google-apis-iam_v1 0.1.0 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 830a72912c1fb4670126afdd0d698d647ba00fd39480fdd0a18e25ff3426576a
-  data.tar.gz: d50d3143054b3d2dbb9c40540bf2bb234e76f3a7a5981dbfde383012904c94b7
+  metadata.gz: a7373a14ca062c7141e92daac08a3c9a0722c6803608ee3451a67587e8a0e8de
+  data.tar.gz: f954024344010974df4915016d9623c9617e3eff0e777c0cba9cb08fdd7fbec3
 SHA512:
-  metadata.gz: 76feac129cbae01383efedfd5469a013ed115bbfbfad5aee0292b630db382fac624371a90122a213ab86e6fcbc4dba0511bd9978c3547ee8656b2d537cf06add
-  data.tar.gz: d9899444f79bbd9a557fbc7957290e87f000414f506a963885ab81143a5227dce56a440f1f41afac4d44ccb480f0bfa6a7c53acfe814f2d0bcf14aecec0ebb47
+  metadata.gz: 76ba484682fb5b1724383b629ddbb1ee692458838acbe10cf15a8e8a6ff04aab128c86fcd23f40b09ab7502dc10cea1cf8259bb316e48f3e419a30a3132f546d
+  data.tar.gz: 204648fdc8d696d7963e0c78677b4b80fa1da241f2396c102801c02e4ee65a1e2fcc391f74f6ae4123fa77c73c64d61d5b656d42840666a87eef09929e67f9c0

data/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Release history for google-apis-iam_v1
 
+### v0.2.0 (2021-02-18)
+
+* Regenerated from discovery document revision 20210211
+* Regenerated using generator version 0.1.2
+
 ### v0.1.0 (2021-01-07)
 
 * Regenerated using generator version 0.1.1

data/lib/google/apis/iam_v1/classes.rb

@@ -155,6 +155,25 @@ module Google
         end
       end
       
+      # Represents an Amazon Web Services identity provider.
+      class Aws
+        include Google::Apis::Core::Hashable
+      
+        # Required. The AWS account ID.
+        # Corresponds to the JSON property `accountId`
+        # @return [String]
+        attr_accessor :account_id
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @account_id = args[:account_id] if args.key?(:account_id)
+        end
+      end
+      
       # Associates `members` with a `role`.
       class Binding
         include Google::Apis::Core::Hashable
@@ -656,6 +675,91 @@ module Google
         end
       end
       
+      # Response message for ListWorkloadIdentityPoolProviders.
+      class ListWorkloadIdentityPoolProvidersResponse
+        include Google::Apis::Core::Hashable
+      
+        # A token, which can be sent as `page_token` to retrieve the next page. If this
+        # field is omitted, there are no subsequent pages.
+        # Corresponds to the JSON property `nextPageToken`
+        # @return [String]
+        attr_accessor :next_page_token
+      
+        # A list of providers.
+        # Corresponds to the JSON property `workloadIdentityPoolProviders`
+        # @return [Array<Google::Apis::IamV1::WorkloadIdentityPoolProvider>]
+        attr_accessor :workload_identity_pool_providers
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
+          @workload_identity_pool_providers = args[:workload_identity_pool_providers] if args.key?(:workload_identity_pool_providers)
+        end
+      end
+      
+      # Response message for ListWorkloadIdentityPools.
+      class ListWorkloadIdentityPoolsResponse
+        include Google::Apis::Core::Hashable
+      
+        # A token, which can be sent as `page_token` to retrieve the next page. If this
+        # field is omitted, there are no subsequent pages.
+        # Corresponds to the JSON property `nextPageToken`
+        # @return [String]
+        attr_accessor :next_page_token
+      
+        # A list of pools.
+        # Corresponds to the JSON property `workloadIdentityPools`
+        # @return [Array<Google::Apis::IamV1::WorkloadIdentityPool>]
+        attr_accessor :workload_identity_pools
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
+          @workload_identity_pools = args[:workload_identity_pools] if args.key?(:workload_identity_pools)
+        end
+      end
+      
+      # Represents an OpenId Connect 1.0 identity provider.
+      class Oidc
+        include Google::Apis::Core::Hashable
+      
+        # Acceptable values for the `aud` field (audience) in the OIDC token. Token
+        # exchange requests are rejected if the token audience does not match one of the
+        # configured values. Each audience may be at most 256 characters. A maximum of
+        # 10 audiences may be configured. If this list is empty, the OIDC token audience
+        # must be equal to the full canonical resource name of the
+        # WorkloadIdentityPoolProvider, with or without the HTTPS prefix. For example: ``
+        # ` //iam.googleapis.com/projects//locations//workloadIdentityPools//providers/
+        # https://iam.googleapis.com/projects//locations//workloadIdentityPools//
+        # providers/ ```
+        # Corresponds to the JSON property `allowedAudiences`
+        # @return [Array<String>]
+        attr_accessor :allowed_audiences
+      
+        # Required. The OIDC issuer URL.
+        # Corresponds to the JSON property `issuerUri`
+        # @return [String]
+        attr_accessor :issuer_uri
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @allowed_audiences = args[:allowed_audiences] if args.key?(:allowed_audiences)
+          @issuer_uri = args[:issuer_uri] if args.key?(:issuer_uri)
+        end
+      end
+      
       # This resource represents a long-running operation that is the result of a
       # network API call.
       class Operation
@@ -1667,6 +1771,32 @@ module Google
         end
       end
       
