google-api-client 0.9.26 → 0.9.28

data/generated/google/apis/iam_v1/representations.rb

@@ -22,181 +22,148 @@ module Google
   module Apis
     module IamV1
       
-      class ListServiceAccountsResponse
+      class ServiceAccountKey
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
         include Google::Apis::Core::JsonObjectSupport
       end
       
-      class ServiceAccount
+      class CreateServiceAccountKeyRequest
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
         include Google::Apis::Core::JsonObjectSupport
       end
       
-      class CreateServiceAccountRequest
+      class SignJwtResponse
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
         include Google::Apis::Core::JsonObjectSupport
       end
       
-      class Empty
+      class SignBlobResponse
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
         include Google::Apis::Core::JsonObjectSupport
       end
       
-      class ListServiceAccountKeysResponse
+      class TestIamPermissionsRequest
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
         include Google::Apis::Core::JsonObjectSupport
       end
       
-      class ServiceAccountKey
+      class Policy
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
         include Google::Apis::Core::JsonObjectSupport
       end
       
-      class CreateServiceAccountKeyRequest
+      class SignJwtRequest
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
         include Google::Apis::Core::JsonObjectSupport
       end
       
-      class SignBlobRequest
+      class AuditData
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
         include Google::Apis::Core::JsonObjectSupport
       end
       
-      class SignBlobResponse
+      class BindingDelta
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
         include Google::Apis::Core::JsonObjectSupport
       end
       
-      class Policy
+      class PolicyDelta
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
         include Google::Apis::Core::JsonObjectSupport
       end
       
-      class Binding
+      class ListServiceAccountsResponse
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
         include Google::Apis::Core::JsonObjectSupport
       end
       
-      class SetIamPolicyRequest
+      class CreateServiceAccountRequest
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
         include Google::Apis::Core::JsonObjectSupport
       end
       
-      class TestIamPermissionsRequest
+      class QueryGrantableRolesResponse
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
         include Google::Apis::Core::JsonObjectSupport
       end
       
-      class TestIamPermissionsResponse
+      class SignBlobRequest
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
         include Google::Apis::Core::JsonObjectSupport
       end
       
-      class QueryGrantableRolesRequest
+      class Role
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
         include Google::Apis::Core::JsonObjectSupport
       end
       
-      class QueryGrantableRolesResponse
+      class SetIamPolicyRequest
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
         include Google::Apis::Core::JsonObjectSupport
       end
       
-      class Role
+      class Binding
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
         include Google::Apis::Core::JsonObjectSupport
       end
       
-      class AuditData
+      class QueryGrantableRolesRequest
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
         include Google::Apis::Core::JsonObjectSupport
       end
       
-      class PolicyDelta
+      class Empty
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
         include Google::Apis::Core::JsonObjectSupport
       end
       
-      class BindingDelta
+      class ServiceAccount
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
         include Google::Apis::Core::JsonObjectSupport
       end
       
-      class ListServiceAccountsResponse
-        # @private
-        class Representation < Google::Apis::Core::JsonRepresentation
-          collection :accounts, as: 'accounts', class: Google::Apis::IamV1::ServiceAccount, decorator: Google::Apis::IamV1::ServiceAccount::Representation
-      
-          property :next_page_token, as: 'nextPageToken'
-        end
-      end
-      
-      class ServiceAccount
-        # @private
-        class Representation < Google::Apis::Core::JsonRepresentation
-          property :name, as: 'name'
-          property :project_id, as: 'projectId'
-          property :unique_id, as: 'uniqueId'
-          property :email, as: 'email'
-          property :display_name, as: 'displayName'
-          property :etag, :base64 => true, as: 'etag'
-          property :oauth2_client_id, as: 'oauth2ClientId'
-        end
-      end
-      
-      class CreateServiceAccountRequest
-        # @private
-        class Representation < Google::Apis::Core::JsonRepresentation
-          property :account_id, as: 'accountId'
-          property :service_account, as: 'serviceAccount', class: Google::Apis::IamV1::ServiceAccount, decorator: Google::Apis::IamV1::ServiceAccount::Representation
-      
-        end
-      end
+      class TestIamPermissionsResponse
+        class Representation < Google::Apis::Core::JsonRepresentation; end
       
-      class Empty
-        # @private
-        class Representation < Google::Apis::Core::JsonRepresentation
-        end
+        include Google::Apis::Core::JsonObjectSupport
       end
       
       class ListServiceAccountKeysResponse
-        # @private
-        class Representation < Google::Apis::Core::JsonRepresentation
-          collection :keys, as: 'keys', class: Google::Apis::IamV1::ServiceAccountKey, decorator: Google::Apis::IamV1::ServiceAccountKey::Representation
+        class Representation < Google::Apis::Core::JsonRepresentation; end
       
-        end
+        include Google::Apis::Core::JsonObjectSupport
       end
       
       class ServiceAccountKey
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
-          property :name, as: 'name'
+          property :valid_after_time, as: 'validAfterTime'
           property :private_key_type, as: 'privateKeyType'
-          property :key_algorithm, as: 'keyAlgorithm'
           property :private_key_data, :base64 => true, as: 'privateKeyData'
           property :public_key_data, :base64 => true, as: 'publicKeyData'
-          property :valid_after_time, as: 'validAfterTime'
+          property :name, as: 'name'
           property :valid_before_time, as: 'validBeforeTime'
+          property :key_algorithm, as: 'keyAlgorithm'
         end
       end
       
