google-apis-iam_v1 0.59.0 → 0.61.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e0b79ccb986a5d5b2d25ace1711ba07ef0f2b9f231bdc3e15d7d722dcac9e3ad
-  data.tar.gz: 238f706bbc1c7a488e37746ccbe2f3e0c8849b25a703f9652f20bcbdd248864b
+  metadata.gz: 2dbcdce3480fdc14486e83fcdfcba792325d245e797c8a9891669d8aa338d883
+  data.tar.gz: b98370bd02c9543651fc242bfb757666d751297e53b30437997a001bfabf2e2d
 SHA512:
-  metadata.gz: 29ed413e85ae53e8f773b71d86e8b1f8293b972c4b4a8fbb97added6df55419bd78f548c19afe9b3582972c6d618fdd1238ce75a47c58ac56dbd91b03628f559
-  data.tar.gz: e0ce5fae29c976b796869e06d4e57d5ec0e6f4d021688c5a5e20f34c358bb2c4cf1cb406d3ad2cb294116438a7076e2a3084a214aabd93595e7747035b0360f8
+  metadata.gz: 81e10f281438044cbaa5a3011ca582a6e0ac0766fb7af019725a222175d9cf1f8a8500607436c24886d5b1694d6835188f92aeb6d289590037fd9d19debf2fb0
+  data.tar.gz: 3e1e5aabf0cb4997d9d8e32930d3b2c83963b3735e9935c8309342e1f62fa1f8c269b140c765f2936482e52477f8837161e8c9e13277c587c5fccabbe8b27b6e

data/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Release history for google-apis-iam_v1
 
+### v0.61.0 (2024-07-25)
+
+* Regenerated from discovery document revision 20240722
+
+### v0.60.0 (2024-06-23)
+
+* Regenerated from discovery document revision 20240617
+
 ### v0.59.0 (2024-06-16)
 
 * Regenerated from discovery document revision 20240530

data/lib/google/apis/iam_v1/classes.rb

@@ -876,7 +876,7 @@ module Google
         # document should satisfy the following constraints: 1) Must contain an Identity
         # Provider Entity ID. 2) Must contain at least one non-expired signing key
         # certificate. 3) For each signing key: a) Valid from should be no more than 7
-        # days from now. b) Valid to should be no more than 15 years in the future. 4)
+        # days from now. b) Valid to should be no more than 20 years in the future. 4)
         # Up to 3 IdP signing keys are allowed in the metadata xml. When updating the
         # provider's metadata xml, at least one non-expired signing key must overlap
         # with the existing metadata. This requirement is skipped if there are no non-
@@ -1641,46 +1641,6 @@ module Google
         end
       end
       
-      # The service account key patch request.
-      class PatchServiceAccountKeyRequest
-        include Google::Apis::Core::Hashable
-      
-        # Represents a service account key. A service account has two sets of key-pairs:
-        # user-managed, and system-managed. User-managed key-pairs can be created and
-        # deleted by users. Users are responsible for rotating these keys periodically
-        # to ensure security of their service accounts. Users retain the private key of
-        # these key-pairs, and Google retains ONLY the public key. System-managed keys
-        # are automatically rotated by Google, and are used for signing for a maximum of
-        # two weeks. The rotation process is probabilistic, and usage of the new key
-        # will gradually ramp up and down over the key's lifetime. If you cache the
-        # public key set for a service account, we recommend that you update the cache
-        # every 15 minutes. User-managed keys can be added and removed at any time, so
-        # it is important to update the cache frequently. For Google-managed keys,
-        # Google will publish a key at least 6 hours before it is first used for signing
-        # and will keep publishing it for at least 6 hours after it was last used for
-        # signing. Public keys for all service accounts are also published at the OAuth2
-        # Service Account API.
-        # Corresponds to the JSON property `serviceAccountKey`
-        # @return [Google::Apis::IamV1::ServiceAccountKey]
-        attr_accessor :service_account_key
-      
-        # Required. The update mask to apply to the service account key. Only the
-        # following fields are eligible for patching: - contact - description
-        # Corresponds to the JSON property `updateMask`
-        # @return [String]
-        attr_accessor :update_mask
-      
-        def initialize(**args)
-           update!(**args)
-        end
-      
-        # Update properties of this object
-        def update!(**args)
-          @service_account_key = args[:service_account_key] if args.key?(:service_account_key)
-          @update_mask = args[:update_mask] if args.key?(:update_mask)
-        end
-      end
-      
       # The service account patch request. You can patch only the `display_name` and `
       # description` fields. You must use the `update_mask` field to specify which of
       # these fields you want to patch. Only the fields specified in the request are
@@ -2194,7 +2154,7 @@ module Google
         # must satisfy the following constraints: * Must contain an IdP Entity ID. *
         # Must contain at least one non-expired signing certificate. * For each signing
         # certificate, the expiration must be: * From no more than 7 days in the future.
-        # * To no more than 15 years in the future. * Up to three IdP signing keys are
+        # * To no more than 20 years in the future. * Up to three IdP signing keys are
         # allowed. When updating the provider's metadata XML, at least one non-expired
         # signing key must overlap with the existing metadata. This requirement is
         # skipped if there are no non-expired signing keys present in the existing
@@ -2321,23 +2281,6 @@ module Google
       class ServiceAccountKey
         include Google::Apis::Core::Hashable
       
