google-api-client 0.39.0 → 0.39.1
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/CHANGELOG.md +22 -0
- data/generated/google/apis/bigquery_v2.rb +1 -1
- data/generated/google/apis/bigquery_v2/classes.rb +566 -0
- data/generated/google/apis/bigquery_v2/representations.rb +147 -0
- data/generated/google/apis/bigquery_v2/service.rb +120 -0
- data/generated/google/apis/bigqueryconnection_v1beta1.rb +1 -1
- data/generated/google/apis/bigqueryconnection_v1beta1/classes.rb +26 -10
- data/generated/google/apis/books_v1.rb +3 -3
- data/generated/google/apis/books_v1/classes.rb +435 -289
- data/generated/google/apis/books_v1/representations.rb +124 -91
- data/generated/google/apis/books_v1/service.rb +354 -484
- data/generated/google/apis/chat_v1.rb +1 -1
- data/generated/google/apis/chat_v1/classes.rb +15 -0
- data/generated/google/apis/chat_v1/representations.rb +2 -0
- data/generated/google/apis/clouddebugger_v2.rb +1 -1
- data/generated/google/apis/cloudfunctions_v1.rb +1 -1
- data/generated/google/apis/cloudfunctions_v1/classes.rb +24 -12
- data/generated/google/apis/cloudfunctions_v1/service.rb +3 -0
- data/generated/google/apis/cloudtasks_v2.rb +1 -1
- data/generated/google/apis/cloudtasks_v2/classes.rb +26 -10
- data/generated/google/apis/cloudtasks_v2beta2.rb +1 -1
- data/generated/google/apis/cloudtasks_v2beta2/classes.rb +26 -10
- data/generated/google/apis/cloudtasks_v2beta3.rb +1 -1
- data/generated/google/apis/cloudtasks_v2beta3/classes.rb +26 -10
- data/generated/google/apis/logging_v2.rb +1 -1
- data/generated/google/apis/logging_v2/classes.rb +45 -32
- data/generated/google/apis/logging_v2/service.rb +9 -5
- data/generated/google/apis/monitoring_v3.rb +1 -1
- data/generated/google/apis/monitoring_v3/classes.rb +7 -5
- data/generated/google/apis/networkmanagement_v1beta1.rb +1 -1
- data/generated/google/apis/networkmanagement_v1beta1/classes.rb +26 -14
- data/generated/google/apis/networkmanagement_v1beta1/service.rb +9 -6
- data/generated/google/apis/osconfig_v1beta.rb +35 -0
- data/generated/google/apis/osconfig_v1beta/classes.rb +2365 -0
- data/generated/google/apis/osconfig_v1beta/representations.rb +966 -0
- data/generated/google/apis/osconfig_v1beta/service.rb +605 -0
- data/generated/google/apis/pubsub_v1.rb +1 -1
- data/generated/google/apis/pubsub_v1/classes.rb +36 -11
- data/generated/google/apis/pubsub_v1/representations.rb +1 -0
- data/generated/google/apis/pubsub_v1/service.rb +15 -6
- data/generated/google/apis/pubsub_v1beta2.rb +1 -1
- data/generated/google/apis/pubsub_v1beta2/classes.rb +23 -10
- data/generated/google/apis/pubsub_v1beta2/service.rb +10 -4
- data/generated/google/apis/servicedirectory_v1beta1.rb +1 -1
- data/generated/google/apis/servicedirectory_v1beta1/classes.rb +26 -10
- data/generated/google/apis/servicemanagement_v1.rb +1 -1
- data/generated/google/apis/servicemanagement_v1/classes.rb +61 -26
- data/generated/google/apis/servicemanagement_v1/service.rb +4 -4
- data/generated/google/apis/toolresults_v1beta3.rb +1 -1
- data/generated/google/apis/toolresults_v1beta3/service.rb +1 -1
- data/generated/google/apis/vault_v1.rb +1 -1
- data/generated/google/apis/vault_v1/classes.rb +4 -1
- data/lib/google/apis/version.rb +1 -1
- metadata +7 -3
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: d1f78ac78d5a365e346df4cc95230c8565ebe3f9494618bd568e990e877cec8a
|
4
|
+
data.tar.gz: 5471833b1cd7dcc3fbdfc8be5cd198aba3e7247cbc7644a72cb9af38c6d630a7
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 6c8551d9c76b4481f5678b01d367313343d5cf0ca57ad8237f7ad56bd1c7dd196574cfb7fe48e928377353da6ffdbea46e2067e9e44f8e0e3eeea15df1dda00e
|
7
|
+
data.tar.gz: 61c69e6a3df09cf491625de7b264988e8bc191ca3b27488aa4914ea5b13093115dbf831a14c8c19bb8316efb6fb1b5c34d651f1539ffe327b1d604a9c230b1e9
|
data/CHANGELOG.md
CHANGED
@@ -1,3 +1,25 @@
|
|
1
|
+
# 0.39.1
|
2
|
+
* Backwards compatible changes:
|
3
|
+
* Added `osconfig_v1beta`
|
4
|
+
* Updated `bigquery_v2`
|
5
|
+
* Updated `bigqueryconnection_v1beta1`
|
6
|
+
* Updated `books_v1`
|
7
|
+
* Updated `chat_v1`
|
8
|
+
* Updated `clouddebugger_v2`
|
9
|
+
* Updated `cloudfunctions_v1`
|
10
|
+
* Updated `cloudtasks_v2`
|
11
|
+
* Updated `cloudtasks_v2beta2`
|
12
|
+
* Updated `cloudtasks_v2beta3`
|
13
|
+
* Updated `logging_v2`
|
14
|
+
* Updated `monitoring_v3`
|
15
|
+
* Updated `networkmanagement_v1beta1`
|
16
|
+
* Updated `pubsub_v1`
|
17
|
+
* Updated `pubsub_v1beta2`
|
18
|
+
* Updated `servicedirectory_v1beta1`
|
19
|
+
* Updated `servicemanagement_v1`
|
20
|
+
* Updated `toolresults_v1beta3`
|
21
|
+
* Updated `vault_v1`
|
22
|
+
|
1
23
|
# 0.39.0
|
2
24
|
* Breaking changes:
|
3
25
|
* Deleted `commentanalyzer_v1alpha1`
|
@@ -25,7 +25,7 @@ module Google
|
|
25
25
|
# @see https://cloud.google.com/bigquery/
|
26
26
|
module BigqueryV2
|
27
27
|
VERSION = 'V2'
|
28
|
-
REVISION = '
|
28
|
+
REVISION = '20200429'
|
29
29
|
|
30
30
|
# View and manage your data in Google BigQuery
|
31
31
|
AUTH_BIGQUERY = 'https://www.googleapis.com/auth/bigquery'
