RubyGems - google-apis-iam_v1 - Versions diffs - 0.79.0 → 0.90.0 - Mend

google-apis-iam_v1 0.79.0 → 0.90.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (8) hide show

checksums.yaml +4 -4
data/CHANGELOG.md +44 -0
data/OVERVIEW.md +1 -1
data/lib/google/apis/iam_v1/classes.rb +130 -106
data/lib/google/apis/iam_v1/gem_version.rb +3 -3
data/lib/google/apis/iam_v1/representations.rb +3 -14
data/lib/google/apis/iam_v1/service.rb +222 -105
metadata +3 -3

checksums.yaml CHANGED Viewed

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '0855742e6cc515c8aae0d724c767f77121b58399897e303a0d4a38c8a0b94d12'
-  data.tar.gz: eae971b163bb60ca5acd5697c451038dfd34731af1103e5aba041c25bfe8b93f
+  metadata.gz: 310a0bc570a2a9830db61c89549d65d3f40ab17096d040c4286f35652132e074
+  data.tar.gz: 59151f2027732814b005b87a62949675f3233f536e233f1787357ba9fceb33e3
 SHA512:
-  metadata.gz: b6f35a04cc15ff8d3a711e3a08511fc89a2be091593dae33e89dc19edcce02b2f170ed393d176bec2d1c090a190db2dde2a793af30b8aaf9babe57ed6b78436f
-  data.tar.gz: 92ddebf0ad25af76967624fe4e3a64730dcc4fe4d35ec27ebd8a72680c85f2d1e5aef3c79b81c4bfcc478854fe48a79c577b3460ac3cc7b1135bd29e69a5b80e
+  metadata.gz: bc35f69f039c57d38fbfeb69aa5af285818c97bd59fa3d49ea89b2d66adea45c3a631d99f77f5ba3784ac3ec24898f846b5807dae5f6ae4de1cf0ed8ab1f4518
+  data.tar.gz: e1c6e54430b63ebe87d6e5a2aa5bbf4df0fff8c71294aaaddbaf0f974fe222fa9489fde4f52e2d18396165e6c9dd1c6a1c1ae6a9789a1c5a7fa1bd7615a91fb7

data/CHANGELOG.md CHANGED Viewed

@@ -1,5 +1,49 @@
 # Release history for google-apis-iam_v1
+### v0.90.0 (2026-08-16)
+* Regenerated from discovery document revision 20260807
+### v0.89.0 (2026-08-02)
+* Regenerated from discovery document revision 20260724
+### v0.88.0 (2026-07-12)
+* Regenerated from discovery document revision 20260702
+### v0.87.0 (2026-06-14)
+* Regenerated using generator version 0.19.0
+### v0.86.0 (2026-04-19)
+* Regenerated from discovery document revision 20260320
+### v0.85.0 (2026-03-22)
+* Regenerated from discovery document revision 20260313
+### v0.84.0 (2026-03-15)
+* Regenerated from discovery document revision 20260306
+### v0.83.0 (2026-02-01)
+* Regenerated from discovery document revision 20260123
+### v0.82.0 (2026-01-25)
+* Regenerated from discovery document revision 20260116
+### v0.81.0 (2025-12-14)
+* Regenerated from discovery document revision 20251204
+### v0.80.0 (2025-10-19)
+* Regenerated from discovery document revision 20251010
 ### v0.79.0 (2025-10-12)
 * Regenerated from discovery document revision 20251003

data/OVERVIEW.md CHANGED Viewed

@@ -83,7 +83,7 @@ The [product documentation](https://cloud.google.com/iam/) may provide guidance
 ## Supported Ruby versions
-This library is supported on Ruby 3.1+.
+This library is supported on Ruby 3.2+.
 Google provides official support for Ruby versions that are actively supported by Ruby Core -- that is, Ruby versions that are either in normal maintenance or in security maintenance, and not end of life. Older versions of Ruby _may_ still work, but are unsupported and not recommended. See https://www.ruby-lang.org/en/downloads/branches/ for details about the Ruby support schedule.