-        # Optional. A user provided email address as the point of contact for this
-        # service account key. Must be an email address. Limit 64 characters.
-        # Corresponds to the JSON property `contact`
-        # @return [String]
-        attr_accessor :contact
-      
-        # Output only. The cloud identity that created this service account key.
-        # Populated automatically when the key is created and not editable by the user.
-        # Corresponds to the JSON property `creator`
-        # @return [String]
-        attr_accessor :creator
-      
-        # Optional. A user provided description of this service account key.
-        # Corresponds to the JSON property `description`
-        # @return [String]
-        attr_accessor :description
-      
         # Output only. optional. If the key is disabled, it may have a DisableReason
         # describing why it was disabled.
         # Corresponds to the JSON property `disableReason`
@@ -2421,9 +2364,6 @@ module Google
       
         # Update properties of this object
         def update!(**args)
-          @contact = args[:contact] if args.key?(:contact)
-          @creator = args[:creator] if args.key?(:creator)
-          @description = args[:description] if args.key?(:description)
           @disable_reason = args[:disable_reason] if args.key?(:disable_reason)
           @disabled = args[:disabled] if args.key?(:disabled)
           @extended_status = args[:extended_status] if args.key?(:extended_status)

data/lib/google/apis/iam_v1/gem_version.rb

@@ -16,13 +16,13 @@ module Google
   module Apis
     module IamV1
       # Version of the google-apis-iam_v1 gem
-      GEM_VERSION = "0.59.0"
+      GEM_VERSION = "0.61.0"
 
       # Version of the code generator used to generate this client
       GENERATOR_VERSION = "0.15.0"
 
       # Revision of the discovery document this client was generated from
-      REVISION = "20240530"
+      REVISION = "20240722"
     end
   end
 end

data/lib/google/apis/iam_v1/representations.rb

@@ -310,12 +310,6 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
-      class PatchServiceAccountKeyRequest
-        class Representation < Google::Apis::Core::JsonRepresentation; end
-      
-        include Google::Apis::Core::JsonObjectSupport
-      end
-      
       class PatchServiceAccountRequest
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -1011,15 +1005,6 @@ module Google
         end
       end
       
-      class PatchServiceAccountKeyRequest
-        # @private
-        class Representation < Google::Apis::Core::JsonRepresentation
-          property :service_account_key, as: 'serviceAccountKey', class: Google::Apis::IamV1::ServiceAccountKey, decorator: Google::Apis::IamV1::ServiceAccountKey::Representation
-      
-          property :update_mask, as: 'updateMask'
-        end
-      end
-      
       class PatchServiceAccountRequest
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -1169,9 +1154,6 @@ module Google
       class ServiceAccountKey
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
-          property :contact, as: 'contact'
-          property :creator, as: 'creator'
-          property :description, as: 'description'
           property :disable_reason, as: 'disableReason'
           property :disabled, as: 'disabled'
           collection :extended_status, as: 'extendedStatus', class: Google::Apis::IamV1::ExtendedStatus, decorator: Google::Apis::IamV1::ExtendedStatus::Representation