+      # Request message for UndeleteWorkloadIdentityPoolProvider.
+      class UndeleteWorkloadIdentityPoolProviderRequest
+        include Google::Apis::Core::Hashable
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+        end
+      end
+      
+      # Request message for UndeleteWorkloadIdentityPool.
+      class UndeleteWorkloadIdentityPoolRequest
+        include Google::Apis::Core::Hashable
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+        end
+      end
+      
       # The service account key upload request.
       class UploadServiceAccountKeyRequest
         include Google::Apis::Core::Hashable
@@ -1688,6 +1818,169 @@ module Google
           @public_key_data = args[:public_key_data] if args.key?(:public_key_data)
         end
       end
+      
+      # Represents a collection of external workload identities. You can define IAM
+      # policies to grant these identities access to Google Cloud resources.
+      class WorkloadIdentityPool
+        include Google::Apis::Core::Hashable
+      
+        # A description of the pool. Cannot exceed 256 characters.
+        # Corresponds to the JSON property `description`
+        # @return [String]
+        attr_accessor :description
+      
+        # Whether the pool is disabled. You cannot use a disabled pool to exchange
+        # tokens, or use existing tokens to access resources. If the pool is re-enabled,
+        # existing tokens grant access again.
+        # Corresponds to the JSON property `disabled`
+        # @return [Boolean]
+        attr_accessor :disabled
+        alias_method :disabled?, :disabled
+      
+        # A display name for the pool. Cannot exceed 32 characters.
+        # Corresponds to the JSON property `displayName`
+        # @return [String]
+        attr_accessor :display_name
+      
+        # Output only. The resource name of the pool.
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        # Output only. The state of the pool.
+        # Corresponds to the JSON property `state`
+        # @return [String]
+        attr_accessor :state
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @description = args[:description] if args.key?(:description)
+          @disabled = args[:disabled] if args.key?(:disabled)
+          @display_name = args[:display_name] if args.key?(:display_name)
+          @name = args[:name] if args.key?(:name)
+          @state = args[:state] if args.key?(:state)
+        end
+      end
+      
+      # A configuration for an external identity provider.
+      class WorkloadIdentityPoolProvider
+        include Google::Apis::Core::Hashable
+      
+        # [A Common Expression Language](https://opensource.google/projects/cel)
+        # expression, in plain text, to restrict what otherwise valid authentication
+        # credentials issued by the provider should not be accepted. The expression must
+        # output a boolean representing whether to allow the federation. The following
+        # keywords may be referenced in the expressions: * `assertion`: JSON
+        # representing the authentication credential issued by the provider. * `google`:
+        # The Google attributes mapped from the assertion in the `attribute_mappings`. *
+        # `attribute`: The custom attributes mapped from the assertion in the `
+        # attribute_mappings`. The maximum length of the attribute condition expression
+        # is 4096 characters. If unspecified, all valid authentication credential are
+        # accepted. The following example shows how to only allow credentials with a
+        # mapped `google.groups` value of `admins`: ``` "'admins' in google.groups" ```
+        # Corresponds to the JSON property `attributeCondition`
+        # @return [String]
+        attr_accessor :attribute_condition
+      
+        # Maps attributes from authentication credentials issued by an external identity
+        # provider to Google Cloud attributes, such as `subject` and `segment`. Each key
+        # must be a string specifying the Google Cloud IAM attribute to map to. The
+        # following keys are supported: * `google.subject`: The principal IAM is
+        # authenticating. You can reference this value in IAM bindings. This is also the
+        # subject that appears in Cloud Logging logs. Cannot exceed 127 characters. * `
+        # google.groups`: Groups the external identity belongs to. You can grant groups
+        # access to resources using an IAM `principalSet` binding; access applies to all
+        # members of the group. You can also provide custom attributes by specifying `
+        # attribute.`custom_attribute``, where ``custom_attribute`` is the name of the
+        # custom attribute to be mapped. You can define a maximum of 50 custom
+        # attributes. The maximum length of a mapped attribute key is 100 characters,
+        # and the key may only contain the characters [a-z0-9_]. You can reference these
+        # attributes in IAM policies to define fine-grained access for a workload to
+        # Google Cloud resources. For example: * `google.subject`: `principal://iam.
+        # googleapis.com/projects/`project`/locations/`location`/workloadIdentityPools/`
+        # pool`/subject/`value`` * `google.groups`: `principalSet://iam.googleapis.com/
+        # projects/`project`/locations/`location`/workloadIdentityPools/`pool`/group/`
+        # value`` * `attribute.`custom_attribute``: `principalSet://iam.googleapis.com/
+        # projects/`project`/locations/`location`/workloadIdentityPools/`pool`/attribute.
+        # `custom_attribute`/`value`` Each value must be a [Common Expression Language] (
+        # https://opensource.google/projects/cel) function that maps an identity
+        # provider credential to the normalized attribute specified by the corresponding
+        # map key. You can use the `assertion` keyword in the expression to access a
+        # JSON representation of the authentication credential issued by the provider.
+        # The maximum length of an attribute mapping expression is 2048 characters. When
+        # evaluated, the total size of all mapped attributes must not exceed 8KB. For
+        # AWS providers, if no attribute mapping is defined, the following default
+        # mapping applies: ``` ` "google.subject":"assertion.arn", "attribute.aws_role":
+        # "assertion.arn.contains('assumed-role')" " ? assertion.arn.extract('`
+        # account_arn`assumed-role/')" " + 'assumed-role/'" " + assertion.arn.extract('
+        # assumed-role/`role_name`/')" " : assertion.arn", ` ``` If any custom attribute
+        # mappings are defined, they must include a mapping to the `google.subject`
+        # attribute. For OIDC providers, you must supply a custom mapping, which must
+        # include the `google.subject` attribute. For example, the following maps the `
+        # sub` claim of the incoming credential to the `subject` attribute on a Google
+        # token: ``` `"google.subject": "assertion.sub"` ```
+        # Corresponds to the JSON property `attributeMapping`
+        # @return [Hash<String,String>]
+        attr_accessor :attribute_mapping
+      
+        # Represents an Amazon Web Services identity provider.
+        # Corresponds to the JSON property `aws`
+        # @return [Google::Apis::IamV1::Aws]
+        attr_accessor :aws
+      
+        # A description for the provider. Cannot exceed 256 characters.
+        # Corresponds to the JSON property `description`
+        # @return [String]
+        attr_accessor :description
+      
+        # Whether the provider is disabled. You cannot use a disabled provider to
+        # exchange tokens. However, existing tokens still grant access.
+        # Corresponds to the JSON property `disabled`
+        # @return [Boolean]
+        attr_accessor :disabled
+        alias_method :disabled?, :disabled
+      
+        # A display name for the provider. Cannot exceed 32 characters.
+        # Corresponds to the JSON property `displayName`
+        # @return [String]
+        attr_accessor :display_name
+      
+        # Output only. The resource name of the provider.
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        # Represents an OpenId Connect 1.0 identity provider.
+        # Corresponds to the JSON property `oidc`
+        # @return [Google::Apis::IamV1::Oidc]
+        attr_accessor :oidc
+      
+        # Output only. The state of the provider.
+        # Corresponds to the JSON property `state`
+        # @return [String]
+        attr_accessor :state
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @attribute_condition = args[:attribute_condition] if args.key?(:attribute_condition)
+          @attribute_mapping = args[:attribute_mapping] if args.key?(:attribute_mapping)
+          @aws = args[:aws] if args.key?(:aws)
+          @description = args[:description] if args.key?(:description)
+          @disabled = args[:disabled] if args.key?(:disabled)
+          @display_name = args[:display_name] if args.key?(:display_name)
+          @name = args[:name] if args.key?(:name)
+          @oidc = args[:oidc] if args.key?(:oidc)
+          @state = args[:state] if args.key?(:state)
+        end
+      end
     end
   end
 end

data/lib/google/apis/iam_v1/gem_version.rb

@@ -16,13 +16,13 @@ module Google
   module Apis
     module IamV1
       # Version of the google-apis-iam_v1 gem
-      GEM_VERSION = "0.1.0"
+      GEM_VERSION = "0.2.0"
 
       # Version of the code generator used to generate this client
-      GENERATOR_VERSION = "0.1.1"
+      GENERATOR_VERSION = "0.1.2"
 
       # Revision of the discovery document this client was generated from
-      REVISION = "20201112"
+      REVISION = "20210211"
     end
   end
 end

data/lib/google/apis/iam_v1/representations.rb

@@ -52,6 +52,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class Aws
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class Binding
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -142,6 +148,24 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class ListWorkloadIdentityPoolProvidersResponse
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class ListWorkloadIdentityPoolsResponse
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class Oidc
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class Operation
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -298,12 +322,36 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class UndeleteWorkloadIdentityPoolProviderRequest
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class UndeleteWorkloadIdentityPoolRequest
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class UploadServiceAccountKeyRequest
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class WorkloadIdentityPool
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class WorkloadIdentityPoolProvider
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class AdminAuditData
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -344,6 +392,13 @@ module Google
         end
       end
       
+      class Aws
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :account_id, as: 'accountId'
+        end
+      end
+      
       class Binding
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -474,6 +529,32 @@ module Google
         end
       end
       
+      class ListWorkloadIdentityPoolProvidersResponse
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :next_page_token, as: 'nextPageToken'
+          collection :workload_identity_pool_providers, as: 'workloadIdentityPoolProviders', class: Google::Apis::IamV1::WorkloadIdentityPoolProvider, decorator: Google::Apis::IamV1::WorkloadIdentityPoolProvider::Representation
+      
+        end
+      end
+      
+      class ListWorkloadIdentityPoolsResponse
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :next_page_token, as: 'nextPageToken'
+          collection :workload_identity_pools, as: 'workloadIdentityPools', class: Google::Apis::IamV1::WorkloadIdentityPool, decorator: Google::Apis::IamV1::WorkloadIdentityPool::Representation
+      
+        end
+      end
+      
+      class Oidc
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          collection :allowed_audiences, as: 'allowedAudiences'
+          property :issuer_uri, as: 'issuerUri'
+        end
+      end
+      
       class Operation
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -715,12 +796,52 @@ module Google
         end
       end
       
+      class UndeleteWorkloadIdentityPoolProviderRequest
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+        end
+      end
+      
+      class UndeleteWorkloadIdentityPoolRequest
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+        end
+      end
+      
       class UploadServiceAccountKeyRequest
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
           property :public_key_data, :base64 => true, as: 'publicKeyData'
         end
       end
+      
+      class WorkloadIdentityPool
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :description, as: 'description'
+          property :disabled, as: 'disabled'
+          property :display_name, as: 'displayName'
+          property :name, as: 'name'
+          property :state, as: 'state'
+        end
+      end
+      
+      class WorkloadIdentityPoolProvider
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :attribute_condition, as: 'attributeCondition'
+          hash :attribute_mapping, as: 'attributeMapping'
+          property :aws, as: 'aws', class: Google::Apis::IamV1::Aws, decorator: Google::Apis::IamV1::Aws::Representation
+      
+          property :description, as: 'description'
+          property :disabled, as: 'disabled'
+          property :display_name, as: 'displayName'
+          property :name, as: 'name'
+          property :oidc, as: 'oidc', class: Google::Apis::IamV1::Oidc, decorator: Google::Apis::IamV1::Oidc::Representation
+      
+          property :state, as: 'state'
+        end
+      end
     end
   end
 end

