google-api-client 0.43.0 → 0.48.0

data/generated/google/apis/iam_v1.rb

@@ -27,7 +27,7 @@ module Google
     # @see https://cloud.google.com/iam/
     module IamV1
       VERSION = 'V1'
-      REVISION = '20200709'
+      REVISION = '20201022'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/iamcredentials_v1/classes.rb

@@ -26,32 +26,32 @@ module Google
       class GenerateAccessTokenRequest
         include Google::Apis::Core::Hashable
       
-        # The sequence of service accounts in a delegation chain. Each service
-        # account must be granted the `roles/iam.serviceAccountTokenCreator` role
-        # on its next service account in the chain. The last service account in the
-        # chain must be granted the `roles/iam.serviceAccountTokenCreator` role
-        # on the service account that is specified in the `name` field of the
-        # request.
-        # The delegates must have the following format:
-        # `projects/-/serviceAccounts/`ACCOUNT_EMAIL_OR_UNIQUEID``. The `-` wildcard
-        # character is required; replacing it with a project ID is invalid.
+        # The sequence of service accounts in a delegation chain. Each service account
+        # must be granted the `roles/iam.serviceAccountTokenCreator` role on its next
+        # service account in the chain. The last service account in the chain must be
+        # granted the `roles/iam.serviceAccountTokenCreator` role on the service account
+        # that is specified in the `name` field of the request. The delegates must have
+        # the following format: `projects/-/serviceAccounts/`ACCOUNT_EMAIL_OR_UNIQUEID``.
+        # The `-` wildcard character is required; replacing it with a project ID is
+        # invalid.
         # Corresponds to the JSON property `delegates`
         # @return [Array<String>]
         attr_accessor :delegates
       
-        # The desired lifetime duration of the access token in seconds.
-        # Must be set to a value less than or equal to 3600 (1 hour). If a value is
-        # not specified, the token's lifetime will be set to a default value of one
-        # hour.
+        # The desired lifetime duration of the access token in seconds. By default, the
+        # maximum allowed value is 1 hour. To set a lifetime of up to 12 hours, you can
+        # add the service account as an allowed value in an Organization Policy that
+        # enforces the `constraints/iam.allowServiceAccountCredentialLifetimeExtension`
+        # constraint. See detailed instructions at https://cloud.google.com/iam/help/
+        # credentials/lifetime If a value is not specified, the token's lifetime will be
+        # set to a default value of 1 hour.
         # Corresponds to the JSON property `lifetime`
         # @return [String]
         attr_accessor :lifetime
       
         # Required. Code to identify the scopes to be included in the OAuth 2.0 access
-        # token.
-        # See https://developers.google.com/identity/protocols/googlescopes for more
-        # information.
-        # At least one value required.
+        # token. See https://developers.google.com/identity/protocols/googlescopes for
+        # more information. At least one value required.
         # Corresponds to the JSON property `scope`
         # @return [Array<String>]
         attr_accessor :scope
@@ -77,8 +77,7 @@ module Google
         # @return [String]
         attr_accessor :access_token
       
-        # Token expiration time.
-        # The expiration time is always set.
+        # Token expiration time. The expiration time is always set.
         # Corresponds to the JSON property `expireTime`
         # @return [String]
         attr_accessor :expire_time
@@ -99,27 +98,25 @@ module Google
         include Google::Apis::Core::Hashable
       
         # Required. The audience for the token, such as the API or account that this
-        # token
-        # grants access to.
+        # token grants access to.
         # Corresponds to the JSON property `audience`
         # @return [String]
         attr_accessor :audience
       
-        # The sequence of service accounts in a delegation chain. Each service
-        # account must be granted the `roles/iam.serviceAccountTokenCreator` role
-        # on its next service account in the chain. The last service account in the
-        # chain must be granted the `roles/iam.serviceAccountTokenCreator` role
-        # on the service account that is specified in the `name` field of the
-        # request.
-        # The delegates must have the following format:
-        # `projects/-/serviceAccounts/`ACCOUNT_EMAIL_OR_UNIQUEID``. The `-` wildcard
-        # character is required; replacing it with a project ID is invalid.
+        # The sequence of service accounts in a delegation chain. Each service account
+        # must be granted the `roles/iam.serviceAccountTokenCreator` role on its next
+        # service account in the chain. The last service account in the chain must be
+        # granted the `roles/iam.serviceAccountTokenCreator` role on the service account
+        # that is specified in the `name` field of the request. The delegates must have
+        # the following format: `projects/-/serviceAccounts/`ACCOUNT_EMAIL_OR_UNIQUEID``.
+        # The `-` wildcard character is required; replacing it with a project ID is
+        # invalid.
         # Corresponds to the JSON property `delegates`
         # @return [Array<String>]
         attr_accessor :delegates
       