data/lib/google/apis/iam_v1/classes.rb CHANGED Viewed

@@ -493,28 +493,12 @@ module Google
       class DisableServiceAccountKeyRequest
         include Google::Apis::Core::Hashable
-        # Optional. Usable by internal google services only. An extended_status_message
-        # can be used to include additional information about the key, such as its
-        # private key data being exposed on a public repository like GitHub.
-        # Corresponds to the JSON property `extendedStatusMessage`
-        # @return [String]
-        attr_accessor :extended_status_message
-        # Optional. Describes the reason this key is being disabled. If unspecified, the
-        # default value of SERVICE_ACCOUNT_KEY_DISABLE_REASON_USER_INITIATED will be
-        # used.
-        # Corresponds to the JSON property `serviceAccountKeyDisableReason`
-        # @return [String]
-        attr_accessor :service_account_key_disable_reason
         def initialize(**args)
            update!(**args)
         end
         # Update properties of this object
         def update!(**args)
-          @extended_status_message = args[:extended_status_message] if args.key?(:extended_status_message)
-          @service_account_key_disable_reason = args[:service_account_key_disable_reason] if args.key?(:service_account_key_disable_reason)
         end
       end
@@ -703,9 +687,9 @@ module Google
       # Represents the OAuth 2.0 client credential configuration for retrieving
       # additional user attributes that are not present in the initial authentication
-      # credentials from the identity provider, e.g. groups. See https://datatracker.
-      # ietf.org/doc/html/rfc6749#section-4.4 for more details on client credentials
-      # grant flow.
+      # credentials from the identity provider, for example, groups. See https://
+      # datatracker.ietf.org/doc/html/rfc6749#section-4.4 for more details on client
+      # credentials grant flow.
       class GoogleIamAdminV1WorkforcePoolProviderExtraAttributesOAuth2Client
         include Google::Apis::Core::Hashable
@@ -783,7 +767,7 @@ module Google
         end
       end
-      # Represents an OpenId Connect 1.0 identity provider.
+      # Represents an OpenID Connect 1.0 identity provider.
       class GoogleIamAdminV1WorkforcePoolProviderOidc
         include Google::Apis::Core::Hashable
@@ -805,11 +789,11 @@ module Google
         # Optional. OIDC JWKs in JSON String format. For details on the definition of a
         # JWK, see https://tools.ietf.org/html/rfc7517. If not set, the `jwks_uri` from
-        # the discovery document(fetched from the .well-known path of the `issuer_uri`)
-        # will be used. Currently, RSA and EC asymmetric keys are supported. The JWK
-        # must use following format and include only the following fields: ` "keys": [ `
-        # "kty": "RSA/EC", "alg": "", "use": "sig", "kid": "", "n": "", "e": "", "x": "",
-        # "y": "", "crv": "" ` ] `
+        # the discovery document that is fetched from the well-known path of the `
+        # issuer_uri`, will be used. RSA and EC asymmetric keys are supported. The JWK
+        # must use the following format and include only the following fields: ` "keys":
+        # [ ` "kty": "RSA/EC", "alg": "", "use": "sig", "kid": "", "n": "", "e": "", "x":
+        # "", "y": "", "crv": "" ` ] `
         # Corresponds to the JSON property `jwksJson`
         # @return [String]
         attr_accessor :jwks_json
@@ -985,6 +969,18 @@ module Google
         # @return [Fixnum]
         attr_accessor :rotation_window_percentage
+        # Optional. If set to true, the trust domain will utilize the GCP-provisioned
+        # default CA. A default CA in the same region as the workload will be selected
+        # to issue the certificate. Enabling this will clear any existing `ca_pools`
+        # configuration to provision the certificates. NOTE: This field is mutually
+        # exclusive with `ca_pools`. If this flag is enabled, certificates will be
+        # automatically provisioned from the default shared CAs. This flag should not be
+        # set if you want to use your own CA pools to provision the certificates.
+        # Corresponds to the JSON property `useDefaultSharedCa`
+        # @return [Boolean]
+        attr_accessor :use_default_shared_ca
+        alias_method :use_default_shared_ca?, :use_default_shared_ca
         def initialize(**args)
            update!(**args)
         end
@@ -995,6 +991,7 @@ module Google
           @key_algorithm = args[:key_algorithm] if args.key?(:key_algorithm)
           @lifetime = args[:lifetime] if args.key?(:lifetime)
           @rotation_window_percentage = args[:rotation_window_percentage] if args.key?(:rotation_window_percentage)
+          @use_default_shared_ca = args[:use_default_shared_ca] if args.key?(:use_default_shared_ca)
         end
       end
@@ -1383,18 +1380,19 @@ module Google
         end
       end
-      # Agentspace only. Response message for ListWorkforcePoolProviderScimTenants.
+      # Gemini Enterprise only. Response message for
+      # ListWorkforcePoolProviderScimTenants.
       class ListWorkforcePoolProviderScimTenantsResponse
         include Google::Apis::Core::Hashable
-        # Optional. Agentspace only. A token, which can be sent as `page_token` to
-        # retrieve the next page. If this field is omitted, there are no subsequent
+        # Optional. Gemini Enterprise only. A token, which can be sent as `page_token`
+        # to retrieve the next page. If this field is omitted, there are no subsequent
         # pages.
         # Corresponds to the JSON property `nextPageToken`
         # @return [String]
         attr_accessor :next_page_token
-        # Output only. Agentspace only. A list of SCIM tenants.
+        # Output only. Gemini Enterprise only. A list of SCIM tenants.
         # Corresponds to the JSON property `workforcePoolProviderScimTenants`
         # @return [Array<Google::Apis::IamV1::WorkforcePoolProviderScimTenant>]
         attr_accessor :workforce_pool_provider_scim_tenants
@@ -1410,18 +1408,19 @@ module Google
         end
       end
-      # Agentspace only. Response message for ListWorkforcePoolProviderScimTokens.
+      # Gemini Enterprise only. Response message for
+      # ListWorkforcePoolProviderScimTokens.
       class ListWorkforcePoolProviderScimTokensResponse
         include Google::Apis::Core::Hashable
-        # Optional. Agentspace only. A token, which can be sent as `page_token` to
-        # retrieve the next page. If this field is omitted, there are no subsequent
+        # Optional. Gemini Enterprise only. A token, which can be sent as `page_token`
+        # to retrieve the next page. If this field is omitted, there are no subsequent
         # pages.
         # Corresponds to the JSON property `nextPageToken`
         # @return [String]
         attr_accessor :next_page_token
-        # Output only. Agentspace only. A list of SCIM tokens.
+        # Output only. Gemini Enterprise only. A list of SCIM tokens.
         # Corresponds to the JSON property `workforcePoolProviderScimTokens`
         # @return [Array<Google::Apis::IamV1::WorkforcePoolProviderScimToken>]
         attr_accessor :workforce_pool_provider_scim_tokens
@@ -1639,10 +1638,7 @@ module Google
         # Required. The list of scopes that the OauthClient is allowed to request during
         # OAuth flows. The following scopes are supported: * `https://www.googleapis.com/
         # auth/cloud-platform`: See, edit, configure, and delete your Google Cloud data
-        # and see the email address for your Google Account. * `openid`: The OAuth
-        # client can associate you with your personal information on Google Cloud. * `
-        # email`: The OAuth client can read a federated identity's email address. * `
-        # groups`: The OAuth client can read a federated identity's groups.
+        # and see the email address for your Google Account.
         # Corresponds to the JSON property `allowedScopes`
         # @return [Array<String>]
         attr_accessor :allowed_scopes
@@ -1780,7 +1776,7 @@ module Google
         # @return [Array<String>]
         attr_accessor :allowed_audiences
-        # Required. The OIDC issuer URL. Must be an HTTPS endpoint. Per OpenID Connect
+        # Required. The OIDC `issuer_uri`. Must be an HTTPS endpoint. Per OpenID Connect
         # Discovery 1.0 spec, the OIDC issuer URL is used to locate the provider's
         # public keys (via `jwks_uri`) for verifying tokens like the OIDC ID token.
         # These public key types must be 'EC' or 'RSA'.
@@ -2595,20 +2591,22 @@ module Google
       end
       # Represents a service account key. A service account has two sets of key-pairs:
-      # user-managed, and system-managed. User-managed key-pairs can be created and
-      # deleted by users. Users are responsible for rotating these keys periodically
