google-api-client 0.45.0 → 0.47.0

data/generated/google/apis/cloudidentity_v1beta1/representations.rb

@@ -76,6 +76,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class CheckTransitiveMembershipResponse
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class ClientState
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -214,6 +220,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class GroupRelation
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class ListClientStatesResponse
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -262,6 +274,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class MemberRelation
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class Membership
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -304,12 +322,30 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class SearchTransitiveGroupsResponse
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class SearchTransitiveMembershipsResponse
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class Status
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class TransitiveMembershipRole
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class UpdateMembershipRolesParams
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -410,6 +446,13 @@ module Google
         end
       end
       
+      class CheckTransitiveMembershipResponse
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :has_membership, as: 'hasMembership'
+        end
+      end
+      
       class ClientState
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -705,6 +748,20 @@ module Google
         end
       end
       
+      class GroupRelation
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :display_name, as: 'displayName'
+          property :group, as: 'group'
+          property :group_key, as: 'groupKey', class: Google::Apis::CloudidentityV1beta1::EntityKey, decorator: Google::Apis::CloudidentityV1beta1::EntityKey::Representation
+      
+          hash :labels, as: 'labels'
+          property :relation_type, as: 'relationType'
+          collection :roles, as: 'roles', class: Google::Apis::CloudidentityV1beta1::TransitiveMembershipRole, decorator: Google::Apis::CloudidentityV1beta1::TransitiveMembershipRole::Representation
+      
+        end
+      end
+      
       class ListClientStatesResponse
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -773,6 +830,18 @@ module Google
         end
       end
       
+      class MemberRelation
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :member, as: 'member'
+          collection :preferred_member_key, as: 'preferredMemberKey', class: Google::Apis::CloudidentityV1beta1::EntityKey, decorator: Google::Apis::CloudidentityV1beta1::EntityKey::Representation
+      
+          property :relation_type, as: 'relationType'
+          collection :roles, as: 'roles', class: Google::Apis::CloudidentityV1beta1::TransitiveMembershipRole, decorator: Google::Apis::CloudidentityV1beta1::TransitiveMembershipRole::Representation
+      
+        end
+      end
+      
       class Membership
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -847,6 +916,24 @@ module Google
         end
       end
       
+      class SearchTransitiveGroupsResponse
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          collection :memberships, as: 'memberships', class: Google::Apis::CloudidentityV1beta1::GroupRelation, decorator: Google::Apis::CloudidentityV1beta1::GroupRelation::Representation
+      
+          property :next_page_token, as: 'nextPageToken'
+        end
+      end
+      
+      class SearchTransitiveMembershipsResponse
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          collection :memberships, as: 'memberships', class: Google::Apis::CloudidentityV1beta1::MemberRelation, decorator: Google::Apis::CloudidentityV1beta1::MemberRelation::Representation
+      
+          property :next_page_token, as: 'nextPageToken'
+        end
+      end
+      
       class Status
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -856,6 +943,13 @@ module Google
         end
       end
       
+      class TransitiveMembershipRole
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :role, as: 'role'
+        end
+      end
+      
       class UpdateMembershipRolesParams
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation

data/generated/google/apis/cloudidentity_v1beta1/service.rb

@@ -992,6 +992,49 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
+        # Check a potential member for membership in a group. A member has membership to
+        # a group as long as there is a single viewable transitive membership between
+        # the group and the member. The actor must have view permissions to at least one
+        # transitive membership between the member and group.
+        # @param [String] parent
+        #   [Resource name](https://cloud.google.com/apis/design/resource_names) of the
+        #   group to check the transitive membership in. Format: `groups/`group_id``,
+        #   where `group_id` is the unique id assigned to the Group to which the
+        #   Membership belongs to.
+        # @param [String] query
+        #   Required. A CEL expression that MUST include member specification. This is a `
+        #   required` field. Certain groups are uniquely identified by both a '
+        #   member_key_id' and a 'member_key_namespace', which requires an additional
+        #   query input: 'member_key_namespace'. Example query: `member_key_id == '
+        #   member_key_id_value'`
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudidentityV1beta1::CheckTransitiveMembershipResponse] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudidentityV1beta1::CheckTransitiveMembershipResponse]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def check_group_membership_transitive_membership(parent, query: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1beta1/{+parent}/memberships:checkTransitiveMembership', options)
+          command.response_representation = Google::Apis::CloudidentityV1beta1::CheckTransitiveMembershipResponse::Representation
+          command.response_class = Google::Apis::CloudidentityV1beta1::CheckTransitiveMembershipResponse
+          command.params['parent'] = parent unless parent.nil?
+          command.query['query'] = query unless query.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
         # Creates a `Membership`.
         # @param [String] parent
         #   Required. The parent `Group` resource under which to create the `Membership`.
@@ -1090,6 +1133,53 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
+        # Get a membership graph of just a member or both a member and a group. Given a
+        # member, the response will contain all membership paths from the member. Given
+        # both a group and a member, the response will contain all membership paths
+        # between the group and the member.
+        # @param [String] parent
+        #   Required. [Resource name](https://cloud.google.com/apis/design/resource_names)
+        #   of the group to search transitive memberships in. Format: `groups/`group_id``,
+        #   where `group_id` is the unique ID assigned to the Group to which the
+        #   Membership belongs to. group_id can be a wildcard collection id "-". When a
+        #   group_id is specified, the membership graph will be constrained to paths
+        #   between the member (defined in the query) and the parent. If a wildcard
+        #   collection is provided, all membership paths connected to the member will be
+        #   returned.
+        # @param [String] query
+        #   Required. A CEL expression that MUST include member specification AND label(s).
+        #   Certain groups are uniquely identified by both a 'member_key_id' and a '
+        #   member_key_namespace', which requires an additional query input: '
+        #   member_key_namespace'. Example query: `member_key_id == 'member_key_id_value' &
+        #   & in labels`
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudidentityV1beta1::Operation] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudidentityV1beta1::Operation]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def get_group_membership_membership_graph(parent, query: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1beta1/{+parent}/memberships:getMembershipGraph', options)
+          command.response_representation = Google::Apis::CloudidentityV1beta1::Operation::Representation
+          command.response_class = Google::Apis::CloudidentityV1beta1::Operation
+          command.params['parent'] = parent unless parent.nil?
+          command.query['query'] = query unless query.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
         # Lists the `Membership`s within a `Group`.
         # @param [String] parent
         #   Required. The parent `Group` resource under which to lookup the `Membership`
@@ -1215,6 +1305,95 @@ module Google
           command.query['quotaUser'] = quota_user unless quota_user.nil?
           execute_or_queue_command(command, &block)
         end
+        
+        # Search transitive groups of a member. A transitive group is any group that has
+        # a direct or indirect membership to the member. Actor must have view
+        # permissions all transitive groups.
+        # @param [String] parent
+        #   [Resource name](https://cloud.google.com/apis/design/resource_names) of the
+        #   group to search transitive memberships in. Format: `groups/`group_id``, where `
+        #   group_id` is always '-' as this API will search across all groups for a given
+        #   member.
+        # @param [Fixnum] page_size
+        #   The default page size is 200 (max 1000).
+        # @param [String] page_token
+        #   The next_page_token value returned from a previous list request, if any.
+        # @param [String] query
+        #   Required. A CEL expression that MUST include member specification AND label(s).
+        #   This is a `required` field. Users can search on label attributes of groups.
+        #   CONTAINS match ('in') is supported on labels. Certain groups are uniquely
+        #   identified by both a 'member_key_id' and a 'member_key_namespace', which
+        #   requires an additional query input: 'member_key_namespace'. Example query: `
+        #   member_key_id == 'member_key_id_value' && in labels`
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudidentityV1beta1::SearchTransitiveGroupsResponse] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudidentityV1beta1::SearchTransitiveGroupsResponse]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def search_group_membership_transitive_groups(parent, page_size: nil, page_token: nil, query: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1beta1/{+parent}/memberships:searchTransitiveGroups', options)
+          command.response_representation = Google::Apis::CloudidentityV1beta1::SearchTransitiveGroupsResponse::Representation
+          command.response_class = Google::Apis::CloudidentityV1beta1::SearchTransitiveGroupsResponse
+          command.params['parent'] = parent unless parent.nil?
+          command.query['pageSize'] = page_size unless page_size.nil?
+          command.query['pageToken'] = page_token unless page_token.nil?
+          command.query['query'] = query unless query.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Search transitive memberships of a group. A transitive membership is any
+        # direct or indirect membership of a group. Actor must have view permissions to
+        # all transitive memberships.
+        # @param [String] parent
+        #   [Resource name](https://cloud.google.com/apis/design/resource_names) of the
+        #   group to search transitive memberships in. Format: `groups/`group_id``, where `
+        #   group_id` is the unique ID assigned to the Group.
+        # @param [Fixnum] page_size
+        #   The default page size is 200 (max 1000).
+        # @param [String] page_token
+        #   The next_page_token value returned from a previous list request, if any.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudidentityV1beta1::SearchTransitiveMembershipsResponse] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudidentityV1beta1::SearchTransitiveMembershipsResponse]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def search_group_membership_transitive_memberships(parent, page_size: nil, page_token: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1beta1/{+parent}/memberships:searchTransitiveMemberships', options)
+          command.response_representation = Google::Apis::CloudidentityV1beta1::SearchTransitiveMembershipsResponse::Representation
+          command.response_class = Google::Apis::CloudidentityV1beta1::SearchTransitiveMembershipsResponse
+          command.params['parent'] = parent unless parent.nil?
+          command.query['pageSize'] = page_size unless page_size.nil?
+          command.query['pageToken'] = page_token unless page_token.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
 
         protected
 

data/generated/google/apis/cloudresourcemanager_v1.rb

@@ -26,7 +26,7 @@ module Google
     # @see https://cloud.google.com/resource-manager
     module CloudresourcemanagerV1
       VERSION = 'V1'
-      REVISION = '20200907'
+      REVISION = '20200921'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/cloudresourcemanager_v1/service.rb

