google-api-client 0.43.0 → 0.48.0

data/generated/google/apis/binaryauthorization_v1/representations.rb

@@ -34,6 +34,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class AttestationOccurrence
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class Attestor
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -70,6 +76,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class Jwt
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class ListAttestorsResponse
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -94,6 +106,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class Signature
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class TestIamPermissionsRequest
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -112,6 +130,18 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class ValidateAttestationOccurrenceRequest
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class ValidateAttestationOccurrenceResponse
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class AdmissionRule
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -128,6 +158,17 @@ module Google
         end
       end
       
+      class AttestationOccurrence
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          collection :jwts, as: 'jwts', class: Google::Apis::BinaryauthorizationV1::Jwt, decorator: Google::Apis::BinaryauthorizationV1::Jwt::Representation
+      
+          property :serialized_payload, :base64 => true, as: 'serializedPayload'
+          collection :signatures, as: 'signatures', class: Google::Apis::BinaryauthorizationV1::Signature, decorator: Google::Apis::BinaryauthorizationV1::Signature::Representation
+      
+        end
+      end
+      
       class Attestor
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -153,6 +194,7 @@ module Google
       class Binding
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
+          property :binding_id, as: 'bindingId'
           property :condition, as: 'condition', class: Google::Apis::BinaryauthorizationV1::Expr, decorator: Google::Apis::BinaryauthorizationV1::Expr::Representation
       
           collection :members, as: 'members'
@@ -186,6 +228,13 @@ module Google
         end
       end
       
+      class Jwt
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :compact_jwt, as: 'compactJwt'
+        end
+      end
+      
       class ListAttestorsResponse
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -227,6 +276,14 @@ module Google
         end
       end
       
+      class Signature
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :public_key_id, as: 'publicKeyId'
+          property :signature, :base64 => true, as: 'signature'
+        end
+      end
+      
       class TestIamPermissionsRequest
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -250,6 +307,24 @@ module Google
       
         end
       end
+      
+      class ValidateAttestationOccurrenceRequest
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :attestation, as: 'attestation', class: Google::Apis::BinaryauthorizationV1::AttestationOccurrence, decorator: Google::Apis::BinaryauthorizationV1::AttestationOccurrence::Representation
+      
+          property :occurrence_note, as: 'occurrenceNote'
+          property :occurrence_resource_uri, as: 'occurrenceResourceUri'
+        end
+      end
+      
+      class ValidateAttestationOccurrenceResponse
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :denial_reason, as: 'denialReason'
+          property :result, as: 'result'
+        end
+      end
     end
   end
 end

