google-apis-securitycenter_v1 0.35.0 → 0.38.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 2aa07c4cd78fc68602de9fa1a4b6faaf6520be33203444e78b13b0abb0ece1e4
4
- data.tar.gz: 7715f2985e8fa9418f6e39d51542722824a84006ffaceda4e7129ddda27ec57b
3
+ metadata.gz: 3521814e5d9bd424dab2b96c70aa05df203d1da5d30d108e0e8af019cd9f7037
4
+ data.tar.gz: 1be423f96ab440c4f28d3b2bc6ea4b12539fde2a57024292944270bb5438c37f
5
5
  SHA512:
6
- metadata.gz: 0da1de21b77877146103a42624bf808cf2fe9d03b678ca34f22fc84627d89163c722f40060b12a4659d947aed2767c68d89442797d509c4b33df4df0bf76dca6
7
- data.tar.gz: a53180c53a94a12b4f5b3f7d64ee1db5d46d052a3e55a35f0daabec37abb726f82f53807f44699048df971fffab1daa3772f44768c4f65db692152d29c2823d9
6
+ metadata.gz: df4e68120823bac056a399cba5a2450ccedfc694f890c03bb4eab1dbef45e0b42022d5aaab52ea423f766c22af961011f47ab8247ed26c1d5d3d147299510d4b
7
+ data.tar.gz: 83c176841ae442563a0340909c2357f570aff12eef8d104977172549b673c12b7bdff16aab363c0ada755bea4b964e52a297408ff75b40b3083711f34656ccdc
data/CHANGELOG.md CHANGED
@@ -1,5 +1,17 @@
1
1
  # Release history for google-apis-securitycenter_v1
2
2
 
3
+ ### v0.38.0 (2022-08-02)
4
+
5
+ * Regenerated from discovery document revision 20220728
6
+
7
+ ### v0.37.0 (2022-07-26)
8
+
9
+ * Regenerated from discovery document revision 20220720
10
+
11
+ ### v0.36.0 (2022-07-19)
12
+
13
+ * Regenerated from discovery document revision 20220713
14
+
3
15
  ### v0.35.0 (2022-07-12)
4
16
 
5
17
  * Regenerated from discovery document revision 20220707
@@ -41,11 +41,44 @@ module Google
41
41
  # @return [String]
42
42
  attr_accessor :method_name
43
43
 
44
- # Associated email, such as "foo@google.com".
44
+ # Associated email, such as "foo@google.com". The email address of the
45
+ # authenticated user (or service account on behalf of third party principal)
46
+ # making the request. For third party identity callers, the `principal_subject`
47
+ # field is populated instead of this field. For privacy reasons, the principal
48
+ # email address is sometimes redacted. For more information, see [Caller
49
+ # identities in audit logs](https://cloud.google.com/logging/docs/audit#user-id).
45
50
  # Corresponds to the JSON property `principalEmail`
46
51
  # @return [String]
47
52
  attr_accessor :principal_email
48
53
 
54
+ # A string representing the principal_subject associated with the identity. As
55
+ # compared to `principal_email`, supports principals that aren't associated with
56
+ # email addresses, such as third party principals. For most identities, the
57
+ # format will be `principal://iam.googleapis.com/`identity pool name`/subject/`
58
+ # subject)` except for some GKE identities (GKE_WORKLOAD, FREEFORM,
59
+ # GKE_HUB_WORKLOAD) that are still in the legacy format `serviceAccount:`
60
+ # identity pool name`[`subject`]`
61
+ # Corresponds to the JSON property `principalSubject`
62
+ # @return [String]
63
+ attr_accessor :principal_subject
64
+
65
+ # Identity delegation history of an authenticated service account that makes the
66
+ # request. It contains information on the real authorities that try to access
67
+ # GCP resources by delegating on a service account. When multiple authorities
68
+ # are present, they are guaranteed to be sorted based on the original ordering
69
+ # of the identity delegation events.
70
+ # Corresponds to the JSON property `serviceAccountDelegationInfo`
71
+ # @return [Array<Google::Apis::SecuritycenterV1::ServiceAccountDelegationInfo>]
72
+ attr_accessor :service_account_delegation_info
73
+
74
+ # The name of the service account key used to create or exchange credentials for
75
+ # authenticating the service account making the request. This is a scheme-less
76
+ # URI full resource name. For example: "//iam.googleapis.com/projects/`
77
+ # PROJECT_ID`/serviceAccounts/`ACCOUNT`/keys/`key`"
78
+ # Corresponds to the JSON property `serviceAccountKeyName`
79
+ # @return [String]
80
+ attr_accessor :service_account_key_name
81
+
49
82
  # This is the API service that the service account made a call to, e.g. "iam.
50
83
  # googleapis.com"
51
84
  # Corresponds to the JSON property `serviceName`
@@ -68,11 +101,72 @@ module Google
68
101
  @caller_ip_geo = args[:caller_ip_geo] if args.key?(:caller_ip_geo)
69
102
  @method_name = args[:method_name] if args.key?(:method_name)
70
103
  @principal_email = args[:principal_email] if args.key?(:principal_email)
104
+ @principal_subject = args[:principal_subject] if args.key?(:principal_subject)
105
+ @service_account_delegation_info = args[:service_account_delegation_info] if args.key?(:service_account_delegation_info)
106
+ @service_account_key_name = args[:service_account_key_name] if args.key?(:service_account_key_name)
71
107
  @service_name = args[:service_name] if args.key?(:service_name)
72
108
  @user_agent_family = args[:user_agent_family] if args.key?(:user_agent_family)
73
109
  end
74
110
  end
75
111
 
