google-api-client 0.39.4 → 0.41.0

data/generated/google/apis/cloudasset_v1beta1/representations.rb

@@ -70,6 +70,90 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class GoogleCloudOrgpolicyV1BooleanPolicy
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleCloudOrgpolicyV1ListPolicy
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleCloudOrgpolicyV1Policy
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleCloudOrgpolicyV1RestoreDefault
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1AccessLevel
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1AccessPolicy
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1BasicLevel
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1Condition
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1CustomLevel
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1DevicePolicy
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1OsConstraint
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1ServicePerimeter
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1VpcAccessibleServices
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class Operation
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -115,12 +199,20 @@ module Google
       class Asset
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
+          property :access_level, as: 'accessLevel', class: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1AccessLevel, decorator: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1AccessLevel::Representation
+      
+          property :access_policy, as: 'accessPolicy', class: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1AccessPolicy, decorator: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1AccessPolicy::Representation
+      
           property :asset_type, as: 'assetType'
           property :iam_policy, as: 'iamPolicy', class: Google::Apis::CloudassetV1beta1::Policy, decorator: Google::Apis::CloudassetV1beta1::Policy::Representation
       
           property :name, as: 'name'
+          collection :org_policy, as: 'orgPolicy', class: Google::Apis::CloudassetV1beta1::GoogleCloudOrgpolicyV1Policy, decorator: Google::Apis::CloudassetV1beta1::GoogleCloudOrgpolicyV1Policy::Representation
+      
           property :resource, as: 'resource', class: Google::Apis::CloudassetV1beta1::Resource, decorator: Google::Apis::CloudassetV1beta1::Resource::Representation
       
+          property :service_perimeter, as: 'servicePerimeter', class: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1ServicePerimeter, decorator: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1ServicePerimeter::Representation
+      
         end
       end
       
