google-apis-cloudasset_v1p7beta1 0.53.0 → 0.55.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +9 -0
- data/lib/google/apis/cloudasset_v1p7beta1/classes.rb +117 -108
- data/lib/google/apis/cloudasset_v1p7beta1/gem_version.rb +3 -3
- metadata +2 -2
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: f27ad583e54e50f191d48551c9648ead13fe254c990a773aac5b03f536336937
|
|
4
|
+
data.tar.gz: 88aed6db2cf42023c844370db47d167320ee73bf8bc81ae42c07d44b1bba7db7
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: cfc3a13a25cdf2bc37377e300240f973de85bf41d8a2fd532d1561b6f8ca7d26b43b0463b0d27c03522f47e14e22f28d45404cbc3b4fc7c53064cb9ab6ee88a8
|
|
7
|
+
data.tar.gz: 8c46e9614f7f2c86dbdce7d0320bb31abe4b4af28f9ce26e2870cb6d5147326eefa88960f72c89c16c3a839df9dc540c1579bb90173c4d931547ae7ee575a824
|
data/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,14 @@
|
|
|
1
1
|
# Release history for google-apis-cloudasset_v1p7beta1
|
|
2
2
|
|
|
3
|
+
### v0.55.0 (2026-10-21)
|
|
4
|
+
|
|
5
|
+
* Regenerated from discovery document revision 20261017
|
|
6
|
+
* Regenerated using generator version 0.19.1
|
|
7
|
+
|
|
8
|
+
### v0.54.0 (2026-08-09)
|
|
9
|
+
|
|
10
|
+
* Regenerated from discovery document revision 20260801
|
|
11
|
+
|
|
3
12
|
### v0.53.0 (2026-07-12)
|
|
4
13
|
|
|
5
14
|
* Regenerated from discovery document revision 20260703
|
|
@@ -1128,7 +1128,7 @@ module Google
|
|
|
1128
1128
|
# @return [String]
|
|
1129
1129
|
attr_accessor :name
|
|
1130
1130
|
|
|
1131
|
-
# Human
|
|
1131
|
+
# Human-readable title. Must be unique within the policy.
|
|
1132
1132
|
# Corresponds to the JSON property `title`
|
|
1133
1133
|
# @return [String]
|
|
1134
1134
|
attr_accessor :title
|
|
@@ -1156,8 +1156,8 @@ module Google
|
|
|
1156
1156
|
include Google::Apis::Core::Hashable
|
|
1157
1157
|
|
|
1158
1158
|
# Output only. An opaque identifier for the current version of the `AccessPolicy`
|
|
1159
|
-
# . This will always be a strongly validated etag, meaning that two
|
|
1160
|
-
#
|
|
1159
|
+
# . This will always be a strongly validated etag, meaning that two access
|
|
1160
|
+
# policies will be identical if and only if their etags are identical. Clients
|
|
1161
1161
|
# should not expect this to be in any specific format.
|
|
1162
1162
|
# Corresponds to the JSON property `etag`
|
|
1163
1163
|
# @return [String]
|
|
@@ -1180,7 +1180,7 @@ module Google
|
|
|
1180
1180
|
# `scopes=["folders/123"]` has the following behavior: - ServicePerimeter can
|
|
1181
1181
|
# only restrict projects within `folders/123`. - ServicePerimeter within policy
|
|
1182
1182
|
# A can only reference access levels defined within policy A. - Only one policy
|
|
1183
|
-
# can include a given scope; thus, attempting to create a second policy
|
|
1183
|
+
# can include a given scope; thus, attempting to create a second policy that
|
|
1184
1184
|
# includes `folders/123` will result in an error. If no scopes are provided,
|
|
1185
1185
|
# then any resource within the organization can be restricted. Scopes cannot be
|
|
1186
1186
|
# modified after a policy is created. Policies can only have a single scope.
|
|
@@ -1189,7 +1189,7 @@ module Google
|
|
|
1189
1189
|
# @return [Array<String>]
|
|
1190
1190
|
attr_accessor :scopes
|
|
1191
1191
|
|
|
1192
|
-
# Required. Human
|
|
1192
|
+
# Required. Human-readable title. Does not affect behavior.
|
|
1193
1193
|
# Corresponds to the JSON property `title`
|
|
1194
1194
|
# @return [String]
|
|
1195
1195
|
attr_accessor :title
|
|
@@ -1268,10 +1268,10 @@ module Google
|
|
|
1268
1268
|
include Google::Apis::Core::Hashable
|
|
1269
1269
|
|
|
1270
1270
|
# How the `conditions` list should be combined to determine if a request is
|
|
1271
|
-
# granted this `AccessLevel`. If AND is used, each `Condition` in `conditions`
|
|
1272
|
-
# must be satisfied for the `AccessLevel` to be applied. If OR is used, at
|
|
1273
|
-
# one `Condition` in `conditions` must be satisfied for the `AccessLevel`
|
|
1274
|
-
# applied. Default behavior is AND
|
|
1271
|
+
# granted this `AccessLevel`. If `AND` is used, each `Condition` in `conditions`
|
|
1272
|
+
# must be satisfied for the `AccessLevel` to be applied. If `OR` is used, at
|
|
1273
|
+
# least one `Condition` in `conditions` must be satisfied for the `AccessLevel`
|
|
1274
|
+
# to be applied. Default behavior is `AND`.
|
|
1275
1275
|
# Corresponds to the JSON property `combiningFunction`
|
|
1276
1276
|
# @return [String]
|
|
1277
1277
|
attr_accessor :combining_function
|
|
@@ -1292,33 +1292,35 @@ module Google
|
|
|
1292
1292
|
end
|
|
1293
1293
|
end
|
|
1294
1294
|
|
|
1295
|
-
# A condition necessary for an `AccessLevel` to be granted. The Condition is
|
|
1296
|
-
# AND over its fields.
|
|
1297
|
-
# of the listed subnetworks AND 2) the originating device complies with the
|
|
1298
|
-
# listed device policy AND 3) all listed access levels are granted AND 4) the
|
|
1299
|
-
# request was sent at a time allowed by the DateTimeRestriction
|
|
1295
|
+
# A condition necessary for an `AccessLevel` to be granted. The `Condition` is
|
|
1296
|
+
# an AND over its fields. A `Condition` is true if: 1) the request IP is from
|
|
1297
|
+
# one of the listed subnetworks, AND 2) the originating device complies with the
|
|
1298
|
+
# listed device policy, AND 3) all listed access levels are granted, AND 4) the
|
|
1299
|
+
# request was sent at a time allowed by the `DateTimeRestriction`.
|
|
1300
1300
|
class GoogleIdentityAccesscontextmanagerV1Condition
|
|
1301
1301
|
include Google::Apis::Core::Hashable
|
|
1302
1302
|
|
|
1303
|
-
# `DevicePolicy` specifies device
|
|
1303
|
+
# `DevicePolicy` specifies device-specific restrictions necessary to acquire a
|
|
1304
1304
|
# given access level. A `DevicePolicy` specifies requirements for requests from
|
|
1305
|
-
# devices to be granted access levels
|
|
1305
|
+
# devices to be granted access levels; it does not do any enforcement on the
|
|
1306
1306
|
# device. `DevicePolicy` acts as an AND over all specified fields, and each
|
|
1307
1307
|
# repeated field is an OR over its elements. Any unset fields are ignored. For
|
|
1308
|
-
# example, if the proto is
|
|
1309
|
-
# encryption_status: ENCRYPTED
|
|
1310
|
-
# originating from encrypted Linux desktops and encrypted Windows
|
|
1308
|
+
# example, if the proto is `` os_type : DESKTOP_WINDOWS, os_type : DESKTOP_LINUX,
|
|
1309
|
+
# encryption_status: ENCRYPTED``, then the `DevicePolicy` will be true for
|
|
1310
|
+
# requests originating from encrypted Linux desktops and encrypted Windows
|
|
1311
|
+
# desktops.
|
|
1311
1312
|
# Corresponds to the JSON property `devicePolicy`
|
|
1312
1313
|
# @return [Google::Apis::CloudassetV1p7beta1::GoogleIdentityAccesscontextmanagerV1DevicePolicy]
|
|
1313
1314
|
attr_accessor :device_policy
|
|
1314
1315
|
|
|
1315
1316
|
# CIDR block IP subnetwork specification. May be IPv4 or IPv6. Note that for a
|
|
1316
1317
|
# CIDR IP address block, the specified IP address portion must be properly
|
|
1317
|
-
# truncated (
|
|
1318
|
-
# malformed. For example, "192.0.2.0/24" is accepted but "192.0.2.1/24" is
|
|
1319
|
-
# Similarly, for IPv6, "2001:db8::/32" is accepted whereas "2001:db8::1/
|
|
1320
|
-
# not. The originating IP of a request must be in one of the listed
|
|
1321
|
-
# order for this Condition to be true. If empty, all IP addresses
|
|
1318
|
+
# truncated (that is, all the host bits must be zero) or the input is considered
|
|
1319
|
+
# malformed. For example, `"192.0.2.0/24"` is accepted, but `"192.0.2.1/24"` is
|
|
1320
|
+
# not. Similarly, for IPv6, `"2001:db8::/32"` is accepted, whereas `"2001:db8::1/
|
|
1321
|
+
# 32"` is not. The originating IP of a request must be in one of the listed
|
|
1322
|
+
# subnets in order for this `Condition` to be true. If empty, all IP addresses
|
|
1323
|
+
# are allowed.
|
|
1322
1324
|
# Corresponds to the JSON property `ipSubnetworks`
|
|
1323
1325
|
# @return [Array<String>]
|
|
1324
1326
|
attr_accessor :ip_subnetworks
