google-api-client 0.39.2 → 0.40.1

data/generated/google/apis/cloudasset_v1/representations.rb

@@ -70,6 +70,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class Explanation
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class ExportAssetsRequest
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -184,6 +190,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class IamPolicySearchResult
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class ListFeedsResponse
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -202,6 +214,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class Permissions
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class Policy
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -220,6 +238,24 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class ResourceSearchResult
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class SearchAllIamPoliciesResponse
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class SearchAllResourcesResponse
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class Status
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -324,6 +360,14 @@ module Google
         end
       end
       
+      class Explanation
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          hash :matched_permissions, as: 'matchedPermissions', class: Google::Apis::CloudassetV1::Permissions, decorator: Google::Apis::CloudassetV1::Permissions::Representation
+      
+        end
+      end
+      
       class ExportAssetsRequest
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -522,6 +566,18 @@ module Google
         end
       end
       
+      class IamPolicySearchResult
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :explanation, as: 'explanation', class: Google::Apis::CloudassetV1::Explanation, decorator: Google::Apis::CloudassetV1::Explanation::Representation
+      
+          property :policy, as: 'policy', class: Google::Apis::CloudassetV1::Policy, decorator: Google::Apis::CloudassetV1::Policy::Representation
+      
+          property :project, as: 'project'
+          property :resource, as: 'resource'
+        end
+      end
+      
       class ListFeedsResponse
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -552,6 +608,13 @@ module Google
         end
       end
       
+      class Permissions
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          collection :permissions, as: 'permissions'
+        end
+      end
+      
       class Policy
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -577,12 +640,46 @@ module Google
           hash :data, as: 'data'
           property :discovery_document_uri, as: 'discoveryDocumentUri'
           property :discovery_name, as: 'discoveryName'
+          property :location, as: 'location'
           property :parent, as: 'parent'
           property :resource_url, as: 'resourceUrl'
           property :version, as: 'version'
         end
       end
       
+      class ResourceSearchResult
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          hash :additional_attributes, as: 'additionalAttributes'
+          property :asset_type, as: 'assetType'
+          property :description, as: 'description'
+          property :display_name, as: 'displayName'
+          hash :labels, as: 'labels'
+          property :location, as: 'location'
+          property :name, as: 'name'
+          collection :network_tags, as: 'networkTags'
+          property :project, as: 'project'
+        end
+      end
+      
+      class SearchAllIamPoliciesResponse
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :next_page_token, as: 'nextPageToken'
+          collection :results, as: 'results', class: Google::Apis::CloudassetV1::IamPolicySearchResult, decorator: Google::Apis::CloudassetV1::IamPolicySearchResult::Representation
+      
+        end
+      end
+      
+      class SearchAllResourcesResponse
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :next_page_token, as: 'nextPageToken'
+          collection :results, as: 'results', class: Google::Apis::CloudassetV1::ResourceSearchResult, decorator: Google::Apis::CloudassetV1::ResourceSearchResult::Representation
+      
+        end
+      end
+      
       class Status
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation

data/generated/google/apis/cloudasset_v1/service.rb

@@ -265,14 +265,11 @@ module Google
         #   organization number (such as "organizations/123"), a project ID (such as
         #   "projects/my-project-id")", or a project number (such as "projects/12345").
         # @param [Array<String>, String] asset_names
-        #   A list of the full names of the assets. For example:
+        #   A list of the full names of the assets.
+        #   See: https://cloud.google.com/asset-inventory/docs/resource-name-format
+        #   Example:
         #   `//compute.googleapis.com/projects/my_project_123/zones/zone1/instances/
         #   instance1`.
-        #   See [Resource
-        #   Names](https://cloud.google.com/apis/design/resource_names#full_resource_name)
-        #   and [Resource Name
-        #   Format](https://cloud.google.com/asset-inventory/docs/resource-name-format)
-        #   for more info.
         #   The request becomes a no-op if the asset name list is empty, and the max
         #   size of the asset name list is 100 in one request.
         # @param [String] content_type
@@ -314,9 +311,13 @@ module Google
         end
         
