google-api-client 0.37.3 → 0.38.0

data/generated/google/apis/homegraph_v1.rb

@@ -25,7 +25,7 @@ module Google
     # @see https://developers.google.com/actions/smarthome/create-app#request-sync
     module HomegraphV1
       VERSION = 'V1'
-      REVISION = '20200219'
+      REVISION = '20200407'
     end
   end
 end

data/generated/google/apis/homegraph_v1/classes.rb

@@ -22,11 +22,11 @@ module Google
   module Apis
     module HomegraphV1
       
-      # Third-party partner's device ID for one device.
+      # Third-party device ID for one device.
       class AgentDeviceId
         include Google::Apis::Core::Hashable
       
-        # Third-party partner's device ID.
+        # Third-party device ID.
         # Corresponds to the JSON property `id`
         # @return [String]
         attr_accessor :id
@@ -41,16 +41,16 @@ module Google
         end
       end
       
-      # Identifies a device in the third party or first party system.
+      # Alternate third-party device ID.
       class AgentOtherDeviceId
         include Google::Apis::Core::Hashable
       
-        # The agent's ID. Generally it is the agent's AoG project id.
+        # Project ID for your smart home Action.
         # Corresponds to the JSON property `agentId`
         # @return [String]
         attr_accessor :agent_id
       
-        # Device ID defined by the agent. The device_id must be unique.
+        # Unique third-party device ID.
         # Corresponds to the JSON property `deviceId`
         # @return [String]
         attr_accessor :device_id
@@ -66,7 +66,7 @@ module Google
         end
       end
       
-      # Third-party partner's device definition.
+      # Third-party device definition.
       class Device
         include Google::Apis::Core::Hashable
       
@@ -75,8 +75,14 @@ module Google
         # @return [Hash<String,Object>]
         attr_accessor :attributes
       
-        # Custom JSON data provided by the manufacturer and attached to QUERY and
-        # EXECUTE requests in AoG.
+        # Custom device attributes stored in Home Graph and provided to your
+        # smart home Action in each
+        # [QUERY](https://developers.google.com/assistant/smarthome/reference/intent/
+        # query)
+        # and
+        # [EXECUTE](https://developers.google.com/assistant/smarthome/reference/intent/
+        # execute)
+        # intent.
         # Corresponds to the JSON property `customData`
         # @return [Hash<String,Object>]
         attr_accessor :custom_data
@@ -86,62 +92,61 @@ module Google
         # @return [Google::Apis::HomegraphV1::DeviceInfo]
         attr_accessor :device_info
       
-        # Third-party partner's device ID.
+        # Third-party device ID.
         # Corresponds to the JSON property `id`
         # @return [String]
         attr_accessor :id
       
-        # Different names for the device.
+        # Identifiers used to describe the device.
         # Corresponds to the JSON property `name`
         # @return [Google::Apis::HomegraphV1::DeviceNames]
         attr_accessor :name
       
-        # Indicates whether the device is capable of sending notifications. This
-        # field will be set by the agent (partner) on an incoming SYNC. If a device
-        # is not capable of generating notifications, the partner should set this
-        # flag to false. If a partner is not capable of calling
-        # ReportStateAndNotification to send notifications to Google, the partner
-        # should set this flag to false. If there is a user setting in the partner
-        # app to enable notifications and it is turned off, the partner should set
-        # this flag to false.
+        # Indicates whether your smart home Action will report notifications
+        # to Google for this device via ReportStateAndNotification.
+        # If your smart home Action enables users to control device notifications,
+        # you should update this field and call RequestSyncDevices.
         # Corresponds to the JSON property `notificationSupportedByAgent`
         # @return [Boolean]
         attr_accessor :notification_supported_by_agent
         alias_method :notification_supported_by_agent?, :notification_supported_by_agent
       
-        # IDs of other devices associated with this device. This is used to
-        # represent a device group (e.g. bonded zone) or "facets" synced
-        # through different flows (e.g. Google Nest Hub Max with a Nest Camera).
-        # This may also be used to pass in alternate IDs used to identify a cloud
-        # synced device for local execution (i.e. local verification). If used for
-        # local verification, this field is synced from the cloud.
+        # Alternate IDs associated with this device.
+        # This is used to identify cloud synced devices enabled for
+        # [local
+        # execution](https://developers.google.com/assistant/smarthome/concepts/local).
         # Corresponds to the JSON property `otherDeviceIds`
         # @return [Array<Google::Apis::HomegraphV1::AgentOtherDeviceId>]
         attr_accessor :other_device_ids
       