112
+ # Conveys information about a Kubernetes access review (e.g. kubectl auth can-i .
113
+ # ..) that was involved in a finding.
114
+ class AccessReview
115
+ include Google::Apis::Core::Hashable
116
+
117
+ # Group is the API Group of the Resource. "*" means all.
118
+ # Corresponds to the JSON property `group`
119
+ # @return [String]
120
+ attr_accessor :group
121
+
122
+ # Name is the name of the resource being requested. Empty means all.
123
+ # Corresponds to the JSON property `name`
124
+ # @return [String]
125
+ attr_accessor :name
126
+
127
+ # Namespace of the action being requested. Currently, there is no distinction
128
+ # between no namespace and all namespaces. Both are represented by "" (empty).
129
+ # Corresponds to the JSON property `ns`
130
+ # @return [String]
131
+ attr_accessor :ns
132
+
133
+ # Resource is the optional resource type requested. "*" means all.
134
+ # Corresponds to the JSON property `resource`
135
+ # @return [String]
136
+ attr_accessor :resource
137
+
138
+ # Subresource is the optional subresource type.
139
+ # Corresponds to the JSON property `subresource`
140
+ # @return [String]
141
+ attr_accessor :subresource
142
+
143
+ # Verb is a Kubernetes resource API verb, like: get, list, watch, create, update,
144
+ # delete, proxy. "*" means all.
145
+ # Corresponds to the JSON property `verb`
146
+ # @return [String]
147
+ attr_accessor :verb
148
+
149
+ # Version is the API Version of the Resource. "*" means all.
150
+ # Corresponds to the JSON property `version`
151
+ # @return [String]
152
+ attr_accessor :version
153
+
154
+ def initialize(**args)
155
+ update!(**args)
156
+ end
157
+
158
+ # Update properties of this object
159
+ def update!(**args)
160
+ @group = args[:group] if args.key?(:group)
161
+ @name = args[:name] if args.key?(:name)
162
+ @ns = args[:ns] if args.key?(:ns)
163
+ @resource = args[:resource] if args.key?(:resource)
164
+ @subresource = args[:subresource] if args.key?(:subresource)
165
+ @verb = args[:verb] if args.key?(:verb)
166
+ @version = args[:version] if args.key?(:version)
167
+ end
168
+ end
169
+
76
170
  # Security Command Center representation of a Google Cloud resource. The Asset
77
171
  # is a Security Command Center resource that captures information about a single
78
172
  # Google Cloud resource. All modifications to an Asset are only within the
@@ -475,6 +569,45 @@ module Google
475
569
  end
476
570
  end
477
571
 
572
+ # Container associated with the finding.
573
+ class Container
574
+ include Google::Apis::Core::Hashable
575
+
576
+ # Optional container image id, when provided by the container runtime. Uniquely
577
+ # identifies the container image launched using a container image digest.
578
+ # Corresponds to the JSON property `imageId`
579
+ # @return [String]
580
+ attr_accessor :image_id
581
+
582
+ # Container labels, as provided by the container runtime.
583
+ # Corresponds to the JSON property `labels`
584
+ # @return [Array<Google::Apis::SecuritycenterV1::Label>]
585
+ attr_accessor :labels
586
+
587
+ # Container name.
588
+ # Corresponds to the JSON property `name`
589
+ # @return [String]
590
+ attr_accessor :name
591
+
592
+ # Container image URI provided when configuring a pod/container. May identify a
593
+ # container image version using mutable tags.
594
+ # Corresponds to the JSON property `uri`
595
+ # @return [String]
596
+ attr_accessor :uri
597
+
598
+ def initialize(**args)
599
+ update!(**args)
600
+ end
601
+
602
+ # Update properties of this object
603
+ def update!(**args)
604
+ @image_id = args[:image_id] if args.key?(:image_id)
605
+ @labels = args[:labels] if args.key?(:labels)
606
+ @name = args[:name] if args.key?(:name)
607
+ @uri = args[:uri] if args.key?(:uri)
608
+ end
609
+ end
610
+
478
611
  # CVE stands for Common Vulnerabilities and Exposures. More information: https://
479
612
  # cve.mitre.org
480
613
  class Cve
@@ -868,12 +1001,18 @@ module Google
868
1001
  # key represents the type of contact, while the value contains a list of all the
869
1002
  # contacts that pertain. Please refer to: https://cloud.google.com/resource-
870
1003
  # manager/docs/managing-notification-contacts#notification-categories ` "
871
- # security":[ ` "contact":` "email":"person1@company.com" ` `, ` "contact":` "
872
- # email":“person2@company.com ` ` ] `
1004
+ # security": ` "contacts": [ ` "email": "person1@company.com" `, ` "email": "
1005
+ # person2@company.com" ` ] `
873
1006
  # Corresponds to the JSON property `contacts`
874
1007
  # @return [Hash<String,Google::Apis::SecuritycenterV1::ContactDetails>]
875
1008
  attr_accessor :contacts
876
1009
 
