google-api-client 0.32.1 → 0.34.0

data/generated/google/apis/iap_v1/classes.rb

@@ -22,6 +22,60 @@ module Google
   module Apis
     module IapV1
       
+      # Access related settings for IAP protected apps.
+      class AccessSettings
+        include Google::Apis::Core::Hashable
+      
+        # Allows customers to configure HTTP request paths that'll allow HTTP OPTIONS
+        # call to bypass authentication and authorization.
+        # Corresponds to the JSON property `corsSettings`
+        # @return [Google::Apis::IapV1::CorsSettings]
+        attr_accessor :cors_settings
+      
+        # Allows customers to configure tenant_id for GCIP instance per-app.
+        # Corresponds to the JSON property `gcipSettings`
+        # @return [Google::Apis::IapV1::GcipSettings]
+        attr_accessor :gcip_settings
+      
+        # Configuration for OAuth login&consent flow behavior.
+        # Corresponds to the JSON property `oauthSettings`
+        # @return [Google::Apis::IapV1::OAuthSettings]
+        attr_accessor :oauth_settings
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @cors_settings = args[:cors_settings] if args.key?(:cors_settings)
+          @gcip_settings = args[:gcip_settings] if args.key?(:gcip_settings)
+          @oauth_settings = args[:oauth_settings] if args.key?(:oauth_settings)
+        end
+      end
+      
+      # Wrapper over application specific settings for IAP.
+      class ApplicationSettings
+        include Google::Apis::Core::Hashable
+      
+        # Configuration for RCTokens generated for CSM workloads protected by IAP.
+        # RCTokens are IAP generated JWTs that can be verified at the application. The
+        # RCToken is primarily used for ISTIO deployments, and can be scoped to a
+        # single mesh by configuring the audience field accordingly
+        # Corresponds to the JSON property `csmSettings`
+        # @return [Google::Apis::IapV1::CsmSettings]
+        attr_accessor :csm_settings
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @csm_settings = args[:csm_settings] if args.key?(:csm_settings)
+        end
+      end
+      
       # Associates `members` with a `role`.
       class Binding
         include Google::Apis::Core::Hashable
@@ -70,6 +124,51 @@ module Google
         end
       end
       
+      # Allows customers to configure HTTP request paths that'll allow HTTP OPTIONS
+      # call to bypass authentication and authorization.
+      class CorsSettings
+        include Google::Apis::Core::Hashable
+      
+        # Configuration to allow HTTP OPTIONS calls to skip authorization. If
+        # undefined, IAP will not apply any special logic to OPTIONS requests.
+        # Corresponds to the JSON property `allowHttpOptions`
+        # @return [Boolean]
+        attr_accessor :allow_http_options
+        alias_method :allow_http_options?, :allow_http_options
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @allow_http_options = args[:allow_http_options] if args.key?(:allow_http_options)
+        end
+      end
+      
+      # Configuration for RCTokens generated for CSM workloads protected by IAP.
+      # RCTokens are IAP generated JWTs that can be verified at the application. The
+      # RCToken is primarily used for ISTIO deployments, and can be scoped to a
+      # single mesh by configuring the audience field accordingly
+      class CsmSettings
+        include Google::Apis::Core::Hashable
+      
+        # Audience claim set in the generated RCToken. This value is not validated by
+        # IAP.
+        # Corresponds to the JSON property `rctokenAud`
+        # @return [String]
+        attr_accessor :rctoken_aud
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @rctoken_aud = args[:rctoken_aud] if args.key?(:rctoken_aud)
+        end
+      end
+      
       # Represents an expression text. Example:
       # title: "User account presence"
       # description: "Determines whether the request has a user account"
@@ -117,6 +216,38 @@ module Google
         end
       end
       