|
|
@@ -1330,9 +1332,9 @@ module Google
|
|
|
1330
1332
|
# @return [Array<String>]
|
|
1331
1333
|
attr_accessor :members
|
|
1332
1334
|
|
|
1333
|
-
# Whether to negate the Condition
|
|
1334
|
-
# its non-empty fields. Any non-empty field criteria evaluating to false
|
|
1335
|
-
# result in the Condition
|
|
1335
|
+
# Whether to negate the `Condition`. If `true`, the `Condition` becomes a NAND
|
|
1336
|
+
# over its non-empty fields. Any non-empty field criteria evaluating to `false`
|
|
1337
|
+
# will result in the `Condition` being satisfied. Defaults to `false`.
|
|
1336
1338
|
# Corresponds to the JSON property `negate`
|
|
1337
1339
|
# @return [Boolean]
|
|
1338
1340
|
attr_accessor :negate
|
|
@@ -1345,9 +1347,9 @@ module Google
|
|
|
1345
1347
|
attr_accessor :regions
|
|
1346
1348
|
|
|
1347
1349
|
# A list of other access levels defined in the same `Policy`, referenced by
|
|
1348
|
-
# resource name. Referencing an `AccessLevel`
|
|
1349
|
-
# All access levels listed must be granted for the Condition to be true.
|
|
1350
|
-
# "
|
|
1350
|
+
# resource name. Referencing an `AccessLevel` that does not exist is an error.
|
|
1351
|
+
# All access levels listed must be granted for the `Condition` to be true.
|
|
1352
|
+
# Example: `"accessPolicies/MY_POLICY/accessLevels/LEVEL_NAME"`
|
|
1351
1353
|
# Corresponds to the JSON property `requiredAccessLevels`
|
|
1352
1354
|
# @return [Array<String>]
|
|
1353
1355
|
attr_accessor :required_access_levels
|
|
@@ -1409,28 +1411,29 @@ module Google
|
|
|
1409
1411
|
end
|
|
1410
1412
|
end
|
|
1411
1413
|
|
|
1412
|
-
# `DevicePolicy` specifies device
|
|
1414
|
+
# `DevicePolicy` specifies device-specific restrictions necessary to acquire a
|
|
1413
1415
|
# given access level. A `DevicePolicy` specifies requirements for requests from
|
|
1414
|
-
# devices to be granted access levels
|
|
1416
|
+
# devices to be granted access levels; it does not do any enforcement on the
|
|
1415
1417
|
# device. `DevicePolicy` acts as an AND over all specified fields, and each
|
|
1416
1418
|
# repeated field is an OR over its elements. Any unset fields are ignored. For
|
|
1417
|
-
# example, if the proto is
|
|
1418
|
-
# encryption_status: ENCRYPTED
|
|
1419
|
-
# originating from encrypted Linux desktops and encrypted Windows
|
|
1419
|
+
# example, if the proto is `` os_type : DESKTOP_WINDOWS, os_type : DESKTOP_LINUX,
|
|
1420
|
+
# encryption_status: ENCRYPTED``, then the `DevicePolicy` will be true for
|
|
1421
|
+
# requests originating from encrypted Linux desktops and encrypted Windows
|
|
1422
|
+
# desktops.
|
|
1420
1423
|
class GoogleIdentityAccesscontextmanagerV1DevicePolicy
|
|
1421
1424
|
include Google::Apis::Core::Hashable
|
|
1422
1425
|
|
|
1423
|
-
# Allowed device management levels
|
|
1426
|
+
# Allowed device management levels. An empty list allows all management levels.
|
|
1424
1427
|
# Corresponds to the JSON property `allowedDeviceManagementLevels`
|
|
1425
1428
|
# @return [Array<String>]
|
|
1426
1429
|
attr_accessor :allowed_device_management_levels
|
|
1427
1430
|
|
|
1428
|
-
# Allowed
|
|
1431
|
+
# Allowed encryption statuses. An empty list allows all statuses.
|
|
1429
1432
|
# Corresponds to the JSON property `allowedEncryptionStatuses`
|
|
1430
1433
|
# @return [Array<String>]
|
|
1431
1434
|
attr_accessor :allowed_encryption_statuses
|
|
1432
1435
|
|
|
1433
|
-
# Allowed OS versions
|
|
1436
|
+
# Allowed OS versions. An empty list allows all types and all versions.
|
|
1434
1437
|
# Corresponds to the JSON property `osConstraints`
|
|
1435
1438
|
# @return [Array<Google::Apis::CloudassetV1p7beta1::GoogleIdentityAccesscontextmanagerV1OsConstraint>]
|
|
1436
1439
|
attr_accessor :os_constraints
|
|
@@ -1441,13 +1444,13 @@ module Google
|
|
|
1441
1444
|
attr_accessor :require_admin_approval
|
|
1442
1445
|
alias_method :require_admin_approval?, :require_admin_approval
|
|
1443
1446
|
|
|
1444
|
-
# Whether the device needs to be corp
|
|
1447
