google-apis-iam_v1 0.44.0 → 0.46.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 52be15c572ef844cc240d223a8408e4fde31474e523bd1c2388bb0f93e09d746
-  data.tar.gz: 5b5768b5533fe2f0438b53c7088d0d5b6f932c9216637110e56e38286210ccde
+  metadata.gz: c8da1fc103e17337c68eb8397d64ffc3507102f2e006f2d6bc2c5d0ee478e3cb
+  data.tar.gz: e2b6a8cfbef0f0dcdb66003261ec5da5770b6133928221575a0c9af9b7215150
 SHA512:
-  metadata.gz: 51f435c5889e6ce0590d55282836a80e3c7533d4ef6ce38e197929aa4f108661075eb0511803cddf69694d526783e7968fb6051e244e32cf3a7e3bba2e2ed8f9
-  data.tar.gz: 1524cf6d816969ccb4094e456a11f3bf15fe142fb957cbe719996ae53db79f0d477082711a00100dad425b7092bca664278a6dfbfde4be968c2de1ccec081d45
+  metadata.gz: ab6b0c8ec268c8572e24bdf718ae228f0375dfa2918c5f64e6625dee3577f02004debde0814bc03b2b6df7b5eb10353d44672871594d28197430d257b2dcf8ac
+  data.tar.gz: d223a9704654d472ad90f1dff32caa03e4b3530f1ef6d795a0ae2b5a4e75275a63afa46ceb5bb448bc1701f791fa1d08c21768ca894d0bd1619cfe25c2989f64

data/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Release history for google-apis-iam_v1
 
+### v0.46.0 (2023-07-16)
+
+* Regenerated from discovery document revision 20230710
+
+### v0.45.0 (2023-07-02)
+
+* Regenerated from discovery document revision 20230622
+
 ### v0.44.0 (2023-05-28)
 
 * Regenerated from discovery document revision 20230518

data/lib/google/apis/iam_v1/classes.rb

@@ -571,6 +571,11 @@ module Google
         # @return [String]
         attr_accessor :client_id
       
+        # Representation of a client secret configured for the OIDC provider.
+        # Corresponds to the JSON property `clientSecret`
+        # @return [Google::Apis::IamV1::GoogleIamAdminV1WorkforcePoolProviderOidcClientSecret]
+        attr_accessor :client_secret
+      
         # Required. The OIDC issuer URI. Must be a valid URI using the 'https' scheme.
         # Corresponds to the JSON property `issuerUri`
         # @return [String]
@@ -588,15 +593,70 @@ module Google
         # Update properties of this object
         def update!(**args)
           @client_id = args[:client_id] if args.key?(:client_id)
+          @client_secret = args[:client_secret] if args.key?(:client_secret)
           @issuer_uri = args[:issuer_uri] if args.key?(:issuer_uri)
           @web_sso_config = args[:web_sso_config] if args.key?(:web_sso_config)
         end
       end
       
+      # Representation of a client secret configured for the OIDC provider.
+      class GoogleIamAdminV1WorkforcePoolProviderOidcClientSecret
+        include Google::Apis::Core::Hashable
+      
+        # Representation of the value of the client secret.
+        # Corresponds to the JSON property `value`
+        # @return [Google::Apis::IamV1::GoogleIamAdminV1WorkforcePoolProviderOidcClientSecretValue]
+        attr_accessor :value
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @value = args[:value] if args.key?(:value)
+        end
+      end
+      
+      # Representation of the value of the client secret.
+      class GoogleIamAdminV1WorkforcePoolProviderOidcClientSecretValue
+        include Google::Apis::Core::Hashable
+      
+        # Input only. The plain text of the client secret value. For security reasons,
+        # this field is only used for input and will never be populated in any response.
+        # Corresponds to the JSON property `plainText`
+        # @return [String]
+        attr_accessor :plain_text
+      
+        # Output only. A thumbprint to represent the current client secret value.
+        # Corresponds to the JSON property `thumbprint`
+        # @return [String]
+        attr_accessor :thumbprint
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @plain_text = args[:plain_text] if args.key?(:plain_text)
+          @thumbprint = args[:thumbprint] if args.key?(:thumbprint)
+        end
+      end
+      
       # Configuration for web single sign-on for the OIDC provider.
       class GoogleIamAdminV1WorkforcePoolProviderOidcWebSsoConfig
         include Google::Apis::Core::Hashable
       