+      # Allows customers to configure tenant_id for GCIP instance per-app.
+      class GcipSettings
+        include Google::Apis::Core::Hashable
+      
+        # Login page URI associated with the GCIP tenants.
+        # Typically, all resources within the same project share the same login page,
+        # though it could be overridden at the sub resource level.
+        # Corresponds to the JSON property `loginPageUri`
+        # @return [String]
+        attr_accessor :login_page_uri
+      
+        # GCIP tenant ids that are linked to the IAP resource.
+        # tenant_ids could be a string beginning with a number character to indicate
+        # authenticating with GCIP tenant flow, or in the format of _<ProjectNumber>
+        # to indicate authenticating with GCIP agent flow.
+        # If agent flow is used, tenant_ids should only contain one single element,
+        # while for tenant flow, tenant_ids can contain multiple elements.
+        # Corresponds to the JSON property `tenantIds`
+        # @return [Array<String>]
+        attr_accessor :tenant_ids
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @login_page_uri = args[:login_page_uri] if args.key?(:login_page_uri)
+          @tenant_ids = args[:tenant_ids] if args.key?(:tenant_ids)
+        end
+      end
+      
       # Request message for `GetIamPolicy` method.
       class GetIamPolicyRequest
         include Google::Apis::Core::Hashable
@@ -160,6 +291,60 @@ module Google
         end
       end
       
+      # The IAP configurable settings.
+      class IapSettings
+        include Google::Apis::Core::Hashable
+      
+        # Access related settings for IAP protected apps.
+        # Corresponds to the JSON property `accessSettings`
+        # @return [Google::Apis::IapV1::AccessSettings]
+        attr_accessor :access_settings
+      
+        # Wrapper over application specific settings for IAP.
+        # Corresponds to the JSON property `applicationSettings`
+        # @return [Google::Apis::IapV1::ApplicationSettings]
+        attr_accessor :application_settings
+      
+        # Required. The resource name of the IAP protected resource.
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @access_settings = args[:access_settings] if args.key?(:access_settings)
+          @application_settings = args[:application_settings] if args.key?(:application_settings)
+          @name = args[:name] if args.key?(:name)
+        end
+      end
+      
+      # Configuration for OAuth login&consent flow behavior.
+      class OAuthSettings
+        include Google::Apis::Core::Hashable
+      
+        # Domain hint to send as hd=? parameter in OAuth request flow. Enables
+        # redirect to primary IDP by skipping Google's login screen.
+        # https://developers.google.com/identity/protocols/OpenIDConnect#hd-param
+        # Note: IAP does not verify that the id token's hd claim matches this value
+        # since access behavior is managed by IAM policies.
+        # Corresponds to the JSON property `loginHint`
+        # @return [String]
+        attr_accessor :login_hint
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @login_hint = args[:login_hint] if args.key?(:login_hint)
+        end
+      end
+      
       # Defines an Identity and Access Management (IAM) policy. It is used to
       # specify access control policies for Cloud Platform resources.
       # A `Policy` is a collection of `bindings`. A `binding` binds one or more
@@ -173,7 +358,7 @@ module Google
       # `
       # "bindings": [
       # `
-      # "role": "role/resourcemanager.organizationAdmin",
+      # "role": "roles/resourcemanager.organizationAdmin",
       # "members": [
       # "user:mike@example.com",
       # "group:admins@example.com",
@@ -279,7 +464,7 @@ module Google
         # `
         # "bindings": [
         # `
-        # "role": "role/resourcemanager.organizationAdmin",
+        # "role": "roles/resourcemanager.organizationAdmin",
         # "members": [
         # "user:mike@example.com",
         # "group:admins@example.com",

data/generated/google/apis/iap_v1/representations.rb

@@ -22,18 +22,48 @@ module Google
   module Apis
     module IapV1
       
+      class AccessSettings
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class ApplicationSettings
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class Binding
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class CorsSettings
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class CsmSettings
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class Expr
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class GcipSettings
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class GetIamPolicyRequest
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -46,6 +76,18 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class IapSettings
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class OAuthSettings
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class Policy
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -70,6 +112,26 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class AccessSettings
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :cors_settings, as: 'corsSettings', class: Google::Apis::IapV1::CorsSettings, decorator: Google::Apis::IapV1::CorsSettings::Representation
+      
+          property :gcip_settings, as: 'gcipSettings', class: Google::Apis::IapV1::GcipSettings, decorator: Google::Apis::IapV1::GcipSettings::Representation
+      
+          property :oauth_settings, as: 'oauthSettings', class: Google::Apis::IapV1::OAuthSettings, decorator: Google::Apis::IapV1::OAuthSettings::Representation
+      
+        end
+      end
+      
+      class ApplicationSettings
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :csm_settings, as: 'csmSettings', class: Google::Apis::IapV1::CsmSettings, decorator: Google::Apis::IapV1::CsmSettings::Representation
+      
+        end
+      end
+      
       class Binding
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -80,6 +142,20 @@ module Google
         end
       end
       