@@ -188,6 +280,155 @@ module Google
         end
       end
       
+      class GoogleCloudOrgpolicyV1BooleanPolicy
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :enforced, as: 'enforced'
+        end
+      end
+      
+      class GoogleCloudOrgpolicyV1ListPolicy
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :all_values, as: 'allValues'
+          collection :allowed_values, as: 'allowedValues'
+          collection :denied_values, as: 'deniedValues'
+          property :inherit_from_parent, as: 'inheritFromParent'
+          property :suggested_value, as: 'suggestedValue'
+        end
+      end
+      
+      class GoogleCloudOrgpolicyV1Policy
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :boolean_policy, as: 'booleanPolicy', class: Google::Apis::CloudassetV1beta1::GoogleCloudOrgpolicyV1BooleanPolicy, decorator: Google::Apis::CloudassetV1beta1::GoogleCloudOrgpolicyV1BooleanPolicy::Representation
+      
+          property :constraint, as: 'constraint'
+          property :etag, :base64 => true, as: 'etag'
+          property :list_policy, as: 'listPolicy', class: Google::Apis::CloudassetV1beta1::GoogleCloudOrgpolicyV1ListPolicy, decorator: Google::Apis::CloudassetV1beta1::GoogleCloudOrgpolicyV1ListPolicy::Representation
+      
+          property :restore_default, as: 'restoreDefault', class: Google::Apis::CloudassetV1beta1::GoogleCloudOrgpolicyV1RestoreDefault, decorator: Google::Apis::CloudassetV1beta1::GoogleCloudOrgpolicyV1RestoreDefault::Representation
+      
+          property :update_time, as: 'updateTime'
+          property :version, as: 'version'
+        end
+      end
+      
+      class GoogleCloudOrgpolicyV1RestoreDefault
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+        end
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1AccessLevel
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :basic, as: 'basic', class: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1BasicLevel, decorator: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1BasicLevel::Representation
+      
+          property :custom, as: 'custom', class: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1CustomLevel, decorator: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1CustomLevel::Representation
+      
+          property :description, as: 'description'
+          property :name, as: 'name'
+          property :title, as: 'title'
+        end
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1AccessPolicy
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :etag, as: 'etag'
+          property :name, as: 'name'
+          property :parent, as: 'parent'
+          property :title, as: 'title'
+        end
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1BasicLevel
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :combining_function, as: 'combiningFunction'
+          collection :conditions, as: 'conditions', class: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1Condition, decorator: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1Condition::Representation
+      
+        end
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1Condition
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :device_policy, as: 'devicePolicy', class: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1DevicePolicy, decorator: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1DevicePolicy::Representation
+      
+          collection :ip_subnetworks, as: 'ipSubnetworks'
+          collection :members, as: 'members'
+          property :negate, as: 'negate'
+          collection :regions, as: 'regions'
+          collection :required_access_levels, as: 'requiredAccessLevels'
+        end
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1CustomLevel
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :expr, as: 'expr', class: Google::Apis::CloudassetV1beta1::Expr, decorator: Google::Apis::CloudassetV1beta1::Expr::Representation
+      
+        end
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1DevicePolicy
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          collection :allowed_device_management_levels, as: 'allowedDeviceManagementLevels'
+          collection :allowed_encryption_statuses, as: 'allowedEncryptionStatuses'
+          collection :os_constraints, as: 'osConstraints', class: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1OsConstraint, decorator: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1OsConstraint::Representation
+      
+          property :require_admin_approval, as: 'requireAdminApproval'
+          property :require_corp_owned, as: 'requireCorpOwned'
+          property :require_screenlock, as: 'requireScreenlock'
+        end
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1OsConstraint
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :minimum_version, as: 'minimumVersion'
+          property :os_type, as: 'osType'
+          property :require_verified_chrome_os, as: 'requireVerifiedChromeOs'
+        end
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1ServicePerimeter
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :description, as: 'description'
+          property :name, as: 'name'
+          property :perimeter_type, as: 'perimeterType'
+          property :spec, as: 'spec', class: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig, decorator: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig::Representation
+      
+          property :status, as: 'status', class: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig, decorator: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig::Representation
+      
+          property :title, as: 'title'
+          property :use_explicit_dry_run_spec, as: 'useExplicitDryRunSpec'
+        end
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          collection :access_levels, as: 'accessLevels'
+          collection :resources, as: 'resources'
+          collection :restricted_services, as: 'restrictedServices'
+          property :vpc_accessible_services, as: 'vpcAccessibleServices', class: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1VpcAccessibleServices, decorator: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1VpcAccessibleServices::Representation
+      
+        end
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1VpcAccessibleServices
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          collection :allowed_services, as: 'allowedServices'
+          property :enable_restriction, as: 'enableRestriction'
+        end
+      end
+      
       class Operation
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation

data/generated/google/apis/cloudasset_v1beta1/service.rb

@@ -50,7 +50,10 @@ module Google
         # Exports assets with time and resource types to a given Cloud Storage
         # location. The output format is newline-delimited JSON.
         # This API implements the google.longrunning.Operation API allowing you
-        # to keep track of the export.
+        # to keep track of the export. We recommend intervals of at least 2 seconds
+        # with exponential retry to poll the export operation result. For
+        # regular-size resource parent, the export operation usually finishes within
+        # 5 minutes.
         # @param [String] parent
         #   Required. The relative name of the root asset. This can only be an
         #   organization number (such as "organizations/123"), a project ID (such as
@@ -119,10 +122,10 @@ module Google
         end
         
         # Batch gets the update history of assets that overlap a time window.
-        # For RESOURCE content, this API outputs history with asset in both
-        # non-delete or deleted status.
         # For IAM_POLICY content, this API outputs history when the asset and its
         # attached IAM POLICY both exist. This can create gaps in the output history.
+        # Otherwise, this API outputs history with asset in both non-delete or
+        # deleted status.
         # If a specified asset does not exist, this API returns an INVALID_ARGUMENT
         # error.
         # @param [String] parent
@@ -141,8 +144,8 @@ module Google
         # @param [String] content_type
         #   Optional. The content type.
         # @param [String] read_time_window_end_time
-        #   End time of the time window (inclusive).
-        #   Current timestamp if not specified.
+        #   End time of the time window (inclusive). If not specified, the current
+        #   timestamp is used instead.
         # @param [String] read_time_window_start_time
         #   Start time of the time window (exclusive).
         # @param [String] fields
@@ -179,7 +182,10 @@ module Google
         # Exports assets with time and resource types to a given Cloud Storage
         # location. The output format is newline-delimited JSON.
         # This API implements the google.longrunning.Operation API allowing you
-        # to keep track of the export.
+        # to keep track of the export. We recommend intervals of at least 2 seconds
+        # with exponential retry to poll the export operation result. For
+        # regular-size resource parent, the export operation usually finishes within
+        # 5 minutes.
         # @param [String] parent
         #   Required. The relative name of the root asset. This can only be an
         #   organization number (such as "organizations/123"), a project ID (such as
@@ -248,10 +254,10 @@ module Google
         end
         
