google-apis-accesscontextmanager_v1 0.70.0 → 0.72.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d85f4b80db917dd34639a5f2c9d481b5e2800074d02d8ed0523d2b386eb41bfd
-  data.tar.gz: c8aa57934dcdde7e729f1566b46437607d416c6220b83ae843d7ead54cf27b8e
+  metadata.gz: 3ab2483d063d4e8582012f0406379dd3a67cf9b5420950833033a48b43370810
+  data.tar.gz: a5a2b7b5d024d43464781c1100419860a458d048564ea23e295b7fcdd8011963
 SHA512:
-  metadata.gz: d35b464aa4d97c0adc88434d32a8f8ab63df60aad7078793de3bc81d4a8fb20f1ad7d715e063d43bb8749fde249cb982ce35ca1769202411098b2897045d68ff
-  data.tar.gz: 78776efa4b3223224852ff00f7fe0db87f0aa4f3f8329c292febf60d5199ed075d95d7f17ddbc56dc559764bda77ea41ea500b74d81c8d58220ad34f94e52b6c
+  metadata.gz: 61c6c502496690ab748448880ba2a3444098d449413e4ccd334299348f2adf879f258aaae4be6708addf083144928663770fd7383cdaccf72923df8dd35540f8
+  data.tar.gz: 0541f904d4ef59a271614e304e9e5c84d70b5e5790f8076212e8c505330ac0daebe7e4e2dc5b6d14bc367a5af77f2db0a06586ce18ecd6c25624ecc7e176b7db

data/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Release history for google-apis-accesscontextmanager_v1
 
+### v0.72.0 (2026-08-23)
+
+* Regenerated from discovery document revision 20260819
+
+### v0.71.0 (2026-08-16)
+
+* Regenerated from discovery document revision 20260809
+
 ### v0.70.0 (2026-08-09)
 
 * Regenerated from discovery document revision 20260730

data/lib/google/apis/accesscontextmanager_v1/classes.rb

@@ -563,6 +563,12 @@ module Google
         # @return [Google::Apis::AccesscontextmanagerV1::Application]
         attr_accessor :restricted_client_application
       
+        # A Google Cloud project which contains applications and resources that users
+        # can access.
+        # Corresponds to the JSON property `restrictedProject`
+        # @return [Google::Apis::AccesscontextmanagerV1::Project]
+        attr_accessor :restricted_project
+      
         def initialize(**args)
            update!(**args)
         end
@@ -570,6 +576,7 @@ module Google
         # Update properties of this object
         def update!(**args)
           @restricted_client_application = args[:restricted_client_application] if args.key?(:restricted_client_application)
+          @restricted_project = args[:restricted_project] if args.key?(:restricted_project)
         end
       end
       
@@ -1107,13 +1114,13 @@ module Google
         attr_accessor :name
       
         # The comprehensive identity container supporting identities including groups,
-        # service accounts and federated identities. Only one of them can be set to
+        # service accounts, and federated identities. Only one of them can be set to
         # create an access binding.
         # Corresponds to the JSON property `principal`
         # @return [Google::Apis::AccesscontextmanagerV1::Principal]
         attr_accessor :principal
       
-        # Optional. Deprecated: use scoped_access_settings instead. A list of
+        # Optional. Deprecated: Use `scoped_access_settings` instead. A list of
         # applications that are subject to this binding's restrictions. If the list is
         # empty, the binding restrictions will universally apply to all applications.
         # Corresponds to the JSON property `restrictedClientApplications`
@@ -1840,17 +1847,33 @@ module Google
       end
       
       # The comprehensive identity container supporting identities including groups,
-      # service accounts and federated identities. Only one of them can be set to
+      # service accounts, and federated identities. Only one of them can be set to
       # create an access binding.
       class Principal
         include Google::Apis::Core::Hashable
       
