google-apis-policysimulator_v1 0.25.0 → 0.27.0

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 5dc96ef6cc92ee3488023a3155555af14fd9fc04725baf34e3bc5192b984449e
4
- data.tar.gz: 6bd2f68512374d81161b2b166c7e8ae4bccefd06fb09dd4d51f8fa005d22dcb9
3
+ metadata.gz: 7b54260017ab741c18da617ade41247ae8b26d770167b9e9a0d36b691df54d28
4
+ data.tar.gz: fb902cf74ef4aac84dfb1204c9300af1b0ab4ea836112a2f92790b953b9b8377
5
5
  SHA512:
6
- metadata.gz: 158e8e747703ae03adb6180cbdff221c4b164473bfcb518819b6a772eaf637b527ff1630425f683012157b92a19cff4c6eadc0d8eb52ce5769872656e136b7fa
7
- data.tar.gz: c2d054b8b8509bb7a7a2911a104f9edce6ede345e4487cfabef2dddf2bd4b6f05fcaddd2294c51375f3a09bf5106c4bf19b391667604a69c49d94f21d7596495
6
+ metadata.gz: 549200bc42e2c369af075480bd9c80b77f14e0b531d39b06b911698d11850df344f988f49bd3a2ea7f770fe35a381983e72266be3a05d03df7db277c58990c83
7
+ data.tar.gz: fb18a535fec33bc487ce85018538d9cb7df2c0c5b19abd05b6e3d095b6ba3ea4153952093ebb380666d56cbfcea9b4c5a76b6daa7a5bf3a94ccd8d1a06c3cf29
data/CHANGELOG.md CHANGED
@@ -1,5 +1,13 @@
1
1
  # Release history for google-apis-policysimulator_v1
2
2
 
3
+ ### v0.27.0 (2023-08-13)
4
+
5
+ * Regenerated from discovery document revision 20230806
6
+
7
+ ### v0.26.0 (2023-08-03)
8
+
9
+ * Regenerated from discovery document revision 20230723
10
+
3
11
  ### v0.25.0 (2023-04-02)
4
12
 
5
13
  * Regenerated from discovery document revision 20230326
@@ -22,6 +22,331 @@ module Google
22
22
  module Apis
23
23
  module PolicysimulatorV1
24
24
 