|
@@ -312,6 +312,122 @@ module Google
|
|
312
312
|
end
|
313
313
|
end
|
314
314
|
|
315
|
+
# Specifies the audit configuration for a service.
|
316
|
+
# The configuration determines which permission types are logged, and what
|
317
|
+
# identities, if any, are exempted from logging.
|
318
|
+
# An AuditConfig must have one or more AuditLogConfigs.
|
319
|
+
# If there are AuditConfigs for both `allServices` and a specific service,
|
320
|
+
# the union of the two AuditConfigs is used for that service: the log_types
|
321
|
+
# specified in each AuditConfig are enabled, and the exempted_members in each
|
322
|
+
# AuditLogConfig are exempted.
|
323
|
+
# Example Policy with multiple AuditConfigs:
|
324
|
+
# `
|
325
|
+
# "audit_configs": [
|
326
|
+
# `
|
327
|
+
# "service": "allServices"
|
328
|
+
# "audit_log_configs": [
|
329
|
+
# `
|
330
|
+
# "log_type": "DATA_READ",
|
331
|
+
# "exempted_members": [
|
332
|
+
# "user:jose@example.com"
|
333
|
+
# ]
|
334
|
+
# `,
|
335
|
+
# `
|
336
|
+
# "log_type": "DATA_WRITE",
|
337
|
+
# `,
|
338
|
+
# `
|
339
|
+
# "log_type": "ADMIN_READ",
|
340
|
+
# `
|
341
|
+
# ]
|
342
|
+
# `,
|
343
|
+
# `
|
344
|
+
# "service": "sampleservice.googleapis.com"
|
345
|
+
# "audit_log_configs": [
|
346
|
+
# `
|
347
|
+
# "log_type": "DATA_READ",
|
348
|
+
# `,
|
349
|
+
# `
|
350
|
+
# "log_type": "DATA_WRITE",
|
351
|
+
# "exempted_members": [
|
352
|
+
# "user:aliya@example.com"
|
353
|
+
# ]
|
354
|
+
# `
|
355
|
+
# ]
|
356
|
+
# `
|
357
|
+
# ]
|
358
|
+
# `
|
359
|
+
# For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ
|
360
|
+
# logging. It also exempts jose@example.com from DATA_READ logging, and
|
361
|
+
# aliya@example.com from DATA_WRITE logging.
|
362
|
+
class AuditConfig
|
363
|
+
include Google::Apis::Core::Hashable
|
364
|
+
|
365
|
+
# The configuration for logging of each type of permission.
|
366
|
+
# Corresponds to the JSON property `auditLogConfigs`
|
367
|
+
# @return [Array<Google::Apis::BigqueryV2::AuditLogConfig>]
|
368
|
+
attr_accessor :audit_log_configs
|
369
|
+
|
370
|
+
# Specifies a service that will be enabled for audit logging.
|
371
|
+
# For example, `storage.googleapis.com`, `cloudsql.googleapis.com`.
|
372
|
+
# `allServices` is a special value that covers all services.
|
373
|
+
# Corresponds to the JSON property `service`
|
374
|
+
# @return [String]
|
375
|
+
attr_accessor :service
|
376
|
+
|
377
|
+
def initialize(**args)
|
378
|
+
update!(**args)
|
379
|
+
end
|
380
|
+
|
381
|
+
# Update properties of this object
|
382
|
+
def update!(**args)
|
383
|
+
@audit_log_configs = args[:audit_log_configs] if args.key?(:audit_log_configs)
|
384
|
+
@service = args[:service] if args.key?(:service)
|
385
|
+
end
|
386
|
+
end
|
387
|
+
|
388
|
+
# Provides the configuration for logging a type of permissions.
|
389
|
+
# Example:
|
390
|
+
# `
|
391
|
+
# "audit_log_configs": [
|
392
|
+
# `
|
393
|
+
# "log_type": "DATA_READ",
|
394
|
+
# "exempted_members": [
|
395
|
+
# "user:jose@example.com"
|
396
|
+
# ]
|
397
|
+
# `,
|
398
|
+
# `
|
399
|
+
# "log_type": "DATA_WRITE",
|
400
|
+
# `
|
401
|
+
# ]
|
402
|
+
# `
|
403
|
+
# This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting
|
404
|
+
# jose@example.com from DATA_READ logging.
|
405
|
+
class AuditLogConfig
|
406
|
+
include Google::Apis::Core::Hashable
|
407
|
+
|
408
|
+
# Specifies the identities that do not cause logging for this type of
|
409
|
+
# permission.
|
410
|
+
# Follows the same format of Binding.members.
|
411
|
+
# Corresponds to the JSON property `exemptedMembers`
|
412
|
+
# @return [Array<String>]
|
413
|
+
attr_accessor :exempted_members
|
414
|
+
|
415
|
+
# The log type that this config enables.
|
416
|
+
# Corresponds to the JSON property `logType`
|
417
|
+
# @return [String]
|
418
|
+
attr_accessor :log_type
|
419
|
+
|
420
|
+
def initialize(**args)
|
421
|
+
update!(**args)
|
422
|
+
end
|
423
|
+
|
424
|
+
# Update properties of this object
|
425
|
+
def update!(**args)
|
426
|
+
@exempted_members = args[:exempted_members] if args.key?(:exempted_members)
|
427
|
+
@log_type = args[:log_type] if args.key?(:log_type)