-        # Include the service account email in the token. If set to `true`, the
-        # token will contain `email` and `email_verified` claims.
+        # Include the service account email in the token. If set to `true`, the token
+        # will contain `email` and `email_verified` claims.
         # Corresponds to the JSON property `includeEmail`
         # @return [Boolean]
         attr_accessor :include_email
@@ -160,15 +157,14 @@ module Google
       class SignBlobRequest
         include Google::Apis::Core::Hashable
       
-        # The sequence of service accounts in a delegation chain. Each service
-        # account must be granted the `roles/iam.serviceAccountTokenCreator` role
-        # on its next service account in the chain. The last service account in the
-        # chain must be granted the `roles/iam.serviceAccountTokenCreator` role
-        # on the service account that is specified in the `name` field of the
-        # request.
-        # The delegates must have the following format:
-        # `projects/-/serviceAccounts/`ACCOUNT_EMAIL_OR_UNIQUEID``. The `-` wildcard
-        # character is required; replacing it with a project ID is invalid.
+        # The sequence of service accounts in a delegation chain. Each service account
+        # must be granted the `roles/iam.serviceAccountTokenCreator` role on its next
+        # service account in the chain. The last service account in the chain must be
+        # granted the `roles/iam.serviceAccountTokenCreator` role on the service account
+        # that is specified in the `name` field of the request. The delegates must have
+        # the following format: `projects/-/serviceAccounts/`ACCOUNT_EMAIL_OR_UNIQUEID``.
+        # The `-` wildcard character is required; replacing it with a project ID is
+        # invalid.
         # Corresponds to the JSON property `delegates`
         # @return [Array<String>]
         attr_accessor :delegates
@@ -194,24 +190,22 @@ module Google
       class SignBlobResponse
         include Google::Apis::Core::Hashable
       
-        # The ID of the key used to sign the blob. The key used for signing will
-        # remain valid for at least 12 hours after the blob is signed. To verify the
-        # signature, you can retrieve the public key in several formats from the
-        # following endpoints:
-        # - RSA public key wrapped in an X.509 v3 certificate:
-        # `https://www.googleapis.com/service_accounts/v1/metadata/x509/`ACCOUNT_EMAIL``
-        # - Raw key in JSON format:
-        # `https://www.googleapis.com/service_accounts/v1/metadata/raw/`ACCOUNT_EMAIL``
-        # - JSON Web Key (JWK):
-        # `https://www.googleapis.com/service_accounts/v1/metadata/jwk/`ACCOUNT_EMAIL``
+        # The ID of the key used to sign the blob. The key used for signing will remain
+        # valid for at least 12 hours after the blob is signed. To verify the signature,
+        # you can retrieve the public key in several formats from the following
+        # endpoints: - RSA public key wrapped in an X.509 v3 certificate: `https://www.
+        # googleapis.com/service_accounts/v1/metadata/x509/`ACCOUNT_EMAIL`` - Raw key in
+        # JSON format: `https://www.googleapis.com/service_accounts/v1/metadata/raw/`
+        # ACCOUNT_EMAIL`` - JSON Web Key (JWK): `https://www.googleapis.com/
+        # service_accounts/v1/metadata/jwk/`ACCOUNT_EMAIL``
         # Corresponds to the JSON property `keyId`
         # @return [String]
         attr_accessor :key_id
       
-        # The signature for the blob. Does not include the original blob.
-        # After the key pair referenced by the `key_id` response field expires,
-        # Google no longer exposes the public key that can be used to verify the
-        # blob. As a result, the receiver can no longer verify the signature.
+        # The signature for the blob. Does not include the original blob. After the key
+        # pair referenced by the `key_id` response field expires, Google no longer
+        # exposes the public key that can be used to verify the blob. As a result, the
+        # receiver can no longer verify the signature.
         # Corresponds to the JSON property `signedBlob`
         # NOTE: Values are automatically base64 encoded/decoded in the client library.
         # @return [String]
@@ -232,25 +226,23 @@ module Google
       class SignJwtRequest
         include Google::Apis::Core::Hashable
       