1010
+ # Containers associated with the finding. containers provides information for
1011
+ # both Kubernetes and non-Kubernetes containers.
1012
+ # Corresponds to the JSON property `containers`
1013
+ # @return [Array<Google::Apis::SecuritycenterV1::Container>]
1014
+ attr_accessor :containers
1015
+
877
1016
  # The time at which the finding was created in Security Command Center.
878
1017
  # Corresponds to the JSON property `createTime`
879
1018
  # @return [String]
@@ -932,6 +1071,11 @@ module Google
932
1071
  # @return [Google::Apis::SecuritycenterV1::Indicator]
933
1072
  attr_accessor :indicator
934
1073
 
1074
+ # Kubernetes related attributes.
1075
+ # Corresponds to the JSON property `kubernetes`
1076
+ # @return [Google::Apis::SecuritycenterV1::Kubernetes]
1077
+ attr_accessor :kubernetes
1078
+
935
1079
  # MITRE ATT&CK tactics and techniques related to this finding. See: https://
936
1080
  # attack.mitre.org
937
1081
  # Corresponds to the JSON property `mitreAttack`
@@ -1036,6 +1180,7 @@ module Google
1036
1180
  @compliances = args[:compliances] if args.key?(:compliances)
1037
1181
  @connections = args[:connections] if args.key?(:connections)
1038
1182
  @contacts = args[:contacts] if args.key?(:contacts)
1183
+ @containers = args[:containers] if args.key?(:containers)
1039
1184
  @create_time = args[:create_time] if args.key?(:create_time)
1040
1185
  @description = args[:description] if args.key?(:description)
1041
1186
  @event_time = args[:event_time] if args.key?(:event_time)
@@ -1045,6 +1190,7 @@ module Google
1045
1190
  @finding_class = args[:finding_class] if args.key?(:finding_class)
1046
1191
  @iam_bindings = args[:iam_bindings] if args.key?(:iam_bindings)
1047
1192
  @indicator = args[:indicator] if args.key?(:indicator)
1193
+ @kubernetes = args[:kubernetes] if args.key?(:kubernetes)
1048
1194
  @mitre_attack = args[:mitre_attack] if args.key?(:mitre_attack)
1049
1195
  @mute = args[:mute] if args.key?(:mute)
1050
1196
  @mute_initiator = args[:mute_initiator] if args.key?(:mute_initiator)
@@ -1237,6 +1383,44 @@ module Google
1237
1383
  end
1238
1384
  end
1239
1385
 
1386
+ # Represents a Kubernetes RoleBinding or ClusterRoleBinding.
1387
+ class GoogleCloudSecuritycenterV1Binding
1388
+ include Google::Apis::Core::Hashable
1389
+
1390
+ # Name for binding.
1391
+ # Corresponds to the JSON property `name`
1392
+ # @return [String]
1393
+ attr_accessor :name
1394
+
1395
+ # Namespace for binding.
1396
+ # Corresponds to the JSON property `ns`
1397
+ # @return [String]
1398
+ attr_accessor :ns
1399
+
1400
+ # Kubernetes Role or ClusterRole.
1401
+ # Corresponds to the JSON property `role`
1402
+ # @return [Google::Apis::SecuritycenterV1::Role]
1403
+ attr_accessor :role
1404
+
1405
+ # Represents the subjects(s) bound to the role. Not always available for PATCH
1406
+ # requests.
1407
+ # Corresponds to the JSON property `subjects`
1408
+ # @return [Array<Google::Apis::SecuritycenterV1::Subject>]
1409
+ attr_accessor :subjects
1410
+
1411
+ def initialize(**args)
1412
+ update!(**args)
1413
+ end
1414
+
1415
+ # Update properties of this object
1416
+ def update!(**args)
1417
+ @name = args[:name] if args.key?(:name)
1418
+ @ns = args[:ns] if args.key?(:ns)
1419
+ @role = args[:role] if args.key?(:role)
1420
+ @subjects = args[:subjects] if args.key?(:subjects)
1421
+ end
1422
+ end
1423
+
1240
1424
  # The response to a BulkMute request. Contains the LRO information.
1241
1425
  class GoogleCloudSecuritycenterV1BulkMuteFindingsResponse
1242
1426
  include Google::Apis::Core::Hashable
@@ -2215,6 +2399,11 @@ module Google
2215
2399
  # @return [Array<Google::Apis::SecuritycenterV1::ProcessSignature>]
2216
2400
  attr_accessor :signatures
2217
2401
 
2402
+ # The list of URIs associated to the Findings
2403
+ # Corresponds to the JSON property `uris`
2404
+ # @return [Array<String>]
2405
+ attr_accessor :uris
2406
+
2218
2407
  def initialize(**args)
2219
2408
  update!(**args)
2220
2409
  end
@@ -2224,6 +2413,87 @@ module Google
2224
2413
  @domains = args[:domains] if args.key?(:domains)
2225
2414
  @ip_addresses = args[:ip_addresses] if args.key?(:ip_addresses)
2226
2415
  @signatures = args[:signatures] if args.key?(:signatures)
2416
+ @uris = args[:uris] if args.key?(:uris)
2417
+ end
2418
+ end
2419
+
2420
+ # Kubernetes related attributes.
2421
+ class Kubernetes
2422
+ include Google::Apis::Core::Hashable
2423
+
2424
+ # Provides information on any Kubernetes access reviews (i.e. privilege checks)
2425
+ # relevant to the finding.
2426
+ # Corresponds to the JSON property `accessReviews`
2427
+ # @return [Array<Google::Apis::SecuritycenterV1::AccessReview>]
2428
+ attr_accessor :access_reviews
2429
+
2430
+ # Provides Kubernetes role binding information for findings that involve
2431
+ # RoleBindings or ClusterRoleBindings.
2432
+ # Corresponds to the JSON property `bindings`
2433
+ # @return [Array<Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1Binding>]
2434
+ attr_accessor :bindings
2435
+
2436
+ # GKE Node Pools associated with the finding. This field will contain NodePool
2437
+ # information for each Node, when it is available.
2438
+ # Corresponds to the JSON property `nodePools`
2439
+ # @return [Array<Google::Apis::SecuritycenterV1::NodePool>]
2440
+ attr_accessor :node_pools
2441
+
2442
+ # Provides Kubernetes Node information.
2443
+ # Corresponds to the JSON property `nodes`
2444
+ # @return [Array<Google::Apis::SecuritycenterV1::Node>]
2445
+ attr_accessor :nodes
2446
+
2447
+ # Kubernetes Pods associated with the finding. This field will contain Pod
2448
+ # records for each container that is owned by a Pod.
2449
+ # Corresponds to the JSON property `pods`
2450
+ # @return [Array<Google::Apis::SecuritycenterV1::Pod>]
2451
+ attr_accessor :pods
2452
+
2453
+ # Provides Kubernetes role information for findings that involve Roles or
2454
+ # ClusterRoles.
2455
+ # Corresponds to the JSON property `roles`
2456
+ # @return [Array<Google::Apis::SecuritycenterV1::Role>]
2457
+ attr_accessor :roles
2458
+
2459
+ def initialize(**args)
2460
+ update!(**args)
2461
+ end
2462
+
2463
+ # Update properties of this object
2464
+ def update!(**args)
2465
+ @access_reviews = args[:access_reviews] if args.key?(:access_reviews)
2466
+ @bindings = args[:bindings] if args.key?(:bindings)
2467
+ @node_pools = args[:node_pools] if args.key?(:node_pools)
2468
+ @nodes = args[:nodes] if args.key?(:nodes)
2469
+ @pods = args[:pods] if args.key?(:pods)
2470
+ @roles = args[:roles] if args.key?(:roles)
2471
+ end
2472
+ end
2473
+
2474
+ # Label represents a generic name=value label. Label has separate name and value
2475
+ # fields to support filtering with contains().
2476
+ class Label
2477
+ include Google::Apis::Core::Hashable
2478
+
2479
+ # Label name.
2480
+ # Corresponds to the JSON property `name`
2481
+ # @return [String]
2482
+ attr_accessor :name
2483
+
2484
+ # Label value.
2485
+ # Corresponds to the JSON property `value`
2486
+ # @return [String]
2487
+ attr_accessor :value
2488
+
2489
+ def initialize(**args)
2490
+ update!(**args)
2491
+ end
2492
+
2493
+ # Update properties of this object
2494
+ def update!(**args)
2495
+ @name = args[:name] if args.key?(:name)
2496
+ @value = args[:value] if args.key?(:value)
2227
2497
  end
2228
2498
  end
2229
2499
 
@@ -2572,6 +2842,50 @@ module Google
2572
2842
  end
2573
2843
  end
2574
2844
 
2845
+ # Kubernetes Nodes associated with the finding.
2846
+ class Node
2847
+ include Google::Apis::Core::Hashable
2848
+
2849
+ # Full Resource name of the Compute Engine VM running the cluster node.
2850
+ # Corresponds to the JSON property `name`
2851
+ # @return [String]
2852
+ attr_accessor :name
2853
+
2854
+ def initialize(**args)
2855
+ update!(**args)
2856
+ end
2857
+
2858
+ # Update properties of this object
2859
+ def update!(**args)
2860
+ @name = args[:name] if args.key?(:name)
2861
+ end
2862
+ end
2863
+
2864
+ # Provides GKE Node Pool information.
2865
+ class NodePool
2866
+ include Google::Apis::Core::Hashable
2867
+
2868
+ # Kubernetes Node pool name.
2869
+ # Corresponds to the JSON property `name`
2870
+ # @return [String]
2871
+ attr_accessor :name
2872
+
2873
+ # Nodes associated with the finding.
2874
+ # Corresponds to the JSON property `nodes`
2875
+ # @return [Array<Google::Apis::SecuritycenterV1::Node>]
2876
+ attr_accessor :nodes
2877
+
2878
+ def initialize(**args)
2879
+ update!(**args)
2880
+ end
2881
+
2882
+ # Update properties of this object
2883
+ def update!(**args)
2884
+ @name = args[:name] if args.key?(:name)
2885
+ @nodes = args[:nodes] if args.key?(:nodes)
2886
+ end
2887
+ end
2888
+
2575
2889
  # Cloud Security Command Center (Cloud SCC) notification configs. A notification
2576
2890
  # config is a Cloud SCC resource that contains the configuration to send
2577
2891
  # notifications for create/update events of findings, assets and etc.
@@ -2721,6 +3035,43 @@ module Google
2721
3035
  end
2722
3036
  end
2723
3037
 