-        # If the third-party partner's cloud configuration includes placing devices
-        # in rooms, the name of the room can be provided here.
+        # Suggested name for the room where this device is installed.
+        # Google attempts to use this value during user setup.
         # Corresponds to the JSON property `roomHint`
         # @return [String]
         attr_accessor :room_hint
       
-        # As in roomHint, for structures that users set up in the partner's system.
+        # Suggested name for the structure where this device is installed.
+        # Google attempts to use this value during user setup.
         # Corresponds to the JSON property `structureHint`
         # @return [String]
         attr_accessor :structure_hint
       
         # Traits supported by the device.
+        # See [device
+        # traits](https://developers.google.com/assistant/smarthome/traits).
         # Corresponds to the JSON property `traits`
         # @return [Array<String>]
         attr_accessor :traits
       
-        # Hardware type of the device (e.g. light, outlet, etc).
+        # Hardware type of the device.
+        # See [device
+        # types](https://developers.google.com/assistant/smarthome/guides).
         # Corresponds to the JSON property `type`
         # @return [String]
         attr_accessor :type
       
-        # Indicates whether the state of this device is being reported to Google
-        # through ReportStateAndNotification call.
+        # Indicates whether your smart home Action will report state of this device
+        # to Google via ReportStateAndNotification.
         # Corresponds to the JSON property `willReportState`
         # @return [Boolean]
         attr_accessor :will_report_state
@@ -205,12 +210,12 @@ module Google
         end
       end
       
-      # Different names for the device.
+      # Identifiers used to describe the device.
       class DeviceNames
         include Google::Apis::Core::Hashable
       
-        # List of names provided by the partner rather than the user, often
-        # manufacturer names, SKUs, etc.
+        # List of names provided by the manufacturer rather than the user, such as
+        # serial numbers, SKUs, etc.
         # Corresponds to the JSON property `defaultNames`
         # @return [Array<String>]
         attr_accessor :default_names
@@ -257,11 +262,7 @@ module Google
       end
       
       # Request type for the
-      # [`Query`](#google.home.graph.v1.HomeGraphApiService.Query) call. This should
-      # be the same format as the Actions on Google `action.devices.QUERY`
-      # [request](/actions/smarthome/create-app#actiondevicesquery) with the
-      # exception of the extra `agent_user_id` and no `intent` and `customData`
-      # fields.
+      # [`Query`](#google.home.graph.v1.HomeGraphApiService.Query) call.
       class QueryRequest
         include Google::Apis::Core::Hashable
       
@@ -270,7 +271,7 @@ module Google
         # @return [String]
         attr_accessor :agent_user_id
       
-        # Required. Inputs containing third-party partner's device IDs for which to
+        # Required. Inputs containing third-party device IDs for which to
         # get the device states.
         # Corresponds to the JSON property `inputs`
         # @return [Array<Google::Apis::HomegraphV1::QueryRequestInput>]
@@ -316,7 +317,7 @@ module Google
       class QueryRequestPayload
         include Google::Apis::Core::Hashable
       
-        # Third-party partner's device IDs for which to get the device states.
+        # Third-party device IDs for which to get the device states.
         # Corresponds to the JSON property `devices`
         # @return [Array<Google::Apis::HomegraphV1::AgentDeviceId>]
         attr_accessor :devices
@@ -332,9 +333,11 @@ module Google
       end
       
       # Response type for the
-      # [`Query`](#google.home.graph.v1.HomeGraphApiService.Query) call. This should
-      # follow the same format as the Actions on Google `action.devices.QUERY`
-      # [response](/actions/smarthome/create-app#actiondevicesquery).
+      # [`Query`](#google.home.graph.v1.HomeGraphApiService.Query) call.
+      # This should follow the same format as the Google smart home
+      # `action.devices.QUERY`
+      # [response](https://developers.google.com/assistant/smarthome/reference/intent/
+      # query).
       # # Example
       # ```json
       # `
@@ -406,12 +409,16 @@ module Google
       class ReportStateAndNotificationDevice
         include Google::Apis::Core::Hashable
       
-        # Notifications metadata for devices.
+        # Notifications metadata for devices. See the **Device NOTIFICATIONS**
+        # section of the individual trait [reference
+        # guides](https://developers.google.com/assistant/smarthome/traits).
         # Corresponds to the JSON property `notifications`
         # @return [Hash<String,Object>]
         attr_accessor :notifications
       