@@ -208,65 +175,86 @@ module Google
         end
       end
       
-      class SignBlobRequest
+      class SignJwtResponse
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
-          property :bytes_to_sign, :base64 => true, as: 'bytesToSign'
+          property :key_id, as: 'keyId'
+          property :signed_jwt, as: 'signedJwt'
         end
       end
       
       class SignBlobResponse
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
-          property :key_id, as: 'keyId'
           property :signature, :base64 => true, as: 'signature'
+          property :key_id, as: 'keyId'
+        end
+      end
+      
+      class TestIamPermissionsRequest
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          collection :permissions, as: 'permissions'
         end
       end
       
       class Policy
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
+          property :etag, :base64 => true, as: 'etag'
           property :version, as: 'version'
           collection :bindings, as: 'bindings', class: Google::Apis::IamV1::Binding, decorator: Google::Apis::IamV1::Binding::Representation
       
-          property :etag, :base64 => true, as: 'etag'
         end
       end
       
-      class Binding
+      class SignJwtRequest
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
-          property :role, as: 'role'
-          collection :members, as: 'members'
+          property :payload, as: 'payload'
         end
       end
       
-      class SetIamPolicyRequest
+      class AuditData
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
-          property :policy, as: 'policy', class: Google::Apis::IamV1::Policy, decorator: Google::Apis::IamV1::Policy::Representation
+          property :policy_delta, as: 'policyDelta', class: Google::Apis::IamV1::PolicyDelta, decorator: Google::Apis::IamV1::PolicyDelta::Representation
       
         end
       end
       
-      class TestIamPermissionsRequest
+      class BindingDelta
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
-          collection :permissions, as: 'permissions'
+          property :action, as: 'action'
+          property :member, as: 'member'
+          property :role, as: 'role'
         end
       end
       
-      class TestIamPermissionsResponse
+      class PolicyDelta
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
-          collection :permissions, as: 'permissions'
+          collection :binding_deltas, as: 'bindingDeltas', class: Google::Apis::IamV1::BindingDelta, decorator: Google::Apis::IamV1::BindingDelta::Representation
+      
         end
       end
       
-      class QueryGrantableRolesRequest
+      class ListServiceAccountsResponse
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
-          property :full_resource_name, as: 'fullResourceName'
+          property :next_page_token, as: 'nextPageToken'
+          collection :accounts, as: 'accounts', class: Google::Apis::IamV1::ServiceAccount, decorator: Google::Apis::IamV1::ServiceAccount::Representation
+      
+        end
+      end
+      
+      class CreateServiceAccountRequest
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :service_account, as: 'serviceAccount', class: Google::Apis::IamV1::ServiceAccount, decorator: Google::Apis::IamV1::ServiceAccount::Representation
+      
+          property :account_id, as: 'accountId'
         end
       end
       
@@ -278,37 +266,76 @@ module Google
         end
       end
       
+      class SignBlobRequest
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :bytes_to_sign, :base64 => true, as: 'bytesToSign'
+        end
+      end
+      
       class Role
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
           property :name, as: 'name'
-          property :title, as: 'title'
           property :description, as: 'description'
+          property :title, as: 'title'
         end
       end
       
-      class AuditData
+      class SetIamPolicyRequest
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
-          property :policy_delta, as: 'policyDelta', class: Google::Apis::IamV1::PolicyDelta, decorator: Google::Apis::IamV1::PolicyDelta::Representation
+          property :policy, as: 'policy', class: Google::Apis::IamV1::Policy, decorator: Google::Apis::IamV1::Policy::Representation
       
         end
       end
       
-      class PolicyDelta
+      class Binding
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
-          collection :binding_deltas, as: 'bindingDeltas', class: Google::Apis::IamV1::BindingDelta, decorator: Google::Apis::IamV1::BindingDelta::Representation
+          collection :members, as: 'members'
+          property :role, as: 'role'
+        end
+      end
       
+      class QueryGrantableRolesRequest
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :full_resource_name, as: 'fullResourceName'
         end
       end
       
-      class BindingDelta
+      class Empty
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
-          property :action, as: 'action'
-          property :role, as: 'role'
-          property :member, as: 'member'
+        end
+      end
+      
+      class ServiceAccount
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :display_name, as: 'displayName'
+          property :etag, :base64 => true, as: 'etag'
+          property :email, as: 'email'
+          property :name, as: 'name'
+          property :project_id, as: 'projectId'
+          property :unique_id, as: 'uniqueId'
+          property :oauth2_client_id, as: 'oauth2ClientId'
+        end
+      end
+      
+      class TestIamPermissionsResponse
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          collection :permissions, as: 'permissions'
+        end
+      end
+      
+      class ListServiceAccountKeysResponse
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          collection :keys, as: 'keys', class: Google::Apis::IamV1::ServiceAccountKey, decorator: Google::Apis::IamV1::ServiceAccountKey::Representation
+      
         end
       end
     end

data/generated/google/apis/iam_v1/service.rb

@@ -48,17 +48,10 @@ module Google
           super('https://iam.googleapis.com/', '')
         end
         
