google-apis-securitycenter_v1beta2 0.28.0 → 0.31.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: aa9063cb47b9ed5987201cf369b87cd169e76a78a24dc47b051b96f935a034fe
4
- data.tar.gz: d00251c485541e5f625e200283b3ebda1a4b429488079eae8b91832ccc3001f9
3
+ metadata.gz: c73c84748fe0a23446285b35b96017c88461f4510d4ef5e1912788e7d4cc6e1e
4
+ data.tar.gz: 466c1291bbc372919523d541702de16497fedba3eb458ef565c5b86f1a98f182
5
5
  SHA512:
6
- metadata.gz: 5d395c5773df23cc2a4ddf842f676ae493621c1a59561e1e0dda3e1d60f3378224c3b26cf45fc0ac270c8ea49f33f436f82f6c2f7454f095b622cadff80b22d8
7
- data.tar.gz: 300f060a3e35afe6aa496f32acd40b6a5e59dc6c703e92076adb716ecf3252f62863ffa71fdbc126d3ca216af23b5b1d758d34dd005a7404a95d1baa9059ab5e
6
+ metadata.gz: d33dd87ec053c1027b4ad4fe89f963d158eca52866f78e9cf39c1eb3159979c1baf342317af6ecbb15944e20825e0507d7f69058a6dec7fc0251ec303e8e8555
7
+ data.tar.gz: 7b2e935a5311ae91708cc30c99c3bee9ebd60da873710cf351a8a7b8001f7364f68b6b52312517c130cf4f9a62b467365762d92e13f1c3124f0cf00ee7977f55
data/CHANGELOG.md CHANGED
@@ -1,5 +1,17 @@
1
1
  # Release history for google-apis-securitycenter_v1beta2
2
2
 
3
+ ### v0.31.0 (2022-08-02)
4
+
5
+ * Regenerated from discovery document revision 20220728
6
+
7
+ ### v0.30.0 (2022-07-26)
8
+
9
+ * Regenerated from discovery document revision 20220720
10
+
11
+ ### v0.29.0 (2022-07-19)
12
+
13
+ * Regenerated from discovery document revision 20220713
14
+
3
15
  ### v0.28.0 (2022-07-12)
4
16
 
5
17
  * Regenerated from discovery document revision 20220707
@@ -41,11 +41,44 @@ module Google
41
41
  # @return [String]
42
42
  attr_accessor :method_name
43
43
 
44
- # Associated email, such as "foo@google.com".
44
+ # Associated email, such as "foo@google.com". The email address of the
45
+ # authenticated user (or service account on behalf of third party principal)
46
+ # making the request. For third party identity callers, the `principal_subject`
47
+ # field is populated instead of this field. For privacy reasons, the principal
48
+ # email address is sometimes redacted. For more information, see [Caller
49
+ # identities in audit logs](https://cloud.google.com/logging/docs/audit#user-id).
45
50
  # Corresponds to the JSON property `principalEmail`
46
51
  # @return [String]
47
52
  attr_accessor :principal_email
48
53
 
54
+ # A string representing the principal_subject associated with the identity. As
55
+ # compared to `principal_email`, supports principals that aren't associated with
56
+ # email addresses, such as third party principals. For most identities, the
57
+ # format will be `principal://iam.googleapis.com/`identity pool name`/subject/`
58
+ # subject)` except for some GKE identities (GKE_WORKLOAD, FREEFORM,
59
+ # GKE_HUB_WORKLOAD) that are still in the legacy format `serviceAccount:`
60
+ # identity pool name`[`subject`]`
61
+ # Corresponds to the JSON property `principalSubject`
62
+ # @return [String]
63
+ attr_accessor :principal_subject
64
+
65
+ # Identity delegation history of an authenticated service account that makes the
66
+ # request. It contains information on the real authorities that try to access
67
+ # GCP resources by delegating on a service account. When multiple authorities
68
+ # are present, they are guaranteed to be sorted based on the original ordering
69
+ # of the identity delegation events.
70
+ # Corresponds to the JSON property `serviceAccountDelegationInfo`
71
+ # @return [Array<Google::Apis::SecuritycenterV1beta2::ServiceAccountDelegationInfo>]
72
+ attr_accessor :service_account_delegation_info
73
+
74
+ # The name of the service account key used to create or exchange credentials for
75
+ # authenticating the service account making the request. This is a scheme-less
76
+ # URI full resource name. For example: "//iam.googleapis.com/projects/`
77
+ # PROJECT_ID`/serviceAccounts/`ACCOUNT`/keys/`key`"
78
+ # Corresponds to the JSON property `serviceAccountKeyName`
79
+ # @return [String]
80
+ attr_accessor :service_account_key_name
81
+
49
82
  # This is the API service that the service account made a call to, e.g. "iam.
50
83
  # googleapis.com"
51
84
  # Corresponds to the JSON property `serviceName`
@@ -68,11 +101,72 @@ module Google
68
101
  @caller_ip_geo = args[:caller_ip_geo] if args.key?(:caller_ip_geo)
69
102
  @method_name = args[:method_name] if args.key?(:method_name)
70
103
  @principal_email = args[:principal_email] if args.key?(:principal_email)
104
+ @principal_subject = args[:principal_subject] if args.key?(:principal_subject)
105
+ @service_account_delegation_info = args[:service_account_delegation_info] if args.key?(:service_account_delegation_info)
106
+ @service_account_key_name = args[:service_account_key_name] if args.key?(:service_account_key_name)
71
107
  @service_name = args[:service_name] if args.key?(:service_name)
72
108
  @user_agent_family = args[:user_agent_family] if args.key?(:user_agent_family)
73
109
  end
74
110
  end
75
111
 