+      class CorsSettings
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :allow_http_options, as: 'allowHttpOptions'
+        end
+      end
+      
+      class CsmSettings
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :rctoken_aud, as: 'rctokenAud'
+        end
+      end
+      
       class Expr
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -90,6 +166,14 @@ module Google
         end
       end
       
+      class GcipSettings
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :login_page_uri, as: 'loginPageUri'
+          collection :tenant_ids, as: 'tenantIds'
+        end
+      end
+      
       class GetIamPolicyRequest
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -105,6 +189,24 @@ module Google
         end
       end
       
+      class IapSettings
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :access_settings, as: 'accessSettings', class: Google::Apis::IapV1::AccessSettings, decorator: Google::Apis::IapV1::AccessSettings::Representation
+      
+          property :application_settings, as: 'applicationSettings', class: Google::Apis::IapV1::ApplicationSettings, decorator: Google::Apis::IapV1::ApplicationSettings::Representation
+      
+          property :name, as: 'name'
+        end
+      end
+      
+      class OAuthSettings
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :login_hint, as: 'loginHint'
+        end
+      end
+      
       class Policy
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation

data/generated/google/apis/iap_v1/service.rb

@@ -84,6 +84,38 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
+        # Gets the IAP settings on a particular IAP protected resource.
+        # @param [String] name
+        #   Required. The resource name for which to retrieve the settings.
+        #   Authorization: Requires the `getSettings` permission for the associated
+        #   resource.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::IapV1::IapSettings] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::IapV1::IapSettings]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def get_iap_settings(name, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+name}:iapSettings', options)
+          command.response_representation = Google::Apis::IapV1::IapSettings::Representation
+          command.response_class = Google::Apis::IapV1::IapSettings
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
         # Sets the access control policy for an Identity-Aware Proxy protected
         # resource. Replaces any existing policy.
         # More information about managing access via IAP can be found at:
@@ -157,6 +189,46 @@ module Google
           command.query['quotaUser'] = quota_user unless quota_user.nil?
           execute_or_queue_command(command, &block)
         end
+        
+        # Updates the IAP settings on a particular IAP protected resource. It
+        # replaces all fields unless the `update_mask` is set.
+        # @param [String] name
+        #   Required. The resource name of the IAP protected resource.
+        # @param [Google::Apis::IapV1::IapSettings] iap_settings_object
+        # @param [String] update_mask
+        #   The field mask specifying which IAP settings should be updated.
+        #   If omitted, the all of the settings are updated. See
+        #   https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#
+        #   fieldmask
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::IapV1::IapSettings] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::IapV1::IapSettings]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def update_iap_settings(name, iap_settings_object = nil, update_mask: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:patch, 'v1/{+name}:iapSettings', options)
+          command.request_representation = Google::Apis::IapV1::IapSettings::Representation
+          command.request_object = iap_settings_object
+          command.response_representation = Google::Apis::IapV1::IapSettings::Representation
+          command.response_class = Google::Apis::IapV1::IapSettings
+          command.params['name'] = name unless name.nil?
+          command.query['updateMask'] = update_mask unless update_mask.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
 
         protected
 

data/generated/google/apis/iap_v1.rb

@@ -25,7 +25,7 @@ module Google
     # @see https://cloud.google.com/iap
     module IapV1
       VERSION = 'V1'
-      REVISION = '20190920'
+      REVISION = '20191011'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/iap_v1beta1/classes.rb

@@ -173,7 +173,7 @@ module Google
       # `
       # "bindings": [
       # `
-      # "role": "role/resourcemanager.organizationAdmin",
+      # "role": "roles/resourcemanager.organizationAdmin",
       # "members": [
       # "user:mike@example.com",
       # "group:admins@example.com",
@@ -279,7 +279,7 @@ module Google
         # `
         # "bindings": [
         # `
-        # "role": "role/resourcemanager.organizationAdmin",
+        # "role": "roles/resourcemanager.organizationAdmin",
         # "members": [
         # "user:mike@example.com",
         # "group:admins@example.com",

data/generated/google/apis/iap_v1beta1.rb

@@ -25,7 +25,7 @@ module Google
     # @see https://cloud.google.com/iap
     module IapV1beta1
       VERSION = 'V1beta1'
-      REVISION = '20190920'
+      REVISION = '20191004'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/jobs_v2/classes.rb