+        # Additional scopes to request for in the OIDC authentication request on top of
+        # scopes requested by default. By default, the `openid`, `profile` and `email`
+        # scopes that are supported by the identity provider are requested. Each
+        # additional scope may be at most 256 characters. A maximum of 10 additional
+        # scopes may be configured.
+        # Corresponds to the JSON property `additionalScopes`
+        # @return [Array<String>]
+        attr_accessor :additional_scopes
+      
         # Required. The behavior for how OIDC Claims are included in the `assertion`
         # object used for attribute mapping and attribute condition.
         # Corresponds to the JSON property `assertionClaimsBehavior`
@@ -604,7 +664,8 @@ module Google
         attr_accessor :assertion_claims_behavior
       
         # Required. The Response Type to request for in the OIDC Authorization Request
-        # for web sign-in.
+        # for web sign-in. The `CODE` Response Type is recommended to avoid the Implicit
+        # Flow, for security reasons.
         # Corresponds to the JSON property `responseType`
         # @return [String]
         attr_accessor :response_type
@@ -615,6 +676,7 @@ module Google
       
         # Update properties of this object
         def update!(**args)
+          @additional_scopes = args[:additional_scopes] if args.key?(:additional_scopes)
           @assertion_claims_behavior = args[:assertion_claims_behavior] if args.key?(:assertion_claims_behavior)
           @response_type = args[:response_type] if args.key?(:response_type)
         end
@@ -1588,11 +1650,12 @@ module Google
         # @return [Array<String>]
         attr_accessor :included_permissions
       
-        # The name of the role. When Role is used in CreateRole, the role name must not
-        # be set. When Role is used in output and other input such as UpdateRole, the
-        # role name is the complete path, e.g., roles/logging.viewer for predefined
-        # roles and organizations/`ORGANIZATION_ID`/roles/logging.viewer for custom
-        # roles.
+        # The name of the role. When `Role` is used in `CreateRole`, the role name must
+        # not be set. When `Role` is used in output and other input such as `UpdateRole`,
+        # the role name is the complete path. For example, `roles/logging.viewer` for
+        # predefined roles, `organizations/`ORGANIZATION_ID`/roles/my-role` for
+        # organization-level custom roles, and `projects/`PROJECT_ID`/roles/my-role` for
+        # project-level custom roles.
         # Corresponds to the JSON property `name`
         # @return [String]
         attr_accessor :name
@@ -2279,6 +2342,12 @@ module Google
         # @return [String]
         attr_accessor :display_name
       
+        # Output only. Time after which the workforce pool will be permanently purged
+        # and cannot be recovered.
+        # Corresponds to the JSON property `expireTime`
+        # @return [String]
+        attr_accessor :expire_time
+      
         # Output only. The resource name of the pool. Format: `locations/`location`/
         # workforcePools/`workforce_pool_id``
         # Corresponds to the JSON property `name`
@@ -2314,6 +2383,7 @@ module Google
           @description = args[:description] if args.key?(:description)
           @disabled = args[:disabled] if args.key?(:disabled)
           @display_name = args[:display_name] if args.key?(:display_name)
+          @expire_time = args[:expire_time] if args.key?(:expire_time)
           @name = args[:name] if args.key?(:name)
           @parent = args[:parent] if args.key?(:parent)
           @session_duration = args[:session_duration] if args.key?(:session_duration)
@@ -2401,6 +2471,12 @@ module Google
         # @return [String]
         attr_accessor :display_name
       
+        # Output only. Time after which the workload pool provider will be permanently
+        # purged and cannot be recovered.
+        # Corresponds to the JSON property `expireTime`
+        # @return [String]
+        attr_accessor :expire_time
+      
         # Output only. The resource name of the provider. Format: `locations/`location`/
         # workforcePools/`workforce_pool_id`/providers/`provider_id``
         # Corresponds to the JSON property `name`
@@ -2433,6 +2509,7 @@ module Google
           @description = args[:description] if args.key?(:description)
           @disabled = args[:disabled] if args.key?(:disabled)
           @display_name = args[:display_name] if args.key?(:display_name)
+          @expire_time = args[:expire_time] if args.key?(:expire_time)
           @name = args[:name] if args.key?(:name)
           @oidc = args[:oidc] if args.key?(:oidc)
           @saml = args[:saml] if args.key?(:saml)
@@ -2510,6 +2587,12 @@ module Google
         # @return [String]
         attr_accessor :display_name
       