         # Exports assets with time and resource types to a given Cloud Storage
-        # location. The output format is newline-delimited JSON.
+        # location. The output format is newline-delimited JSON. Each line represents
+        # a google.cloud.asset.v1.Asset in the JSON format.
         # This API implements the google.longrunning.Operation API allowing you
-        # to keep track of the export.
+        # to keep track of the export. We recommend intervals of at least 2 seconds
+        # with exponential retry to poll the export operation result. For
+        # regular-size resource parent, the export operation usually finishes within
+        # 5 minutes.
         # @param [String] parent
         #   Required. The relative name of the root asset. This can only be an
         #   organization number (such as "organizations/123"), a project ID (such as
@@ -351,6 +352,183 @@ module Google
           command.query['quotaUser'] = quota_user unless quota_user.nil?
           execute_or_queue_command(command, &block)
         end
+        
+        # Searches all the IAM policies within the given accessible scope (e.g., a
+        # project, a folder or an organization). Callers should have
+        # cloud.assets.SearchAllIamPolicies permission upon the requested scope,
+        # otherwise the request will be rejected.
+        # @param [String] scope
+        #   Required. A scope can be a project, a folder or an organization. The search is
+        #   limited to the IAM policies within the `scope`.
+        #   The allowed values are:
+        #   * projects/`PROJECT_ID`
+        #   * projects/`PROJECT_NUMBER`
+        #   * folders/`FOLDER_NUMBER`
+        #   * organizations/`ORGANIZATION_NUMBER`
+        # @param [Fixnum] page_size
+        #   Optional. The page size for search result pagination. Page size is capped at
+        #   500 even
+        #   if a larger value is given. If set to zero, server will pick an appropriate
+        #   default. Returned results may be fewer than requested. When this happens,
+        #   there could be more results as long as `next_page_token` is returned.
+        # @param [String] page_token
+        #   Optional. If present, retrieve the next batch of results from the preceding
+        #   call to
+        #   this method. `page_token` must be the value of `next_page_token` from the
+        #   previous response. The values of all other method parameters must be
+        #   identical to those in the previous call.
+        # @param [String] query
+        #   Optional. The query statement. An empty query can be specified to search all
+        #   the IAM
+        #   policies within the given `scope`.
+        #   Examples:
+        #   * `policy : "amy@gmail.com"` to find Cloud IAM policy bindings that
+        #   specify user "amy@gmail.com".
+        #   * `policy : "roles/compute.admin"` to find Cloud IAM policy bindings that
+        #   specify the Compute Admin role.
+        #   * `policy.role.permissions : "storage.buckets.update"` to find Cloud IAM
+        #   policy bindings that specify a role containing "storage.buckets.update"
+        #   permission.
+        #   * `resource : "organizations/123"` to find Cloud IAM policy bindings that
+        #   are set on "organizations/123".
+        #   * `(resource : ("organizations/123" OR "folders/1234") AND policy : "amy")`
+        #   to find Cloud IAM policy bindings that are set on "organizations/123" or
+        #   "folders/1234", and also specify user "amy".
+        #   See [how to construct a
+        #   query](https://cloud.google.com/asset-inventory/docs/searching-iam-policies#
+        #   how_to_construct_a_query)
+        #   for more details.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudassetV1::SearchAllIamPoliciesResponse] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudassetV1::SearchAllIamPoliciesResponse]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def search_all_iam_policies(scope, page_size: nil, page_token: nil, query: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+scope}:searchAllIamPolicies', options)
+          command.response_representation = Google::Apis::CloudassetV1::SearchAllIamPoliciesResponse::Representation
+          command.response_class = Google::Apis::CloudassetV1::SearchAllIamPoliciesResponse
+          command.params['scope'] = scope unless scope.nil?
+          command.query['pageSize'] = page_size unless page_size.nil?
+          command.query['pageToken'] = page_token unless page_token.nil?
+          command.query['query'] = query unless query.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Searches all the resources within the given accessible scope (e.g., a
+        # project, a folder or an organization). Callers should have
+        # cloud.assets.SearchAllResources permission upon the requested scope,
+        # otherwise the request will be rejected.
+        # @param [String] scope