@@ -2630,6 +2630,34 @@ module Google
         end
       end
       
+      # Message representing input to a Mendel server for debug forcing.
+      # See go/mendel-debug-forcing for more details.
+      # Next ID: 2
+      class MendelDebugInput
+        include Google::Apis::Core::Hashable
+      
+        # When a request spans multiple servers, a MendelDebugInput may travel with
+        # the request and take effect in all the servers. This field is a map of
+        # namespaces to NamespacedMendelDebugInput protos. In a single server, up to
+        # two NamespacedMendelDebugInput protos are applied:
+        # 1. NamespacedMendelDebugInput with the global namespace (key == "").
+        # 2. NamespacedMendelDebugInput with the server's namespace.
+        # When both NamespacedMendelDebugInput protos are present, they are merged.
+        # See go/mendel-debug-forcing for more details.
+        # Corresponds to the JSON property `namespacedDebugInput`
+        # @return [Hash<String,Google::Apis::JobsV2::NamespacedDebugInput>]
+        attr_accessor :namespaced_debug_input
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @namespaced_debug_input = args[:namespaced_debug_input] if args.key?(:namespaced_debug_input)
+        end
+      end
+      
       # Represents an amount of money with its currency type.
       class Money
         include Google::Apis::Core::Hashable
@@ -2667,6 +2695,145 @@ module Google
         end
       end
       