-        # Lists ServiceAccounts for a project.
-        # @param [String] name
-        #   Required. The resource name of the project associated with the service
-        #   accounts, such as `projects/my-project-123`.
-        # @param [Fixnum] page_size
-        #   Optional limit on the number of service accounts to include in the response.
-        #   Further accounts can subsequently be obtained by including the
-        #   ListServiceAccountsResponse.next_page_token in a subsequent request.
-        # @param [String] page_token
-        #   Optional pagination token returned in an earlier ListServiceAccountsResponse.
-        #   next_page_token.
+        # Queries roles that can be granted on a particular resource.
+        # A role is grantable if it can be used as the role in a binding for a policy
+        # for that resource.
+        # @param [Google::Apis::IamV1::QueryGrantableRolesRequest] query_grantable_roles_request_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -68,32 +61,31 @@ module Google
         #   Request-specific options
         #
         # @yield [result, err] Result & error if block supplied
-        # @yieldparam result [Google::Apis::IamV1::ListServiceAccountsResponse] parsed result object
+        # @yieldparam result [Google::Apis::IamV1::QueryGrantableRolesResponse] parsed result object
         # @yieldparam err [StandardError] error object if request failed
         #
-        # @return [Google::Apis::IamV1::ListServiceAccountsResponse]
+        # @return [Google::Apis::IamV1::QueryGrantableRolesResponse]
         #
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def list_project_service_accounts(name, page_size: nil, page_token: nil, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:get, 'v1/{+name}/serviceAccounts', options)
-          command.response_representation = Google::Apis::IamV1::ListServiceAccountsResponse::Representation
-          command.response_class = Google::Apis::IamV1::ListServiceAccountsResponse
-          command.params['name'] = name unless name.nil?
-          command.query['pageSize'] = page_size unless page_size.nil?
-          command.query['pageToken'] = page_token unless page_token.nil?
+        def query_grantable_roles(query_grantable_roles_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
+          command =  make_simple_command(:post, 'v1/roles:queryGrantableRoles', options)
+          command.request_representation = Google::Apis::IamV1::QueryGrantableRolesRequest::Representation
+          command.request_object = query_grantable_roles_request_object
+          command.response_representation = Google::Apis::IamV1::QueryGrantableRolesResponse::Representation
+          command.response_class = Google::Apis::IamV1::QueryGrantableRolesResponse
           command.query['fields'] = fields unless fields.nil?
           command.query['quotaUser'] = quota_user unless quota_user.nil?
           execute_or_queue_command(command, &block)
         end
         
-        # Gets a ServiceAccount.
+        # Creates a ServiceAccount
+        # and returns it.
         # @param [String] name
-        #   The resource name of the service account in the following format: `projects/`
-        #   project`/serviceAccounts/`account``. Using `-` as a wildcard for the project
-        #   will infer the project from the account. The `account` value can be the `email`
-        #   address or the `unique_id` of the service account.
+        #   Required. The resource name of the project associated with the service
+        #   accounts, such as `projects/my-project-123`.
+        # @param [Google::Apis::IamV1::CreateServiceAccountRequest] create_service_account_request_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -111,8 +103,10 @@ module Google
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def get_project_service_account(name, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:get, 'v1/{+name}', options)
+        def create_service_account(name, create_service_account_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
+          command =  make_simple_command(:post, 'v1/{+name}/serviceAccounts', options)
+          command.request_representation = Google::Apis::IamV1::CreateServiceAccountRequest::Representation
+          command.request_object = create_service_account_request_object
           command.response_representation = Google::Apis::IamV1::ServiceAccount::Representation
           command.response_class = Google::Apis::IamV1::ServiceAccount
           command.params['name'] = name unless name.nil?
@@ -121,11 +115,17 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Creates a ServiceAccount and returns it.
+        # Signs a JWT using a service account's system-managed private key.
+        # If no expiry time (`exp`) is provided in the `SignJwtRequest`, IAM sets an
+        # an expiry time of one hour by default. If you request an expiry time of
+        # more than one hour, the request will fail.
         # @param [String] name
-        #   Required. The resource name of the project associated with the service
-        #   accounts, such as `projects/my-project-123`.
-        # @param [Google::Apis::IamV1::CreateServiceAccountRequest] create_service_account_request_object
+        #   The resource name of the service account in the following format:
+        #   `projects/`PROJECT_ID`/serviceAccounts/`SERVICE_ACCOUNT_EMAIL``.
+        #   Using `-` as a wildcard for the project will infer the project from
+        #   the account. The `account` value can be the `email` address or the
+        #   `unique_id` of the service account.
+        # @param [Google::Apis::IamV1::SignJwtRequest] sign_jwt_request_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -135,36 +135,33 @@ module Google
         #   Request-specific options
         #
         # @yield [result, err] Result & error if block supplied
-        # @yieldparam result [Google::Apis::IamV1::ServiceAccount] parsed result object
+        # @yieldparam result [Google::Apis::IamV1::SignJwtResponse] parsed result object
         # @yieldparam err [StandardError] error object if request failed
         #
-        # @return [Google::Apis::IamV1::ServiceAccount]
+        # @return [Google::Apis::IamV1::SignJwtResponse]
         #
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def create_service_account(name, create_service_account_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:post, 'v1/{+name}/serviceAccounts', options)
-          command.request_representation = Google::Apis::IamV1::CreateServiceAccountRequest::Representation
-          command.request_object = create_service_account_request_object
-          command.response_representation = Google::Apis::IamV1::ServiceAccount::Representation
-          command.response_class = Google::Apis::IamV1::ServiceAccount
+        def sign_service_account_jwt(name, sign_jwt_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
+          command =  make_simple_command(:post, 'v1/{+name}:signJwt', options)
+          command.request_representation = Google::Apis::IamV1::SignJwtRequest::Representation
+          command.request_object = sign_jwt_request_object
+          command.response_representation = Google::Apis::IamV1::SignJwtResponse::Representation
+          command.response_class = Google::Apis::IamV1::SignJwtResponse
           command.params['name'] = name unless name.nil?
           command.query['fields'] = fields unless fields.nil?
           command.query['quotaUser'] = quota_user unless quota_user.nil?
           execute_or_queue_command(command, &block)
         end
         