+        #   Required. A scope can be a project, a folder or an organization. The search is
+        #   limited to the resources within the `scope`.
+        #   The allowed values are:
+        #   * projects/`PROJECT_ID`
+        #   * projects/`PROJECT_NUMBER`
+        #   * folders/`FOLDER_NUMBER`
+        #   * organizations/`ORGANIZATION_NUMBER`
+        # @param [Array<String>, String] asset_types
+        #   Optional. A list of asset types that this request searches for. If empty, it
+        #   will
+        #   search all the [searchable asset
+        #   types](https://cloud.google.com/asset-inventory/docs/supported-asset-types#
+        #   searchable_asset_types).
+        # @param [String] order_by
+        #   Optional. A comma separated list of fields specifying the sorting order of the
+        #   results. The default order is ascending. Add " DESC" after the field name
+        #   to indicate descending order. Redundant space characters are ignored.
+        #   Example: "location DESC, name". See [supported resource metadata
+        #   fields](https://cloud.google.com/asset-inventory/docs/searching-resources#
+        #   query_on_resource_metadata_fields)
+        #   for more details.
+        # @param [Fixnum] page_size
+        #   Optional. The page size for search result pagination. Page size is capped at
+        #   500 even
+        #   if a larger value is given. If set to zero, server will pick an appropriate
+        #   default. Returned results may be fewer than requested. When this happens,
+        #   there could be more results as long as `next_page_token` is returned.
+        # @param [String] page_token
+        #   Optional. If present, then retrieve the next batch of results from the
+        #   preceding call
+        #   to this method. `page_token` must be the value of `next_page_token` from
+        #   the previous response. The values of all other method parameters, must be
+        #   identical to those in the previous call.
+        # @param [String] query
+        #   Optional. The query statement. An empty query can be specified to search all
+        #   the
+        #   resources of certain `asset_types` within the given `scope`.
+        #   Examples:
+        #   * `name : "Important"` to find Cloud resources whose name contains
+        #   "Important" as a word.
+        #   * `displayName : "Impor*"` to find Cloud resources whose display name
+        #   contains "Impor" as a word prefix.
+        #   * `description : "*por*"` to find Cloud resources whose description
+        #   contains "por" as a substring.
+        #   * `location : "us-west*"` to find Cloud resources whose location is
+        #   prefixed with "us-west".
+        #   * `labels : "prod"` to find Cloud resources whose labels contain "prod" as
+        #   a key or value.
+        #   * `labels.env : "prod"` to find Cloud resources which have a label "env"
+        #   and its value is "prod".
+        #   * `labels.env : *` to find Cloud resources which have a label "env".
+        #   * `"Important"` to find Cloud resources which contain "Important" as a word
+        #   in any of the searchable fields.
+        #   * `"Impor*"` to find Cloud resources which contain "Impor" as a word prefix
+        #   in any of the searchable fields.
+        #   * `"*por*"` to find Cloud resources which contain "por" as a substring in
+        #   any of the searchable fields.
+        #   * `("Important" AND location : ("us-west1" OR "global"))` to find Cloud
+        #   resources which contain "Important" as a word in any of the searchable
+        #   fields and are also located in the "us-west1" region or the "global"
+        #   location.
+        #   See [how to construct a
+        #   query](https://cloud.google.com/asset-inventory/docs/searching-resources#
+        #   how_to_construct_a_query)
+        #   for more details.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudassetV1::SearchAllResourcesResponse] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudassetV1::SearchAllResourcesResponse]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def search_all_resources(scope, asset_types: nil, order_by: nil, page_size: nil, page_token: nil, query: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+scope}:searchAllResources', options)
+          command.response_representation = Google::Apis::CloudassetV1::SearchAllResourcesResponse::Representation
+          command.response_class = Google::Apis::CloudassetV1::SearchAllResourcesResponse
+          command.params['scope'] = scope unless scope.nil?
+          command.query['assetTypes'] = asset_types unless asset_types.nil?
+          command.query['orderBy'] = order_by unless order_by.nil?
+          command.query['pageSize'] = page_size unless page_size.nil?
+          command.query['pageToken'] = page_token unless page_token.nil?
+          command.query['query'] = query unless query.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
 