+        # Immutable. The IAM principal identifier of the federated workforce or workload
+        # to assign the policy to. Examples include the following: * Single principal: `
+        # principal://iam.googleapis.com/projects/`project_number`/locations/global/
+        # workloadIdentityPools/`pool_id`/subject/`subject_attribute_value`` * All
+        # workloads in a workload identity pool: `principalSet://iam.googleapis.com/
+        # projects/`project_number`/locations/global/workloadIdentityPools/`pool_id`/*` *
+        # All Workforce Pools in a Google Cloud organization: `principalSet://
+        # cloudresourcemanager.googleapis.com/organizations/`organization_id`/type/
+        # WorkforcePool` Bindings created for all Workforce Pools in a Google Cloud
+        # organization support only `scoped_access_settings` with the `
+        # restricted_project` client scope and active `session_settings`. No other
+        # configurations are allowed.
+        # Corresponds to the JSON property `federatedPrincipal`
+        # @return [String]
+        attr_accessor :federated_principal
+      
         # Immutable. Service account email used to assign policies to a specific service
         # account. If a service account is subject to multiple policies (e.g., if there
         # is a policy for all service accounts in a project and a policy for the service
         # account), the closest (i.e. the most specific) dry-run policy will be used for
-        # the dry-run functionality and the closest policy will be used for the
-        # enforcement.
+        # the dry-run functionality and the closest enforcement policy will be used for
+        # the enforcement.
         # Corresponds to the JSON property `serviceAccount`
         # @return [String]
         attr_accessor :service_account
@@ -1867,6 +1890,7 @@ module Google
       
         # Update properties of this object
         def update!(**args)
+          @federated_principal = args[:federated_principal] if args.key?(:federated_principal)
           @service_account = args[:service_account] if args.key?(:service_account)
           @service_account_project_number = args[:service_account_project_number] if args.key?(:service_account_project_number)
         end
@@ -1893,6 +1917,27 @@ module Google
         end
       end
       
+      # A Google Cloud project which contains applications and resources that users
+      # can access.
+      class Project
+        include Google::Apis::Core::Hashable
+      
+        # The Google Cloud project resource name. Format: `projects/`project_number``.
+        # Only the project number is supported. Example: `projects/1234567890`
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @name = args[:name] if args.key?(:name)
+        end
+      end
+      
       # A request to replace all existing Access Levels in an Access Policy with the
       # Access Levels provided. This is done atomically.
       class ReplaceAccessLevelsRequest
@@ -2041,8 +2086,8 @@ module Google
         attr_accessor :modifiers
       
         # URL pattern to allow. Only patterns of ".googleapis.com/*", "www.googleapis.
-        # com//*" and "*.appspot.com/* forms are supported, where should be
-        # alphanumerical name.
+        # com//*" and "*.appspot.com/* forms are supported, where should be an
+        # alphanumeric name.
         # Corresponds to the JSON property `pattern`
         # @return [String]
         attr_accessor :pattern
@@ -2232,18 +2277,20 @@ module Google
         # @return [String]
         attr_accessor :max_inactivity
       
-        # Optional. The session length. Setting this field to zero is equal to disabling
-        # session. Also can set infinite session by flipping the enabled bit to false
-        # below. If use_oidc_max_age is true, for OIDC apps, the session length will be
-        # the minimum of this field and OIDC max_age param. If this field is set to zero,
-        # session_length_enabled must be set to false or left unset.
+        # Optional. The session length. Setting this field to zero allows for sessions
+        # that are active indefinitely. Also, setting `session_length_enabled` to `false`
+        # disregards session limits, which means that sessions never expire. If `
+        # use_oidc_max_age` is `true`, for OIDC apps, the session length will be the
+        # minimum of this field and the OIDC `max_age` param. If this field is set to
+        # zero, `session_length_enabled` must be set to `false` or left unset.
         # Corresponds to the JSON property `sessionLength`
         # @return [String]
         attr_accessor :session_length
       