-        # Updates a ServiceAccount. Currently, only the following fields are updatable: `
-        # display_name` . The `etag` is mandatory.
-        # @param [String] name
-        #   The resource name of the service account in the following format: `projects/`
-        #   project`/serviceAccounts/`account``. Requests using `-` as a wildcard for the
-        #   project will infer the project from the `account` and the `account` value can
-        #   be the `email` address or the `unique_id` of the service account. In responses
-        #   the resource name will always be in the format `projects/`project`/
-        #   serviceAccounts/`email``.
-        # @param [Google::Apis::IamV1::ServiceAccount] service_account_object
+        # Sets the IAM access control policy for a
+        # ServiceAccount.
+        # @param [String] resource
+        #   REQUIRED: The resource for which the policy is being specified.
+        #   `resource` is usually specified as a path. For example, a Project
+        #   resource is specified as `projects/`project``.
+        # @param [Google::Apis::IamV1::SetIamPolicyRequest] set_iam_policy_request_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -174,32 +171,66 @@ module Google
         #   Request-specific options
         #
         # @yield [result, err] Result & error if block supplied
-        # @yieldparam result [Google::Apis::IamV1::ServiceAccount] parsed result object
+        # @yieldparam result [Google::Apis::IamV1::Policy] parsed result object
         # @yieldparam err [StandardError] error object if request failed
         #
-        # @return [Google::Apis::IamV1::ServiceAccount]
+        # @return [Google::Apis::IamV1::Policy]
         #
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def update_project_service_account(name, service_account_object = nil, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:put, 'v1/{+name}', options)
-          command.request_representation = Google::Apis::IamV1::ServiceAccount::Representation
-          command.request_object = service_account_object
-          command.response_representation = Google::Apis::IamV1::ServiceAccount::Representation
-          command.response_class = Google::Apis::IamV1::ServiceAccount
-          command.params['name'] = name unless name.nil?
+        def set_service_account_iam_policy(resource, set_iam_policy_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
+          command =  make_simple_command(:post, 'v1/{+resource}:setIamPolicy', options)
+          command.request_representation = Google::Apis::IamV1::SetIamPolicyRequest::Representation
+          command.request_object = set_iam_policy_request_object
+          command.response_representation = Google::Apis::IamV1::Policy::Representation
+          command.response_class = Google::Apis::IamV1::Policy
+          command.params['resource'] = resource unless resource.nil?
           command.query['fields'] = fields unless fields.nil?
           command.query['quotaUser'] = quota_user unless quota_user.nil?
           execute_or_queue_command(command, &block)
         end
         
-        # Deletes a ServiceAccount.
+        # Returns the IAM access control policy for a
+        # ServiceAccount.
+        # @param [String] resource
+        #   REQUIRED: The resource for which the policy is being requested.
+        #   `resource` is usually specified as a path. For example, a Project
+        #   resource is specified as `projects/`project``.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::IamV1::Policy] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::IamV1::Policy]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def get_project_service_account_iam_policy(resource, fields: nil, quota_user: nil, options: nil, &block)
+          command =  make_simple_command(:post, 'v1/{+resource}:getIamPolicy', options)
+          command.response_representation = Google::Apis::IamV1::Policy::Representation
+          command.response_class = Google::Apis::IamV1::Policy
+          command.params['resource'] = resource unless resource.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Gets a ServiceAccount.
         # @param [String] name
-        #   The resource name of the service account in the following format: `projects/`
-        #   project`/serviceAccounts/`account``. Using `-` as a wildcard for the project
-        #   will infer the project from the account. The `account` value can be the `email`
-        #   address or the `unique_id` of the service account.
+        #   The resource name of the service account in the following format:
+        #   `projects/`PROJECT_ID`/serviceAccounts/`SERVICE_ACCOUNT_EMAIL``.
+        #   Using `-` as a wildcard for the project will infer the project from
+        #   the account. The `account` value can be the `email` address or the
+        #   `unique_id` of the service account.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -209,31 +240,37 @@ module Google
         #   Request-specific options
         #
         # @yield [result, err] Result & error if block supplied
-        # @yieldparam result [Google::Apis::IamV1::Empty] parsed result object
+        # @yieldparam result [Google::Apis::IamV1::ServiceAccount] parsed result object
         # @yieldparam err [StandardError] error object if request failed
         #
-        # @return [Google::Apis::IamV1::Empty]
+        # @return [Google::Apis::IamV1::ServiceAccount]
         #
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def delete_project_service_account(name, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:delete, 'v1/{+name}', options)
-          command.response_representation = Google::Apis::IamV1::Empty::Representation
-          command.response_class = Google::Apis::IamV1::Empty
+        def get_project_service_account(name, fields: nil, quota_user: nil, options: nil, &block)
+          command =  make_simple_command(:get, 'v1/{+name}', options)
+          command.response_representation = Google::Apis::IamV1::ServiceAccount::Representation
+          command.response_class = Google::Apis::IamV1::ServiceAccount
           command.params['name'] = name unless name.nil?
           command.query['fields'] = fields unless fields.nil?
           command.query['quotaUser'] = quota_user unless quota_user.nil?
           execute_or_queue_command(command, &block)
         end
         