25
+ # Similar to PolicySpec but with an extra 'launch' field for launch reference.
26
+ # The PolicySpec here is specific for dry-run/darklaunch.
27
+ class GoogleCloudOrgpolicyV2AlternatePolicySpec
28
+ include Google::Apis::Core::Hashable
29
+
30
+ # Reference to the launch that will be used while audit logging and to control
31
+ # the launch. Should be set only in the alternate policy.
32
+ # Corresponds to the JSON property `launch`
33
+ # @return [String]
34
+ attr_accessor :launch
35
+
36
+ # Defines a Google Cloud policy specification which is used to specify
37
+ # constraints for configurations of Google Cloud resources.
38
+ # Corresponds to the JSON property `spec`
39
+ # @return [Google::Apis::PolicysimulatorV1::GoogleCloudOrgpolicyV2PolicySpec]
40
+ attr_accessor :spec
41
+
42
+ def initialize(**args)
43
+ update!(**args)
44
+ end
45
+
46
+ # Update properties of this object
47
+ def update!(**args)
48
+ @launch = args[:launch] if args.key?(:launch)
49
+ @spec = args[:spec] if args.key?(:spec)
50
+ end
51
+ end
52
+
53
+ # A custom constraint defined by customers which can *only* be applied to the
54
+ # given resource types and organization. By creating a custom constraint,
55
+ # customers can apply policies of this custom constraint. *Creating a custom
56
+ # constraint itself does NOT apply any policy enforcement*.
57
+ class GoogleCloudOrgpolicyV2CustomConstraint
58
+ include Google::Apis::Core::Hashable
59
+
60
+ # Allow or deny type.
61
+ # Corresponds to the JSON property `actionType`
62
+ # @return [String]
63
+ attr_accessor :action_type
64
+
65
+ # Org policy condition/expression. For example: `resource.instanceName.matches("[
66
+ # production|test]_.*_(\d)+")` or, `resource.management.auto_upgrade == true`
67
+ # The max length of the condition is 1000 characters.
68
+ # Corresponds to the JSON property `condition`
69
+ # @return [String]
70
+ attr_accessor :condition
71
+
72
+ # Detailed information about this custom policy constraint. The max length of
73
+ # the description is 2000 characters.
74
+ # Corresponds to the JSON property `description`
75
+ # @return [String]
76
+ attr_accessor :description
77
+
78
+ # One line display name for the UI. The max length of the display_name is 200
79
+ # characters.
80
+ # Corresponds to the JSON property `displayName`
81
+ # @return [String]
82
+ attr_accessor :display_name
83
+
84
+ # All the operations being applied for this constraint.
85
+ # Corresponds to the JSON property `methodTypes`
86
+ # @return [Array<String>]
87
+ attr_accessor :method_types
88
+
89
+ # Immutable. Name of the constraint. This is unique within the organization.
90
+ # Format of the name should be * `organizations/`organization_id`/
91
+ # customConstraints/`custom_constraint_id`` Example: `organizations/123/
92
+ # customConstraints/custom.createOnlyE2TypeVms` The max length is 70 characters
93
+ # and the minimum length is 1. Note that the prefix `organizations/`
94
+ # organization_id`/customConstraints/` is not counted.
95
+ # Corresponds to the JSON property `name`
96
+ # @return [String]
97
+ attr_accessor :name
98
+
99
+ # Immutable. The resource instance type on which this policy applies. Format
100
+ # will be of the form : `/` Example: * `compute.googleapis.com/Instance`.
101
+ # Corresponds to the JSON property `resourceTypes`
102
+ # @return [Array<String>]
103
+ attr_accessor :resource_types
104
+
105
+ # Output only. The last time this custom constraint was updated. This represents
106
+ # the last time that the `CreateCustomConstraint` or `UpdateCustomConstraint`
107
+ # RPC was called
108
+ # Corresponds to the JSON property `updateTime`
109
+ # @return [String]
110
+ attr_accessor :update_time
111
+
112
+ def initialize(**args)
113
+ update!(**args)
114
+ end
115
+
116
+ # Update properties of this object
117
+ def update!(**args)
118
+ @action_type = args[:action_type] if args.key?(:action_type)
119
+ @condition = args[:condition] if args.key?(:condition)
120
+ @description = args[:description] if args.key?(:description)
121
+ @display_name = args[:display_name] if args.key?(:display_name)
122
+ @method_types = args[:method_types] if args.key?(:method_types)
123
+ @name = args[:name] if args.key?(:name)
124
+ @resource_types = args[:resource_types] if args.key?(:resource_types)
125
+ @update_time = args[:update_time] if args.key?(:update_time)
126
+ end
127
+ end
128
+
129
+ # Defines an organization policy which is used to specify constraints for
130
+ # configurations of Google Cloud resources.
131
+ class GoogleCloudOrgpolicyV2Policy
132
+ include Google::Apis::Core::Hashable
133
+
134
+ # Similar to PolicySpec but with an extra 'launch' field for launch reference.
135
+ # The PolicySpec here is specific for dry-run/darklaunch.
136
+ # Corresponds to the JSON property `alternate`
137
+ # @return [Google::Apis::PolicysimulatorV1::GoogleCloudOrgpolicyV2AlternatePolicySpec]
138
+ attr_accessor :alternate
139
+
140
+ # Defines a Google Cloud policy specification which is used to specify
141
+ # constraints for configurations of Google Cloud resources.
142
+ # Corresponds to the JSON property `dryRunSpec`
143
+ # @return [Google::Apis::PolicysimulatorV1::GoogleCloudOrgpolicyV2PolicySpec]
144
+ attr_accessor :dry_run_spec
145
+
146
+ # Immutable. The resource name of the policy. Must be one of the following forms,
147
+ # where `constraint_name` is the name of the constraint which this policy
148
+ # configures: * `projects/`project_number`/policies/`constraint_name`` * `
149
+ # folders/`folder_id`/policies/`constraint_name`` * `organizations/`
150
+ # organization_id`/policies/`constraint_name`` For example, `projects/123/
151
+ # policies/compute.disableSerialPortAccess`. Note: `projects/`project_id`/
152
+ # policies/`constraint_name`` is also an acceptable name for API requests, but
153
+ # responses will return the name using the equivalent project number.
154
+ # Corresponds to the JSON property `name`
155
+ # @return [String]
156
+ attr_accessor :name
157
+
158
+ # Defines a Google Cloud policy specification which is used to specify
159
+ # constraints for configurations of Google Cloud resources.
160
+ # Corresponds to the JSON property `spec`
161
+ # @return [Google::Apis::PolicysimulatorV1::GoogleCloudOrgpolicyV2PolicySpec]
162
+ attr_accessor :spec
163
+
164
+ def initialize(**args)
165
+ update!(**args)
166
+ end
167
+
168
+ # Update properties of this object
169
+ def update!(**args)
170
+ @alternate = args[:alternate] if args.key?(:alternate)
171
+ @dry_run_spec = args[:dry_run_spec] if args.key?(:dry_run_spec)
172
+ @name = args[:name] if args.key?(:name)
173
+ @spec = args[:spec] if args.key?(:spec)
174
+ end
175
+ end
176
+
177
+ # Defines a Google Cloud policy specification which is used to specify
178
+ # constraints for configurations of Google Cloud resources.
179
+ class GoogleCloudOrgpolicyV2PolicySpec
180
+ include Google::Apis::Core::Hashable
181
+
182
+ # An opaque tag indicating the current version of the policy, used for
183
+ # concurrency control. This field is ignored if used in a `CreatePolicy` request.
184
+ # When the policy` is returned from either a `GetPolicy` or a `ListPolicies`
185
+ # request, this `etag` indicates the version of the current policy to use when
186
+ # executing a read-modify-write loop. When the policy is returned from a `
187
+ # GetEffectivePolicy` request, the `etag` will be unset.
188
+ # Corresponds to the JSON property `etag`
189
+ # @return [String]
190
+ attr_accessor :etag
191
+
192
+ # Determines the inheritance behavior for this policy. If `inherit_from_parent`
193
+ # is true, policy rules set higher up in the hierarchy (up to the closest root)
194
+ # are inherited and present in the effective policy. If it is false, then no
195
+ # rules are inherited, and this policy becomes the new root for evaluation. This
196
+ # field can be set only for policies which configure list constraints.
197
+ # Corresponds to the JSON property `inheritFromParent`
198
+ # @return [Boolean]
199
+ attr_accessor :inherit_from_parent
200
+ alias_method :inherit_from_parent?, :inherit_from_parent
201
+
202
+ # Ignores policies set above this resource and restores the `constraint_default`
203
+ # enforcement behavior of the specific constraint at this resource. This field
204
+ # can be set in policies for either list or boolean constraints. If set, `rules`
205
+ # must be empty and `inherit_from_parent` must be set to false.
206
+ # Corresponds to the JSON property `reset`
207
+ # @return [Boolean]
208
+ attr_accessor :reset
209
+ alias_method :reset?, :reset
210
+
211
+ # In policies for boolean constraints, the following requirements apply: - There
212
+ # must be one and only one policy rule where condition is unset. - Boolean
213
+ # policy rules with conditions must set `enforced` to the opposite of the policy
214
+ # rule without a condition. - During policy evaluation, policy rules with
215
+ # conditions that are true for a target resource take precedence.
216
+ # Corresponds to the JSON property `rules`
217
+ # @return [Array<Google::Apis::PolicysimulatorV1::GoogleCloudOrgpolicyV2PolicySpecPolicyRule>]
218
+ attr_accessor :rules
219
+
220
+ # Output only. The time stamp this was previously updated. This represents the
221
+ # last time a call to `CreatePolicy` or `UpdatePolicy` was made for that policy.
222
+ # Corresponds to the JSON property `updateTime`
223
+ # @return [String]
224
+ attr_accessor :update_time
225
+
226
+ def initialize(**args)
227
+ update!(**args)
228
+ end
229
+
230
+ # Update properties of this object
231
+ def update!(**args)
232
+ @etag = args[:etag] if args.key?(:etag)
233
+ @inherit_from_parent = args[:inherit_from_parent] if args.key?(:inherit_from_parent)
234
+ @reset = args[:reset] if args.key?(:reset)
235
+ @rules = args[:rules] if args.key?(:rules)
236
+ @update_time = args[:update_time] if args.key?(:update_time)
237
+ end
238
+ end
239
+
240
+ # A rule used to express this policy.
241
+ class GoogleCloudOrgpolicyV2PolicySpecPolicyRule
242
+ include Google::Apis::Core::Hashable
243
+
244
+ # Setting this to true means that all values are allowed. This field can be set
245
+ # only in policies for list constraints.
246
+ # Corresponds to the JSON property `allowAll`
247
+ # @return [Boolean]
248
+ attr_accessor :allow_all
249
+ alias_method :allow_all?, :allow_all
250
+
251
+ # Represents a textual expression in the Common Expression Language (CEL) syntax.
252
+ # CEL is a C-like expression language. The syntax and semantics of CEL are
253
+ # documented at https://github.com/google/cel-spec. Example (Comparison): title:
254
+ # "Summary size limit" description: "Determines if a summary is less than 100
255
+ # chars" expression: "document.summary.size() < 100" Example (Equality): title: "
256
+ # Requestor is owner" description: "Determines if requestor is the document
257
+ # owner" expression: "document.owner == request.auth.claims.email" Example (
258
+ # Logic): title: "Public documents" description: "Determine whether the document
259
+ # should be publicly visible" expression: "document.type != 'private' &&
260
+ # document.type != 'internal'" Example (Data Manipulation): title: "Notification
261
+ # string" description: "Create a notification string with a timestamp."
262
+ # expression: "'New message received at ' + string(document.create_time)" The
263
+ # exact variables and functions that may be referenced within an expression are
264
+ # determined by the service that evaluates it. See the service documentation for
265
+ # additional information.
266
+ # Corresponds to the JSON property `condition`
267
+ # @return [Google::Apis::PolicysimulatorV1::GoogleTypeExpr]
268
+ attr_accessor :condition
269
+
270
+ # Setting this to true means that all values are denied. This field can be set
271
+ # only in policies for list constraints.
272
+ # Corresponds to the JSON property `denyAll`
273
+ # @return [Boolean]
274
+ attr_accessor :deny_all
275
+ alias_method :deny_all?, :deny_all
276
+
277
+ # If `true`, then the policy is enforced. If `false`, then any configuration is
278
+ # acceptable. This field can be set only in policies for boolean constraints.
279
+ # Corresponds to the JSON property `enforce`
280
+ # @return [Boolean]
281
+ attr_accessor :enforce
282
+ alias_method :enforce?, :enforce
283
+
284
+ # A message that holds specific allowed and denied values. This message can
285
+ # define specific values and subtrees of the Resource Manager resource hierarchy
286
+ # (`Organizations`, `Folders`, `Projects`) that are allowed or denied. This is
287
+ # achieved by using the `under:` and optional `is:` prefixes. The `under:`
288
+ # prefix is used to denote resource subtree values. The `is:` prefix is used to
289
+ # denote specific values, and is required only if the value contains a ":".
290
+ # Values prefixed with "is:" are treated the same as values with no prefix.
291
+ # Ancestry subtrees must be in one of the following formats: - `projects/` (for
292
+ # example, `projects/tokyo-rain-123`) - `folders/` (for example, `folders/1234`)
293
+ # - `organizations/` (for example, `organizations/1234`) The `supports_under`
294
+ # field of the associated `Constraint` defines whether ancestry prefixes can be
295
+ # used.
296
+ # Corresponds to the JSON property `values`
297
+ # @return [Google::Apis::PolicysimulatorV1::GoogleCloudOrgpolicyV2PolicySpecPolicyRuleStringValues]
298
+ attr_accessor :values
299
+
300
+ def initialize(**args)
301
+ update!(**args)
302
+ end
303
+
304
+ # Update properties of this object
305
+ def update!(**args)
306
+ @allow_all = args[:allow_all] if args.key?(:allow_all)
307
+ @condition = args[:condition] if args.key?(:condition)
308
+ @deny_all = args[:deny_all] if args.key?(:deny_all)
309
+ @enforce = args[:enforce] if args.key?(:enforce)
310
+ @values = args[:values] if args.key?(:values)
311
+ end
312
+ end
313
+
314
+ # A message that holds specific allowed and denied values. This message can
315
+ # define specific values and subtrees of the Resource Manager resource hierarchy
316
+ # (`Organizations`, `Folders`, `Projects`) that are allowed or denied. This is
317
+ # achieved by using the `under:` and optional `is:` prefixes. The `under:`
318
+ # prefix is used to denote resource subtree values. The `is:` prefix is used to
319
+ # denote specific values, and is required only if the value contains a ":".
320
+ # Values prefixed with "is:" are treated the same as values with no prefix.
321
+ # Ancestry subtrees must be in one of the following formats: - `projects/` (for
322
+ # example, `projects/tokyo-rain-123`) - `folders/` (for example, `folders/1234`)
323
+ # - `organizations/` (for example, `organizations/1234`) The `supports_under`
324
+ # field of the associated `Constraint` defines whether ancestry prefixes can be
325
+ # used.
326
+ class GoogleCloudOrgpolicyV2PolicySpecPolicyRuleStringValues
327
+ include Google::Apis::Core::Hashable
328
+
329
+ # List of values allowed at this resource.
330
+ # Corresponds to the JSON property `allowedValues`
331
+ # @return [Array<String>]
332
+ attr_accessor :allowed_values
333
+
334
+ # List of values denied at this resource.
335
+ # Corresponds to the JSON property `deniedValues`
336
+ # @return [Array<String>]
337
+ attr_accessor :denied_values
338
+
339
+ def initialize(**args)
340
+ update!(**args)
341
+ end
342
+
343
+ # Update properties of this object
344
+ def update!(**args)
345
+ @allowed_values = args[:allowed_values] if args.key?(:allowed_values)
346
+ @denied_values = args[:denied_values] if args.key?(:denied_values)
347
+ end
348
+ end
349
+
25
350
  # A summary and comparison of the principal's access under the current (baseline)
26
351
  # policies and the proposed (simulated) policies for a single access tuple.
27
352
  class GoogleCloudPolicysimulatorV1AccessStateDiff
@@ -295,22 +620,22 @@ module Google
295
620
  # evaluates to `true`. A condition can add constraints based on attributes of
296
621
  # the request, the resource, or both. To learn which resources support
297
622
  # conditions in their IAM policies, see the [IAM documentation](https://cloud.
298
- # google.com/iam/help/conditions/resource-policies). **JSON example:** ` "
623
+ # google.com/iam/help/conditions/resource-policies). **JSON example:** ``` ` "
299
624
  # bindings": [ ` "role": "roles/resourcemanager.organizationAdmin", "members": [
300
625
  # "user:mike@example.com", "group:admins@example.com", "domain:google.com", "
301
626
  # serviceAccount:my-project-id@appspot.gserviceaccount.com" ] `, ` "role": "
302
627
  # roles/resourcemanager.organizationViewer", "members": [ "user:eve@example.com"
303
628
  # ], "condition": ` "title": "expirable access", "description": "Does not grant
304
629
  # access after Sep 2020", "expression": "request.time < timestamp('2020-10-01T00:
305
- # 00:00.000Z')", ` ` ], "etag": "BwWWja0YfJA=", "version": 3 ` **YAML example:**
306
- # bindings: - members: - user:mike@example.com - group:admins@example.com -
307
- # domain:google.com - serviceAccount:my-project-id@appspot.gserviceaccount.com
308
- # role: roles/resourcemanager.organizationAdmin - members: - user:eve@example.
309
- # com role: roles/resourcemanager.organizationViewer condition: title: expirable
310
- # access description: Does not grant access after Sep 2020 expression: request.
311
- # time < timestamp('2020-10-01T00:00:00.000Z') etag: BwWWja0YfJA= version: 3 For
312
- # a description of IAM and its features, see the [IAM documentation](https://
313
- # cloud.google.com/iam/docs/).
630
+ # 00:00.000Z')", ` ` ], "etag": "BwWWja0YfJA=", "version": 3 ` ``` **YAML
631
+ # example:** ``` bindings: - members: - user:mike@example.com - group:admins@
632
+ # example.com - domain:google.com - serviceAccount:my-project-id@appspot.
633
+ # gserviceaccount.com role: roles/resourcemanager.organizationAdmin - members: -
634
+ # user:eve@example.com role: roles/resourcemanager.organizationViewer condition:
635
+ # title: expirable access description: Does not grant access after Sep 2020
636
+ # expression: request.time < timestamp('2020-10-01T00:00:00.000Z') etag:
637
+ # BwWWja0YfJA= version: 3 ``` For a description of IAM and its features, see the
638
+ # [IAM documentation](https://cloud.google.com/iam/docs/).
314
639
  # Corresponds to the JSON property `policy`
315
640
  # @return [Google::Apis::PolicysimulatorV1::GoogleIamV1Policy]
316
641
  attr_accessor :policy
@@ -612,6 +937,484 @@ module Google
612
937
  end
613
938
  end
614
939
 