         # Optional. This field enables or disables Google Cloud session length. When
         # false, all fields set above will be disregarded and the session length is
-        # basically infinite. If session_length is set to zero, this field must be false.
+        # basically infinite. If `session_length` is set to zero, this field must be set
+        # to false.
         # Corresponds to the JSON property `sessionLengthEnabled`
         # @return [Boolean]
         attr_accessor :session_length_enabled

data/lib/google/apis/accesscontextmanager_v1/gem_version.rb

@@ -16,13 +16,13 @@ module Google
   module Apis
     module AccesscontextmanagerV1
       # Version of the google-apis-accesscontextmanager_v1 gem
-      GEM_VERSION = "0.70.0"
+      GEM_VERSION = "0.72.0"
 
       # Version of the code generator used to generate this client
       GENERATOR_VERSION = "0.19.0"
 
       # Revision of the discovery document this client was generated from
-      REVISION = "20260730"
+      REVISION = "20260819"
     end
   end
 end

data/lib/google/apis/accesscontextmanager_v1/representations.rb

@@ -316,6 +316,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class Project
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class ReplaceAccessLevelsRequest
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -548,6 +554,8 @@ module Google
         class Representation < Google::Apis::Core::JsonRepresentation
           property :restricted_client_application, as: 'restrictedClientApplication', class: Google::Apis::AccesscontextmanagerV1::Application, decorator: Google::Apis::AccesscontextmanagerV1::Application::Representation
       
+          property :restricted_project, as: 'restrictedProject', class: Google::Apis::AccesscontextmanagerV1::Project, decorator: Google::Apis::AccesscontextmanagerV1::Project::Representation
+      
         end
       end
       
@@ -865,6 +873,7 @@ module Google
       class Principal
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
+          property :federated_principal, as: 'federatedPrincipal'
           property :service_account, as: 'serviceAccount'
           property :service_account_project_number, as: 'serviceAccountProjectNumber'
         end
@@ -877,6 +886,13 @@ module Google
         end
       end
       
+      class Project
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :name, as: 'name'
+        end
+      end
+      
       class ReplaceAccessLevelsRequest
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation

data/lib/google/apis/accesscontextmanager_v1/service.rb

@@ -924,6 +924,9 @@ module Google
         # @param [String] name
         #   Required. Resource name for the Service Perimeter. Format: `accessPolicies/`
         #   policy_id`/servicePerimeters/`service_perimeters_id``
+        # @param [String] deleted_principal_syntax
+        #   Optional. If true, the response will contain the deleted principal syntax for
+        #   identities that support it.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -941,11 +944,12 @@ module Google
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def get_access_policy_service_perimeter(name, fields: nil, quota_user: nil, options: nil, &block)
+        def get_access_policy_service_perimeter(name, deleted_principal_syntax: nil, fields: nil, quota_user: nil, options: nil, &block)
           command = make_simple_command(:get, 'v1/{+name}', options)
           command.response_representation = Google::Apis::AccesscontextmanagerV1::ServicePerimeter::Representation
           command.response_class = Google::Apis::AccesscontextmanagerV1::ServicePerimeter
           command.params['name'] = name unless name.nil?
+          command.query['deletedPrincipalSyntax'] = deleted_principal_syntax unless deleted_principal_syntax.nil?
           command.query['fields'] = fields unless fields.nil?
           command.query['quotaUser'] = quota_user unless quota_user.nil?
           execute_or_queue_command(command, &block)
@@ -955,6 +959,9 @@ module Google
         # @param [String] parent
         #   Required. Resource name for the access policy to list Service Perimeters from.
         #   Format: `accessPolicies/`policy_id``
+        # @param [String] deleted_principal_syntax
+        #   Optional. If true, the response will contain the deleted principal syntax for
+        #   identities that support it.
         # @param [Fixnum] page_size
         #   Number of Service Perimeters to include in the list. Default 100.
         # @param [String] page_token
@@ -977,11 +984,12 @@ module Google
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def list_access_policy_service_perimeters(parent, page_size: nil, page_token: nil, fields: nil, quota_user: nil, options: nil, &block)
+        def list_access_policy_service_perimeters(parent, deleted_principal_syntax: nil, page_size: nil, page_token: nil, fields: nil, quota_user: nil, options: nil, &block)
           command = make_simple_command(:get, 'v1/{+parent}/servicePerimeters', options)
           command.response_representation = Google::Apis::AccesscontextmanagerV1::ListServicePerimetersResponse::Representation
           command.response_class = Google::Apis::AccesscontextmanagerV1::ListServicePerimetersResponse
           command.params['parent'] = parent unless parent.nil?
+          command.query['deletedPrincipalSyntax'] = deleted_principal_syntax unless deleted_principal_syntax.nil?
           command.query['pageSize'] = page_size unless page_size.nil?
           command.query['pageToken'] = page_token unless page_token.nil?
           command.query['fields'] = fields unless fields.nil?
@@ -999,6 +1007,10 @@ module Google
         #   component must begin with a letter, followed by alphanumeric characters or `_`.
         #   After you create a `ServicePerimeter`, you cannot change its `name`.
         # @param [Google::Apis::AccesscontextmanagerV1::ServicePerimeter] service_perimeter_object
+        # @param [String] deleted_principal_syntax
+        #   Optional. If true, the response will contain the deleted principal syntax for
+        #   identities that support it and the request can contain identities with deleted
+        #   principal syntax.
         # @param [String] update_mask
         #   Required. Mask to control which fields get updated. Must be non-empty.
         # @param [String] fields
@@ -1018,13 +1030,14 @@ module Google
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def patch_access_policy_service_perimeter(name, service_perimeter_object = nil, update_mask: nil, fields: nil, quota_user: nil, options: nil, &block)
+        def patch_access_policy_service_perimeter(name, service_perimeter_object = nil, deleted_principal_syntax: nil, update_mask: nil, fields: nil, quota_user: nil, options: nil, &block)
           command = make_simple_command(:patch, 'v1/{+name}', options)
           command.request_representation = Google::Apis::AccesscontextmanagerV1::ServicePerimeter::Representation
           command.request_object = service_perimeter_object
           command.response_representation = Google::Apis::AccesscontextmanagerV1::Operation::Representation
           command.response_class = Google::Apis::AccesscontextmanagerV1::Operation
           command.params['name'] = name unless name.nil?
+          command.query['deletedPrincipalSyntax'] = deleted_principal_syntax unless deleted_principal_syntax.nil?
           command.query['updateMask'] = update_mask unless update_mask.nil?
           command.query['fields'] = fields unless fields.nil?
           command.query['quotaUser'] = quota_user unless quota_user.nil?
@@ -1366,10 +1379,10 @@ module Google
         #   Required. Example: "organizations/256"
         # @param [String] filter
         #   Optional. The literal filter to apply to the results returned. See https://
-        #   google.aip.dev/160 for more details. Accepts values: * principal:group_key *
-        #   principal:service_account OR principal:service_account_project_number. If this
-        #   field is empty or not one of the above, the default value is "principal:
-        #   group_key".
+        #   google.aip.dev/160 for more details. Accepts values: * `principal:group_key` *
+        #   `principal:service_account` OR `principal:service_account_project_number`. If
+        #   this field is empty or not one of the above, the default value is `"principal:
+        #   group_key"`.
         # @param [Fixnum] page_size
         #   Optional. Maximum number of items to return. The server may return fewer items.
         #   If left blank, the server may return any number of items.

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: google-apis-accesscontextmanager_v1
 version: !ruby/object:Gem::Version
-  version: 0.70.0
+  version: 0.72.0
 platform: ruby
 authors:
 - Google LLC
@@ -57,7 +57,7 @@ licenses:
 metadata:
   bug_tracker_uri: https://github.com/googleapis/google-api-ruby-client/issues
   changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-accesscontextmanager_v1/CHANGELOG.md
-  documentation_uri: https://googleapis.dev/ruby/google-apis-accesscontextmanager_v1/v0.70.0
+  documentation_uri: https://googleapis.dev/ruby/google-apis-accesscontextmanager_v1/v0.72.0
   source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-accesscontextmanager_v1
 rdoc_options: []
 require_paths: