google-apis-gkebackup_v1 0.1.0

data/lib/google/apis/gkebackup_v1/classes.rb

@@ -0,0 +1,2114 @@
+# Copyright 2020 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+require 'date'
+require 'google/apis/core/base_service'
+require 'google/apis/core/json_representation'
+require 'google/apis/core/hashable'
+require 'google/apis/errors'
+
+module Google
+  module Apis
+    module GkebackupV1
+      
+      # Specifies the audit configuration for a service. The configuration determines
+      # which permission types are logged, and what identities, if any, are exempted
+      # from logging. An AuditConfig must have one or more AuditLogConfigs. If there
+      # are AuditConfigs for both `allServices` and a specific service, the union of
+      # the two AuditConfigs is used for that service: the log_types specified in each
+      # AuditConfig are enabled, and the exempted_members in each AuditLogConfig are
+      # exempted. Example Policy with multiple AuditConfigs: ` "audit_configs": [ ` "
+      # service": "allServices", "audit_log_configs": [ ` "log_type": "DATA_READ", "
+      # exempted_members": [ "user:jose@example.com" ] `, ` "log_type": "DATA_WRITE" `,
+      # ` "log_type": "ADMIN_READ" ` ] `, ` "service": "sampleservice.googleapis.com",
+      # "audit_log_configs": [ ` "log_type": "DATA_READ" `, ` "log_type": "DATA_WRITE"
+      # , "exempted_members": [ "user:aliya@example.com" ] ` ] ` ] ` For sampleservice,
+      # this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also
+      # exempts jose@example.com from DATA_READ logging, and aliya@example.com from
+      # DATA_WRITE logging.
+      class AuditConfig
+        include Google::Apis::Core::Hashable
+      
+        # The configuration for logging of each type of permission.
+        # Corresponds to the JSON property `auditLogConfigs`
+        # @return [Array<Google::Apis::GkebackupV1::AuditLogConfig>]
+        attr_accessor :audit_log_configs
+      
+        # Specifies a service that will be enabled for audit logging. For example, `
+        # storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special
+        # value that covers all services.
+        # Corresponds to the JSON property `service`
+        # @return [String]
+        attr_accessor :service
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @audit_log_configs = args[:audit_log_configs] if args.key?(:audit_log_configs)
+          @service = args[:service] if args.key?(:service)
+        end
+      end
+      
+      # Provides the configuration for logging a type of permissions. Example: ` "
+      # audit_log_configs": [ ` "log_type": "DATA_READ", "exempted_members": [ "user:
+      # jose@example.com" ] `, ` "log_type": "DATA_WRITE" ` ] ` This enables '
+      # DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from
+      # DATA_READ logging.
+      class AuditLogConfig
+        include Google::Apis::Core::Hashable
+      
+        # Specifies the identities that do not cause logging for this type of permission.
+        # Follows the same format of Binding.members.
+        # Corresponds to the JSON property `exemptedMembers`
+        # @return [Array<String>]
+        attr_accessor :exempted_members
+      
+        # The log type that this config enables.
+        # Corresponds to the JSON property `logType`
+        # @return [String]
+        attr_accessor :log_type
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @exempted_members = args[:exempted_members] if args.key?(:exempted_members)
+          @log_type = args[:log_type] if args.key?(:log_type)
+        end
+      end
+      
+      # Represents a request to perform a single point-in-time capture of some portion
+      # of the state of a GKE cluster, the record of the backup operation itself, and
+      # an anchor for the underlying artifacts that comprise the Backup (the config
+      # backup and VolumeBackups). Next id: 28
+      class Backup
+        include Google::Apis::Core::Hashable
+      
+        # Output only. If True, all namespaces were included in the Backup.
+        # Corresponds to the JSON property `allNamespaces`
+        # @return [Boolean]
+        attr_accessor :all_namespaces
+        alias_method :all_namespaces?, :all_namespaces
+      
+        # Information about the GKE cluster from which this Backup was created.
+        # Corresponds to the JSON property `clusterMetadata`
+        # @return [Google::Apis::GkebackupV1::ClusterMetadata]
+        attr_accessor :cluster_metadata
+      
+        # Output only. Completion time of the Backup
+        # Corresponds to the JSON property `completeTime`
+        # @return [String]
+        attr_accessor :complete_time
+      
+        # Output only. cluster config backup size in bytes.
+        # Corresponds to the JSON property `configBackupSizeBytes`
+        # @return [Fixnum]
+        attr_accessor :config_backup_size_bytes
+      
+        # Output only. Whether or not the Backup contains Kubernetes Secrets. Inherited
+        # from the parent BackupPlan's backup_config.include_secrets.
+        # Corresponds to the JSON property `containsSecrets`
+        # @return [Boolean]
+        attr_accessor :contains_secrets
+        alias_method :contains_secrets?, :contains_secrets
+      
+        # Output only. Whether or not the Backup contains volume data. Inherited from
+        # the parent BackupPlan's backup_config.include_volume_data.
+        # Corresponds to the JSON property `containsVolumeData`
+        # @return [Boolean]
+        attr_accessor :contains_volume_data
+        alias_method :contains_volume_data?, :contains_volume_data
+      
+        # Output only. [Output Only] The timestamp when this Backup resource was created
+        # - can be converted to and from [RFC3339](https://www.ietf.org/rfc/rfc3339.txt)
+        # Corresponds to the JSON property `createTime`
+        # @return [String]
+        attr_accessor :create_time
+      
+        # Minimum age for this Backup (in days). If this field is set to a non-zero
+        # value, the Backup will be "locked" against deletion (either manual or
+        # automatic deletion) for the number of days provided (measured from the
+        # creation time of the Backup). This value is inherited from the parent
+        # BackupPlan's retention_policy.backup_delete_lock_days value and may only be
+        # increased (either at creation time or in a subsequent update). This field MUST
+        # be an integer value between 0-90 (inclusive). Default: inherited from
+        # BackupPlan.
+        # Corresponds to the JSON property `deleteLockDays`
+        # @return [Fixnum]
+        attr_accessor :delete_lock_days
+      
+        # Output only. The time at which an existing delete lock will expire for this
+        # backup (calculated from create_time + delete_lock_days).
+        # Corresponds to the JSON property `deleteLockExpireTime`
+        # @return [String]
+        attr_accessor :delete_lock_expire_time
+      
+        # User specified descriptive string for this Backup.
+        # Corresponds to the JSON property `description`
+        # @return [String]
+        attr_accessor :description
+      
+        # Defined a customer managed encryption key that will be used to encrypt Backup
+        # artifacts.
+        # Corresponds to the JSON property `encryptionKey`
+        # @return [Google::Apis::GkebackupV1::EncryptionKey]
+        attr_accessor :encryption_key
+      
+        # Output only. `etag` is used for optimistic concurrency control as a way to
+        # help prevent simultaneous updates of a backup from overwriting each other. It
+        # is strongly suggested that systems make use of the `etag` in the read-modify-
+        # write cycle to perform backup updates in order to avoid race conditions: An `
+        # etag` is returned in the response to `GetBackup`, and systems are expected to
+        # put that etag in the request to `UpdateBackup` to ensure that their change
+        # will be applied to the same version.
+        # Corresponds to the JSON property `etag`
+        # @return [String]
+        attr_accessor :etag
+      
+        # A set of custom labels supplied by user.
+        # Corresponds to the JSON property `labels`
+        # @return [Hash<String,String>]
+        attr_accessor :labels
+      
+        # Output only. This flag indicates whether this Backup resource was created
+        # manually by a user or via a schedule in the BackupPlan. A value of True means
+        # that the Backup was created manually.
+        # Corresponds to the JSON property `manual`
+        # @return [Boolean]
+        attr_accessor :manual
+        alias_method :manual?, :manual
+      
+        # Output only. The fully qualified name of the Backup. projects/*/locations/*/
+        # backupPlans/*/backups/*
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        # Output only. The total number of Kubernetes Pods contained in the Backup.
+        # Corresponds to the JSON property `podCount`
+        # @return [Fixnum]
+        attr_accessor :pod_count
+      
+        # Output only. The total number of Kubernetes resources included in the Backup.
+        # Corresponds to the JSON property `resourceCount`
+        # @return [Fixnum]
+        attr_accessor :resource_count
+      
+        # The age (in days) after which this Backup will be automatically deleted. If
+        # not specified at Backup creation time, this value is inherited from the parent
+        # BackupPlan's retention_policy.backup_retain_days value. Once a Backup is
+        # created, this value may only be increased. This must be an integer value >= 0.
+        # If 0, no automatic deletion will occur for this Backup. If not 0, this must be
+        # >= delete_lock_days. Default: inherited from BackupPlan.
+        # Corresponds to the JSON property `retainDays`
+        # @return [Fixnum]
+        attr_accessor :retain_days
+      
+        # Output only. The time at which this Backup will be automatically deleted (
+        # calculated from create_time + retain_days).
+        # Corresponds to the JSON property `retainExpireTime`
+        # @return [String]
+        attr_accessor :retain_expire_time
+      
+        # A list of namespaced Kubernetes resources.
+        # Corresponds to the JSON property `selectedApplications`
+        # @return [Google::Apis::GkebackupV1::NamespacedNames]
+        attr_accessor :selected_applications
+      
+        # A list of Kubernetes Namespaces
+        # Corresponds to the JSON property `selectedNamespaces`
+        # @return [Google::Apis::GkebackupV1::Namespaces]
+        attr_accessor :selected_namespaces
+      
+        # Output only. The total size of the Backup in bytes = config backup size + sum(
+        # volume backup sizes)
+        # Corresponds to the JSON property `sizeBytes`
+        # @return [Fixnum]
+        attr_accessor :size_bytes
+      
+        # Output only. Current state of the Backup
+        # Corresponds to the JSON property `state`
+        # @return [String]
+        attr_accessor :state
+      
+        # Output only. Human-readable description of why the backup is in the current `
+        # state`.