|
428
|
+
end
|
429
|
+
end
|
430
|
+
|
315
431
|
#
|
316
432
|
class BigQueryModelTraining
|
317
433
|
include Google::Apis::Core::Hashable
|
@@ -624,6 +740,89 @@ module Google
|
|
624
740
|
end
|
625
741
|
end
|
626
742
|
|
743
|
+
# Associates `members` with a `role`.
|
744
|
+
class Binding
|
745
|
+
include Google::Apis::Core::Hashable
|
746
|
+
|
747
|
+
# Represents a textual expression in the Common Expression Language (CEL)
|
748
|
+
# syntax. CEL is a C-like expression language. The syntax and semantics of CEL
|
749
|
+
# are documented at https://github.com/google/cel-spec.
|
750
|
+
# Example (Comparison):
|
751
|
+
# title: "Summary size limit"
|
752
|
+
# description: "Determines if a summary is less than 100 chars"
|
753
|
+
# expression: "document.summary.size() < 100"
|
754
|
+
# Example (Equality):
|
755
|
+
# title: "Requestor is owner"
|
756
|
+
# description: "Determines if requestor is the document owner"
|
757
|
+
# expression: "document.owner == request.auth.claims.email"
|
758
|
+
# Example (Logic):
|
759
|
+
# title: "Public documents"
|
760
|
+
# description: "Determine whether the document should be publicly visible"
|
761
|
+
# expression: "document.type != 'private' && document.type != 'internal'"
|
762
|
+
# Example (Data Manipulation):
|
763
|
+
# title: "Notification string"
|
764
|
+
# description: "Create a notification string with a timestamp."
|
765
|
+
# expression: "'New message received at ' + string(document.create_time)"
|
766
|
+
# The exact variables and functions that may be referenced within an expression
|
767
|
+
# are determined by the service that evaluates it. See the service
|
768
|
+
# documentation for additional information.
|
769
|
+
# Corresponds to the JSON property `condition`
|
770
|
+
# @return [Google::Apis::BigqueryV2::Expr]
|
771
|
+
attr_accessor :condition
|
772
|
+
|
773
|
+
# Specifies the identities requesting access for a Cloud Platform resource.
|
774
|
+
# `members` can have the following values:
|
775
|
+
# * `allUsers`: A special identifier that represents anyone who is
|
776
|
+
# on the internet; with or without a Google account.
|
777
|
+
# * `allAuthenticatedUsers`: A special identifier that represents anyone
|
778
|
+
# who is authenticated with a Google account or a service account.
|
779
|
+
# * `user:`emailid``: An email address that represents a specific Google
|
780
|
+
# account. For example, `alice@example.com` .
|
781
|
+
# * `serviceAccount:`emailid``: An email address that represents a service
|
782
|
+
# account. For example, `my-other-app@appspot.gserviceaccount.com`.
|
783
|
+
# * `group:`emailid``: An email address that represents a Google group.
|
784
|
+
# For example, `admins@example.com`.
|
785
|
+
# * `deleted:user:`emailid`?uid=`uniqueid``: An email address (plus unique
|
786
|
+
# identifier) representing a user that has been recently deleted. For
|
787
|
+
# example, `alice@example.com?uid=123456789012345678901`. If the user is
|
788
|
+
# recovered, this value reverts to `user:`emailid`` and the recovered user
|
789
|
+
# retains the role in the binding.
|
790
|
+
# * `deleted:serviceAccount:`emailid`?uid=`uniqueid``: An email address (plus
|
791
|
+
# unique identifier) representing a service account that has been recently
|
792
|
+
# deleted. For example,
|
793
|
+
# `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
|
794
|
+
# If the service account is undeleted, this value reverts to
|
795
|
+
# `serviceAccount:`emailid`` and the undeleted service account retains the
|
796
|
+
# role in the binding.
|
797
|
+
# * `deleted:group:`emailid`?uid=`uniqueid``: An email address (plus unique
|
798
|
+
# identifier) representing a Google group that has been recently
|
799
|
+
# deleted. For example, `admins@example.com?uid=123456789012345678901`. If
|
800
|
+
# the group is recovered, this value reverts to `group:`emailid`` and the
|
801
|
+
# recovered group retains the role in the binding.
|
802
|
+
# * `domain:`domain``: The G Suite domain (primary) that represents all the
|
803
|
+
# users of that domain. For example, `google.com` or `example.com`.
|
804
|
+
# Corresponds to the JSON property `members`
|
805
|
+
# @return [Array<String>]
|
806
|
+
attr_accessor :members
|
807
|
+
|
808
|
+
# Role that is assigned to `members`.
|
809
|
+
# For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
|
810
|
+
# Corresponds to the JSON property `role`
|
811
|
+
# @return [String]
|
812
|
+
attr_accessor :role
|
813
|
+
|
814
|
+
def initialize(**args)
|
815
|
+
update!(**args)
|
816
|
+
end
|
817
|
+
|
818
|
+
# Update properties of this object
|
819
|
+
def update!(**args)
|
820
|
+
@condition = args[:condition] if args.key?(:condition)
|
821
|
+
@members = args[:members] if args.key?(:members)
|
822
|
+
@role = args[:role] if args.key?(:role)