-        # States of devices to update.
+        # States of devices to update. See the **Device STATES** section
+        # of the individual trait [reference
+        # guides](https://developers.google.com/assistant/smarthome/traits).
         # Corresponds to the JSON property `states`
         # @return [Hash<String,Object>]
         attr_accessor :states
@@ -430,12 +437,10 @@ module Google
       # Request type for the
       # [`ReportStateAndNotification`](#google.home.graph.v1.HomeGraphApiService.
       # ReportStateAndNotification)
-      # call. It may include States, Notifications, or both. This request uses
-      # globally unique flattened state names instead of namespaces based on traits
-      # to align with the existing QUERY and EXECUTE APIs implemented by 90+ Smart
-      # Home partners. States and notifications are defined per `device_id` (for
-      # example, "123"
-      # and "456" in the following example). # Example
+      # call. It may include states, notifications, or both. States and notifications
+      # are defined per `device_id` (for example, "123" and "456" in the following
+      # example).
+      # # Example
       # ```json
       # `
       # "requestId": "ff36a3cc-ec34-11e6-b1a0-64510650abcf",
@@ -526,15 +531,14 @@ module Google
       class RequestSyncDevicesRequest
         include Google::Apis::Core::Hashable
       
-        # Required. Third-party user ID issued by agent's third-party identity
-        # provider.
+        # Required. Third-party user ID.
         # Corresponds to the JSON property `agentUserId`
         # @return [String]
         attr_accessor :agent_user_id
       
         # Optional. If set, the request will be added to a queue and a response will
-        # be returned immediately. The queue allows for de-duplication of
-        # simultaneous requests.
+        # be returned immediately. This enables concurrent requests for the given
+        # `agent_user_id`, but the caller will not receive any error responses.
         # Corresponds to the JSON property `async`
         # @return [Boolean]
         attr_accessor :async
@@ -554,7 +558,8 @@ module Google
       # Response type for the
       # [`RequestSyncDevices`](#google.home.graph.v1.HomeGraphApiService.
       # RequestSyncDevices)
-      # call. Intentionally empty upon success. An HTTP response code is returned
+      # call.
+      # Intentionally empty upon success. An HTTP response code is returned
       # with more details upon failure.
       class RequestSyncDevicesResponse
         include Google::Apis::Core::Hashable
@@ -588,10 +593,7 @@ module Google
       end
       
       # Request type for the [`Sync`](#google.home.graph.v1.HomeGraphApiService.Sync)
-      # call. This should follow the same format as the Actions on Google
-      # `action.devices.SYNC`
-      # [request](/actions/smarthome/create-app#actiondevicessync) with the exception
-      # of the extra `agent_user_id` and no `intent` field.
+      # call.
       class SyncRequest
         include Google::Apis::Core::Hashable
       
@@ -617,9 +619,11 @@ module Google
       end
       
       # Response type for the
-      # [`Sync`](#google.home.graph.v1.HomeGraphApiService.Sync) call. This should
-      # follow the same format as the Actions on Google `action.devices.SYNC`
-      # [response](/actions/smarthome/create-app#actiondevicessync).
+      # [`Sync`](#google.home.graph.v1.HomeGraphApiService.Sync) call.
+      # This should follow the same format as the Google smart home
+      # `action.devices.SYNC`
+      # [response](https://developers.google.com/assistant/smarthome/reference/intent/
+      # sync).
       # # Example
       # ```json
       # `