|
+
# Whether the device needs to be corp-owned.
|
|
1445
1448
|
# Corresponds to the JSON property `requireCorpOwned`
|
|
1446
1449
|
# @return [Boolean]
|
|
1447
1450
|
attr_accessor :require_corp_owned
|
|
1448
1451
|
alias_method :require_corp_owned?, :require_corp_owned
|
|
1449
1452
|
|
|
1450
|
-
# Whether or not screenlock is required for the DevicePolicy to be true.
|
|
1453
|
+
# Whether or not screenlock is required for the `DevicePolicy` to be true.
|
|
1451
1454
|
# Defaults to `false`.
|
|
1452
1455
|
# Corresponds to the JSON property `requireScreenlock`
|
|
1453
1456
|
# @return [Boolean]
|
|
@@ -1470,10 +1473,10 @@ module Google
|
|
|
1470
1473
|
end
|
|
1471
1474
|
|
|
1472
1475
|
# Defines the conditions under which an EgressPolicy matches a request.
|
|
1473
|
-
# Conditions based on information about the source of the request. Note that
|
|
1474
|
-
# the destination of the request is also protected by a ServicePerimeter,
|
|
1475
|
-
# that ServicePerimeter must have an IngressPolicy which allows access in
|
|
1476
|
-
# for this request to succeed.
|
|
1476
|
+
# Conditions are based on information about the source of the request. Note that
|
|
1477
|
+
# if the destination of the request is also protected by a ServicePerimeter,
|
|
1478
|
+
# then that ServicePerimeter must have an IngressPolicy which allows access in
|
|
1479
|
+
# order for this request to succeed.
|
|
1477
1480
|
class GoogleIdentityAccesscontextmanagerV1EgressFrom
|
|
1478
1481
|
include Google::Apis::Core::Hashable
|
|
1479
1482
|
|
|
@@ -1494,7 +1497,7 @@ module Google
|
|
|
1494
1497
|
attr_accessor :identity_type
|
|
1495
1498
|
|
|
1496
1499
|
# Whether to enforce traffic restrictions based on `sources` field. If the `
|
|
1497
|
-
# sources`
|
|
1500
|
+
# sources` field is not empty, then this field must be set to `
|
|
1498
1501
|
# SOURCE_RESTRICTION_ENABLED`.
|
|
1499
1502
|
# Corresponds to the JSON property `sourceRestriction`
|
|
1500
1503
|
# @return [String]
|
|
@@ -1527,18 +1530,18 @@ module Google
|
|
|
1527
1530
|
# within the ServicePerimeter to access a defined set of projects outside the
|
|
1528
1531
|
# perimeter in certain contexts (e.g. to read data from a Cloud Storage bucket
|
|
1529
1532
|
# or query against a BigQuery dataset). EgressPolicies are concerned with the *
|
|
1530
|
-
# resources* that a request relates as well as the API services and API
|
|
1531
|
-
# being used. They do not
|
|
1533
|
+
# resources* that a request relates to, as well as the API services and API
|
|
1534
|
+
# actions being used. They do not relate to the direction of data movement. More
|
|
1532
1535
|
# detailed documentation for this concept can be found in the descriptions of
|
|
1533
1536
|
# EgressFrom and EgressTo.
|
|
1534
1537
|
class GoogleIdentityAccesscontextmanagerV1EgressPolicy
|
|
1535
1538
|
include Google::Apis::Core::Hashable
|
|
1536
1539
|
|
|
1537
1540
|
# Defines the conditions under which an EgressPolicy matches a request.
|
|
1538
|
-
# Conditions based on information about the source of the request. Note that
|
|
1539
|
-
# the destination of the request is also protected by a ServicePerimeter,
|
|
1540
|
-
# that ServicePerimeter must have an IngressPolicy which allows access in
|
|
1541
|
-
# for this request to succeed.
|
|
1541
|
+
# Conditions are based on information about the source of the request. Note that
|
|
1542
|
+
# if the destination of the request is also protected by a ServicePerimeter,
|
|
1543
|
+
# then that ServicePerimeter must have an IngressPolicy which allows access in
|
|
1544
|
+
# order for this request to succeed.
|
|
1542
1545
|
# Corresponds to the JSON property `egressFrom`
|
|
1543
1546
|
# @return [Google::Apis::CloudassetV1p7beta1::GoogleIdentityAccesscontextmanagerV1EgressFrom]
|
|
1544
1547
|
attr_accessor :egress_from
|
|
@@ -1555,7 +1558,7 @@ module Google
|
|
|
1555
1558
|
attr_accessor :egress_to
|
|
1556
1559
|
|
|
1557
1560
|
# Optional. Human-readable title for the egress rule. The title must be unique
|