940
+ # GenerateOrgPolicyViolationsPreviewOperationMetadata is metadata about an
941
+ # OrgPolicyViolationsPreview generations operation.
942
+ class GoogleCloudPolicysimulatorV1alphaGenerateOrgPolicyViolationsPreviewOperationMetadata
943
+ include Google::Apis::Core::Hashable
944
+
945
+ # Time when the request was received.
946
+ # Corresponds to the JSON property `requestTime`
947
+ # @return [String]
948
+ attr_accessor :request_time
949
+
950
+ # Total number of resources that need scanning. Should equal resource_scanned +
951
+ # resources_pending
952
+ # Corresponds to the JSON property `resourcesFound`
953
+ # @return [Fixnum]
954
+ attr_accessor :resources_found
955
+
956
+ # Number of resources still to scan.
957
+ # Corresponds to the JSON property `resourcesPending`
958
+ # @return [Fixnum]
959
+ attr_accessor :resources_pending
960
+
961
+ # Number of resources already scanned.
962
+ # Corresponds to the JSON property `resourcesScanned`
963
+ # @return [Fixnum]
964
+ attr_accessor :resources_scanned
965
+
966
+ # Time when the request started processing, i.e. when the state was set to
967
+ # RUNNING.
968
+ # Corresponds to the JSON property `startTime`
969
+ # @return [String]
970
+ attr_accessor :start_time
971
+
972
+ # The current state of the operation.
973
+ # Corresponds to the JSON property `state`
974
+ # @return [String]
975
+ attr_accessor :state
976
+
977
+ def initialize(**args)
978
+ update!(**args)
979
+ end
980
+
981
+ # Update properties of this object
982
+ def update!(**args)
983
+ @request_time = args[:request_time] if args.key?(:request_time)
984
+ @resources_found = args[:resources_found] if args.key?(:resources_found)
985
+ @resources_pending = args[:resources_pending] if args.key?(:resources_pending)
986
+ @resources_scanned = args[:resources_scanned] if args.key?(:resources_scanned)
987
+ @start_time = args[:start_time] if args.key?(:start_time)
988
+ @state = args[:state] if args.key?(:state)
989
+ end
990
+ end
991
+
992
+ # The proposed changes to OrgPolicy.
993
+ class GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlay
994
+ include Google::Apis::Core::Hashable
995
+
996
+ # The OrgPolicy CustomConstraint changes to preview violations for. Any existing
997
+ # CustomConstraints with the same name will be overridden in the simulation.
998
+ # That is, violations will be determined as if all custom constraints in the
999
+ # overlay were instantiated.
1000
+ # Corresponds to the JSON property `customConstraints`
1001
+ # @return [Array<Google::Apis::PolicysimulatorV1::GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlayCustomConstraintOverlay>]
1002
+ attr_accessor :custom_constraints
1003
+
1004
+ # The OrgPolicy changes to preview violations for. Any existing OrgPolicies with
1005
+ # the same name will be overridden in the simulation. That is, violations will
1006
+ # be determined as if all policies in the overlay were created or updated.
1007
+ # Corresponds to the JSON property `policies`
1008
+ # @return [Array<Google::Apis::PolicysimulatorV1::GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlayPolicyOverlay>]
1009
+ attr_accessor :policies
1010
+
1011
+ def initialize(**args)
1012
+ update!(**args)
1013
+ end
1014
+
1015
+ # Update properties of this object
1016
+ def update!(**args)
1017
+ @custom_constraints = args[:custom_constraints] if args.key?(:custom_constraints)
1018
+ @policies = args[:policies] if args.key?(:policies)
1019
+ end
1020
+ end
1021
+
1022
+ # A change to an OrgPolicy custom constraint.
1023
+ class GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlayCustomConstraintOverlay
1024
+ include Google::Apis::Core::Hashable
1025
+
1026
+ # A custom constraint defined by customers which can *only* be applied to the
1027
+ # given resource types and organization. By creating a custom constraint,
1028
+ # customers can apply policies of this custom constraint. *Creating a custom
1029
+ # constraint itself does NOT apply any policy enforcement*.
1030
+ # Corresponds to the JSON property `customConstraint`
1031
+ # @return [Google::Apis::PolicysimulatorV1::GoogleCloudOrgpolicyV2CustomConstraint]
1032
+ attr_accessor :custom_constraint
1033
+
1034
+ # Resource the constraint is attached to. Example: "organization/987654"
1035
+ # Corresponds to the JSON property `customConstraintParent`
1036
+ # @return [String]
1037
+ attr_accessor :custom_constraint_parent
1038
+
1039
+ def initialize(**args)
1040
+ update!(**args)
1041
+ end
1042
+
1043
+ # Update properties of this object
1044
+ def update!(**args)
1045
+ @custom_constraint = args[:custom_constraint] if args.key?(:custom_constraint)
1046
+ @custom_constraint_parent = args[:custom_constraint_parent] if args.key?(:custom_constraint_parent)
1047
+ end
1048
+ end
1049
+
1050
+ # A change to an OrgPolicy.
1051
+ class GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlayPolicyOverlay
1052
+ include Google::Apis::Core::Hashable
1053
+
1054
+ # Defines an organization policy which is used to specify constraints for
1055
+ # configurations of Google Cloud resources.
1056
+ # Corresponds to the JSON property `policy`
1057
+ # @return [Google::Apis::PolicysimulatorV1::GoogleCloudOrgpolicyV2Policy]
1058
+ attr_accessor :policy
1059
+
1060
+ # The parent of the policy we are attaching to. Example: "projects/123456"
1061
+ # Corresponds to the JSON property `policyParent`
1062
+ # @return [String]
1063
+ attr_accessor :policy_parent
1064
+
1065
+ def initialize(**args)
1066
+ update!(**args)
1067
+ end
1068
+
1069
+ # Update properties of this object
1070
+ def update!(**args)
1071
+ @policy = args[:policy] if args.key?(:policy)
1072
+ @policy_parent = args[:policy_parent] if args.key?(:policy_parent)
1073
+ end
1074
+ end
1075
+
1076
+ # OrgPolicyViolationsPreview is a resource providing a preview of the violations
1077
+ # that will exist if an OrgPolicy change is made. The list of violations are
1078
+ # modeled as child resources and retrieved via a ListOrgPolicyViolations API
1079
+ # call. There are potentially more OrgPolicyViolations than could fit in an
1080
+ # embedded field. Thus, the use of a child resource instead of a field.
1081
+ class GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreview
1082
+ include Google::Apis::Core::Hashable
1083
+
1084
+ # Output only. The resource name of the `OrgPolicyViolationsPreview`. It has the
1085
+ # following format: `organizations/`organization`/locations/`location`/
1086
+ # orgPolicyViolationsPreviews/`orgPolicyViolationsPreview`` Example: `
1087
+ # organizations/my-example-org/locations/global/orgPolicyViolationsPreviews/
1088
+ # 506a5f7f`
1089
+ # Corresponds to the JSON property `name`
1090
+ # @return [String]
1091
+ attr_accessor :name
1092
+
1093
+ # The proposed changes to OrgPolicy.
1094
+ # Corresponds to the JSON property `overlay`
1095
+ # @return [Google::Apis::PolicysimulatorV1::GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlay]
1096
+ attr_accessor :overlay
1097
+
1098
+ # A summary of the state of all resources scanned for compliance with the
1099
+ # changed OrgPolicy.
1100
+ # Corresponds to the JSON property `resourceCounts`
1101
+ # @return [Google::Apis::PolicysimulatorV1::GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts]
1102
+ attr_accessor :resource_counts
1103
+
1104
+ # Output only. The state of the `OrgPolicyViolationsPreview`.
1105
+ # Corresponds to the JSON property `state`
1106
+ # @return [String]
1107
+ attr_accessor :state
1108
+
1109
+ # Output only. The number of OrgPolicyViolations in this `
1110
+ # OrgPolicyViolationsPreview`. This count may differ from `resource_summary.
1111
+ # noncompliant_count` because each OrgPolicyViolation is specific to a resource *
1112
+ # *and** constraint. If there are multiple constraints being evaluated (i.e.
1113
+ # multiple policies in the overlay), a single resource may violate multiple
1114
+ # constraints.
1115
+ # Corresponds to the JSON property `violationsCount`
1116
+ # @return [Fixnum]
1117
+ attr_accessor :violations_count
1118
+
1119
+ def initialize(**args)
1120
+ update!(**args)
1121
+ end
1122
+
1123
+ # Update properties of this object
1124
+ def update!(**args)
1125
+ @name = args[:name] if args.key?(:name)
1126
+ @overlay = args[:overlay] if args.key?(:overlay)
1127
+ @resource_counts = args[:resource_counts] if args.key?(:resource_counts)
1128
+ @state = args[:state] if args.key?(:state)
1129
+ @violations_count = args[:violations_count] if args.key?(:violations_count)
1130
+ end
1131
+ end
1132
+
1133
+ # A summary of the state of all resources scanned for compliance with the
1134
+ # changed OrgPolicy.
1135
+ class GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts
1136
+ include Google::Apis::Core::Hashable
1137
+
1138
+ # Number of scanned resources with zero violations.
1139
+ # Corresponds to the JSON property `compliant`
1140
+ # @return [Fixnum]
1141
+ attr_accessor :compliant
1142
+
1143
+ # Number of resources that returned an error when scanned.
1144
+ # Corresponds to the JSON property `errors`
1145
+ # @return [Fixnum]
1146
+ attr_accessor :errors
1147
+
1148
+ # Number of scanned resources with at least one violation.
1149
+ # Corresponds to the JSON property `noncompliant`
1150
+ # @return [Fixnum]
1151
+ attr_accessor :noncompliant
1152
+
1153
+ # Number of resources checked for compliance. Must equal: unenforced +
1154
+ # noncompliant + compliant + error
1155
+ # Corresponds to the JSON property `scanned`
1156
+ # @return [Fixnum]
1157
+ attr_accessor :scanned
1158
+
1159
+ # Number of resources where the constraint was not enforced, i.e. the Policy set
1160
+ # `enforced: false` for that resource.
1161
+ # Corresponds to the JSON property `unenforced`
1162
+ # @return [Fixnum]
1163
+ attr_accessor :unenforced
1164
+
1165
+ def initialize(**args)
1166
+ update!(**args)
1167
+ end
1168
+
1169
+ # Update properties of this object
1170
+ def update!(**args)
1171
+ @compliant = args[:compliant] if args.key?(:compliant)
1172
+ @errors = args[:errors] if args.key?(:errors)
1173
+ @noncompliant = args[:noncompliant] if args.key?(:noncompliant)
1174
+ @scanned = args[:scanned] if args.key?(:scanned)
1175
+ @unenforced = args[:unenforced] if args.key?(:unenforced)
1176
+ end
1177
+ end
1178
+
1179
+ # GenerateOrgPolicyViolationsPreviewOperationMetadata is metadata about an
1180
+ # OrgPolicyViolationsPreview generations operation.
1181
+ class GoogleCloudPolicysimulatorV1betaGenerateOrgPolicyViolationsPreviewOperationMetadata
1182
+ include Google::Apis::Core::Hashable
1183
+
1184
+ # Time when the request was received.
1185
+ # Corresponds to the JSON property `requestTime`
1186
+ # @return [String]
1187
+ attr_accessor :request_time
1188
+
1189
+ # Total number of resources that need scanning. Should equal resource_scanned +
1190
+ # resources_pending
1191
+ # Corresponds to the JSON property `resourcesFound`
1192
+ # @return [Fixnum]
1193
+ attr_accessor :resources_found
1194
+
1195
+ # Number of resources still to scan.
1196
+ # Corresponds to the JSON property `resourcesPending`
1197
+ # @return [Fixnum]
1198
+ attr_accessor :resources_pending
1199
+
1200
+ # Number of resources already scanned.
1201
+ # Corresponds to the JSON property `resourcesScanned`
1202
+ # @return [Fixnum]
1203
+ attr_accessor :resources_scanned
1204
+
1205
+ # Time when the request started processing, i.e. when the state was set to
1206
+ # RUNNING.
1207
+ # Corresponds to the JSON property `startTime`
1208
+ # @return [String]
1209
+ attr_accessor :start_time
1210
+
1211
+ # The current state of the operation.
1212
+ # Corresponds to the JSON property `state`
1213
+ # @return [String]
1214
+ attr_accessor :state