-      # to ensure security of their service accounts. Users retain the private key of
-      # these key-pairs, and Google retains ONLY the public key. System-managed keys
-      # are automatically rotated by Google, and are used for signing for a maximum of
-      # two weeks. The rotation process is probabilistic, and usage of the new key
-      # will gradually ramp up and down over the key's lifetime. If you cache the
-      # public key set for a service account, we recommend that you update the cache
-      # every 15 minutes. User-managed keys can be added and removed at any time, so
-      # it is important to update the cache frequently. For Google-managed keys,
-      # Google will publish a key at least 6 hours before it is first used for signing
-      # and will keep publishing it for at least 6 hours after it was last used for
-      # signing. Public keys for all service accounts are also published at the OAuth2
-      # Service Account API.
+      # user-managed and system-managed. System-managed keys are also called _Google-
+      # owned and managed keys_. User-managed key-pairs can be created and deleted by
+      # users. Users are responsible for rotating these keys periodically to ensure
+      # security of their service accounts. Users retain the private key of these key-
+      # pairs, and Google retains ONLY the public key. System-managed keys that are
+      # actively used for signing are rotated regularly according to [security best
+      # practices](https://docs.cloud.google.com/iam/docs/key-rotation#timing). The
+      # rotation process is probabilistic, and usage of the new key will gradually
+      # ramp up and down over the key's lifetime. If you cache the public key set for
+      # a service account, we recommend that you update the cache every 15 minutes.
+      # User-managed keys can be added and removed at any time, so it is important to
+      # update the cache frequently. For Google-managed keys, Google will publish a
+      # key at least 6 hours before it is first used for signing and will keep
+      # publishing it for at least 6 hours after it was last used for signing. Public
+      # keys for all service accounts are also published at the OAuth2 Service Account
+      # API.
       class ServiceAccountKey
         include Google::Apis::Core::Hashable
@@ -2992,7 +2990,7 @@ module Google
         include Google::Apis::Core::Hashable
         # PEM certificate of the PKI used for validation. Must only contain one ca
-        # certificate(either root or intermediate cert).
+        # certificate (either root or intermediate cert).
         # Corresponds to the JSON property `pemCertificate`
         # @return [String]
         attr_accessor :pem_certificate
@@ -3026,6 +3024,15 @@ module Google
         # @return [Array<Google::Apis::IamV1::TrustAnchor>]
         attr_accessor :trust_anchors
+        # Optional. If set to True, the trust bundle will include the private ca managed
+        # identity regional root public certificates. Important: `
+        # trust_default_shared_ca` is only supported for managed identity trust domain
+        # resource.
+        # Corresponds to the JSON property `trustDefaultSharedCa`
+        # @return [Boolean]
+        attr_accessor :trust_default_shared_ca
+        alias_method :trust_default_shared_ca?, :trust_default_shared_ca
         def initialize(**args)
            update!(**args)
         end
@@ -3034,6 +3041,7 @@ module Google
         def update!(**args)
           @intermediate_cas = args[:intermediate_cas] if args.key?(:intermediate_cas)
           @trust_anchors = args[:trust_anchors] if args.key?(:trust_anchors)
+          @trust_default_shared_ca = args[:trust_default_shared_ca] if args.key?(:trust_default_shared_ca)
         end
       end
@@ -3134,7 +3142,8 @@ module Google
         end
       end
-      # Agentspace only. Request message for UndeleteWorkforcePoolProviderScimTenant.
+      # Gemini Enterprise only. Request message for
+      # UndeleteWorkforcePoolProviderScimTenant.
       class UndeleteWorkforcePoolProviderScimTenantRequest
         include Google::Apis::Core::Hashable
@@ -3147,19 +3156,6 @@ module Google
         end
       end
-      # Agentspace only. Request message for UndeleteWorkforcePoolProviderScimToken.
-      class UndeleteWorkforcePoolProviderScimTokenRequest
-        include Google::Apis::Core::Hashable
-        def initialize(**args)
-           update!(**args)
-        end
-        # Update properties of this object
-        def update!(**args)
-        end
-      end
       # Request message for UndeleteWorkforcePool.
       class UndeleteWorkforcePoolRequest
         include Google::Apis::Core::Hashable
@@ -3391,13 +3387,13 @@ module Google
         # visible as the user's profile picture. If not set, a generic user icon will be
         # displayed instead. This attribute cannot be referenced in IAM bindings. * `
         # google.posix_username`: The Linux username used by OS Login. This is an
-        # optional field and the mapped POSIX username cannot exceed 32 characters, The
-        # key must match the regex "^a-zA-Z0-9._`0,31`$". This attribute cannot be
+        # optional field and the mapped POSIX username cannot exceed 32 characters. The
+        # key must match the regex `^a-zA-Z0-9._`0,31`$`. This attribute cannot be
         # referenced in IAM bindings. You can also provide custom attributes by
         # specifying `attribute.`custom_attribute``, where `custom_attribute` is the
         # name of the custom attribute to be mapped. You can define a maximum of 50
         # custom attributes. The maximum length of a mapped attribute key is 100
-        # characters, and the key may only contain the characters [a-z0-9_]. You can
+        # characters, and the key may only contain the characters `[a-z0-9_]`. You can
         # reference these attributes in IAM policies to define fine-grained access for a
         # workforce pool to Google Cloud resources. For example: * `google.subject`: `
         # principal://iam.googleapis.com/locations/global/workforcePools/`pool`/subject/`
@@ -3452,18 +3448,18 @@ module Google
         # Represents the OAuth 2.0 client credential configuration for retrieving
         # additional user attributes that are not present in the initial authentication
-        # credentials from the identity provider, e.g. groups. See https://datatracker.
-        # ietf.org/doc/html/rfc6749#section-4.4 for more details on client credentials
-        # grant flow.
+        # credentials from the identity provider, for example, groups. See https://
+        # datatracker.ietf.org/doc/html/rfc6749#section-4.4 for more details on client
+        # credentials grant flow.
         # Corresponds to the JSON property `extendedAttributesOauth2Client`
         # @return [Google::Apis::IamV1::GoogleIamAdminV1WorkforcePoolProviderExtraAttributesOAuth2Client]
         attr_accessor :extended_attributes_oauth2_client
         # Represents the OAuth 2.0 client credential configuration for retrieving
         # additional user attributes that are not present in the initial authentication
-        # credentials from the identity provider, e.g. groups. See https://datatracker.
-        # ietf.org/doc/html/rfc6749#section-4.4 for more details on client credentials
-        # grant flow.
+        # credentials from the identity provider, for example, groups. See https://
+        # datatracker.ietf.org/doc/html/rfc6749#section-4.4 for more details on client
+        # credentials grant flow.
         # Corresponds to the JSON property `extraAttributesOauth2Client`
         # @return [Google::Apis::IamV1::GoogleIamAdminV1WorkforcePoolProviderExtraAttributesOAuth2Client]
         attr_accessor :extra_attributes_oauth2_client
@@ -3474,7 +3470,7 @@ module Google
         # @return [String]
         attr_accessor :name
-        # Represents an OpenId Connect 1.0 identity provider.
+        # Represents an OpenID Connect 1.0 identity provider.
         # Corresponds to the JSON property `oidc`
         # @return [Google::Apis::IamV1::GoogleIamAdminV1WorkforcePoolProviderOidc]
         attr_accessor :oidc
@@ -3484,6 +3480,16 @@ module Google
         # @return [Google::Apis::IamV1::GoogleIamAdminV1WorkforcePoolProviderSaml]
         attr_accessor :saml
+        # Optional. Gemini Enterprise only. Specifies whether the workforce identity
+        # pool provider uses SCIM-managed groups instead of the `google.groups`
+        # attribute mapping for authorization checks. The `scim_usage` and `
+        # extended_attributes_oauth2_client` fields are mutually exclusive. A request
+        # that enables both fields on the same workforce identity pool provider will
+        # produce an error.
+        # Corresponds to the JSON property `scimUsage`
+        # @return [String]
+        attr_accessor :scim_usage