112
+ # Conveys information about a Kubernetes access review (e.g. kubectl auth can-i .
113
+ # ..) that was involved in a finding.
114
+ class AccessReview
115
+ include Google::Apis::Core::Hashable
116
+
117
+ # Group is the API Group of the Resource. "*" means all.
118
+ # Corresponds to the JSON property `group`
119
+ # @return [String]
120
+ attr_accessor :group
121
+
122
+ # Name is the name of the resource being requested. Empty means all.
123
+ # Corresponds to the JSON property `name`
124
+ # @return [String]
125
+ attr_accessor :name
126
+
127
+ # Namespace of the action being requested. Currently, there is no distinction
128
+ # between no namespace and all namespaces. Both are represented by "" (empty).
129
+ # Corresponds to the JSON property `ns`
130
+ # @return [String]
131
+ attr_accessor :ns
132
+
133
+ # Resource is the optional resource type requested. "*" means all.
134
+ # Corresponds to the JSON property `resource`
135
+ # @return [String]
136
+ attr_accessor :resource
137
+
138
+ # Subresource is the optional subresource type.
139
+ # Corresponds to the JSON property `subresource`
140
+ # @return [String]
141
+ attr_accessor :subresource
142
+
143
+ # Verb is a Kubernetes resource API verb, like: get, list, watch, create, update,
144
+ # delete, proxy. "*" means all.
145
+ # Corresponds to the JSON property `verb`
146
+ # @return [String]
147
+ attr_accessor :verb
148
+
149
+ # Version is the API Version of the Resource. "*" means all.
150
+ # Corresponds to the JSON property `version`
151
+ # @return [String]
152
+ attr_accessor :version
153
+
154
+ def initialize(**args)
155
+ update!(**args)
156
+ end
157
+
158
+ # Update properties of this object
159
+ def update!(**args)
160
+ @group = args[:group] if args.key?(:group)
161
+ @name = args[:name] if args.key?(:name)
162
+ @ns = args[:ns] if args.key?(:ns)
163
+ @resource = args[:resource] if args.key?(:resource)
164
+ @subresource = args[:subresource] if args.key?(:subresource)
165
+ @verb = args[:verb] if args.key?(:verb)
166
+ @version = args[:version] if args.key?(:version)
167
+ end
168
+ end
169
+
76
170
  # Contains compliance information about a security standard indicating unmet
77
171
  # recommendations.
78
172
  class Compliance
@@ -214,6 +308,45 @@ module Google
214
308
  end
215
309
  end
216
310
 
311
+ # Container associated with the finding.
312
+ class Container
313
+ include Google::Apis::Core::Hashable
314
+
315
+ # Optional container image id, when provided by the container runtime. Uniquely
316
+ # identifies the container image launched using a container image digest.
317
+ # Corresponds to the JSON property `imageId`
318
+ # @return [String]
319
+ attr_accessor :image_id
320
+
321
+ # Container labels, as provided by the container runtime.
322
+ # Corresponds to the JSON property `labels`
323
+ # @return [Array<Google::Apis::SecuritycenterV1beta2::Label>]
324
+ attr_accessor :labels
325
+
326
+ # Container name.
327
+ # Corresponds to the JSON property `name`
328
+ # @return [String]
329
+ attr_accessor :name
330
+
331
+ # Container image URI provided when configuring a pod/container. May identify a
332
+ # container image version using mutable tags.
333
+ # Corresponds to the JSON property `uri`
334
+ # @return [String]
335
+ attr_accessor :uri
336
+
337
+ def initialize(**args)
338
+ update!(**args)
339
+ end
340
+
341
+ # Update properties of this object
342
+ def update!(**args)
343
+ @image_id = args[:image_id] if args.key?(:image_id)
344
+ @labels = args[:labels] if args.key?(:labels)
345
+ @name = args[:name] if args.key?(:name)
346
+ @uri = args[:uri] if args.key?(:uri)
347
+ end
348
+ end
349
+
217
350
  # Resource capturing the settings for the Container Threat Detection service.
218
351
  class ContainerThreatDetectionSettings
219
352
  include Google::Apis::Core::Hashable
@@ -662,12 +795,18 @@ module Google
662
795
  # key represents the type of contact, while the value contains a list of all the
663
796
  # contacts that pertain. Please refer to: https://cloud.google.com/resource-
664
797
  # manager/docs/managing-notification-contacts#notification-categories ` "
665
- # security":[ ` "contact":` "email":"person1@company.com" ` `, ` "contact":` "
666
- # email":“person2@company.com ` ` ] `
798
+ # security": ` "contacts": [ ` "email": "person1@company.com" `, ` "email": "
799
+ # person2@company.com" ` ] `
667
800
  # Corresponds to the JSON property `contacts`
668
801
  # @return [Hash<String,Google::Apis::SecuritycenterV1beta2::ContactDetails>]
669
802
  attr_accessor :contacts
670
803
 
