google-apis-iam_v1 0.39.0 → 0.41.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4a12ddccd4b3b5cb633dfa59403741a7fc75e3136b529ef1edc125aaa58583fa
-  data.tar.gz: aa54bc83f09c5d75c7f698630c6423501a7c3d047d61edc37ce24763c0d7b99a
+  metadata.gz: b943419a81de6c59a04adab67234bbb939d39cec637be6f492383fb3d55af403
+  data.tar.gz: 1f8e6a12ff4f3adda429a193de2e4c4954ea0ccc49f6235cee0557b68127b373
 SHA512:
-  metadata.gz: 5ed157762abdd26f73e6285063dd71aa1221457afa7b668172a77aefd84f863d3d912fe85e1f2fc82063facb8b0c69ad0ca453e59e521181e345aff6a6642e24
-  data.tar.gz: 562288a8b87e0cfcb30bfaf8692898817f06922ee35b4eb49875ee5f0d0ea80f5068d3c637ebf90082f21c48c71f2f3948b41e2ca34434dace2aa2d962d38356
+  metadata.gz: bf958a590c7087a6ea2cb86783065a17af728b8b4571608becbf18515a4fe5bcd03622e2b0ed28c2eaa6ed2cb976a778e2db7c41ac69e2cc89e237e32018a80a
+  data.tar.gz: '03278a1ac8074fd2a7b327bee2e8d72581406e4d6dc28b86cb9b680557825032e4b64d39e9896397acab355b6a94b8a5304e750099d4a897661374faef3cf9d4'

data/CHANGELOG.md

@@ -1,5 +1,14 @@
 # Release history for google-apis-iam_v1
 
+### v0.41.0 (2023-03-26)
+
+* Regenerated from discovery document revision 20230320
+
+### v0.40.0 (2023-02-15)
+
+* Regenerated from discovery document revision 20230209
+* Regenerated using generator version 0.12.0
+
 ### v0.39.0 (2023-02-12)
 
 * Regenerated from discovery document revision 20230202

data/lib/google/apis/iam_v1/classes.rb

@@ -617,6 +617,54 @@ module Google
         end
       end
       
+      # Represents a public key data along with its format.
+      class KeyData
+        include Google::Apis::Core::Hashable
+      
+        # Output only. The format of the key.
+        # Corresponds to the JSON property `format`
+        # @return [String]
+        attr_accessor :format
+      
+        # Output only. The key data. The format of the key is represented by the format
+        # field.
+        # Corresponds to the JSON property `key`
+        # @return [String]
+        attr_accessor :key
+      
+        # Immutable. The specifications for the key.
+        # Corresponds to the JSON property `keySpec`
+        # @return [String]
+        attr_accessor :key_spec
+      
+        # Output only. Latest timestamp when this key is valid. Attempts to use this key
+        # after this time will fail. Only present if the key data represents a X.509
+        # certificate.
+        # Corresponds to the JSON property `notAfterTime`
+        # @return [String]
+        attr_accessor :not_after_time
+      
+        # Output only. Earliest timestamp when this key is valid. Attempts to use this
+        # key before this time will fail. Only present if the key data represents a X.
+        # 509 certificate.
+        # Corresponds to the JSON property `notBeforeTime`
+        # @return [String]
+        attr_accessor :not_before_time
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @format = args[:format] if args.key?(:format)
+          @key = args[:key] if args.key?(:key)
+          @key_spec = args[:key_spec] if args.key?(:key_spec)
+          @not_after_time = args[:not_after_time] if args.key?(:not_after_time)
+          @not_before_time = args[:not_before_time] if args.key?(:not_before_time)
+        end
+      end
+      
       # The request to lint a Cloud IAM policy object.
       class LintPolicyRequest
         include Google::Apis::Core::Hashable
@@ -807,6 +855,32 @@ module Google
         end
       end
       