         # Output only. The state of the provider.
         # Corresponds to the JSON property `state`
         # @return [String]
@@ -3507,6 +3513,7 @@ module Google
           @name = args[:name] if args.key?(:name)
           @oidc = args[:oidc] if args.key?(:oidc)
           @saml = args[:saml] if args.key?(:saml)
+          @scim_usage = args[:scim_usage] if args.key?(:scim_usage)
           @state = args[:state] if args.key?(:state)
         end
       end
@@ -3559,45 +3566,61 @@ module Google
         end
       end
-      # Agentspace only. Represents a SCIM tenant. Used for provisioning and managing
-      # identity data (such as Users and Groups) in cross-domain environments.
+      # Gemini Enterprise only. Represents a SCIM tenant. Used for provisioning and
+      # managing identity data (such as Users and Groups) in cross-domain environments.
       class WorkforcePoolProviderScimTenant
         include Google::Apis::Core::Hashable
-        # Output only. Agentspace only. Represents the base URI as defined in [RFC 7644,
-        # Section 1.3](https://datatracker.ietf.org/doc/html/rfc7644#section-1.3).
-        # Clients must use this as the root address for managing resources under the
+        # Output only. Gemini Enterprise only. Represents the base URI as defined in [
+        # RFC 7644, Section 1.3](https://datatracker.ietf.org/doc/html/rfc7644#section-1.
+        # 3). Clients must use this as the root address for managing resources under the
         # tenant. Format: https://iamscim.googleapis.com/`version`/`tenant_id`/
         # Corresponds to the JSON property `baseUri`
         # @return [String]
         attr_accessor :base_uri
-        # Optional. Agentspace only. Maps BYOID claims to SCIM claims.
+        # Required. Immutable. Gemini Enterprise only. Maps SCIM attributes to Google
+        # attributes. This mapping is used to associate the attributes synced via SCIM
+        # with the Google Cloud attributes used in IAM policies for Workforce Identity
+        # Federation. SCIM-managed user and group attributes are mapped to `google.
+        # subject` and `google.group` respectively. Each key must be a string specifying
+        # the Google Cloud IAM attribute to map to. The supported keys are as follows: *
+        # `google.subject`: The principal IAM is authenticating. You can reference this
+        # value in IAM bindings. This is also the subject that appears in Cloud Logging
+        # logs. This is a required field and the mapped subject cannot exceed 127 bytes.
+        # * `google.group`: Group the authenticating user belongs to. You can grant
+        # group access to resources using an IAM `principalSet` binding; access applies
+        # to all members of the group. Each value must be a [Common Expression Language]
+        # (https://opensource.google/projects/cel) expression that maps SCIM user or
+        # group attribute to the normalized attribute specified by the corresponding map
+        # key. Example: To map the SCIM user's `externalId` to `google.subject` and the
+        # SCIM group's `externalId` to `google.group`: ``` ` "google.subject": "user.
+        # externalId", "google.group": "group.externalId" ` ```
         # Corresponds to the JSON property `claimMapping`
         # @return [Hash<String,String>]
         attr_accessor :claim_mapping
-        # Optional. Agentspace only. The description of the SCIM tenant. Cannot exceed
-        # 256 characters.
+        # Optional. Gemini Enterprise only. The description of the SCIM tenant. Cannot
+        # exceed 256 characters.
         # Corresponds to the JSON property `description`
         # @return [String]
         attr_accessor :description
-        # Optional. Agentspace only. The display name of the SCIM tenant. Cannot exceed
-        # 32 characters.
+        # Optional. Gemini Enterprise only. The display name of the SCIM tenant. Cannot
+        # exceed 32 characters.
         # Corresponds to the JSON property `displayName`
         # @return [String]
         attr_accessor :display_name
-        # Identifier. Agentspace only. The resource name of the SCIM Tenant. Format: `
-        # locations/`location`/workforcePools/`workforce_pool`/providers/ `
+        # Identifier. Gemini Enterprise only. The resource name of the SCIM Tenant.
+        # Format: `locations/`location`/workforcePools/`workforce_pool`/providers/ `
         # workforce_pool_provider`/scimTenants/`scim_tenant``
         # Corresponds to the JSON property `name`
         # @return [String]
         attr_accessor :name
-        # Output only. Agentspace only. The timestamp that represents the time when the
-        # SCIM tenant is purged.
+        # Output only. Gemini Enterprise only. The timestamp that represents the time
+        # when the SCIM tenant is purged.
         # Corresponds to the JSON property `purgeTime`
         # @return [String]
         attr_accessor :purge_time
@@ -3608,7 +3631,7 @@ module Google
         # @return [String]
         attr_accessor :service_agent
-        # Output only. Agentspace only. The state of the tenant.
+        # Output only. Gemini Enterprise only. The state of the tenant.
         # Corresponds to the JSON property `state`
         # @return [String]
         attr_accessor :state
@@ -3630,31 +3653,32 @@ module Google
         end
       end
-      # Agentspace only. Represents a token for the WorkforcePoolProviderScimTenant.
-      # Used for authenticating SCIM provisioning requests.
+      # Gemini Enterprise only. Represents a token for the
+      # WorkforcePoolProviderScimTenant. Used for authenticating SCIM provisioning
+      # requests.
       class WorkforcePoolProviderScimToken
         include Google::Apis::Core::Hashable
-        # Optional. Agentspace only. The display name of the SCIM token. Cannot exceed
-        # 32 characters.
+        # Optional. Gemini Enterprise only. The display name of the SCIM token. Cannot
+        # exceed 32 characters.
         # Corresponds to the JSON property `displayName`
         # @return [String]
         attr_accessor :display_name
-        # Identifier. Agentspace only. The resource name of the SCIM Token. Format: `
-        # locations/`location`/workforcePools/`workforce_pool`/providers/ `
+        # Identifier. Gemini Enterprise only. The resource name of the SCIM Token.
+        # Format: `locations/`location`/workforcePools/`workforce_pool`/providers/ `
         # workforce_pool_provider`/scimTenants/`scim_tenant`/tokens/`token``
         # Corresponds to the JSON property `name`
         # @return [String]
         attr_accessor :name
-        # Output only. Agentspace only. The token string. Provide this to the IdP for
-        # authentication. Will be set only during creation.
+        # Output only. Gemini Enterprise only. The token string. Provide this to the IdP
+        # for authentication. Will be set only during creation.
         # Corresponds to the JSON property `securityToken`
         # @return [String]
         attr_accessor :security_token
-        # Output only. Agentspace only. The state of the token.
+        # Output only. Gemini Enterprise only. The state of the token.
         # Corresponds to the JSON property `state`
         # @return [String]
         attr_accessor :state
@@ -3721,7 +3745,7 @@ module Google
         # @return [String]
         attr_accessor :mode
-        # Output only. The resource name of the pool.
+        # Identifier. The resource name of the pool.
         # Corresponds to the JSON property `name`
         # @return [String]
         attr_accessor :name
@@ -3772,7 +3796,7 @@ module Google
         # @return [String]
         attr_accessor :expire_time
-        # Output only. The resource name of the managed identity.
+        # Identifier. The resource name of the managed identity.
         # Corresponds to the JSON property `name`
         # @return [String]
         attr_accessor :name
@@ -3820,7 +3844,7 @@ module Google
         # @return [String]
         attr_accessor :expire_time
-        # Output only. The resource name of the namespace.
+        # Identifier. The resource name of the namespace.
         # Corresponds to the JSON property `name`
         # @return [String]
         attr_accessor :name
@@ -3954,7 +3978,7 @@ module Google
         # @return [String]
         attr_accessor :expire_time
-        # Output only. The resource name of the provider.
+        # Identifier. The resource name of the provider.
         # Corresponds to the JSON property `name`
         # @return [String]
         attr_accessor :name
@@ -4020,7 +4044,7 @@ module Google
         # @return [Google::Apis::IamV1::KeyData]
         attr_accessor :key_data
-        # Output only. The resource name of the key.
+        # Identifier. The resource name of the key.
         # Corresponds to the JSON property `name`
         # @return [String]
         attr_accessor :name