3038
+ # Kubernetes Pod.
3039
+ class Pod
3040
+ include Google::Apis::Core::Hashable
3041
+
3042
+ # Pod containers associated with this finding, if any.
3043
+ # Corresponds to the JSON property `containers`
3044
+ # @return [Array<Google::Apis::SecuritycenterV1::Container>]
3045
+ attr_accessor :containers
3046
+
3047
+ # Pod labels. For Kubernetes containers, these are applied to the container.
3048
+ # Corresponds to the JSON property `labels`
3049
+ # @return [Array<Google::Apis::SecuritycenterV1::Label>]
3050
+ attr_accessor :labels
3051
+
3052
+ # Kubernetes Pod name.
3053
+ # Corresponds to the JSON property `name`
3054
+ # @return [String]
3055
+ attr_accessor :name
3056
+
3057
+ # Kubernetes Pod namespace.
3058
+ # Corresponds to the JSON property `ns`
3059
+ # @return [String]
3060
+ attr_accessor :ns
3061
+
3062
+ def initialize(**args)
3063
+ update!(**args)
3064
+ end
3065
+
3066
+ # Update properties of this object
3067
+ def update!(**args)
3068
+ @containers = args[:containers] if args.key?(:containers)
3069
+ @labels = args[:labels] if args.key?(:labels)
3070
+ @name = args[:name] if args.key?(:name)
3071
+ @ns = args[:ns] if args.key?(:ns)
3072
+ end
3073
+ end
3074
+
2724
3075
  # An Identity and Access Management (IAM) policy, which specifies access
2725
3076
  # controls for Google Cloud resources. A `Policy` is a collection of `bindings`.
2726
3077
  # A `binding` binds one or more `members`, or principals, to a single `role`.
@@ -3010,6 +3361,37 @@ module Google
3010
3361
  end
3011
3362
  end
3012
3363
 
3364
+ # Kubernetes Role or ClusterRole.
3365
+ class Role
3366
+ include Google::Apis::Core::Hashable
3367
+
3368
+ # Role type.
3369
+ # Corresponds to the JSON property `kind`
3370
+ # @return [String]
3371
+ attr_accessor :kind
3372
+
3373
+ # Role name.
3374
+ # Corresponds to the JSON property `name`
3375
+ # @return [String]
3376
+ attr_accessor :name
3377
+
3378
+ # Role namespace.
3379
+ # Corresponds to the JSON property `ns`
3380
+ # @return [String]
3381
+ attr_accessor :ns
3382
+
3383
+ def initialize(**args)
3384
+ update!(**args)
3385
+ end
3386
+
3387
+ # Update properties of this object
3388
+ def update!(**args)
3389
+ @kind = args[:kind] if args.key?(:kind)
3390
+ @name = args[:name] if args.key?(:name)
3391
+ @ns = args[:ns] if args.key?(:ns)
3392
+ end
3393
+ end
3394
+
3013
3395
  # Request message for running asset discovery for an organization.
3014
3396
  class RunAssetDiscoveryRequest
3015
3397
  include Google::Apis::Core::Hashable
@@ -3146,6 +3528,37 @@ module Google
3146
3528
  end
3147
3529
  end
3148
3530
 
3531
+ # Identity delegation history of an authenticated service account.
3532
+ class ServiceAccountDelegationInfo
3533
+ include Google::Apis::Core::Hashable
3534
+
3535
+ # The email address of a Google account. .
3536
+ # Corresponds to the JSON property `principalEmail`
3537
+ # @return [String]
3538
+ attr_accessor :principal_email
3539
+
3540
+ # A string representing the principal_subject associated with the identity. As
3541
+ # compared to `principal_email`, supports principals that aren't associated with
3542
+ # email addresses, such as third party principals. For most identities, the
3543
+ # format will be `principal://iam.googleapis.com/`identity pool name`/subject/`
3544
+ # subject)` except for some GKE identities (GKE_WORKLOAD, FREEFORM,
3545
+ # GKE_HUB_WORKLOAD) that are still in the legacy format `serviceAccount:`
3546
+ # identity pool name`[`subject`]`
3547
+ # Corresponds to the JSON property `principalSubject`
3548
+ # @return [String]
3549
+ attr_accessor :principal_subject
3550
+
3551
+ def initialize(**args)
3552
+ update!(**args)
3553
+ end
3554
+
3555
+ # Update properties of this object
3556
+ def update!(**args)
3557
+ @principal_email = args[:principal_email] if args.key?(:principal_email)
3558
+ @principal_subject = args[:principal_subject] if args.key?(:principal_subject)
3559
+ end
3560
+ end
3561
+
3149
3562
  # Request message for updating a finding's state.
3150
3563
  class SetFindingStateRequest
3151
3564
  include Google::Apis::Core::Hashable
@@ -3362,6 +3775,37 @@ module Google
3362
3775
  end
3363
3776
  end
3364
3777
 
3778
+ # Represents a Kubernetes Subject.
3779
+ class Subject
3780
+ include Google::Apis::Core::Hashable
3781
+
3782
+ # Authentication type for subject.
3783
+ # Corresponds to the JSON property `kind`
3784
+ # @return [String]
3785
+ attr_accessor :kind
3786
+
3787
+ # Name for subject.
3788
+ # Corresponds to the JSON property `name`
3789
+ # @return [String]
3790
+ attr_accessor :name
3791
+
3792
+ # Namespace for subject.
3793
+ # Corresponds to the JSON property `ns`
3794
+ # @return [String]
3795
+ attr_accessor :ns
3796
+
3797
+ def initialize(**args)
3798
+ update!(**args)
3799
+ end
3800
+
3801
+ # Update properties of this object
3802
+ def update!(**args)
3803
+ @kind = args[:kind] if args.key?(:kind)
3804
+ @name = args[:name] if args.key?(:name)
3805
+ @ns = args[:ns] if args.key?(:ns)
3806
+ end
3807
+ end
3808
+
3365
3809
  # Request message for `TestIamPermissions` method.
3366
3810
  class TestIamPermissionsRequest
3367
3811
  include Google::Apis::Core::Hashable
@@ -16,13 +16,13 @@ module Google
16
16
  module Apis
17
17
  module SecuritycenterV1
18
18
  # Version of the google-apis-securitycenter_v1 gem
19
- GEM_VERSION = "0.35.0"
19
+ GEM_VERSION = "0.38.0"
20
20
 
21
21
  # Version of the code generator used to generate this client
22
22
  GENERATOR_VERSION = "0.9.0"
23
23
 
24
24
  # Revision of the discovery document this client was generated from
25
- REVISION = "20220707"
25
+ REVISION = "20220728"
26
26
  end
27
27
  end
28
28
  end
@@ -28,6 +28,12 @@ module Google
28
28
  include Google::Apis::Core::JsonObjectSupport
29
29
  end
30
30
 
31
+ class AccessReview
32
+ class Representation < Google::Apis::Core::JsonRepresentation; end
33
+
34
+ include Google::Apis::Core::JsonObjectSupport
35
+ end
36
+
31
37
  class Asset
32
38
  class Representation < Google::Apis::Core::JsonRepresentation; end
33
39
 
@@ -88,6 +94,12 @@ module Google
88
94
  include Google::Apis::Core::JsonObjectSupport
89
95
  end
90
96
 
97
+ class Container
98
+ class Representation < Google::Apis::Core::JsonRepresentation; end
99
+
100
+ include Google::Apis::Core::JsonObjectSupport
101
+ end
102
+
91
103
  class Cve
92
104
  class Representation < Google::Apis::Core::JsonRepresentation; end
93
105
 
@@ -178,6 +190,12 @@ module Google
178
190
  include Google::Apis::Core::JsonObjectSupport
179
191
  end
180
192
 
193
+ class GoogleCloudSecuritycenterV1Binding
194
+ class Representation < Google::Apis::Core::JsonRepresentation; end
195
+
196
+ include Google::Apis::Core::JsonObjectSupport
197
+ end
198
+
181
199
  class GoogleCloudSecuritycenterV1BulkMuteFindingsResponse
182
200
  class Representation < Google::Apis::Core::JsonRepresentation; end
183
201
 
@@ -304,6 +322,18 @@ module Google
304
322
  include Google::Apis::Core::JsonObjectSupport
305
323
  end
306
324
 
325
+ class Kubernetes
326
+ class Representation < Google::Apis::Core::JsonRepresentation; end
327
+
328
+ include Google::Apis::Core::JsonObjectSupport
329
+ end
330
+
331
+ class Label
332
+ class Representation < Google::Apis::Core::JsonRepresentation; end
333
+
334
+ include Google::Apis::Core::JsonObjectSupport
335
+ end
336
+
307
337
  class ListAssetsResponse
308
338
  class Representation < Google::Apis::Core::JsonRepresentation; end
309
339
 
@@ -370,6 +400,18 @@ module Google
370
400
  include Google::Apis::Core::JsonObjectSupport
371
401
  end
372
402
 
403
+ class Node
404
+ class Representation < Google::Apis::Core::JsonRepresentation; end
405
+
406
+ include Google::Apis::Core::JsonObjectSupport
407
+ end
408
+
409
+ class NodePool
410
+ class Representation < Google::Apis::Core::JsonRepresentation; end
411
+
412
+ include Google::Apis::Core::JsonObjectSupport
413
+ end
414
+
373
415
  class NotificationConfig
374
416
  class Representation < Google::Apis::Core::JsonRepresentation; end
375
417
 
@@ -388,6 +430,12 @@ module Google
388
430
  include Google::Apis::Core::JsonObjectSupport
389
431
  end
390
432
 
433
+ class Pod
434
+ class Representation < Google::Apis::Core::JsonRepresentation; end
435
+
436
+ include Google::Apis::Core::JsonObjectSupport
437
+ end
438
+
391
439
  class Policy
392
440
  class Representation < Google::Apis::Core::JsonRepresentation; end
393
441
 
@@ -418,6 +466,12 @@ module Google
418
466
  include Google::Apis::Core::JsonObjectSupport
419
467
  end
420
468
 
469
+ class Role
470
+ class Representation < Google::Apis::Core::JsonRepresentation; end
471
+
472
+ include Google::Apis::Core::JsonObjectSupport
473
+ end
474
+
421
475
  class RunAssetDiscoveryRequest
422
476
  class Representation < Google::Apis::Core::JsonRepresentation; end
423
477
 
@@ -436,6 +490,12 @@ module Google
436
490
  include Google::Apis::Core::JsonObjectSupport
437
491
  end
438
492
 
493
+ class ServiceAccountDelegationInfo
494
+ class Representation < Google::Apis::Core::JsonRepresentation; end
495
+
496
+ include Google::Apis::Core::JsonObjectSupport
497
+ end
498
+
439
499
  class SetFindingStateRequest
440
500
  class Representation < Google::Apis::Core::JsonRepresentation; end
441
501
 
@@ -472,6 +532,12 @@ module Google
472
532
  include Google::Apis::Core::JsonObjectSupport
473
533
  end
474
534
 