|
823
|
+
end
|
824
|
+
end
|
825
|
+
|
627
826
|
#
|
628
827
|
class BqmlIterationResult
|
629
828
|
include Google::Apis::Core::Hashable
|
@@ -1832,6 +2031,69 @@ module Google
|
|
1832
2031
|
end
|
1833
2032
|
end
|
1834
2033
|
|
2034
|
+
# Represents a textual expression in the Common Expression Language (CEL)
|
2035
|
+
# syntax. CEL is a C-like expression language. The syntax and semantics of CEL
|
2036
|
+
# are documented at https://github.com/google/cel-spec.
|
2037
|
+
# Example (Comparison):
|
2038
|
+
# title: "Summary size limit"
|
2039
|
+
# description: "Determines if a summary is less than 100 chars"
|
2040
|
+
# expression: "document.summary.size() < 100"
|
2041
|
+
# Example (Equality):
|
2042
|
+
# title: "Requestor is owner"
|
2043
|
+
# description: "Determines if requestor is the document owner"
|
2044
|
+
# expression: "document.owner == request.auth.claims.email"
|
2045
|
+
# Example (Logic):
|
2046
|
+
# title: "Public documents"
|
2047
|
+
# description: "Determine whether the document should be publicly visible"
|
2048
|
+
# expression: "document.type != 'private' && document.type != 'internal'"
|
2049
|
+
# Example (Data Manipulation):
|
2050
|
+
# title: "Notification string"
|
2051
|
+
# description: "Create a notification string with a timestamp."
|
2052
|
+
# expression: "'New message received at ' + string(document.create_time)"
|
2053
|
+
# The exact variables and functions that may be referenced within an expression
|
2054
|
+
# are determined by the service that evaluates it. See the service
|
2055
|
+
# documentation for additional information.
|
2056
|
+
class Expr
|
2057
|
+
include Google::Apis::Core::Hashable
|
2058
|
+
|
2059
|
+
# Optional. Description of the expression. This is a longer text which
|
2060
|
+
# describes the expression, e.g. when hovered over it in a UI.
|
2061
|
+
# Corresponds to the JSON property `description`
|
2062
|
+
# @return [String]
|
2063
|
+
attr_accessor :description
|
2064
|
+
|
2065
|
+
# Textual representation of an expression in Common Expression Language
|
2066
|
+
# syntax.
|
2067
|
+
# Corresponds to the JSON property `expression`
|
2068
|
+
# @return [String]
|
2069
|
+
attr_accessor :expression
|
2070
|
+
|
2071
|
+
# Optional. String indicating the location of the expression for error
|
2072
|
+
# reporting, e.g. a file name and a position in the file.
|
2073
|
+
# Corresponds to the JSON property `location`
|
2074
|
+
# @return [String]
|
2075
|
+
attr_accessor :location
|
2076
|
+
|
2077
|
+
# Optional. Title for the expression, i.e. a short string describing
|
2078
|
+
# its purpose. This can be used e.g. in UIs which allow to enter the
|
2079
|
+
# expression.
|
2080
|
+
# Corresponds to the JSON property `title`
|
2081
|
+
# @return [String]
|
2082
|
+
attr_accessor :title
|
2083
|
+
|
2084
|
+
def initialize(**args)
|
2085
|
+
update!(**args)
|
2086
|
+
end
|
2087
|
+
|
2088
|
+
# Update properties of this object
|
2089
|
+
def update!(**args)
|
2090
|
+
@description = args[:description] if args.key?(:description)
|
2091
|
+
@expression = args[:expression] if args.key?(:expression)
|
2092
|
+
@location = args[:location] if args.key?(:location)
|
2093
|
+
@title = args[:title] if args.key?(:title)
|
2094
|
+
end
|
2095
|
+
end
|
2096
|
+
|
1835
2097
|
#
|
1836
2098
|
class ExternalDataConfiguration
|
1837
2099
|
include Google::Apis::Core::Hashable
|
@@ -1973,6 +2235,52 @@ module Google
|
|
1973
2235
|
end
|
1974
2236
|
end
|
1975
2237
|
|
2238
|
+
# Request message for `GetIamPolicy` method.
|
2239
|
+
class GetIamPolicyRequest
|
2240
|
+
include Google::Apis::Core::Hashable
|
2241
|
+
|
2242
|
+
# Encapsulates settings provided to GetIamPolicy.
|
2243
|
+
# Corresponds to the JSON property `options`
|
2244
|
+
# @return [Google::Apis::BigqueryV2::GetPolicyOptions]
|
2245
|
+
attr_accessor :options
|
2246
|
+
|
2247
|
+
def initialize(**args)
|
2248
|
+
update!(**args)
|
2249
|
+
end
|
2250
|
+
|
2251
|
+
# Update properties of this object
|
2252
|
+
def update!(**args)
|
2253
|
+
@options = args[:options] if args.key?(:options)
|
2254
|
+
end
|
2255
|
+
end
|
2256
|
+
|
2257
|
+
# Encapsulates settings provided to GetIamPolicy.
|
2258
|
+
class GetPolicyOptions
|
2259
|
+
include Google::Apis::Core::Hashable
|
2260
|
+
|
2261
|
+
# Optional. The policy format version to be returned.
|
2262
|
+
# Valid values are 0, 1, and 3. Requests specifying an invalid value will be
|
2263
|
+
# rejected.
|
2264
|
+
# Requests for policies with any conditional bindings must specify version 3.
|
2265
|
+
# Policies without any conditional bindings may specify any valid value or
|
2266
|
+
# leave the field unset.
|
2267
|
+
# To learn which resources support conditions in their IAM policies, see the
|
2268
|
+
# [IAM
|
2269
|
+
# documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
|
2270
|
+
# Corresponds to the JSON property `requestedPolicyVersion`
|
2271
|
+
# @return [Fixnum]
|
2272
|
+
attr_accessor :requested_policy_version
|
2273
|
+
|
2274
|
+
def initialize(**args)
|
2275
|
+
update!(**args)
|
2276
|
+
end
|
2277
|
+
|
2278
|
+
# Update properties of this object
|
2279
|
+
def update!(**args)
|
2280
|
+
@requested_policy_version = args[:requested_policy_version] if args.key?(:requested_policy_version)