-        # The sequence of service accounts in a delegation chain. Each service
-        # account must be granted the `roles/iam.serviceAccountTokenCreator` role
-        # on its next service account in the chain. The last service account in the
-        # chain must be granted the `roles/iam.serviceAccountTokenCreator` role
-        # on the service account that is specified in the `name` field of the
-        # request.
-        # The delegates must have the following format:
-        # `projects/-/serviceAccounts/`ACCOUNT_EMAIL_OR_UNIQUEID``. The `-` wildcard
-        # character is required; replacing it with a project ID is invalid.
+        # The sequence of service accounts in a delegation chain. Each service account
+        # must be granted the `roles/iam.serviceAccountTokenCreator` role on its next
+        # service account in the chain. The last service account in the chain must be
+        # granted the `roles/iam.serviceAccountTokenCreator` role on the service account
+        # that is specified in the `name` field of the request. The delegates must have
+        # the following format: `projects/-/serviceAccounts/`ACCOUNT_EMAIL_OR_UNIQUEID``.
+        # The `-` wildcard character is required; replacing it with a project ID is
+        # invalid.
         # Corresponds to the JSON property `delegates`
         # @return [Array<String>]
         attr_accessor :delegates
       
         # Required. The JWT payload to sign. Must be a serialized JSON object that
-        # contains a
-        # JWT Claims Set. For example: ``"sub": "user@example.com", "iat": 313435``
-        # If the JWT Claims Set contains an expiration time (`exp`) claim, it must be
-        # an integer timestamp that is not in the past and no more than 12 hours in
-        # the future.
+        # contains a JWT Claims Set. For example: ``"sub": "user@example.com", "iat":
+        # 313435`` If the JWT Claims Set contains an expiration time (`exp`) claim, it
+        # must be an integer timestamp that is not in the past and no more than 12 hours
+        # in the future.
         # Corresponds to the JSON property `payload`
         # @return [String]
         attr_accessor :payload
@@ -270,26 +262,24 @@ module Google
       class SignJwtResponse
         include Google::Apis::Core::Hashable
       
-        # The ID of the key used to sign the JWT. The key used for signing will
-        # remain valid for at least 12 hours after the JWT is signed. To verify the
-        # signature, you can retrieve the public key in several formats from the
-        # following endpoints:
-        # - RSA public key wrapped in an X.509 v3 certificate:
-        # `https://www.googleapis.com/service_accounts/v1/metadata/x509/`ACCOUNT_EMAIL``
-        # - Raw key in JSON format:
-        # `https://www.googleapis.com/service_accounts/v1/metadata/raw/`ACCOUNT_EMAIL``
-        # - JSON Web Key (JWK):
-        # `https://www.googleapis.com/service_accounts/v1/metadata/jwk/`ACCOUNT_EMAIL``
+        # The ID of the key used to sign the JWT. The key used for signing will remain
+        # valid for at least 12 hours after the JWT is signed. To verify the signature,
+        # you can retrieve the public key in several formats from the following
+        # endpoints: - RSA public key wrapped in an X.509 v3 certificate: `https://www.
+        # googleapis.com/service_accounts/v1/metadata/x509/`ACCOUNT_EMAIL`` - Raw key in
+        # JSON format: `https://www.googleapis.com/service_accounts/v1/metadata/raw/`
+        # ACCOUNT_EMAIL`` - JSON Web Key (JWK): `https://www.googleapis.com/
+        # service_accounts/v1/metadata/jwk/`ACCOUNT_EMAIL``
         # Corresponds to the JSON property `keyId`
         # @return [String]
         attr_accessor :key_id
       