data/lib/google/apis/iam_v1/gem_version.rb CHANGED Viewed

@@ -16,13 +16,13 @@ module Google
   module Apis
     module IamV1
       # Version of the google-apis-iam_v1 gem
-      GEM_VERSION = "0.79.0"
+      GEM_VERSION = "0.90.0"
       # Version of the code generator used to generate this client
-      GENERATOR_VERSION = "0.18.0"
+      GENERATOR_VERSION = "0.19.0"
       # Revision of the discovery document this client was generated from
-      REVISION = "20251003"
+      REVISION = "20260807"
     end
   end
 end

data/lib/google/apis/iam_v1/representations.rb CHANGED Viewed

@@ -592,12 +592,6 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
-      class UndeleteWorkforcePoolProviderScimTokenRequest
-        class Representation < Google::Apis::Core::JsonRepresentation; end
-        include Google::Apis::Core::JsonObjectSupport
-      end
       class UndeleteWorkforcePoolRequest
         class Representation < Google::Apis::Core::JsonRepresentation; end
@@ -839,8 +833,6 @@ module Google
       class DisableServiceAccountKeyRequest
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
-          property :extended_status_message, as: 'extendedStatusMessage'
-          property :service_account_key_disable_reason, as: 'serviceAccountKeyDisableReason'
         end
       end
@@ -973,6 +965,7 @@ module Google
           property :key_algorithm, as: 'keyAlgorithm'
           property :lifetime, as: 'lifetime'
           property :rotation_window_percentage, as: 'rotationWindowPercentage'
+          property :use_default_shared_ca, as: 'useDefaultSharedCa'
         end
       end
@@ -1505,6 +1498,7 @@ module Google
           collection :trust_anchors, as: 'trustAnchors', class: Google::Apis::IamV1::TrustAnchor, decorator: Google::Apis::IamV1::TrustAnchor::Representation
+          property :trust_default_shared_ca, as: 'trustDefaultSharedCa'
         end
       end
@@ -1553,12 +1547,6 @@ module Google
         end
       end
-      class UndeleteWorkforcePoolProviderScimTokenRequest
-        # @private
-        class Representation < Google::Apis::Core::JsonRepresentation
-        end
-      end
       class UndeleteWorkforcePoolRequest
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -1643,6 +1631,7 @@ module Google
           property :saml, as: 'saml', class: Google::Apis::IamV1::GoogleIamAdminV1WorkforcePoolProviderSaml, decorator: Google::Apis::IamV1::GoogleIamAdminV1WorkforcePoolProviderSaml::Representation
+          property :scim_usage, as: 'scimUsage'
           property :state, as: 'state'
         end
       end