+      # Response message for ListWorkforcePoolProviderKeys.
+      class ListWorkforcePoolProviderKeysResponse
+        include Google::Apis::Core::Hashable
+      
+        # A token, which can be sent as `page_token` to retrieve the next page. If this
+        # field is omitted, there are no subsequent pages.
+        # Corresponds to the JSON property `nextPageToken`
+        # @return [String]
+        attr_accessor :next_page_token
+      
+        # A list of WorkforcePoolProviderKeys.
+        # Corresponds to the JSON property `workforcePoolProviderKeys`
+        # @return [Array<Google::Apis::IamV1::WorkforcePoolProviderKey>]
+        attr_accessor :workforce_pool_provider_keys
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
+          @workforce_pool_provider_keys = args[:workforce_pool_provider_keys] if args.key?(:workforce_pool_provider_keys)
+        end
+      end
+      
       # Response message for ListWorkforcePoolProviders.
       class ListWorkforcePoolProvidersResponse
         include Google::Apis::Core::Hashable
@@ -859,6 +933,32 @@ module Google
         end
       end
       
+      # Response message for ListWorkloadIdentityPoolProviderKeys.
+      class ListWorkloadIdentityPoolProviderKeysResponse
+        include Google::Apis::Core::Hashable
+      
+        # A token, which can be sent as `page_token` to retrieve the next page. If this
+        # field is omitted, there are no subsequent pages.
+        # Corresponds to the JSON property `nextPageToken`
+        # @return [String]
+        attr_accessor :next_page_token
+      
+        # A list of WorkloadIdentityPoolProviderKey
+        # Corresponds to the JSON property `workloadIdentityPoolProviderKeys`
+        # @return [Array<Google::Apis::IamV1::WorkloadIdentityPoolProviderKey>]
+        attr_accessor :workload_identity_pool_provider_keys
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
+          @workload_identity_pool_provider_keys = args[:workload_identity_pool_provider_keys] if args.key?(:workload_identity_pool_provider_keys)
+        end
+      end
+      
       # Response message for ListWorkloadIdentityPoolProviders.
       class ListWorkloadIdentityPoolProvidersResponse
         include Google::Apis::Core::Hashable
@@ -1997,6 +2097,19 @@ module Google
         end
       end
       
+      # Request message for UndeleteWorkforcePoolProviderKey.
+      class UndeleteWorkforcePoolProviderKeyRequest
+        include Google::Apis::Core::Hashable
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+        end
+      end
+      
       # Request message for UndeleteWorkforcePoolProvider.
       class UndeleteWorkforcePoolProviderRequest
         include Google::Apis::Core::Hashable
@@ -2036,6 +2149,19 @@ module Google
         end
       end
       
+      # Request message for UndeleteWorkloadIdentityPoolProviderKey.
+      class UndeleteWorkloadIdentityPoolProviderKeyRequest
+        include Google::Apis::Core::Hashable
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+        end
+      end
+      
       # Request message for UndeleteWorkloadIdentityPoolProvider.
       class UndeleteWorkloadIdentityPoolProviderRequest
         include Google::Apis::Core::Hashable
@@ -2124,7 +2250,7 @@ module Google
         # minutes (900s) and less than 12 hours (43200s). If `session_duration` is not
         # configured, minted credentials have a default duration of one hour (3600s).
         # For SAML providers, the lifetime of the token is the minimum of the `
-        # session_duration` and the SessionNotOnOrAfter claim in the SAML assertion.
+        # session_duration` and the `SessionNotOnOrAfter` claim in the SAML assertion.
         # Corresponds to the JSON property `sessionDuration`
         # @return [String]
         attr_accessor :session_duration
@@ -2269,6 +2395,53 @@ module Google
         end
       end
       