+        # Corresponds to the JSON property `stateReason`
+        # @return [String]
+        attr_accessor :state_reason
+      
+        # Output only. [Output Only] Server generated global unique identifier of [UUID4]
+        # (https://en.wikipedia.org/wiki/Universally_unique_identifier)
+        # Corresponds to the JSON property `uid`
+        # @return [String]
+        attr_accessor :uid
+      
+        # Output only. [Output Only] The timestamp when this Backup resource was last
+        # updated - can be converted to and from [RFC3339](https://www.ietf.org/rfc/
+        # rfc3339.txt)
+        # Corresponds to the JSON property `updateTime`
+        # @return [String]
+        attr_accessor :update_time
+      
+        # Output only. The total number of volume backups contained in the Backup.
+        # Corresponds to the JSON property `volumeCount`
+        # @return [Fixnum]
+        attr_accessor :volume_count
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @all_namespaces = args[:all_namespaces] if args.key?(:all_namespaces)
+          @cluster_metadata = args[:cluster_metadata] if args.key?(:cluster_metadata)
+          @complete_time = args[:complete_time] if args.key?(:complete_time)
+          @config_backup_size_bytes = args[:config_backup_size_bytes] if args.key?(:config_backup_size_bytes)
+          @contains_secrets = args[:contains_secrets] if args.key?(:contains_secrets)
+          @contains_volume_data = args[:contains_volume_data] if args.key?(:contains_volume_data)
+          @create_time = args[:create_time] if args.key?(:create_time)
+          @delete_lock_days = args[:delete_lock_days] if args.key?(:delete_lock_days)
+          @delete_lock_expire_time = args[:delete_lock_expire_time] if args.key?(:delete_lock_expire_time)
+          @description = args[:description] if args.key?(:description)
+          @encryption_key = args[:encryption_key] if args.key?(:encryption_key)
+          @etag = args[:etag] if args.key?(:etag)
+          @labels = args[:labels] if args.key?(:labels)
+          @manual = args[:manual] if args.key?(:manual)
+          @name = args[:name] if args.key?(:name)
+          @pod_count = args[:pod_count] if args.key?(:pod_count)
+          @resource_count = args[:resource_count] if args.key?(:resource_count)
+          @retain_days = args[:retain_days] if args.key?(:retain_days)
+          @retain_expire_time = args[:retain_expire_time] if args.key?(:retain_expire_time)
+          @selected_applications = args[:selected_applications] if args.key?(:selected_applications)
+          @selected_namespaces = args[:selected_namespaces] if args.key?(:selected_namespaces)
+          @size_bytes = args[:size_bytes] if args.key?(:size_bytes)
+          @state = args[:state] if args.key?(:state)
+          @state_reason = args[:state_reason] if args.key?(:state_reason)
+          @uid = args[:uid] if args.key?(:uid)
+          @update_time = args[:update_time] if args.key?(:update_time)
+          @volume_count = args[:volume_count] if args.key?(:volume_count)
+        end
+      end
+      
+      # BackupConfig defines the configuration of Backups created via this BackupPlan.
+      class BackupConfig
+        include Google::Apis::Core::Hashable
+      
+        # If True, include all namespaced resources
+        # Corresponds to the JSON property `allNamespaces`
+        # @return [Boolean]
+        attr_accessor :all_namespaces
+        alias_method :all_namespaces?, :all_namespaces
+      
+        # Defined a customer managed encryption key that will be used to encrypt Backup
+        # artifacts.
+        # Corresponds to the JSON property `encryptionKey`
+        # @return [Google::Apis::GkebackupV1::EncryptionKey]
+        attr_accessor :encryption_key
+      
+        # This flag specifies whether Kubernetes Secret resources should be included
+        # when they fall into the scope of Backups. Default: False
+        # Corresponds to the JSON property `includeSecrets`
+        # @return [Boolean]
+        attr_accessor :include_secrets
+        alias_method :include_secrets?, :include_secrets
+      
+        # This flag specifies whether volume data should be backed up when PVCs are
+        # included in the scope of a Backup. Default: False
+        # Corresponds to the JSON property `includeVolumeData`
+        # @return [Boolean]
+        attr_accessor :include_volume_data
+        alias_method :include_volume_data?, :include_volume_data
+      
+        # A list of namespaced Kubernetes resources.
+        # Corresponds to the JSON property `selectedApplications`
+        # @return [Google::Apis::GkebackupV1::NamespacedNames]
+        attr_accessor :selected_applications
+      
+        # A list of Kubernetes Namespaces
+        # Corresponds to the JSON property `selectedNamespaces`
+        # @return [Google::Apis::GkebackupV1::Namespaces]
+        attr_accessor :selected_namespaces
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @all_namespaces = args[:all_namespaces] if args.key?(:all_namespaces)
+          @encryption_key = args[:encryption_key] if args.key?(:encryption_key)
+          @include_secrets = args[:include_secrets] if args.key?(:include_secrets)
+          @include_volume_data = args[:include_volume_data] if args.key?(:include_volume_data)
+          @selected_applications = args[:selected_applications] if args.key?(:selected_applications)
+          @selected_namespaces = args[:selected_namespaces] if args.key?(:selected_namespaces)
+        end
+      end
+      
+      # Defines the configuration and scheduling for a "line" of Backups.
+      class BackupPlan
+        include Google::Apis::Core::Hashable
+      
+        # BackupConfig defines the configuration of Backups created via this BackupPlan.
+        # Corresponds to the JSON property `backupConfig`
+        # @return [Google::Apis::GkebackupV1::BackupConfig]
+        attr_accessor :backup_config
+      
+        # Schedule defines scheduling parameters for automatically creating Backups via
+        # this BackupPlan.
+        # Corresponds to the JSON property `backupSchedule`
+        # @return [Google::Apis::GkebackupV1::Schedule]
+        attr_accessor :backup_schedule
+      
+        # Required. Immutable. The source cluster from which Backups will be created via
+        # this BackupPlan. Possible formats: 1. projects/*/locations/*/clusters/* 2.
+        # projects/*/zones/*/clusters/*
+        # Corresponds to the JSON property `cluster`
+        # @return [String]
+        attr_accessor :cluster
+      
+        # Output only. [Output Only] The timestamp when this BackupPlan resource was
+        # created - can be converted to and from [RFC3339](https://www.ietf.org/rfc/
+        # rfc3339.txt)
+        # Corresponds to the JSON property `createTime`
+        # @return [String]
+        attr_accessor :create_time
+      
+        # This flag indicates whether this BackupPlan has been deactivated. Setting this
+        # field to True locks the BackupPlan such that no further updates will be
+        # allowed, including the deactivated field. It also prevents any new Backups
+        # from being created via this BackupPlan (including scheduled Backups). Default:
+        # False
+        # Corresponds to the JSON property `deactivated`
+        # @return [Boolean]
+        attr_accessor :deactivated
+        alias_method :deactivated?, :deactivated
+      
+        # User specified descriptive string for this BackupPlan.
+        # Corresponds to the JSON property `description`
+        # @return [String]
+        attr_accessor :description
+      
+        # Output only. `etag` is used for optimistic concurrency control as a way to
+        # help prevent simultaneous updates of a backup plan from overwriting each other.
+        # It is strongly suggested that systems make use of the 'etag' in the read-
+        # modify-write cycle to perform BackupPlan updates in order to avoid race
+        # conditions: An `etag` is returned in the response to `GetBackupPlan`, and
+        # systems are expected to put that etag in the request to `UpdateBackupPlan` to
+        # ensure that their change will be applied to the same version.
+        # Corresponds to the JSON property `etag`
+        # @return [String]
+        attr_accessor :etag
+      
+        # A set of custom labels supplied by user.
+        # Corresponds to the JSON property `labels`
+        # @return [Hash<String,String>]
+        attr_accessor :labels
+      
+        # Output only. [Output Only] The full name of the BackupPlan resource. Format:
+        # projects/*/locations/*/backupPlans/*
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        # Output only. [Output Only] Represents the number of Kubernetes Pods backed up
+        # in the last successful Backup created underneath this BackupPlan.
+        # Corresponds to the JSON property `protectedPodCount`
+        # @return [Fixnum]
+        attr_accessor :protected_pod_count
+      
+        # RentionPolicy is an inner message type to define: 1. Minimum age for Backups
+        # created via this BackupPlan - deletion (either manual or automatic) of Backups
+        # younger than this age will be blocked 2. Default maximum age of Backups
+        # created via this BackupPlan, after which automatic deletion will occur 3. Lock
+        # to disallow any changes to any RetentionPolicy settings
+        # Corresponds to the JSON property `retentionPolicy`
+        # @return [Google::Apis::GkebackupV1::RetentionPolicy]
+        attr_accessor :retention_policy
+      
+        # Output only. [Output Only] Server generated global unique identifier of [UUID](
+        # https://en.wikipedia.org/wiki/Universally_unique_identifier) format.
+        # Corresponds to the JSON property `uid`
+        # @return [String]
+        attr_accessor :uid
+      
+        # Output only. [Output Only] The timestamp when this BackupPlan resource was
+        # last updated - can be converted to and from [RFC3339](https://www.ietf.org/rfc/
+        # rfc3339.txt)
+        # Corresponds to the JSON property `updateTime`
+        # @return [String]
+        attr_accessor :update_time
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @backup_config = args[:backup_config] if args.key?(:backup_config)
+          @backup_schedule = args[:backup_schedule] if args.key?(:backup_schedule)
+          @cluster = args[:cluster] if args.key?(:cluster)
+          @create_time = args[:create_time] if args.key?(:create_time)
+          @deactivated = args[:deactivated] if args.key?(:deactivated)
+          @description = args[:description] if args.key?(:description)
+          @etag = args[:etag] if args.key?(:etag)
+          @labels = args[:labels] if args.key?(:labels)
+          @name = args[:name] if args.key?(:name)
+          @protected_pod_count = args[:protected_pod_count] if args.key?(:protected_pod_count)
+          @retention_policy = args[:retention_policy] if args.key?(:retention_policy)
+          @uid = args[:uid] if args.key?(:uid)
+          @update_time = args[:update_time] if args.key?(:update_time)
+        end
+      end
+      
+      # Associates `members`, or principals, with a `role`.
+      class Binding
+        include Google::Apis::Core::Hashable
+      
+        # Represents a textual expression in the Common Expression Language (CEL) syntax.