|
2281
|
+
end
|
2282
|
+
end
|
2283
|
+
|
1976
2284
|
#
|
1977
2285
|
class GetQueryResultsResponse
|
1978
2286
|
include Google::Apis::Core::Hashable
|
@@ -3980,6 +4288,134 @@ module Google
|
|
3980
4288
|
end
|
3981
4289
|
end
|
3982
4290
|
|
4291
|
+
# An Identity and Access Management (IAM) policy, which specifies access
|
4292
|
+
# controls for Google Cloud resources.
|
4293
|
+
# A `Policy` is a collection of `bindings`. A `binding` binds one or more
|
4294
|
+
# `members` to a single `role`. Members can be user accounts, service accounts,
|
4295
|
+
# Google groups, and domains (such as G Suite). A `role` is a named list of
|
4296
|
+
# permissions; each `role` can be an IAM predefined role or a user-created
|
4297
|
+
# custom role.
|
4298
|
+
# For some types of Google Cloud resources, a `binding` can also specify a
|
4299
|
+
# `condition`, which is a logical expression that allows access to a resource
|
4300
|
+
# only if the expression evaluates to `true`. A condition can add constraints
|
4301
|
+
# based on attributes of the request, the resource, or both. To learn which
|
4302
|
+
# resources support conditions in their IAM policies, see the
|
4303
|
+
# [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-
|
4304
|
+
# policies).
|
4305
|
+
# **JSON example:**
|
4306
|
+
# `
|
4307
|
+
# "bindings": [
|
4308
|
+
# `
|
4309
|
+
# "role": "roles/resourcemanager.organizationAdmin",
|
4310
|
+
# "members": [
|
4311
|
+
# "user:mike@example.com",
|
4312
|
+
# "group:admins@example.com",
|
4313
|
+
# "domain:google.com",
|
4314
|
+
# "serviceAccount:my-project-id@appspot.gserviceaccount.com"
|
4315
|
+
# ]
|
4316
|
+
# `,
|
4317
|
+
# `
|
4318
|
+
# "role": "roles/resourcemanager.organizationViewer",
|
4319
|
+
# "members": [
|
4320
|
+
# "user:eve@example.com"
|
4321
|
+
# ],
|
4322
|
+
# "condition": `
|
4323
|
+
# "title": "expirable access",
|
4324
|
+
# "description": "Does not grant access after Sep 2020",
|
4325
|
+
# "expression": "request.time < timestamp('2020-10-01T00:00:00.000Z')
|
4326
|
+
# ",
|
4327
|
+
# `
|
4328
|
+
# `
|
4329
|
+
# ],
|
4330
|
+
# "etag": "BwWWja0YfJA=",
|
4331
|
+
# "version": 3
|
4332
|
+
# `
|
4333
|
+
# **YAML example:**
|
4334
|
+
# bindings:
|
4335
|
+
# - members:
|
4336
|
+
# - user:mike@example.com
|
4337
|
+
# - group:admins@example.com
|
4338
|
+
# - domain:google.com
|
4339
|
+
# - serviceAccount:my-project-id@appspot.gserviceaccount.com
|
4340
|
+
# role: roles/resourcemanager.organizationAdmin
|
4341
|
+
# - members:
|
4342
|
+
# - user:eve@example.com
|
4343
|
+
# role: roles/resourcemanager.organizationViewer
|
4344
|
+
# condition:
|
4345
|
+
# title: expirable access
|
4346
|
+
# description: Does not grant access after Sep 2020
|
4347
|
+
# expression: request.time < timestamp('2020-10-01T00:00:00.000Z')
|
4348
|
+
# - etag: BwWWja0YfJA=
|
4349
|
+
# - version: 3
|
4350
|
+
# For a description of IAM and its features, see the
|
4351
|
+
# [IAM documentation](https://cloud.google.com/iam/docs/).
|
4352
|
+
class Policy
|
4353
|
+
include Google::Apis::Core::Hashable
|
4354
|
+
|
4355
|
+
# Specifies cloud audit logging configuration for this policy.
|
4356
|
+
# Corresponds to the JSON property `auditConfigs`
|
4357
|
+
# @return [Array<Google::Apis::BigqueryV2::AuditConfig>]
|
4358
|
+
attr_accessor :audit_configs
|
4359
|
+
|
4360
|
+
