google-apis-gkehub_v1alpha 0.77.0 → 0.78.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 65d8ec76342f9000f9fa7402d46478aefe45148f84b25c0c2649cb283e6a8e52
-  data.tar.gz: 72430d5414b570dbc138a55760ada7c9b09f5d1b75bfaae6626b6fe5e8590319
+  metadata.gz: d030efad1314a3abab865ff9bd3cee0a080560535a441cc425d73592ed7e9920
+  data.tar.gz: 57661f79dda5da7f53a820294b0b1cef0b964029a2edb9eaac85f04a9104bd38
 SHA512:
-  metadata.gz: 6d53aa24ca2a671b4433e9b3c7a2956c90571bfb6b31b70468287c7788650e68fdbac26048d62871a8fd608d104d5585957ee4981fe4e97c50e9508497248d9f
-  data.tar.gz: 34847f168339ea45b5bee001f3937231804298c07c5878094c2a7a18d62188a9987c4376b4cf1d603dbd322a61818dff5239c957711cd5a96f251d483b0d51f6
+  metadata.gz: a27371604216d0d24a5226b28e6cd2fb9b9118340326a18a519e143f730fe9c0b2ca2e8d04873172ddc46641ef9936dc100957298c6525785a4f6aea2289d6ab
+  data.tar.gz: 95184e8d50b46caf89e757d56433f9c5c9cabba112e45baec69aed449aeea3e0bf8bd1b466e0e281eb0b4d0df061512461e84c802bbeaf820da3b51717dae85c

data/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Release history for google-apis-gkehub_v1alpha
 
+### v0.78.0 (2024-03-24)
+
+* Regenerated from discovery document revision 20240318
+
 ### v0.77.0 (2024-03-10)
 
 * Regenerated from discovery document revision 20240229

data/lib/google/apis/gkehub_v1alpha/classes.rb

@@ -2907,6 +2907,11 @@ module Google
         # @return [Google::Apis::GkehubV1alpha::IdentityServiceGoogleConfig]
         attr_accessor :google_config
       
+        # Configuration for the LDAP Auth flow.
+        # Corresponds to the JSON property `ldapConfig`
+        # @return [Google::Apis::GkehubV1alpha::IdentityServiceLdapConfig]
+        attr_accessor :ldap_config
+      
         # Identifier for auth config.
         # Corresponds to the JSON property `name`
         # @return [String]
@@ -2935,6 +2940,7 @@ module Google
         def update!(**args)
           @azuread_config = args[:azuread_config] if args.key?(:azuread_config)
           @google_config = args[:google_config] if args.key?(:google_config)
+          @ldap_config = args[:ldap_config] if args.key?(:ldap_config)
           @name = args[:name] if args.key?(:name)
           @oidc_config = args[:oidc_config] if args.key?(:oidc_config)
           @proxy = args[:proxy] if args.key?(:proxy)
@@ -3021,6 +3027,84 @@ module Google
         end
       end
       