+        # CEL is a C-like expression language. The syntax and semantics of CEL are
+        # documented at https://github.com/google/cel-spec. Example (Comparison): title:
+        # "Summary size limit" description: "Determines if a summary is less than 100
+        # chars" expression: "document.summary.size() < 100" Example (Equality): title: "
+        # Requestor is owner" description: "Determines if requestor is the document
+        # owner" expression: "document.owner == request.auth.claims.email" Example (
+        # Logic): title: "Public documents" description: "Determine whether the document
+        # should be publicly visible" expression: "document.type != 'private' &&
+        # document.type != 'internal'" Example (Data Manipulation): title: "Notification
+        # string" description: "Create a notification string with a timestamp."
+        # expression: "'New message received at ' + string(document.create_time)" The
+        # exact variables and functions that may be referenced within an expression are
+        # determined by the service that evaluates it. See the service documentation for
+        # additional information.
+        # Corresponds to the JSON property `condition`
+        # @return [Google::Apis::GkebackupV1::Expr]
+        attr_accessor :condition
+      
+        # Specifies the principals requesting access for a Cloud Platform resource. `
+        # members` can have the following values: * `allUsers`: A special identifier
+        # that represents anyone who is on the internet; with or without a Google
+        # account. * `allAuthenticatedUsers`: A special identifier that represents
+        # anyone who is authenticated with a Google account or a service account. * `
+        # user:`emailid``: An email address that represents a specific Google account.
+        # For example, `alice@example.com` . * `serviceAccount:`emailid``: An email
+        # address that represents a service account. For example, `my-other-app@appspot.
+        # gserviceaccount.com`. * `group:`emailid``: An email address that represents a
+        # Google group. For example, `admins@example.com`. * `deleted:user:`emailid`?uid=
+        # `uniqueid``: An email address (plus unique identifier) representing a user
+        # that has been recently deleted. For example, `alice@example.com?uid=
+        # 123456789012345678901`. If the user is recovered, this value reverts to `user:`
+        # emailid`` and the recovered user retains the role in the binding. * `deleted:
+        # serviceAccount:`emailid`?uid=`uniqueid``: An email address (plus unique
+        # identifier) representing a service account that has been recently deleted. For
+        # example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
+        # If the service account is undeleted, this value reverts to `serviceAccount:`
+        # emailid`` and the undeleted service account retains the role in the binding. *
+        # `deleted:group:`emailid`?uid=`uniqueid``: An email address (plus unique
+        # identifier) representing a Google group that has been recently deleted. For
+        # example, `admins@example.com?uid=123456789012345678901`. If the group is
+        # recovered, this value reverts to `group:`emailid`` and the recovered group
+        # retains the role in the binding. * `domain:`domain``: The G Suite domain (
+        # primary) that represents all the users of that domain. For example, `google.
+        # com` or `example.com`.
+        # Corresponds to the JSON property `members`
+        # @return [Array<String>]
+        attr_accessor :members
+      
+        # Role that is assigned to the list of `members`, or principals. For example, `
+        # roles/viewer`, `roles/editor`, or `roles/owner`.
+        # Corresponds to the JSON property `role`
+        # @return [String]
+        attr_accessor :role
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @condition = args[:condition] if args.key?(:condition)
+          @members = args[:members] if args.key?(:members)
+          @role = args[:role] if args.key?(:role)
+        end
+      end
+      
+      # Information about the GKE cluster from which this Backup was created.
+      class ClusterMetadata
+        include Google::Apis::Core::Hashable
+      
+        # Anthos version
+        # Corresponds to the JSON property `anthosVersion`
+        # @return [String]
+        attr_accessor :anthos_version
+      
+        # A list of the Backup for GKE CRD versions found in the cluster.
+        # Corresponds to the JSON property `backupCrdVersions`
+        # @return [Hash<String,String>]
+        attr_accessor :backup_crd_versions
+      
+        # The source cluster from which this Backup was created. Possible formats: 1.
+        # projects/*/locations/*/clusters/* 2. projects/*/zones/*/clusters/* This will
+        # be the same value as the parent BackupPlan's cluster field.
+        # Corresponds to the JSON property `cluster`
+        # @return [String]
+        attr_accessor :cluster
+      
+        # GKE version
+        # Corresponds to the JSON property `gkeVersion`
+        # @return [String]
+        attr_accessor :gke_version
+      
+        # The Kubernetes server version of the source cluster.
+        # Corresponds to the JSON property `k8sVersion`
+        # @return [String]
+        attr_accessor :k8s_version
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @anthos_version = args[:anthos_version] if args.key?(:anthos_version)
+          @backup_crd_versions = args[:backup_crd_versions] if args.key?(:backup_crd_versions)
+          @cluster = args[:cluster] if args.key?(:cluster)
+          @gke_version = args[:gke_version] if args.key?(:gke_version)
+          @k8s_version = args[:k8s_version] if args.key?(:k8s_version)
+        end
+      end
+      
+      # Identifies the cluster-scoped resources to restore from the Backup.
+      class ClusterResourceRestoreScope
+        include Google::Apis::Core::Hashable
+      
+        # A list of "types" of cluster-scoped resources to be restored from the Backup.
+        # An empty list means that NO cluster-scoped resources will be restored. Note
+        # that Namespaces and PersistentVolume restoration is handled separately and is
+        # not governed by this field.
+        # Corresponds to the JSON property `selectedGroupKinds`
+        # @return [Array<Google::Apis::GkebackupV1::GroupKind>]
+        attr_accessor :selected_group_kinds
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @selected_group_kinds = args[:selected_group_kinds] if args.key?(:selected_group_kinds)
+        end
+      end
+      
+      # A generic empty message that you can re-use to avoid defining duplicated empty
+      # messages in your APIs. A typical example is to use it as the request or the
+      # response type of an API method. For instance: service Foo ` rpc Bar(google.
+      # protobuf.Empty) returns (google.protobuf.Empty); `
+      class Empty
+        include Google::Apis::Core::Hashable
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+        end
+      end
+      
+      # Defined a customer managed encryption key that will be used to encrypt Backup
+      # artifacts.
+      class EncryptionKey
+        include Google::Apis::Core::Hashable
+      
+        # Google Cloud KMS encryption key. Format: projects//locations//keyRings//
+        # cryptoKeys/
+        # Corresponds to the JSON property `gcpKmsEncryptionKey`
+        # @return [String]
+        attr_accessor :gcp_kms_encryption_key
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @gcp_kms_encryption_key = args[:gcp_kms_encryption_key] if args.key?(:gcp_kms_encryption_key)
+        end
+      end
+      
+      # Represents a textual expression in the Common Expression Language (CEL) syntax.
+      # CEL is a C-like expression language. The syntax and semantics of CEL are
+      # documented at https://github.com/google/cel-spec. Example (Comparison): title:
+      # "Summary size limit" description: "Determines if a summary is less than 100
+      # chars" expression: "document.summary.size() < 100" Example (Equality): title: "
+      # Requestor is owner" description: "Determines if requestor is the document
+      # owner" expression: "document.owner == request.auth.claims.email" Example (
+      # Logic): title: "Public documents" description: "Determine whether the document
+      # should be publicly visible" expression: "document.type != 'private' &&
+      # document.type != 'internal'" Example (Data Manipulation): title: "Notification
+      # string" description: "Create a notification string with a timestamp."
+      # expression: "'New message received at ' + string(document.create_time)" The
+      # exact variables and functions that may be referenced within an expression are
+      # determined by the service that evaluates it. See the service documentation for
+      # additional information.
+      class Expr
+        include Google::Apis::Core::Hashable
+      
+        # Optional. Description of the expression. This is a longer text which describes
+        # the expression, e.g. when hovered over it in a UI.
+        # Corresponds to the JSON property `description`
+        # @return [String]
+        attr_accessor :description
+      
+        # Textual representation of an expression in Common Expression Language syntax.
+        # Corresponds to the JSON property `expression`
+        # @return [String]
+        attr_accessor :expression
+      
+        # Optional. String indicating the location of the expression for error reporting,
+        # e.g. a file name and a position in the file.
+        # Corresponds to the JSON property `location`
+        # @return [String]
+        attr_accessor :location
+      
+        # Optional. Title for the expression, i.e. a short string describing its purpose.
+        # This can be used e.g. in UIs which allow to enter the expression.
+        # Corresponds to the JSON property `title`
+        # @return [String]
+        attr_accessor :title
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @description = args[:description] if args.key?(:description)
+          @expression = args[:expression] if args.key?(:expression)
+          @location = args[:location] if args.key?(:location)
+          @title = args[:title] if args.key?(:title)
+        end
+      end
+      
+      # The request message for Operations.CancelOperation.
+      class GoogleLongrunningCancelOperationRequest
+        include Google::Apis::Core::Hashable
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+        end
+      end
+      
+      # The response message for Operations.ListOperations.
+      class GoogleLongrunningListOperationsResponse
+        include Google::Apis::Core::Hashable
+      
+        # The standard List next-page token.
+        # Corresponds to the JSON property `nextPageToken`
+        # @return [String]
+        attr_accessor :next_page_token
+      
+        # A list of operations that matches the specified filter in the request.
+        # Corresponds to the JSON property `operations`
+        # @return [Array<Google::Apis::GkebackupV1::GoogleLongrunningOperation>]
+        attr_accessor :operations
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
+          @operations = args[:operations] if args.key?(:operations)
+        end
+      end
+      
+      # This resource represents a long-running operation that is the result of a
+      # network API call.
+      class GoogleLongrunningOperation
+        include Google::Apis::Core::Hashable
+      
+        # If the value is `false`, it means the operation is still in progress. If `true`
+        # , the operation is completed, and either `error` or `response` is available.
+        # Corresponds to the JSON property `done`
+        # @return [Boolean]
+        attr_accessor :done
+        alias_method :done?, :done
+      
+        # The `Status` type defines a logical error model that is suitable for different
+        # programming environments, including REST APIs and RPC APIs. It is used by [
+        # gRPC](https://github.com/grpc). Each `Status` message contains three pieces of
+        # data: error code, error message, and error details. You can find out more
+        # about this error model and how to work with it in the [API Design Guide](https:
+        # //cloud.google.com/apis/design/errors).
+        # Corresponds to the JSON property `error`
+        # @return [Google::Apis::GkebackupV1::GoogleRpcStatus]
+        attr_accessor :error
+      
+        # Service-specific metadata associated with the operation. It typically contains
+        # progress information and common metadata such as create time. Some services
+        # might not provide such metadata. Any method that returns a long-running
+        # operation should document the metadata type, if any.