data/lib/google/apis/iam_v1/service.rb CHANGED Viewed

@@ -493,8 +493,8 @@ module Google
         # @param [String] workforce_pool_provider_id
         #   Required. The ID for the provider, which becomes the final component of the
         #   resource name. This value must be 4-32 characters, and may contain the
-        #   characters [a-z0-9-]. The prefix `gcp-` is reserved for use by Google, and may
-        #   not be specified.
+        #   characters `[a-z0-9-]`. The prefix `gcp-` is reserved for use by Google, and
+        #   may not be specified.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -713,7 +713,7 @@ module Google
         # @param [String] workforce_pool_provider_key_id
         #   Required. The ID to use for the key, which becomes the final component of the
         #   resource name. This value must be 4-32 characters, and may contain the
-        #   characters [a-z0-9-].
+        #   characters `[a-z0-9-]`.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -945,17 +945,17 @@ module Google
           execute_or_queue_command(command, &block)
         end
-        # Agentspace only. Creates a new WorkforcePoolProviderScimTenant in a
+        # Gemini Enterprise only. Creates a new WorkforcePoolProviderScimTenant in a
         # WorkforcePoolProvider. You cannot reuse the name of a deleted SCIM tenant
         # until 30 days after deletion.
         # @param [String] parent
-        #   Required. Agentspace only. The parent to create SCIM tenant. Format: '
+        #   Required. Gemini Enterprise only. The parent to create SCIM tenant. Format: '
         #   locations/`location`/workforcePools/`workforce_pool`/providers/`provider`'
         # @param [Google::Apis::IamV1::WorkforcePoolProviderScimTenant] workforce_pool_provider_scim_tenant_object
         # @param [String] workforce_pool_provider_scim_tenant_id
-        #   Required. Agentspace only. The ID to use for the SCIM tenant, which becomes
-        #   the final component of the resource name. This value should be 4-32 characters,
-        #   containing the characters [a-z0-9-].
+        #   Required. Gemini Enterprise only. The ID to use for the SCIM tenant, which
+        #   becomes the final component of the resource name. This value should be 4-32
+        #   characters, containing the characters `[a-z0-9-]`.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -986,13 +986,13 @@ module Google
           execute_or_queue_command(command, &block)
         end
-        # Agentspace only. Deletes a WorkforcePoolProviderScimTenant. You can undelete a
-        # SCIM tenant for 30 days. After 30 days, deletion is permanent. You cannot
-        # update deleted SCIM tenants. However, you can view and list them.
+        # Gemini Enterprise only. Deletes a WorkforcePoolProviderScimTenant. You can
+        # undelete a SCIM tenant for 30 days. After 30 days, deletion is permanent. You
+        # cannot update deleted SCIM tenants. However, you can view and list them.
         # @param [String] name
-        #   Required. Agentspace only. The name of the scim tenant to delete. Format: `
-        #   locations/`location`/workforcePools/`workforce_pool`/providers/`provider`/
-        #   scimTenants/`scim_tenant``
+        #   Required. Gemini Enterprise only. The name of the SCIM tenant to delete.
+        #   Format: `locations/`location`/workforcePools/`workforce_pool`/providers/`
+        #   provider`/scimTenants/`scim_tenant``
         # @param [Boolean] hard_delete
         #   Optional. Deletes the SCIM tenant immediately. This operation cannot be undone.
         # @param [String] fields
@@ -1023,11 +1023,11 @@ module Google
           execute_or_queue_command(command, &block)
         end
-        # Agentspace only. Gets an individual WorkforcePoolProviderScimTenant.
+        # Gemini Enterprise only. Gets an individual WorkforcePoolProviderScimTenant.
         # @param [String] name
-        #   Required. Agentspace only. The name of the SCIM tenant to retrieve. Format: `
-        #   locations/`location`/workforcePools/`workforce_pool`/providers/`provider`/
-        #   scimTenants/`scim_tenant``
+        #   Required. Gemini Enterprise only. The name of the SCIM tenant to retrieve.
+        #   Format: `locations/`location`/workforcePools/`workforce_pool`/providers/`
+        #   provider`/scimTenants/`scim_tenant``
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -1055,20 +1055,21 @@ module Google
           execute_or_queue_command(command, &block)
         end
-        # Agentspace only. Lists all non-deleted WorkforcePoolProviderScimTenants in a
-        # WorkforcePoolProvider. If `show_deleted` is set to `true`, then deleted SCIM
-        # tenants are also listed.
+        # Gemini Enterprise only. Lists all non-deleted WorkforcePoolProviderScimTenants
+        # in a WorkforcePoolProvider. If `show_deleted` is set to `true`, then deleted
+        # SCIM tenants are also listed.
         # @param [String] parent
-        #   Required. Agentspace only. The parent to list SCIM tenants. Format: 'locations/
-        #   `location`/workforcePools/`workforce_pool`/providers/`provider`'
+        #   Required. Gemini Enterprise only. The parent to list SCIM tenants. Format: '
+        #   locations/`location`/workforcePools/`workforce_pool`/providers/`provider`'
         # @param [Fixnum] page_size
-        #   Optional. Agentspace only. The maximum number of SCIM tenants to return. If
-        #   unspecified, at most 1 scim tenant will be returned.
+        #   Optional. Gemini Enterprise only. The maximum number of SCIM tenants to return.
+        #   If unspecified, at most 50 SCIM tenants will be returned. The maximum value
+        #   is 100; values above 100 are truncated to 100.
         # @param [String] page_token
-        #   Optional. Agentspace only. A page token, received from a previous `
+        #   Optional. Gemini Enterprise only. A page token, received from a previous `
         #   ListScimTenants` call. Provide this to retrieve the subsequent page.
         # @param [Boolean] show_deleted
-        #   Optional. Agentspace only. Whether to return soft-deleted SCIM tenants.
+        #   Optional. Gemini Enterprise only. Whether to return soft-deleted SCIM tenants.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -1099,14 +1100,14 @@ module Google
           execute_or_queue_command(command, &block)
         end
-        # Agentspace only. Updates an existing WorkforcePoolProviderScimTenant.
+        # Gemini Enterprise only. Updates an existing WorkforcePoolProviderScimTenant.
         # @param [String] name
-        #   Identifier. Agentspace only. The resource name of the SCIM Tenant. Format: `
-        #   locations/`location`/workforcePools/`workforce_pool`/providers/ `
+        #   Identifier. Gemini Enterprise only. The resource name of the SCIM Tenant.
+        #   Format: `locations/`location`/workforcePools/`workforce_pool`/providers/ `
         #   workforce_pool_provider`/scimTenants/`scim_tenant``
         # @param [Google::Apis::IamV1::WorkforcePoolProviderScimTenant] workforce_pool_provider_scim_tenant_object
         # @param [String] update_mask
-        #   Optional. Agentspace only. The list of fields to update.
+        #   Optional. Gemini Enterprise only. The list of fields to update.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -1137,12 +1138,12 @@ module Google
           execute_or_queue_command(command, &block)
         end
-        # Agentspace only. Undeletes a WorkforcePoolProviderScimTenant, that was deleted
-        # fewer than 30 days ago.
+        # Gemini Enterprise only. Undeletes a WorkforcePoolProviderScimTenant, that was
+        # deleted fewer than 30 days ago.
         # @param [String] name
-        #   Required. Agentspace only. The name of the SCIM tenant to undelete. Format: `
-        #   locations/`location`/workforcePools/`workforce_pool`/providers/`provider`/
-        #   scimTenants/`scim_tenant``
+        #   Required. Gemini Enterprise only. The name of the SCIM tenant to undelete.
+        #   Format: `locations/`location`/workforcePools/`workforce_pool`/providers/`
+        #   provider`/scimTenants/`scim_tenant``
         # @param [Google::Apis::IamV1::UndeleteWorkforcePoolProviderScimTenantRequest] undelete_workforce_pool_provider_scim_tenant_request_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
@@ -1173,18 +1174,18 @@ module Google
           execute_or_queue_command(command, &block)
         end
-        # Agentspace only. Creates a new WorkforcePoolProviderScimToken in a
+        # Gemini Enterprise only. Creates a new WorkforcePoolProviderScimToken in a
         # WorkforcePoolProviderScimTenant. You cannot reuse the name of a deleted SCIM
         # token until 30 days after deletion.
         # @param [String] parent
-        #   Required. Agentspace only. The parent tenant to create SCIM token. Format: '