# Associates a list of `members` to a `role`. Optionally, may specify a
|
4361
|
+
# `condition` that determines how and when the `bindings` are applied. Each
|
4362
|
+
# of the `bindings` must contain at least one member.
|
4363
|
+
# Corresponds to the JSON property `bindings`
|
4364
|
+
# @return [Array<Google::Apis::BigqueryV2::Binding>]
|
4365
|
+
attr_accessor :bindings
|
4366
|
+
|
4367
|
+
# `etag` is used for optimistic concurrency control as a way to help
|
4368
|
+
# prevent simultaneous updates of a policy from overwriting each other.
|
4369
|
+
# It is strongly suggested that systems make use of the `etag` in the
|
4370
|
+
# read-modify-write cycle to perform policy updates in order to avoid race
|
4371
|
+
# conditions: An `etag` is returned in the response to `getIamPolicy`, and
|
4372
|
+
# systems are expected to put that etag in the request to `setIamPolicy` to
|
4373
|
+
# ensure that their change will be applied to the same version of the policy.
|
4374
|
+
# **Important:** If you use IAM Conditions, you must include the `etag` field
|
4375
|
+
# whenever you call `setIamPolicy`. If you omit this field, then IAM allows
|
4376
|
+
# you to overwrite a version `3` policy with a version `1` policy, and all of
|
4377
|
+
# the conditions in the version `3` policy are lost.
|
4378
|
+
# Corresponds to the JSON property `etag`
|
4379
|
+
# NOTE: Values are automatically base64 encoded/decoded in the client library.
|
4380
|
+
# @return [String]
|
4381
|
+
attr_accessor :etag
|
4382
|
+
|
4383
|
+
# Specifies the format of the policy.
|
4384
|
+
# Valid values are `0`, `1`, and `3`. Requests that specify an invalid value
|
4385
|
+
# are rejected.
|
4386
|
+
# Any operation that affects conditional role bindings must specify version
|
4387
|
+
# `3`. This requirement applies to the following operations:
|
4388
|
+
# * Getting a policy that includes a conditional role binding
|
4389
|
+
# * Adding a conditional role binding to a policy
|
4390
|
+
# * Changing a conditional role binding in a policy
|
4391
|
+
# * Removing any role binding, with or without a condition, from a policy
|
4392
|
+
# that includes conditions
|
4393
|
+
# **Important:** If you use IAM Conditions, you must include the `etag` field
|
4394
|
+
# whenever you call `setIamPolicy`. If you omit this field, then IAM allows
|
4395
|
+
# you to overwrite a version `3` policy with a version `1` policy, and all of
|
4396
|
+
# the conditions in the version `3` policy are lost.
|
4397
|
+
# If a policy does not include any conditions, operations on that policy may
|
4398
|
+
# specify any valid version or leave the field unset.
|
4399
|
+
# To learn which resources support conditions in their IAM policies, see the
|
4400
|
+
# [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-
|
4401
|
+
# policies).
|
4402
|
+
# Corresponds to the JSON property `version`
|
4403
|
+
# @return [Fixnum]
|
4404
|
+
attr_accessor :version
|
4405
|
+
|
4406
|
+
def initialize(**args)
|
4407
|
+
update!(**args)
|
4408
|
+
end
|
4409
|
+
|
4410
|
+
# Update properties of this object
|
4411
|
+
def update!(**args)
|
4412
|
+
@audit_configs = args[:audit_configs] if args.key?(:audit_configs)
|
4413
|
+
@bindings = args[:bindings] if args.key?(:bindings)
|
4414
|
+
@etag = args[:etag] if args.key?(:etag)
|
4415
|
+
@version = args[:version] if args.key?(:version)