+        # Corresponds to the JSON property `metadata`
+        # @return [Hash<String,Object>]
+        attr_accessor :metadata
+      
+        # The server-assigned name, which is only unique within the same service that
+        # originally returns it. If you use the default HTTP mapping, the `name` should
+        # be a resource name ending with `operations/`unique_id``.
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        # The normal response of the operation in case of success. If the original
+        # method returns no data on success, such as `Delete`, the response is `google.
+        # protobuf.Empty`. If the original method is standard `Get`/`Create`/`Update`,
+        # the response should be the resource. For other methods, the response should
+        # have the type `XxxResponse`, where `Xxx` is the original method name. For
+        # example, if the original method name is `TakeSnapshot()`, the inferred
+        # response type is `TakeSnapshotResponse`.
+        # Corresponds to the JSON property `response`
+        # @return [Hash<String,Object>]
+        attr_accessor :response
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @done = args[:done] if args.key?(:done)
+          @error = args[:error] if args.key?(:error)
+          @metadata = args[:metadata] if args.key?(:metadata)
+          @name = args[:name] if args.key?(:name)
+          @response = args[:response] if args.key?(:response)
+        end
+      end
+      
+      # The `Status` type defines a logical error model that is suitable for different
+      # programming environments, including REST APIs and RPC APIs. It is used by [
+      # gRPC](https://github.com/grpc). Each `Status` message contains three pieces of
+      # data: error code, error message, and error details. You can find out more
+      # about this error model and how to work with it in the [API Design Guide](https:
+      # //cloud.google.com/apis/design/errors).
+      class GoogleRpcStatus
+        include Google::Apis::Core::Hashable
+      
+        # The status code, which should be an enum value of google.rpc.Code.
+        # Corresponds to the JSON property `code`
+        # @return [Fixnum]
+        attr_accessor :code
+      
+        # A list of messages that carry the error details. There is a common set of
+        # message types for APIs to use.
+        # Corresponds to the JSON property `details`
+        # @return [Array<Hash<String,Object>>]
+        attr_accessor :details
+      
+        # A developer-facing error message, which should be in English. Any user-facing
+        # error message should be localized and sent in the google.rpc.Status.details
+        # field, or localized by the client.
+        # Corresponds to the JSON property `message`
+        # @return [String]
+        attr_accessor :message
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @code = args[:code] if args.key?(:code)
+          @details = args[:details] if args.key?(:details)
+          @message = args[:message] if args.key?(:message)
+        end
+      end
+      
+      # This is a direct map to the Kubernetes GroupKind type [GroupKind](https://
+      # godoc.org/k8s.io/apimachinery/pkg/runtime/schema#GroupKind) and is used for
+      # identifying specific "types" of resources to restore.
+      class GroupKind
+        include Google::Apis::Core::Hashable
+      
+        # API group string of a Kubernetes resource, e.g. "apiextensions.k8s.io", "
+        # storage.k8s.io", etc. Note: use empty string for core API group
+        # Corresponds to the JSON property `resourceGroup`
+        # @return [String]
+        attr_accessor :resource_group
+      
+        # Kind of a Kubernetes resource, e.g. "CustomResourceDefinition", "StorageClass",
+        # etc.
+        # Corresponds to the JSON property `resourceKind`
+        # @return [String]
+        attr_accessor :resource_kind
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @resource_group = args[:resource_group] if args.key?(:resource_group)
+          @resource_kind = args[:resource_kind] if args.key?(:resource_kind)
+        end
+      end
+      
+      # Response message for ListBackupPlans.
+      class ListBackupPlansResponse
+        include Google::Apis::Core::Hashable
+      
+        # The list of BackupPlans.
+        # Corresponds to the JSON property `backupPlans`
+        # @return [Array<Google::Apis::GkebackupV1::BackupPlan>]
+        attr_accessor :backup_plans
+      
+        # A token which may be sent as `page_token` in a subsequent `ListBackupPlans`
+        # call to retrieve the next page of results. If this field is omitted or empty,
+        # then there are no more results to return.
+        # Corresponds to the JSON property `nextPageToken`
+        # @return [String]
+        attr_accessor :next_page_token
+      
+        # Locations that could not be reached.
+        # Corresponds to the JSON property `unreachable`
+        # @return [Array<String>]
+        attr_accessor :unreachable
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @backup_plans = args[:backup_plans] if args.key?(:backup_plans)
+          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
+          @unreachable = args[:unreachable] if args.key?(:unreachable)
+        end
+      end
+      
+      # Response message for ListBackups.
+      class ListBackupsResponse
+        include Google::Apis::Core::Hashable
+      
+        # The list of restore resources within the parent.
+        # Corresponds to the JSON property `backups`
+        # @return [Array<Google::Apis::GkebackupV1::Backup>]
+        attr_accessor :backups
+      
+        # A token which may be sent as `page_token` in a subsequent `ListBackups` call
+        # to retrieve the next page of results. If this field is omitted or empty, then
+        # there are no more results to return.
+        # Corresponds to the JSON property `nextPageToken`
+        # @return [String]
+        attr_accessor :next_page_token
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @backups = args[:backups] if args.key?(:backups)
+          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
+        end
+      end
+      
+      # The response message for Locations.ListLocations.
+      class ListLocationsResponse
+        include Google::Apis::Core::Hashable
+      
+        # A list of locations that matches the specified filter in the request.
+        # Corresponds to the JSON property `locations`
+        # @return [Array<Google::Apis::GkebackupV1::Location>]
+        attr_accessor :locations
+      
+        # The standard List next-page token.
+        # Corresponds to the JSON property `nextPageToken`
+        # @return [String]
+        attr_accessor :next_page_token
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @locations = args[:locations] if args.key?(:locations)
+          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
+        end
+      end
+      
+      # Response message for ListRestorePlans.
+      class ListRestorePlansResponse
+        include Google::Apis::Core::Hashable
+      
+        # A token which may be sent as `page_token` in a subsequent `ListRestorePlans`
+        # call to retrieve the next page of results. If this field is omitted or empty,
+        # then there are no more results to return.
+        # Corresponds to the JSON property `nextPageToken`
+        # @return [String]
+        attr_accessor :next_page_token
+      
+        # The list of RestorePlans.
+        # Corresponds to the JSON property `restorePlans`
+        # @return [Array<Google::Apis::GkebackupV1::RestorePlan>]
+        attr_accessor :restore_plans
+      
+        # Locations that could not be reached.
+        # Corresponds to the JSON property `unreachable`
+        # @return [Array<String>]
+        attr_accessor :unreachable
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
+          @restore_plans = args[:restore_plans] if args.key?(:restore_plans)
+          @unreachable = args[:unreachable] if args.key?(:unreachable)
+        end
+      end
+      
+      # Response message for ListRestores.
+      class ListRestoresResponse
+        include Google::Apis::Core::Hashable
+      
+        # A token which may be sent as `page_token` in a subsequent `ListRestores` call
+        # to retrieve the next page of results. If this field is omitted or empty, then
+        # there are no more results to return.
+        # Corresponds to the JSON property `nextPageToken`
+        # @return [String]
+        attr_accessor :next_page_token
+      
+        # The list of restore resources within the parent.
+        # Corresponds to the JSON property `restores`
+        # @return [Array<Google::Apis::GkebackupV1::Restore>]
+        attr_accessor :restores
+      
+        # Locations that could not be reached.
+        # Corresponds to the JSON property `unreachable`
+        # @return [Array<String>]
+        attr_accessor :unreachable
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
+          @restores = args[:restores] if args.key?(:restores)
+          @unreachable = args[:unreachable] if args.key?(:unreachable)
+        end
+      end
+      
+      # Response message for ListVolumeBackups.
+      class ListVolumeBackupsResponse
+        include Google::Apis::Core::Hashable
+      
+        # A token which may be sent as `page_token` in a subsequent `ListVolumeBackups`
+        # call to retrieve the next page of results. If this field is omitted or empty,
+        # then there are no more results to return.
+        # Corresponds to the JSON property `nextPageToken`
+        # @return [String]
+        attr_accessor :next_page_token
+      
+        # The list of VolumeBackups resources within the parent.
+        # Corresponds to the JSON property `volumeBackups`
+        # @return [Array<Google::Apis::GkebackupV1::VolumeBackup>]
+        attr_accessor :volume_backups
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
+          @volume_backups = args[:volume_backups] if args.key?(:volume_backups)
+        end
+      end
+      
+      # Response message for ListVolumeRestores.
+      class ListVolumeRestoresResponse
+        include Google::Apis::Core::Hashable
+      
+        # A token which may be sent as `page_token` in a subsequent `ListVolumeRestores`
+        # call to retrieve the next page of results. If this field is omitted or empty,
+        # then there are no more results to return.
+        # Corresponds to the JSON property `nextPageToken`
+        # @return [String]
+        attr_accessor :next_page_token
+      
+        # The list of VolumeRestores resources within the parent.
+        # Corresponds to the JSON property `volumeRestores`
+        # @return [Array<Google::Apis::GkebackupV1::VolumeRestore>]
+        attr_accessor :volume_restores
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
+          @volume_restores = args[:volume_restores] if args.key?(:volume_restores)
+        end
+      end
+      
+      # A resource that represents Google Cloud Platform location.
+      class Location
+        include Google::Apis::Core::Hashable
+      
+        # The friendly name for this location, typically a nearby city name. For example,
+        # "Tokyo".
+        # Corresponds to the JSON property `displayName`
+        # @return [String]
+        attr_accessor :display_name
+      
+        # Cross-service attributes for the location. For example `"cloud.googleapis.com/
+        # region": "us-east1"`
+        # Corresponds to the JSON property `labels`
+        # @return [Hash<String,String>]
+        attr_accessor :labels
+      
+        # The canonical id for this location. For example: `"us-east1"`.
+        # Corresponds to the JSON property `locationId`
+        # @return [String]
+        attr_accessor :location_id
+      
+        # Service-specific metadata. For example the available capacity at the given
+        # location.