@@ -895,7 +895,7 @@ module Google
         # with GetProject, and the Project remains visible to ListProjects. However, you
         # cannot update the project. After the deletion completes, the Project is not
         # retrievable by the GetProject and ListProjects methods. The caller must have
-        # modify permissions for this Project.
+        # delete permissions for this Project.
         # @param [String] project_id
         #   The Project ID (for example, `foo-bar-123`). Required.
         # @param [String] fields
@@ -1379,7 +1379,7 @@ module Google
         # Restores the Project identified by the specified `project_id` (for example, `
         # my-project-123`). You can only use this method for a Project that has a
         # lifecycle state of DELETE_REQUESTED. After deletion starts, the Project cannot
-        # be restored. The caller must have modify permissions for this Project.
+        # be restored. The caller must have undelete permissions for this Project.
         # @param [String] project_id
         #   Required. The project ID (for example, `foo-bar-123`).
         # @param [Google::Apis::CloudresourcemanagerV1::UndeleteProjectRequest] undelete_project_request_object

data/generated/google/apis/cloudresourcemanager_v1beta1.rb

@@ -26,7 +26,7 @@ module Google
     # @see https://cloud.google.com/resource-manager
     module CloudresourcemanagerV1beta1
       VERSION = 'V1beta1'
-      REVISION = '20200907'
+      REVISION = '20200921'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/cloudresourcemanager_v1beta1/service.rb

@@ -323,7 +323,7 @@ module Google
         # with GetProject, and the Project remains visible to ListProjects. However, you
         # cannot update the project. After the deletion completes, the Project is not
         # retrievable by the GetProject and ListProjects methods. The caller must have
-        # modify permissions for this Project.
+        # delete permissions for this Project.
         # @param [String] project_id
         #   The Project ID (for example, `foo-bar-123`).
         # @param [String] fields
@@ -620,7 +620,7 @@ module Google
         # Restores the Project identified by the specified `project_id` (for example, `
         # my-project-123`). You can only use this method for a Project that has a
         # lifecycle state of DELETE_REQUESTED. After deletion starts, the Project cannot
-        # be restored. The caller must have modify permissions for this Project.
+        # be restored. The caller must have undelete permissions for this Project.
         # @param [String] project_id
         #   Required. The project ID (for example, `foo-bar-123`).
         # @param [Google::Apis::CloudresourcemanagerV1beta1::UndeleteProjectRequest] undelete_project_request_object

data/generated/google/apis/cloudresourcemanager_v2.rb

@@ -26,7 +26,7 @@ module Google
     # @see https://cloud.google.com/resource-manager
     module CloudresourcemanagerV2
       VERSION = 'V2'
-      REVISION = '20200831'
+      REVISION = '20201019'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/cloudresourcemanager_v2/service.rb

@@ -54,13 +54,13 @@ module Google
         # to succeed, the addition of this new Folder must not violate the Folder naming,
         # height or fanout constraints. + The Folder's display_name must be distinct
         # from all other Folder's that share its parent. + The addition of the Folder
-        # must not cause the active Folder hierarchy to exceed a height of 4. Note, the
-        # full active + deleted Folder hierarchy is allowed to reach a height of 8; this
-        # provides additional headroom when moving folders that contain deleted folders.
-        # + The addition of the Folder must not cause the total number of Folders under
-        # its parent to exceed 100. If the operation fails due to a folder constraint
-        # violation, some errors may be returned by the CreateFolder request, with
-        # status code FAILED_PRECONDITION and an error description. Other folder
+        # must not cause the active Folder hierarchy to exceed a height of 10. Note, the
+        # full active + deleted Folder hierarchy is allowed to reach a height of 20;
+        # this provides additional headroom when moving folders that contain deleted
+        # folders. + The addition of the Folder must not cause the total number of
+        # Folders under its parent to exceed 300. If the operation fails due to a folder
+        # constraint violation, some errors may be returned by the CreateFolder request,
+        # with status code FAILED_PRECONDITION and an error description. Other folder
         # constraint violations will be communicated in the Operation, with the specific
         # PreconditionFailure returned via the details list in the Operation.error field.
         # The caller must have `resourcemanager.folders.create` permission on the

data/generated/google/apis/cloudresourcemanager_v2beta1.rb

@@ -26,7 +26,7 @@ module Google
     # @see https://cloud.google.com/resource-manager
     module CloudresourcemanagerV2beta1
       VERSION = 'V2beta1'
-      REVISION = '20200831'
+      REVISION = '20201019'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'