-        # Signs a blob using a service account's system-managed private key.
+        # Updates a ServiceAccount.
+        # Currently, only the following fields are updatable:
+        # `display_name` .
+        # The `etag` is mandatory.
         # @param [String] name
-        #   The resource name of the service account in the following format: `projects/`
-        #   project`/serviceAccounts/`account``. Using `-` as a wildcard for the project
-        #   will infer the project from the account. The `account` value can be the `email`
-        #   address or the `unique_id` of the service account.
-        # @param [Google::Apis::IamV1::SignBlobRequest] sign_blob_request_object
+        #   The resource name of the service account in the following format:
+        #   `projects/`PROJECT_ID`/serviceAccounts/`SERVICE_ACCOUNT_EMAIL``.
+        #   Requests using `-` as a wildcard for the project will infer the project
+        #   from the `account` and the `account` value can be the `email` address or
+        #   the `unique_id` of the service account.
+        #   In responses the resource name will always be in the format
+        #   `projects/`PROJECT_ID`/serviceAccounts/`SERVICE_ACCOUNT_EMAIL``.
+        # @param [Google::Apis::IamV1::ServiceAccount] service_account_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -243,31 +280,33 @@ module Google
         #   Request-specific options
         #
         # @yield [result, err] Result & error if block supplied
-        # @yieldparam result [Google::Apis::IamV1::SignBlobResponse] parsed result object
+        # @yieldparam result [Google::Apis::IamV1::ServiceAccount] parsed result object
         # @yieldparam err [StandardError] error object if request failed
         #
-        # @return [Google::Apis::IamV1::SignBlobResponse]
+        # @return [Google::Apis::IamV1::ServiceAccount]
         #
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def sign_service_account_blob(name, sign_blob_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:post, 'v1/{+name}:signBlob', options)
-          command.request_representation = Google::Apis::IamV1::SignBlobRequest::Representation
-          command.request_object = sign_blob_request_object
-          command.response_representation = Google::Apis::IamV1::SignBlobResponse::Representation
-          command.response_class = Google::Apis::IamV1::SignBlobResponse
+        def update_project_service_account(name, service_account_object = nil, fields: nil, quota_user: nil, options: nil, &block)
+          command =  make_simple_command(:put, 'v1/{+name}', options)
+          command.request_representation = Google::Apis::IamV1::ServiceAccount::Representation
+          command.request_object = service_account_object
+          command.response_representation = Google::Apis::IamV1::ServiceAccount::Representation
+          command.response_class = Google::Apis::IamV1::ServiceAccount
           command.params['name'] = name unless name.nil?
           command.query['fields'] = fields unless fields.nil?
           command.query['quotaUser'] = quota_user unless quota_user.nil?
           execute_or_queue_command(command, &block)
         end
         
-        # Returns the IAM access control policy for a ServiceAccount.
+        # Tests the specified permissions against the IAM access control policy
+        # for a ServiceAccount.
         # @param [String] resource
-        #   REQUIRED: The resource for which the policy is being requested. `resource` is
-        #   usually specified as a path. For example, a Project resource is specified as `
-        #   projects/`project``.
+        #   REQUIRED: The resource for which the policy detail is being requested.
+        #   `resource` is usually specified as a path. For example, a Project
+        #   resource is specified as `projects/`project``.
+        # @param [Google::Apis::IamV1::TestIamPermissionsRequest] test_iam_permissions_request_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -277,30 +316,33 @@ module Google
         #   Request-specific options
         #
         # @yield [result, err] Result & error if block supplied
-        # @yieldparam result [Google::Apis::IamV1::Policy] parsed result object
+        # @yieldparam result [Google::Apis::IamV1::TestIamPermissionsResponse] parsed result object
         # @yieldparam err [StandardError] error object if request failed
         #
-        # @return [Google::Apis::IamV1::Policy]
+        # @return [Google::Apis::IamV1::TestIamPermissionsResponse]
         #
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def get_project_service_account_iam_policy(resource, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:post, 'v1/{+resource}:getIamPolicy', options)
-          command.response_representation = Google::Apis::IamV1::Policy::Representation
-          command.response_class = Google::Apis::IamV1::Policy
+        def test_service_account_iam_permissions(resource, test_iam_permissions_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
+          command =  make_simple_command(:post, 'v1/{+resource}:testIamPermissions', options)
+          command.request_representation = Google::Apis::IamV1::TestIamPermissionsRequest::Representation
+          command.request_object = test_iam_permissions_request_object
+          command.response_representation = Google::Apis::IamV1::TestIamPermissionsResponse::Representation
+          command.response_class = Google::Apis::IamV1::TestIamPermissionsResponse
           command.params['resource'] = resource unless resource.nil?
           command.query['fields'] = fields unless fields.nil?
           command.query['quotaUser'] = quota_user unless quota_user.nil?
           execute_or_queue_command(command, &block)
         end
         
-        # Sets the IAM access control policy for a ServiceAccount.
-        # @param [String] resource
-        #   REQUIRED: The resource for which the policy is being specified. `resource` is
-        #   usually specified as a path. For example, a Project resource is specified as `
-        #   projects/`project``.
-        # @param [Google::Apis::IamV1::SetIamPolicyRequest] set_iam_policy_request_object
+        # Deletes a ServiceAccount.
+        # @param [String] name
+        #   The resource name of the service account in the following format:
+        #   `projects/`PROJECT_ID`/serviceAccounts/`SERVICE_ACCOUNT_EMAIL``.
+        #   Using `-` as a wildcard for the project will infer the project from
+        #   the account. The `account` value can be the `email` address or the
+        #   `unique_id` of the service account.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -310,33 +352,36 @@ module Google
         #   Request-specific options
         #
         # @yield [result, err] Result & error if block supplied
-        # @yieldparam result [Google::Apis::IamV1::Policy] parsed result object
+        # @yieldparam result [Google::Apis::IamV1::Empty] parsed result object
         # @yieldparam err [StandardError] error object if request failed
         #
-        # @return [Google::Apis::IamV1::Policy]
+        # @return [Google::Apis::IamV1::Empty]
         #
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def set_service_account_iam_policy(resource, set_iam_policy_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:post, 'v1/{+resource}:setIamPolicy', options)
-          command.request_representation = Google::Apis::IamV1::SetIamPolicyRequest::Representation
-          command.request_object = set_iam_policy_request_object
-          command.response_representation = Google::Apis::IamV1::Policy::Representation
-          command.response_class = Google::Apis::IamV1::Policy
-          command.params['resource'] = resource unless resource.nil?
+        def delete_project_service_account(name, fields: nil, quota_user: nil, options: nil, &block)
+          command =  make_simple_command(:delete, 'v1/{+name}', options)
+          command.response_representation = Google::Apis::IamV1::Empty::Representation
+          command.response_class = Google::Apis::IamV1::Empty
+          command.params['name'] = name unless name.nil?
           command.query['fields'] = fields unless fields.nil?
           command.query['quotaUser'] = quota_user unless quota_user.nil?
           execute_or_queue_command(command, &block)
         end
         
-        # Tests the specified permissions against the IAM access control policy for a
-        # ServiceAccount.
-        # @param [String] resource
-        #   REQUIRED: The resource for which the policy detail is being requested. `
-        #   resource` is usually specified as a path. For example, a Project resource is
-        #   specified as `projects/`project``.
-        # @param [Google::Apis::IamV1::TestIamPermissionsRequest] test_iam_permissions_request_object
+        # Lists ServiceAccounts for a project.
+        # @param [String] name
+        #   Required. The resource name of the project associated with the service
+        #   accounts, such as `projects/my-project-123`.
+        # @param [String] page_token
+        #   Optional pagination token returned in an earlier
+        #   ListServiceAccountsResponse.next_page_token.
+        # @param [Fixnum] page_size
+        #   Optional limit on the number of service accounts to include in the
+        #   response. Further accounts can subsequently be obtained by including the
+        #   ListServiceAccountsResponse.next_page_token
+        #   in a subsequent request.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -346,36 +391,34 @@ module Google
         #   Request-specific options
         #
         # @yield [result, err] Result & error if block supplied
-        # @yieldparam result [Google::Apis::IamV1::TestIamPermissionsResponse] parsed result object
+        # @yieldparam result [Google::Apis::IamV1::ListServiceAccountsResponse] parsed result object
         # @yieldparam err [StandardError] error object if request failed
         #
-        # @return [Google::Apis::IamV1::TestIamPermissionsResponse]
+        # @return [Google::Apis::IamV1::ListServiceAccountsResponse]
         #
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def test_service_account_iam_permissions(resource, test_iam_permissions_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:post, 'v1/{+resource}:testIamPermissions', options)
-          command.request_representation = Google::Apis::IamV1::TestIamPermissionsRequest::Representation
-          command.request_object = test_iam_permissions_request_object
-          command.response_representation = Google::Apis::IamV1::TestIamPermissionsResponse::Representation
-          command.response_class = Google::Apis::IamV1::TestIamPermissionsResponse
-          command.params['resource'] = resource unless resource.nil?
+        def list_project_service_accounts(name, page_token: nil, page_size: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command =  make_simple_command(:get, 'v1/{+name}/serviceAccounts', options)
+          command.response_representation = Google::Apis::IamV1::ListServiceAccountsResponse::Representation
+          command.response_class = Google::Apis::IamV1::ListServiceAccountsResponse
+          command.params['name'] = name unless name.nil?
+          command.query['pageToken'] = page_token unless page_token.nil?
+          command.query['pageSize'] = page_size unless page_size.nil?
           command.query['fields'] = fields unless fields.nil?
           command.query['quotaUser'] = quota_user unless quota_user.nil?
           execute_or_queue_command(command, &block)
         end
         
