google-apis-networksecurity_v1 0.30.0 → 0.31.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +4 -0
- data/lib/google/apis/networksecurity_v1/classes.rb +540 -0
- data/lib/google/apis/networksecurity_v1/gem_version.rb +2 -2
- data/lib/google/apis/networksecurity_v1/representations.rb +254 -0
- data/lib/google/apis/networksecurity_v1/service.rb +220 -0
- metadata +4 -4
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: b405a629e898e7005a178dc30cb4c856f1cd08234c5e9f0143767ac164fb8438
|
4
|
+
data.tar.gz: b576425cb00f5c2a62b8ea634a3a5bffd4fe0f16e16215aaaa05c8ca83b00ae8
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: cbc06a698dad058e54c17a03ae1ac6befe7b8b7245e1e740b0f9482e39f548674348758a1c17d5a12a1decce12d482c368a27009de9f26eb904bbbc0eb975658
|
7
|
+
data.tar.gz: 85f3b178e62ad17e40ab50bf49d5370642c206d1c7d9b2767f7b6ff444701c9224f67032c5be1a03b91bc02fd9614e12fde01369d4a81abf8a4fcc330283775c
|
data/CHANGELOG.md
CHANGED
@@ -194,6 +194,515 @@ module Google
|
|
194
194
|
end
|
195
195
|
end
|
196
196
|
|
197
|
+
# `AuthzPolicy` is a resource that allows to forward traffic to a callout
|
198
|
+
# backend designed to scan the traffic for security purposes.
|
199
|
+
class AuthzPolicy
|
200
|
+
include Google::Apis::Core::Hashable
|
201
|
+
|
202
|
+
# Required. Can be one of `ALLOW`, `DENY`, `CUSTOM`. When the action is `CUSTOM`,
|
203
|
+
# `customProvider` must be specified. When the action is `ALLOW`, only requests
|
204
|
+
# matching the policy will be allowed. When the action is `DENY`, only requests
|
205
|
+
# matching the policy will be denied. When a request arrives, the policies are
|
206
|
+
# evaluated in the following order: 1. If there is a `CUSTOM` policy that
|
207
|
+
# matches the request, the `CUSTOM` policy is evaluated using the custom
|
208
|
+
# authorization providers and the request is denied if the provider rejects the
|
209
|
+
# request. 2. If there are any `DENY` policies that match the request, the
|
210
|
+
# request is denied. 3. If there are no `ALLOW` policies for the resource or if
|
211
|
+
# any of the `ALLOW` policies match the request, the request is allowed. 4. Else
|
212
|
+
# the request is denied by default if none of the configured AuthzPolicies with `
|
213
|
+
# ALLOW` action match the request.
|
214
|
+
# Corresponds to the JSON property `action`
|
215
|
+
# @return [String]
|
216
|
+
attr_accessor :action
|
217
|
+
|
218
|
+
# Output only. The timestamp when the resource was created.
|
219
|
+
# Corresponds to the JSON property `createTime`
|
220
|
+
# @return [String]
|
221
|
+
attr_accessor :create_time
|
222
|
+
|
223
|
+
# Allows delegating authorization decisions to Cloud IAP or to Service
|
224
|
+
# Extensions.
|
225
|
+
# Corresponds to the JSON property `customProvider`
|
226
|
+
# @return [Google::Apis::NetworksecurityV1::AuthzPolicyCustomProvider]
|
227
|
+
attr_accessor :custom_provider
|
228
|
+
|
229
|
+
# Optional. A human-readable description of the resource.
|
230
|
+
# Corresponds to the JSON property `description`
|
231
|
+
# @return [String]
|
232
|
+
attr_accessor :description
|
233
|
+
|
234
|
+
# Optional. A list of authorization HTTP rules to match against the incoming
|
235
|
+
# request. A policy match occurs when at least one HTTP rule matches the request
|
236
|
+
# or when no HTTP rules are specified in the policy. At least one HTTP Rule is
|
237
|
+
# required for Allow or Deny Action. Limited to 5 rules.
|
238
|
+
# Corresponds to the JSON property `httpRules`
|
239
|
+
# @return [Array<Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRule>]
|
240
|
+
attr_accessor :http_rules
|
241
|
+
|
242
|
+
# Optional. Set of labels associated with the `AuthzPolicy` resource. The format
|
243
|
+
# must comply with [the following requirements](/compute/docs/labeling-resources#
|
244
|
+
# requirements).
|
245
|
+
# Corresponds to the JSON property `labels`
|
246
|
+
# @return [Hash<String,String>]
|
247
|
+
attr_accessor :labels
|
248
|
+
|
249
|
+
# Required. Identifier. Name of the `AuthzPolicy` resource in the following
|
250
|
+
# format: `projects/`project`/locations/`location`/authzPolicies/`authz_policy``.
|
251
|
+
# Corresponds to the JSON property `name`
|
252
|
+
# @return [String]
|
253
|
+
attr_accessor :name
|
254
|
+
|
255
|
+
# Specifies the set of targets to which this policy should be applied to.
|
256
|
+
# Corresponds to the JSON property `target`
|
257
|
+
# @return [Google::Apis::NetworksecurityV1::AuthzPolicyTarget]
|
258
|
+
attr_accessor :target
|
259
|
+
|
260
|
+
# Output only. The timestamp when the resource was updated.
|
261
|
+
# Corresponds to the JSON property `updateTime`
|
262
|
+
# @return [String]
|
263
|
+
attr_accessor :update_time
|
264
|
+
|
265
|
+
def initialize(**args)
|
266
|
+
update!(**args)
|
267
|
+
end
|
268
|
+
|
269
|
+
# Update properties of this object
|
270
|
+
def update!(**args)
|
271
|
+
@action = args[:action] if args.key?(:action)
|
272
|
+
@create_time = args[:create_time] if args.key?(:create_time)
|
273
|
+
@custom_provider = args[:custom_provider] if args.key?(:custom_provider)
|
274
|
+
@description = args[:description] if args.key?(:description)
|
275
|
+
@http_rules = args[:http_rules] if args.key?(:http_rules)
|
276
|
+
@labels = args[:labels] if args.key?(:labels)
|
277
|
+
@name = args[:name] if args.key?(:name)
|
278
|
+
@target = args[:target] if args.key?(:target)
|
279
|
+
@update_time = args[:update_time] if args.key?(:update_time)
|
280
|
+
end
|
281
|
+
end
|
282
|
+
|
283
|
+
# Conditions to match against the incoming request.
|
284
|
+
class AuthzPolicyAuthzRule
|
285
|
+
include Google::Apis::Core::Hashable
|
286
|
+
|
287
|
+
# Describes properties of one or more sources of a request.
|
288
|
+
# Corresponds to the JSON property `from`
|
289
|
+
# @return [Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleFrom]
|
290
|
+
attr_accessor :from
|
291
|
+
|
292
|
+
# Describes properties of one or more targets of a request.
|
293
|
+
# Corresponds to the JSON property `to`
|
294
|
+
# @return [Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleTo]
|
295
|
+
attr_accessor :to
|
296
|
+
|
297
|
+
# Optional. CEL expression that describes the conditions to be satisfied for the
|
298
|
+
# action. The result of the CEL expression is ANDed with the from and to. Refer
|
299
|
+
# to the CEL language reference for a list of available attributes.
|
300
|
+
# Corresponds to the JSON property `when`
|
301
|
+
# @return [String]
|
302
|
+
attr_accessor :when
|
303
|
+
|
304
|
+
def initialize(**args)
|
305
|
+
update!(**args)
|
306
|
+
end
|
307
|
+
|
308
|
+
# Update properties of this object
|
309
|
+
def update!(**args)
|
310
|
+
@from = args[:from] if args.key?(:from)
|
311
|
+
@to = args[:to] if args.key?(:to)
|
312
|
+
@when = args[:when] if args.key?(:when)