804
+ # Containers associated with the finding. containers provides information for
805
+ # both Kubernetes and non-Kubernetes containers.
806
+ # Corresponds to the JSON property `containers`
807
+ # @return [Array<Google::Apis::SecuritycenterV1beta2::Container>]
808
+ attr_accessor :containers
809
+
671
810
  # The time at which the finding was created in Security Command Center.
672
811
  # Corresponds to the JSON property `createTime`
673
812
  # @return [String]
@@ -726,6 +865,11 @@ module Google
726
865
  # @return [Google::Apis::SecuritycenterV1beta2::Indicator]
727
866
  attr_accessor :indicator
728
867
 
868
+ # Kubernetes related attributes.
869
+ # Corresponds to the JSON property `kubernetes`
870
+ # @return [Google::Apis::SecuritycenterV1beta2::Kubernetes]
871
+ attr_accessor :kubernetes
872
+
729
873
  # MITRE ATT&CK tactics and techniques related to this finding. See: https://
730
874
  # attack.mitre.org
731
875
  # Corresponds to the JSON property `mitreAttack`
@@ -830,6 +974,7 @@ module Google
830
974
  @compliances = args[:compliances] if args.key?(:compliances)
831
975
  @connections = args[:connections] if args.key?(:connections)
832
976
  @contacts = args[:contacts] if args.key?(:contacts)
977
+ @containers = args[:containers] if args.key?(:containers)
833
978
  @create_time = args[:create_time] if args.key?(:create_time)
834
979
  @description = args[:description] if args.key?(:description)
835
980
  @event_time = args[:event_time] if args.key?(:event_time)
@@ -839,6 +984,7 @@ module Google
839
984
  @finding_class = args[:finding_class] if args.key?(:finding_class)
840
985
  @iam_bindings = args[:iam_bindings] if args.key?(:iam_bindings)
841
986
  @indicator = args[:indicator] if args.key?(:indicator)
987
+ @kubernetes = args[:kubernetes] if args.key?(:kubernetes)
842
988
  @mitre_attack = args[:mitre_attack] if args.key?(:mitre_attack)
843
989
  @mute = args[:mute] if args.key?(:mute)
844
990
  @mute_initiator = args[:mute_initiator] if args.key?(:mute_initiator)
@@ -984,6 +1130,44 @@ module Google
984
1130
  end
985
1131
  end
986
1132
 
1133
+ # Represents a Kubernetes RoleBinding or ClusterRoleBinding.
1134
+ class GoogleCloudSecuritycenterV1Binding
1135
+ include Google::Apis::Core::Hashable
1136
+
1137
+ # Name for binding.
1138
+ # Corresponds to the JSON property `name`
1139
+ # @return [String]
1140
+ attr_accessor :name
1141
+
1142
+ # Namespace for binding.
1143
+ # Corresponds to the JSON property `ns`
1144
+ # @return [String]
1145
+ attr_accessor :ns
1146
+
1147
+ # Kubernetes Role or ClusterRole.
1148
+ # Corresponds to the JSON property `role`
1149
+ # @return [Google::Apis::SecuritycenterV1beta2::Role]
1150
+ attr_accessor :role
1151
+
1152
+ # Represents the subjects(s) bound to the role. Not always available for PATCH
1153
+ # requests.
1154
+ # Corresponds to the JSON property `subjects`
1155
+ # @return [Array<Google::Apis::SecuritycenterV1beta2::Subject>]
1156
+ attr_accessor :subjects
1157
+
1158
+ def initialize(**args)
1159
+ update!(**args)
1160
+ end
1161
+
1162
+ # Update properties of this object
1163
+ def update!(**args)
1164
+ @name = args[:name] if args.key?(:name)
1165
+ @ns = args[:ns] if args.key?(:ns)
1166
+ @role = args[:role] if args.key?(:role)
1167
+ @subjects = args[:subjects] if args.key?(:subjects)
1168
+ end
1169
+ end
1170
+
987
1171
  # The response to a BulkMute request. Contains the LRO information.
988
1172
  class GoogleCloudSecuritycenterV1BulkMuteFindingsResponse
989
1173
  include Google::Apis::Core::Hashable
@@ -1623,6 +1807,11 @@ module Google
1623
1807
  # @return [Array<Google::Apis::SecuritycenterV1beta2::ProcessSignature>]
1624
1808
  attr_accessor :signatures
1625
1809
 
