google-api-client 0.39.2 → 0.40.1

data/generated/google/apis/homegraph_v1.rb

@@ -25,7 +25,7 @@ module Google
     # @see https://developers.google.com/actions/smarthome/create-app#request-sync
     module HomegraphV1
       VERSION = 'V1'
-      REVISION = '20200415'
+      REVISION = '20200522'
     end
   end
 end

data/generated/google/apis/homegraph_v1/classes.rb

@@ -476,6 +476,9 @@ module Google
         attr_accessor :event_id
       
         # Token to maintain state in the follow up notification response.
+        # Deprecated. See the [notifications
+        # guide](https://developers.google.com/assistant/smarthome/develop/notifications)
+        # for details on implementing follow up notifications.
         # Corresponds to the JSON property `followUpToken`
         # @return [String]
         attr_accessor :follow_up_token

data/generated/google/apis/iam_v1.rb

@@ -27,7 +27,7 @@ module Google
     # @see https://cloud.google.com/iam/
     module IamV1
       VERSION = 'V1'
-      REVISION = '20200221'
+      REVISION = '20200515'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/iam_v1/classes.rb

@@ -886,10 +886,13 @@ module Google
       # Google groups, and domains (such as G Suite). A `role` is a named list of
       # permissions; each `role` can be an IAM predefined role or a user-created
       # custom role.
-      # Optionally, a `binding` can specify a `condition`, which is a logical
-      # expression that allows access to a resource only if the expression evaluates
-      # to `true`. A condition can add constraints based on attributes of the
-      # request, the resource, or both.
+      # For some types of Google Cloud resources, a `binding` can also specify a
+      # `condition`, which is a logical expression that allows access to a resource
+      # only if the expression evaluates to `true`. A condition can add constraints
+      # based on attributes of the request, the resource, or both. To learn which
+      # resources support conditions in their IAM policies, see the
+      # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-
+      # policies).
       # **JSON example:**
       # `
       # "bindings": [
@@ -904,7 +907,9 @@ module Google
       # `,
       # `
       # "role": "roles/resourcemanager.organizationViewer",
-      # "members": ["user:eve@example.com"],
+      # "members": [
+      # "user:eve@example.com"
+      # ],
       # "condition": `
       # "title": "expirable access",
       # "description": "Does not grant access after Sep 2020",
@@ -982,6 +987,9 @@ module Google
         # the conditions in the version `3` policy are lost.
         # If a policy does not include any conditions, operations on that policy may
         # specify any valid version or leave the field unset.
+        # To learn which resources support conditions in their IAM policies, see the
+        # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-
+        # policies).
         # Corresponds to the JSON property `version`
         # @return [Fixnum]
         attr_accessor :version
@@ -1454,10 +1462,13 @@ module Google
         # Google groups, and domains (such as G Suite). A `role` is a named list of
         # permissions; each `role` can be an IAM predefined role or a user-created
         # custom role.
-        # Optionally, a `binding` can specify a `condition`, which is a logical
-        # expression that allows access to a resource only if the expression evaluates
-        # to `true`. A condition can add constraints based on attributes of the
-        # request, the resource, or both.
+        # For some types of Google Cloud resources, a `binding` can also specify a
+        # `condition`, which is a logical expression that allows access to a resource
+        # only if the expression evaluates to `true`. A condition can add constraints
+        # based on attributes of the request, the resource, or both. To learn which
+        # resources support conditions in their IAM policies, see the
+        # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-
+        # policies).
         # **JSON example:**
         # `
         # "bindings": [
@@ -1472,7 +1483,9 @@ module Google
         # `,
         # `
         # "role": "roles/resourcemanager.organizationViewer",
-        # "members": ["user:eve@example.com"],
+        # "members": [
+        # "user:eve@example.com"
+        # ],
         # "condition": `
         # "title": "expirable access",
         # "description": "Does not grant access after Sep 2020",
@@ -1510,8 +1523,7 @@ module Google
         # OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only
         # the fields in the mask will be modified. If no mask is provided, the
         # following default mask is used:
-        # paths: "bindings, etag"
-        # This field is only used by Cloud IAM.
+        # `paths: "bindings, etag"`
         # Corresponds to the JSON property `updateMask`
         # @return [String]
         attr_accessor :update_mask