-        # Lists ServiceAccountKeys.
+        # Signs a blob using a service account's system-managed private key.
         # @param [String] name
-        #   The resource name of the service account in the following format: `projects/`
-        #   project`/serviceAccounts/`account``. Using `-` as a wildcard for the project,
-        #   will infer the project from the account. The `account` value can be the `email`
-        #   address or the `unique_id` of the service account.
-        # @param [Array<String>, String] key_types
-        #   Filters the types of keys the user wants to include in the list response.
-        #   Duplicate key types are not allowed. If no key type is provided, all keys are
-        #   returned.
+        #   The resource name of the service account in the following format:
+        #   `projects/`PROJECT_ID`/serviceAccounts/`SERVICE_ACCOUNT_EMAIL``.
+        #   Using `-` as a wildcard for the project will infer the project from
+        #   the account. The `account` value can be the `email` address or the
+        #   `unique_id` of the service account.
+        # @param [Google::Apis::IamV1::SignBlobRequest] sign_blob_request_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -385,34 +428,33 @@ module Google
         #   Request-specific options
         #
         # @yield [result, err] Result & error if block supplied
-        # @yieldparam result [Google::Apis::IamV1::ListServiceAccountKeysResponse] parsed result object
+        # @yieldparam result [Google::Apis::IamV1::SignBlobResponse] parsed result object
         # @yieldparam err [StandardError] error object if request failed
         #
-        # @return [Google::Apis::IamV1::ListServiceAccountKeysResponse]
+        # @return [Google::Apis::IamV1::SignBlobResponse]
         #
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def list_project_service_account_keys(name, key_types: nil, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:get, 'v1/{+name}/keys', options)
-          command.response_representation = Google::Apis::IamV1::ListServiceAccountKeysResponse::Representation
-          command.response_class = Google::Apis::IamV1::ListServiceAccountKeysResponse
+        def sign_service_account_blob(name, sign_blob_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
+          command =  make_simple_command(:post, 'v1/{+name}:signBlob', options)
+          command.request_representation = Google::Apis::IamV1::SignBlobRequest::Representation
+          command.request_object = sign_blob_request_object
+          command.response_representation = Google::Apis::IamV1::SignBlobResponse::Representation
+          command.response_class = Google::Apis::IamV1::SignBlobResponse
           command.params['name'] = name unless name.nil?
-          command.query['keyTypes'] = key_types unless key_types.nil?
           command.query['fields'] = fields unless fields.nil?
           command.query['quotaUser'] = quota_user unless quota_user.nil?
           execute_or_queue_command(command, &block)
         end
         
-        # Gets the ServiceAccountKey by key id.
+        # Deletes a ServiceAccountKey.
         # @param [String] name
-        #   The resource name of the service account key in the following format: `
-        #   projects/`project`/serviceAccounts/`account`/keys/`key``. Using `-` as a
-        #   wildcard for the project will infer the project from the account. The `account`
-        #   value can be the `email` address or the `unique_id` of the service account.
-        # @param [String] public_key_type
-        #   The output format of the public key requested. X509_PEM is the default output
-        #   format.
+        #   The resource name of the service account key in the following format:
+        #   `projects/`PROJECT_ID`/serviceAccounts/`SERVICE_ACCOUNT_EMAIL`/keys/`key``.
+        #   Using `-` as a wildcard for the project will infer the project from
+        #   the account. The `account` value can be the `email` address or the
+        #   `unique_id` of the service account.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -422,32 +464,35 @@ module Google
         #   Request-specific options
         #
         # @yield [result, err] Result & error if block supplied
-        # @yieldparam result [Google::Apis::IamV1::ServiceAccountKey] parsed result object
+        # @yieldparam result [Google::Apis::IamV1::Empty] parsed result object
         # @yieldparam err [StandardError] error object if request failed
         #
-        # @return [Google::Apis::IamV1::ServiceAccountKey]
+        # @return [Google::Apis::IamV1::Empty]
         #
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def get_project_service_account_key(name, public_key_type: nil, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:get, 'v1/{+name}', options)
-          command.response_representation = Google::Apis::IamV1::ServiceAccountKey::Representation
-          command.response_class = Google::Apis::IamV1::ServiceAccountKey
+        def delete_project_service_account_key(name, fields: nil, quota_user: nil, options: nil, &block)
+          command =  make_simple_command(:delete, 'v1/{+name}', options)
+          command.response_representation = Google::Apis::IamV1::Empty::Representation
+          command.response_class = Google::Apis::IamV1::Empty
           command.params['name'] = name unless name.nil?
-          command.query['publicKeyType'] = public_key_type unless public_key_type.nil?
           command.query['fields'] = fields unless fields.nil?
           command.query['quotaUser'] = quota_user unless quota_user.nil?
           execute_or_queue_command(command, &block)
         end
         
-        # Creates a ServiceAccountKey and returns it.
+        # Lists ServiceAccountKeys.
         # @param [String] name
-        #   The resource name of the service account in the following format: `projects/`
-        #   project`/serviceAccounts/`account``. Using `-` as a wildcard for the project
-        #   will infer the project from the account. The `account` value can be the `email`
-        #   address or the `unique_id` of the service account.
-        # @param [Google::Apis::IamV1::CreateServiceAccountKeyRequest] create_service_account_key_request_object
+        #   The resource name of the service account in the following format:
+        #   `projects/`PROJECT_ID`/serviceAccounts/`SERVICE_ACCOUNT_EMAIL``.
+        #   Using `-` as a wildcard for the project, will infer the project from
+        #   the account. The `account` value can be the `email` address or the
+        #   `unique_id` of the service account.
+        # @param [Array<String>, String] key_types
+        #   Filters the types of keys the user wants to include in the list
+        #   response. Duplicate key types are not allowed. If no key type
+        #   is provided, all keys are returned.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -457,32 +502,36 @@ module Google
         #   Request-specific options
         #
         # @yield [result, err] Result & error if block supplied
-        # @yieldparam result [Google::Apis::IamV1::ServiceAccountKey] parsed result object
+        # @yieldparam result [Google::Apis::IamV1::ListServiceAccountKeysResponse] parsed result object
         # @yieldparam err [StandardError] error object if request failed
         #
-        # @return [Google::Apis::IamV1::ServiceAccountKey]
+        # @return [Google::Apis::IamV1::ListServiceAccountKeysResponse]
         #
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def create_service_account_key(name, create_service_account_key_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:post, 'v1/{+name}/keys', options)
-          command.request_representation = Google::Apis::IamV1::CreateServiceAccountKeyRequest::Representation
-          command.request_object = create_service_account_key_request_object
-          command.response_representation = Google::Apis::IamV1::ServiceAccountKey::Representation
-          command.response_class = Google::Apis::IamV1::ServiceAccountKey
+        def list_project_service_account_keys(name, key_types: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command =  make_simple_command(:get, 'v1/{+name}/keys', options)
+          command.response_representation = Google::Apis::IamV1::ListServiceAccountKeysResponse::Representation
+          command.response_class = Google::Apis::IamV1::ListServiceAccountKeysResponse
           command.params['name'] = name unless name.nil?
+          command.query['keyTypes'] = key_types unless key_types.nil?
           command.query['fields'] = fields unless fields.nil?
           command.query['quotaUser'] = quota_user unless quota_user.nil?
           execute_or_queue_command(command, &block)
         end
         