+        # Output only. Time after which the workload identity pool will be permanently
+        # purged and cannot be recovered.
+        # Corresponds to the JSON property `expireTime`
+        # @return [String]
+        attr_accessor :expire_time
+      
         # Output only. The resource name of the pool.
         # Corresponds to the JSON property `name`
         # @return [String]
@@ -2529,6 +2612,7 @@ module Google
           @description = args[:description] if args.key?(:description)
           @disabled = args[:disabled] if args.key?(:disabled)
           @display_name = args[:display_name] if args.key?(:display_name)
+          @expire_time = args[:expire_time] if args.key?(:expire_time)
           @name = args[:name] if args.key?(:name)
           @state = args[:state] if args.key?(:state)
         end
@@ -2630,6 +2714,12 @@ module Google
         # @return [String]
         attr_accessor :display_name
       
+        # Output only. Time after which the workload identity pool provider will be
+        # permanently purged and cannot be recovered.
+        # Corresponds to the JSON property `expireTime`
+        # @return [String]
+        attr_accessor :expire_time
+      
         # Output only. The resource name of the provider.
         # Corresponds to the JSON property `name`
         # @return [String]
@@ -2662,6 +2752,7 @@ module Google
           @description = args[:description] if args.key?(:description)
           @disabled = args[:disabled] if args.key?(:disabled)
           @display_name = args[:display_name] if args.key?(:display_name)
+          @expire_time = args[:expire_time] if args.key?(:expire_time)
           @name = args[:name] if args.key?(:name)
           @oidc = args[:oidc] if args.key?(:oidc)
           @saml = args[:saml] if args.key?(:saml)

data/lib/google/apis/iam_v1/gem_version.rb

@@ -16,13 +16,13 @@ module Google
   module Apis
     module IamV1
       # Version of the google-apis-iam_v1 gem
-      GEM_VERSION = "0.44.0"
+      GEM_VERSION = "0.46.0"
 
       # Version of the code generator used to generate this client
       GENERATOR_VERSION = "0.12.0"
 
       # Revision of the discovery document this client was generated from
-      REVISION = "20230518"
+      REVISION = "20230710"
     end
   end
 end

data/lib/google/apis/iam_v1/representations.rb

@@ -142,6 +142,18 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class GoogleIamAdminV1WorkforcePoolProviderOidcClientSecret
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleIamAdminV1WorkforcePoolProviderOidcClientSecretValue
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class GoogleIamAdminV1WorkforcePoolProviderOidcWebSsoConfig
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -643,15 +655,34 @@ module Google
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
           property :client_id, as: 'clientId'
+          property :client_secret, as: 'clientSecret', class: Google::Apis::IamV1::GoogleIamAdminV1WorkforcePoolProviderOidcClientSecret, decorator: Google::Apis::IamV1::GoogleIamAdminV1WorkforcePoolProviderOidcClientSecret::Representation
+      
           property :issuer_uri, as: 'issuerUri'
           property :web_sso_config, as: 'webSsoConfig', class: Google::Apis::IamV1::GoogleIamAdminV1WorkforcePoolProviderOidcWebSsoConfig, decorator: Google::Apis::IamV1::GoogleIamAdminV1WorkforcePoolProviderOidcWebSsoConfig::Representation
       
         end
       end
       
+      class GoogleIamAdminV1WorkforcePoolProviderOidcClientSecret
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :value, as: 'value', class: Google::Apis::IamV1::GoogleIamAdminV1WorkforcePoolProviderOidcClientSecretValue, decorator: Google::Apis::IamV1::GoogleIamAdminV1WorkforcePoolProviderOidcClientSecretValue::Representation
+      
+        end
+      end
+      
+      class GoogleIamAdminV1WorkforcePoolProviderOidcClientSecretValue
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :plain_text, as: 'plainText'
+          property :thumbprint, as: 'thumbprint'
+        end
+      end
+      
       class GoogleIamAdminV1WorkforcePoolProviderOidcWebSsoConfig
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
+          collection :additional_scopes, as: 'additionalScopes'
           property :assertion_claims_behavior, as: 'assertionClaimsBehavior'
           property :response_type, as: 'responseType'
         end
@@ -1097,6 +1128,7 @@ module Google
           property :description, as: 'description'
           property :disabled, as: 'disabled'
           property :display_name, as: 'displayName'
+          property :expire_time, as: 'expireTime'
           property :name, as: 'name'
           property :parent, as: 'parent'
           property :session_duration, as: 'sessionDuration'
@@ -1112,6 +1144,7 @@ module Google
           property :description, as: 'description'
           property :disabled, as: 'disabled'
           property :display_name, as: 'displayName'
+          property :expire_time, as: 'expireTime'
           property :name, as: 'name'
           property :oidc, as: 'oidc', class: Google::Apis::IamV1::GoogleIamAdminV1WorkforcePoolProviderOidc, decorator: Google::Apis::IamV1::GoogleIamAdminV1WorkforcePoolProviderOidc::Representation
       