1810
+ # The list of URIs associated to the Findings
1811
+ # Corresponds to the JSON property `uris`
1812
+ # @return [Array<String>]
1813
+ attr_accessor :uris
1814
+
1626
1815
  def initialize(**args)
1627
1816
  update!(**args)
1628
1817
  end
@@ -1632,6 +1821,87 @@ module Google
1632
1821
  @domains = args[:domains] if args.key?(:domains)
1633
1822
  @ip_addresses = args[:ip_addresses] if args.key?(:ip_addresses)
1634
1823
  @signatures = args[:signatures] if args.key?(:signatures)
1824
+ @uris = args[:uris] if args.key?(:uris)
1825
+ end
1826
+ end
1827
+
1828
+ # Kubernetes related attributes.
1829
+ class Kubernetes
1830
+ include Google::Apis::Core::Hashable
1831
+
1832
+ # Provides information on any Kubernetes access reviews (i.e. privilege checks)
1833
+ # relevant to the finding.
1834
+ # Corresponds to the JSON property `accessReviews`
1835
+ # @return [Array<Google::Apis::SecuritycenterV1beta2::AccessReview>]
1836
+ attr_accessor :access_reviews
1837
+
1838
+ # Provides Kubernetes role binding information for findings that involve
1839
+ # RoleBindings or ClusterRoleBindings.
1840
+ # Corresponds to the JSON property `bindings`
1841
+ # @return [Array<Google::Apis::SecuritycenterV1beta2::GoogleCloudSecuritycenterV1Binding>]
1842
+ attr_accessor :bindings
1843
+
1844
+ # GKE Node Pools associated with the finding. This field will contain NodePool
1845
+ # information for each Node, when it is available.
1846
+ # Corresponds to the JSON property `nodePools`
1847
+ # @return [Array<Google::Apis::SecuritycenterV1beta2::NodePool>]
1848
+ attr_accessor :node_pools
1849
+
1850
+ # Provides Kubernetes Node information.
1851
+ # Corresponds to the JSON property `nodes`
1852
+ # @return [Array<Google::Apis::SecuritycenterV1beta2::Node>]
1853
+ attr_accessor :nodes
1854
+
1855
+ # Kubernetes Pods associated with the finding. This field will contain Pod
1856
+ # records for each container that is owned by a Pod.
1857
+ # Corresponds to the JSON property `pods`
1858
+ # @return [Array<Google::Apis::SecuritycenterV1beta2::Pod>]
1859
+ attr_accessor :pods
1860
+
1861
+ # Provides Kubernetes role information for findings that involve Roles or
1862
+ # ClusterRoles.
1863
+ # Corresponds to the JSON property `roles`
1864
+ # @return [Array<Google::Apis::SecuritycenterV1beta2::Role>]
1865
+ attr_accessor :roles
1866
+
1867
+ def initialize(**args)
1868
+ update!(**args)
1869
+ end
1870
+
1871
+ # Update properties of this object
1872
+ def update!(**args)
1873
+ @access_reviews = args[:access_reviews] if args.key?(:access_reviews)
1874
+ @bindings = args[:bindings] if args.key?(:bindings)
1875
+ @node_pools = args[:node_pools] if args.key?(:node_pools)
1876
+ @nodes = args[:nodes] if args.key?(:nodes)
1877
+ @pods = args[:pods] if args.key?(:pods)
1878
+ @roles = args[:roles] if args.key?(:roles)
1879
+ end
1880
+ end
1881
+
1882
+ # Label represents a generic name=value label. Label has separate name and value
1883
+ # fields to support filtering with contains().
1884
+ class Label
1885
+ include Google::Apis::Core::Hashable
1886
+
1887
+ # Label name.
1888
+ # Corresponds to the JSON property `name`
1889
+ # @return [String]
1890
+ attr_accessor :name
1891
+
1892
+ # Label value.
1893
+ # Corresponds to the JSON property `value`
1894
+ # @return [String]
1895
+ attr_accessor :value
1896
+
1897
+ def initialize(**args)
1898
+ update!(**args)
1899
+ end
1900
+
1901
+ # Update properties of this object
1902
+ def update!(**args)
1903
+ @name = args[:name] if args.key?(:name)
1904
+ @value = args[:value] if args.key?(:value)
1635
1905
  end
1636
1906
  end
1637
1907
 