-        #   locations/`location`/workforcePools/`workforce_pool`/providers/`provider`/
-        #   scimTenants/`scim_tenant`'
+        #   Required. Gemini Enterprise only. The parent tenant to create SCIM token.
+        #   Format: 'locations/`location`/workforcePools/`workforce_pool`/providers/`
+        #   provider`/scimTenants/`scim_tenant`'
         # @param [Google::Apis::IamV1::WorkforcePoolProviderScimToken] workforce_pool_provider_scim_token_object
         # @param [String] workforce_pool_provider_scim_token_id
-        #   Required. Agentspace only. The ID to use for the SCIM token, which becomes the
-        #   final component of the resource name. This value should be 4-32 characters and
-        #   follow the pattern: "([a-z]([a-z0-9\\-]`2,30`[a-z0-9]))"
+        #   Required. Gemini Enterprise only. The ID to use for the SCIM token, which
+        #   becomes the final component of the resource name. This value should be 4-32
+        #   characters and follow the pattern: `([a-z]([a-z0-9\\-]`2,30`[a-z0-9]))`
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -1215,12 +1216,13 @@ module Google
           execute_or_queue_command(command, &block)
         end
-        # Agentspace only. Deletes a WorkforcePoolProviderScimToken. You can undelete a
-        # SCIM token for 30 days. After 30 days, the SCIM token is permanently deleted.
-        # You cannot update deleted SCIM tokens, however, you can view and list them.
+        # Gemini Enterprise only. Deletes a WorkforcePoolProviderScimToken. You can
+        # undelete a SCIM token for 30 days. After 30 days, the SCIM token is
+        # permanently deleted. You cannot update deleted SCIM tokens, however, you can
+        # view and list them.
         # @param [String] name
-        #   Required. Agentspace only. The name of the SCIM token to delete. Format: `
-        #   locations/`location`/workforcePools/`workforce_pool`/providers/`provider`/
+        #   Required. Gemini Enterprise only. The name of the SCIM token to delete. Format:
+        #   `locations/`location`/workforcePools/`workforce_pool`/providers/`provider`/
         #   scimTenants/`scim_tenant`/tokens/`token``
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
@@ -1249,11 +1251,11 @@ module Google
           execute_or_queue_command(command, &block)
         end
-        # Agentspace only. Gets an individual WorkforcePoolProviderScimToken.
+        # Gemini Enterprise only. Gets an individual WorkforcePoolProviderScimToken.
         # @param [String] name
-        #   Required. Agentspace only. The name of the SCIM token to retrieve. Format: `
-        #   locations/`location`/workforcePools/`workforce_pool`/providers/`provider`/
-        #   scimTenants/`scim_tenant`/tokens/`token``
+        #   Required. Gemini Enterprise only. The name of the SCIM token to retrieve.
+        #   Format: `locations/`location`/workforcePools/`workforce_pool`/providers/`
+        #   provider`/scimTenants/`scim_tenant`/tokens/`token``
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -1281,22 +1283,22 @@ module Google
           execute_or_queue_command(command, &block)
         end
-        # Agentspace only. Lists all non-deleted WorkforcePoolProviderScimTokenss in a
-        # WorkforcePoolProviderScimTenant. If `show_deleted` is set to `true`, then
+        # Gemini Enterprise only. Lists all non-deleted WorkforcePoolProviderScimTokenss
+        # in a WorkforcePoolProviderScimTenant. If `show_deleted` is set to `true`, then
         # deleted SCIM tokens are also listed.
         # @param [String] parent
-        #   Required. Agentspace only. The parent to list SCIM tokens. Format: 'locations/`
-        #   location`/workforcePools/`workforce_pool`/providers/`provider`/scimTenants/`
-        #   scim_tenant`'
+        #   Required. Gemini Enterprise only. The parent to list SCIM tokens. Format: '
+        #   locations/`location`/workforcePools/`workforce_pool`/providers/`provider`/
+        #   scimTenants/`scim_tenant`'
         # @param [Fixnum] page_size
-        #   Optional. Agentspace only. The maximum number of scim tokens to return. If
-        #   unspecified, at most 2 SCIM tokens will be returned.
+        #   Optional. Gemini Enterprise only. The maximum number of SCIM tokens to return.
+        #   If unspecified, at most 2 SCIM tokens will be returned.
         # @param [String] page_token
-        #   Optional. Agentspace only. A page token, received from a previous `
+        #   Optional. Gemini Enterprise only. A page token, received from a previous `
         #   ListWorkforcePoolProviderScimTokens` call. Provide this to retrieve the
         #   subsequent page.
         # @param [Boolean] show_deleted
-        #   Optional. Agentspace only. Whether to return soft-deleted scim tokens.
+        #   Optional. Gemini Enterprise only. Whether to return soft-deleted SCIM tokens.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -1327,14 +1329,14 @@ module Google
           execute_or_queue_command(command, &block)
         end
-        # Agentspace only. Updates an existing WorkforcePoolProviderScimToken.
+        # Gemini Enterprise only. Updates an existing WorkforcePoolProviderScimToken.
         # @param [String] name
-        #   Identifier. Agentspace only. The resource name of the SCIM Token. Format: `
-        #   locations/`location`/workforcePools/`workforce_pool`/providers/ `
+        #   Identifier. Gemini Enterprise only. The resource name of the SCIM Token.
+        #   Format: `locations/`location`/workforcePools/`workforce_pool`/providers/ `
         #   workforce_pool_provider`/scimTenants/`scim_tenant`/tokens/`token``
         # @param [Google::Apis::IamV1::WorkforcePoolProviderScimToken] workforce_pool_provider_scim_token_object
         # @param [String] update_mask
-        #   Optional. Agentspace only. The list of fields to update.
+        #   Optional. Gemini Enterprise only. The list of fields to update.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -1365,42 +1367,6 @@ module Google
           execute_or_queue_command(command, &block)
         end
-        # Agentspace only. Undeletes a WorkforcePoolProviderScimToken,that was deleted
-        # fewer than 30 days ago.
-        # @param [String] name
-        #   Required. Agentspace only. The name of the SCIM token to undelete. Format: `
-        #   locations/`location`/workforcePools/`workforce_pool`/providers/`provider`/
-        #   scimTenants/`scim_tenant`/tokens/`token``
-        # @param [Google::Apis::IamV1::UndeleteWorkforcePoolProviderScimTokenRequest] undelete_workforce_pool_provider_scim_token_request_object
-        # @param [String] fields
-        #   Selector specifying which fields to include in a partial response.
-        # @param [String] quota_user
-        #   Available to use for quota purposes for server-side applications. Can be any
-        #   arbitrary string assigned to a user, but should not exceed 40 characters.
-        # @param [Google::Apis::RequestOptions] options
-        #   Request-specific options
-        #
-        # @yield [result, err] Result & error if block supplied
-        # @yieldparam result [Google::Apis::IamV1::WorkforcePoolProviderScimToken] parsed result object
-        # @yieldparam err [StandardError] error object if request failed
-        #
-        # @return [Google::Apis::IamV1::WorkforcePoolProviderScimToken]
-        #
-        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
-        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
-        # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def undelete_workforce_pool_provider_scim_token(name, undelete_workforce_pool_provider_scim_token_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
-          command = make_simple_command(:post, 'v1/{+name}:undelete', options)
-          command.request_representation = Google::Apis::IamV1::UndeleteWorkforcePoolProviderScimTokenRequest::Representation
-          command.request_object = undelete_workforce_pool_provider_scim_token_request_object
-          command.response_representation = Google::Apis::IamV1::WorkforcePoolProviderScimToken::Representation
-          command.response_class = Google::Apis::IamV1::WorkforcePoolProviderScimToken
-          command.params['name'] = name unless name.nil?
-          command.query['fields'] = fields unless fields.nil?
-          command.query['quotaUser'] = quota_user unless quota_user.nil?
-          execute_or_queue_command(command, &block)
-        end
         # Deletes a WorkforcePoolSubject. Subject must not already be in a deleted state.
         # A WorkforcePoolSubject is automatically created the first time an external
         # credential is exchanged for a Google Cloud credential using a mapped `google.
@@ -2269,6 +2235,41 @@ module Google
           execute_or_queue_command(command, &block)
         end
+        # Add an AttestationRule on a WorkloadIdentityPoolManagedIdentity. The total