-        # Deletes a ServiceAccountKey.
+        # Gets the ServiceAccountKey
+        # by key id.
         # @param [String] name
-        #   The resource name of the service account key in the following format: `
-        #   projects/`project`/serviceAccounts/`account`/keys/`key``. Using `-` as a
-        #   wildcard for the project will infer the project from the account. The `account`
-        #   value can be the `email` address or the `unique_id` of the service account.
+        #   The resource name of the service account key in the following format:
+        #   `projects/`PROJECT_ID`/serviceAccounts/`SERVICE_ACCOUNT_EMAIL`/keys/`key``.
+        #   Using `-` as a wildcard for the project will infer the project from
+        #   the account. The `account` value can be the `email` address or the
+        #   `unique_id` of the service account.
+        # @param [String] public_key_type
+        #   The output format of the public key requested.
+        #   X509_PEM is the default output format.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -492,28 +541,34 @@ module Google
         #   Request-specific options
         #
         # @yield [result, err] Result & error if block supplied
-        # @yieldparam result [Google::Apis::IamV1::Empty] parsed result object
+        # @yieldparam result [Google::Apis::IamV1::ServiceAccountKey] parsed result object
         # @yieldparam err [StandardError] error object if request failed
         #
-        # @return [Google::Apis::IamV1::Empty]
+        # @return [Google::Apis::IamV1::ServiceAccountKey]
         #
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def delete_project_service_account_key(name, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:delete, 'v1/{+name}', options)
-          command.response_representation = Google::Apis::IamV1::Empty::Representation
-          command.response_class = Google::Apis::IamV1::Empty
+        def get_project_service_account_key(name, public_key_type: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command =  make_simple_command(:get, 'v1/{+name}', options)
+          command.response_representation = Google::Apis::IamV1::ServiceAccountKey::Representation
+          command.response_class = Google::Apis::IamV1::ServiceAccountKey
           command.params['name'] = name unless name.nil?
+          command.query['publicKeyType'] = public_key_type unless public_key_type.nil?
           command.query['fields'] = fields unless fields.nil?
           command.query['quotaUser'] = quota_user unless quota_user.nil?
           execute_or_queue_command(command, &block)
         end
         
-        # Queries roles that can be granted on a particular resource. A role is
-        # grantable if it can be used as the role in a binding for a policy for that
-        # resource.
-        # @param [Google::Apis::IamV1::QueryGrantableRolesRequest] query_grantable_roles_request_object
+        # Creates a ServiceAccountKey
+        # and returns it.
+        # @param [String] name
+        #   The resource name of the service account in the following format:
+        #   `projects/`PROJECT_ID`/serviceAccounts/`SERVICE_ACCOUNT_EMAIL``.
+        #   Using `-` as a wildcard for the project will infer the project from
+        #   the account. The `account` value can be the `email` address or the
+        #   `unique_id` of the service account.
+        # @param [Google::Apis::IamV1::CreateServiceAccountKeyRequest] create_service_account_key_request_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -523,20 +578,21 @@ module Google
         #   Request-specific options
         #
         # @yield [result, err] Result & error if block supplied
-        # @yieldparam result [Google::Apis::IamV1::QueryGrantableRolesResponse] parsed result object
+        # @yieldparam result [Google::Apis::IamV1::ServiceAccountKey] parsed result object
         # @yieldparam err [StandardError] error object if request failed
         #
-        # @return [Google::Apis::IamV1::QueryGrantableRolesResponse]
+        # @return [Google::Apis::IamV1::ServiceAccountKey]
         #
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def query_grantable_roles(query_grantable_roles_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
-          command =  make_simple_command(:post, 'v1/roles:queryGrantableRoles', options)
-          command.request_representation = Google::Apis::IamV1::QueryGrantableRolesRequest::Representation
-          command.request_object = query_grantable_roles_request_object
-          command.response_representation = Google::Apis::IamV1::QueryGrantableRolesResponse::Representation
-          command.response_class = Google::Apis::IamV1::QueryGrantableRolesResponse
+        def create_service_account_key(name, create_service_account_key_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
+          command =  make_simple_command(:post, 'v1/{+name}/keys', options)
+          command.request_representation = Google::Apis::IamV1::CreateServiceAccountKeyRequest::Representation
+          command.request_object = create_service_account_key_request_object
+          command.response_representation = Google::Apis::IamV1::ServiceAccountKey::Representation
+          command.response_class = Google::Apis::IamV1::ServiceAccountKey
+          command.params['name'] = name unless name.nil?
           command.query['fields'] = fields unless fields.nil?
           command.query['quotaUser'] = quota_user unless quota_user.nil?
           execute_or_queue_command(command, &block)