1215
+
1216
+ def initialize(**args)
1217
+ update!(**args)
1218
+ end
1219
+
1220
+ # Update properties of this object
1221
+ def update!(**args)
1222
+ @request_time = args[:request_time] if args.key?(:request_time)
1223
+ @resources_found = args[:resources_found] if args.key?(:resources_found)
1224
+ @resources_pending = args[:resources_pending] if args.key?(:resources_pending)
1225
+ @resources_scanned = args[:resources_scanned] if args.key?(:resources_scanned)
1226
+ @start_time = args[:start_time] if args.key?(:start_time)
1227
+ @state = args[:state] if args.key?(:state)
1228
+ end
1229
+ end
1230
+
1231
+ # The proposed changes to OrgPolicy.
1232
+ class GoogleCloudPolicysimulatorV1betaOrgPolicyOverlay
1233
+ include Google::Apis::Core::Hashable
1234
+
1235
+ # The OrgPolicy CustomConstraint changes to preview violations for. Any existing
1236
+ # CustomConstraints with the same name will be overridden in the simulation.
1237
+ # That is, violations will be determined as if all custom constraints in the
1238
+ # overlay were instantiated.
1239
+ # Corresponds to the JSON property `customConstraints`
1240
+ # @return [Array<Google::Apis::PolicysimulatorV1::GoogleCloudPolicysimulatorV1betaOrgPolicyOverlayCustomConstraintOverlay>]
1241
+ attr_accessor :custom_constraints
1242
+
1243
+ # The OrgPolicy changes to preview violations for. Any existing OrgPolicies with
1244
+ # the same name will be overridden in the simulation. That is, violations will
1245
+ # be determined as if all policies in the overlay were created or updated.
1246
+ # Corresponds to the JSON property `policies`
1247
+ # @return [Array<Google::Apis::PolicysimulatorV1::GoogleCloudPolicysimulatorV1betaOrgPolicyOverlayPolicyOverlay>]
1248
+ attr_accessor :policies
1249
+
1250
+ def initialize(**args)
1251
+ update!(**args)
1252
+ end
1253
+
1254
+ # Update properties of this object
1255
+ def update!(**args)
1256
+ @custom_constraints = args[:custom_constraints] if args.key?(:custom_constraints)
1257
+ @policies = args[:policies] if args.key?(:policies)
1258
+ end
1259
+ end
1260
+
1261
+ # A change to an OrgPolicy custom constraint.
1262
+ class GoogleCloudPolicysimulatorV1betaOrgPolicyOverlayCustomConstraintOverlay
1263
+ include Google::Apis::Core::Hashable
1264
+
1265
+ # A custom constraint defined by customers which can *only* be applied to the
1266
+ # given resource types and organization. By creating a custom constraint,
1267
+ # customers can apply policies of this custom constraint. *Creating a custom
1268
+ # constraint itself does NOT apply any policy enforcement*.
1269
+ # Corresponds to the JSON property `customConstraint`
1270
+ # @return [Google::Apis::PolicysimulatorV1::GoogleCloudOrgpolicyV2CustomConstraint]
1271
+ attr_accessor :custom_constraint
1272
+
1273
+ # Resource the constraint is attached to. Example: "organization/987654"
1274
+ # Corresponds to the JSON property `customConstraintParent`
1275
+ # @return [String]
1276
+ attr_accessor :custom_constraint_parent
1277
+
1278
+ def initialize(**args)
1279
+ update!(**args)
1280
+ end
1281
+
1282
+ # Update properties of this object
1283
+ def update!(**args)
1284
+ @custom_constraint = args[:custom_constraint] if args.key?(:custom_constraint)
1285
+ @custom_constraint_parent = args[:custom_constraint_parent] if args.key?(:custom_constraint_parent)
1286
+ end
1287
+ end
1288
+
1289
+ # A change to an OrgPolicy.
1290
+ class GoogleCloudPolicysimulatorV1betaOrgPolicyOverlayPolicyOverlay
1291
+ include Google::Apis::Core::Hashable
1292
+
1293
+ # Defines an organization policy which is used to specify constraints for
1294
+ # configurations of Google Cloud resources.
1295
+ # Corresponds to the JSON property `policy`
1296
+ # @return [Google::Apis::PolicysimulatorV1::GoogleCloudOrgpolicyV2Policy]
1297
+ attr_accessor :policy
1298
+
1299
+ # The parent of the policy we are attaching to. Example: "projects/123456"
1300
+ # Corresponds to the JSON property `policyParent`
1301
+ # @return [String]
1302
+ attr_accessor :policy_parent
1303
+
1304
+ def initialize(**args)
1305
+ update!(**args)
1306
+ end
1307
+
1308
+ # Update properties of this object
1309
+ def update!(**args)
1310
+ @policy = args[:policy] if args.key?(:policy)
1311
+ @policy_parent = args[:policy_parent] if args.key?(:policy_parent)
1312
+ end
1313
+ end
1314
+
1315
+ # OrgPolicyViolationsPreview is a resource providing a preview of the violations
1316
+ # that will exist if an OrgPolicy change is made. The list of violations are
1317
+ # modeled as child resources and retrieved via a ListOrgPolicyViolations API
1318
+ # call. There are potentially more OrgPolicyViolations than could fit in an
1319
+ # embedded field. Thus, the use of a child resource instead of a field.
1320
+ class GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreview
1321
+ include Google::Apis::Core::Hashable
1322
+
1323
+ # Output only. The resource name of the `OrgPolicyViolationsPreview`. It has the
1324
+ # following format: `organizations/`organization`/locations/`location`/
1325
+ # orgPolicyViolationsPreviews/`orgPolicyViolationsPreview`` Example: `
1326
+ # organizations/my-example-org/locations/global/orgPolicyViolationsPreviews/
1327
+ # 506a5f7f`
1328
+ # Corresponds to the JSON property `name`
1329
+ # @return [String]
1330
+ attr_accessor :name
1331
+
1332
+ # The proposed changes to OrgPolicy.
1333
+ # Corresponds to the JSON property `overlay`
1334
+ # @return [Google::Apis::PolicysimulatorV1::GoogleCloudPolicysimulatorV1betaOrgPolicyOverlay]
1335
+ attr_accessor :overlay
1336
+
1337
+ # A summary of the state of all resources scanned for compliance with the
1338
+ # changed OrgPolicy.
1339
+ # Corresponds to the JSON property `resourceCounts`
1340
+ # @return [Google::Apis::PolicysimulatorV1::GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts]
1341
+ attr_accessor :resource_counts
1342
+
1343
+ # Output only. The state of the `OrgPolicyViolationsPreview`.
1344
+ # Corresponds to the JSON property `state`
1345
+ # @return [String]
1346
+ attr_accessor :state
1347
+
1348
+ # Output only. The number of OrgPolicyViolations in this `
1349
+ # OrgPolicyViolationsPreview`. This count may differ from `resource_summary.
1350
+ # noncompliant_count` because each OrgPolicyViolation is specific to a resource *
1351
+ # *and** constraint. If there are multiple constraints being evaluated (i.e.
1352
+ # multiple policies in the overlay), a single resource may violate multiple
1353
+ # constraints.
1354
+ # Corresponds to the JSON property `violationsCount`
1355
+ # @return [Fixnum]
1356
+ attr_accessor :violations_count
1357
+
1358
+ def initialize(**args)
1359
+ update!(**args)
1360
+ end
1361
+
1362
+ # Update properties of this object
1363
+ def update!(**args)
1364
+ @name = args[:name] if args.key?(:name)
1365
+ @overlay = args[:overlay] if args.key?(:overlay)
1366
+ @resource_counts = args[:resource_counts] if args.key?(:resource_counts)
1367
+ @state = args[:state] if args.key?(:state)
1368
+ @violations_count = args[:violations_count] if args.key?(:violations_count)
1369
+ end
1370
+ end
1371
+
1372
+ # A summary of the state of all resources scanned for compliance with the
1373
+ # changed OrgPolicy.
1374
+ class GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts
1375
+ include Google::Apis::Core::Hashable
1376
+
1377
+ # Number of scanned resources with zero violations.
1378
+ # Corresponds to the JSON property `compliant`
1379
+ # @return [Fixnum]
1380
+ attr_accessor :compliant
1381
+
1382
+ # Number of resources that returned an error when scanned.
1383
+ # Corresponds to the JSON property `errors`
1384
+ # @return [Fixnum]
1385
+ attr_accessor :errors
1386
+
1387
+ # Number of scanned resources with at least one violation.
1388
+ # Corresponds to the JSON property `noncompliant`
1389
+ # @return [Fixnum]
1390
+ attr_accessor :noncompliant
1391
+
1392
+ # Number of resources checked for compliance. Must equal: unenforced +
1393
+ # noncompliant + compliant + error
1394
+ # Corresponds to the JSON property `scanned`
1395
+ # @return [Fixnum]
1396
+ attr_accessor :scanned
1397
+
1398
+ # Number of resources where the constraint was not enforced, i.e. the Policy set
1399
+ # `enforced: false` for that resource.
1400
+ # Corresponds to the JSON property `unenforced`
1401
+ # @return [Fixnum]
1402
+ attr_accessor :unenforced
1403
+
1404
+ def initialize(**args)
1405
+ update!(**args)
1406
+ end
1407
+
1408
+ # Update properties of this object
1409
+ def update!(**args)
1410
+ @compliant = args[:compliant] if args.key?(:compliant)
1411
+ @errors = args[:errors] if args.key?(:errors)
1412
+ @noncompliant = args[:noncompliant] if args.key?(:noncompliant)
1413
+ @scanned = args[:scanned] if args.key?(:scanned)
1414
+ @unenforced = args[:unenforced] if args.key?(:unenforced)
1415
+ end
1416
+ end
1417
+
615
1418
  # Specifies the audit configuration for a service. The configuration determines
616
1419
  # which permission types are logged, and what identities, if any, are exempted
617
1420
  # from logging. An AuditConfig must have one or more AuditLogConfigs. If there
@@ -770,22 +1573,22 @@ module Google
770
1573
  # evaluates to `true`. A condition can add constraints based on attributes of
771
1574
  # the request, the resource, or both. To learn which resources support
772
1575
  # conditions in their IAM policies, see the [IAM documentation](https://cloud.
773
- # google.com/iam/help/conditions/resource-policies). **JSON example:** ` "
1576
+ # google.com/iam/help/conditions/resource-policies). **JSON example:** ``` ` "
774
1577
  # bindings": [ ` "role": "roles/resourcemanager.organizationAdmin", "members": [
775
1578
  # "user:mike@example.com", "group:admins@example.com", "domain:google.com", "
776
1579
  # serviceAccount:my-project-id@appspot.gserviceaccount.com" ] `, ` "role": "
777
1580
  # roles/resourcemanager.organizationViewer", "members": [ "user:eve@example.com"
778
1581
  # ], "condition": ` "title": "expirable access", "description": "Does not grant
779
1582
  # access after Sep 2020", "expression": "request.time < timestamp('2020-10-01T00:
780
- # 00:00.000Z')", ` ` ], "etag": "BwWWja0YfJA=", "version": 3 ` **YAML example:**
781
- # bindings: - members: - user:mike@example.com - group:admins@example.com -
782
- # domain:google.com - serviceAccount:my-project-id@appspot.gserviceaccount.com
783
- # role: roles/resourcemanager.organizationAdmin - members: - user:eve@example.
784
- # com role: roles/resourcemanager.organizationViewer condition: title: expirable
785
- # access description: Does not grant access after Sep 2020 expression: request.
786
- # time < timestamp('2020-10-01T00:00:00.000Z') etag: BwWWja0YfJA= version: 3 For
787
- # a description of IAM and its features, see the [IAM documentation](https://
788
- # cloud.google.com/iam/docs/).
1583
+ # 00:00.000Z')", ` ` ], "etag": "BwWWja0YfJA=", "version": 3 ` ``` **YAML
1584
+ # example:** ``` bindings: - members: - user:mike@example.com - group:admins@
1585
+ # example.com - domain:google.com - serviceAccount:my-project-id@appspot.
1586
+ # gserviceaccount.com role: roles/resourcemanager.organizationAdmin - members: -
1587
+ # user:eve@example.com role: roles/resourcemanager.organizationViewer condition:
1588
+ # title: expirable access description: Does not grant access after Sep 2020
1589
+ # expression: request.time < timestamp('2020-10-01T00:00:00.000Z') etag:
1590
+ # BwWWja0YfJA= version: 3 ``` For a description of IAM and its features, see the
1591
+ # [IAM documentation](https://cloud.google.com/iam/docs/).
789
1592
  class GoogleIamV1Policy
790
1593
  include Google::Apis::Core::Hashable
791
1594
 
@@ -916,13 +1719,13 @@ module Google
916
1719
  # @return [String]
917
1720
  attr_accessor :name
918
1721
 
919
- # The normal response of the operation in case of success. If the original
920
- # method returns no data on success, such as `Delete`, the response is `google.
921
- # protobuf.Empty`. If the original method is standard `Get`/`Create`/`Update`,
922
- # the response should be the resource. For other methods, the response should
923
- # have the type `XxxResponse`, where `Xxx` is the original method name. For
924
- # example, if the original method name is `TakeSnapshot()`, the inferred
925
- # response type is `TakeSnapshotResponse`.
1722
+ # The normal, successful response of the operation. If the original method
1723
+ # returns no data on success, such as `Delete`, the response is `google.protobuf.
1724
+ # Empty`. If the original method is standard `Get`/`Create`/`Update`, the
1725
+ # response should be the resource. For other methods, the response should have
1726
+ # the type `XxxResponse`, where `Xxx` is the original method name. For example,
1727
+ # if the original method name is `TakeSnapshot()`, the inferred response type is
1728
+ # `TakeSnapshotResponse`.
926
1729
  # Corresponds to the JSON property `response`
927
1730
  # @return [Hash<String,Object>]
928
1731
  attr_accessor :response
@@ -16,13 +16,13 @@ module Google
16
16
  module Apis
17
17
  module PolicysimulatorV1
18
18
  # Version of the google-apis-policysimulator_v1 gem
19
- GEM_VERSION = "0.25.0"
19
+ GEM_VERSION = "0.27.0"
20
20
 
21
21
  # Version of the code generator used to generate this client
22
22
  GENERATOR_VERSION = "0.12.0"
23
23
 
24
24
  # Revision of the discovery document this client was generated from
25
- REVISION = "20230326"
25
+ REVISION = "20230806"
26
26
  end
27
27
  end
28
28
  end
@@ -22,6 +22,42 @@ module Google
22
22
  module Apis
23
23
  module PolicysimulatorV1
24
24
 
25
+ class GoogleCloudOrgpolicyV2AlternatePolicySpec
26
+ class Representation < Google::Apis::Core::JsonRepresentation; end
27
+
28
+ include Google::Apis::Core::JsonObjectSupport
29
+ end
30
+
31
+ class GoogleCloudOrgpolicyV2CustomConstraint
32
+ class Representation < Google::Apis::Core::JsonRepresentation; end
33
+
34
+ include Google::Apis::Core::JsonObjectSupport
35
+ end
36
+
37
+ class GoogleCloudOrgpolicyV2Policy
38
+ class Representation < Google::Apis::Core::JsonRepresentation; end
39
+
40
+ include Google::Apis::Core::JsonObjectSupport
41
+ end
42
+
43
+ class GoogleCloudOrgpolicyV2PolicySpec
44
+ class Representation < Google::Apis::Core::JsonRepresentation; end
45
+
46
+ include Google::Apis::Core::JsonObjectSupport
47
+ end
48
+
49
+ class GoogleCloudOrgpolicyV2PolicySpecPolicyRule
50
+ class Representation < Google::Apis::Core::JsonRepresentation; end
51
+
52
+ include Google::Apis::Core::JsonObjectSupport
53
+ end
54
+
55
+ class GoogleCloudOrgpolicyV2PolicySpecPolicyRuleStringValues
56
+ class Representation < Google::Apis::Core::JsonRepresentation; end
57
+
58
+ include Google::Apis::Core::JsonObjectSupport
59
+ end
60
+
25
61
  class GoogleCloudPolicysimulatorV1AccessStateDiff
26
62
  class Representation < Google::Apis::Core::JsonRepresentation; end
27
63
 