data/lib/google/apis/iam_v1/service.rb

@@ -454,6 +454,225 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
+        # Creates a new WorkloadIdentityPool. You cannot reuse the name of a deleted
+        # pool until 30 days after deletion.
+        # @param [String] parent
+        #   Required. The parent resource to create the pool in. The only supported
+        #   location is `global`.
+        # @param [Google::Apis::IamV1::WorkloadIdentityPool] workload_identity_pool_object
+        # @param [String] workload_identity_pool_id
+        #   Required. The ID to use for the pool, which becomes the final component of the
+        #   resource name. This value should be 4-32 characters, and may contain the
+        #   characters [a-z0-9-]. The prefix `gcp-` is reserved for use by Google, and may
+        #   not be specified.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::IamV1::Operation] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::IamV1::Operation]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def create_project_location_workload_identity_pool(parent, workload_identity_pool_object = nil, workload_identity_pool_id: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:post, 'v1/{+parent}/workloadIdentityPools', options)
+          command.request_representation = Google::Apis::IamV1::WorkloadIdentityPool::Representation
+          command.request_object = workload_identity_pool_object
+          command.response_representation = Google::Apis::IamV1::Operation::Representation
+          command.response_class = Google::Apis::IamV1::Operation
+          command.params['parent'] = parent unless parent.nil?
+          command.query['workloadIdentityPoolId'] = workload_identity_pool_id unless workload_identity_pool_id.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Deletes a WorkloadIdentityPool. You cannot use a deleted pool to exchange
+        # external credentials for Google Cloud credentials. However, deletion does not
+        # revoke credentials that have already been issued. Credentials issued for a
+        # deleted pool do not grant access to resources. If the pool is undeleted, and
+        # the credentials are not expired, they grant access again. You can undelete a
+        # pool for 30 days. After 30 days, deletion is permanent. You cannot update
+        # deleted pools. However, you can view and list them.
+        # @param [String] name
+        #   Required. The name of the pool to delete.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::IamV1::Operation] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::IamV1::Operation]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def delete_project_location_workload_identity_pool(name, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:delete, 'v1/{+name}', options)
+          command.response_representation = Google::Apis::IamV1::Operation::Representation
+          command.response_class = Google::Apis::IamV1::Operation
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Gets an individual WorkloadIdentityPool.
+        # @param [String] name
+        #   Required. The name of the pool to retrieve.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::IamV1::WorkloadIdentityPool] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::IamV1::WorkloadIdentityPool]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def get_project_location_workload_identity_pool(name, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+name}', options)
+          command.response_representation = Google::Apis::IamV1::WorkloadIdentityPool::Representation
+          command.response_class = Google::Apis::IamV1::WorkloadIdentityPool
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Lists all non-deleted WorkloadIdentityPools in a project. If `show_deleted` is
+        # set to `true`, then deleted pools are also listed.
+        # @param [String] parent
+        #   Required. The parent resource to list pools for.
+        # @param [Fixnum] page_size
+        #   The maximum number of pools to return. If unspecified, at most 50 pools are
+        #   returned. The maximum value is 1000; values above are 1000 truncated to 1000.
+        # @param [String] page_token
+        #   A page token, received from a previous `ListWorkloadIdentityPools` call.
+        #   Provide this to retrieve the subsequent page.
+        # @param [Boolean] show_deleted
+        #   Whether to return soft-deleted pools.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::IamV1::ListWorkloadIdentityPoolsResponse] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::IamV1::ListWorkloadIdentityPoolsResponse]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def list_project_location_workload_identity_pools(parent, page_size: nil, page_token: nil, show_deleted: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+parent}/workloadIdentityPools', options)
+          command.response_representation = Google::Apis::IamV1::ListWorkloadIdentityPoolsResponse::Representation
+          command.response_class = Google::Apis::IamV1::ListWorkloadIdentityPoolsResponse
+          command.params['parent'] = parent unless parent.nil?
+          command.query['pageSize'] = page_size unless page_size.nil?
+          command.query['pageToken'] = page_token unless page_token.nil?
+          command.query['showDeleted'] = show_deleted unless show_deleted.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Updates an existing WorkloadIdentityPool.
+        # @param [String] name
+        #   Output only. The resource name of the pool.
+        # @param [Google::Apis::IamV1::WorkloadIdentityPool] workload_identity_pool_object