         protected
 

data/generated/google/apis/cloudasset_v1beta1.rb

@@ -25,7 +25,7 @@ module Google
     # @see https://cloud.google.com/asset-inventory/docs/quickstart
     module CloudassetV1beta1
       VERSION = 'V1beta1'
-      REVISION = '20200221'
+      REVISION = '20200515'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/cloudasset_v1beta1/classes.rb

@@ -39,10 +39,13 @@ module Google
         # Google groups, and domains (such as G Suite). A `role` is a named list of
         # permissions; each `role` can be an IAM predefined role or a user-created
         # custom role.
-        # Optionally, a `binding` can specify a `condition`, which is a logical
-        # expression that allows access to a resource only if the expression evaluates
-        # to `true`. A condition can add constraints based on attributes of the
-        # request, the resource, or both.
+        # For some types of Google Cloud resources, a `binding` can also specify a
+        # `condition`, which is a logical expression that allows access to a resource
+        # only if the expression evaluates to `true`. A condition can add constraints
+        # based on attributes of the request, the resource, or both. To learn which
+        # resources support conditions in their IAM policies, see the
+        # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-
+        # policies).
         # **JSON example:**
         # `
         # "bindings": [
@@ -57,7 +60,9 @@ module Google
         # `,
         # `
         # "role": "roles/resourcemanager.organizationViewer",
-        # "members": ["user:eve@example.com"],
+        # "members": [
+        # "user:eve@example.com"
+        # ],
         # "condition": `
         # "title": "expirable access",
         # "description": "Does not grant access after Sep 2020",
@@ -574,10 +579,13 @@ module Google
       # Google groups, and domains (such as G Suite). A `role` is a named list of
       # permissions; each `role` can be an IAM predefined role or a user-created
       # custom role.
-      # Optionally, a `binding` can specify a `condition`, which is a logical
-      # expression that allows access to a resource only if the expression evaluates
-      # to `true`. A condition can add constraints based on attributes of the
-      # request, the resource, or both.
+      # For some types of Google Cloud resources, a `binding` can also specify a
+      # `condition`, which is a logical expression that allows access to a resource
+      # only if the expression evaluates to `true`. A condition can add constraints
+      # based on attributes of the request, the resource, or both. To learn which
+      # resources support conditions in their IAM policies, see the
+      # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-
+      # policies).
       # **JSON example:**
       # `
       # "bindings": [
@@ -592,7 +600,9 @@ module Google
       # `,
       # `
       # "role": "roles/resourcemanager.organizationViewer",
-      # "members": ["user:eve@example.com"],
+      # "members": [
+      # "user:eve@example.com"
+      # ],
       # "condition": `
       # "title": "expirable access",
       # "description": "Does not grant access after Sep 2020",
@@ -670,6 +680,9 @@ module Google
         # the conditions in the version `3` policy are lost.
         # If a policy does not include any conditions, operations on that policy may
         # specify any valid version or leave the field unset.
+        # To learn which resources support conditions in their IAM policies, see the
+        # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-
+        # policies).
         # Corresponds to the JSON property `version`
         # @return [Fixnum]
         attr_accessor :version

data/generated/google/apis/cloudasset_v1beta1/service.rb

@@ -50,7 +50,10 @@ module Google
         # Exports assets with time and resource types to a given Cloud Storage
         # location. The output format is newline-delimited JSON.
         # This API implements the google.longrunning.Operation API allowing you
-        # to keep track of the export.
+        # to keep track of the export. We recommend intervals of at least 2 seconds
+        # with exponential retry to poll the export operation result. For
+        # regular-size resource parent, the export operation usually finishes within
+        # 5 minutes.
         # @param [String] parent
         #   Required. The relative name of the root asset. This can only be an
         #   organization number (such as "organizations/123"), a project ID (such as
@@ -179,7 +182,10 @@ module Google
         # Exports assets with time and resource types to a given Cloud Storage
         # location. The output format is newline-delimited JSON.
         # This API implements the google.longrunning.Operation API allowing you
-        # to keep track of the export.
+        # to keep track of the export. We recommend intervals of at least 2 seconds
+        # with exponential retry to poll the export operation result. For
+        # regular-size resource parent, the export operation usually finishes within
+        # 5 minutes.
         # @param [String] parent
         #   Required. The relative name of the root asset. This can only be an
         #   organization number (such as "organizations/123"), a project ID (such as
@@ -308,7 +314,10 @@ module Google
         # Exports assets with time and resource types to a given Cloud Storage
         # location. The output format is newline-delimited JSON.
         # This API implements the google.longrunning.Operation API allowing you
-        # to keep track of the export.
+        # to keep track of the export. We recommend intervals of at least 2 seconds
+        # with exponential retry to poll the export operation result. For
+        # regular-size resource parent, the export operation usually finishes within
+        # 5 minutes.
         # @param [String] parent
         #   Required. The relative name of the root asset. This can only be an
         #   organization number (such as "organizations/123"), a project ID (such as