+      # Represents a public key configuration for a Workforce Pool Provider. The key
+      # can be configured in your identity provider to encrypt SAML assertions. Google
+      # holds the corresponding private key, which it uses to decrypt encrypted tokens.
+      class WorkforcePoolProviderKey
+        include Google::Apis::Core::Hashable
+      
+        # Output only. The time after which the key will be permanently deleted and
+        # cannot be recovered. Note that the key may get purged before this time if the
+        # total limit of keys per provider is exceeded.
+        # Corresponds to the JSON property `expireTime`
+        # @return [String]
+        attr_accessor :expire_time
+      
+        # Represents a public key data along with its format.
+        # Corresponds to the JSON property `keyData`
+        # @return [Google::Apis::IamV1::KeyData]
+        attr_accessor :key_data
+      
+        # Output only. The resource name of the key.
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        # Output only. The state of the key.
+        # Corresponds to the JSON property `state`
+        # @return [String]
+        attr_accessor :state
+      
+        # Immutable. The purpose of the key.
+        # Corresponds to the JSON property `use`
+        # @return [String]
+        attr_accessor :use
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @expire_time = args[:expire_time] if args.key?(:expire_time)
+          @key_data = args[:key_data] if args.key?(:key_data)
+          @name = args[:name] if args.key?(:name)
+          @state = args[:state] if args.key?(:state)
+          @use = args[:use] if args.key?(:use)
+        end
+      end
+      
       # Represents a collection of external workload identities. You can define IAM
       # policies to grant these identities access to Google Cloud resources.
       class WorkloadIdentityPool
@@ -2450,6 +2623,54 @@ module Google
           @state = args[:state] if args.key?(:state)
         end
       end
+      
+      # Represents a public key configuration for your workload identity pool provider.
+      # The key can be configured in your identity provider to encrypt the SAML
+      # assertions. Google holds the corresponding private key which it uses to
+      # decrypt encrypted tokens.
+      class WorkloadIdentityPoolProviderKey
+        include Google::Apis::Core::Hashable
+      
+        # Output only. Time after which the key will be permanently purged and cannot be
+        # recovered. Note that the key may get purged before this timestamp if the total
+        # limit of keys per provider is crossed.
+        # Corresponds to the JSON property `expireTime`
+        # @return [String]
+        attr_accessor :expire_time
+      
+        # Represents a public key data along with its format.
+        # Corresponds to the JSON property `keyData`
+        # @return [Google::Apis::IamV1::KeyData]
+        attr_accessor :key_data
+      
+        # Output only. The resource name of the key.
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        # Output only. The state of the key.
+        # Corresponds to the JSON property `state`
+        # @return [String]
+        attr_accessor :state
+      
+        # Immutable. The purpose of the key.
+        # Corresponds to the JSON property `use`
+        # @return [String]
+        attr_accessor :use
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @expire_time = args[:expire_time] if args.key?(:expire_time)
+          @key_data = args[:key_data] if args.key?(:key_data)
+          @name = args[:name] if args.key?(:name)
+          @state = args[:state] if args.key?(:state)
+          @use = args[:use] if args.key?(:use)
+        end
+      end
     end
   end
 end

data/lib/google/apis/iam_v1/gem_version.rb

@@ -16,13 +16,13 @@ module Google
   module Apis
     module IamV1
       # Version of the google-apis-iam_v1 gem
-      GEM_VERSION = "0.39.0"
+      GEM_VERSION = "0.41.0"
 
       # Version of the code generator used to generate this client
-      GENERATOR_VERSION = "0.11.1"
+      GENERATOR_VERSION = "0.12.0"
 
       # Revision of the discovery document this client was generated from
-      REVISION = "20230202"
+      REVISION = "20230320"
     end
   end
 end

data/lib/google/apis/iam_v1/representations.rb

@@ -148,6 +148,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class KeyData
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class LintPolicyRequest
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -184,6 +190,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class ListWorkforcePoolProviderKeysResponse
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class ListWorkforcePoolProvidersResponse
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -196,6 +208,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class ListWorkloadIdentityPoolProviderKeysResponse
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class ListWorkloadIdentityPoolProvidersResponse
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -376,6 +394,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class UndeleteWorkforcePoolProviderKeyRequest
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class UndeleteWorkforcePoolProviderRequest
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -394,6 +418,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class UndeleteWorkloadIdentityPoolProviderKeyRequest
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class UndeleteWorkloadIdentityPoolProviderRequest
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -424,6 +454,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class WorkforcePoolProviderKey
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class WorkloadIdentityPool
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -442,6 +478,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class WorkloadIdentityPoolProviderKey
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class AdminAuditData
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -606,6 +648,17 @@ module Google
         end
       end
       
+      class KeyData
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :format, as: 'format'
+          property :key, as: 'key'
+          property :key_spec, as: 'keySpec'
+          property :not_after_time, as: 'notAfterTime'
+          property :not_before_time, as: 'notBeforeTime'
+        end
+      end
+      
       class LintPolicyRequest
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -661,6 +714,15 @@ module Google
         end
       end
       
+      class ListWorkforcePoolProviderKeysResponse
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :next_page_token, as: 'nextPageToken'
+          collection :workforce_pool_provider_keys, as: 'workforcePoolProviderKeys', class: Google::Apis::IamV1::WorkforcePoolProviderKey, decorator: Google::Apis::IamV1::WorkforcePoolProviderKey::Representation
+      
+        end
+      end
+      
       class ListWorkforcePoolProvidersResponse
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -679,6 +741,15 @@ module Google
         end
       end
       
