defines what assets fields to use for grouping. The
+        # string
         # value should follow SQL syntax: comma separated list of fields. For
         # example:
         # "security_center_properties.resource_project,security_center_properties.
@@ -762,14 +763,15 @@ module Google
         # Examples:
         # "event_time = \"2019-06-10T16:07:18-07:00\""
         # "event_time = 1560208038000"
-        # * security_marks: `=`, `:`
+        # * security_marks.marks: `=`, `:`
         # * source_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
         # For example, `source_properties.size = 100` is a valid filter string.
         # Corresponds to the JSON property `filter`
         # @return [String]
         attr_accessor :filter
       
-        # Expression that defines what assets fields to use for grouping (including
+        # Required. Expression that defines what assets fields to use for grouping (
+        # including
         # `state_change`). The string value should follow SQL syntax: comma separated
         # list of fields. For example: "parent,resource_name".
         # The following fields are supported:
@@ -1197,25 +1199,34 @@ module Google
       
       # Defines an Identity and Access Management (IAM) policy. It is used to
       # specify access control policies for Cloud Platform resources.
-      # A `Policy` consists of a list of `bindings`. A `binding` binds a list of
-      # `members` to a `role`, where the members can be user accounts, Google groups,
-      # Google domains, and service accounts. A `role` is a named list of permissions
-      # defined by IAM.
+      # A `Policy` is a collection of `bindings`. A `binding` binds one or more
+      # `members` to a single `role`. Members can be user accounts, service accounts,
+      # Google groups, and domains (such as G Suite). A `role` is a named list of
+      # permissions (defined by IAM or configured by users). A `binding` can
+      # optionally specify a `condition`, which is a logic expression that further
+      # constrains the role binding based on attributes about the request and/or
+      # target resource.
       # **JSON Example**
       # `
       # "bindings": [
       # `
-      # "role": "roles/owner",
+      # "role": "role/resourcemanager.organizationAdmin",
       # "members": [
       # "user:mike@example.com",
       # "group:admins@example.com",
       # "domain:google.com",
-      # "serviceAccount:my-other-app@appspot.gserviceaccount.com"
+      # "serviceAccount:my-project-id@appspot.gserviceaccount.com"
       # ]
       # `,
       # `
-      # "role": "roles/viewer",
-      # "members": ["user:sean@example.com"]
+      # "role": "roles/resourcemanager.organizationViewer",
+      # "members": ["user:eve@example.com"],
+      # "condition": `
+      # "title": "expirable access",
+      # "description": "Does not grant access after Sep 2020",
+      # "expression": "request.time <
+      # timestamp('2020-10-01T00:00:00.000Z')",
+      # `
       # `
       # ]
       # `
@@ -1225,11 +1236,15 @@ module Google
       # - user:mike@example.com
       # - group:admins@example.com
       # - domain:google.com
-      # - serviceAccount:my-other-app@appspot.gserviceaccount.com
-      # role: roles/owner
+      # - serviceAccount:my-project-id@appspot.gserviceaccount.com
+      # role: roles/resourcemanager.organizationAdmin
       # - members:
-      # - user:sean@example.com
-      # role: roles/viewer
+      # - user:eve@example.com
+      # role: roles/resourcemanager.organizationViewer
+      # condition:
+      # title: expirable access
+      # description: Does not grant access after Sep 2020
+      # expression: request.time < timestamp('2020-10-01T00:00:00.000Z')
       # For a description of IAM and its features, see the
       # [IAM developer's guide](https://cloud.google.com/iam/docs).
       class Policy
@@ -1240,7 +1255,8 @@ module Google
         # @return [Array<Google::Apis::SecuritycenterV1::AuditConfig>]
         attr_accessor :audit_configs
       