|
313
|
+
end
|
314
|
+
end
|
315
|
+
|
316
|
+
# Describes properties of one or more sources of a request.
|
317
|
+
class AuthzPolicyAuthzRuleFrom
|
318
|
+
include Google::Apis::Core::Hashable
|
319
|
+
|
320
|
+
# Optional. Describes the negated properties of request sources. Matches
|
321
|
+
# requests from sources that do not match the criteria specified in this field.
|
322
|
+
# At least one of sources or notSources must be specified.
|
323
|
+
# Corresponds to the JSON property `notSources`
|
324
|
+
# @return [Array<Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleFromRequestSource>]
|
325
|
+
attr_accessor :not_sources
|
326
|
+
|
327
|
+
# Optional. Describes the properties of a request's sources. At least one of
|
328
|
+
# sources or notSources must be specified. Limited to 5 sources. A match occurs
|
329
|
+
# when ANY source (in sources or notSources) matches the request. Within a
|
330
|
+
# single source, the match follows AND semantics across fields and OR semantics
|
331
|
+
# within a single field, i.e. a match occurs when ANY principal matches AND ANY
|
332
|
+
# ipBlocks match.
|
333
|
+
# Corresponds to the JSON property `sources`
|
334
|
+
# @return [Array<Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleFromRequestSource>]
|
335
|
+
attr_accessor :sources
|
336
|
+
|
337
|
+
def initialize(**args)
|
338
|
+
update!(**args)
|
339
|
+
end
|
340
|
+
|
341
|
+
# Update properties of this object
|
342
|
+
def update!(**args)
|
343
|
+
@not_sources = args[:not_sources] if args.key?(:not_sources)
|
344
|
+
@sources = args[:sources] if args.key?(:sources)
|
345
|
+
end
|
346
|
+
end
|
347
|
+
|
348
|
+
# Describes the properties of a single source.
|
349
|
+
class AuthzPolicyAuthzRuleFromRequestSource
|
350
|
+
include Google::Apis::Core::Hashable
|
351
|
+
|
352
|
+
# Optional. A list of identities derived from the client's certificate. This
|
353
|
+
# field will not match on a request unless mutual TLS is enabled for the
|
354
|
+
# Forwarding rule or Gateway. Each identity is a string whose value is matched
|
355
|
+
# against the URI SAN, or DNS SAN or the subject field in the client's
|
356
|
+
# certificate. The match can be exact, prefix, suffix or a substring match. One
|
357
|
+
# of exact, prefix, suffix or contains must be specified. Limited to 5
|
358
|
+
# principals.
|
359
|
+
# Corresponds to the JSON property `principals`
|
360
|
+
# @return [Array<Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleStringMatch>]
|
361
|
+
attr_accessor :principals
|
362
|
+
|
363
|
+
# Optional. A list of resources to match against the resource of the source VM
|
364
|
+
# of a request. Limited to 5 resources.
|
365
|
+
# Corresponds to the JSON property `resources`
|
366
|
+
# @return [Array<Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleRequestResource>]
|
367
|
+
attr_accessor :resources
|
368
|
+
|
369
|
+
def initialize(**args)
|
370
|
+
update!(**args)
|
371
|
+
end
|
372
|
+
|
373
|
+
# Update properties of this object
|
374
|
+
def update!(**args)
|
375
|
+
@principals = args[:principals] if args.key?(:principals)
|
376
|
+
@resources = args[:resources] if args.key?(:resources)
|
377
|
+
end
|
378
|
+
end
|
379
|
+
|
380
|
+
# Determines how a HTTP header should be matched.
|
381
|
+
class AuthzPolicyAuthzRuleHeaderMatch
|
382
|
+
include Google::Apis::Core::Hashable
|
383
|
+
|
384
|
+
# Optional. Specifies the name of the header in the request.
|
385
|
+
# Corresponds to the JSON property `name`
|
386
|
+
# @return [String]
|
387
|
+
attr_accessor :name
|
388
|
+
|
389
|
+
# Determines how a string value should be matched.
|
390
|
+
# Corresponds to the JSON property `value`
|
391
|
+
# @return [Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleStringMatch]
|
392
|
+
attr_accessor :value
|
393
|
+
|
394
|
+
def initialize(**args)
|
395
|
+
update!(**args)
|
396
|
+
end
|
397
|
+
|
398
|
+
# Update properties of this object
|
399
|
+
def update!(**args)
|
400
|
+
@name = args[:name] if args.key?(:name)
|
401
|
+
@value = args[:value] if args.key?(:value)
|
402
|
+
end
|
403
|
+
end
|
404
|
+
|
405
|
+
# Describes the properties of a client VM resource accessing the internal
|
406
|
+
# application load balancers.
|
407
|
+
class AuthzPolicyAuthzRuleRequestResource
|
408
|
+
include Google::Apis::Core::Hashable
|
409
|
+
|
410
|
+
# Determines how a string value should be matched.
|
411
|
+
# Corresponds to the JSON property `iamServiceAccount`
|
412
|
+
# @return [Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleStringMatch]
|
413
|
+
attr_accessor :iam_service_account
|
414
|
+
|
415
|
+
# Describes a set of resource tag value permanent IDs to match against the
|
416
|
+
# resource manager tags value associated with the source VM of a request.
|
417
|
+
# Corresponds to the JSON property `tagValueIdSet`
|
418
|
+
# @return [Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleRequestResourceTagValueIdSet]
|
419
|
+
attr_accessor :tag_value_id_set
|
420
|
+
|
421
|
+
def initialize(**args)
|
422
|
+
update!(**args)
|
423
|
+
end
|
424
|
+
|
425
|
+
# Update properties of this object
|
426
|
+
def update!(**args)
|
427
|
+
@iam_service_account = args[:iam_service_account] if args.key?(:iam_service_account)
|
428
|
+
@tag_value_id_set = args[:tag_value_id_set] if args.key?(:tag_value_id_set)
|
429
|
+
end
|
430
|
+
end
|
431
|
+
|
432
|
+
# Describes a set of resource tag value permanent IDs to match against the
|
433
|
+
# resource manager tags value associated with the source VM of a request.
|
434
|
+
class AuthzPolicyAuthzRuleRequestResourceTagValueIdSet
|
435
|
+
include Google::Apis::Core::Hashable
|
436
|
+
|
437
|
+
# Required. A list of resource tag value permanent IDs to match against the
|
438
|
+
# resource manager tags value associated with the source VM of a request. The
|
439
|
+
# match follows AND semantics which means all the ids must match. Limited to 5
|
440
|
+
# matches.
|
441
|
+
# Corresponds to the JSON property `ids`
|
442
|
+
# @return [Array<Fixnum>]
|
443
|
+
attr_accessor :ids
|
444
|
+
|
445
|
+
def initialize(**args)
|
446
|
+
update!(**args)
|
447
|
+
end
|
448
|
+
|
449
|
+
# Update properties of this object
|
450
|
+
def update!(**args)
|
451
|
+
@ids = args[:ids] if args.key?(:ids)
|
452
|
+
end
|
453
|
+
end
|
454
|
+
|
455
|
+
# Determines how a string value should be matched.
|
456
|
+
class AuthzPolicyAuthzRuleStringMatch
|
457
|
+
include Google::Apis::Core::Hashable
|
458
|
+
|
459
|
+
# The input string must have the substring specified here. Note: empty contains
|
460
|
+
# match is not allowed, please use regex instead. Examples: * ``abc`` matches
|
461
|
+
# the value ``xyz.abc.def``
|
462
|
+
# Corresponds to the JSON property `contains`
|
463
|
+
# @return [String]
|
464
|
+
attr_accessor :contains
|
465
|
+
|
466
|
+
# The input string must match exactly the string specified here. Examples: * ``
|
467
|
+
# abc`` only matches the value ``abc``.
|
468
|
+
# Corresponds to the JSON property `exact`
|
469
|
+
# @return [String]
|
470
|
+
attr_accessor :exact
|
471
|
+
|
472
|
+
# If true, indicates the exact/prefix/suffix/contains matching should be case
|
473
|
+
# insensitive. For example, the matcher ``data`` will match both input string ``
|
474
|
+
# Data`` and ``data`` if set to true.
|
475
|
+
# Corresponds to the JSON property `ignoreCase`
|
476
|
+
# @return [Boolean]
|
477
|
+
attr_accessor :ignore_case
|
478
|
+
alias_method :ignore_case?, :ignore_case
|
479
|
+
|
480
|
+
# The input string must have the prefix specified here. Note: empty prefix is
|
481
|
+
# not allowed, please use regex instead. Examples: * ``abc`` matches the value ``
|
482
|
+
# abc.xyz``
|
483
|
+
# Corresponds to the JSON property `prefix`
|
484
|
+
# @return [String]
|
485
|
+
attr_accessor :prefix
|
486
|
+
|
487
|
+
# The input string must have the suffix specified here. Note: empty prefix is
|
488
|
+
# not allowed, please use regex instead. Examples: * ``abc`` matches the value ``
|
489
|
+
# xyz.abc``
|
490
|
+
# Corresponds to the JSON property `suffix`
|
491
|
+
# @return [String]
|
492
|
+
attr_accessor :suffix
|
493
|
+
|
494
|
+
def initialize(**args)
|
495
|
+
update!(**args)
|
496
|
+
end
|
497
|
+
|
498
|
+
# Update properties of this object
|
499
|
+
def update!(**args)
|
500
|
+
@contains = args[:contains] if args.key?(:contains)
|
501
|
+
@exact = args[:exact] if args.key?(:exact)
|
502
|
+
@ignore_case = args[:ignore_case] if args.key?(:ignore_case)
|
503
|
+
@prefix = args[:prefix] if args.key?(:prefix)
|
504
|
+
@suffix = args[:suffix] if args.key?(:suffix)
|
505
|
+
end
|
506
|
+
end
|
507
|
+
|
508
|
+
# Describes properties of one or more targets of a request.
|
509
|
+
class AuthzPolicyAuthzRuleTo
|
510
|
+
include Google::Apis::Core::Hashable
|
511
|
+
|
512
|
+
# Optional. Describes the negated properties of the targets of a request.
|
513
|
+
# Matches requests for operations that do not match the criteria specified in
|
514
|
+
# this field. At least one of operations or notOperations must be specified.
|
515
|
+
# Corresponds to the JSON property `notOperations`
|
516
|
+
# @return [Array<Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleToRequestOperation>]
|
517
|
+
attr_accessor :not_operations
|
518
|
+
|
519
|
+
# Optional. Describes properties of one or more targets of a request. At least
|
520
|
+
# one of operations or notOperations must be specified. Limited to 5 operations.
|
521
|
+
# A match occurs when ANY operation (in operations or notOperations) matches.
|
522
|
+
# Within an operation, the match follows AND semantics across fields and OR
|
523
|
+
# semantics within a field, i.e. a match occurs when ANY path matches AND ANY
|
524
|
+
# header matches and ANY method matches.
|
525
|
+
# Corresponds to the JSON property `operations`
|
526
|
+
# @return [Array<Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleToRequestOperation>]
|
527
|
+
attr_accessor :operations
|
528
|
+
|
529
|
+
def initialize(**args)
|
530
|
+
update!(**args)
|
531
|
+
end
|
532
|
+
|
533
|
+
# Update properties of this object
|
534
|
+
def update!(**args)
|
535
|
+
@not_operations = args[:not_operations] if args.key?(:not_operations)
|
536
|
+
@operations = args[:operations] if args.key?(:operations)
|
537
|
+
end
|
538
|
+
end
|
539
|
+
|
540
|
+
# Describes properties of one or more targets of a request.
|
541
|
+
class AuthzPolicyAuthzRuleToRequestOperation
|
542
|
+
include Google::Apis::Core::Hashable
|
543
|
+
|
544
|
+
# Describes a set of HTTP headers to match against.
|
545
|
+
# Corresponds to the JSON property `headerSet`
|
546
|
+
# @return [Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleToRequestOperationHeaderSet]
|
547
|
+
attr_accessor :header_set
|
548
|
+
|
549
|
+
# Optional. A list of HTTP Hosts to match against. The match can be one of exact,
|
550
|
+
# prefix, suffix, or contains (substring match). Matches are always case
|
551
|
+
# sensitive unless the ignoreCase is set. Limited to 5 matches.
|
552
|
+
# Corresponds to the JSON property `hosts`
|
553
|
+
# @return [Array<Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleStringMatch>]
|
554
|
+
attr_accessor :hosts
|
555
|
+
|
556
|
+
# Optional. A list of HTTP methods to match against. Each entry must be a valid
|
557
|
+
# HTTP method name (GET, PUT, POST, HEAD, PATCH, DELETE, OPTIONS). It only
|
558
|
+
# allows exact match and is always case sensitive.
|
559
|
+
# Corresponds to the JSON property `methods`
|
560
|
+
# @return [Array<String>]
|
561
|
+
attr_accessor :methods_prop
|
562
|
+
|
563
|
+
# Optional. A list of paths to match against. The match can be one of exact,
|
564
|
+
# prefix, suffix, or contains (substring match). Matches are always case
|
565
|
+
# sensitive unless the ignoreCase is set. Limited to 5 matches. Note that this
|
566
|
+
# path match includes the query parameters. For gRPC services, this should be a
|
567
|
+
# fully-qualified name of the form /package.service/method.
|
568
|
+
# Corresponds to the JSON property `paths`
|
569
|
+
# @return [Array<Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleStringMatch>]
|
570
|
+
attr_accessor :paths
|
571
|
+
|
572
|
+
def initialize(**args)
|
573
|
+
update!(**args)
|
574
|
+
end
|
575
|
+
|
576
|
+
# Update properties of this object
|
577
|
+
def update!(**args)
|
578
|
+
@header_set = args[:header_set] if args.key?(:header_set)
|
579
|
+
@hosts = args[:hosts] if args.key?(:hosts)
|
580
|
+
@methods_prop = args[:methods_prop] if args.key?(:methods_prop)
|
581
|
+
@paths = args[:paths] if args.key?(:paths)
|
582
|
+
end
|
583
|
+
end
|
584
|
+
|
585
|
+
# Describes a set of HTTP headers to match against.
|
586
|
+
class AuthzPolicyAuthzRuleToRequestOperationHeaderSet
|
587
|
+
include Google::Apis::Core::Hashable
|
588
|
+
|
589
|
+
# Required. A list of headers to match against in http header. The match can be
|
590
|
+
# one of exact, prefix, suffix, or contains (substring match). The match follows
|
591
|
+
# AND semantics which means all the headers must match. Matches are always case
|
592
|
+
# sensitive unless the ignoreCase is set. Limited to 5 matches.
|
593
|
+
# Corresponds to the JSON property `headers`
|
594
|
+
# @return [Array<Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleHeaderMatch>]
|
595
|
+
attr_accessor :headers
|
596
|
+
|
597
|
+
def initialize(**args)
|
598
|
+
update!(**args)
|
599
|
+
end
|
600
|
+
|
601
|
+
# Update properties of this object
|
602
|
+
def update!(**args)
|
603
|
+
@headers = args[:headers] if args.key?(:headers)
|
604
|
+
end
|
605
|
+
end
|
606
|
+
|
607
|
+
# Allows delegating authorization decisions to Cloud IAP or to Service
|
608
|
+
# Extensions.
|
609
|
+
class AuthzPolicyCustomProvider
|
610
|
+
include Google::Apis::Core::Hashable
|
611
|
+
|
612
|
+
# Optional. Delegate authorization decision to user authored extension. Only one
|
613
|
+
# of cloudIap or authzExtension can be specified.
|
614
|
+
# Corresponds to the JSON property `authzExtension`
|
615
|
+
# @return [Google::Apis::NetworksecurityV1::AuthzPolicyCustomProviderAuthzExtension]
|
616
|
+
attr_accessor :authz_extension
|
617
|
+
|
618
|
+
# Optional. Delegates authorization decisions to Cloud IAP. Applicable only for
|
619
|
+
# managed load balancers. Enabling Cloud IAP at the AuthzPolicy level is not
|
620
|
+
# compatible with Cloud IAP settings in the BackendService. Enabling IAP in both
|
621
|
+
# places will result in request failure. Ensure that IAP is enabled in either
|
622
|
+
# the AuthzPolicy or the BackendService but not in both places.
|
623
|
+
# Corresponds to the JSON property `cloudIap`
|
624
|
+
# @return [Google::Apis::NetworksecurityV1::AuthzPolicyCustomProviderCloudIap]
|
625
|
+
attr_accessor :cloud_iap
|
626
|
+
|
627
|
+
def initialize(**args)
|
628
|
+
update!(**args)
|
629
|
+
end
|
630
|
+
|
631
|
+
# Update properties of this object
|
632
|
+
def update!(**args)
|
633
|
+
@authz_extension = args[:authz_extension] if args.key?(:authz_extension)
|
634
|
+
@cloud_iap = args[:cloud_iap] if args.key?(:cloud_iap)
|
635
|
+
end
|
636
|
+
end
|
637
|
+
|
638
|
+
# Optional. Delegate authorization decision to user authored extension. Only one
|
639
|
+
# of cloudIap or authzExtension can be specified.
|
640
|
+
class AuthzPolicyCustomProviderAuthzExtension
|
641
|
+
include Google::Apis::Core::Hashable
|
642
|
+
|
643
|
+
# Required. A list of references to authorization extensions that will be
|
644
|
+
# invoked for requests matching this policy. Limited to 1 custom provider.
|
645
|
+
# Corresponds to the JSON property `resources`
|
646
|
+
# @return [Array<String>]
|
647
|
+
attr_accessor :resources
|
648
|
+
|
649
|
+
def initialize(**args)
|
650
|
+
update!(**args)
|
651
|
+
end
|
652
|
+
|
653
|
+
# Update properties of this object
|
654
|
+
def update!(**args)
|
655
|
+
@resources = args[:resources] if args.key?(:resources)
|
656
|
+
end
|
657
|
+
end
|
658
|
+
|
659
|
+
# Optional. Delegates authorization decisions to Cloud IAP. Applicable only for
|
660
|
+
# managed load balancers. Enabling Cloud IAP at the AuthzPolicy level is not
|
661
|
+
# compatible with Cloud IAP settings in the BackendService. Enabling IAP in both
|
662
|
+
# places will result in request failure. Ensure that IAP is enabled in either
|
663
|
+
# the AuthzPolicy or the BackendService but not in both places.
|
664
|
+
class AuthzPolicyCustomProviderCloudIap
|
665
|
+
include Google::Apis::Core::Hashable
|
666
|
+
|
667
|
+
def initialize(**args)
|
668
|
+
update!(**args)
|
669
|
+
end
|
670
|
+
|
671
|
+
# Update properties of this object
|
672
|
+
def update!(**args)
|
673
|
+
end
|
674
|
+
end
|
675
|
+
|
676
|
+
# Specifies the set of targets to which this policy should be applied to.
|
677
|
+
class AuthzPolicyTarget
|
678
|
+
include Google::Apis::Core::Hashable
|
679
|
+
|
680
|
+
# Required. All gateways and forwarding rules referenced by this policy and
|
681
|
+
# extensions must share the same load balancing scheme. Supported values: `
|
682
|
+
# INTERNAL_MANAGED` and `EXTERNAL_MANAGED`. For more information, refer to [
|
683
|
+
# Backend services overview](https://cloud.google.com/load-balancing/docs/
|
684
|
+
# backend-service).
|
685
|
+
# Corresponds to the JSON property `loadBalancingScheme`
|
686
|
+
# @return [String]
|
687
|
+
attr_accessor :load_balancing_scheme
|
688
|
+
|
689
|
+
# Required. A list of references to the Forwarding Rules on which this policy
|
690
|
+
# will be applied.
|
691
|
+
# Corresponds to the JSON property `resources`
|
692
|
+
# @return [Array<String>]
|
693
|
+
attr_accessor :resources
|
694
|
+
|
695
|
+
def initialize(**args)
|
696
|
+
update!(**args)
|
697
|
+
end
|
698
|
+
|
699
|
+
# Update properties of this object
|
700
|
+
def update!(**args)
|
701
|
+
@load_balancing_scheme = args[:load_balancing_scheme] if args.key?(:load_balancing_scheme)
|
702
|
+
@resources = args[:resources] if args.key?(:resources)
|
703
|
+
end
|
704
|
+
end
|
705
|
+
|
197
706
|
# The request message for Operations.CancelOperation.
|
198
707
|
class CancelOperationRequest
|
199
708
|
include Google::Apis::Core::Hashable
|
@@ -1331,6 +1840,37 @@ module Google
|
|
1331
1840
|
end
|
1332
1841
|
end
|
1333
1842
|
|
1843
|
+
# Message for response to listing `AuthzPolicy` resources.
|
1844
|
+
class ListAuthzPoliciesResponse
|
1845
|
+
include Google::Apis::Core::Hashable
|
1846
|
+
|
1847
|
+
# The list of `AuthzPolicy` resources.
|
1848
|
+
# Corresponds to the JSON property `authzPolicies`
|
1849
|
+
# @return [Array<Google::Apis::NetworksecurityV1::AuthzPolicy>]
|
1850
|
+
attr_accessor :authz_policies
|
1851
|
+
|
1852
|
+
# A token identifying a page of results that the server returns.
|
1853
|
+
# Corresponds to the JSON property `nextPageToken`
|
1854
|
+
# @return [String]
|
1855
|
+
attr_accessor :next_page_token
|
1856
|
+
|
1857
|
+
# Locations that could not be reached.
|
1858
|
+
# Corresponds to the JSON property `unreachable`
|
1859
|
+
# @return [Array<String>]
|
1860
|
+
attr_accessor :unreachable
|
1861
|
+
|
1862
|
+
def initialize(**args)
|
1863
|
+
update!(**args)
|
1864
|
+
end
|
1865
|
+
|
1866
|
+
# Update properties of this object
|
1867
|
+
def update!(**args)
|
1868
|
+
@authz_policies = args[:authz_policies] if args.key?(:authz_policies)
|
1869
|
+
@next_page_token = args[:next_page_token] if args.key?(:next_page_token)
|
1870
|
+
@unreachable = args[:unreachable] if args.key?(:unreachable)
|
1871
|
+
end
|
1872
|
+
end
|
1873
|
+
|
1334
1874
|
# Response returned by the ListClientTlsPolicies method.
|
1335
1875
|
class ListClientTlsPoliciesResponse
|
1336
1876
|
include Google::Apis::Core::Hashable
|
@@ -16,13 +16,13 @@ module Google
|
|
16
16
|
module Apis
|
17
17
|
module NetworksecurityV1
|
18
18
|
# Version of the google-apis-networksecurity_v1 gem
|
19
|
-
GEM_VERSION = "0.
|
19
|
+
GEM_VERSION = "0.31.0"
|
20
20
|
|
21
21
|
# Version of the code generator used to generate this client
|
22
22
|
GENERATOR_VERSION = "0.15.1"
|
23
23
|
|
24
24
|
# Revision of the discovery document this client was generated from
|
25
|
-
REVISION = "
|
25
|
+
REVISION = "20241109"
|
26
26
|
end
|
27
27
|
end
|
28
28
|
end
|
@@ -40,6 +40,96 @@ module Google
|
|
40
40
|
include Google::Apis::Core::JsonObjectSupport
|
41
41
|
end
|
42
42
|
|
43
|
+
class AuthzPolicy
|
44
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
45
|
+
|
46
|
+
include Google::Apis::Core::JsonObjectSupport
|
47
|
+
end
|
48
|
+
|
49
|
+
class AuthzPolicyAuthzRule
|
50
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
51
|
+
|
52
|
+
include Google::Apis::Core::JsonObjectSupport
|
53
|
+
end
|
54
|
+
|
55
|
+
class AuthzPolicyAuthzRuleFrom
|
56
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
57
|
+
|
58
|
+
include Google::Apis::Core::JsonObjectSupport
|
59
|
+
end
|
60
|
+
|
61
|
+
class AuthzPolicyAuthzRuleFromRequestSource
|
62
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
63
|
+
|
64
|
+
include Google::Apis::Core::JsonObjectSupport
|
65
|
+
end
|
66
|
+
|
67
|
+
class AuthzPolicyAuthzRuleHeaderMatch
|
68
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
69
|
+
|
70
|
+
include Google::Apis::Core::JsonObjectSupport
|
71
|
+
end
|
72
|
+
|
73
|
+
class AuthzPolicyAuthzRuleRequestResource
|
74
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
75
|
+
|
76
|
+
include Google::Apis::Core::JsonObjectSupport
|
77
|
+
end
|
78
|
+
|
79
|
+
class AuthzPolicyAuthzRuleRequestResourceTagValueIdSet
|
80
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
81
|
+
|
82
|
+
include Google::Apis::Core::JsonObjectSupport
|
83
|
+
end
|
84
|
+
|
85
|
+
class AuthzPolicyAuthzRuleStringMatch
|
86
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
87
|
+
|
88
|
+
include Google::Apis::Core::JsonObjectSupport
|
89
|
+
end
|
90
|
+
|
91
|
+
class AuthzPolicyAuthzRuleTo
|
92
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
93
|
+
|
94
|
+
include Google::Apis::Core::JsonObjectSupport
|
95
|
+
end
|
96
|
+
|
97
|
+
class AuthzPolicyAuthzRuleToRequestOperation
|
98
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
99
|
+
|
100
|
+
include Google::Apis::Core::JsonObjectSupport
|
101
|
+
end
|
102
|
+
|
103
|
+
class AuthzPolicyAuthzRuleToRequestOperationHeaderSet
|
104
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
105
|
+
|
106
|
+
include Google::Apis::Core::JsonObjectSupport
|
107
|
+
end
|
108
|
+
|
109
|
+
class AuthzPolicyCustomProvider
|
110
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
111
|
+
|
112
|
+
include Google::Apis::Core::JsonObjectSupport
|
113
|
+
end
|
114
|
+
|
115
|
+
class AuthzPolicyCustomProviderAuthzExtension
|
116
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
117
|
+
|
118
|
+
include Google::Apis::Core::JsonObjectSupport
|
119
|
+
end
|
120
|
+
|
121
|
+
class AuthzPolicyCustomProviderCloudIap
|
122
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
123
|
+
|
124
|
+
include Google::Apis::Core::JsonObjectSupport
|
125
|
+
end
|
126
|
+
|
127
|
+
class AuthzPolicyTarget
|
128
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
129
|
+
|
130
|
+
include Google::Apis::Core::JsonObjectSupport
|
131
|
+
end
|
132
|
+
|
43
133
|
class CancelOperationRequest
|
44
134
|
class Representation < Google::Apis::Core::JsonRepresentation; end
|
45
135
|
|
@@ -202,6 +292,12 @@ module Google
|
|
202
292
|
include Google::Apis::Core::JsonObjectSupport
|
203
293
|
end
|
204
294
|
|
295
|
+
class ListAuthzPoliciesResponse
|
296
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
297
|
+
|
298
|
+
include Google::Apis::Core::JsonObjectSupport
|
299
|
+
end
|
300
|
+
|
205
301
|
class ListClientTlsPoliciesResponse
|
206
302
|
class Representation < Google::Apis::Core::JsonRepresentation; end
|
207
303
|
|
@@ -414,6 +510,154 @@ module Google
|
|
414
510
|
end
|
415
511
|
end
|
416
512
|
|
513
|
+
class AuthzPolicy
|
514
|
+
# @private
|
515
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
516
|
+
property :action, as: 'action'
|
517
|
+
property :create_time, as: 'createTime'
|
518
|
+
property :custom_provider, as: 'customProvider', class: Google::Apis::NetworksecurityV1::AuthzPolicyCustomProvider, decorator: Google::Apis::NetworksecurityV1::AuthzPolicyCustomProvider::Representation
|
519
|
+
|
520
|
+
property :description, as: 'description'
|
521
|
+
collection :http_rules, as: 'httpRules', class: Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRule, decorator: Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRule::Representation
|
522
|
+
|
523
|
+
hash :labels, as: 'labels'
|
524
|
+
property :name, as: 'name'
|
525
|
+
property :target, as: 'target', class: Google::Apis::NetworksecurityV1::AuthzPolicyTarget, decorator: Google::Apis::NetworksecurityV1::AuthzPolicyTarget::Representation
|
526
|
+
|
527
|
+
property :update_time, as: 'updateTime'
|
528
|
+
end
|
529
|
+
end
|
530
|
+
|
531
|
+
class AuthzPolicyAuthzRule
|
532
|
+
# @private
|
533
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
534
|
+
property :from, as: 'from', class: Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleFrom, decorator: Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleFrom::Representation
|
535
|
+
|
536
|
+
property :to, as: 'to', class: Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleTo, decorator: Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleTo::Representation
|
537
|
+
|
538
|
+
property :when, as: 'when'
|
539
|
+
end
|
540
|
+
end
|
541
|
+
|
542
|
+
class AuthzPolicyAuthzRuleFrom
|
543
|
+
# @private
|
544
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
545
|
+
collection :not_sources, as: 'notSources', class: Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleFromRequestSource, decorator: Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleFromRequestSource::Representation
|
546
|
+
|
547
|
+
collection :sources, as: 'sources', class: Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleFromRequestSource, decorator: Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleFromRequestSource::Representation
|
548
|
+
|
549
|
+
end
|
550
|
+
end
|
551
|
+
|
552
|
+
class AuthzPolicyAuthzRuleFromRequestSource
|
553
|
+
# @private
|
554
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
555
|
+
collection :principals, as: 'principals', class: Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleStringMatch, decorator: Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleStringMatch::Representation
|
556
|
+
|
557
|
+
collection :resources, as: 'resources', class: Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleRequestResource, decorator: Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleRequestResource::Representation
|
558
|
+
|
559
|
+
end
|
560
|
+
end
|
561
|
+
|
562
|
+
class AuthzPolicyAuthzRuleHeaderMatch
|
563
|
+
# @private
|
564
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
565
|
+
property :name, as: 'name'
|
566
|
+
property :value, as: 'value', class: Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleStringMatch, decorator: Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleStringMatch::Representation
|
567
|
+
|
568
|
+
end
|
569
|
+
end
|
570
|
+
|
571
|
+
class AuthzPolicyAuthzRuleRequestResource
|
572
|
+
# @private
|
573
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
574
|
+
property :iam_service_account, as: 'iamServiceAccount', class: Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleStringMatch, decorator: Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleStringMatch::Representation
|
575
|
+
|
576
|
+
property :tag_value_id_set, as: 'tagValueIdSet', class: Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleRequestResourceTagValueIdSet, decorator: Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleRequestResourceTagValueIdSet::Representation
|
577
|
+
|
578
|
+
end
|
579
|
+
end
|
580
|
+
|
581
|
+
class AuthzPolicyAuthzRuleRequestResourceTagValueIdSet
|
582
|
+
# @private
|
583
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
584
|
+
collection :ids, as: 'ids'
|
585
|
+
end
|
586
|
+
end
|
587
|
+
|
588
|
+
class AuthzPolicyAuthzRuleStringMatch
|
589
|
+
# @private
|
590
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
591
|
+
property :contains, as: 'contains'
|
592
|
+
property :exact, as: 'exact'
|
593
|
+
property :ignore_case, as: 'ignoreCase'
|
594
|
+
property :prefix, as: 'prefix'
|
595
|
+
property :suffix, as: 'suffix'
|
596
|
+
end
|
597
|
+
end
|
598
|
+
|
599
|
+
class AuthzPolicyAuthzRuleTo
|
600
|
+
# @private
|
601
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
602
|
+
collection :not_operations, as: 'notOperations', class: Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleToRequestOperation, decorator: Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleToRequestOperation::Representation
|
603
|
+
|
604
|
+
collection :operations, as: 'operations', class: Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleToRequestOperation, decorator: Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleToRequestOperation::Representation
|
605
|
+
|
606
|
+
end
|
607
|
+
end
|
608
|
+
|
609
|
+
class AuthzPolicyAuthzRuleToRequestOperation
|
610
|
+
# @private
|
611
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
612
|
+
property :header_set, as: 'headerSet', class: Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleToRequestOperationHeaderSet, decorator: Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleToRequestOperationHeaderSet::Representation
|
613
|
+
|
614
|
+
collection :hosts, as: 'hosts', class: Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleStringMatch, decorator: Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleStringMatch::Representation
|
615
|
+
|
616
|
+
collection :methods_prop, as: 'methods'
|
617
|
+
collection :paths, as: 'paths', class: Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleStringMatch, decorator: Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleStringMatch::Representation
|
618
|
+
|
619
|
+
end
|
620
|
+
end
|
621
|
+
|
622
|
+
class AuthzPolicyAuthzRuleToRequestOperationHeaderSet
|
623
|
+
# @private
|
624
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
625
|
+
collection :headers, as: 'headers', class: Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleHeaderMatch, decorator: Google::Apis::NetworksecurityV1::AuthzPolicyAuthzRuleHeaderMatch::Representation
|
626
|
+
|
627
|
+
end
|
628
|
+
end
|
629
|
+
|
630
|
+
class AuthzPolicyCustomProvider
|
631
|
+
# @private
|
632
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
633
|
+
property :authz_extension, as: 'authzExtension', class: Google::Apis::NetworksecurityV1::AuthzPolicyCustomProviderAuthzExtension, decorator: Google::Apis::NetworksecurityV1::AuthzPolicyCustomProviderAuthzExtension::Representation
|
634
|
+
|
635
|
+
property :cloud_iap, as: 'cloudIap', class: Google::Apis::NetworksecurityV1::AuthzPolicyCustomProviderCloudIap, decorator: Google::Apis::NetworksecurityV1::AuthzPolicyCustomProviderCloudIap::Representation
|
636
|
+
|
637
|
+
end
|
638
|
+
end
|
639
|
+
|
640
|
+
class AuthzPolicyCustomProviderAuthzExtension
|
641
|
+
# @private
|
642
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
643
|
+
collection :resources, as: 'resources'
|
644
|
+
end
|
645
|
+
end
|
646
|
+
|
647
|
+
class AuthzPolicyCustomProviderCloudIap
|
648
|
+
# @private
|
649
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
650
|
+
end
|
651
|
+
end
|
652
|
+
|
653
|
+
class AuthzPolicyTarget
|
654
|
+
# @private
|
655
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
656
|
+
property :load_balancing_scheme, as: 'loadBalancingScheme'
|
657
|
+
collection :resources, as: 'resources'
|
658
|
+
end
|
659
|
+
end
|
660
|
+
|
417
661
|
class CancelOperationRequest
|
418
662
|
# @private
|
419
663
|
class Representation < Google::Apis::Core::JsonRepresentation
|
@@ -676,6 +920,16 @@ module Google
|
|
676
920
|
end
|
677
921
|
end
|
678
922
|
|
923
|
+
class ListAuthzPoliciesResponse
|
924
|
+
# @private
|
925
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
926
|
+
collection :authz_policies, as: 'authzPolicies', class: Google::Apis::NetworksecurityV1::AuthzPolicy, decorator: Google::Apis::NetworksecurityV1::AuthzPolicy::Representation
|
927
|
+
|
928
|
+
property :next_page_token, as: 'nextPageToken'
|
929
|
+
collection :unreachable, as: 'unreachable'
|
930
|
+
end
|
931
|
+
end
|
932
|
+
|
679
933
|
class ListClientTlsPoliciesResponse
|
680
934
|
# @private
|
681
935
|
class Representation < Google::Apis::Core::JsonRepresentation
|
@@ -2004,6 +2004,129 @@ module Google
|
|
2004
2004
|
execute_or_queue_command(command, &block)
|
2005
2005
|
end
|
2006
2006
|
|
2007
|
+
# Creates a new AuthzPolicy in a given project and location.
|
2008
|
+
# @param [String] parent
|
2009
|
+
# Required. The parent resource of the `AuthzPolicy` resource. Must be in the
|
2010
|
+
# format `projects/`project`/locations/`location``.
|
2011
|
+
# @param [Google::Apis::NetworksecurityV1::AuthzPolicy] authz_policy_object
|
2012
|
+
# @param [String] authz_policy_id
|
2013
|
+
# Required. User-provided ID of the `AuthzPolicy` resource to be created.
|
2014
|
+
# @param [String] request_id
|
2015
|
+
# Optional. An optional request ID to identify requests. Specify a unique
|
2016
|
+
# request ID so that if you must retry your request, the server can ignore the
|
2017
|
+
# request if it has already been completed. The server guarantees that for at
|
2018
|
+
# least 60 minutes since the first request. For example, consider a situation
|
2019
|
+
# where you make an initial request and the request times out. If you make the
|
2020
|
+
# request again with the same request ID, the server can check if original
|
2021
|
+
# operation with the same request ID was received, and if so, ignores the second
|
2022
|
+
# request. This prevents clients from accidentally creating duplicate
|
2023
|
+
# commitments. The request ID must be a valid UUID with the exception that zero
|
2024
|
+
# UUID is not supported (00000000-0000-0000-0000-000000000000).
|
2025
|
+
# @param [String] fields
|
2026
|
+
# Selector specifying which fields to include in a partial response.
|
2027
|
+
# @param [String] quota_user
|
2028
|
+
# Available to use for quota purposes for server-side applications. Can be any
|
2029
|
+
# arbitrary string assigned to a user, but should not exceed 40 characters.
|
2030
|
+
# @param [Google::Apis::RequestOptions] options
|
2031
|
+
# Request-specific options
|
2032
|
+
#
|
2033
|
+
# @yield [result, err] Result & error if block supplied
|
2034
|
+
# @yieldparam result [Google::Apis::NetworksecurityV1::Operation] parsed result object
|
2035
|
+
# @yieldparam err [StandardError] error object if request failed
|
2036
|
+
#
|
2037
|
+
# @return [Google::Apis::NetworksecurityV1::Operation]
|
2038
|
+
#
|
2039
|
+
# @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
|
2040
|
+
# @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
|
2041
|
+
# @raise [Google::Apis::AuthorizationError] Authorization is required
|
2042
|
+
def create_project_location_authz_policy(parent, authz_policy_object = nil, authz_policy_id: nil, request_id: nil, fields: nil, quota_user: nil, options: nil, &block)
|
2043
|
+
command = make_simple_command(:post, 'v1/{+parent}/authzPolicies', options)
|
2044
|
+
command.request_representation = Google::Apis::NetworksecurityV1::AuthzPolicy::Representation
|
2045
|
+
command.request_object = authz_policy_object
|
2046
|
+
command.response_representation = Google::Apis::NetworksecurityV1::Operation::Representation
|
2047
|
+
command.response_class = Google::Apis::NetworksecurityV1::Operation
|
2048
|
+
command.params['parent'] = parent unless parent.nil?
|
2049
|
+
command.query['authzPolicyId'] = authz_policy_id unless authz_policy_id.nil?
|
2050
|
+
command.query['requestId'] = request_id unless request_id.nil?
|
2051
|
+
command.query['fields'] = fields unless fields.nil?
|
2052
|
+
command.query['quotaUser'] = quota_user unless quota_user.nil?
|
2053
|
+
execute_or_queue_command(command, &block)
|
2054
|
+
end
|
2055
|
+
|
2056
|
+
# Deletes a single AuthzPolicy.
|
2057
|
+
# @param [String] name
|
2058
|
+
# Required. The name of the `AuthzPolicy` resource to delete. Must be in the
|
2059
|
+
# format `projects/`project`/locations/`location`/authzPolicies/`authz_policy``.
|
2060
|
+
# @param [String] request_id
|
2061
|
+
# Optional. An optional request ID to identify requests. Specify a unique
|
2062
|
+
# request ID so that if you must retry your request, the server can ignore the
|
2063
|
+
# request if it has already been completed. The server guarantees that for at
|
2064
|
+
# least 60 minutes after the first request. For example, consider a situation
|
2065
|
+
# where you make an initial request and the request times out. If you make the
|
2066
|
+
# request again with the same request ID, the server can check if original
|
2067
|
+
# operation with the same request ID was received, and if so, ignores the second
|
2068
|
+
# request. This prevents clients from accidentally creating duplicate
|
2069
|
+
# commitments. The request ID must be a valid UUID with the exception that zero
|
2070
|
+
# UUID is not supported (00000000-0000-0000-0000-000000000000).
|
2071
|
+
# @param [String] fields
|
2072
|
+
# Selector specifying which fields to include in a partial response.
|
2073
|
+
# @param [String] quota_user
|
2074
|
+
# Available to use for quota purposes for server-side applications. Can be any
|
2075
|
+
# arbitrary string assigned to a user, but should not exceed 40 characters.
|
2076
|
+
# @param [Google::Apis::RequestOptions] options
|
2077
|
+
# Request-specific options
|
2078
|
+
#
|
2079
|
+
# @yield [result, err] Result & error if block supplied
|
2080
|
+
# @yieldparam result [Google::Apis::NetworksecurityV1::Operation] parsed result object
|
2081
|
+
# @yieldparam err [StandardError] error object if request failed
|
2082
|
+
#
|
2083
|
+
# @return [Google::Apis::NetworksecurityV1::Operation]
|
2084
|
+
#
|
2085
|
+
# @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
|
2086
|
+
# @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
|
2087
|
+
# @raise [Google::Apis::AuthorizationError] Authorization is required
|
2088
|
+
def delete_project_location_authz_policy(name, request_id: nil, fields: nil, quota_user: nil, options: nil, &block)
|
2089
|
+
command = make_simple_command(:delete, 'v1/{+name}', options)
|
2090
|
+
command.response_representation = Google::Apis::NetworksecurityV1::Operation::Representation
|
2091
|
+
command.response_class = Google::Apis::NetworksecurityV1::Operation
|
2092
|
+
command.params['name'] = name unless name.nil?
|
2093
|
+
command.query['requestId'] = request_id unless request_id.nil?
|
2094
|
+
command.query['fields'] = fields unless fields.nil?
|
2095
|
+
command.query['quotaUser'] = quota_user unless quota_user.nil?
|
2096
|
+
execute_or_queue_command(command, &block)
|
2097
|
+
end
|
2098
|
+
|
2099
|
+
# Gets details of a single AuthzPolicy.
|
2100
|
+
# @param [String] name
|
2101
|
+
# Required. A name of the `AuthzPolicy` resource to get. Must be in the format `
|
2102
|
+
# projects/`project`/locations/`location`/authzPolicies/`authz_policy``.
|
2103
|
+
# @param [String] fields
|
2104
|
+
# Selector specifying which fields to include in a partial response.
|
2105
|
+
# @param [String] quota_user
|
2106
|
+
# Available to use for quota purposes for server-side applications. Can be any
|
2107
|
+
# arbitrary string assigned to a user, but should not exceed 40 characters.
|
2108
|
+
# @param [Google::Apis::RequestOptions] options
|
2109
|
+
# Request-specific options
|
2110
|
+
#
|
2111
|
+
# @yield [result, err] Result & error if block supplied
|
2112
|
+
# @yieldparam result [Google::Apis::NetworksecurityV1::AuthzPolicy] parsed result object
|
2113
|
+
# @yieldparam err [StandardError] error object if request failed
|
2114
|
+
#
|
2115
|
+
# @return [Google::Apis::NetworksecurityV1::AuthzPolicy]
|
2116
|
+
#
|
2117
|
+
# @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
|
2118
|
+
# @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
|
2119
|
+
# @raise [Google::Apis::AuthorizationError] Authorization is required
|
2120
|
+
def get_project_location_authz_policy(name, fields: nil, quota_user: nil, options: nil, &block)
|
2121
|
+
command = make_simple_command(:get, 'v1/{+name}', options)
|
2122
|
+
command.response_representation = Google::Apis::NetworksecurityV1::AuthzPolicy::Representation
|
2123
|
+
command.response_class = Google::Apis::NetworksecurityV1::AuthzPolicy
|
2124
|
+
command.params['name'] = name unless name.nil?
|
2125
|
+
command.query['fields'] = fields unless fields.nil?
|
2126
|
+
command.query['quotaUser'] = quota_user unless quota_user.nil?
|
2127
|
+
execute_or_queue_command(command, &block)
|
2128
|
+
end
|
2129
|
+
|
2007
2130
|
# Gets the access control policy for a resource. Returns an empty policy if the
|
2008
2131
|
# resource exists and does not have a policy set.
|
2009
2132
|
# @param [String] resource
|
@@ -2049,6 +2172,103 @@ module Google
|
|
2049
2172
|
execute_or_queue_command(command, &block)