+      class ListWorkloadIdentityPoolProviderKeysResponse
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :next_page_token, as: 'nextPageToken'
+          collection :workload_identity_pool_provider_keys, as: 'workloadIdentityPoolProviderKeys', class: Google::Apis::IamV1::WorkloadIdentityPoolProviderKey, decorator: Google::Apis::IamV1::WorkloadIdentityPoolProviderKey::Representation
+      
+        end
+      end
+      
       class ListWorkloadIdentityPoolProvidersResponse
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -954,6 +1025,12 @@ module Google
         end
       end
       
+      class UndeleteWorkforcePoolProviderKeyRequest
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+        end
+      end
+      
       class UndeleteWorkforcePoolProviderRequest
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -972,6 +1049,12 @@ module Google
         end
       end
       
+      class UndeleteWorkloadIdentityPoolProviderKeyRequest
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+        end
+      end
+      
       class UndeleteWorkloadIdentityPoolProviderRequest
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -1021,6 +1104,18 @@ module Google
         end
       end
       
+      class WorkforcePoolProviderKey
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :expire_time, as: 'expireTime'
+          property :key_data, as: 'keyData', class: Google::Apis::IamV1::KeyData, decorator: Google::Apis::IamV1::KeyData::Representation
+      
+          property :name, as: 'name'
+          property :state, as: 'state'
+          property :use, as: 'use'
+        end
+      end
+      
       class WorkloadIdentityPool
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -1056,6 +1151,18 @@ module Google
           property :state, as: 'state'
         end
       end
+      
+      class WorkloadIdentityPoolProviderKey
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :expire_time, as: 'expireTime'
+          property :key_data, as: 'keyData', class: Google::Apis::IamV1::KeyData, decorator: Google::Apis::IamV1::KeyData::Representation
+      
+          property :name, as: 'name'
+          property :state, as: 'state'
+          property :use, as: 'use'
+        end
+      end
     end
   end
 end