+        # Corresponds to the JSON property `metadata`
+        # @return [Hash<String,Object>]
+        attr_accessor :metadata
+      
+        # Resource name for the location, which may vary between implementations. For
+        # example: `"projects/example-project/locations/us-east1"`
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @display_name = args[:display_name] if args.key?(:display_name)
+          @labels = args[:labels] if args.key?(:labels)
+          @location_id = args[:location_id] if args.key?(:location_id)
+          @metadata = args[:metadata] if args.key?(:metadata)
+          @name = args[:name] if args.key?(:name)
+        end
+      end
+      
+      # A reference to a namespaced resource in Kubernetes.
+      class NamespacedName
+        include Google::Apis::Core::Hashable
+      
+        # The name of the Kubernetes resource.
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        # The Namespace of the Kubernetes resource.
+        # Corresponds to the JSON property `namespace`
+        # @return [String]
+        attr_accessor :namespace
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @name = args[:name] if args.key?(:name)
+          @namespace = args[:namespace] if args.key?(:namespace)
+        end
+      end
+      
+      # A list of namespaced Kubernetes resources.
+      class NamespacedNames
+        include Google::Apis::Core::Hashable
+      
+        # A list of namespaced Kubernetes resources.
+        # Corresponds to the JSON property `namespacedNames`
+        # @return [Array<Google::Apis::GkebackupV1::NamespacedName>]
+        attr_accessor :namespaced_names
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @namespaced_names = args[:namespaced_names] if args.key?(:namespaced_names)
+        end
+      end
+      
+      # A list of Kubernetes Namespaces
+      class Namespaces
+        include Google::Apis::Core::Hashable
+      
+        # A list of Kubernetes Namespaces
+        # Corresponds to the JSON property `namespaces`
+        # @return [Array<String>]
+        attr_accessor :namespaces
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @namespaces = args[:namespaces] if args.key?(:namespaces)
+        end
+      end
+      
+      # Represents the metadata of the long-running operation.
+      class OperationMetadata
+        include Google::Apis::Core::Hashable
+      
+        # Output only. API version used to start the operation.
+        # Corresponds to the JSON property `apiVersion`
+        # @return [String]
+        attr_accessor :api_version
+      
+        # Output only. The time the operation was created.
+        # Corresponds to the JSON property `createTime`
+        # @return [String]
+        attr_accessor :create_time
+      
+        # Output only. The time the operation finished running.
+        # Corresponds to the JSON property `endTime`
+        # @return [String]
+        attr_accessor :end_time
+      
+        # Output only. Identifies whether the user has requested cancellation of the
+        # operation. Operations that have successfully been cancelled have Operation.
+        # error value with a google.rpc.Status.code of 1, corresponding to `Code.
+        # CANCELLED`.
+        # Corresponds to the JSON property `requestedCancellation`
+        # @return [Boolean]
+        attr_accessor :requested_cancellation
+        alias_method :requested_cancellation?, :requested_cancellation
+      
+        # Output only. Human-readable status of the operation, if any.
+        # Corresponds to the JSON property `statusMessage`
+        # @return [String]
+        attr_accessor :status_message
+      
+        # Output only. Server-defined resource path for the target of the operation.
+        # Corresponds to the JSON property `target`
+        # @return [String]
+        attr_accessor :target
+      
+        # Output only. Name of the verb executed by the operation.
+        # Corresponds to the JSON property `verb`
+        # @return [String]
+        attr_accessor :verb
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @api_version = args[:api_version] if args.key?(:api_version)
+          @create_time = args[:create_time] if args.key?(:create_time)
+          @end_time = args[:end_time] if args.key?(:end_time)
+          @requested_cancellation = args[:requested_cancellation] if args.key?(:requested_cancellation)
+          @status_message = args[:status_message] if args.key?(:status_message)
+          @target = args[:target] if args.key?(:target)
+          @verb = args[:verb] if args.key?(:verb)
+        end
+      end
+      
+      # An Identity and Access Management (IAM) policy, which specifies access
+      # controls for Google Cloud resources. A `Policy` is a collection of `bindings`.
+      # A `binding` binds one or more `members`, or principals, to a single `role`.
+      # Principals can be user accounts, service accounts, Google groups, and domains (
+      # such as G Suite). A `role` is a named list of permissions; each `role` can be
+      # an IAM predefined role or a user-created custom role. For some types of Google
+      # Cloud resources, a `binding` can also specify a `condition`, which is a
+      # logical expression that allows access to a resource only if the expression
+      # evaluates to `true`. A condition can add constraints based on attributes of
+      # the request, the resource, or both. To learn which resources support
+      # conditions in their IAM policies, see the [IAM documentation](https://cloud.
+      # google.com/iam/help/conditions/resource-policies). **JSON example:** ` "
+      # bindings": [ ` "role": "roles/resourcemanager.organizationAdmin", "members": [
+      # "user:mike@example.com", "group:admins@example.com", "domain:google.com", "
+      # serviceAccount:my-project-id@appspot.gserviceaccount.com" ] `, ` "role": "
+      # roles/resourcemanager.organizationViewer", "members": [ "user:eve@example.com"
+      # ], "condition": ` "title": "expirable access", "description": "Does not grant
+      # access after Sep 2020", "expression": "request.time < timestamp('2020-10-01T00:
+      # 00:00.000Z')", ` ` ], "etag": "BwWWja0YfJA=", "version": 3 ` **YAML example:**
+      # bindings: - members: - user:mike@example.com - group:admins@example.com -
+      # domain:google.com - serviceAccount:my-project-id@appspot.gserviceaccount.com
+      # role: roles/resourcemanager.organizationAdmin - members: - user:eve@example.
+      # com role: roles/resourcemanager.organizationViewer condition: title: expirable
+      # access description: Does not grant access after Sep 2020 expression: request.
+      # time < timestamp('2020-10-01T00:00:00.000Z') etag: BwWWja0YfJA= version: 3 For
+      # a description of IAM and its features, see the [IAM documentation](https://
+      # cloud.google.com/iam/docs/).
+      class Policy
+        include Google::Apis::Core::Hashable
+      
+        # Specifies cloud audit logging configuration for this policy.
+        # Corresponds to the JSON property `auditConfigs`
+        # @return [Array<Google::Apis::GkebackupV1::AuditConfig>]
+        attr_accessor :audit_configs
+      
+        # Associates a list of `members`, or principals, with a `role`. Optionally, may
+        # specify a `condition` that determines how and when the `bindings` are applied.
+        # Each of the `bindings` must contain at least one principal. The `bindings` in
+        # a `Policy` can refer to up to 1,500 principals; up to 250 of these principals
+        # can be Google groups. Each occurrence of a principal counts towards these
+        # limits. For example, if the `bindings` grant 50 different roles to `user:alice@
+        # example.com`, and not to any other principal, then you can add another 1,450
+        # principals to the `bindings` in the `Policy`.
+        # Corresponds to the JSON property `bindings`
+        # @return [Array<Google::Apis::GkebackupV1::Binding>]
+        attr_accessor :bindings
+      
+        # `etag` is used for optimistic concurrency control as a way to help prevent
+        # simultaneous updates of a policy from overwriting each other. It is strongly
+        # suggested that systems make use of the `etag` in the read-modify-write cycle
+        # to perform policy updates in order to avoid race conditions: An `etag` is
+        # returned in the response to `getIamPolicy`, and systems are expected to put
+        # that etag in the request to `setIamPolicy` to ensure that their change will be
+        # applied to the same version of the policy. **Important:** If you use IAM
+        # Conditions, you must include the `etag` field whenever you call `setIamPolicy`.
+        # If you omit this field, then IAM allows you to overwrite a version `3` policy
+        # with a version `1` policy, and all of the conditions in the version `3` policy
+        # are lost.
+        # Corresponds to the JSON property `etag`
+        # NOTE: Values are automatically base64 encoded/decoded in the client library.
+        # @return [String]
+        attr_accessor :etag
+      
+        # Specifies the format of the policy. Valid values are `0`, `1`, and `3`.
+        # Requests that specify an invalid value are rejected. Any operation that
+        # affects conditional role bindings must specify version `3`. This requirement
+        # applies to the following operations: * Getting a policy that includes a
+        # conditional role binding * Adding a conditional role binding to a policy *
+        # Changing a conditional role binding in a policy * Removing any role binding,
+        # with or without a condition, from a policy that includes conditions **
+        # Important:** If you use IAM Conditions, you must include the `etag` field
+        # whenever you call `setIamPolicy`. If you omit this field, then IAM allows you
+        # to overwrite a version `3` policy with a version `1` policy, and all of the
+        # conditions in the version `3` policy are lost. If a policy does not include
+        # any conditions, operations on that policy may specify any valid version or
+        # leave the field unset. To learn which resources support conditions in their
+        # IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/
+        # conditions/resource-policies).
+        # Corresponds to the JSON property `version`
+        # @return [Fixnum]
+        attr_accessor :version
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @audit_configs = args[:audit_configs] if args.key?(:audit_configs)
+          @bindings = args[:bindings] if args.key?(:bindings)
+          @etag = args[:etag] if args.key?(:etag)
+          @version = args[:version] if args.key?(:version)
+        end
+      end
+      
+      # Represents both a request to Restore some portion of a Backup into a target
+      # GKE cluster and a record of the restore operation itself. Next id: 18
+      class Restore
+        include Google::Apis::Core::Hashable
+      
+        # Required. Immutable. The Backup used as the source from which this Restore
+        # will restore. Note that this Backup must be a sub-resource of the RestorePlan'
+        # s backup_plan. Format: projects/*/locations/*/backupPlans/*/backups/*.
+        # Corresponds to the JSON property `backup`
+        # @return [String]
+        attr_accessor :backup
+      
+        # Output only. The target cluster into which this Restore will restore data.
+        # Possible formats: 1. projects/*/locations/*/clusters/* 2. projects/*/zones/*/
+        # clusters/* Inherited from parent RestorePlan's cluster field.
+        # Corresponds to the JSON property `cluster`
+        # @return [String]
+        attr_accessor :cluster
+      
+        # Output only. When the restore operation either successfully completed or
+        # failed.
+        # Corresponds to the JSON property `completeTime`
+        # @return [String]
+        attr_accessor :complete_time
+      
+        # Output only. [Output Only] The timestamp when this Restore resource was
+        # created - can be converted to and from [RFC3339](https://www.ietf.org/rfc/
+        # rfc3339.txt)
+        # Corresponds to the JSON property `createTime`
+        # @return [String]
+        attr_accessor :create_time
+      
+        # User specified descriptive string for this Restore.