-        # Associates a list of `members` to a `role`.
+        # Associates a list of `members` to a `role`. Optionally may specify a
+        # `condition` that determines when binding is in effect.
         # `bindings` with no members will result in an error.
         # Corresponds to the JSON property `bindings`
         # @return [Array<Google::Apis::SecuritycenterV1::Binding>]
@@ -1254,7 +1270,9 @@ module Google
         # systems are expected to put that etag in the request to `setIamPolicy` to
         # ensure that their change will be applied to the same version of the policy.
         # If no `etag` is provided in the call to `setIamPolicy`, then the existing
-        # policy is overwritten.
+        # policy is overwritten. Due to blind-set semantics of an etag-less policy,
+        # 'setIamPolicy' will not fail even if either of incoming or stored policy
+        # does not meet the version requirements.
         # Corresponds to the JSON property `etag`
         # NOTE: Values are automatically base64 encoded/decoded in the client library.
         # @return [String]
@@ -1263,9 +1281,13 @@ module Google
         # Specifies the format of the policy.
         # Valid values are 0, 1, and 3. Requests specifying an invalid value will be
         # rejected.
-        # Policies with any conditional bindings must specify version 3. Policies
-        # without any conditional bindings may specify any valid value or leave the
-        # field unset.
+        # Operations affecting conditional bindings must specify version 3. This can
+        # be either setting a conditional policy, modifying a conditional binding,
+        # or removing a conditional binding from the stored conditional policy.
+        # Operations on non-conditional policies may specify any valid value or
+        # leave the field unset.
+        # If no etag is provided in the call to `setIamPolicy`, any version
+        # compliance checks on the incoming and/or stored policy is skipped.
         # Corresponds to the JSON property `version`
         # @return [Fixnum]
         attr_accessor :version
@@ -1389,12 +1411,12 @@ module Google
       class SetFindingStateRequest
         include Google::Apis::Core::Hashable
       
-        # The time at which the updated state takes effect.
+        # Required. The time at which the updated state takes effect.
         # Corresponds to the JSON property `startTime`
         # @return [String]
         attr_accessor :start_time
       
-        # The desired State of the finding.
+        # Required. The desired State of the finding.
         # Corresponds to the JSON property `state`
         # @return [String]
         attr_accessor :state
@@ -1416,25 +1438,34 @@ module Google
       
         # Defines an Identity and Access Management (IAM) policy. It is used to
         # specify access control policies for Cloud Platform resources.
-        # A `Policy` consists of a list of `bindings`. A `binding` binds a list of
-        # `members` to a `role`, where the members can be user accounts, Google groups,
-        # Google domains, and service accounts. A `role` is a named list of permissions
-        # defined by IAM.
+        # A `Policy` is a collection of `bindings`. A `binding` binds one or more
+        # `members` to a single `role`. Members can be user accounts, service accounts,
+        # Google groups, and domains (such as G Suite). A `role` is a named list of
+        # permissions (defined by IAM or configured by users). A `binding` can
+        # optionally specify a `condition`, which is a logic expression that further
+        # constrains the role binding based on attributes about the request and/or
+        # target resource.
         # **JSON Example**
         # `
         # "bindings": [
         # `
-        # "role": "roles/owner",
+        # "role": "role/resourcemanager.organizationAdmin",
         # "members": [
         # "user:mike@example.com",
         # "group:admins@example.com",
         # "domain:google.com",
-        # "serviceAccount:my-other-app@appspot.gserviceaccount.com"
+        # "serviceAccount:my-project-id@appspot.gserviceaccount.com"
         # ]
         # `,
         # `
-        # "role": "roles/viewer",
-        # "members": ["user:sean@example.com"]
+        # "role": "roles/resourcemanager.organizationViewer",
+        # "members": ["user:eve@example.com"],
+        # "condition": `
+        # "title": "expirable access",
+        # "description": "Does not grant access after Sep 2020",
+        # "expression": "request.time <
+        # timestamp('2020-10-01T00:00:00.000Z')",
+        # `
         # `
         # ]
         # `
@@ -1444,11 +1475,15 @@ module Google
         # - user:mike@example.com
         # - group:admins@example.com
         # - domain:google.com
-        # - serviceAccount:my-other-app@appspot.gserviceaccount.com
-        # role: roles/owner
+        # - serviceAccount:my-project-id@appspot.gserviceaccount.com
+        # role: roles/resourcemanager.organizationAdmin
         # - members:
-        # - user:sean@example.com
-        # role: roles/viewer
+        # - user:eve@example.com
+        # role: roles/resourcemanager.organizationViewer
+        # condition:
+        # title: expirable access
+        # description: Does not grant access after Sep 2020
+        # expression: request.time < timestamp('2020-10-01T00:00:00.000Z')
         # For a description of IAM and its features, see the
         # [IAM developer's guide](https://cloud.google.com/iam/docs).
         # Corresponds to the JSON property `policy`

data/generated/google/apis/securitycenter_v1/service.rb

@@ -50,7 +50,8 @@ module Google
         
         # Gets the settings for an organization.
         # @param [String] name
-        #   Name of the organization to get organization settings for. Its format is
+        #   Required. Name of the organization to get organization settings for. Its
+        #   format is
         #   "organizations/[organization_id]/organizationSettings".
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
@@ -122,7 +123,7 @@ module Google
         # Filters an organization's assets and  groups them by their specified
         # properties.
         # @param [String] parent
-        #   Name of the organization to groupBy. Its format is
+        #   Required. Name of the organization to groupBy. Its format is
         #   "organizations/[organization_id]".
         # @param [Google::Apis::SecuritycenterV1::GroupAssetsRequest] group_assets_request_object
         # @param [String] fields
@@ -156,7 +157,7 @@ module Google
         