data/lib/google/apis/iam_v1/service.rb

@@ -702,6 +702,183 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
+        # Creates a new WorkforcePoolProviderKey in a WorkforcePoolProvider.
+        # @param [String] parent
+        #   Required. The provider to create this key in.
+        # @param [Google::Apis::IamV1::WorkforcePoolProviderKey] workforce_pool_provider_key_object
+        # @param [String] workforce_pool_provider_key_id
+        #   Required. The ID to use for the key, which becomes the final component of the
+        #   resource name. This value must be 4-32 characters, and may contain the
+        #   characters [a-z0-9-].
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::IamV1::Operation] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::IamV1::Operation]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def create_location_workforce_pool_provider_key(parent, workforce_pool_provider_key_object = nil, workforce_pool_provider_key_id: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:post, 'v1/{+parent}/keys', options)
+          command.request_representation = Google::Apis::IamV1::WorkforcePoolProviderKey::Representation
+          command.request_object = workforce_pool_provider_key_object
+          command.response_representation = Google::Apis::IamV1::Operation::Representation
+          command.response_class = Google::Apis::IamV1::Operation
+          command.params['parent'] = parent unless parent.nil?
+          command.query['workforcePoolProviderKeyId'] = workforce_pool_provider_key_id unless workforce_pool_provider_key_id.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Deletes a WorkforcePoolProviderKey. You can undelete a key for 30 days. After
+        # 30 days, deletion is permanent.
+        # @param [String] name
+        #   Required. The name of the key to delete.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::IamV1::Operation] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::IamV1::Operation]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def delete_location_workforce_pool_provider_key(name, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:delete, 'v1/{+name}', options)
+          command.response_representation = Google::Apis::IamV1::Operation::Representation
+          command.response_class = Google::Apis::IamV1::Operation
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Gets a WorkforcePoolProviderKey.
+        # @param [String] name
+        #   Required. The name of the key to retrieve.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::IamV1::WorkforcePoolProviderKey] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::IamV1::WorkforcePoolProviderKey]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def get_location_workforce_pool_provider_key(name, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+name}', options)
+          command.response_representation = Google::Apis::IamV1::WorkforcePoolProviderKey::Representation
+          command.response_class = Google::Apis::IamV1::WorkforcePoolProviderKey
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Lists all non-deleted WorkforcePoolProviderKeys in a WorkforcePoolProvider. If
+        # `show_deleted` is set to `true`, then deleted keys are also listed.
+        # @param [String] parent
+        #   Required. The provider resource to list encryption keys for. Format: `
+        #   locations/`location`/workforcePools/`workforce_pool_id`/providers/`provider_id`
+        #   `
+        # @param [Fixnum] page_size
+        #   The maximum number of keys to return. If unspecified, all keys are returned.
+        #   The maximum value is 10; values above 10 are truncated to 10.
+        # @param [String] page_token
+        #   A page token, received from a previous `ListWorkforcePoolProviderKeys` call.
+        #   Provide this to retrieve the subsequent page.
+        # @param [Boolean] show_deleted
+        #   Whether to return soft-deleted keys.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::IamV1::ListWorkforcePoolProviderKeysResponse] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::IamV1::ListWorkforcePoolProviderKeysResponse]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def list_location_workforce_pool_provider_keys(parent, page_size: nil, page_token: nil, show_deleted: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+parent}/keys', options)
+          command.response_representation = Google::Apis::IamV1::ListWorkforcePoolProviderKeysResponse::Representation
+          command.response_class = Google::Apis::IamV1::ListWorkforcePoolProviderKeysResponse
+          command.params['parent'] = parent unless parent.nil?
+          command.query['pageSize'] = page_size unless page_size.nil?
+          command.query['pageToken'] = page_token unless page_token.nil?
+          command.query['showDeleted'] = show_deleted unless show_deleted.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Undeletes a WorkforcePoolProviderKey, as long as it was deleted fewer than 30
+        # days ago.
+        # @param [String] name
+        #   Required. The name of the key to undelete.
+        # @param [Google::Apis::IamV1::UndeleteWorkforcePoolProviderKeyRequest] undelete_workforce_pool_provider_key_request_object
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::IamV1::Operation] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::IamV1::Operation]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def undelete_workforce_pool_provider_key(name, undelete_workforce_pool_provider_key_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:post, 'v1/{+name}:undelete', options)
+          command.request_representation = Google::Apis::IamV1::UndeleteWorkforcePoolProviderKeyRequest::Representation
+          command.request_object = undelete_workforce_pool_provider_key_request_object
+          command.response_representation = Google::Apis::IamV1::Operation::Representation
+          command.response_class = Google::Apis::IamV1::Operation
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
         # Gets the latest state of a long-running operation. Clients can use this method
         # to poll the operation result at intervals as recommended by the API service.
         # @param [String] name
@@ -1693,6 +1870,181 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
+        # Create a new WorkloadIdentityPoolProviderKey in a WorkloadIdentityPoolProvider.
+        # @param [String] parent
+        #   Required. The parent provider resource to create the key in.
+        # @param [Google::Apis::IamV1::WorkloadIdentityPoolProviderKey] workload_identity_pool_provider_key_object
+        # @param [String] workload_identity_pool_provider_key_id
+        #   Required. The ID to use for the key, which becomes the final component of the
+        #   resource name. This value should be 4-32 characters, and may contain the
+        #   characters [a-z0-9-].