|
1558
|
-
# within the perimeter and
|
|
1561
|
+
# within the perimeter and cannot exceed 100 characters. Within the access
|
|
1559
1562
|
# policy, the combined length of all rule titles must not exceed 240,000
|
|
1560
1563
|
# characters.
|
|
1561
1564
|
# Corresponds to the JSON property `title`
|
|
@@ -1597,9 +1600,10 @@ module Google
|
|
|
1597
1600
|
attr_accessor :psc_endpoint
|
|
1598
1601
|
|
|
1599
1602
|
# A Google Cloud resource from the service perimeter that you want to allow to
|
|
1600
|
-
# access data outside the perimeter. This field supports
|
|
1601
|
-
#
|
|
1602
|
-
#
|
|
1603
|
+
# access data outside the perimeter. This field supports projects, folders, and
|
|
1604
|
+
# organizations in the form `projects/`project_number``, `folders/`folder_id``,
|
|
1605
|
+
# and `organizations/`organization_id``. You can't use `*` in this field to
|
|
1606
|
+
# allow all Google Cloud resources.
|
|
1603
1607
|
# Corresponds to the JSON property `resource`
|
|
1604
1608
|
# @return [String]
|
|
1605
1609
|
attr_accessor :resource
|
|
@@ -1627,11 +1631,11 @@ module Google
|
|
|
1627
1631
|
include Google::Apis::Core::Hashable
|
|
1628
1632
|
|
|
1629
1633
|
# A list of external resources that are allowed to be accessed. Only AWS and
|
|
1630
|
-
# Azure resources are supported. For Amazon S3, the supported formats are s3://
|
|
1631
|
-
# BUCKET_NAME
|
|
1632
|
-
# supported format is azure://myaccount.blob.core.windows.net/
|
|
1633
|
-
# request matches if it contains an external resource in this
|
|
1634
|
-
#
|
|
1634
|
+
# Azure resources are supported. For Amazon S3, the supported formats are `s3://
|
|
1635
|
+
# BUCKET_NAME`, `s3a://BUCKET_NAME`, and `s3n://BUCKET_NAME`. For Azure Storage,
|
|
1636
|
+
# the supported format is `azure://myaccount.blob.core.windows.net/
|
|
1637
|
+
# CONTAINER_NAME`. A request matches if it contains an external resource in this
|
|
1638
|
+
# list (Example: `s3://bucket/path`). Currently `'*'` is not allowed.
|
|
1635
1639
|
# Corresponds to the JSON property `externalResources`
|
|
1636
1640
|
# @return [Array<String>]
|
|
1637
1641
|
attr_accessor :external_resources
|
|
@@ -1643,17 +1647,18 @@ module Google
|
|
|
1643
1647
|
# @return [Array<Google::Apis::CloudassetV1p7beta1::GoogleIdentityAccesscontextmanagerV1ApiOperation>]
|
|
1644
1648
|
attr_accessor :operations
|
|
1645
1649
|
|
|
1646
|
-
# A list of resources, currently
|
|
1647
|
-
#
|
|
1648
|
-
#
|
|
1649
|
-
#
|
|
1650
|
-
# resources
|
|
1650
|
+
# A list of resources, currently projects, folders, and organizations in the
|
|
1651
|
+
# form `projects/`project_number``, `folders/`folder_id``, and `organizations/`
|
|
1652
|
+
# organization_id``, that are allowed to be accessed by sources defined in the
|
|
1653
|
+
# corresponding EgressFrom. A request matches if it contains a resource in this
|
|
1654
|
+
# list. If `*` is specified for `resources`, then this EgressTo rule will
|
|
1655
|
+
# authorize access to all resources outside the perimeter.
|
|
1651
1656
|
# Corresponds to the JSON property `resources`
|
|
1652
1657
|
# @return [Array<String>]
|
|
1653
1658
|
attr_accessor :resources
|
|
1654
1659
|
|
|
1655
1660
|
# IAM roles that represent the set of operations that the sources specified in
|
|
1656
|
-
# the corresponding EgressFrom
|
|
1661
|
+
# the corresponding EgressFrom are allowed to perform in this ServicePerimeter.
|
|
1657
1662
|
# Corresponds to the JSON property `roles`
|
|
1658
1663
|
# @return [Array<String>]
|
|
1659
1664
|
attr_accessor :roles
|
|
@@ -1741,7 +1746,7 @@ module Google
|
|
|
1741
1746
|
attr_accessor :ingress_to
|
|
1742
1747
|
|
|
1743
1748
|
# Optional. Human-readable title for the ingress rule. The title must be unique
|
|
1744
|
-
# within the perimeter and
|
|
1749
|
+
# within the perimeter and cannot exceed 100 characters. Within the access
|
|
1745
1750
|
# policy, the combined length of all rule titles must not exceed 240,000
|
|
1746