+        # @param [String] update_mask
+        #   Required. The list of fields update.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::IamV1::Operation] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::IamV1::Operation]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def patch_project_location_workload_identity_pool(name, workload_identity_pool_object = nil, update_mask: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:patch, 'v1/{+name}', options)
+          command.request_representation = Google::Apis::IamV1::WorkloadIdentityPool::Representation
+          command.request_object = workload_identity_pool_object
+          command.response_representation = Google::Apis::IamV1::Operation::Representation
+          command.response_class = Google::Apis::IamV1::Operation
+          command.params['name'] = name unless name.nil?
+          command.query['updateMask'] = update_mask unless update_mask.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Undeletes a WorkloadIdentityPool, as long as it was deleted fewer than 30 days
+        # ago.
+        # @param [String] name
+        #   Required. The name of the pool to undelete.
+        # @param [Google::Apis::IamV1::UndeleteWorkloadIdentityPoolRequest] undelete_workload_identity_pool_request_object
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::IamV1::Operation] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::IamV1::Operation]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def undelete_workload_identity_pool(name, undelete_workload_identity_pool_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:post, 'v1/{+name}:undelete', options)
+          command.request_representation = Google::Apis::IamV1::UndeleteWorkloadIdentityPoolRequest::Representation
+          command.request_object = undelete_workload_identity_pool_request_object
+          command.response_representation = Google::Apis::IamV1::Operation::Representation
+          command.response_class = Google::Apis::IamV1::Operation
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
         # Gets the latest state of a long-running operation. Clients can use this method
         # to poll the operation result at intervals as recommended by the API service.
         # @param [String] name
@@ -485,6 +704,222 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
+        # Creates a new WorkloadIdentityPoolProvider in a WorkloadIdentityPool. You
+        # cannot reuse the name of a deleted provider until 30 days after deletion.
+        # @param [String] parent
+        #   Required. The pool to create this provider in.
+        # @param [Google::Apis::IamV1::WorkloadIdentityPoolProvider] workload_identity_pool_provider_object
+        # @param [String] workload_identity_pool_provider_id
+        #   Required. The ID for the provider, which becomes the final component of the
+        #   resource name. This value must be 4-32 characters, and may contain the
+        #   characters [a-z0-9-]. The prefix `gcp-` is reserved for use by Google, and may
+        #   not be specified.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::IamV1::Operation] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::IamV1::Operation]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def create_project_location_workload_identity_pool_provider(parent, workload_identity_pool_provider_object = nil, workload_identity_pool_provider_id: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:post, 'v1/{+parent}/providers', options)
+          command.request_representation = Google::Apis::IamV1::WorkloadIdentityPoolProvider::Representation
+          command.request_object = workload_identity_pool_provider_object
+          command.response_representation = Google::Apis::IamV1::Operation::Representation
+          command.response_class = Google::Apis::IamV1::Operation
+          command.params['parent'] = parent unless parent.nil?
+          command.query['workloadIdentityPoolProviderId'] = workload_identity_pool_provider_id unless workload_identity_pool_provider_id.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Deletes a WorkloadIdentityPoolProvider. Deleting a provider does not revoke
+        # credentials that have already been issued; they continue to grant access. You
+        # can undelete a provider for 30 days. After 30 days, deletion is permanent. You
+        # cannot update deleted providers. However, you can view and list them.
+        # @param [String] name
+        #   Required. The name of the provider to delete.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::IamV1::Operation] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::IamV1::Operation]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def delete_project_location_workload_identity_pool_provider(name, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:delete, 'v1/{+name}', options)
+          command.response_representation = Google::Apis::IamV1::Operation::Representation
+          command.response_class = Google::Apis::IamV1::Operation
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Gets an individual WorkloadIdentityPoolProvider.
+        # @param [String] name
+        #   Required. The name of the provider to retrieve.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::IamV1::WorkloadIdentityPoolProvider] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::IamV1::WorkloadIdentityPoolProvider]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def get_project_location_workload_identity_pool_provider(name, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+name}', options)
+          command.response_representation = Google::Apis::IamV1::WorkloadIdentityPoolProvider::Representation