+      # Contains the properties for locating and authenticating groups in the
+      # directory.
+      class IdentityServiceGroupConfig
+        include Google::Apis::Core::Hashable
+      
+        # Required. The location of the subtree in the LDAP directory to search for
+        # group entries.
+        # Corresponds to the JSON property `baseDn`
+        # @return [String]
+        attr_accessor :base_dn
+      
+        # Optional. Optional filter to be used when searching for groups a user belongs
+        # to. This can be used to explicitly match only certain groups in order to
+        # reduce the amount of groups returned for each user. This defaults to "(
+        # objectClass=Group)".
+        # Corresponds to the JSON property `filter`
+        # @return [String]
+        attr_accessor :filter
+      
+        # Optional. The identifying name of each group a user belongs to. For example,
+        # if this is set to "distinguishedName" then RBACs and other group expectations
+        # should be written as full DNs. This defaults to "distinguishedName".
+        # Corresponds to the JSON property `idAttribute`
+        # @return [String]
+        attr_accessor :id_attribute
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @base_dn = args[:base_dn] if args.key?(:base_dn)
+          @filter = args[:filter] if args.key?(:filter)
+          @id_attribute = args[:id_attribute] if args.key?(:id_attribute)
+        end
+      end
+      
+      # Configuration for the LDAP Auth flow.
+      class IdentityServiceLdapConfig
+        include Google::Apis::Core::Hashable
+      
+        # Contains the properties for locating and authenticating groups in the
+        # directory.
+        # Corresponds to the JSON property `group`
+        # @return [Google::Apis::GkehubV1alpha::IdentityServiceGroupConfig]
+        attr_accessor :group
+      
+        # Server settings for the external LDAP server.
+        # Corresponds to the JSON property `server`
+        # @return [Google::Apis::GkehubV1alpha::IdentityServiceServerConfig]
+        attr_accessor :server
+      
+        # Contains the credentials of the service account which is authorized to perform
+        # the LDAP search in the directory. The credentials can be supplied by the
+        # combination of the DN and password or the client certificate.
+        # Corresponds to the JSON property `serviceAccount`
+        # @return [Google::Apis::GkehubV1alpha::IdentityServiceServiceAccountConfig]
+        attr_accessor :service_account
+      
+        # Defines where users exist in the LDAP directory.
+        # Corresponds to the JSON property `user`
+        # @return [Google::Apis::GkehubV1alpha::IdentityServiceUserConfig]
+        attr_accessor :user
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @group = args[:group] if args.key?(:group)
+          @server = args[:server] if args.key?(:server)
+          @service_account = args[:service_account] if args.key?(:service_account)
+          @user = args[:user] if args.key?(:user)
+        end
+      end
+      
       # **Anthos Identity Service**: Configuration for a single Membership.
       class IdentityServiceMembershipSpec
         include Google::Apis::Core::Hashable
@@ -3251,6 +3335,147 @@ module Google
         end
       end
       