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::IamV1::Operation] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::IamV1::Operation]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def create_project_location_workload_identity_pool_provider_key(parent, workload_identity_pool_provider_key_object = nil, workload_identity_pool_provider_key_id: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:post, 'v1/{+parent}/keys', options)
+          command.request_representation = Google::Apis::IamV1::WorkloadIdentityPoolProviderKey::Representation
+          command.request_object = workload_identity_pool_provider_key_object
+          command.response_representation = Google::Apis::IamV1::Operation::Representation
+          command.response_class = Google::Apis::IamV1::Operation
+          command.params['parent'] = parent unless parent.nil?
+          command.query['workloadIdentityPoolProviderKeyId'] = workload_identity_pool_provider_key_id unless workload_identity_pool_provider_key_id.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Deletes an WorkloadIdentityPoolProviderKey. You can undelete a key for 30 days.
+        # After 30 days, deletion is permanent.
+        # @param [String] name
+        #   Required. The name of the encryption key to delete.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::IamV1::Operation] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::IamV1::Operation]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def delete_project_location_workload_identity_pool_provider_key(name, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:delete, 'v1/{+name}', options)
+          command.response_representation = Google::Apis::IamV1::Operation::Representation
+          command.response_class = Google::Apis::IamV1::Operation
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Gets an individual WorkloadIdentityPoolProviderKey.
+        # @param [String] name
+        #   Required. The name of the key to retrieve.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::IamV1::WorkloadIdentityPoolProviderKey] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::IamV1::WorkloadIdentityPoolProviderKey]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def get_project_location_workload_identity_pool_provider_key(name, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+name}', options)
+          command.response_representation = Google::Apis::IamV1::WorkloadIdentityPoolProviderKey::Representation
+          command.response_class = Google::Apis::IamV1::WorkloadIdentityPoolProviderKey
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Lists all non-deleted WorkloadIdentityPoolProviderKeys in a project. If
+        # show_deleted is set to `true`, then deleted pools are also listed.
+        # @param [String] parent
+        #   Required. The parent provider resource to list encryption keys for.
+        # @param [Fixnum] page_size
+        #   The maximum number of keys to return. If unspecified, all keys are returned.
+        #   The maximum value is 10; values above 10 are truncated to 10.
+        # @param [String] page_token
+        #   A page token, received from a previous `ListWorkloadIdentityPoolProviderKeys`
+        #   call. Provide this to retrieve the subsequent page.
+        # @param [Boolean] show_deleted
+        #   Whether to return soft deleted resources as well.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::IamV1::ListWorkloadIdentityPoolProviderKeysResponse] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::IamV1::ListWorkloadIdentityPoolProviderKeysResponse]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def list_project_location_workload_identity_pool_provider_keys(parent, page_size: nil, page_token: nil, show_deleted: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+parent}/keys', options)
+          command.response_representation = Google::Apis::IamV1::ListWorkloadIdentityPoolProviderKeysResponse::Representation
+          command.response_class = Google::Apis::IamV1::ListWorkloadIdentityPoolProviderKeysResponse
+          command.params['parent'] = parent unless parent.nil?
+          command.query['pageSize'] = page_size unless page_size.nil?
+          command.query['pageToken'] = page_token unless page_token.nil?
+          command.query['showDeleted'] = show_deleted unless show_deleted.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Undeletes an WorkloadIdentityPoolProviderKey, as long as it was deleted fewer
+        # than 30 days ago.
+        # @param [String] name
+        #   Required. The name of the encryption key to undelete.
+        # @param [Google::Apis::IamV1::UndeleteWorkloadIdentityPoolProviderKeyRequest] undelete_workload_identity_pool_provider_key_request_object
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::IamV1::Operation] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::IamV1::Operation]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def undelete_workload_identity_pool_provider_key(name, undelete_workload_identity_pool_provider_key_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:post, 'v1/{+name}:undelete', options)
+          command.request_representation = Google::Apis::IamV1::UndeleteWorkloadIdentityPoolProviderKeyRequest::Representation
+          command.request_object = undelete_workload_identity_pool_provider_key_request_object
+          command.response_representation = Google::Apis::IamV1::Operation::Representation
+          command.response_class = Google::Apis::IamV1::Operation
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
         # Gets the latest state of a long-running operation. Clients can use this method
         # to poll the operation result at intervals as recommended by the API service.
         # @param [String] name

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: google-apis-iam_v1
 version: !ruby/object:Gem::Version
-  version: 0.39.0
+  version: 0.41.0
 platform: ruby
 authors:
 - Google LLC
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-02-12 00:00:00.000000000 Z
+date: 2023-03-26 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: google-apis-core
@@ -16,7 +16,7 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.9.1
+        version: 0.11.0
     - - "<"
       - !ruby/object:Gem::Version
         version: 2.a
@@ -26,7 +26,7 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.9.1
+        version: 0.11.0
     - - "<"
       - !ruby/object:Gem::Version
         version: 2.a
@@ -59,7 +59,7 @@ licenses:
 metadata:
   bug_tracker_uri: https://github.com/googleapis/google-api-ruby-client/issues
   changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-iam_v1/CHANGELOG.md
-  documentation_uri: https://googleapis.dev/ruby/google-apis-iam_v1/v0.39.0
+  documentation_uri: https://googleapis.dev/ruby/google-apis-iam_v1/v0.41.0
   source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-iam_v1
 post_install_message: 
 rdoc_options: []