data/generated/google/apis/homegraph_v1/service.rb

@@ -47,26 +47,16 @@ module Google
           @batch_path = 'batch'
         end
         
-        # Unlinks an agent user from Google. As a result, all data related to this
-        # user will be deleted.
-        # Here is how the agent user is created in Google:
-        # 1.  When a user opens their Google Home App, they can begin linking a 3p
-        # partner.
-        # 2.  User is guided through the OAuth process.
-        # 3.  After entering the 3p credentials, Google gets the 3p OAuth token and
-        # uses it to make a Sync call to the 3p partner and gets back all of the
-        # user's data, including `agent_user_id` and devices.
-        # 4.  Google creates the agent user and stores a mapping from the
-        # `agent_user_id` -> Google ID mapping. Google also
-        # stores all of the user's devices under that Google ID.
-        # The mapping from `agent_user_id` to Google ID is many to many, since one
-        # Google user can have multiple 3p accounts, and multiple Google users can
-        # map to one `agent_user_id` (e.g., a husband and wife share one Nest account
-        # username/password).
-        # The third-party user's identity is passed in as `agent_user_id`.
-        # The agent is identified by the JWT signed by the partner's service account.
-        # Note: Special characters (except "/") in `agent_user_id` must be
-        # URL-encoded.
+        # Unlinks the given third-party user from your smart home Action.
+        # All data related to this user will be deleted.
+        # For more details on how users link their accounts, see
+        # [fulfillment and
+        # authentication](https://developers.google.com/assistant/smarthome/concepts/
+        # fulfillment-authentication).
+        # The third-party user's identity is passed in via the `agent_user_id`
+        # (see DeleteAgentUserRequest).
+        # This request must be authorized using service account credentials from your
+        # Actions console project.
         # @param [String] agent_user_id
         #   Required. Third-party user ID.
         # @param [String] request_id
@@ -99,10 +89,12 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Gets the device states for the devices in QueryRequest.
-        # The third-party user's identity is passed in as `agent_user_id`. The agent
-        # is identified by the JWT signed by the third-party partner's service
-        # account.
+        # Gets the current states in Home Graph for the given set of the third-party
+        # user's devices.
+        # The third-party user's identity is passed in via the `agent_user_id`
+        # (see QueryRequest).
+        # This request must be authorized using service account credentials from your
+        # Actions console project.
         # @param [Google::Apis::HomegraphV1::QueryRequest] query_request_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
@@ -132,20 +124,21 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Reports device state and optionally sends device notifications. Called by
-        # an agent when the device state of a third-party changes or the agent wants
-        # to send a notification about the device. See
-        # [Implement Report State](/actions/smarthome/report-state) for more
-        # information.
-        # This method updates a predefined set of states for a device, which all
-        # devices have according to their prescribed traits (for example, a light
-        # will have the [OnOff](/actions/smarthome/traits/onoff) trait that reports
-        # the state `on` as a boolean value).
-        # A new state may not be created and an INVALID_ARGUMENT code will be thrown
-        # if so. It also optionally takes in a list of Notifications that may be
-        # created, which are associated to this state change.
-        # The third-party user's identity is passed in as `agent_user_id`.
-        # The agent is identified by the JWT signed by the partner's service account.
+        # Reports device state and optionally sends device notifications.
+        # Called by your smart home Action when the state of a third-party device
+        # changes or you need to send a notification about the device.
+        # See [Implement Report
+        # State](https://developers.google.com/assistant/smarthome/develop/report-state)
+        # for more information.
+        # This method updates the device state according to its declared
+        # [traits](https://developers.google.com/assistant/smarthome/concepts/devices-
+        # traits).
+        # Publishing a new state value outside of these traits will result in an
+        # `INVALID_ARGUMENT` error response.
+        # The third-party user's identity is passed in via the `agent_user_id`
+        # (see ReportStateAndNotificationRequest).
+        # This request must be authorized using service account credentials from your
+        # Actions console project.
         # @param [Google::Apis::HomegraphV1::ReportStateAndNotificationRequest] report_state_and_notification_request_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
@@ -175,12 +168,14 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Requests a `SYNC` call from Google to a 3p partner's home control agent for
-        # a user.
-        # The third-party user's identity is passed in as `agent_user_id`
-        # (see RequestSyncDevicesRequest) and forwarded back to the agent.
-        # The agent is identified by the API key or JWT signed by the partner's
-        # service account.
+        # Requests Google to send an `action.devices.SYNC`
+        # [intent](https://developers.google.com/assistant/smarthome/reference/intent/
+        # sync)
+        # to your smart home Action to update device metadata for the given user.
+        # The third-party user's identity is passed via the `agent_user_id`
+        # (see RequestSyncDevicesRequest).
+        # This request must be authorized using service account credentials from your
+        # Actions console project.
         # @param [Google::Apis::HomegraphV1::RequestSyncDevicesRequest] request_sync_devices_request_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
@@ -211,9 +206,10 @@ module Google
         end
         
         # Gets all the devices associated with the given third-party user.
-        # The third-party user's identity is passed in as `agent_user_id`. The agent
-        # is identified by the JWT signed by the third-party partner's service
-        # account.
+        # The third-party user's identity is passed in via the `agent_user_id`
+        # (see SyncRequest).
+        # This request must be authorized using service account credentials from your
+        # Actions console project.
         # @param [Google::Apis::HomegraphV1::SyncRequest] sync_request_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.

data/generated/google/apis/iap_v1.rb

@@ -25,7 +25,7 @@ module Google
     # @see https://cloud.google.com/iap
     module IapV1
       VERSION = 'V1'
-      REVISION = '20200207'
+      REVISION = '20200327'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/iap_v1/classes.rb