@@ -1710,6 +1980,50 @@ module Google
1710
1980
  end
1711
1981
  end
1712
1982
 
1983
+ # Kubernetes Nodes associated with the finding.
1984
+ class Node
1985
+ include Google::Apis::Core::Hashable
1986
+
1987
+ # Full Resource name of the Compute Engine VM running the cluster node.
1988
+ # Corresponds to the JSON property `name`
1989
+ # @return [String]
1990
+ attr_accessor :name
1991
+
1992
+ def initialize(**args)
1993
+ update!(**args)
1994
+ end
1995
+
1996
+ # Update properties of this object
1997
+ def update!(**args)
1998
+ @name = args[:name] if args.key?(:name)
1999
+ end
2000
+ end
2001
+
2002
+ # Provides GKE Node Pool information.
2003
+ class NodePool
2004
+ include Google::Apis::Core::Hashable
2005
+
2006
+ # Kubernetes Node pool name.
2007
+ # Corresponds to the JSON property `name`
2008
+ # @return [String]
2009
+ attr_accessor :name
2010
+
2011
+ # Nodes associated with the finding.
2012
+ # Corresponds to the JSON property `nodes`
2013
+ # @return [Array<Google::Apis::SecuritycenterV1beta2::Node>]
2014
+ attr_accessor :nodes
2015
+
2016
+ def initialize(**args)
2017
+ update!(**args)
2018
+ end
2019
+
2020
+ # Update properties of this object
2021
+ def update!(**args)
2022
+ @name = args[:name] if args.key?(:name)
2023
+ @nodes = args[:nodes] if args.key?(:nodes)
2024
+ end
2025
+ end
2026
+
1713
2027
  # Resource capturing onboarding information for a given CRM resource.
1714
2028
  class OnboardingState
1715
2029
  include Google::Apis::Core::Hashable
@@ -1738,6 +2052,43 @@ module Google
1738
2052
  end
1739
2053
  end
1740
2054
 
2055
+ # Kubernetes Pod.
2056
+ class Pod
2057
+ include Google::Apis::Core::Hashable
2058
+
2059
+ # Pod containers associated with this finding, if any.
2060
+ # Corresponds to the JSON property `containers`
2061
+ # @return [Array<Google::Apis::SecuritycenterV1beta2::Container>]
2062
+ attr_accessor :containers
2063
+
2064
+ # Pod labels. For Kubernetes containers, these are applied to the container.
2065
+ # Corresponds to the JSON property `labels`
2066
+ # @return [Array<Google::Apis::SecuritycenterV1beta2::Label>]
2067
+ attr_accessor :labels
2068
+
2069
+ # Kubernetes Pod name.
2070
+ # Corresponds to the JSON property `name`
2071
+ # @return [String]
2072
+ attr_accessor :name
2073
+
2074
+ # Kubernetes Pod namespace.
2075
+ # Corresponds to the JSON property `ns`
2076
+ # @return [String]
2077
+ attr_accessor :ns
2078
+
2079
+ def initialize(**args)
2080
+ update!(**args)
2081
+ end
2082
+
2083
+ # Update properties of this object
2084
+ def update!(**args)
2085
+ @containers = args[:containers] if args.key?(:containers)
2086
+ @labels = args[:labels] if args.key?(:labels)
2087
+ @name = args[:name] if args.key?(:name)
2088
+ @ns = args[:ns] if args.key?(:ns)
2089
+ end
2090
+ end
2091
+
1741
2092
  # Represents an operating system process.
1742
2093
  class Process
1743
2094
  include Google::Apis::Core::Hashable
@@ -1910,6 +2261,37 @@ module Google
1910
2261
  end
1911
2262
  end
1912
2263
 
2264
+ # Kubernetes Role or ClusterRole.
2265
+ class Role
2266
+ include Google::Apis::Core::Hashable
2267
+
2268
+ # Role type.
2269
+ # Corresponds to the JSON property `kind`
2270
+ # @return [String]
2271
+ attr_accessor :kind
2272
+
2273
+ # Role name.
2274
+ # Corresponds to the JSON property `name`
2275
+ # @return [String]
2276
+ attr_accessor :name
2277
+
2278
+ # Role namespace.
2279
+ # Corresponds to the JSON property `ns`
2280
+ # @return [String]
2281
+ attr_accessor :ns
2282
+
2283
+ def initialize(**args)
2284
+ update!(**args)
2285
+ end
2286
+
2287
+ # Update properties of this object
2288
+ def update!(**args)
2289
+ @kind = args[:kind] if args.key?(:kind)
2290
+ @name = args[:name] if args.key?(:name)
2291
+ @ns = args[:ns] if args.key?(:ns)
2292
+ end
2293
+ end
2294
+
1913
2295
  # Resource capturing the settings for Security Center.
1914
2296
  class SecurityCenterSettings
1915
2297
  include Google::Apis::Core::Hashable
@@ -1918,7 +2300,8 @@ module Google
1918
2300
  # the organization this resource resides in. The format is `projects/`project_id`
1919
2301
  # `. An empty value disables logging. This value is only referenced by services
1920
2302
  # that support log sink. Please refer to the documentation for an updated list
1921
- # of compatible services.
2303
+ # of compatible services. This may only be specified for organization level
2304
+ # onboarding.
1922
2305
  # Corresponds to the JSON property `logSinkProject`
1923
2306
  # @return [String]
1924
2307
  attr_accessor :log_sink_project
@@ -1930,13 +2313,13 @@ module Google
1930
2313
  # @return [String]
1931
2314
  attr_accessor :name
1932
2315
 