-        # The signed JWT. Contains the automatically generated header; the
-        # client-supplied payload; and the signature, which is generated using the
-        # key referenced by the `kid` field in the header.
-        # After the key pair referenced by the `key_id` response field expires,
-        # Google no longer exposes the public key that can be used to verify the JWT.
-        # As a result, the receiver can no longer verify the signature.
+        # The signed JWT. Contains the automatically generated header; the client-
+        # supplied payload; and the signature, which is generated using the key
+        # referenced by the `kid` field in the header. After the key pair referenced by
+        # the `key_id` response field expires, Google no longer exposes the public key
+        # that can be used to verify the JWT. As a result, the receiver can no longer
+        # verify the signature.
         # Corresponds to the JSON property `signedJwt`
         # @return [String]
         attr_accessor :signed_jwt

data/generated/google/apis/iamcredentials_v1/service.rb

@@ -22,7 +22,8 @@ module Google
     module IamcredentialsV1
       # IAM Service Account Credentials API
       #
-      # Creates short-lived credentials for impersonating IAM service accounts.
+      # Creates short-lived credentials for impersonating IAM service accounts. To
+      #  enable this API, you must enable the IAM API (iam.googleapis.com).
       #
       # @example
       #    require 'google/apis/iamcredentials_v1'
@@ -50,9 +51,9 @@ module Google
         # Generates an OAuth 2.0 access token for a service account.
         # @param [String] name
         #   Required. The resource name of the service account for which the credentials
-        #   are requested, in the following format:
-        #   `projects/-/serviceAccounts/`ACCOUNT_EMAIL_OR_UNIQUEID``. The `-` wildcard
-        #   character is required; replacing it with a project ID is invalid.
+        #   are requested, in the following format: `projects/-/serviceAccounts/`
+        #   ACCOUNT_EMAIL_OR_UNIQUEID``. The `-` wildcard character is required; replacing
+        #   it with a project ID is invalid.
         # @param [Google::Apis::IamcredentialsV1::GenerateAccessTokenRequest] generate_access_token_request_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
@@ -86,9 +87,9 @@ module Google
         # Generates an OpenID Connect ID token for a service account.
         # @param [String] name
         #   Required. The resource name of the service account for which the credentials
-        #   are requested, in the following format:
-        #   `projects/-/serviceAccounts/`ACCOUNT_EMAIL_OR_UNIQUEID``. The `-` wildcard
-        #   character is required; replacing it with a project ID is invalid.
+        #   are requested, in the following format: `projects/-/serviceAccounts/`
+        #   ACCOUNT_EMAIL_OR_UNIQUEID``. The `-` wildcard character is required; replacing
+        #   it with a project ID is invalid.
         # @param [Google::Apis::IamcredentialsV1::GenerateIdTokenRequest] generate_id_token_request_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
@@ -122,9 +123,9 @@ module Google
         # Signs a blob using a service account's system-managed private key.
         # @param [String] name
         #   Required. The resource name of the service account for which the credentials
-        #   are requested, in the following format:
-        #   `projects/-/serviceAccounts/`ACCOUNT_EMAIL_OR_UNIQUEID``. The `-` wildcard
-        #   character is required; replacing it with a project ID is invalid.
+        #   are requested, in the following format: `projects/-/serviceAccounts/`
+        #   ACCOUNT_EMAIL_OR_UNIQUEID``. The `-` wildcard character is required; replacing
+        #   it with a project ID is invalid.
         # @param [Google::Apis::IamcredentialsV1::SignBlobRequest] sign_blob_request_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
@@ -158,9 +159,9 @@ module Google
         # Signs a JWT using a service account's system-managed private key.
         # @param [String] name
         #   Required. The resource name of the service account for which the credentials
-        #   are requested, in the following format:
-        #   `projects/-/serviceAccounts/`ACCOUNT_EMAIL_OR_UNIQUEID``. The `-` wildcard
-        #   character is required; replacing it with a project ID is invalid.
+        #   are requested, in the following format: `projects/-/serviceAccounts/`
+        #   ACCOUNT_EMAIL_OR_UNIQUEID``. The `-` wildcard character is required; replacing
+        #   it with a project ID is invalid.
         # @param [Google::Apis::IamcredentialsV1::SignJwtRequest] sign_jwt_request_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.

data/generated/google/apis/iamcredentials_v1.rb

@@ -20,12 +20,13 @@ module Google
   module Apis
     # IAM Service Account Credentials API
     #
-    # Creates short-lived credentials for impersonating IAM service accounts.
+    # Creates short-lived credentials for impersonating IAM service accounts. To
+    # enable this API, you must enable the IAM API (iam.googleapis.com).
     #
     # @see https://cloud.google.com/iam/docs/creating-short-lived-service-account-credentials
     module IamcredentialsV1
       VERSION = 'V1'
-      REVISION = '20200612'
+      REVISION = '20201022'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'