data/lib/google/apis/iam_v1/service.rb

@@ -1112,10 +1112,12 @@ module Google
         # occur immediately: * You cannot bind a principal to the custom role in an IAM
         # Policy. * Existing bindings to the custom role are not changed, but they have
         # no effect. * By default, the response from ListRoles does not include the
-        # custom role. You have 7 days to undelete the custom role. After 7 days, the
-        # following changes occur: * The custom role is permanently deleted and cannot
-        # be recovered. * If an IAM policy contains a binding to the custom role, the
-        # binding is permanently removed.
+        # custom role. A deleted custom role still counts toward the [custom role limit](
+        # /iam/quotas#limits) until it is permanently deleted. You have 7 days to
+        # undelete the custom role. After 7 days, the following changes occur: * The
+        # custom role is permanently deleted and cannot be recovered. * If an IAM policy
+        # contains a binding to the custom role, the binding is permanently removed. *
+        # The custom role no longer counts toward your custom role limit.
         # @param [String] name
         #   The `name` parameter's value depends on the target resource for the request,
         #   namely [projects](https://cloud.google.com/iam/docs/reference/rest/v1/projects.
@@ -2658,10 +2660,12 @@ module Google
         # occur immediately: * You cannot bind a principal to the custom role in an IAM
         # Policy. * Existing bindings to the custom role are not changed, but they have
         # no effect. * By default, the response from ListRoles does not include the
-        # custom role. You have 7 days to undelete the custom role. After 7 days, the
-        # following changes occur: * The custom role is permanently deleted and cannot
-        # be recovered. * If an IAM policy contains a binding to the custom role, the
-        # binding is permanently removed.
+        # custom role. A deleted custom role still counts toward the [custom role limit](
+        # /iam/quotas#limits) until it is permanently deleted. You have 7 days to
+        # undelete the custom role. After 7 days, the following changes occur: * The
+        # custom role is permanently deleted and cannot be recovered. * If an IAM policy
+        # contains a binding to the custom role, the binding is permanently removed. *
+        # The custom role no longer counts toward your custom role limit.
         # @param [String] name
         #   The `name` parameter's value depends on the target resource for the request,
         #   namely [projects](https://cloud.google.com/iam/docs/reference/rest/v1/projects.
@@ -3806,40 +3810,6 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Patches a ServiceAccountKey.
-        # @param [String] name
-        #   The resource name of the service account key in the following format `projects/
-        #   `PROJECT_ID`/serviceAccounts/`ACCOUNT`/keys/`key``.
-        # @param [Google::Apis::IamV1::PatchServiceAccountKeyRequest] patch_service_account_key_request_object
-        # @param [String] fields
-        #   Selector specifying which fields to include in a partial response.
-        # @param [String] quota_user
-        #   Available to use for quota purposes for server-side applications. Can be any
-        #   arbitrary string assigned to a user, but should not exceed 40 characters.
-        # @param [Google::Apis::RequestOptions] options
-        #   Request-specific options
-        #
-        # @yield [result, err] Result & error if block supplied
-        # @yieldparam result [Google::Apis::IamV1::ServiceAccountKey] parsed result object
-        # @yieldparam err [StandardError] error object if request failed
-        #
-        # @return [Google::Apis::IamV1::ServiceAccountKey]
-        #
-        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
-        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
-        # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def patch_service_account_key(name, patch_service_account_key_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
-          command = make_simple_command(:post, 'v1/{+name}:patch', options)
-          command.request_representation = Google::Apis::IamV1::PatchServiceAccountKeyRequest::Representation
-          command.request_object = patch_service_account_key_request_object
-          command.response_representation = Google::Apis::IamV1::ServiceAccountKey::Representation
-          command.response_class = Google::Apis::IamV1::ServiceAccountKey
-          command.params['name'] = name unless name.nil?
-          command.query['fields'] = fields unless fields.nil?
-          command.query['quotaUser'] = quota_user unless quota_user.nil?
-          execute_or_queue_command(command, &block)
-        end
-        
         # Uploads the public key portion of a key pair that you manage, and associates
         # the public key with a ServiceAccount. After you upload the public key, you can
         # use the private key from the key pair as a service account key.

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: google-apis-iam_v1
 version: !ruby/object:Gem::Version
-  version: 0.59.0
+  version: 0.61.0
 platform: ruby
 authors:
 - Google LLC
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-06-16 00:00:00.000000000 Z
+date: 2024-07-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: google-apis-core
@@ -59,7 +59,7 @@ licenses:
 metadata:
   bug_tracker_uri: https://github.com/googleapis/google-api-ruby-client/issues
   changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-iam_v1/CHANGELOG.md
-  documentation_uri: https://googleapis.dev/ruby/google-apis-iam_v1/v0.59.0
+  documentation_uri: https://googleapis.dev/ruby/google-apis-iam_v1/v0.61.0
   source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-iam_v1
 post_install_message: 
 rdoc_options: []