google-api-client 0.32.1 → 0.40.0

data/generated/google/apis/iam_v1/service.rb

@@ -50,21 +50,11 @@ module Google
         end
         
         # Lints a Cloud IAM policy object or its sub fields. Currently supports
-        # google.iam.v1.Policy, google.iam.v1.Binding and
         # google.iam.v1.Binding.condition.
         # Each lint operation consists of multiple lint validation units.
-        # Validation units have the following properties:
-        # - Each unit inspects the input object in regard to a particular
-        # linting aspect and issues a google.iam.admin.v1.LintResult
-        # disclosing the result.
-        # - Domain of discourse of each unit can be either
-        # google.iam.v1.Policy, google.iam.v1.Binding, or
-        # google.iam.v1.Binding.condition depending on the purpose of the
-        # validation.
-        # - A unit may require additional data (like the list of all possible
-        # enumerable values of a particular attribute used in the policy instance)
-        # which shall be provided by the caller. Refer to the comments of
-        # google.iam.admin.v1.LintPolicyRequest.context for more details.
+        # Each unit inspects the input object in regard to a particular linting
+        # aspect and issues a google.iam.admin.v1.LintResult disclosing the
+        # result.
         # The set of applicable validation units is determined by the Cloud IAM
         # server and is not configurable.
         # Regardless of any lint issues or their severities, successful calls to
@@ -867,7 +857,7 @@ module Google
         
         # Deletes a ServiceAccount.
         # @param [String] name
-        #   The resource name of the service account in the following format:
+        #   Required. The resource name of the service account in the following format:
         #   `projects/`PROJECT_ID`/serviceAccounts/`ACCOUNT``.
         #   Using `-` as a wildcard for the `PROJECT_ID` will infer the project from
         #   the account. The `ACCOUNT` value can be the `email` address or the
@@ -909,6 +899,10 @@ module Google
         # Disabling a service account that is bound to VMs, Apps, Functions, or
         # other jobs will cause those jobs to lose access to resources if they are
         # using the disabled service account.
+        # Previously issued Access tokens for a service account will be rejected
+        # while the service account is disabled but will start working again if the
+        # account is re-enabled. Issuance of new tokens will fail while the account
+        # is disabled.
         # To improve reliability of your services and avoid unexpected outages, it
         # is recommended to first disable a service account rather than delete it.
         # After disabling the service account, wait at least 24 hours to verify there
@@ -995,7 +989,7 @@ module Google
         
         # Gets a ServiceAccount.
         # @param [String] name
-        #   The resource name of the service account in the following format:
+        #   Required. The resource name of the service account in the following format:
         #   `projects/`PROJECT_ID`/serviceAccounts/`ACCOUNT``.
         #   Using `-` as a wildcard for the `PROJECT_ID` will infer the project from
         #   the account. The `ACCOUNT` value can be the `email` address or the
@@ -1051,6 +1045,9 @@ module Google
         #   Requests for policies with any conditional bindings must specify version 3.
         #   Policies without any conditional bindings may specify any valid value or
         #   leave the field unset.
+        #   To learn which resources support conditions in their IAM policies, see the
+        #   [IAM
+        #   documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -1218,7 +1215,7 @@ module Google
         # method of the Cloud IAM Service Account Credentials API instead.
         # Signs a blob using a service account's system-managed private key.
         # @param [String] name
-        #   The resource name of the service account in the following format:
+        #   Required. The resource name of the service account in the following format:
         #   `projects/`PROJECT_ID`/serviceAccounts/`ACCOUNT``.
         #   Using `-` as a wildcard for the `PROJECT_ID` will infer the project from
         #   the account. The `ACCOUNT` value can be the `email` address or the
@@ -1262,7 +1259,7 @@ module Google
         # an expiry time of one hour by default. If you request an expiry time of
         # more than one hour, the request will fail.
         # @param [String] name
-        #   The resource name of the service account in the following format:
+        #   Required. The resource name of the service account in the following format:
         #   `projects/`PROJECT_ID`/serviceAccounts/`ACCOUNT``.
         #   Using `-` as a wildcard for the `PROJECT_ID` will infer the project from
         #   the account. The `ACCOUNT` value can be the `email` address or the
@@ -1416,7 +1413,7 @@ module Google
         # Creates a ServiceAccountKey
         # and returns it.
         # @param [String] name
-        #   The resource name of the service account in the following format:
+        #   Required. The resource name of the service account in the following format:
         #   `projects/`PROJECT_ID`/serviceAccounts/`ACCOUNT``.
         #   Using `-` as a wildcard for the `PROJECT_ID` will infer the project from
         #   the account. The `ACCOUNT` value can be the `email` address or the
@@ -1453,7 +1450,7 @@ module Google
         