         # Lists an organization's assets.
         # @param [String] parent
-        #   Name of the organization assets should belong to. Its format is
+        #   Required. Name of the organization assets should belong to. Its format is
         #   "organizations/[organization_id]".
         # @param [String] compare_duration
         #   When compare_duration is set, the ListAssetsResult's "state_change"
@@ -295,7 +296,7 @@ module Google
         # it is called too frequently the caller will receive a TOO_MANY_REQUESTS
         # error.
         # @param [String] parent
-        #   Name of the organization to run asset discovery for. Its format is
+        #   Required. Name of the organization to run asset discovery for. Its format is
         #   "organizations/[organization_id]".
         # @param [Google::Apis::SecuritycenterV1::RunAssetDiscoveryRequest] run_asset_discovery_request_object
         # @param [String] fields
@@ -528,7 +529,7 @@ module Google
         
         # Creates a source.
         # @param [String] parent
-        #   Resource name of the new source's parent. Its format should be
+        #   Required. Resource name of the new source's parent. Its format should be
         #   "organizations/[organization_id]".
         # @param [Google::Apis::SecuritycenterV1::Source] source_object
         # @param [String] fields
@@ -562,7 +563,7 @@ module Google
         
         # Gets a source.
         # @param [String] name
-        #   Relative resource name of the source. Its format is
+        #   Required. Relative resource name of the source. Its format is
         #   "organizations/[organization_id]/source/[source_id]".
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
@@ -627,7 +628,7 @@ module Google
         
         # Lists all sources belonging to an organization.
         # @param [String] parent
-        #   Resource name of the parent of sources to list. Its format should be
+        #   Required. Resource name of the parent of sources to list. Its format should be
         #   "organizations/[organization_id]".
         # @param [Fixnum] page_size
         #   The maximum number of results to return in a single response. Default is
@@ -776,11 +777,11 @@ module Google
         # Creates a finding. The corresponding source must exist for finding creation
         # to succeed.
         # @param [String] parent
-        #   Resource name of the new finding's parent. Its format should be
+        #   Required. Resource name of the new finding's parent. Its format should be
         #   "organizations/[organization_id]/sources/[source_id]".
         # @param [Google::Apis::SecuritycenterV1::Finding] finding_object
         # @param [String] finding_id
-        #   Unique identifier provided by the client within the parent scope.
+        #   Required. Unique identifier provided by the client within the parent scope.
         #   It must be alphanumeric and less than or equal to 32 characters and
         #   greater than 0 characters in length.
         # @param [String] fields
@@ -818,7 +819,7 @@ module Google
         # To group across all sources provide a `-` as the source id.
         # Example: /v1/organizations/123/sources/-/findings
         # @param [String] parent
-        #   Name of the source to groupBy. Its format is
+        #   Required. Name of the source to groupBy. Its format is
         #   "organizations/[organization_id]/sources/[source_id]". To groupBy across
         #   all sources provide a source_id of `-`. For example:
         #   organizations/123/sources/-
@@ -856,7 +857,7 @@ module Google
         # To list across all sources provide a `-` as the source id.
         # Example: /v1/organizations/123/sources/-/findings
         # @param [String] parent
-        #   Name of the source the findings belong to. Its format is
+        #   Required. Name of the source the findings belong to. Its format is
         #   "organizations/[organization_id]/sources/[source_id]". To list across all
         #   sources provide a source_id of `-`. For example:
         #   organizations/123/sources/-
@@ -1029,7 +1030,7 @@ module Google
         
         # Updates the state of a finding.
         # @param [String] name
-        #   The relative resource name of the finding. See:
+        #   Required. The relative resource name of the finding. See:
         #   https://cloud.google.com/apis/design/resource_names#relative_resource_name
         #   Example:
         #   "organizations/123/sources/456/finding/789".