1751
|
# characters.
|
|
1747
1752
|
# Corresponds to the JSON property `title`
|
|
@@ -1764,14 +1769,14 @@ module Google
|
|
|
1764
1769
|
class GoogleIdentityAccesscontextmanagerV1IngressSource
|
|
1765
1770
|
include Google::Apis::Core::Hashable
|
|
1766
1771
|
|
|
1767
|
-
# An AccessLevel resource name that
|
|
1768
|
-
# to be accessed from the internet. AccessLevels listed must
|
|
1769
|
-
# policy as this ServicePerimeter. Referencing a nonexistent
|
|
1770
|
-
# cause an error. If no AccessLevel names are listed, resources
|
|
1771
|
-
# perimeter can only be accessed via Google Cloud calls with request
|
|
1772
|
-
# within the perimeter. Example: `accessPolicies/MY_POLICY/accessLevels/
|
|
1773
|
-
#
|
|
1774
|
-
# will be allowed.
|
|
1772
|
+
# An AccessLevel resource name that allows resources within the
|
|
1773
|
+
# ServicePerimeters to be accessed from the internet. AccessLevels listed must
|
|
1774
|
+
# be in the same policy as this ServicePerimeter. Referencing a nonexistent
|
|
1775
|
+
# AccessLevel will cause an error. If no AccessLevel names are listed, resources
|
|
1776
|
+
# within the perimeter can only be accessed via Google Cloud calls with request
|
|
1777
|
+
# origins within the perimeter. Example: `accessPolicies/MY_POLICY/accessLevels/
|
|
1778
|
+
# MY_LEVEL`. If a single `*` is specified for `access_level`, then all
|
|
1779
|
+
# IngressSources will be allowed.
|
|
1775
1780
|
# Corresponds to the JSON property `accessLevel`
|
|
1776
1781
|
# @return [String]
|
|
1777
1782
|
attr_accessor :access_level
|
|
@@ -1782,12 +1787,14 @@ module Google
|
|
|
1782
1787
|
attr_accessor :psc_endpoint
|
|
1783
1788
|
|
|
1784
1789
|
# A Google Cloud resource that is allowed to ingress the perimeter. Requests
|
|
1785
|
-
# from these resources will be allowed to access perimeter data. Currently
|
|
1786
|
-
# projects and VPCs are allowed. Project format: `
|
|
1787
|
-
#
|
|
1788
|
-
#
|
|
1789
|
-
#
|
|
1790
|
-
#
|
|
1790
|
+
# from these resources will be allowed to access perimeter data. Currently
|
|
1791
|
+
# projects, folders, organizations, and VPCs are allowed. Project format: `
|
|
1792
|
+
# projects/`project_number`` Folder format: `folders/`folder_id`` Organization
|
|
1793
|
+
# format: `organizations/`organization_id`` VPC network format: `//compute.
|
|
1794
|
+
# googleapis.com/projects/`PROJECT_ID`/global/networks/`NAME``. The project may
|
|
1795
|
+
# be in any Google Cloud organization, not just the organization that the
|
|
1796
|
+
# perimeter is defined in. `*` is not allowed, the case of allowing all Google
|
|
1797
|
+
# Cloud resources only is not supported.
|
|
1791
1798
|
# Corresponds to the JSON property `resource`
|
|
1792
1799
|
# @return [String]
|
|
1793
1800
|
attr_accessor :resource
|
|
@@ -1817,10 +1824,11 @@ module Google
|
|
|
1817
1824
|
# @return [Array<Google::Apis::CloudassetV1p7beta1::GoogleIdentityAccesscontextmanagerV1ApiOperation>]
|
|
1818
1825
|
attr_accessor :operations
|
|
1819
1826
|
|
|
1820
|
-
# A list of resources, currently
|
|
1821
|
-
#
|
|
1822
|
-
#
|
|
1823
|
-
#
|
|
1827
|
+
# A list of resources, currently projects, folders, and organizations in the
|
|
1828
|
+
# form `projects/`project_number``, `folders/`folder_id``, and `organizations/`
|
|
1829
|
+
# organization_id``, protected by this ServicePerimeter that are allowed to be
|
|
1830
|
+
# accessed by sources defined in the corresponding IngressFrom. If a single `*`
|
|
1831
|
+
# is specified, then access to all resources inside the perimeter is allowed.
|
|
1824
1832
|
# Corresponds to the JSON property `resources`
|
|
1825
1833
|
# @return [Array<String>]
|
|
1826
1834
|
attr_accessor :resources
|
|
@@ -1906,8 +1914,8 @@ module Google
|
|
|
1906
1914
|
# @return [String]
|
|
1907
1915
|
attr_accessor :os_type
|
|
1908
1916
|
|
|
1909
|
-
# Only allows requests from devices with a verified Chrome OS.
|
|
1910
|
-
# includes requirements that the device is enterprise-managed,
|
|
1917
|
+