data/generated/google/apis/iam_v1/service.rb

@@ -899,6 +899,10 @@ module Google
         # Disabling a service account that is bound to VMs, Apps, Functions, or
         # other jobs will cause those jobs to lose access to resources if they are
         # using the disabled service account.
+        # Previously issued Access tokens for a service account will be rejected
+        # while the service account is disabled but will start working again if the
+        # account is re-enabled. Issuance of new tokens will fail while the account
+        # is disabled.
         # To improve reliability of your services and avoid unexpected outages, it
         # is recommended to first disable a service account rather than delete it.
         # After disabling the service account, wait at least 24 hours to verify there
@@ -1041,6 +1045,9 @@ module Google
         #   Requests for policies with any conditional bindings must specify version 3.
         #   Policies without any conditional bindings may specify any valid value or
         #   leave the field unset.
+        #   To learn which resources support conditions in their IAM policies, see the
+        #   [IAM
+        #   documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user

data/generated/google/apis/iamcredentials_v1.rb

@@ -25,7 +25,7 @@ module Google
     # @see https://cloud.google.com/iam/docs/creating-short-lived-service-account-credentials
     module IamcredentialsV1
       VERSION = 'V1'
-      REVISION = '20200417'
+      REVISION = '20200515'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/iamcredentials_v1/classes.rb

@@ -194,12 +194,24 @@ module Google
       class SignBlobResponse
         include Google::Apis::Core::Hashable
       
-        # The ID of the key used to sign the blob.
+        # The ID of the key used to sign the blob. The key used for signing will
+        # remain valid for at least 12 hours after the blob is signed. To verify the
+        # signature, you can retrieve the public key in several formats from the
+        # following endpoints:
+        # - RSA public key wrapped in an X.509 v3 certificate:
+        # `https://www.googleapis.com/service_accounts/v1/metadata/x509/`ACCOUNT_EMAIL``
+        # - Raw key in JSON format:
+        # `https://www.googleapis.com/service_accounts/v1/metadata/raw/`ACCOUNT_EMAIL``
+        # - JSON Web Key (JWK):
+        # `https://www.googleapis.com/service_accounts/v1/metadata/jwk/`ACCOUNT_EMAIL``
         # Corresponds to the JSON property `keyId`
         # @return [String]
         attr_accessor :key_id
       
         # The signature for the blob. Does not include the original blob.
+        # After the key pair referenced by the `key_id` response field expires,
+        # Google no longer exposes the public key that can be used to verify the
+        # blob. As a result, the receiver can no longer verify the signature.
         # Corresponds to the JSON property `signedBlob`
         # NOTE: Values are automatically base64 encoded/decoded in the client library.
         # @return [String]
@@ -257,7 +269,16 @@ module Google
       class SignJwtResponse
         include Google::Apis::Core::Hashable
       
-        # The ID of the key used to sign the JWT.
+        # The ID of the key used to sign the JWT. The key used for signing will
+        # remain valid for at least 12 hours after the JWT is signed. To verify the
+        # signature, you can retrieve the public key in several formats from the
+        # following endpoints:
+        # - RSA public key wrapped in an X.509 v3 certificate:
+        # `https://www.googleapis.com/service_accounts/v1/metadata/x509/`ACCOUNT_EMAIL``
+        # - Raw key in JSON format:
+        # `https://www.googleapis.com/service_accounts/v1/metadata/raw/`ACCOUNT_EMAIL``
+        # - JSON Web Key (JWK):
+        # `https://www.googleapis.com/service_accounts/v1/metadata/jwk/`ACCOUNT_EMAIL``
         # Corresponds to the JSON property `keyId`
         # @return [String]
         attr_accessor :key_id
@@ -265,6 +286,9 @@ module Google
         # The signed JWT. Contains the automatically generated header; the
         # client-supplied payload; and the signature, which is generated using the
         # key referenced by the `kid` field in the header.
+        # After the key pair referenced by the `key_id` response field expires,
+        # Google no longer exposes the public key that can be used to verify the JWT.
+        # As a result, the receiver can no longer verify the signature.
         # Corresponds to the JSON property `signedJwt`
         # @return [String]
         attr_accessor :signed_jwt

data/generated/google/apis/iap_v1.rb

@@ -25,7 +25,7 @@ module Google
     # @see https://cloud.google.com/iap
     module IapV1
       VERSION = 'V1'
-      REVISION = '20200327'
+      REVISION = '20200511'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/iap_v1/classes.rb

@@ -99,6 +99,12 @@ module Google
         # @return [Google::Apis::IapV1::AccessDeniedPageSettings]
         attr_accessor :access_denied_page_settings
       