+          command.response_class = Google::Apis::IamV1::WorkloadIdentityPoolProvider
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Lists all non-deleted WorkloadIdentityPoolProviders in a WorkloadIdentityPool.
+        # If `show_deleted` is set to `true`, then deleted providers are also listed.
+        # @param [String] parent
+        #   Required. The pool to list providers for.
+        # @param [Fixnum] page_size
+        #   The maximum number of providers to return. If unspecified, at most 50
+        #   providers are returned. The maximum value is 100; values above 100 are
+        #   truncated to 100.
+        # @param [String] page_token
+        #   A page token, received from a previous `ListWorkloadIdentityPoolProviders`
+        #   call. Provide this to retrieve the subsequent page.
+        # @param [Boolean] show_deleted
+        #   Whether to return soft-deleted providers.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::IamV1::ListWorkloadIdentityPoolProvidersResponse] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::IamV1::ListWorkloadIdentityPoolProvidersResponse]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def list_project_location_workload_identity_pool_providers(parent, page_size: nil, page_token: nil, show_deleted: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+parent}/providers', options)
+          command.response_representation = Google::Apis::IamV1::ListWorkloadIdentityPoolProvidersResponse::Representation
+          command.response_class = Google::Apis::IamV1::ListWorkloadIdentityPoolProvidersResponse
+          command.params['parent'] = parent unless parent.nil?
+          command.query['pageSize'] = page_size unless page_size.nil?
+          command.query['pageToken'] = page_token unless page_token.nil?
+          command.query['showDeleted'] = show_deleted unless show_deleted.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Updates an existing WorkloadIdentityPoolProvider.
+        # @param [String] name
+        #   Output only. The resource name of the provider.
+        # @param [Google::Apis::IamV1::WorkloadIdentityPoolProvider] workload_identity_pool_provider_object
+        # @param [String] update_mask
+        #   Required. The list of fields to update.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::IamV1::Operation] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::IamV1::Operation]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def patch_project_location_workload_identity_pool_provider(name, workload_identity_pool_provider_object = nil, update_mask: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:patch, 'v1/{+name}', options)
+          command.request_representation = Google::Apis::IamV1::WorkloadIdentityPoolProvider::Representation
+          command.request_object = workload_identity_pool_provider_object
+          command.response_representation = Google::Apis::IamV1::Operation::Representation
+          command.response_class = Google::Apis::IamV1::Operation
+          command.params['name'] = name unless name.nil?
+          command.query['updateMask'] = update_mask unless update_mask.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Undeletes a WorkloadIdentityPoolProvider, as long as it was deleted fewer than
+        # 30 days ago.
+        # @param [String] name
+        #   Required. The name of the provider to undelete.
+        # @param [Google::Apis::IamV1::UndeleteWorkloadIdentityPoolProviderRequest] undelete_workload_identity_pool_provider_request_object
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::IamV1::Operation] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::IamV1::Operation]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def undelete_workload_identity_pool_provider(name, undelete_workload_identity_pool_provider_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:post, 'v1/{+name}:undelete', options)
+          command.request_representation = Google::Apis::IamV1::UndeleteWorkloadIdentityPoolProviderRequest::Representation
+          command.request_object = undelete_workload_identity_pool_provider_request_object
+          command.response_representation = Google::Apis::IamV1::Operation::Representation
+          command.response_class = Google::Apis::IamV1::Operation
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
         # Gets the latest state of a long-running operation. Clients can use this method
         # to poll the operation result at intervals as recommended by the API service.
         # @param [String] name

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: google-apis-iam_v1
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.2.0
 platform: ruby
 authors:
 - Google LLC
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-01-08 00:00:00.000000000 Z
+date: 2021-02-22 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: google-apis-core
@@ -53,7 +53,7 @@ licenses:
 metadata:
   bug_tracker_uri: https://github.com/googleapis/google-api-ruby-client/issues
   changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/master/generated/google-apis-iam_v1/CHANGELOG.md
-  documentation_uri: https://googleapis.dev/ruby/google-apis-iam_v1/v0.1.0
+  documentation_uri: https://googleapis.dev/ruby/google-apis-iam_v1/v0.2.0
   source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/master/generated/google-apis-iam_v1
 post_install_message: 
 rdoc_options: []
@@ -70,7 +70,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.1.4
+rubygems_version: 3.2.6
 signing_key: 
 specification_version: 4
 summary: Simple REST client for Identity and Access Management (IAM) API V1