+      # Server settings for the external LDAP server.
+      class IdentityServiceServerConfig
+        include Google::Apis::Core::Hashable
+      
+        # Optional. Contains a Base64 encoded, PEM formatted certificate authority
+        # certificate for the LDAP server. This must be provided for the "ldaps" and "
+        # startTLS" connections.
+        # Corresponds to the JSON property `certificateAuthorityData`
+        # NOTE: Values are automatically base64 encoded/decoded in the client library.
+        # @return [String]
+        attr_accessor :certificate_authority_data
+      
+        # Optional. Defines the connection type to communicate with the LDAP server. If `
+        # starttls` or `ldaps` is specified, the certificate_authority_data should not
+        # be empty.
+        # Corresponds to the JSON property `connectionType`
+        # @return [String]
+        attr_accessor :connection_type
+      
+        # Required. Defines the hostname or IP of the LDAP server. Port is optional and
+        # will default to 389, if unspecified. For example, "ldap.server.example" or "10.
+        # 10.10.10:389".
+        # Corresponds to the JSON property `host`
+        # @return [String]
+        attr_accessor :host
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @certificate_authority_data = args[:certificate_authority_data] if args.key?(:certificate_authority_data)
+          @connection_type = args[:connection_type] if args.key?(:connection_type)
+          @host = args[:host] if args.key?(:host)
+        end
+      end
+      
+      # Contains the credentials of the service account which is authorized to perform
+      # the LDAP search in the directory. The credentials can be supplied by the
+      # combination of the DN and password or the client certificate.
+      class IdentityServiceServiceAccountConfig
+        include Google::Apis::Core::Hashable
+      
+        # The structure holds the LDAP simple binding credential.
+        # Corresponds to the JSON property `simpleBindCredentials`
+        # @return [Google::Apis::GkehubV1alpha::IdentityServiceSimpleBindCredentials]
+        attr_accessor :simple_bind_credentials
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @simple_bind_credentials = args[:simple_bind_credentials] if args.key?(:simple_bind_credentials)
+        end
+      end
+      
+      # The structure holds the LDAP simple binding credential.
+      class IdentityServiceSimpleBindCredentials
+        include Google::Apis::Core::Hashable
+      
+        # Required. The distinguished name(DN) of the service account object/user.
+        # Corresponds to the JSON property `dn`
+        # @return [String]
+        attr_accessor :dn
+      
+        # Output only. The encrypted password of the service account object/user.
+        # Corresponds to the JSON property `encryptedPassword`
+        # NOTE: Values are automatically base64 encoded/decoded in the client library.
+        # @return [String]
+        attr_accessor :encrypted_password
+      
+        # Required. Input only. The password of the service account object/user.
+        # Corresponds to the JSON property `password`
+        # @return [String]
+        attr_accessor :password
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @dn = args[:dn] if args.key?(:dn)
+          @encrypted_password = args[:encrypted_password] if args.key?(:encrypted_password)
+          @password = args[:password] if args.key?(:password)
+        end
+      end
+      
+      # Defines where users exist in the LDAP directory.
+      class IdentityServiceUserConfig
+        include Google::Apis::Core::Hashable
+      
+        # Required. The location of the subtree in the LDAP directory to search for user
+        # entries.
+        # Corresponds to the JSON property `baseDn`
+        # @return [String]
+        attr_accessor :base_dn
+      
+        # Optional. Filter to apply when searching for the user. This can be used to
+        # further restrict the user accounts which are allowed to login. This defaults
+        # to "(objectClass=User)".
+        # Corresponds to the JSON property `filter`
+        # @return [String]
+        attr_accessor :filter
+      
+        # Optional. Determines which attribute to use as the user's identity after they
+        # are authenticated. This is distinct from the loginAttribute field to allow
+        # users to login with a username, but then have their actual identifier be an
+        # email address or full Distinguished Name (DN). For example, setting
+        # loginAttribute to "sAMAccountName" and identifierAttribute to "
+        # userPrincipalName" would allow a user to login as "bsmith", but actual RBAC
+        # policies for the user would be written as "bsmith@example.com". Using "
+        # userPrincipalName" is recommended since this will be unique for each user.
+        # This defaults to "userPrincipalName".
+        # Corresponds to the JSON property `idAttribute`
+        # @return [String]
+        attr_accessor :id_attribute
+      
+        # Optional. The name of the attribute which matches against the input username.
+        # This is used to find the user in the LDAP database e.g. "(=)" and is combined
+        # with the optional filter field. This defaults to "userPrincipalName".
+        # Corresponds to the JSON property `loginAttribute`
+        # @return [String]
+        attr_accessor :login_attribute
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @base_dn = args[:base_dn] if args.key?(:base_dn)
+          @filter = args[:filter] if args.key?(:filter)
+          @id_attribute = args[:id_attribute] if args.key?(:id_attribute)
+          @login_attribute = args[:login_attribute] if args.key?(:login_attribute)
+        end
+      end
+      
       # KubernetesMetadata provides informational metadata for Memberships
       # representing Kubernetes clusters.
       class KubernetesMetadata

data/lib/google/apis/gkehub_v1alpha/gem_version.rb

@@ -16,13 +16,13 @@ module Google
   module Apis
     module GkehubV1alpha
       # Version of the google-apis-gkehub_v1alpha gem
-      GEM_VERSION = "0.77.0"
+      GEM_VERSION = "0.78.0"
 
       # Version of the code generator used to generate this client
       GENERATOR_VERSION = "0.14.0"
 
       # Revision of the discovery document this client was generated from
-      REVISION = "20240229"
+      REVISION = "20240318"
     end
   end
 end

data/lib/google/apis/gkehub_v1alpha/representations.rb

@@ -544,6 +544,18 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class IdentityServiceGroupConfig
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class IdentityServiceLdapConfig
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class IdentityServiceMembershipSpec
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -568,6 +580,30 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class IdentityServiceServerConfig
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class IdentityServiceServiceAccountConfig
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class IdentityServiceSimpleBindCredentials
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class IdentityServiceUserConfig
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class KubernetesMetadata
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -1897,6 +1933,8 @@ module Google
       
           property :google_config, as: 'googleConfig', class: Google::Apis::GkehubV1alpha::IdentityServiceGoogleConfig, decorator: Google::Apis::GkehubV1alpha::IdentityServiceGoogleConfig::Representation
       