+        # The Domain value to set for cookies generated by IAP. This value is not
+        # validated by the API, but will be ignored at runtime if invalid.
+        # Corresponds to the JSON property `cookieDomain`
+        # @return [String]
+        attr_accessor :cookie_domain
+      
         # Configuration for RCTokens generated for CSM workloads protected by IAP.
         # RCTokens are IAP generated JWTs that can be verified at the application. The
         # RCToken is primarily used for ISTIO deployments, and can be scoped to a
@@ -114,6 +120,7 @@ module Google
         # Update properties of this object
         def update!(**args)
           @access_denied_page_settings = args[:access_denied_page_settings] if args.key?(:access_denied_page_settings)
+          @cookie_domain = args[:cookie_domain] if args.key?(:cookie_domain)
           @csm_settings = args[:csm_settings] if args.key?(:csm_settings)
         end
       end
@@ -219,7 +226,7 @@ module Google
         attr_accessor :name
       
         # Output only. Whether the brand is only intended for usage inside the
-        # GSuite organization only.
+        # G Suite organization only.
         # Corresponds to the JSON property `orgInternalOnly`
         # @return [Boolean]
         attr_accessor :org_internal_only
@@ -431,6 +438,9 @@ module Google
         # Requests for policies with any conditional bindings must specify version 3.
         # Policies without any conditional bindings may specify any valid value or
         # leave the field unset.
+        # To learn which resources support conditions in their IAM policies, see the
+        # [IAM
+        # documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
         # Corresponds to the JSON property `requestedPolicyVersion`
         # @return [Fixnum]
         attr_accessor :requested_policy_version
@@ -596,10 +606,13 @@ module Google
       # Google groups, and domains (such as G Suite). A `role` is a named list of
       # permissions; each `role` can be an IAM predefined role or a user-created
       # custom role.
-      # Optionally, a `binding` can specify a `condition`, which is a logical
-      # expression that allows access to a resource only if the expression evaluates
-      # to `true`. A condition can add constraints based on attributes of the
-      # request, the resource, or both.
+      # For some types of Google Cloud resources, a `binding` can also specify a
+      # `condition`, which is a logical expression that allows access to a resource
+      # only if the expression evaluates to `true`. A condition can add constraints
+      # based on attributes of the request, the resource, or both. To learn which
+      # resources support conditions in their IAM policies, see the
+      # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-
+      # policies).
       # **JSON example:**
       # `
       # "bindings": [
@@ -614,7 +627,9 @@ module Google
       # `,
       # `
       # "role": "roles/resourcemanager.organizationViewer",
-      # "members": ["user:eve@example.com"],
+      # "members": [
+      # "user:eve@example.com"
+      # ],
       # "condition": `
       # "title": "expirable access",
       # "description": "Does not grant access after Sep 2020",
@@ -687,6 +702,9 @@ module Google
         # the conditions in the version `3` policy are lost.
         # If a policy does not include any conditions, operations on that policy may
         # specify any valid version or leave the field unset.
+        # To learn which resources support conditions in their IAM policies, see the
+        # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-
+        # policies).
         # Corresponds to the JSON property `version`
         # @return [Fixnum]
         attr_accessor :version
@@ -761,7 +779,7 @@ module Google
         # The location of the Policy.
         # Must be empty or "global" for Policies owned by global IAM.  Must name a
         # region from prodspec/cloud-iam-cloudspec for Regional IAM Policies, see
-        # http://go/iam-faq#where-is-iam-currently-deployed.
+        # go/iam-faq#where-is-iam-currently-deployed.
         # For Local IAM:
         # This field should be set to "local".
         # Corresponds to the JSON property `region`
@@ -876,10 +894,13 @@ module Google
         # Google groups, and domains (such as G Suite). A `role` is a named list of
         # permissions; each `role` can be an IAM predefined role or a user-created
         # custom role.
-        # Optionally, a `binding` can specify a `condition`, which is a logical
-        # expression that allows access to a resource only if the expression evaluates
-        # to `true`. A condition can add constraints based on attributes of the
-        # request, the resource, or both.
+        # For some types of Google Cloud resources, a `binding` can also specify a
+        # `condition`, which is a logical expression that allows access to a resource
+        # only if the expression evaluates to `true`. A condition can add constraints
+        # based on attributes of the request, the resource, or both. To learn which
+        # resources support conditions in their IAM policies, see the
+        # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-
+        # policies).
         # **JSON example:**
         # `
         # "bindings": [
@@ -894,7 +915,9 @@ module Google
         # `,
         # `
         # "role": "roles/resourcemanager.organizationViewer",
-        # "members": ["user:eve@example.com"],
+        # "members": [
+        # "user:eve@example.com"
+        # ],
         # "condition": `
         # "title": "expirable access",
         # "description": "Does not grant access after Sep 2020",

data/generated/google/apis/iap_v1/representations.rb

@@ -198,6 +198,7 @@ module Google
         class Representation < Google::Apis::Core::JsonRepresentation
           property :access_denied_page_settings, as: 'accessDeniedPageSettings', class: Google::Apis::IapV1::AccessDeniedPageSettings, decorator: Google::Apis::IapV1::AccessDeniedPageSettings::Representation
       
+          property :cookie_domain, as: 'cookieDomain'
           property :csm_settings, as: 'csmSettings', class: Google::Apis::IapV1::CsmSettings, decorator: Google::Apis::IapV1::CsmSettings::Representation
       
         end

data/generated/google/apis/iap_v1/service.rb

@@ -156,7 +156,7 @@ module Google
         #   Required. Path to create the client in.
         #   In the following format:
         #   projects/`project_number/id`/brands/`brand`.
-        #   The project must belong to a GSuite account.
+        #   The project must belong to a G Suite account.
         # @param [Google::Apis::IapV1::IdentityAwareProxyClient] identity_aware_proxy_client_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.

data/generated/google/apis/iap_v1beta1.rb

@@ -25,7 +25,7 @@ module Google
     # @see https://cloud.google.com/iap
     module IapV1beta1
       VERSION = 'V1beta1'
-      REVISION = '20200309'
+      REVISION = '20200511'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/iap_v1beta1/classes.rb

@@ -197,6 +197,9 @@ module Google
         # Requests for policies with any conditional bindings must specify version 3.
         # Policies without any conditional bindings may specify any valid value or
         # leave the field unset.
+        # To learn which resources support conditions in their IAM policies, see the
+        # [IAM
+        # documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
         # Corresponds to the JSON property `requestedPolicyVersion`
         # @return [Fixnum]
         attr_accessor :requested_policy_version
@@ -218,10 +221,13 @@ module Google
       # Google groups, and domains (such as G Suite). A `role` is a named list of
       # permissions; each `role` can be an IAM predefined role or a user-created
       # custom role.
-      # Optionally, a `binding` can specify a `condition`, which is a logical
-      # expression that allows access to a resource only if the expression evaluates
-      # to `true`. A condition can add constraints based on attributes of the
-      # request, the resource, or both.
+      # For some types of Google Cloud resources, a `binding` can also specify a
+      # `condition`, which is a logical expression that allows access to a resource
+      # only if the expression evaluates to `true`. A condition can add constraints
+      # based on attributes of the request, the resource, or both. To learn which
+      # resources support conditions in their IAM policies, see the
+      # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-
+      # policies).
       # **JSON example:**
       # `
       # "bindings": [
@@ -236,7 +242,9 @@ module Google
       # `,
       # `
       # "role": "roles/resourcemanager.organizationViewer",
-      # "members": ["user:eve@example.com"],
+      # "members": [
+      # "user:eve@example.com"
+      # ],
       # "condition": `
       # "title": "expirable access",
       # "description": "Does not grant access after Sep 2020",
@@ -309,6 +317,9 @@ module Google
         # the conditions in the version `3` policy are lost.
         # If a policy does not include any conditions, operations on that policy may
         # specify any valid version or leave the field unset.
+        # To learn which resources support conditions in their IAM policies, see the
+        # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-
+        # policies).
         # Corresponds to the JSON property `version`
         # @return [Fixnum]
         attr_accessor :version
@@ -336,10 +347,13 @@ module Google
         # Google groups, and domains (such as G Suite). A `role` is a named list of
         # permissions; each `role` can be an IAM predefined role or a user-created
         # custom role.
-        # Optionally, a `binding` can specify a `condition`, which is a logical
-        # expression that allows access to a resource only if the expression evaluates
-        # to `true`. A condition can add constraints based on attributes of the
-        # request, the resource, or both.
+        # For some types of Google Cloud resources, a `binding` can also specify a
+        # `condition`, which is a logical expression that allows access to a resource
+        # only if the expression evaluates to `true`. A condition can add constraints
+        # based on attributes of the request, the resource, or both. To learn which
+        # resources support conditions in their IAM policies, see the
+        # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-
+        # policies).
         # **JSON example:**
         # `
         # "bindings": [
@@ -354,7 +368,9 @@ module Google
         # `,
         # `
         # "role": "roles/resourcemanager.organizationViewer",
-        # "members": ["user:eve@example.com"],
+        # "members": [
+        # "user:eve@example.com"
+        # ],
         # "condition": `
         # "title": "expirable access",
         # "description": "Does not grant access after Sep 2020",

data/generated/google/apis/jobs_v3.rb

@@ -26,7 +26,7 @@ module Google
     # @see https://cloud.google.com/talent-solution/job-search/docs/
     module JobsV3
       VERSION = 'V3'
-      REVISION = '20200219'
+      REVISION = '20200506'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/jobs_v3p1beta1.rb

@@ -26,7 +26,7 @@ module Google
     # @see https://cloud.google.com/talent-solution/job-search/docs/
     module JobsV3p1beta1
       VERSION = 'V3p1beta1'
-      REVISION = '20200219'
+      REVISION = '20200506'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/memcache_v1beta2.rb

@@ -26,7 +26,7 @@ module Google
     # @see https://cloud.google.com/memorystore/
     module MemcacheV1beta2
       VERSION = 'V1beta2'
-      REVISION = '20200414'
+      REVISION = '20200603'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/memcache_v1beta2/classes.rb

@@ -464,6 +464,12 @@ module Google
         # @return [Hash<String,Google::Apis::MemcacheV1beta2::GoogleCloudSaasacceleratorManagementProvidersV1MaintenanceSchedule>]
         attr_accessor :maintenance_schedules
       
+        # Maintenance settings associated with instance. Allows service producers and
+        # end users to assign settings that controls maintenance on this instance.
+        # Corresponds to the JSON property `maintenanceSettings`
+        # @return [Google::Apis::MemcacheV1beta2::GoogleCloudSaasacceleratorManagementProvidersV1MaintenanceSettings]
+        attr_accessor :maintenance_settings
+      
         # Unique name of the resource. It uses the form:
         # `projects/`project_id`/locations/`location_id`/instances/`instance_id``
         # Corresponds to the JSON property `name`
@@ -531,6 +537,7 @@ module Google
           @labels = args[:labels] if args.key?(:labels)
           @maintenance_policy_names = args[:maintenance_policy_names] if args.key?(:maintenance_policy_names)
           @maintenance_schedules = args[:maintenance_schedules] if args.key?(:maintenance_schedules)
+          @maintenance_settings = args[:maintenance_settings] if args.key?(:maintenance_settings)
           @name = args[:name] if args.key?(:name)
           @producer_metadata = args[:producer_metadata] if args.key?(:producer_metadata)
           @provisioned_resources = args[:provisioned_resources] if args.key?(:provisioned_resources)
@@ -586,6 +593,30 @@ module Google
         end
       end
       
+      # Maintenance settings associated with instance. Allows service producers and
+      # end users to assign settings that controls maintenance on this instance.
+      class GoogleCloudSaasacceleratorManagementProvidersV1MaintenanceSettings
+        include Google::Apis::Core::Hashable
+      
+        # Optional. Exclude instance from maintenance. When true, rollout service will
+        # not
+        # attempt maintenance on the instance. Rollout service will include the
+        # instance in reported rollout progress as not attempted.
+        # Corresponds to the JSON property `exclude`
+        # @return [Boolean]
+        attr_accessor :exclude
+        alias_method :exclude?, :exclude
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @exclude = args[:exclude] if args.key?(:exclude)
+        end
+      end
+      
       # Node information for custom per-node SLO implementations.
       # SSA does not support per-node SLO, but producers can populate per-node
       # information in SloMetadata for custom precomputations.
@@ -794,7 +825,7 @@ module Google
       class Instance
         include Google::Apis::Core::Hashable
       
-        # Optional. The full name of the Google Compute Engine
+        # The full name of the Google Compute Engine
         # [network](/compute/docs/networks-and-firewalls#networks) to which the
         # instance is connected. If left unspecified, the `default` network
         # will be used.
@@ -812,7 +843,7 @@ module Google
         # @return [String]
         attr_accessor :discovery_endpoint
       
-        # Optional. User provided name for the instance only used for display
+        # User provided name for the instance only used for display
         # purposes. Cannot be more than 80 characters.
         # Corresponds to the JSON property `displayName`
         # @return [String]
@@ -823,7 +854,7 @@ module Google
         # @return [Array<Google::Apis::MemcacheV1beta2::InstanceMessage>]
         attr_accessor :instance_messages
       
-        # Optional. Resource labels to represent user-provided metadata.
+        # Resource labels to represent user-provided metadata.
         # Refer to cloud documentation on labels for more details.
         # https://cloud.google.com/compute/docs/labeling-resources
         # Corresponds to the JSON property `labels`
@@ -844,7 +875,7 @@ module Google
         # @return [Array<Google::Apis::MemcacheV1beta2::Node>]
         attr_accessor :memcache_nodes
       
-        # Optional. The major version of Memcached software.
+        # The major version of Memcached software.
         # If not provided, latest supported version will be used. Currently the
         # latest supported major version is MEMCACHE_1_5.
         # The minor version will be automatically determined by our system based on
@@ -890,7 +921,7 @@ module Google
         # @return [String]
         attr_accessor :update_time
       
-        # Optional. Zones where Memcached nodes should be provisioned in.
+        # Zones where Memcached nodes should be provisioned in.
         # Memcached nodes will be equally distributed across these zones. If not
         # provided, the service will by default create nodes in all zones in the
         # region for the instance.
@@ -1255,10 +1286,13 @@ module Google
       # Google groups, and domains (such as G Suite). A `role` is a named list of
       # permissions; each `role` can be an IAM predefined role or a user-created
       # custom role.
-      # Optionally, a `binding` can specify a `condition`, which is a logical
-      # expression that allows access to a resource only if the expression evaluates
-      # to `true`. A condition can add constraints based on attributes of the
-      # request, the resource, or both.
+      # For some types of Google Cloud resources, a `binding` can also specify a
+      # `condition`, which is a logical expression that allows access to a resource
+      # only if the expression evaluates to `true`. A condition can add constraints
+      # based on attributes of the request, the resource, or both. To learn which
+      # resources support conditions in their IAM policies, see the
+      # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-
+      # policies).
       # **JSON example:**
       # `
       # "bindings": [
@@ -1273,7 +1307,9 @@ module Google
       # `,
       # `
       # "role": "roles/resourcemanager.organizationViewer",
-      # "members": ["user:eve@example.com"],
+      # "members": [
+      # "user:eve@example.com"
+      # ],
       # "condition": `
       # "title": "expirable access",
       # "description": "Does not grant access after Sep 2020",
@@ -1351,6 +1387,9 @@ module Google
         # the conditions in the version `3` policy are lost.
         # If a policy does not include any conditions, operations on that policy may
         # specify any valid version or leave the field unset.
+        # To learn which resources support conditions in their IAM policies, see the
+        # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-
+        # policies).
         # Corresponds to the JSON property `version`
         # @return [Fixnum]
         attr_accessor :version
@@ -1379,10 +1418,13 @@ module Google
         # Google groups, and domains (such as G Suite). A `role` is a named list of
         # permissions; each `role` can be an IAM predefined role or a user-created
         # custom role.
-        # Optionally, a `binding` can specify a `condition`, which is a logical
-        # expression that allows access to a resource only if the expression evaluates
-        # to `true`. A condition can add constraints based on attributes of the
-        # request, the resource, or both.
+        # For some types of Google Cloud resources, a `binding` can also specify a
+        # `condition`, which is a logical expression that allows access to a resource
+        # only if the expression evaluates to `true`. A condition can add constraints
+        # based on attributes of the request, the resource, or both. To learn which
+        # resources support conditions in their IAM policies, see the
+        # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-
+        # policies).
         # **JSON example:**
         # `
         # "bindings": [
@@ -1397,7 +1439,9 @@ module Google
         # `,
         # `
         # "role": "roles/resourcemanager.organizationViewer",
-        # "members": ["user:eve@example.com"],
+        # "members": [
+        # "user:eve@example.com"
+        # ],
         # "condition": `
         # "title": "expirable access",
         # "description": "Does not grant access after Sep 2020",
@@ -1435,8 +1479,7 @@ module Google
         # OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only
         # the fields in the mask will be modified. If no mask is provided, the
         # following default mask is used:
-        # paths: "bindings, etag"
-        # This field is only used by Cloud IAM.
+        # `paths: "bindings, etag"`
         # Corresponds to the JSON property `updateMask`
         # @return [String]
         attr_accessor :update_mask