data/generated/google/apis/binaryauthorization_v1/service.rb

@@ -48,15 +48,14 @@ module Google
           @batch_path = 'batch'
         end
         
-        # A policy specifies the attestors that must attest to
-        # a container image, before the project is allowed to deploy that
-        # image. There is at most one policy per project. All image admission
-        # requests are permitted if a project has no policy.
-        # Gets the policy for this project. Returns a default
-        # policy if the project does not have one.
+        # A policy specifies the attestors that must attest to a container image, before
+        # the project is allowed to deploy that image. There is at most one policy per
+        # project. All image admission requests are permitted if a project has no policy.
+        # Gets the policy for this project. Returns a default policy if the project
+        # does not have one.
         # @param [String] name
-        #   Required. The resource name of the policy to retrieve,
-        #   in the format `projects/*/policy`.
+        #   Required. The resource name of the policy to retrieve, in the format `projects/
+        #   */policy`.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -84,14 +83,13 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Creates or updates a project's policy, and returns a copy of the
-        # new policy. A policy is always updated as a whole, to avoid race
-        # conditions with concurrent policy enforcement (or management!)
-        # requests. Returns NOT_FOUND if the project does not exist, INVALID_ARGUMENT
-        # if the request is malformed.
+        # Creates or updates a project's policy, and returns a copy of the new policy. A
+        # policy is always updated as a whole, to avoid race conditions with concurrent
+        # policy enforcement (or management!) requests. Returns NOT_FOUND if the project
+        # does not exist, INVALID_ARGUMENT if the request is malformed.
         # @param [String] name
-        #   Output only. The resource name, in the format `projects/*/policy`. There is
-        #   at most one policy per project.
+        #   Output only. The resource name, in the format `projects/*/policy`. There is at
+        #   most one policy per project.
         # @param [Google::Apis::BinaryauthorizationV1::Policy] policy_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
@@ -122,10 +120,9 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Creates an attestor, and returns a copy of the new
-        # attestor. Returns NOT_FOUND if the project does not exist,
-        # INVALID_ARGUMENT if the request is malformed, ALREADY_EXISTS if the
-        # attestor already exists.
+        # Creates an attestor, and returns a copy of the new attestor. Returns NOT_FOUND
+        # if the project does not exist, INVALID_ARGUMENT if the request is malformed,
+        # ALREADY_EXISTS if the attestor already exists.
         # @param [String] parent
         #   Required. The parent of this attestor.
         # @param [Google::Apis::BinaryauthorizationV1::Attestor] attestor_object
@@ -161,11 +158,10 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Deletes an attestor. Returns NOT_FOUND if the
-        # attestor does not exist.
+        # Deletes an attestor. Returns NOT_FOUND if the attestor does not exist.
         # @param [String] name
-        #   Required. The name of the attestors to delete, in the format
-        #   `projects/*/attestors/*`.
+        #   Required. The name of the attestors to delete, in the format `projects/*/
+        #   attestors/*`.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -193,11 +189,10 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Gets an attestor.
-        # Returns NOT_FOUND if the attestor does not exist.
+        # Gets an attestor. Returns NOT_FOUND if the attestor does not exist.
         # @param [String] name
-        #   Required. The name of the attestor to retrieve, in the format
-        #   `projects/*/attestors/*`.
+        #   Required. The name of the attestor to retrieve, in the format `projects/*/
+        #   attestors/*`.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -225,22 +220,19 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Gets the access control policy for a resource.
-        # Returns an empty policy if the resource exists and does not have a policy
-        # set.
+        # Gets the access control policy for a resource. Returns an empty policy if the
+        # resource exists and does not have a policy set.
         # @param [String] resource
-        #   REQUIRED: The resource for which the policy is being requested.
-        #   See the operation documentation for the appropriate value for this field.
+        #   REQUIRED: The resource for which the policy is being requested. See the
+        #   operation documentation for the appropriate value for this field.
         # @param [Fixnum] options_requested_policy_version
-        #   Optional. The policy format version to be returned.
-        #   Valid values are 0, 1, and 3. Requests specifying an invalid value will be
-        #   rejected.
-        #   Requests for policies with any conditional bindings must specify version 3.
-        #   Policies without any conditional bindings may specify any valid value or
-        #   leave the field unset.
-        #   To learn which resources support conditions in their IAM policies, see the
-        #   [IAM
-        #   documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
+        #   Optional. The policy format version to be returned. Valid values are 0, 1, and
+        #   3. Requests specifying an invalid value will be rejected. Requests for
+        #   policies with any conditional bindings must specify version 3. Policies
+        #   without any conditional bindings may specify any valid value or leave the
+        #   field unset. To learn which resources support conditions in their IAM policies,
+        #   see the [IAM documentation](https://cloud.google.com/iam/help/conditions/
+        #   resource-policies).
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -269,18 +261,17 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Lists attestors.
-        # Returns INVALID_ARGUMENT if the project does not exist.
+        # Lists attestors. Returns INVALID_ARGUMENT if the project does not exist.
         # @param [String] parent
-        #   Required. The resource name of the project associated with the
-        #   attestors, in the format `projects/*`.
+        #   Required. The resource name of the project associated with the attestors, in
+        #   the format `projects/*`.
         # @param [Fixnum] page_size
         #   Requested page size. The server may return fewer results than requested. If
         #   unspecified, the server will pick an appropriate default.
         # @param [String] page_token
         #   A token identifying a page of results the server should return. Typically,
-        #   this is the value of ListAttestorsResponse.next_page_token returned
-        #   from the previous call to the `ListAttestors` method.
+        #   this is the value of ListAttestorsResponse.next_page_token returned from the
+        #   previous call to the `ListAttestors` method.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -311,11 +302,11 @@ module Google
         end
         