@@ -1139,6 +1172,7 @@ module Google
           property :description, as: 'description'
           property :disabled, as: 'disabled'
           property :display_name, as: 'displayName'
+          property :expire_time, as: 'expireTime'
           property :name, as: 'name'
           property :state, as: 'state'
         end
@@ -1160,6 +1194,7 @@ module Google
           property :description, as: 'description'
           property :disabled, as: 'disabled'
           property :display_name, as: 'displayName'
+          property :expire_time, as: 'expireTime'
           property :name, as: 'name'
           property :oidc, as: 'oidc', class: Google::Apis::IamV1::Oidc, decorator: Google::Apis::IamV1::Oidc::Representation
       

data/lib/google/apis/iam_v1/service.rb

@@ -1623,6 +1623,130 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
+        # Gets the latest state of a long-running operation. Clients can use this method
+        # to poll the operation result at intervals as recommended by the API service.
+        # @param [String] name
+        #   The name of the operation resource.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::IamV1::Operation] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::IamV1::Operation]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def get_project_location_workload_identity_pool_namespace_managed_identity_operation(name, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+name}', options)
+          command.response_representation = Google::Apis::IamV1::Operation::Representation
+          command.response_class = Google::Apis::IamV1::Operation
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Gets the latest state of a long-running operation. Clients can use this method
+        # to poll the operation result at intervals as recommended by the API service.
+        # @param [String] name
+        #   The name of the operation resource.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::IamV1::Operation] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::IamV1::Operation]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def get_project_location_workload_identity_pool_namespace_managed_identity_workload_source_operation(name, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+name}', options)
+          command.response_representation = Google::Apis::IamV1::Operation::Representation
+          command.response_class = Google::Apis::IamV1::Operation
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Gets the latest state of a long-running operation. Clients can use this method
+        # to poll the operation result at intervals as recommended by the API service.
+        # @param [String] name
+        #   The name of the operation resource.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::IamV1::Operation] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::IamV1::Operation]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def get_project_location_workload_identity_pool_namespace_operation(name, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+name}', options)
+          command.response_representation = Google::Apis::IamV1::Operation::Representation
+          command.response_class = Google::Apis::IamV1::Operation
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Gets the latest state of a long-running operation. Clients can use this method
+        # to poll the operation result at intervals as recommended by the API service.
+        # @param [String] name
+        #   The name of the operation resource.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::IamV1::Operation] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::IamV1::Operation]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def get_project_location_workload_identity_pool_namespace_workload_source_operation(name, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+name}', options)
+          command.response_representation = Google::Apis::IamV1::Operation::Representation
+          command.response_class = Google::Apis::IamV1::Operation
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
         # Gets the latest state of a long-running operation. Clients can use this method
         # to poll the operation result at intervals as recommended by the API service.
         # @param [String] name

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: google-apis-iam_v1
 version: !ruby/object:Gem::Version
-  version: 0.44.0
+  version: 0.46.0
 platform: ruby
 authors:
 - Google LLC
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-06-04 00:00:00.000000000 Z
+date: 2023-07-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: google-apis-core
@@ -59,7 +59,7 @@ licenses:
 metadata:
   bug_tracker_uri: https://github.com/googleapis/google-api-ruby-client/issues
   changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-iam_v1/CHANGELOG.md
-  documentation_uri: https://googleapis.dev/ruby/google-apis-iam_v1/v0.44.0
+  documentation_uri: https://googleapis.dev/ruby/google-apis-iam_v1/v0.46.0
   source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-iam_v1
 post_install_message: 
 rdoc_options: []