535
+ class Subject
536
+ class Representation < Google::Apis::Core::JsonRepresentation; end
537
+
538
+ include Google::Apis::Core::JsonObjectSupport
539
+ end
540
+
475
541
  class TestIamPermissionsRequest
476
542
  class Representation < Google::Apis::Core::JsonRepresentation; end
477
543
 
@@ -504,11 +570,28 @@ module Google
504
570
 
505
571
  property :method_name, as: 'methodName'
506
572
  property :principal_email, as: 'principalEmail'
573
+ property :principal_subject, as: 'principalSubject'
574
+ collection :service_account_delegation_info, as: 'serviceAccountDelegationInfo', class: Google::Apis::SecuritycenterV1::ServiceAccountDelegationInfo, decorator: Google::Apis::SecuritycenterV1::ServiceAccountDelegationInfo::Representation
575
+
576
+ property :service_account_key_name, as: 'serviceAccountKeyName'
507
577
  property :service_name, as: 'serviceName'
508
578
  property :user_agent_family, as: 'userAgentFamily'
509
579
  end
510
580
  end
511
581
 
582
+ class AccessReview
583
+ # @private
584
+ class Representation < Google::Apis::Core::JsonRepresentation
585
+ property :group, as: 'group'
586
+ property :name, as: 'name'
587
+ property :ns, as: 'ns'
588
+ property :resource, as: 'resource'
589
+ property :subresource, as: 'subresource'
590
+ property :verb, as: 'verb'
591
+ property :version, as: 'version'
592
+ end
593
+ end
594
+
512
595
  class Asset
513
596
  # @private
514
597
  class Representation < Google::Apis::Core::JsonRepresentation
@@ -605,6 +688,17 @@ module Google
605
688
  end
606
689
  end
607
690
 
691
+ class Container
692
+ # @private
693
+ class Representation < Google::Apis::Core::JsonRepresentation
694
+ property :image_id, as: 'imageId'
695
+ collection :labels, as: 'labels', class: Google::Apis::SecuritycenterV1::Label, decorator: Google::Apis::SecuritycenterV1::Label::Representation
696
+
697
+ property :name, as: 'name'
698
+ property :uri, as: 'uri'
699
+ end
700
+ end
701
+
608
702
  class Cve
609
703
  # @private
610
704
  class Representation < Google::Apis::Core::JsonRepresentation
@@ -707,6 +801,8 @@ module Google
707
801
 
708
802
  hash :contacts, as: 'contacts', class: Google::Apis::SecuritycenterV1::ContactDetails, decorator: Google::Apis::SecuritycenterV1::ContactDetails::Representation
709
803
 
804
+ collection :containers, as: 'containers', class: Google::Apis::SecuritycenterV1::Container, decorator: Google::Apis::SecuritycenterV1::Container::Representation
805
+
710
806
  property :create_time, as: 'createTime'
711
807
  property :description, as: 'description'
712
808
  property :event_time, as: 'eventTime'
@@ -720,6 +816,8 @@ module Google
720
816
 
721
817
  property :indicator, as: 'indicator', class: Google::Apis::SecuritycenterV1::Indicator, decorator: Google::Apis::SecuritycenterV1::Indicator::Representation
722
818
 
819
+ property :kubernetes, as: 'kubernetes', class: Google::Apis::SecuritycenterV1::Kubernetes, decorator: Google::Apis::SecuritycenterV1::Kubernetes::Representation
820
+
723
821
  property :mitre_attack, as: 'mitreAttack', class: Google::Apis::SecuritycenterV1::MitreAttack, decorator: Google::Apis::SecuritycenterV1::MitreAttack::Representation
724
822
 
725
823
  property :mute, as: 'mute'
@@ -785,6 +883,18 @@ module Google
785
883
  end
786
884
  end
787
885
 
886
+ class GoogleCloudSecuritycenterV1Binding
887
+ # @private
888
+ class Representation < Google::Apis::Core::JsonRepresentation
889
+ property :name, as: 'name'
890
+ property :ns, as: 'ns'
891
+ property :role, as: 'role', class: Google::Apis::SecuritycenterV1::Role, decorator: Google::Apis::SecuritycenterV1::Role::Representation
892
+
893
+ collection :subjects, as: 'subjects', class: Google::Apis::SecuritycenterV1::Subject, decorator: Google::Apis::SecuritycenterV1::Subject::Representation
894
+
895
+ end
896
+ end
897
+
788
898
  class GoogleCloudSecuritycenterV1BulkMuteFindingsResponse
789
899
  # @private
790
900
  class Representation < Google::Apis::Core::JsonRepresentation
@@ -1002,6 +1112,33 @@ module Google
1002
1112
  collection :ip_addresses, as: 'ipAddresses'
1003
1113
  collection :signatures, as: 'signatures', class: Google::Apis::SecuritycenterV1::ProcessSignature, decorator: Google::Apis::SecuritycenterV1::ProcessSignature::Representation
1004
1114
 