@@ -22,6 +22,28 @@ module Google
   module Apis
     module IapV1
       
+      # Custom content configuration for access denied page.
+      # IAP allows customers to define a custom URI to use as the error page when
+      # access is denied to users. If IAP prevents access to this page, the default
+      # IAP error page will be displayed instead.
+      class AccessDeniedPageSettings
+        include Google::Apis::Core::Hashable
+      
+        # The URI to be redirected to when access is denied.
+        # Corresponds to the JSON property `accessDeniedPageUri`
+        # @return [String]
+        attr_accessor :access_denied_page_uri
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @access_denied_page_uri = args[:access_denied_page_uri] if args.key?(:access_denied_page_uri)
+        end
+      end
+      
       # Access related settings for IAP protected apps.
       class AccessSettings
         include Google::Apis::Core::Hashable
@@ -43,6 +65,15 @@ module Google
         # @return [Google::Apis::IapV1::OAuthSettings]
         attr_accessor :oauth_settings
       
+        # PolicyDelegationConfig allows google-internal teams to use IAP for apps
+        # hosted in a tenant project. Using these settings, the app can delegate
+        # permission check to happen against the linked customer project.
+        # This is only ever supposed to be used by google internal teams, hence the
+        # restriction on the proto.
+        # Corresponds to the JSON property `policyDelegationSettings`
+        # @return [Google::Apis::IapV1::PolicyDelegationSettings]
+        attr_accessor :policy_delegation_settings
+      
         def initialize(**args)
            update!(**args)
         end
@@ -52,6 +83,7 @@ module Google
           @cors_settings = args[:cors_settings] if args.key?(:cors_settings)
           @gcip_settings = args[:gcip_settings] if args.key?(:gcip_settings)
           @oauth_settings = args[:oauth_settings] if args.key?(:oauth_settings)
+          @policy_delegation_settings = args[:policy_delegation_settings] if args.key?(:policy_delegation_settings)
         end
       end
       
@@ -59,6 +91,14 @@ module Google
       class ApplicationSettings
         include Google::Apis::Core::Hashable
       
+        # Custom content configuration for access denied page.
+        # IAP allows customers to define a custom URI to use as the error page when
+        # access is denied to users. If IAP prevents access to this page, the default
+        # IAP error page will be displayed instead.
+        # Corresponds to the JSON property `accessDeniedPageSettings`
+        # @return [Google::Apis::IapV1::AccessDeniedPageSettings]
+        attr_accessor :access_denied_page_settings
+      
         # Configuration for RCTokens generated for CSM workloads protected by IAP.
         # RCTokens are IAP generated JWTs that can be verified at the application. The
         # RCToken is primarily used for ISTIO deployments, and can be scoped to a
@@ -73,6 +113,7 @@ module Google
       
         # Update properties of this object
         def update!(**args)
+          @access_denied_page_settings = args[:access_denied_page_settings] if args.key?(:access_denied_page_settings)
           @csm_settings = args[:csm_settings] if args.key?(:csm_settings)
         end
       end
@@ -662,6 +703,88 @@ module Google
         end
       end
       