+        # Corresponds to the JSON property `description`
+        # @return [String]
+        attr_accessor :description
+      
+        # Output only. `etag` is used for optimistic concurrency control as a way to
+        # help prevent simultaneous updates of a restore from overwriting each other. It
+        # is strongly suggested that systems make use of the `etag` in the read-modify-
+        # write cycle to perform restore updates in order to avoid race conditions: An `
+        # etag` is returned in the response to `GetRestore`, and systems are expected to
+        # put that etag in the request to `UpdateRestore` to ensure that their change
+        # will be applied to the same version.
+        # Corresponds to the JSON property `etag`
+        # @return [String]
+        attr_accessor :etag
+      
+        # GCP Labels.
+        # Corresponds to the JSON property `labels`
+        # @return [Hash<String,String>]
+        attr_accessor :labels
+      
+        # Output only. The full name of the Restore resource. Format: projects/*/
+        # locations/*/restorePlans/*/restores/*
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        # Output only. Number of resources excluded in this restore action.
+        # Corresponds to the JSON property `resourcesExcludedCount`
+        # @return [Fixnum]
+        attr_accessor :resources_excluded_count
+      
+        # Output only. Number of resources failed to be restored in this restore action.
+        # Corresponds to the JSON property `resourcesFailedCount`
+        # @return [Fixnum]
+        attr_accessor :resources_failed_count
+      
+        # Output only. Number of resources restored in this restore action.
+        # Corresponds to the JSON property `resourcesRestoredCount`
+        # @return [Fixnum]
+        attr_accessor :resources_restored_count
+      
+        # Configuration of a restore. Next id: 9
+        # Corresponds to the JSON property `restoreConfig`
+        # @return [Google::Apis::GkebackupV1::RestoreConfig]
+        attr_accessor :restore_config
+      
+        # Output only. The current state of the Restore.
+        # Corresponds to the JSON property `state`
+        # @return [String]
+        attr_accessor :state
+      
+        # Output only. Human-readable description of why the Restore is in its current
+        # state.
+        # Corresponds to the JSON property `stateReason`
+        # @return [String]
+        attr_accessor :state_reason
+      
+        # Output only. [Output Only] Server generated global unique identifier of [UUID](
+        # https://en.wikipedia.org/wiki/Universally_unique_identifier) format.
+        # Corresponds to the JSON property `uid`
+        # @return [String]
+        attr_accessor :uid
+      
+        # Output only. [Output Only] The timestamp when this Restore resource was last
+        # updated - can be converted to and from [RFC3339](https://www.ietf.org/rfc/
+        # rfc3339.txt)
+        # Corresponds to the JSON property `updateTime`
+        # @return [String]
+        attr_accessor :update_time
+      
+        # Output only. Number of volumes restored in this restore action.
+        # Corresponds to the JSON property `volumesRestoredCount`
+        # @return [Fixnum]
+        attr_accessor :volumes_restored_count
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @backup = args[:backup] if args.key?(:backup)
+          @cluster = args[:cluster] if args.key?(:cluster)
+          @complete_time = args[:complete_time] if args.key?(:complete_time)
+          @create_time = args[:create_time] if args.key?(:create_time)
+          @description = args[:description] if args.key?(:description)
+          @etag = args[:etag] if args.key?(:etag)
+          @labels = args[:labels] if args.key?(:labels)
+          @name = args[:name] if args.key?(:name)
+          @resources_excluded_count = args[:resources_excluded_count] if args.key?(:resources_excluded_count)
+          @resources_failed_count = args[:resources_failed_count] if args.key?(:resources_failed_count)
+          @resources_restored_count = args[:resources_restored_count] if args.key?(:resources_restored_count)
+          @restore_config = args[:restore_config] if args.key?(:restore_config)
+          @state = args[:state] if args.key?(:state)
+          @state_reason = args[:state_reason] if args.key?(:state_reason)
+          @uid = args[:uid] if args.key?(:uid)
+          @update_time = args[:update_time] if args.key?(:update_time)
+          @volumes_restored_count = args[:volumes_restored_count] if args.key?(:volumes_restored_count)
+        end
+      end
+      
+      # Configuration of a restore. Next id: 9
+      class RestoreConfig
+        include Google::Apis::Core::Hashable
+      
+        # Restore all namespaced resources in the Backup if set to "True". Specifying
+        # this field to "False" is an error.
+        # Corresponds to the JSON property `allNamespaces`
+        # @return [Boolean]
+        attr_accessor :all_namespaces
+        alias_method :all_namespaces?, :all_namespaces
+      
+        # Defines the behavior for handling the situation where cluster-scoped resources
+        # being restored already exist in the target cluster. This MUST be set to a
+        # value other than CLUSTER_RESOURCE_CONFLICT_POLICY_UNSPECIFIED if
+        # cluster_resource_restore_scope is not empty.
+        # Corresponds to the JSON property `clusterResourceConflictPolicy`
+        # @return [String]
+        attr_accessor :cluster_resource_conflict_policy
+      
+        # Identifies the cluster-scoped resources to restore from the Backup.
+        # Corresponds to the JSON property `clusterResourceRestoreScope`
+        # @return [Google::Apis::GkebackupV1::ClusterResourceRestoreScope]
+        attr_accessor :cluster_resource_restore_scope
+      
+        # Defines the behavior for handling the situation where sets of namespaced
+        # resources being restored already exist in the target cluster. This MUST be set
+        # to a value other than NAMESPACED_RESOURCE_RESTORE_MODE_UNSPECIFIED if any
+        # namespaced restoration is configured via namespaced_resource_restore_scope .
+        # Corresponds to the JSON property `namespacedResourceRestoreMode`
+        # @return [String]
+        attr_accessor :namespaced_resource_restore_mode
+      
+        # A list of namespaced Kubernetes resources.
+        # Corresponds to the JSON property `selectedApplications`
+        # @return [Google::Apis::GkebackupV1::NamespacedNames]
+        attr_accessor :selected_applications
+      
+        # A list of Kubernetes Namespaces
+        # Corresponds to the JSON property `selectedNamespaces`
+        # @return [Google::Apis::GkebackupV1::Namespaces]
+        attr_accessor :selected_namespaces
+      
+        # A list of transformation rules to be applied against Kubernetes resources as
+        # they are selected for restoration from a Backup. Rules are executed in order
+        # defined - this order matters, as changes made by a rule may impact the
+        # filtering logic of subsequent rules. An empty list means no substitution will
+        # occur.
+        # Corresponds to the JSON property `substitutionRules`
+        # @return [Array<Google::Apis::GkebackupV1::SubstitutionRule>]
+        attr_accessor :substitution_rules
+      
+        # Specifies the mechanism to be used to restore volume data. Default:
+        # VOLUME_DATA_RESTORE_POLICY_UNSPECIFIED (will be treated as
+        # NO_VOLUME_DATA_RESTORATION).
+        # Corresponds to the JSON property `volumeDataRestorePolicy`
+        # @return [String]
+        attr_accessor :volume_data_restore_policy
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @all_namespaces = args[:all_namespaces] if args.key?(:all_namespaces)
+          @cluster_resource_conflict_policy = args[:cluster_resource_conflict_policy] if args.key?(:cluster_resource_conflict_policy)
+          @cluster_resource_restore_scope = args[:cluster_resource_restore_scope] if args.key?(:cluster_resource_restore_scope)
+          @namespaced_resource_restore_mode = args[:namespaced_resource_restore_mode] if args.key?(:namespaced_resource_restore_mode)
+          @selected_applications = args[:selected_applications] if args.key?(:selected_applications)
+          @selected_namespaces = args[:selected_namespaces] if args.key?(:selected_namespaces)
+          @substitution_rules = args[:substitution_rules] if args.key?(:substitution_rules)
+          @volume_data_restore_policy = args[:volume_data_restore_policy] if args.key?(:volume_data_restore_policy)
+        end
+      end
+      
+      # The configuration of a potential series of Restore operations to be performed
+      # against Backups belong to a particular BackupPlan. Next id: 11
+      class RestorePlan
+        include Google::Apis::Core::Hashable
+      
+        # Required. Immutable. The BackupPlan from which Backups may be used as the
+        # source for Restores created via this RestorePlan. Format: projects/*/locations/
+        # */backupPlans/*.
+        # Corresponds to the JSON property `backupPlan`
+        # @return [String]
+        attr_accessor :backup_plan
+      
+        # Required. Immutable. The target cluster into which Restores created via this
+        # RestorePlan will restore data. NOTE: the cluster's region must be the same as
+        # the RestorePlan. Possible formats: 1. projects/*/locations/*/clusters/* 2.
+        # projects/*/zones/*/clusters/*
+        # Corresponds to the JSON property `cluster`
+        # @return [String]
+        attr_accessor :cluster
+      
+        # Output only. [Output Only] The timestamp when this RestorePlan resource was
+        # created - can be converted to and from [RFC3339](https://www.ietf.org/rfc/
+        # rfc3339.txt)
+        # Corresponds to the JSON property `createTime`
+        # @return [String]
+        attr_accessor :create_time
+      
+        # User specified descriptive string for this RestorePlan.
+        # Corresponds to the JSON property `description`
+        # @return [String]
+        attr_accessor :description
+      
+        # Output only. `etag` is used for optimistic concurrency control as a way to
+        # help prevent simultaneous updates of a restore from overwriting each other. It
+        # is strongly suggested that systems make use of the `etag` in the read-modify-
+        # write cycle to perform restore updates in order to avoid race conditions: An `
+        # etag` is returned in the response to `GetRestorePlan`, and systems are
+        # expected to put that etag in the request to `UpdateRestorePlan` to ensure that
+        # their change will be applied to the same version.
+        # Corresponds to the JSON property `etag`
+        # @return [String]
+        attr_accessor :etag
+      
+        # A set of custom labels supplied by user.
+        # Corresponds to the JSON property `labels`
+        # @return [Hash<String,String>]
+        attr_accessor :labels
+      
+        # Output only. [Output Only] The full name of the RestorePlan resource. Format:
+        # projects/*/locations/*/restorePlans/*
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        # Configuration of a restore. Next id: 9
+        # Corresponds to the JSON property `restoreConfig`
+        # @return [Google::Apis::GkebackupV1::RestoreConfig]
+        attr_accessor :restore_config
+      
+        # Output only. [Output Only] Server generated global unique identifier of [UUID](
+        # https://en.wikipedia.org/wiki/Universally_unique_identifier) format.