1115
+ collection :uris, as: 'uris'
1116
+ end
1117
+ end
1118
+
1119
+ class Kubernetes
1120
+ # @private
1121
+ class Representation < Google::Apis::Core::JsonRepresentation
1122
+ collection :access_reviews, as: 'accessReviews', class: Google::Apis::SecuritycenterV1::AccessReview, decorator: Google::Apis::SecuritycenterV1::AccessReview::Representation
1123
+
1124
+ collection :bindings, as: 'bindings', class: Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1Binding, decorator: Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1Binding::Representation
1125
+
1126
+ collection :node_pools, as: 'nodePools', class: Google::Apis::SecuritycenterV1::NodePool, decorator: Google::Apis::SecuritycenterV1::NodePool::Representation
1127
+
1128
+ collection :nodes, as: 'nodes', class: Google::Apis::SecuritycenterV1::Node, decorator: Google::Apis::SecuritycenterV1::Node::Representation
1129
+
1130
+ collection :pods, as: 'pods', class: Google::Apis::SecuritycenterV1::Pod, decorator: Google::Apis::SecuritycenterV1::Pod::Representation
1131
+
1132
+ collection :roles, as: 'roles', class: Google::Apis::SecuritycenterV1::Role, decorator: Google::Apis::SecuritycenterV1::Role::Representation
1133
+
1134
+ end
1135
+ end
1136
+
1137
+ class Label
1138
+ # @private
1139
+ class Representation < Google::Apis::Core::JsonRepresentation
1140
+ property :name, as: 'name'
1141
+ property :value, as: 'value'
1005
1142
  end
1006
1143
  end
1007
1144
 
@@ -1112,6 +1249,22 @@ module Google
1112
1249
  end
1113
1250
  end
1114
1251
 
1252
+ class Node
1253
+ # @private
1254
+ class Representation < Google::Apis::Core::JsonRepresentation
1255
+ property :name, as: 'name'
1256
+ end
1257
+ end
1258
+
1259
+ class NodePool
1260
+ # @private
1261
+ class Representation < Google::Apis::Core::JsonRepresentation
1262
+ property :name, as: 'name'
1263
+ collection :nodes, as: 'nodes', class: Google::Apis::SecuritycenterV1::Node, decorator: Google::Apis::SecuritycenterV1::Node::Representation
1264
+
1265
+ end
1266
+ end
1267
+
1115
1268
  class NotificationConfig
1116
1269
  # @private
1117
1270
  class Representation < Google::Apis::Core::JsonRepresentation
@@ -1146,6 +1299,18 @@ module Google
1146
1299
  end
1147
1300
  end
1148
1301
 
1302
+ class Pod
1303
+ # @private
1304
+ class Representation < Google::Apis::Core::JsonRepresentation
1305
+ collection :containers, as: 'containers', class: Google::Apis::SecuritycenterV1::Container, decorator: Google::Apis::SecuritycenterV1::Container::Representation
1306
+
1307
+ collection :labels, as: 'labels', class: Google::Apis::SecuritycenterV1::Label, decorator: Google::Apis::SecuritycenterV1::Label::Representation
1308
+
1309
+ property :name, as: 'name'
1310
+ property :ns, as: 'ns'
1311
+ end
1312
+ end
1313
+
1149
1314
  class Policy
1150
1315
  # @private
1151
1316
  class Representation < Google::Apis::Core::JsonRepresentation
@@ -1211,6 +1376,15 @@ module Google
1211
1376
  end
1212
1377
  end
1213
1378
 
1379
+ class Role
1380
+ # @private
1381
+ class Representation < Google::Apis::Core::JsonRepresentation
1382
+ property :kind, as: 'kind'
1383
+ property :name, as: 'name'
1384
+ property :ns, as: 'ns'
1385
+ end
1386
+ end
1387
+
1214
1388
  class RunAssetDiscoveryRequest
1215
1389
  # @private
1216
1390
  class Representation < Google::Apis::Core::JsonRepresentation
@@ -1242,6 +1416,14 @@ module Google
1242
1416
  end
1243
1417
  end
1244
1418
 
1419
+ class ServiceAccountDelegationInfo
1420
+ # @private
1421
+ class Representation < Google::Apis::Core::JsonRepresentation
1422
+ property :principal_email, as: 'principalEmail'
1423
+ property :principal_subject, as: 'principalSubject'
1424
+ end
1425
+ end
1426
+
1245
1427
  class SetFindingStateRequest
1246
1428
  # @private
1247
1429
  class Representation < Google::Apis::Core::JsonRepresentation
@@ -1292,6 +1474,15 @@ module Google
1292
1474
  end
1293
1475
  end
1294
1476
 
1477
+ class Subject
1478
+ # @private
1479
+ class Representation < Google::Apis::Core::JsonRepresentation
1480
+ property :kind, as: 'kind'
1481
+ property :name, as: 'name'
1482
+ property :ns, as: 'ns'
1483
+ end
1484
+ end
1485
+
1295
1486
  class TestIamPermissionsRequest
1296
1487
  # @private
1297
1488
  class Representation < Google::Apis::Core::JsonRepresentation
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: google-apis-securitycenter_v1
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.35.0
4
+ version: 0.38.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Google LLC
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2022-07-18 00:00:00.000000000 Z
11
+ date: 2022-08-08 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: google-apis-core
@@ -58,7 +58,7 @@ licenses:
58
58
  metadata:
59
59
  bug_tracker_uri: https://github.com/googleapis/google-api-ruby-client/issues
60
60
  changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-securitycenter_v1/CHANGELOG.md
61
- documentation_uri: https://googleapis.dev/ruby/google-apis-securitycenter_v1/v0.35.0
61
+ documentation_uri: https://googleapis.dev/ruby/google-apis-securitycenter_v1/v0.38.0
62
62
  source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-securitycenter_v1
63
63
  post_install_message:
64
64
  rdoc_options: []