         # Batch gets the update history of assets that overlap a time window.
-        # For RESOURCE content, this API outputs history with asset in both
-        # non-delete or deleted status.
         # For IAM_POLICY content, this API outputs history when the asset and its
         # attached IAM POLICY both exist. This can create gaps in the output history.
+        # Otherwise, this API outputs history with asset in both non-delete or
+        # deleted status.
         # If a specified asset does not exist, this API returns an INVALID_ARGUMENT
         # error.
         # @param [String] parent
@@ -270,8 +276,8 @@ module Google
         # @param [String] content_type
         #   Optional. The content type.
         # @param [String] read_time_window_end_time
-        #   End time of the time window (inclusive).
-        #   Current timestamp if not specified.
+        #   End time of the time window (inclusive). If not specified, the current
+        #   timestamp is used instead.
         # @param [String] read_time_window_start_time
         #   Start time of the time window (exclusive).
         # @param [String] fields
@@ -308,7 +314,10 @@ module Google
         # Exports assets with time and resource types to a given Cloud Storage
         # location. The output format is newline-delimited JSON.
         # This API implements the google.longrunning.Operation API allowing you
-        # to keep track of the export.
+        # to keep track of the export. We recommend intervals of at least 2 seconds
+        # with exponential retry to poll the export operation result. For
+        # regular-size resource parent, the export operation usually finishes within
+        # 5 minutes.
         # @param [String] parent
         #   Required. The relative name of the root asset. This can only be an
         #   organization number (such as "organizations/123"), a project ID (such as

data/generated/google/apis/cloudasset_v1p1beta1.rb

@@ -25,7 +25,7 @@ module Google
     # @see https://cloud.google.com/asset-inventory/docs/quickstart
     module CloudassetV1p1beta1
       VERSION = 'V1p1beta1'
-      REVISION = '20200410'
+      REVISION = '20200605'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/cloudasset_v1p1beta1/classes.rb