+        # Corresponds to the JSON property `uid`
+        # @return [String]
+        attr_accessor :uid
+      
+        # Output only. [Output Only] The timestamp when this RestorePlan resource was
+        # last updated - can be converted to and from [RFC3339](https://www.ietf.org/rfc/
+        # rfc3339.txt)
+        # Corresponds to the JSON property `updateTime`
+        # @return [String]
+        attr_accessor :update_time
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @backup_plan = args[:backup_plan] if args.key?(:backup_plan)
+          @cluster = args[:cluster] if args.key?(:cluster)
+          @create_time = args[:create_time] if args.key?(:create_time)
+          @description = args[:description] if args.key?(:description)
+          @etag = args[:etag] if args.key?(:etag)
+          @labels = args[:labels] if args.key?(:labels)
+          @name = args[:name] if args.key?(:name)
+          @restore_config = args[:restore_config] if args.key?(:restore_config)
+          @uid = args[:uid] if args.key?(:uid)
+          @update_time = args[:update_time] if args.key?(:update_time)
+        end
+      end
+      
+      # RentionPolicy is an inner message type to define: 1. Minimum age for Backups
+      # created via this BackupPlan - deletion (either manual or automatic) of Backups
+      # younger than this age will be blocked 2. Default maximum age of Backups
+      # created via this BackupPlan, after which automatic deletion will occur 3. Lock
+      # to disallow any changes to any RetentionPolicy settings
+      class RetentionPolicy
+        include Google::Apis::Core::Hashable
+      
+        # Minimum age for Backups created via this BackupPlan (in days). This field MUST
+        # be an integer value between 0-90(inclusive). A Backup created under this
+        # BackupPlan will NOT be deletable until it reaches Backup's create_time +
+        # backup_delete_lock_days. Updating this field of a BackupPlan does NOT affect
+        # existing Backups under it. Backups created AFTER a successful update will
+        # inherit the new value. Default: 0 (no delete blocking)
+        # Corresponds to the JSON property `backupDeleteLockDays`
+        # @return [Fixnum]
+        attr_accessor :backup_delete_lock_days
+      
+        # The default maximum age of a Backup created via this BackupPlan. This field
+        # MUST be an integer value >= 0. If specified, a Backup created under this
+        # BackupPlan will be automatically deleted after its age reaches create_time +
+        # backup_retain_days. If not specified, Backups created under this BackupPlan
+        # will NOT be subject to automatic deletion. Updating this field does NOT affect
+        # existing Backups under it. Backups created AFTER a successful update will
+        # automatically pick up the new value. NOTE: Specifying a backup_retain_days
+        # smaller than backup_delete_lock_days at creation/updating time will be
+        # considered as invalid, and the request will be rejected immediately. Default:
+        # 0 (no automatic deletion)
+        # Corresponds to the JSON property `backupRetainDays`
+        # @return [Fixnum]
+        attr_accessor :backup_retain_days
+      
+        # This flag denotes whether the retention policy of this BackupPlan is locked.
+        # If set to True, no further update is allowed on this policy, including the `
+        # locked` field itself. Default: False
+        # Corresponds to the JSON property `locked`
+        # @return [Boolean]
+        attr_accessor :locked
+        alias_method :locked?, :locked
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @backup_delete_lock_days = args[:backup_delete_lock_days] if args.key?(:backup_delete_lock_days)
+          @backup_retain_days = args[:backup_retain_days] if args.key?(:backup_retain_days)
+          @locked = args[:locked] if args.key?(:locked)
+        end
+      end
+      
+      # Schedule defines scheduling parameters for automatically creating Backups via
+      # this BackupPlan.
+      class Schedule
+        include Google::Apis::Core::Hashable
+      
+        # A standard cron-style string that defines a repeating schedule for creating
+        # Backups via this BackupPlan.
+        # Corresponds to the JSON property `cronSchedule`
+        # @return [String]
+        attr_accessor :cron_schedule
+      
+        # This flag denotes whether automatic Backup creation is paused for this
+        # BackupPlan. Default: False
+        # Corresponds to the JSON property `paused`
+        # @return [Boolean]
+        attr_accessor :paused
+        alias_method :paused?, :paused
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @cron_schedule = args[:cron_schedule] if args.key?(:cron_schedule)
+          @paused = args[:paused] if args.key?(:paused)
+        end
+      end
+      
+      # Request message for `SetIamPolicy` method.
+      class SetIamPolicyRequest
+        include Google::Apis::Core::Hashable
+      
+        # An Identity and Access Management (IAM) policy, which specifies access
+        # controls for Google Cloud resources. A `Policy` is a collection of `bindings`.
+        # A `binding` binds one or more `members`, or principals, to a single `role`.
+        # Principals can be user accounts, service accounts, Google groups, and domains (
+        # such as G Suite). A `role` is a named list of permissions; each `role` can be
+        # an IAM predefined role or a user-created custom role. For some types of Google
+        # Cloud resources, a `binding` can also specify a `condition`, which is a
+        # logical expression that allows access to a resource only if the expression
+        # evaluates to `true`. A condition can add constraints based on attributes of
+        # the request, the resource, or both. To learn which resources support
+        # conditions in their IAM policies, see the [IAM documentation](https://cloud.
+        # google.com/iam/help/conditions/resource-policies). **JSON example:** ` "
+        # bindings": [ ` "role": "roles/resourcemanager.organizationAdmin", "members": [
+        # "user:mike@example.com", "group:admins@example.com", "domain:google.com", "
+        # serviceAccount:my-project-id@appspot.gserviceaccount.com" ] `, ` "role": "
+        # roles/resourcemanager.organizationViewer", "members": [ "user:eve@example.com"
+        # ], "condition": ` "title": "expirable access", "description": "Does not grant
+        # access after Sep 2020", "expression": "request.time < timestamp('2020-10-01T00:
+        # 00:00.000Z')", ` ` ], "etag": "BwWWja0YfJA=", "version": 3 ` **YAML example:**
+        # bindings: - members: - user:mike@example.com - group:admins@example.com -
+        # domain:google.com - serviceAccount:my-project-id@appspot.gserviceaccount.com
+        # role: roles/resourcemanager.organizationAdmin - members: - user:eve@example.
+        # com role: roles/resourcemanager.organizationViewer condition: title: expirable
+        # access description: Does not grant access after Sep 2020 expression: request.
+        # time < timestamp('2020-10-01T00:00:00.000Z') etag: BwWWja0YfJA= version: 3 For
+        # a description of IAM and its features, see the [IAM documentation](https://
+        # cloud.google.com/iam/docs/).
+        # Corresponds to the JSON property `policy`
+        # @return [Google::Apis::GkebackupV1::Policy]
+        attr_accessor :policy
+      
+        # OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only
+        # the fields in the mask will be modified. If no mask is provided, the following
+        # default mask is used: `paths: "bindings, etag"`
+        # Corresponds to the JSON property `updateMask`
+        # @return [String]
+        attr_accessor :update_mask
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @policy = args[:policy] if args.key?(:policy)
+          @update_mask = args[:update_mask] if args.key?(:update_mask)
+        end
+      end
+      
+      # A transformation rule to be applied against Kubernetes resources as they are
+      # selected for restoration from a Backup. A rule contains both filtering logic (
+      # which resources are subject to substitution) and substitution logic.
+      class SubstitutionRule
+        include Google::Apis::Core::Hashable
+      
+        # This is the new value to set for any fields that pass the filtering and
+        # selection criteria. To remove a value from a Kubernetes resource, either leave
+        # this field unspecified, or set it to the empty string ("").
+        # Corresponds to the JSON property `newValue`
+        # @return [String]
+        attr_accessor :new_value
+      
+        # (Filtering parameter) This is a [regular expression] (https://en.wikipedia.org/
+        # wiki/Regular_expression) that is compared against the fields matched by the
+        # target_json_path expression (and must also have passed the previous filters).
+        # Substitution will not be performed against fields whose value does not match
+        # this expression. If this field is NOT specified, then ALL fields matched by
+        # the target_json_path expression will undergo substitution. Note that an empty (
+        # e.g., "", rather than unspecified) value for for this field will only match
+        # empty fields.
+        # Corresponds to the JSON property `originalValuePattern`
+        # @return [String]
+        attr_accessor :original_value_pattern
+      
+        # (Filtering parameter) Any resource subject to substitution must belong to one
+        # of the listed "types". If this field is not provided, no type filtering will
+        # be performed (all resources of all types matching previous filtering
+        # parameters will be candidates for substitution).
+        # Corresponds to the JSON property `targetGroupKinds`
+        # @return [Array<Google::Apis::GkebackupV1::GroupKind>]
+        attr_accessor :target_group_kinds
+      
+        # Required. This is a [JSONPath] (https://kubernetes.io/docs/reference/kubectl/
+        # jsonpath/) expression that matches specific fields of candidate resources and
+        # it operates as both a filtering parameter (resources that are not matched with
+        # this expression will not be candidates for substitution) as well as a field
+        # identifier (identifies exactly which fields out of the candidate resources
+        # will be modified).
+        # Corresponds to the JSON property `targetJsonPath`
+        # @return [String]
+        attr_accessor :target_json_path
+      
+        # (Filtering parameter) Any resource subject to substitution must be contained
+        # within one of the listed Kubernetes Namespace in the Backup. If this field is
+        # not provided, no namespace filtering will be performed (all resources in all
+        # Namespaces, including all cluster-scoped resources, will be candidates for
+        # substitution). To mix cluster-scoped and namespaced resources in the same rule,
+        # use an empty string ("") as one of the target namespaces.
+        # Corresponds to the JSON property `targetNamespaces`
+        # @return [Array<String>]
+        attr_accessor :target_namespaces
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @new_value = args[:new_value] if args.key?(:new_value)
+          @original_value_pattern = args[:original_value_pattern] if args.key?(:original_value_pattern)
+          @target_group_kinds = args[:target_group_kinds] if args.key?(:target_group_kinds)
+          @target_json_path = args[:target_json_path] if args.key?(:target_json_path)
+          @target_namespaces = args[:target_namespaces] if args.key?(:target_namespaces)
+        end
+      end
+      
+      # Request message for `TestIamPermissions` method.