1933
- # Timestamp of when the customer organization was onboarded to SCC.
2316
+ # Output only. Timestamp of when the customer organization was onboarded to SCC.
1934
2317
  # Corresponds to the JSON property `onboardingTime`
1935
2318
  # @return [String]
1936
2319
  attr_accessor :onboarding_time
1937
2320
 
1938
- # The organization level service account to be used for security center
1939
- # components.
2321
+ # Output only. The organization level service account to be used for security
2322
+ # center components.
1940
2323
  # Corresponds to the JSON property `orgServiceAccount`
1941
2324
  # @return [String]
1942
2325
  attr_accessor :org_service_account
@@ -2050,6 +2433,68 @@ module Google
2050
2433
  end
2051
2434
  end
2052
2435
 
2436
+ # Identity delegation history of an authenticated service account.
2437
+ class ServiceAccountDelegationInfo
2438
+ include Google::Apis::Core::Hashable
2439
+
2440
+ # The email address of a Google account. .
2441
+ # Corresponds to the JSON property `principalEmail`
2442
+ # @return [String]
2443
+ attr_accessor :principal_email
2444
+
2445
+ # A string representing the principal_subject associated with the identity. As
2446
+ # compared to `principal_email`, supports principals that aren't associated with
2447
+ # email addresses, such as third party principals. For most identities, the
2448
+ # format will be `principal://iam.googleapis.com/`identity pool name`/subject/`
2449
+ # subject)` except for some GKE identities (GKE_WORKLOAD, FREEFORM,
2450
+ # GKE_HUB_WORKLOAD) that are still in the legacy format `serviceAccount:`
2451
+ # identity pool name`[`subject`]`
2452
+ # Corresponds to the JSON property `principalSubject`
2453
+ # @return [String]
2454
+ attr_accessor :principal_subject
2455
+
2456
+ def initialize(**args)
2457
+ update!(**args)
2458
+ end
2459
+
2460
+ # Update properties of this object
2461
+ def update!(**args)
2462
+ @principal_email = args[:principal_email] if args.key?(:principal_email)
2463
+ @principal_subject = args[:principal_subject] if args.key?(:principal_subject)
2464
+ end
2465
+ end
2466
+
2467
+ # Represents a Kubernetes Subject.
2468
+ class Subject
2469
+ include Google::Apis::Core::Hashable
2470
+
2471
+ # Authentication type for subject.
2472
+ # Corresponds to the JSON property `kind`
2473
+ # @return [String]
2474
+ attr_accessor :kind
2475
+
2476
+ # Name for subject.
2477
+ # Corresponds to the JSON property `name`
2478
+ # @return [String]
2479
+ attr_accessor :name
2480
+
2481
+ # Namespace for subject.
2482
+ # Corresponds to the JSON property `ns`
2483
+ # @return [String]
2484
+ attr_accessor :ns
2485
+
2486
+ def initialize(**args)
2487
+ update!(**args)
2488
+ end
2489
+
2490
+ # Update properties of this object
2491
+ def update!(**args)
2492
+ @kind = args[:kind] if args.key?(:kind)
2493
+ @name = args[:name] if args.key?(:name)
2494
+ @ns = args[:ns] if args.key?(:ns)
2495
+ end
2496
+ end
2497
+
2053
2498
  # Resource capturing the state of an organization's subscription.
2054
2499
  class Subscription
2055
2500
  include Google::Apis::Core::Hashable
@@ -16,13 +16,13 @@ module Google
16
16
  module Apis
17
17
  module SecuritycenterV1beta2
18
18
  # Version of the google-apis-securitycenter_v1beta2 gem
19
- GEM_VERSION = "0.28.0"
19
+ GEM_VERSION = "0.31.0"
20
20
 
21
21
  # Version of the code generator used to generate this client
22
22
  GENERATOR_VERSION = "0.9.0"
23
23
 
24
24
  # Revision of the discovery document this client was generated from
25
- REVISION = "20220707"
25
+ REVISION = "20220728"
26
26
  end
27
27
  end
28
28
  end
@@ -28,6 +28,12 @@ module Google
28
28
  include Google::Apis::Core::JsonObjectSupport
29
29
  end
30
30
 
31
+ class AccessReview
32
+ class Representation < Google::Apis::Core::JsonRepresentation; end
33
+
34
+ include Google::Apis::Core::JsonObjectSupport
35
+ end
36
+
31
37
  class Compliance
32
38
  class Representation < Google::Apis::Core::JsonRepresentation; end
33
39
 
@@ -58,6 +64,12 @@ module Google
58
64
  include Google::Apis::Core::JsonObjectSupport
59
65
  end
60
66
 
67
+ class Container
68
+ class Representation < Google::Apis::Core::JsonRepresentation; end
69
+
70
+ include Google::Apis::Core::JsonObjectSupport
71
+ end
72
+
61
73
  class ContainerThreatDetectionSettings
62
74
  class Representation < Google::Apis::Core::JsonRepresentation; end
63
75
 
@@ -142,6 +154,12 @@ module Google
142
154
  include Google::Apis::Core::JsonObjectSupport
143
155
  end
144
156
 
157
+ class GoogleCloudSecuritycenterV1Binding
158
+ class Representation < Google::Apis::Core::JsonRepresentation; end
159
+
160
+ include Google::Apis::Core::JsonObjectSupport
161
+ end
162
+
145
163
  class GoogleCloudSecuritycenterV1BulkMuteFindingsResponse
146
164
  class Representation < Google::Apis::Core::JsonRepresentation; end
147
165
 
@@ -232,6 +250,18 @@ module Google
232
250
  include Google::Apis::Core::JsonObjectSupport
233
251
  end
234
252
 
253
+ class Kubernetes
254
+ class Representation < Google::Apis::Core::JsonRepresentation; end
255
+
256
+ include Google::Apis::Core::JsonObjectSupport
257
+ end
258
+
259
+ class Label
260
+ class Representation < Google::Apis::Core::JsonRepresentation; end
261
+
262
+ include Google::Apis::Core::JsonObjectSupport
263
+ end
264
+
235
265
  class MemoryHashSignature
236
266
  class Representation < Google::Apis::Core::JsonRepresentation; end
237
267
 
@@ -244,12 +274,30 @@ module Google
244
274
  include Google::Apis::Core::JsonObjectSupport
245
275
  end
246
276
 
277
+ class Node
278
+ class Representation < Google::Apis::Core::JsonRepresentation; end
279
+
280
+ include Google::Apis::Core::JsonObjectSupport
281
+ end
282
+
283
+ class NodePool
284
+ class Representation < Google::Apis::Core::JsonRepresentation; end
285
+
286
+ include Google::Apis::Core::JsonObjectSupport
287
+ end
288
+
247
289
  class OnboardingState
248
290
  class Representation < Google::Apis::Core::JsonRepresentation; end
249
291
 
250
292
  include Google::Apis::Core::JsonObjectSupport
251
293
  end
252
294
 
295
+ class Pod
296
+ class Representation < Google::Apis::Core::JsonRepresentation; end
297
+
298
+ include Google::Apis::Core::JsonObjectSupport
299
+ end
300
+
253
301
  class Process
254
302
  class Representation < Google::Apis::Core::JsonRepresentation; end
255
303
 
@@ -274,6 +322,12 @@ module Google
274
322
  include Google::Apis::Core::JsonObjectSupport
275
323
  end
276
324
 
325
+ class Role
326
+ class Representation < Google::Apis::Core::JsonRepresentation; end
327
+
328
+ include Google::Apis::Core::JsonObjectSupport
329
+ end
330
+
277
331
  class SecurityCenterSettings
278
332
  class Representation < Google::Apis::Core::JsonRepresentation; end
279
333
 
@@ -292,6 +346,18 @@ module Google
292
346
  include Google::Apis::Core::JsonObjectSupport
293
347
  end
294
348
 
349
+ class ServiceAccountDelegationInfo
350
+ class Representation < Google::Apis::Core::JsonRepresentation; end
351
+
352
+ include Google::Apis::Core::JsonObjectSupport
353
+ end
354
+
355
+ class Subject
356
+ class Representation < Google::Apis::Core::JsonRepresentation; end
357
+
358
+ include Google::Apis::Core::JsonObjectSupport
359
+ end
360
+
295
361
  class Subscription
296
362
  class Representation < Google::Apis::Core::JsonRepresentation; end
297
363
 
@@ -330,11 +396,28 @@ module Google
330
396
 
331
397
  property :method_name, as: 'methodName'
332
398
  property :principal_email, as: 'principalEmail'
399
+ property :principal_subject, as: 'principalSubject'
400
+ collection :service_account_delegation_info, as: 'serviceAccountDelegationInfo', class: Google::Apis::SecuritycenterV1beta2::ServiceAccountDelegationInfo, decorator: Google::Apis::SecuritycenterV1beta2::ServiceAccountDelegationInfo::Representation
401
+
402
+ property :service_account_key_name, as: 'serviceAccountKeyName'
333
403
  property :service_name, as: 'serviceName'
334
404
  property :user_agent_family, as: 'userAgentFamily'
335
405
  end
336
406
  end
337
407
 