         # Deletes a ServiceAccountKey.
         # @param [String] name
-        #   The resource name of the service account key in the following format:
+        #   Required. The resource name of the service account key in the following format:
         #   `projects/`PROJECT_ID`/serviceAccounts/`ACCOUNT`/keys/`key``.
         #   Using `-` as a wildcard for the `PROJECT_ID` will infer the project from
         #   the account. The `ACCOUNT` value can be the `email` address or the
@@ -1488,7 +1485,7 @@ module Google
         # Gets the ServiceAccountKey
         # by key id.
         # @param [String] name
-        #   The resource name of the service account key in the following format:
+        #   Required. The resource name of the service account key in the following format:
         #   `projects/`PROJECT_ID`/serviceAccounts/`ACCOUNT`/keys/`key``.
         #   Using `-` as a wildcard for the `PROJECT_ID` will infer the project from
         #   the account. The `ACCOUNT` value can be the `email` address or the
@@ -1526,7 +1523,7 @@ module Google
         
         # Lists ServiceAccountKeys.
         # @param [String] name
-        #   The resource name of the service account in the following format:
+        #   Required. The resource name of the service account in the following format:
         #   `projects/`PROJECT_ID`/serviceAccounts/`ACCOUNT``.
         #   Using `-` as a wildcard for the `PROJECT_ID`, will infer the project from
         #   the account. The `ACCOUNT` value can be the `email` address or the

data/generated/google/apis/iam_v1.rb

@@ -27,7 +27,7 @@ module Google
     # @see https://cloud.google.com/iam/
     module IamV1
       VERSION = 'V1'
-      REVISION = '20190927'
+      REVISION = '20200515'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/iamcredentials_v1/classes.rb

@@ -47,7 +47,8 @@ module Google
         # @return [String]
         attr_accessor :lifetime
       
-        # Code to identify the scopes to be included in the OAuth 2.0 access token.
+        # Required. Code to identify the scopes to be included in the OAuth 2.0 access
+        # token.
         # See https://developers.google.com/identity/protocols/googlescopes for more
         # information.
         # At least one value required.
@@ -97,7 +98,8 @@ module Google
       class GenerateIdTokenRequest
         include Google::Apis::Core::Hashable
       
-        # The audience for the token, such as the API or account that this token
+        # Required. The audience for the token, such as the API or account that this
+        # token
         # grants access to.
         # Corresponds to the JSON property `audience`
         # @return [String]
@@ -171,7 +173,7 @@ module Google
         # @return [Array<String>]
         attr_accessor :delegates
       
-        # The bytes to sign.
+        # Required. The bytes to sign.
         # Corresponds to the JSON property `payload`
         # NOTE: Values are automatically base64 encoded/decoded in the client library.
         # @return [String]
@@ -192,12 +194,24 @@ module Google
       class SignBlobResponse
         include Google::Apis::Core::Hashable
       
-        # The ID of the key used to sign the blob.
+        # The ID of the key used to sign the blob. The key used for signing will
+        # remain valid for at least 12 hours after the blob is signed. To verify the
+        # signature, you can retrieve the public key in several formats from the
+        # following endpoints:
+        # - RSA public key wrapped in an X.509 v3 certificate:
+        # `https://www.googleapis.com/service_accounts/v1/metadata/x509/`ACCOUNT_EMAIL``
+        # - Raw key in JSON format:
+        # `https://www.googleapis.com/service_accounts/v1/metadata/raw/`ACCOUNT_EMAIL``
+        # - JSON Web Key (JWK):
+        # `https://www.googleapis.com/service_accounts/v1/metadata/jwk/`ACCOUNT_EMAIL``
         # Corresponds to the JSON property `keyId`
         # @return [String]
         attr_accessor :key_id
       
-        # The signed blob.
+        # The signature for the blob. Does not include the original blob.
+        # After the key pair referenced by the `key_id` response field expires,
+        # Google no longer exposes the public key that can be used to verify the
+        # blob. As a result, the receiver can no longer verify the signature.
         # Corresponds to the JSON property `signedBlob`
         # NOTE: Values are automatically base64 encoded/decoded in the client library.
         # @return [String]
@@ -231,7 +245,11 @@ module Google
         # @return [Array<String>]
         attr_accessor :delegates
       