+      class TestIamPermissionsRequest
+        include Google::Apis::Core::Hashable
+      
+        # The set of permissions to check for the `resource`. Permissions with wildcards
+        # (such as '*' or 'storage.*') are not allowed. For more information see [IAM
+        # Overview](https://cloud.google.com/iam/docs/overview#permissions).
+        # Corresponds to the JSON property `permissions`
+        # @return [Array<String>]
+        attr_accessor :permissions
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @permissions = args[:permissions] if args.key?(:permissions)
+        end
+      end
+      
+      # Response message for `TestIamPermissions` method.
+      class TestIamPermissionsResponse
+        include Google::Apis::Core::Hashable
+      
+        # A subset of `TestPermissionsRequest.permissions` that the caller is allowed.
+        # Corresponds to the JSON property `permissions`
+        # @return [Array<String>]
+        attr_accessor :permissions
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @permissions = args[:permissions] if args.key?(:permissions)
+        end
+      end
+      
+      # Represents the backup of a specific persistent volume as a component of a
+      # Backup - both the record of the operation and a pointer to the underlying
+      # storage-specific artifacts. Next id: 14
+      class VolumeBackup
+        include Google::Apis::Core::Hashable
+      
+        # Output only. [Output Only] The timestamp when the associated underlying volume
+        # backup operation completes - can be converted to and from [RFC3339](https://
+        # www.ietf.org/rfc/rfc3339.txt)
+        # Corresponds to the JSON property `completeTime`
+        # @return [String]
+        attr_accessor :complete_time
+      
+        # Output only. [Output Only] The timestamp when this VolumeBackup resource was
+        # created - can be converted to and from [RFC3339](https://www.ietf.org/rfc/
+        # rfc3339.txt)
+        # Corresponds to the JSON property `createTime`
+        # @return [String]
+        attr_accessor :create_time
+      
+        # Output only. The minimum size of the disk to which this VolumeBackup can be
+        # restored.
+        # Corresponds to the JSON property `diskSizeBytes`
+        # @return [Fixnum]
+        attr_accessor :disk_size_bytes
+      
+        # Output only. `etag` is used for optimistic concurrency control as a way to
+        # help prevent simultaneous updates of a volume backup from overwriting each
+        # other. It is strongly suggested that systems make use of the `etag` in the
+        # read-modify-write cycle to perform volume backup updates in order to avoid
+        # race conditions: An `etag` is returned in the response to `GetVolumeBackup',
+        # and systems are expected to put that etag in the request to `
+        # UpdateVolumeBackup` to ensure that their change will be applied to the same
+        # version.
+        # Corresponds to the JSON property `etag`
+        # @return [String]
+        attr_accessor :etag
+      
+        # Output only. The format used for the volume backup.
+        # Corresponds to the JSON property `format`
+        # @return [String]
+        attr_accessor :format
+      
+        # Output only. [Output Only] The full name of the VolumeBackup resource. Format:
+        # projects/*/locations/*/backupPlans/*/backups/*/volumeBackups/* Note that the
+        # last segment of the name will have the format: 'pvc-'.
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        # A reference to a namespaced resource in Kubernetes.
+        # Corresponds to the JSON property `sourcePvc`
+        # @return [Google::Apis::GkebackupV1::NamespacedName]
+        attr_accessor :source_pvc
+      
+        # Output only. The current state of this VolumeBackup.
+        # Corresponds to the JSON property `state`
+        # @return [String]
+        attr_accessor :state
+      
+        # Output only. A human readable message explaining why the VolumeBackup is in
+        # its current state.
+        # Corresponds to the JSON property `stateMessage`
+        # @return [String]
+        attr_accessor :state_message
+      
+        # Output only. The aggregate size of the underlying artifacts associated with
+        # this VolumeBackup in the backup storage. This may change over time when
+        # multiple backups of the same volume share the same backup storage location. In
+        # particular, this is likely to increase in size when the immediately preceding
+        # backup of the same volume is deleted.
+        # Corresponds to the JSON property `storageBytes`
+        # @return [Fixnum]
+        attr_accessor :storage_bytes
+      
+        # Output only. [Output Only] Server generated global unique identifier of [UUID](
+        # https://en.wikipedia.org/wiki/Universally_unique_identifier) format.
+        # Corresponds to the JSON property `uid`
+        # @return [String]
+        attr_accessor :uid
+      
+        # Output only. [Output Only] The timestamp when this VolumeBackup resource was
+        # last updated - can be converted to and from [RFC3339](https://www.ietf.org/rfc/
+        # rfc3339.txt)
+        # Corresponds to the JSON property `updateTime`
+        # @return [String]
+        attr_accessor :update_time
+      
+        # Output only. A storage system-specific opaque handle to the underlying volume
+        # backup. This field is interpreted by the volume backup and restore drivers
+        # running in the GKE cluster and not by the service.
+        # Corresponds to the JSON property `volumeBackupHandle`
+        # @return [String]
+        attr_accessor :volume_backup_handle
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @complete_time = args[:complete_time] if args.key?(:complete_time)
+          @create_time = args[:create_time] if args.key?(:create_time)
+          @disk_size_bytes = args[:disk_size_bytes] if args.key?(:disk_size_bytes)
+          @etag = args[:etag] if args.key?(:etag)
+          @format = args[:format] if args.key?(:format)
+          @name = args[:name] if args.key?(:name)
+          @source_pvc = args[:source_pvc] if args.key?(:source_pvc)
+          @state = args[:state] if args.key?(:state)
+          @state_message = args[:state_message] if args.key?(:state_message)
+          @storage_bytes = args[:storage_bytes] if args.key?(:storage_bytes)
+          @uid = args[:uid] if args.key?(:uid)
+          @update_time = args[:update_time] if args.key?(:update_time)
+          @volume_backup_handle = args[:volume_backup_handle] if args.key?(:volume_backup_handle)
+        end
+      end
+      
+      # Represents the operation of restoring a volume from a VolumeBackup. Next id:
+      # 13
+      class VolumeRestore
+        include Google::Apis::Core::Hashable
+      
+        # Output only. [Output Only] The timestamp when the associated underlying volume
+        # restoration completed - can be converted to and from [RFC3339](https://www.
+        # ietf.org/rfc/rfc3339.txt)
+        # Corresponds to the JSON property `completeTime`
+        # @return [String]
+        attr_accessor :complete_time
+      
+        # Output only. [Output Only] The timestamp when this VolumeRestore resource was
+        # created - can be converted to and from [RFC3339](https://www.ietf.org/rfc/
+        # rfc3339.txt)
+        # Corresponds to the JSON property `createTime`
+        # @return [String]
+        attr_accessor :create_time
+      
+        # Output only. `etag` is used for optimistic concurrency control as a way to
+        # help prevent simultaneous updates of a volume restore from overwriting each
+        # other. It is strongly suggested that systems make use of the `etag` in the
+        # read-modify-write cycle to perform volume restore updates in order to avoid
+        # race conditions: An `etag` is returned in the response to `GetVolumeRestore',
+        # and systems are expected to put that etag in the request to `
+        # UpdateVolumeRestore` to ensure that their change will be applied to the same
+        # version.
+        # Corresponds to the JSON property `etag`
+        # @return [String]
+        attr_accessor :etag
+      
+        # Output only. Full name of the VolumeRestore resource. Format: projects/*/
+        # locations/*/restorePlans/*/restores/*/volumeRestores/* Note that the last
+        # segment of the name will have the format: 'pvc-'.
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        # Output only. The current state of this VolumeRestore
+        # Corresponds to the JSON property `state`
+        # @return [String]
+        attr_accessor :state
+      
+        # Output only. A human readable message explaining why the VolumeRestore is in
+        # its current state.
+        # Corresponds to the JSON property `stateMessage`
+        # @return [String]
+        attr_accessor :state_message
+      
+        # A reference to a namespaced resource in Kubernetes.
+        # Corresponds to the JSON property `targetPvc`
+        # @return [Google::Apis::GkebackupV1::NamespacedName]
+        attr_accessor :target_pvc
+      
+        # Output only. [Output Only] Server generated global unique identifier of [UUID](
+        # https://en.wikipedia.org/wiki/Universally_unique_identifier) format.
+        # Corresponds to the JSON property `uid`
+        # @return [String]
+        attr_accessor :uid
+      
+        # Output only. [Output Only] The timestamp when this VolumeRestore resource was
+        # last updated - can be converted to and from [RFC3339](https://www.ietf.org/rfc/
+        # rfc3339.txt)
+        # Corresponds to the JSON property `updateTime`
+        # @return [String]
+        attr_accessor :update_time
+      
+        # Output only. The full name of the VolumeBackup from which the volume will be
+        # restored. Format: projects/*/locations/*/backupPlans/*/backups/*/volumeBackups/
+        # *
+        # Corresponds to the JSON property `volumeBackup`
+        # @return [String]
+        attr_accessor :volume_backup
+      
+        # Output only. A storage system-specific opaque handler to the underlying volume
+        # created for the target PVC from the volume backup. This field is interpreted
+        # by the volume backup and restore drivers running in the GKE cluster and not by
+        # the service.
+        # Corresponds to the JSON property `volumeHandle`
+        # @return [String]
+        attr_accessor :volume_handle
+      
+        # Output only. The type of volume provisioned
+        # Corresponds to the JSON property `volumeType`
+        # @return [String]
+        attr_accessor :volume_type
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @complete_time = args[:complete_time] if args.key?(:complete_time)
+          @create_time = args[:create_time] if args.key?(:create_time)
+          @etag = args[:etag] if args.key?(:etag)
+          @name = args[:name] if args.key?(:name)
+          @state = args[:state] if args.key?(:state)
+          @state_message = args[:state_message] if args.key?(:state_message)
+          @target_pvc = args[:target_pvc] if args.key?(:target_pvc)
+          @uid = args[:uid] if args.key?(:uid)
+          @update_time = args[:update_time] if args.key?(:update_time)
+          @volume_backup = args[:volume_backup] if args.key?(:volume_backup)
+          @volume_handle = args[:volume_handle] if args.key?(:volume_handle)
+          @volume_type = args[:volume_type] if args.key?(:volume_type)
+        end
+      end
+    end
+  end
+end