|
4416
|
+
end
|
4417
|
+
end
|
4418
|
+
|
3983
4419
|
#
|
3984
4420
|
class ProjectList
|
3985
4421
|
include Google::Apis::Core::Hashable
|
@@ -4914,6 +5350,94 @@ module Google
|
|
4914
5350
|
end
|
4915
5351
|
end
|
4916
5352
|
|
5353
|
+
# Request message for `SetIamPolicy` method.
|
5354
|
+
class SetIamPolicyRequest
|
5355
|
+
include Google::Apis::Core::Hashable
|
5356
|
+
|
5357
|
+
# An Identity and Access Management (IAM) policy, which specifies access
|
5358
|
+
# controls for Google Cloud resources.
|
5359
|
+
# A `Policy` is a collection of `bindings`. A `binding` binds one or more
|
5360
|
+
# `members` to a single `role`. Members can be user accounts, service accounts,
|
5361
|
+
# Google groups, and domains (such as G Suite). A `role` is a named list of
|
5362
|
+
# permissions; each `role` can be an IAM predefined role or a user-created
|
5363
|
+
# custom role.
|
5364
|
+
# For some types of Google Cloud resources, a `binding` can also specify a
|
5365
|
+
# `condition`, which is a logical expression that allows access to a resource
|
5366
|
+
# only if the expression evaluates to `true`. A condition can add constraints
|
5367
|
+
# based on attributes of the request, the resource, or both. To learn which
|
5368
|
+
# resources support conditions in their IAM policies, see the
|
5369
|
+
# [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-
|
5370
|
+
# policies).
|
5371
|
+
# **JSON example:**
|
5372
|
+
# `
|
5373
|
+
# "bindings": [
|
5374
|
+
# `
|
5375
|
+
# "role": "roles/resourcemanager.organizationAdmin",
|
5376
|
+
# "members": [
|
5377
|
+
# "user:mike@example.com",
|
5378
|
+
# "group:admins@example.com",
|
5379
|
+
# "domain:google.com",
|
5380
|
+
# "serviceAccount:my-project-id@appspot.gserviceaccount.com"
|
5381
|
+
# ]
|
5382
|
+
# `,
|
5383
|
+
# `
|
5384
|
+
# "role": "roles/resourcemanager.organizationViewer",
|
5385
|
+
# "members": [
|
5386
|
+
# "user:eve@example.com"
|
5387
|
+
# ],
|
5388
|
+
# "condition": `
|
5389
|
+
# "title": "expirable access",
|
5390
|
+
# "description": "Does not grant access after Sep 2020",
|
5391
|
+
# "expression": "request.time < timestamp('2020-10-01T00:00:00.000Z')
|
5392
|
+
# ",
|
5393
|
+
# `
|
5394
|
+
# `
|
5395
|
+
# ],
|
5396
|
+
# "etag": "BwWWja0YfJA=",
|
5397
|
+
# "version": 3
|
5398
|
+
# `
|
5399
|
+
# **YAML example:**
|
5400
|
+
# bindings:
|
5401
|
+
# - members:
|
5402
|
+
# - user:mike@example.com
|
5403
|
+
# - group:admins@example.com
|
5404
|
+
# - domain:google.com
|
5405
|
+
# - serviceAccount:my-project-id@appspot.gserviceaccount.com
|
5406
|
+
# role: roles/resourcemanager.organizationAdmin
|
5407
|
+
# - members:
|
5408
|
+
# - user:eve@example.com
|
5409
|
+
# role: roles/resourcemanager.organizationViewer
|
5410
|
+
# condition:
|
5411
|
+
# title: expirable access
|
5412
|
+
# description: Does not grant access after Sep 2020
|
5413
|
+
# expression: request.time < timestamp('2020-10-01T00:00:00.000Z')
|