@@ -100,6 +136,78 @@ module Google
100
136
  include Google::Apis::Core::JsonObjectSupport
101
137
  end
102
138
 
139
+ class GoogleCloudPolicysimulatorV1alphaGenerateOrgPolicyViolationsPreviewOperationMetadata
140
+ class Representation < Google::Apis::Core::JsonRepresentation; end
141
+
142
+ include Google::Apis::Core::JsonObjectSupport
143
+ end
144
+
145
+ class GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlay
146
+ class Representation < Google::Apis::Core::JsonRepresentation; end
147
+
148
+ include Google::Apis::Core::JsonObjectSupport
149
+ end
150
+
151
+ class GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlayCustomConstraintOverlay
152
+ class Representation < Google::Apis::Core::JsonRepresentation; end
153
+
154
+ include Google::Apis::Core::JsonObjectSupport
155
+ end
156
+
157
+ class GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlayPolicyOverlay
158
+ class Representation < Google::Apis::Core::JsonRepresentation; end
159
+
160
+ include Google::Apis::Core::JsonObjectSupport
161
+ end
162
+
163
+ class GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreview
164
+ class Representation < Google::Apis::Core::JsonRepresentation; end
165
+
166
+ include Google::Apis::Core::JsonObjectSupport
167
+ end
168
+
169
+ class GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts
170
+ class Representation < Google::Apis::Core::JsonRepresentation; end
171
+
172
+ include Google::Apis::Core::JsonObjectSupport
173
+ end
174
+
175
+ class GoogleCloudPolicysimulatorV1betaGenerateOrgPolicyViolationsPreviewOperationMetadata
176
+ class Representation < Google::Apis::Core::JsonRepresentation; end
177
+
178
+ include Google::Apis::Core::JsonObjectSupport
179
+ end
180
+
181
+ class GoogleCloudPolicysimulatorV1betaOrgPolicyOverlay
182
+ class Representation < Google::Apis::Core::JsonRepresentation; end
183
+
184
+ include Google::Apis::Core::JsonObjectSupport
185
+ end
186
+
187
+ class GoogleCloudPolicysimulatorV1betaOrgPolicyOverlayCustomConstraintOverlay
188
+ class Representation < Google::Apis::Core::JsonRepresentation; end
189
+
190
+ include Google::Apis::Core::JsonObjectSupport
191
+ end
192
+
193
+ class GoogleCloudPolicysimulatorV1betaOrgPolicyOverlayPolicyOverlay
194
+ class Representation < Google::Apis::Core::JsonRepresentation; end
195
+
196
+ include Google::Apis::Core::JsonObjectSupport
197
+ end
198
+
199
+ class GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreview
200
+ class Representation < Google::Apis::Core::JsonRepresentation; end
201
+
202
+ include Google::Apis::Core::JsonObjectSupport
203
+ end
204
+
205
+ class GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts
206
+ class Representation < Google::Apis::Core::JsonRepresentation; end
207
+
208
+ include Google::Apis::Core::JsonObjectSupport
209
+ end
210
+
103
211
  class GoogleIamV1AuditConfig
104
212
  class Representation < Google::Apis::Core::JsonRepresentation; end
105
213
 
@@ -154,6 +262,75 @@ module Google
154
262
  include Google::Apis::Core::JsonObjectSupport
155
263
  end
156
264
 
265
+ class GoogleCloudOrgpolicyV2AlternatePolicySpec
266
+ # @private
267
+ class Representation < Google::Apis::Core::JsonRepresentation
268
+ property :launch, as: 'launch'
269
+ property :spec, as: 'spec', class: Google::Apis::PolicysimulatorV1::GoogleCloudOrgpolicyV2PolicySpec, decorator: Google::Apis::PolicysimulatorV1::GoogleCloudOrgpolicyV2PolicySpec::Representation
270
+
271
+ end
272
+ end
273
+
274
+ class GoogleCloudOrgpolicyV2CustomConstraint
275
+ # @private
276
+ class Representation < Google::Apis::Core::JsonRepresentation
277
+ property :action_type, as: 'actionType'
278
+ property :condition, as: 'condition'
279
+ property :description, as: 'description'
280
+ property :display_name, as: 'displayName'
281
+ collection :method_types, as: 'methodTypes'
282
+ property :name, as: 'name'
283
+ collection :resource_types, as: 'resourceTypes'
284
+ property :update_time, as: 'updateTime'
285
+ end
286
+ end
287
+
288
+ class GoogleCloudOrgpolicyV2Policy
289
+ # @private
290
+ class Representation < Google::Apis::Core::JsonRepresentation
291
+ property :alternate, as: 'alternate', class: Google::Apis::PolicysimulatorV1::GoogleCloudOrgpolicyV2AlternatePolicySpec, decorator: Google::Apis::PolicysimulatorV1::GoogleCloudOrgpolicyV2AlternatePolicySpec::Representation
292
+
293
+ property :dry_run_spec, as: 'dryRunSpec', class: Google::Apis::PolicysimulatorV1::GoogleCloudOrgpolicyV2PolicySpec, decorator: Google::Apis::PolicysimulatorV1::GoogleCloudOrgpolicyV2PolicySpec::Representation
294
+
295
+ property :name, as: 'name'
296
+ property :spec, as: 'spec', class: Google::Apis::PolicysimulatorV1::GoogleCloudOrgpolicyV2PolicySpec, decorator: Google::Apis::PolicysimulatorV1::GoogleCloudOrgpolicyV2PolicySpec::Representation
297
+
298
+ end
299
+ end
300
+
301
+ class GoogleCloudOrgpolicyV2PolicySpec
302
+ # @private
303
+ class Representation < Google::Apis::Core::JsonRepresentation
304
+ property :etag, as: 'etag'
305
+ property :inherit_from_parent, as: 'inheritFromParent'
306
+ property :reset, as: 'reset'
307
+ collection :rules, as: 'rules', class: Google::Apis::PolicysimulatorV1::GoogleCloudOrgpolicyV2PolicySpecPolicyRule, decorator: Google::Apis::PolicysimulatorV1::GoogleCloudOrgpolicyV2PolicySpecPolicyRule::Representation
308
+
309
+ property :update_time, as: 'updateTime'
310
+ end
311
+ end
312
+
313
+ class GoogleCloudOrgpolicyV2PolicySpecPolicyRule
314
+ # @private
315
+ class Representation < Google::Apis::Core::JsonRepresentation
316
+ property :allow_all, as: 'allowAll'
317
+ property :condition, as: 'condition', class: Google::Apis::PolicysimulatorV1::GoogleTypeExpr, decorator: Google::Apis::PolicysimulatorV1::GoogleTypeExpr::Representation
318
+
319
+ property :deny_all, as: 'denyAll'
320
+ property :enforce, as: 'enforce'
321
+ property :values, as: 'values', class: Google::Apis::PolicysimulatorV1::GoogleCloudOrgpolicyV2PolicySpecPolicyRuleStringValues, decorator: Google::Apis::PolicysimulatorV1::GoogleCloudOrgpolicyV2PolicySpecPolicyRuleStringValues::Representation
322
+
323
+ end
324
+ end
325
+
326
+ class GoogleCloudOrgpolicyV2PolicySpecPolicyRuleStringValues
327
+ # @private
328
+ class Representation < Google::Apis::Core::JsonRepresentation
329
+ collection :allowed_values, as: 'allowedValues'
330
+ collection :denied_values, as: 'deniedValues'
331
+ end
332
+ end
333
+
157
334
  class GoogleCloudPolicysimulatorV1AccessStateDiff
158
335
  # @private
159
336
  class Representation < Google::Apis::Core::JsonRepresentation
@@ -296,6 +473,134 @@ module Google
296
473
  end
297
474
  end
298
475
 