+          property :ldap_config, as: 'ldapConfig', class: Google::Apis::GkehubV1alpha::IdentityServiceLdapConfig, decorator: Google::Apis::GkehubV1alpha::IdentityServiceLdapConfig::Representation
+      
           property :name, as: 'name'
           property :oidc_config, as: 'oidcConfig', class: Google::Apis::GkehubV1alpha::IdentityServiceOidcConfig, decorator: Google::Apis::GkehubV1alpha::IdentityServiceOidcConfig::Representation
       
@@ -1926,6 +1964,29 @@ module Google
         end
       end
       
+      class IdentityServiceGroupConfig
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :base_dn, as: 'baseDn'
+          property :filter, as: 'filter'
+          property :id_attribute, as: 'idAttribute'
+        end
+      end
+      
+      class IdentityServiceLdapConfig
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :group, as: 'group', class: Google::Apis::GkehubV1alpha::IdentityServiceGroupConfig, decorator: Google::Apis::GkehubV1alpha::IdentityServiceGroupConfig::Representation
+      
+          property :server, as: 'server', class: Google::Apis::GkehubV1alpha::IdentityServiceServerConfig, decorator: Google::Apis::GkehubV1alpha::IdentityServiceServerConfig::Representation
+      
+          property :service_account, as: 'serviceAccount', class: Google::Apis::GkehubV1alpha::IdentityServiceServiceAccountConfig, decorator: Google::Apis::GkehubV1alpha::IdentityServiceServiceAccountConfig::Representation
+      
+          property :user, as: 'user', class: Google::Apis::GkehubV1alpha::IdentityServiceUserConfig, decorator: Google::Apis::GkehubV1alpha::IdentityServiceUserConfig::Representation
+      
+        end
+      end
+      
       class IdentityServiceMembershipSpec
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -1979,6 +2040,42 @@ module Google
         end
       end
       
+      class IdentityServiceServerConfig
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :certificate_authority_data, :base64 => true, as: 'certificateAuthorityData'
+          property :connection_type, as: 'connectionType'
+          property :host, as: 'host'
+        end
+      end
+      
+      class IdentityServiceServiceAccountConfig
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :simple_bind_credentials, as: 'simpleBindCredentials', class: Google::Apis::GkehubV1alpha::IdentityServiceSimpleBindCredentials, decorator: Google::Apis::GkehubV1alpha::IdentityServiceSimpleBindCredentials::Representation
+      
+        end
+      end
+      
+      class IdentityServiceSimpleBindCredentials
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :dn, as: 'dn'
+          property :encrypted_password, :base64 => true, as: 'encryptedPassword'
+          property :password, as: 'password'
+        end
+      end
+      
+      class IdentityServiceUserConfig
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :base_dn, as: 'baseDn'
+          property :filter, as: 'filter'
+          property :id_attribute, as: 'idAttribute'
+          property :login_attribute, as: 'loginAttribute'
+        end
+      end
+      
       class KubernetesMetadata
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: google-apis-gkehub_v1alpha
 version: !ruby/object:Gem::Version
-  version: 0.77.0
+  version: 0.78.0
 platform: ruby
 authors:
 - Google LLC
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-03-10 00:00:00.000000000 Z
+date: 2024-03-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: google-apis-core
@@ -58,7 +58,7 @@ licenses:
 metadata:
   bug_tracker_uri: https://github.com/googleapis/google-api-ruby-client/issues
   changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-gkehub_v1alpha/CHANGELOG.md
-  documentation_uri: https://googleapis.dev/ruby/google-apis-gkehub_v1alpha/v0.77.0
+  documentation_uri: https://googleapis.dev/ruby/google-apis-gkehub_v1alpha/v0.78.0
   source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-gkehub_v1alpha
 post_install_message: 
 rdoc_options: []