         # Sets the access control policy on the specified resource. Replaces any
-        # existing policy.
-        # Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.
+        # existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `
+        # PERMISSION_DENIED` errors.
         # @param [String] resource
-        #   REQUIRED: The resource for which the policy is being specified.
-        #   See the operation documentation for the appropriate value for this field.
+        #   REQUIRED: The resource for which the policy is being specified. See the
+        #   operation documentation for the appropriate value for this field.
         # @param [Google::Apis::BinaryauthorizationV1::SetIamPolicyRequest] set_iam_policy_request_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
@@ -346,15 +337,14 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Returns permissions that a caller has on the specified resource.
-        # If the resource does not exist, this will return an empty set of
-        # permissions, not a `NOT_FOUND` error.
-        # Note: This operation is designed to be used for building permission-aware
-        # UIs and command-line tools, not for authorization checking. This operation
-        # may "fail open" without warning.
+        # Returns permissions that a caller has on the specified resource. If the
+        # resource does not exist, this will return an empty set of permissions, not a `
+        # NOT_FOUND` error. Note: This operation is designed to be used for building
+        # permission-aware UIs and command-line tools, not for authorization checking.
+        # This operation may "fail open" without warning.
         # @param [String] resource
-        #   REQUIRED: The resource for which the policy detail is being requested.
-        #   See the operation documentation for the appropriate value for this field.
+        #   REQUIRED: The resource for which the policy detail is being requested. See the
+        #   operation documentation for the appropriate value for this field.
         # @param [Google::Apis::BinaryauthorizationV1::TestIamPermissionsRequest] test_iam_permissions_request_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
@@ -385,11 +375,10 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Updates an attestor.
-        # Returns NOT_FOUND if the attestor does not exist.
+        # Updates an attestor. Returns NOT_FOUND if the attestor does not exist.
         # @param [String] name
-        #   Required. The resource name, in the format:
-        #   `projects/*/attestors/*`. This field may not be updated.
+        #   Required. The resource name, in the format: `projects/*/attestors/*`. This
+        #   field may not be updated.
         # @param [Google::Apis::BinaryauthorizationV1::Attestor] attestor_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
@@ -420,22 +409,54 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Gets the access control policy for a resource.
-        # Returns an empty policy if the resource exists and does not have a policy
-        # set.
+        # Returns whether the given Attestation for the given image URI was signed by
+        # the given Attestor
+        # @param [String] attestor
+        #   Required. The resource name of the Attestor of the occurrence, in the format `
+        #   projects/*/attestors/*`.
+        # @param [Google::Apis::BinaryauthorizationV1::ValidateAttestationOccurrenceRequest] validate_attestation_occurrence_request_object
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::BinaryauthorizationV1::ValidateAttestationOccurrenceResponse] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::BinaryauthorizationV1::ValidateAttestationOccurrenceResponse]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def validate_attestor_attestation_occurrence(attestor, validate_attestation_occurrence_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:post, 'v1/{+attestor}:validateAttestationOccurrence', options)
+          command.request_representation = Google::Apis::BinaryauthorizationV1::ValidateAttestationOccurrenceRequest::Representation
+          command.request_object = validate_attestation_occurrence_request_object
+          command.response_representation = Google::Apis::BinaryauthorizationV1::ValidateAttestationOccurrenceResponse::Representation
+          command.response_class = Google::Apis::BinaryauthorizationV1::ValidateAttestationOccurrenceResponse
+          command.params['attestor'] = attestor unless attestor.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Gets the access control policy for a resource. Returns an empty policy if the
+        # resource exists and does not have a policy set.
         # @param [String] resource
-        #   REQUIRED: The resource for which the policy is being requested.
-        #   See the operation documentation for the appropriate value for this field.
+        #   REQUIRED: The resource for which the policy is being requested. See the
+        #   operation documentation for the appropriate value for this field.
         # @param [Fixnum] options_requested_policy_version
-        #   Optional. The policy format version to be returned.
-        #   Valid values are 0, 1, and 3. Requests specifying an invalid value will be
-        #   rejected.
-        #   Requests for policies with any conditional bindings must specify version 3.
-        #   Policies without any conditional bindings may specify any valid value or
-        #   leave the field unset.
-        #   To learn which resources support conditions in their IAM policies, see the
-        #   [IAM
-        #   documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
+        #   Optional. The policy format version to be returned. Valid values are 0, 1, and
+        #   3. Requests specifying an invalid value will be rejected. Requests for
+        #   policies with any conditional bindings must specify version 3. Policies
+        #   without any conditional bindings may specify any valid value or leave the
+        #   field unset. To learn which resources support conditions in their IAM policies,
+        #   see the [IAM documentation](https://cloud.google.com/iam/help/conditions/
+        #   resource-policies).
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -465,11 +486,11 @@ module Google
         end
         
         # Sets the access control policy on the specified resource. Replaces any
-        # existing policy.
-        # Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.
+        # existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `
+        # PERMISSION_DENIED` errors.
         # @param [String] resource
-        #   REQUIRED: The resource for which the policy is being specified.
-        #   See the operation documentation for the appropriate value for this field.
+        #   REQUIRED: The resource for which the policy is being specified. See the
+        #   operation documentation for the appropriate value for this field.
         # @param [Google::Apis::BinaryauthorizationV1::SetIamPolicyRequest] set_iam_policy_request_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
@@ -500,15 +521,14 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Returns permissions that a caller has on the specified resource.
-        # If the resource does not exist, this will return an empty set of
-        # permissions, not a `NOT_FOUND` error.
-        # Note: This operation is designed to be used for building permission-aware
-        # UIs and command-line tools, not for authorization checking. This operation
-        # may "fail open" without warning.
+        # Returns permissions that a caller has on the specified resource. If the
+        # resource does not exist, this will return an empty set of permissions, not a `
+        # NOT_FOUND` error. Note: This operation is designed to be used for building
+        # permission-aware UIs and command-line tools, not for authorization checking.
+        # This operation may "fail open" without warning.
         # @param [String] resource
-        #   REQUIRED: The resource for which the policy detail is being requested.
-        #   See the operation documentation for the appropriate value for this field.
+        #   REQUIRED: The resource for which the policy detail is being requested. See the
+        #   operation documentation for the appropriate value for this field.
         # @param [Google::Apis::BinaryauthorizationV1::TestIamPermissionsRequest] test_iam_permissions_request_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.

data/generated/google/apis/binaryauthorization_v1.rb

@@ -26,7 +26,7 @@ module Google
     # @see https://cloud.google.com/binary-authorization/
     module BinaryauthorizationV1
       VERSION = 'V1'
-      REVISION = '20200605'
+      REVISION = '20201016'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'