+        # attestation rules after addition must not exceed 50.
+        # @param [String] resource
+        #   Required. The resource name of the managed identity or namespace resource to
+        #   add an attestation rule to.
+        # @param [Google::Apis::IamV1::AddAttestationRuleRequest] add_attestation_rule_request_object
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::IamV1::Operation] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::IamV1::Operation]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def add_workload_identity_pool_attestation_rule(resource, add_attestation_rule_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:post, 'v1/{+resource}:addAttestationRule', options)
+          command.request_representation = Google::Apis::IamV1::AddAttestationRuleRequest::Representation
+          command.request_object = add_attestation_rule_request_object
+          command.response_representation = Google::Apis::IamV1::Operation::Representation
+          command.response_class = Google::Apis::IamV1::Operation
+          command.params['resource'] = resource unless resource.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
         # Creates a new WorkloadIdentityPool. You cannot reuse the name of a deleted
         # pool until 30 days after deletion.
         # @param [String] parent
@@ -2453,9 +2454,56 @@ module Google
           execute_or_queue_command(command, &block)
         end
+        # List all AttestationRule on a WorkloadIdentityPoolManagedIdentity.
+        # @param [String] resource
+        #   Required. The resource name of the managed identity or namespace resource to
+        #   list attestation rules of.
+        # @param [String] filter
+        #   Optional. A query filter. Supports the following function: * `container_ids()`:
+        #   Returns only the AttestationRules under the specific container ids. The
+        #   function expects a comma-delimited list with only project numbers and must use
+        #   the format `projects/`. For example: `container_ids(projects/, projects/,...)`.
+        # @param [Fixnum] page_size
+        #   Optional. The maximum number of AttestationRules to return. If unspecified, at
+        #   most 50 AttestationRules are returned. The maximum value is 100; values above
+        #   100 are truncated to 100.
+        # @param [String] page_token
+        #   Optional. A page token, received from a previous `
+        #   ListWorkloadIdentityPoolProviderKeys` call. Provide this to retrieve the
+        #   subsequent page.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::IamV1::ListAttestationRulesResponse] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::IamV1::ListAttestationRulesResponse]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def list_project_location_workload_identity_pool_attestation_rules(resource, filter: nil, page_size: nil, page_token: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+resource}:listAttestationRules', options)
+          command.response_representation = Google::Apis::IamV1::ListAttestationRulesResponse::Representation
+          command.response_class = Google::Apis::IamV1::ListAttestationRulesResponse
+          command.params['resource'] = resource unless resource.nil?
+          command.query['filter'] = filter unless filter.nil?
+          command.query['pageSize'] = page_size unless page_size.nil?
+          command.query['pageToken'] = page_token unless page_token.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
         # Updates an existing WorkloadIdentityPool.
         # @param [String] name
-        #   Output only. The resource name of the pool.
+        #   Identifier. The resource name of the pool.
         # @param [Google::Apis::IamV1::WorkloadIdentityPool] workload_identity_pool_object
         # @param [String] update_mask
         #   Required. The list of fields to update.
@@ -2489,6 +2537,75 @@ module Google
           execute_or_queue_command(command, &block)
         end
+        # Remove an AttestationRule on a WorkloadIdentityPoolManagedIdentity.
+        # @param [String] resource
+        #   Required. The resource name of the managed identity or namespace resource to
+        #   remove an attestation rule from.
+        # @param [Google::Apis::IamV1::RemoveAttestationRuleRequest] remove_attestation_rule_request_object
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::IamV1::Operation] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::IamV1::Operation]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def remove_workload_identity_pool_attestation_rule(resource, remove_attestation_rule_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:post, 'v1/{+resource}:removeAttestationRule', options)
+          command.request_representation = Google::Apis::IamV1::RemoveAttestationRuleRequest::Representation
+          command.request_object = remove_attestation_rule_request_object
+          command.response_representation = Google::Apis::IamV1::Operation::Representation
+          command.response_class = Google::Apis::IamV1::Operation
+          command.params['resource'] = resource unless resource.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        # Set all AttestationRule on a WorkloadIdentityPoolManagedIdentity. A maximum of
+        # 50 AttestationRules can be set.
+        # @param [String] resource
+        #   Required. The resource name of the managed identity or namespace resource to
+        #   add an attestation rule to.
+        # @param [Google::Apis::IamV1::SetAttestationRulesRequest] set_attestation_rules_request_object
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::IamV1::Operation] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::IamV1::Operation]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def set_workload_identity_pool_attestation_rules(resource, set_attestation_rules_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:post, 'v1/{+resource}:setAttestationRules', options)
+          command.request_representation = Google::Apis::IamV1::SetAttestationRulesRequest::Representation
+          command.request_object = set_attestation_rules_request_object
+          command.response_representation = Google::Apis::IamV1::Operation::Representation
+          command.response_class = Google::Apis::IamV1::Operation
+          command.params['resource'] = resource unless resource.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
         # Sets the IAM policies on a WorkloadIdentityPool
         # @param [String] resource
         #   REQUIRED: The resource for which the policy is being specified. See [Resource
@@ -2740,7 +2857,7 @@ module Google
         # Updates an existing WorkloadIdentityPoolNamespace in a WorkloadIdentityPool.
         # @param [String] name
-        #   Output only. The resource name of the namespace.
+        #   Identifier. The resource name of the namespace.
         # @param [Google::Apis::IamV1::WorkloadIdentityPoolNamespace] workload_identity_pool_namespace_object
         # @param [String] update_mask
         #   Required. The list of fields to update.
@@ -3040,7 +3157,7 @@ module Google
         # Updates an existing WorkloadIdentityPoolManagedIdentity in a
         # WorkloadIdentityPoolNamespace.
         # @param [String] name
-        #   Output only. The resource name of the managed identity.
+        #   Identifier. The resource name of the managed identity.
         # @param [Google::Apis::IamV1::WorkloadIdentityPoolManagedIdentity] workload_identity_pool_managed_identity_object
         # @param [String] update_mask
         #   Required. The list of fields to update.
@@ -3449,7 +3566,7 @@ module Google
         # Updates an existing WorkloadIdentityPoolProvider.
         # @param [String] name
-        #   Output only. The resource name of the provider.
+        #   Identifier. The resource name of the provider.
         # @param [Google::Apis::IamV1::WorkloadIdentityPoolProvider] workload_identity_pool_provider_object
         # @param [String] update_mask
         #   Required. The list of fields to update.

metadata CHANGED Viewed

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: google-apis-iam_v1
 version: !ruby/object:Gem::Version
-  version: 0.79.0
+  version: 0.90.0
 platform: ruby
 authors:
 - Google LLC
@@ -58,7 +58,7 @@ licenses:
 metadata:
   bug_tracker_uri: https://github.com/googleapis/google-api-ruby-client/issues
   changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-iam_v1/CHANGELOG.md
-  documentation_uri: https://googleapis.dev/ruby/google-apis-iam_v1/v0.79.0
+  documentation_uri: https://googleapis.dev/ruby/google-apis-iam_v1/v0.90.0
   source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-iam_v1
 rdoc_options: []
 require_paths:
@@ -67,7 +67,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '3.1'
+      version: '3.2'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="