476
+ class GoogleCloudPolicysimulatorV1alphaGenerateOrgPolicyViolationsPreviewOperationMetadata
477
+ # @private
478
+ class Representation < Google::Apis::Core::JsonRepresentation
479
+ property :request_time, as: 'requestTime'
480
+ property :resources_found, as: 'resourcesFound'
481
+ property :resources_pending, as: 'resourcesPending'
482
+ property :resources_scanned, as: 'resourcesScanned'
483
+ property :start_time, as: 'startTime'
484
+ property :state, as: 'state'
485
+ end
486
+ end
487
+
488
+ class GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlay
489
+ # @private
490
+ class Representation < Google::Apis::Core::JsonRepresentation
491
+ collection :custom_constraints, as: 'customConstraints', class: Google::Apis::PolicysimulatorV1::GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlayCustomConstraintOverlay, decorator: Google::Apis::PolicysimulatorV1::GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlayCustomConstraintOverlay::Representation
492
+
493
+ collection :policies, as: 'policies', class: Google::Apis::PolicysimulatorV1::GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlayPolicyOverlay, decorator: Google::Apis::PolicysimulatorV1::GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlayPolicyOverlay::Representation
494
+
495
+ end
496
+ end
497
+
498
+ class GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlayCustomConstraintOverlay
499
+ # @private
500
+ class Representation < Google::Apis::Core::JsonRepresentation
501
+ property :custom_constraint, as: 'customConstraint', class: Google::Apis::PolicysimulatorV1::GoogleCloudOrgpolicyV2CustomConstraint, decorator: Google::Apis::PolicysimulatorV1::GoogleCloudOrgpolicyV2CustomConstraint::Representation
502
+
503
+ property :custom_constraint_parent, as: 'customConstraintParent'
504
+ end
505
+ end
506
+
507
+ class GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlayPolicyOverlay
508
+ # @private
509
+ class Representation < Google::Apis::Core::JsonRepresentation
510
+ property :policy, as: 'policy', class: Google::Apis::PolicysimulatorV1::GoogleCloudOrgpolicyV2Policy, decorator: Google::Apis::PolicysimulatorV1::GoogleCloudOrgpolicyV2Policy::Representation
511
+
512
+ property :policy_parent, as: 'policyParent'
513
+ end
514
+ end
515
+
516
+ class GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreview
517
+ # @private
518
+ class Representation < Google::Apis::Core::JsonRepresentation
519
+ property :name, as: 'name'
520
+ property :overlay, as: 'overlay', class: Google::Apis::PolicysimulatorV1::GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlay, decorator: Google::Apis::PolicysimulatorV1::GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlay::Representation
521
+
522
+ property :resource_counts, as: 'resourceCounts', class: Google::Apis::PolicysimulatorV1::GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts, decorator: Google::Apis::PolicysimulatorV1::GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts::Representation
523
+
524
+ property :state, as: 'state'
525
+ property :violations_count, as: 'violationsCount'
526
+ end
527
+ end
528
+
529
+ class GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts
530
+ # @private
531
+ class Representation < Google::Apis::Core::JsonRepresentation
532
+ property :compliant, as: 'compliant'
533
+ property :errors, as: 'errors'
534
+ property :noncompliant, as: 'noncompliant'
535
+ property :scanned, as: 'scanned'
536
+ property :unenforced, as: 'unenforced'
537
+ end
538
+ end
539
+
540
+ class GoogleCloudPolicysimulatorV1betaGenerateOrgPolicyViolationsPreviewOperationMetadata
541
+ # @private
542
+ class Representation < Google::Apis::Core::JsonRepresentation
543
+ property :request_time, as: 'requestTime'
544
+ property :resources_found, as: 'resourcesFound'
545
+ property :resources_pending, as: 'resourcesPending'
546
+ property :resources_scanned, as: 'resourcesScanned'
547
+ property :start_time, as: 'startTime'
548
+ property :state, as: 'state'
549
+ end
550
+ end
551
+
552
+ class GoogleCloudPolicysimulatorV1betaOrgPolicyOverlay
553
+ # @private
554
+ class Representation < Google::Apis::Core::JsonRepresentation
555
+ collection :custom_constraints, as: 'customConstraints', class: Google::Apis::PolicysimulatorV1::GoogleCloudPolicysimulatorV1betaOrgPolicyOverlayCustomConstraintOverlay, decorator: Google::Apis::PolicysimulatorV1::GoogleCloudPolicysimulatorV1betaOrgPolicyOverlayCustomConstraintOverlay::Representation
556
+
557
+ collection :policies, as: 'policies', class: Google::Apis::PolicysimulatorV1::GoogleCloudPolicysimulatorV1betaOrgPolicyOverlayPolicyOverlay, decorator: Google::Apis::PolicysimulatorV1::GoogleCloudPolicysimulatorV1betaOrgPolicyOverlayPolicyOverlay::Representation
558
+
559
+ end
560
+ end
561
+
562
+ class GoogleCloudPolicysimulatorV1betaOrgPolicyOverlayCustomConstraintOverlay
563
+ # @private
564
+ class Representation < Google::Apis::Core::JsonRepresentation
565
+ property :custom_constraint, as: 'customConstraint', class: Google::Apis::PolicysimulatorV1::GoogleCloudOrgpolicyV2CustomConstraint, decorator: Google::Apis::PolicysimulatorV1::GoogleCloudOrgpolicyV2CustomConstraint::Representation
566
+
567
+ property :custom_constraint_parent, as: 'customConstraintParent'
568
+ end
569
+ end
570
+
571
+ class GoogleCloudPolicysimulatorV1betaOrgPolicyOverlayPolicyOverlay
572
+ # @private
573
+ class Representation < Google::Apis::Core::JsonRepresentation
574
+ property :policy, as: 'policy', class: Google::Apis::PolicysimulatorV1::GoogleCloudOrgpolicyV2Policy, decorator: Google::Apis::PolicysimulatorV1::GoogleCloudOrgpolicyV2Policy::Representation
575
+
576
+ property :policy_parent, as: 'policyParent'
577
+ end
578
+ end
579
+
580
+ class GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreview
581
+ # @private
582
+ class Representation < Google::Apis::Core::JsonRepresentation
583
+ property :name, as: 'name'
584
+ property :overlay, as: 'overlay', class: Google::Apis::PolicysimulatorV1::GoogleCloudPolicysimulatorV1betaOrgPolicyOverlay, decorator: Google::Apis::PolicysimulatorV1::GoogleCloudPolicysimulatorV1betaOrgPolicyOverlay::Representation
585
+
586
+ property :resource_counts, as: 'resourceCounts', class: Google::Apis::PolicysimulatorV1::GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts, decorator: Google::Apis::PolicysimulatorV1::GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts::Representation
587
+
588
+ property :state, as: 'state'
589
+ property :violations_count, as: 'violationsCount'
590
+ end
591
+ end
592
+
593
+ class GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts
594
+ # @private
595
+ class Representation < Google::Apis::Core::JsonRepresentation
596
+ property :compliant, as: 'compliant'
597
+ property :errors, as: 'errors'
598
+ property :noncompliant, as: 'noncompliant'
599
+ property :scanned, as: 'scanned'
600
+ property :unenforced, as: 'unenforced'
601
+ end
602
+ end
603
+
299
604
  class GoogleIamV1AuditConfig
300
605
  # @private
301
606
  class Representation < Google::Apis::Core::JsonRepresentation
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: google-apis-policysimulator_v1
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.25.0
4
+ version: 0.27.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Google LLC
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2023-04-02 00:00:00.000000000 Z
11
+ date: 2023-08-13 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: google-apis-core
@@ -58,7 +58,7 @@ licenses:
58
58
  metadata:
59
59
  bug_tracker_uri: https://github.com/googleapis/google-api-ruby-client/issues
60
60
  changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-policysimulator_v1/CHANGELOG.md
61
- documentation_uri: https://googleapis.dev/ruby/google-apis-policysimulator_v1/v0.25.0
61
+ documentation_uri: https://googleapis.dev/ruby/google-apis-policysimulator_v1/v0.27.0
62
62
  source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-policysimulator_v1
63
63
  post_install_message:
64
64
  rdoc_options: []