+      # Next ID: 15
+      class NamespacedDebugInput
+        include Google::Apis::Core::Hashable
+      
+        # Set of experiment names to be absolutely forced.
+        # These experiments will be forced without evaluating the conditions.
+        # Corresponds to the JSON property `absolutelyForcedExpNames`
+        # @return [Array<String>]
+        attr_accessor :absolutely_forced_exp_names
+      
+        # Set of experiment tags to be absolutely forced.
+        # The experiments with these tags will be forced without evaluating the
+        # conditions.
+        # Corresponds to the JSON property `absolutelyForcedExpTags`
+        # @return [Array<String>]
+        attr_accessor :absolutely_forced_exp_tags
+      
+        # Set of experiment ids to be absolutely forced.
+        # These ids will be forced without evaluating the conditions.
+        # Corresponds to the JSON property `absolutelyForcedExps`
+        # @return [Array<Fixnum>]
+        attr_accessor :absolutely_forced_exps
+      
+        # Set of experiment names to be conditionally forced.
+        # These experiments will be forced only if their conditions and their
+        # parent domain's conditions are true.
+        # Corresponds to the JSON property `conditionallyForcedExpNames`
+        # @return [Array<String>]
+        attr_accessor :conditionally_forced_exp_names
+      
+        # Set of experiment tags to be conditionally forced.
+        # The experiments with these tags will be forced only if their conditions
+        # and their parent domain's conditions are true.
+        # Corresponds to the JSON property `conditionallyForcedExpTags`
+        # @return [Array<String>]
+        attr_accessor :conditionally_forced_exp_tags
+      
+        # Set of experiment ids to be conditionally forced.
+        # These ids will be forced only if their conditions and their parent
+        # domain's conditions are true.
+        # Corresponds to the JSON property `conditionallyForcedExps`
+        # @return [Array<Fixnum>]
+        attr_accessor :conditionally_forced_exps
+      
+        # If true, disable automatic enrollment selection (at all diversion
+        # points). Automatic enrollment selection means experiment selection
+        # process based on the experiment's automatic enrollment condition. This
+        # does not disable selection of forced experiments.
+        # Corresponds to the JSON property `disableAutomaticEnrollmentSelection`
+        # @return [Boolean]
+        attr_accessor :disable_automatic_enrollment_selection
+        alias_method :disable_automatic_enrollment_selection?, :disable_automatic_enrollment_selection
+      
+        # Set of experiment names to be disabled.
+        # If an experiment is disabled, it is never selected nor forced.
+        # If an aggregate experiment is disabled, its partitions are disabled
+        # together. If an experiment with an enrollment is disabled, the enrollment
+        # is disabled together. If a name corresponds to a domain, the domain
+        # itself and all descendant experiments and domains are disabled together.
+        # Corresponds to the JSON property `disableExpNames`
+        # @return [Array<String>]
+        attr_accessor :disable_exp_names
+      
+        # Set of experiment tags to be disabled. All experiments that are tagged
+        # with one or more of these tags are disabled.
+        # If an experiment is disabled, it is never selected nor forced.
+        # If an aggregate experiment is disabled, its partitions are disabled
+        # together. If an experiment with an enrollment is disabled, the enrollment
+        # is disabled together.
+        # Corresponds to the JSON property `disableExpTags`
+        # @return [Array<String>]
+        attr_accessor :disable_exp_tags
+      
+        # Set of experiment ids to be disabled.
+        # If an experiment is disabled, it is never selected nor forced.
+        # If an aggregate experiment is disabled, its partitions are disabled
+        # together. If an experiment with an enrollment is disabled, the enrollment
+        # is disabled together. If an ID corresponds to a domain, the domain itself
+        # and all descendant experiments and domains are disabled together.
+        # Corresponds to the JSON property `disableExps`
+        # @return [Array<Fixnum>]
+        attr_accessor :disable_exps
+      
+        # If true, disable manual enrollment selection (at all diversion points).
+        # Manual enrollment selection means experiment selection process based on
+        # the request's manual enrollment states (a.k.a. opt-in experiments).
+        # This does not disable selection of forced experiments.
+        # Corresponds to the JSON property `disableManualEnrollmentSelection`
+        # @return [Boolean]
+        attr_accessor :disable_manual_enrollment_selection
+        alias_method :disable_manual_enrollment_selection?, :disable_manual_enrollment_selection
+      
+        # If true, disable organic experiment selection (at all diversion points).
+        # Organic selection means experiment selection process based on traffic
+        # allocation and diversion condition evaluation.
+        # This does not disable selection of forced experiments.
+        # This is useful in cases when it is not known whether experiment selection
+        # behavior is responsible for a error or breakage. Disabling organic
+        # selection may help to isolate the cause of a given problem.
+        # Corresponds to the JSON property `disableOrganicSelection`
+        # @return [Boolean]
+        attr_accessor :disable_organic_selection
+        alias_method :disable_organic_selection?, :disable_organic_selection
+      
+        # Flags to force in a particular experiment state.
+        # Map from flag name to flag value.
+        # Corresponds to the JSON property `forcedFlags`
+        # @return [Hash<String,String>]
+        attr_accessor :forced_flags
+      
+        # Rollouts to force in a particular experiment state.
+        # Map from rollout name to rollout value.
+        # Corresponds to the JSON property `forcedRollouts`
+        # @return [Hash<String,Boolean>]
+        attr_accessor :forced_rollouts
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @absolutely_forced_exp_names = args[:absolutely_forced_exp_names] if args.key?(:absolutely_forced_exp_names)
+          @absolutely_forced_exp_tags = args[:absolutely_forced_exp_tags] if args.key?(:absolutely_forced_exp_tags)
+          @absolutely_forced_exps = args[:absolutely_forced_exps] if args.key?(:absolutely_forced_exps)
+          @conditionally_forced_exp_names = args[:conditionally_forced_exp_names] if args.key?(:conditionally_forced_exp_names)
+          @conditionally_forced_exp_tags = args[:conditionally_forced_exp_tags] if args.key?(:conditionally_forced_exp_tags)
+          @conditionally_forced_exps = args[:conditionally_forced_exps] if args.key?(:conditionally_forced_exps)
+          @disable_automatic_enrollment_selection = args[:disable_automatic_enrollment_selection] if args.key?(:disable_automatic_enrollment_selection)
+          @disable_exp_names = args[:disable_exp_names] if args.key?(:disable_exp_names)
+          @disable_exp_tags = args[:disable_exp_tags] if args.key?(:disable_exp_tags)
+          @disable_exps = args[:disable_exps] if args.key?(:disable_exps)
+          @disable_manual_enrollment_selection = args[:disable_manual_enrollment_selection] if args.key?(:disable_manual_enrollment_selection)
+          @disable_organic_selection = args[:disable_organic_selection] if args.key?(:disable_organic_selection)
+          @forced_flags = args[:forced_flags] if args.key?(:forced_flags)
+          @forced_rollouts = args[:forced_rollouts] if args.key?(:forced_rollouts)
+        end
+      end
+      
       # Input only.
       # Use this field to specify bucketing option for the histogram search response.
       class NumericBucketingOption