-        # The JWT payload to sign: a JSON object that contains a JWT Claims Set.
+        # Required. The JWT payload to sign. Must be a serialized JSON object that
+        # contains a
+        # JWT Claim Set. For example: ``"sub": "user@example.com", "iat": 313435``
+        # If the claim set contains an `exp` claim, it must be an integer timestamp
+        # that is not in the past and at most 12 hours in the future.
         # Corresponds to the JSON property `payload`
         # @return [String]
         attr_accessor :payload
@@ -251,12 +269,26 @@ module Google
       class SignJwtResponse
         include Google::Apis::Core::Hashable
       
-        # The ID of the key used to sign the JWT.
+        # The ID of the key used to sign the JWT. The key used for signing will
+        # remain valid for at least 12 hours after the JWT is signed. To verify the
+        # signature, you can retrieve the public key in several formats from the
+        # following endpoints:
+        # - RSA public key wrapped in an X.509 v3 certificate:
+        # `https://www.googleapis.com/service_accounts/v1/metadata/x509/`ACCOUNT_EMAIL``
+        # - Raw key in JSON format:
+        # `https://www.googleapis.com/service_accounts/v1/metadata/raw/`ACCOUNT_EMAIL``
+        # - JSON Web Key (JWK):
+        # `https://www.googleapis.com/service_accounts/v1/metadata/jwk/`ACCOUNT_EMAIL``
         # Corresponds to the JSON property `keyId`
         # @return [String]
         attr_accessor :key_id
       
-        # The signed JWT.
+        # The signed JWT. Contains the automatically generated header; the
+        # client-supplied payload; and the signature, which is generated using the
+        # key referenced by the `kid` field in the header.
+        # After the key pair referenced by the `key_id` response field expires,
+        # Google no longer exposes the public key that can be used to verify the JWT.
+        # As a result, the receiver can no longer verify the signature.
         # Corresponds to the JSON property `signedJwt`
         # @return [String]
         attr_accessor :signed_jwt

data/generated/google/apis/iamcredentials_v1/service.rb

@@ -49,7 +49,7 @@ module Google
         
         # Generates an OAuth 2.0 access token for a service account.
         # @param [String] name
-        #   The resource name of the service account for which the credentials
+        #   Required. The resource name of the service account for which the credentials
         #   are requested, in the following format:
         #   `projects/-/serviceAccounts/`ACCOUNT_EMAIL_OR_UNIQUEID``. The `-` wildcard
         #   character is required; replacing it with a project ID is invalid.
@@ -85,7 +85,7 @@ module Google
         
         # Generates an OpenID Connect ID token for a service account.
         # @param [String] name
-        #   The resource name of the service account for which the credentials
+        #   Required. The resource name of the service account for which the credentials
         #   are requested, in the following format:
         #   `projects/-/serviceAccounts/`ACCOUNT_EMAIL_OR_UNIQUEID``. The `-` wildcard
         #   character is required; replacing it with a project ID is invalid.
@@ -121,7 +121,7 @@ module Google
         
         # Signs a blob using a service account's system-managed private key.
         # @param [String] name
-        #   The resource name of the service account for which the credentials
+        #   Required. The resource name of the service account for which the credentials
         #   are requested, in the following format:
         #   `projects/-/serviceAccounts/`ACCOUNT_EMAIL_OR_UNIQUEID``. The `-` wildcard
         #   character is required; replacing it with a project ID is invalid.
@@ -157,7 +157,7 @@ module Google
         
         # Signs a JWT using a service account's system-managed private key.
         # @param [String] name
-        #   The resource name of the service account for which the credentials
+        #   Required. The resource name of the service account for which the credentials
         #   are requested, in the following format:
         #   `projects/-/serviceAccounts/`ACCOUNT_EMAIL_OR_UNIQUEID``. The `-` wildcard
         #   character is required; replacing it with a project ID is invalid.

data/generated/google/apis/iamcredentials_v1.rb

@@ -25,7 +25,7 @@ module Google
     # @see https://cloud.google.com/iam/docs/creating-short-lived-service-account-credentials
     module IamcredentialsV1
       VERSION = 'V1'
-      REVISION = '20190704'
+      REVISION = '20200515'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'