+      # PolicyDelegationConfig allows google-internal teams to use IAP for apps
+      # hosted in a tenant project. Using these settings, the app can delegate
+      # permission check to happen against the linked customer project.
+      # This is only ever supposed to be used by google internal teams, hence the
+      # restriction on the proto.
+      class PolicyDelegationSettings
+        include Google::Apis::Core::Hashable
+      
+        # Permission to check in IAM.
+        # Corresponds to the JSON property `iamPermission`
+        # @return [String]
+        attr_accessor :iam_permission
+      
+        # The DNS name of the service (e.g. "resourcemanager.googleapis.com").
+        # This should be the domain name part of the full resource names (see
+        # https://aip.dev/122#full-resource-names), which is usually
+        # the same as IamServiceSpec.service of the service where the resource type
+        # is defined.
+        # Corresponds to the JSON property `iamServiceName`
+        # @return [String]
+        attr_accessor :iam_service_name
+      
+        # Policy name to be checked
+        # Corresponds to the JSON property `policyName`
+        # @return [Google::Apis::IapV1::PolicyName]
+        attr_accessor :policy_name
+      
+        # IAM resource to check permission on
+        # Corresponds to the JSON property `resource`
+        # @return [Google::Apis::IapV1::Resource]
+        attr_accessor :resource
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @iam_permission = args[:iam_permission] if args.key?(:iam_permission)
+          @iam_service_name = args[:iam_service_name] if args.key?(:iam_service_name)
+          @policy_name = args[:policy_name] if args.key?(:policy_name)
+          @resource = args[:resource] if args.key?(:resource)
+        end
+      end
+      
+      # 
+      class PolicyName
+        include Google::Apis::Core::Hashable
+      
+        # 
+        # Corresponds to the JSON property `id`
+        # @return [String]
+        attr_accessor :id
+      
+        # For Cloud IAM:
+        # The location of the Policy.
+        # Must be empty or "global" for Policies owned by global IAM.  Must name a
+        # region from prodspec/cloud-iam-cloudspec for Regional IAM Policies, see
+        # http://go/iam-faq#where-is-iam-currently-deployed.
+        # For Local IAM:
+        # This field should be set to "local".
+        # Corresponds to the JSON property `region`
+        # @return [String]
+        attr_accessor :region
+      
+        # Valid values for type might be 'gce', 'gcs', 'project', 'account' etc.
+        # Corresponds to the JSON property `type`
+        # @return [String]
+        attr_accessor :type
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @id = args[:id] if args.key?(:id)
+          @region = args[:region] if args.key?(:region)
+          @type = args[:type] if args.key?(:type)
+        end
+      end
+      
       # The request sent to ResetIdentityAwareProxyClientSecret.
       class ResetIdentityAwareProxyClientSecretRequest
         include Google::Apis::Core::Hashable
@@ -675,6 +798,73 @@ module Google
         end
       end
       
+      # 
+      class Resource
+        include Google::Apis::Core::Hashable
+      
+        # The service defined labels of the resource on which the conditions will be
+        # evaluated. The semantics - including the key names - are vague to IAM.
+        # If the effective condition has a reference to a `resource.labels[foo]`
+        # construct, IAM consults with this map to retrieve the values associated
+        # with `foo` key for Conditions evaluation. If the provided key is not found
+        # in the labels map, the condition would evaluate to false.
+        # This field is in limited use. If your intended use case is not expected
+        # to express resource.labels attribute in IAM Conditions, leave this field
+        # empty. Before planning on using this attribute please:
+        # * Read go/iam-conditions-labels-comm and ensure your service can meet the
+        # data availability and management requirements.
+        # * Talk to iam-conditions-eng@ about your use case.
+        # Corresponds to the JSON property `labels`
+        # @return [Hash<String,String>]
+        attr_accessor :labels
+      
+        # Name of the resource on which conditions will be evaluated.
+        # Must use the Relative Resource Name of the resource, which is the URI
+        # path of the resource without the leading "/". Examples are
+        # "projects/_/buckets/[BUCKET-ID]" for storage buckets or
+        # "projects/[PROJECT-ID]/global/firewalls/[FIREWALL-ID]" for a firewall.
+        # This field is required for evaluating conditions with rules on resource
+        # names. For a `list` permission check, the resource.name value must be set
+        # to the parent resource. If the parent resource is a project, this field
+        # should be left unset.
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        # The name of the service this resource belongs to. It is configured using
+        # the official_service_name of the Service as defined in service
+        # configurations under //configs/cloud/resourcetypes.
+        # For example, the official_service_name of cloud resource manager service
+        # is set as 'cloudresourcemanager.googleapis.com' according to
+        # //configs/cloud/resourcetypes/google/cloud/resourcemanager/prod.yaml
+        # Corresponds to the JSON property `service`
+        # @return [String]
+        attr_accessor :service
+      
+        # The public resource type name of the resource on which conditions will be
+        # evaluated. It is configured using the official_name of the ResourceType as
+        # defined in service configurations under //configs/cloud/resourcetypes.
+        # For example, the official_name for GCP projects is set as
+        # 'cloudresourcemanager.googleapis.com/Project' according to
+        # //configs/cloud/resourcetypes/google/cloud/resourcemanager/prod.yaml
+        # For details see go/iam-conditions-integration-guide.
+        # Corresponds to the JSON property `type`
+        # @return [String]
+        attr_accessor :type
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @labels = args[:labels] if args.key?(:labels)
+          @name = args[:name] if args.key?(:name)
+          @service = args[:service] if args.key?(:service)
+          @type = args[:type] if args.key?(:type)
+        end
+      end
+      
       # Request message for `SetIamPolicy` method.
       class SetIamPolicyRequest
         include Google::Apis::Core::Hashable