5414
|
+
# - etag: BwWWja0YfJA=
|
5415
|
+
# - version: 3
|
5416
|
+
# For a description of IAM and its features, see the
|
5417
|
+
# [IAM documentation](https://cloud.google.com/iam/docs/).
|
5418
|
+
# Corresponds to the JSON property `policy`
|
5419
|
+
# @return [Google::Apis::BigqueryV2::Policy]
|
5420
|
+
attr_accessor :policy
|
5421
|
+
|
5422
|
+
# OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only
|
5423
|
+
# the fields in the mask will be modified. If no mask is provided, the
|
5424
|
+
# following default mask is used:
|
5425
|
+
# `paths: "bindings, etag"`
|
5426
|
+
# Corresponds to the JSON property `updateMask`
|
5427
|
+
# @return [String]
|
5428
|
+
attr_accessor :update_mask
|
5429
|
+
|
5430
|
+
def initialize(**args)
|
5431
|
+
update!(**args)
|
5432
|
+
end
|
5433
|
+
|
5434
|
+
# Update properties of this object
|
5435
|
+
def update!(**args)
|
5436
|
+
@policy = args[:policy] if args.key?(:policy)
|
5437
|
+
@update_mask = args[:update_mask] if args.key?(:update_mask)
|
5438
|
+
end
|
5439
|
+
end
|
5440
|
+
|
4917
5441
|
# The type of a variable, e.g., a function argument.
|
4918
5442
|
# Examples:
|
4919
5443
|
# INT64: `type_kind="INT64"`
|
@@ -5785,6 +6309,48 @@ module Google
|
|
5785
6309
|
end
|
5786
6310
|
end
|
5787
6311
|
|
6312
|
+
# Request message for `TestIamPermissions` method.
|
6313
|
+
class TestIamPermissionsRequest
|
6314
|
+
include Google::Apis::Core::Hashable
|
6315
|
+
|
6316
|
+
# The set of permissions to check for the `resource`. Permissions with
|
6317
|
+
# wildcards (such as '*' or 'storage.*') are not allowed. For more
|
6318
|
+
# information see
|
6319
|
+
# [IAM Overview](https://cloud.google.com/iam/docs/overview#permissions).
|
6320
|
+
# Corresponds to the JSON property `permissions`
|
6321
|
+
# @return [Array<String>]
|
6322
|
+
attr_accessor :permissions
|
6323
|
+
|
6324
|
+
def initialize(**args)
|
6325
|
+
update!(**args)
|
6326
|
+
end
|
6327
|
+
|
6328
|
+
# Update properties of this object
|
6329
|
+
def update!(**args)
|
6330
|
+
@permissions = args[:permissions] if args.key?(:permissions)
|
6331
|
+
end
|
6332
|
+
end
|
6333
|
+
|
6334
|
+
# Response message for `TestIamPermissions` method.
|
6335
|
+
class TestIamPermissionsResponse
|
6336
|
+
include Google::Apis::Core::Hashable
|
6337
|
+
|
6338
|
+
# A subset of `TestPermissionsRequest.permissions` that the caller is
|
6339
|
+
# allowed.
|
6340
|
+
# Corresponds to the JSON property `permissions`
|
6341
|
+
# @return [Array<String>]
|
6342
|
+
attr_accessor :permissions
|
6343
|
+
|
6344
|
+
def initialize(**args)
|
6345
|
+
update!(**args)
|
6346
|
+
end
|
6347
|
+
|
6348
|
+
# Update properties of this object
|
6349
|
+
def update!(**args)
|
6350
|
+
@permissions = args[:permissions] if args.key?(:permissions)
|
6351
|
+
end
|
6352
|
+
end
|
6353
|
+
|
5788
6354
|
#
|
5789
6355
|
class TimePartitioning
|
5790
6356
|
include Google::Apis::Core::Hashable
|