|
2050
2173
|
end
|
2051
2174
|
|
2175
|
+
# Lists AuthzPolicies in a given project and location.
|
2176
|
+
# @param [String] parent
|
2177
|
+
# Required. The project and location from which the `AuthzPolicy` resources are
|
2178
|
+
# listed, specified in the following format: `projects/`project`/locations/`
|
2179
|
+
# location``.
|
2180
|
+
# @param [String] filter
|
2181
|
+
# Optional. Filtering results.
|
2182
|
+
# @param [String] order_by
|
2183
|
+
# Optional. Hint for how to order the results.
|
2184
|
+
# @param [Fixnum] page_size
|
2185
|
+
# Optional. Requested page size. The server might return fewer items than
|
2186
|
+
# requested. If unspecified, the server picks an appropriate default.
|
2187
|
+
# @param [String] page_token
|
2188
|
+
# Optional. A token identifying a page of results that the server returns.
|
2189
|
+
# @param [String] fields
|
2190
|
+
# Selector specifying which fields to include in a partial response.
|
2191
|
+
# @param [String] quota_user
|
2192
|
+
# Available to use for quota purposes for server-side applications. Can be any
|
2193
|
+
# arbitrary string assigned to a user, but should not exceed 40 characters.
|
2194
|
+
# @param [Google::Apis::RequestOptions] options
|
2195
|
+
# Request-specific options
|
2196
|
+
#
|
2197
|
+
# @yield [result, err] Result & error if block supplied
|
2198
|
+
# @yieldparam result [Google::Apis::NetworksecurityV1::ListAuthzPoliciesResponse] parsed result object
|
2199
|
+
# @yieldparam err [StandardError] error object if request failed
|
2200
|
+
#
|
2201
|
+
# @return [Google::Apis::NetworksecurityV1::ListAuthzPoliciesResponse]
|
2202
|
+
#
|
2203
|
+
# @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
|
2204
|
+
# @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
|
2205
|
+
# @raise [Google::Apis::AuthorizationError] Authorization is required
|
2206
|
+
def list_project_location_authz_policies(parent, filter: nil, order_by: nil, page_size: nil, page_token: nil, fields: nil, quota_user: nil, options: nil, &block)
|
2207
|
+
command = make_simple_command(:get, 'v1/{+parent}/authzPolicies', options)
|
2208
|
+
command.response_representation = Google::Apis::NetworksecurityV1::ListAuthzPoliciesResponse::Representation
|
2209
|
+
command.response_class = Google::Apis::NetworksecurityV1::ListAuthzPoliciesResponse
|
2210
|
+
command.params['parent'] = parent unless parent.nil?
|
2211
|
+
command.query['filter'] = filter unless filter.nil?
|
2212
|
+
command.query['orderBy'] = order_by unless order_by.nil?
|
2213
|
+
command.query['pageSize'] = page_size unless page_size.nil?
|
2214
|
+
command.query['pageToken'] = page_token unless page_token.nil?
|
2215
|
+
command.query['fields'] = fields unless fields.nil?
|
2216
|
+
command.query['quotaUser'] = quota_user unless quota_user.nil?
|
2217
|
+
execute_or_queue_command(command, &block)
|
2218
|
+
end
|
2219
|
+
|
2220
|
+
# Updates the parameters of a single AuthzPolicy.
|
2221
|
+
# @param [String] name
|
2222
|
+
# Required. Identifier. Name of the `AuthzPolicy` resource in the following
|
2223
|
+
# format: `projects/`project`/locations/`location`/authzPolicies/`authz_policy``.
|
2224
|
+
# @param [Google::Apis::NetworksecurityV1::AuthzPolicy] authz_policy_object
|
2225
|
+
# @param [String] request_id
|
2226
|
+
# Optional. An optional request ID to identify requests. Specify a unique
|
2227
|
+
# request ID so that if you must retry your request, the server can ignore the
|
2228
|
+
# request if it has already been completed. The server guarantees that for at
|
2229
|
+
# least 60 minutes since the first request. For example, consider a situation
|
2230
|
+
# where you make an initial request and the request times out. If you make the
|
2231
|
+
# request again with the same request ID, the server can check if original
|
2232
|
+
# operation with the same request ID was received, and if so, ignores the second
|
2233
|
+
# request. This prevents clients from accidentally creating duplicate
|
2234
|
+
# commitments. The request ID must be a valid UUID with the exception that zero
|
2235
|
+
# UUID is not supported (00000000-0000-0000-0000-000000000000).
|
2236
|
+
# @param [String] update_mask
|
2237
|
+
# Required. Used to specify the fields to be overwritten in the `AuthzPolicy`
|
2238
|
+
# resource by the update. The fields specified in the `update_mask` are relative
|
2239
|
+
# to the resource, not the full request. A field is overwritten if it is in the
|
2240
|
+
# mask. If the user does not specify a mask, then all fields are overwritten.
|
2241
|
+
# @param [String] fields
|
2242
|
+
# Selector specifying which fields to include in a partial response.
|
2243
|
+
# @param [String] quota_user
|
2244
|
+
# Available to use for quota purposes for server-side applications. Can be any
|
2245
|
+
# arbitrary string assigned to a user, but should not exceed 40 characters.
|
2246
|
+
# @param [Google::Apis::RequestOptions] options
|
2247
|
+
# Request-specific options
|
2248
|
+
#
|
2249
|
+
# @yield [result, err] Result & error if block supplied
|
2250
|
+
# @yieldparam result [Google::Apis::NetworksecurityV1::Operation] parsed result object
|
2251
|
+
# @yieldparam err [StandardError] error object if request failed
|
2252
|
+
#
|
2253
|
+
# @return [Google::Apis::NetworksecurityV1::Operation]
|
2254
|
+
#
|
2255
|
+
# @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
|
2256
|
+
# @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
|
2257
|
+
# @raise [Google::Apis::AuthorizationError] Authorization is required
|
2258
|
+
def patch_project_location_authz_policy(name, authz_policy_object = nil, request_id: nil, update_mask: nil, fields: nil, quota_user: nil, options: nil, &block)
|
2259
|
+
command = make_simple_command(:patch, 'v1/{+name}', options)
|
2260
|
+
command.request_representation = Google::Apis::NetworksecurityV1::AuthzPolicy::Representation
|
2261
|
+
command.request_object = authz_policy_object
|
2262
|
+
command.response_representation = Google::Apis::NetworksecurityV1::Operation::Representation
|
2263
|
+
command.response_class = Google::Apis::NetworksecurityV1::Operation
|
2264
|
+
command.params['name'] = name unless name.nil?
|
2265
|
+
command.query['requestId'] = request_id unless request_id.nil?
|
2266
|
+
command.query['updateMask'] = update_mask unless update_mask.nil?
|
2267
|
+
command.query['fields'] = fields unless fields.nil?
|
2268
|
+
command.query['quotaUser'] = quota_user unless quota_user.nil?
|
2269
|
+
execute_or_queue_command(command, &block)
|
2270
|
+
end
|
2271
|
+
|
2052
2272
|
# Sets the access control policy on the specified resource. Replaces any
|
2053
2273
|
# existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `
|
2054
2274
|
# PERMISSION_DENIED` errors.
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: google-apis-networksecurity_v1
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.
|
4
|
+
version: 0.31.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Google LLC
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2024-
|
11
|
+
date: 2024-12-04 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: google-apis-core
|
@@ -58,7 +58,7 @@ licenses:
|
|
58
58
|
metadata:
|
59
59
|
bug_tracker_uri: https://github.com/googleapis/google-api-ruby-client/issues
|
60
60
|
changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-networksecurity_v1/CHANGELOG.md
|
61
|
-
documentation_uri: https://googleapis.dev/ruby/google-apis-networksecurity_v1/v0.
|
61
|
+
documentation_uri: https://googleapis.dev/ruby/google-apis-networksecurity_v1/v0.31.0
|
62
62
|
source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-networksecurity_v1
|
63
63
|
post_install_message:
|
64
64
|
rdoc_options: []
|
@@ -75,7 +75,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
75
75
|
- !ruby/object:Gem::Version
|
76
76
|
version: '0'
|
77
77
|
requirements: []
|
78
|
-
rubygems_version: 3.5.
|
78
|
+
rubygems_version: 3.5.22
|
79
79
|
signing_key:
|
80
80
|
specification_version: 4
|
81
81
|
summary: Simple REST client for Network Security API V1
|