# Only allows requests from devices with a verified Chrome OS. Verification
|
|
1918
|
+
# includes requirements that the device is enterprise-managed, conforms to
|
|
1911
1919
|
# domain policies, and the caller has permission to call the API targeted by the
|
|
1912
1920
|
# request.
|
|
1913
1921
|
# Corresponds to the JSON property `requireVerifiedChromeOs`
|
|
@@ -1957,9 +1965,9 @@ module Google
|
|
|
1957
1965
|
# @return [Array<Google::Apis::CloudassetV1p7beta1::GoogleIdentityAccesscontextmanagerV1Modifier>]
|
|
1958
1966
|
attr_accessor :modifiers
|
|
1959
1967
|
|
|
1960
|
-
# URL pattern to allow. Only patterns of ".googleapis.com/*"
|
|
1961
|
-
# com//*" and "*.appspot.com/* forms are supported, where should be
|
|
1962
|
-
#
|
|
1968
|
+
# URL pattern to allow. Only patterns of `".googleapis.com/*"`, `"www.googleapis.
|
|
1969
|
+
# com//*"`, and `"*.appspot.com/*"` forms are supported, where `` should be an
|
|
1970
|
+
# alphanumeric name.
|
|
1963
1971
|
# Corresponds to the JSON property `pattern`
|
|
1964
1972
|
# @return [String]
|
|
1965
1973
|
attr_accessor :pattern
|
|
@@ -2016,8 +2024,8 @@ module Google
|
|
|
2016
2024
|
attr_accessor :name
|
|
2017
2025
|
|
|
2018
2026
|
# Perimeter type indicator. A single project or VPC network is allowed to be a
|
|
2019
|
-
# member of single regular perimeter, but multiple service perimeter bridges.
|
|
2020
|
-
# project cannot be
|
|
2027
|
+
# member of a single regular perimeter, but multiple service perimeter bridges.
|
|
2028
|
+
# A project cannot be included in a perimeter bridge without being included in a
|
|
2021
2029
|
# regular perimeter. For perimeter bridges, the restricted service list as well
|
|
2022
2030
|
# as access level lists must be empty.
|
|
2023
2031
|
# Corresponds to the JSON property `perimeterType`
|
|
@@ -2048,8 +2056,9 @@ module Google
|
|
|
2048
2056
|
# ("spec") to use in a dry-run version of the Service Perimeter. This allows the
|
|
2049
2057
|
# user to test changes to the enforced config ("status") without actually
|
|
2050
2058
|
# enforcing them. This testing is done through analyzing the differences between
|
|
2051
|
-
# currently enforced and suggested restrictions. use_explicit_dry_run_spec
|
|
2052
|
-
#
|
|
2059
|
+
# currently enforced and suggested restrictions. `use_explicit_dry_run_spec`
|
|
2060
|
+
# must be set to `true` if any of the fields in the spec are set to non-default
|
|
2061
|
+
# values.
|
|
2053
2062
|
# Corresponds to the JSON property `useExplicitDryRunSpec`
|
|
2054
2063
|
# @return [Boolean]
|
|
2055
2064
|
attr_accessor :use_explicit_dry_run_spec
|
|
@@ -2103,9 +2112,9 @@ module Google
|
|
|
2103
2112
|
attr_accessor :ingress_policies
|
|
2104
2113
|
|
|
2105
2114
|
# A list of Google Cloud resources that are inside of the service perimeter.
|
|
2106
|
-
# Currently
|
|
2107
|
-
# project_number`` VPC network format: `//
|
|
2108
|
-
# PROJECT_ID`/global/networks/`NAME``.
|
|
2115
|
+
# Currently projects, folders, and VPCs are allowed. Project format: `projects/`
|
|
2116
|
+
# project_number`` Folder format: `folders/`folder_id`` VPC network format: `//
|
|
2117
|
+
# compute.googleapis.com/projects/`PROJECT_ID`/global/networks/`NAME``.
|
|
2109
2118
|
# Corresponds to the JSON property `resources`
|
|
2110
2119
|
# @return [Array<String>]
|
|
2111
2120
|
attr_accessor :resources
|
|
@@ -2147,16 +2156,16 @@ module Google
|
|
|
2147
2156
|
# @return [Array<Google::Apis::CloudassetV1p7beta1::GoogleIdentityAccesscontextmanagerV1ServicePattern>]
|
|
2148
2157
|
attr_accessor :allowed_service_patterns
|
|
2149
2158
|
|
|
2150
|
-
# The list of APIs usable within the Service Perimeter. Must be empty unless
|
|
2151
|
-
# enable_restriction
|
|
2152
|
-
# well as include the 'RESTRICTED-SERVICES' value, which automatically
|
|
2153
|
-
# all of the services protected by the perimeter.
|
|
2159
|
+
# The list of APIs usable within the Service Perimeter. Must be empty unless `
|
|
2160
|
+
# enable_restriction` is `true`. You can specify a list of individual services,
|
|
2161
|
+
# as well as include the `'RESTRICTED-SERVICES'` value, which automatically
|
|
2162
|
+
# includes all of the services protected by the perimeter.
|
|
2154
2163
|
# Corresponds to the JSON property `allowedServices`
|
|
2155
2164
|
# @return [Array<String>]
|
|
2156
2165
|
attr_accessor :allowed_services
|
|
2157
2166
|
|
|
2158
2167
|
# Whether to restrict API calls within the Service Perimeter to the list of APIs
|
|
2159
|
-
# specified in
|
|
2168
|
+
# specified in `allowed_services`.
|
|
2160
2169
|
# Corresponds to the JSON property `enableRestriction`
|
|
2161
2170
|
# @return [Boolean]
|
|
2162
2171
|
attr_accessor :enable_restriction
|
|
@@ -2184,7 +2193,7 @@ module Google
|
|
|
2184
2193
|
class GoogleIdentityAccesscontextmanagerV1VpcNetworkSource
|
|
2185
2194
|
include Google::Apis::Core::Hashable
|
|
2186
2195
|
|
|
2187
|
-
# Sub-segment ranges inside of a VPC
|
|
2196
|
+
# Sub-segment ranges inside of a VPC network.
|
|
2188
2197
|
# Corresponds to the JSON property `vpcSubnetwork`
|
|
2189
2198
|
# @return [Google::Apis::CloudassetV1p7beta1::GoogleIdentityAccesscontextmanagerV1VpcSubNetwork]
|
|
2190
2199
|
attr_accessor :vpc_subnetwork
|
|
@@ -2199,7 +2208,7 @@ module Google
|
|
|
2199
2208
|
end
|
|
2200
2209
|
end
|
|
2201
2210
|
|
|
2202
|
-
# Sub-segment ranges inside of a VPC
|
|
2211
|
+
# Sub-segment ranges inside of a VPC network.
|
|
2203
2212
|
class GoogleIdentityAccesscontextmanagerV1VpcSubNetwork
|
|
2204
2213
|
include Google::Apis::Core::Hashable
|
|
2205
2214
|
|
|
@@ -2214,10 +2223,10 @@ module Google
|
|
|
2214
2223
|
|
|
2215
2224
|
# CIDR block IP subnetwork specification. The IP address must be an IPv4 address
|
|
2216
2225
|
# and can be a public or private IP address. Note that for a CIDR IP address
|
|
2217
|
-
# block, the specified IP address portion must be properly truncated (
|
|
2218
|
-
# the host bits must be zero) or the input is considered malformed. For
|
|
2219
|
-
# "192.0.2.0/24" is accepted but "192.0.2.1/24" is not. If empty,
|
|
2220
|
-
# addresses are allowed.
|
|
2226
|
+
# block, the specified IP address portion must be properly truncated (that is,
|
|
2227
|
+
# all the host bits must be zero) or the input is considered malformed. For
|
|
2228
|
+
# example, `"192.0.2.0/24"` is accepted, but `"192.0.2.1/24"` is not. If empty,
|
|
2229
|
+
# all IP addresses are allowed.
|
|
2221
2230
|
# Corresponds to the JSON property `vpcIpSubnetworks`
|
|
2222
2231
|
# @return [Array<String>]
|
|
2223
2232
|
attr_accessor :vpc_ip_subnetworks
|
|
@@ -16,13 +16,13 @@ module Google
|
|
|
16
16
|
module Apis
|
|
17
17
|
module CloudassetV1p7beta1
|
|
18
18
|
# Version of the google-apis-cloudasset_v1p7beta1 gem
|
|
19
|
-
GEM_VERSION = "0.
|
|
19
|
+
GEM_VERSION = "0.55.0"
|
|
20
20
|
|
|
21
21
|
# Version of the code generator used to generate this client
|
|
22
|
-
GENERATOR_VERSION = "0.19.
|
|
22
|
+
GENERATOR_VERSION = "0.19.1"
|
|
23
23
|
|
|
24
24
|
# Revision of the discovery document this client was generated from
|
|
25
|
-
REVISION = "
|
|
25
|
+
REVISION = "20261017"
|
|
26
26
|
end
|
|
27
27
|
end
|
|
28
28
|
end
|
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: google-apis-cloudasset_v1p7beta1
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.
|
|
4
|
+
version: 0.55.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Google LLC
|
|
@@ -57,7 +57,7 @@ licenses:
|
|
|
57
57
|
metadata:
|
|
58
58
|
bug_tracker_uri: https://github.com/googleapis/google-api-ruby-client/issues
|
|
59
59
|
changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-cloudasset_v1p7beta1/CHANGELOG.md
|
|
60
|
-
documentation_uri: https://googleapis.dev/ruby/google-apis-cloudasset_v1p7beta1/v0.
|
|
60
|
+
documentation_uri: https://googleapis.dev/ruby/google-apis-cloudasset_v1p7beta1/v0.55.0
|
|
61
61
|
source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-cloudasset_v1p7beta1
|
|
62
62
|
rdoc_options: []
|
|
63
63
|
require_paths:
|