@@ -34,7 +34,7 @@ module Google
       # `
       # "audit_configs": [
       # `
-      # "service": "allServices"
+      # "service": "allServices",
       # "audit_log_configs": [
       # `
       # "log_type": "DATA_READ",
@@ -43,18 +43,18 @@ module Google
       # ]
       # `,
       # `
-      # "log_type": "DATA_WRITE",
+      # "log_type": "DATA_WRITE"
       # `,
       # `
-      # "log_type": "ADMIN_READ",
+      # "log_type": "ADMIN_READ"
       # `
       # ]
       # `,
       # `
-      # "service": "sampleservice.googleapis.com"
+      # "service": "sampleservice.googleapis.com",
       # "audit_log_configs": [
       # `
-      # "log_type": "DATA_READ",
+      # "log_type": "DATA_READ"
       # `,
       # `
       # "log_type": "DATA_WRITE",
@@ -106,7 +106,7 @@ module Google
       # ]
       # `,
       # `
-      # "log_type": "DATA_WRITE",
+      # "log_type": "DATA_WRITE"
       # `
       # ]
       # `
@@ -323,10 +323,13 @@ module Google
         # Google groups, and domains (such as G Suite). A `role` is a named list of
         # permissions; each `role` can be an IAM predefined role or a user-created
         # custom role.
-        # Optionally, a `binding` can specify a `condition`, which is a logical
-        # expression that allows access to a resource only if the expression evaluates
-        # to `true`. A condition can add constraints based on attributes of the
-        # request, the resource, or both.
+        # For some types of Google Cloud resources, a `binding` can also specify a
+        # `condition`, which is a logical expression that allows access to a resource
+        # only if the expression evaluates to `true`. A condition can add constraints
+        # based on attributes of the request, the resource, or both. To learn which
+        # resources support conditions in their IAM policies, see the
+        # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-
+        # policies).
         # **JSON example:**
         # `
         # "bindings": [
@@ -341,7 +344,9 @@ module Google
         # `,
         # `
         # "role": "roles/resourcemanager.organizationViewer",
-        # "members": ["user:eve@example.com"],
+        # "members": [
+        # "user:eve@example.com"
+        # ],
         # "condition": `
         # "title": "expirable access",
         # "description": "Does not grant access after Sep 2020",
@@ -431,10 +436,13 @@ module Google
       # Google groups, and domains (such as G Suite). A `role` is a named list of
       # permissions; each `role` can be an IAM predefined role or a user-created
       # custom role.
-      # Optionally, a `binding` can specify a `condition`, which is a logical
-      # expression that allows access to a resource only if the expression evaluates
-      # to `true`. A condition can add constraints based on attributes of the
-      # request, the resource, or both.
+      # For some types of Google Cloud resources, a `binding` can also specify a
+      # `condition`, which is a logical expression that allows access to a resource
+      # only if the expression evaluates to `true`. A condition can add constraints
+      # based on attributes of the request, the resource, or both. To learn which
+      # resources support conditions in their IAM policies, see the
+      # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-
+      # policies).
       # **JSON example:**
       # `
       # "bindings": [
@@ -449,7 +457,9 @@ module Google
       # `,
       # `
       # "role": "roles/resourcemanager.organizationViewer",
-      # "members": ["user:eve@example.com"],
+      # "members": [
+      # "user:eve@example.com"
+      # ],
       # "condition": `
       # "title": "expirable access",
       # "description": "Does not grant access after Sep 2020",
@@ -527,6 +537,9 @@ module Google
         # the conditions in the version `3` policy are lost.
         # If a policy does not include any conditions, operations on that policy may
         # specify any valid version or leave the field unset.
+        # To learn which resources support conditions in their IAM policies, see the
+        # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-
+        # policies).
         # Corresponds to the JSON property `version`
         # @return [Fixnum]
         attr_accessor :version
@@ -627,6 +640,14 @@ module Google
         # @return [String]
         attr_accessor :display_name
       
+        # Labels associated with this resource. See [Labelling and grouping GCP
+        # resources](https://cloud.google.com/blog/products/gcp/labelling-and-grouping-
+        # your-google-cloud-platform-resources)
+        # for more information.
+        # Corresponds to the JSON property `labels`
+        # @return [Hash<String,String>]
+        attr_accessor :labels
+      
         # Location can be "global", regional like "us-east1", or zonal like
         # "us-west1-b".
         # Corresponds to the JSON property `location`
@@ -643,6 +664,15 @@ module Google
         # @return [String]
         attr_accessor :name
       
+        # Network tags associated with this resource. Like labels, network tags are a
+        # type of annotations used to group GCP resources. See [Labelling GCP
+        # resources](lhttps://cloud.google.com/blog/products/gcp/labelling-and-grouping-
+        # your-google-cloud-platform-resources)
+        # for more information.
+        # Corresponds to the JSON property `networkTags`
+        # @return [Array<String>]
+        attr_accessor :network_tags
+      
         # The project that this resource belongs to, in the form of
         # `projects/`project_number``.
         # Corresponds to the JSON property `project`
@@ -659,8 +689,10 @@ module Google
           @asset_type = args[:asset_type] if args.key?(:asset_type)
           @description = args[:description] if args.key?(:description)
           @display_name = args[:display_name] if args.key?(:display_name)
+          @labels = args[:labels] if args.key?(:labels)
           @location = args[:location] if args.key?(:location)
           @name = args[:name] if args.key?(:name)
+          @network_tags = args[:network_tags] if args.key?(:network_tags)
           @project = args[:project] if args.key?(:project)
         end
       end