408
+ class AccessReview
409
+ # @private
410
+ class Representation < Google::Apis::Core::JsonRepresentation
411
+ property :group, as: 'group'
412
+ property :name, as: 'name'
413
+ property :ns, as: 'ns'
414
+ property :resource, as: 'resource'
415
+ property :subresource, as: 'subresource'
416
+ property :verb, as: 'verb'
417
+ property :version, as: 'version'
418
+ end
419
+ end
420
+
338
421
  class Compliance
339
422
  # @private
340
423
  class Representation < Google::Apis::Core::JsonRepresentation
@@ -378,6 +461,17 @@ module Google
378
461
  end
379
462
  end
380
463
 
464
+ class Container
465
+ # @private
466
+ class Representation < Google::Apis::Core::JsonRepresentation
467
+ property :image_id, as: 'imageId'
468
+ collection :labels, as: 'labels', class: Google::Apis::SecuritycenterV1beta2::Label, decorator: Google::Apis::SecuritycenterV1beta2::Label::Representation
469
+
470
+ property :name, as: 'name'
471
+ property :uri, as: 'uri'
472
+ end
473
+ end
474
+
381
475
  class ContainerThreatDetectionSettings
382
476
  # @private
383
477
  class Representation < Google::Apis::Core::JsonRepresentation
@@ -496,6 +590,8 @@ module Google
496
590
 
497
591
  hash :contacts, as: 'contacts', class: Google::Apis::SecuritycenterV1beta2::ContactDetails, decorator: Google::Apis::SecuritycenterV1beta2::ContactDetails::Representation
498
592
 
593
+ collection :containers, as: 'containers', class: Google::Apis::SecuritycenterV1beta2::Container, decorator: Google::Apis::SecuritycenterV1beta2::Container::Representation
594
+
499
595
  property :create_time, as: 'createTime'
500
596
  property :description, as: 'description'
501
597
  property :event_time, as: 'eventTime'
@@ -509,6 +605,8 @@ module Google
509
605
 
510
606
  property :indicator, as: 'indicator', class: Google::Apis::SecuritycenterV1beta2::Indicator, decorator: Google::Apis::SecuritycenterV1beta2::Indicator::Representation
511
607
 
608
+ property :kubernetes, as: 'kubernetes', class: Google::Apis::SecuritycenterV1beta2::Kubernetes, decorator: Google::Apis::SecuritycenterV1beta2::Kubernetes::Representation
609
+
512
610
  property :mitre_attack, as: 'mitreAttack', class: Google::Apis::SecuritycenterV1beta2::MitreAttack, decorator: Google::Apis::SecuritycenterV1beta2::MitreAttack::Representation
513
611
 
514
612
  property :mute, as: 'mute'
@@ -559,6 +657,18 @@ module Google
559
657
  end
560
658
  end
561
659
 
660
+ class GoogleCloudSecuritycenterV1Binding
661
+ # @private
662
+ class Representation < Google::Apis::Core::JsonRepresentation
663
+ property :name, as: 'name'
664
+ property :ns, as: 'ns'
665
+ property :role, as: 'role', class: Google::Apis::SecuritycenterV1beta2::Role, decorator: Google::Apis::SecuritycenterV1beta2::Role::Representation
666
+
667
+ collection :subjects, as: 'subjects', class: Google::Apis::SecuritycenterV1beta2::Subject, decorator: Google::Apis::SecuritycenterV1beta2::Subject::Representation
668
+
669
+ end
670
+ end
671
+
562
672
  class GoogleCloudSecuritycenterV1BulkMuteFindingsResponse
563
673
  # @private
564
674
  class Representation < Google::Apis::Core::JsonRepresentation
@@ -715,6 +825,33 @@ module Google
715
825
  collection :ip_addresses, as: 'ipAddresses'
716
826
  collection :signatures, as: 'signatures', class: Google::Apis::SecuritycenterV1beta2::ProcessSignature, decorator: Google::Apis::SecuritycenterV1beta2::ProcessSignature::Representation
717
827
 
828
+ collection :uris, as: 'uris'
829
+ end
830
+ end
831
+
832
+ class Kubernetes
833
+ # @private
834
+ class Representation < Google::Apis::Core::JsonRepresentation
835
+ collection :access_reviews, as: 'accessReviews', class: Google::Apis::SecuritycenterV1beta2::AccessReview, decorator: Google::Apis::SecuritycenterV1beta2::AccessReview::Representation
836
+
837
+ collection :bindings, as: 'bindings', class: Google::Apis::SecuritycenterV1beta2::GoogleCloudSecuritycenterV1Binding, decorator: Google::Apis::SecuritycenterV1beta2::GoogleCloudSecuritycenterV1Binding::Representation
838
+
839
+ collection :node_pools, as: 'nodePools', class: Google::Apis::SecuritycenterV1beta2::NodePool, decorator: Google::Apis::SecuritycenterV1beta2::NodePool::Representation
840
+
841
+ collection :nodes, as: 'nodes', class: Google::Apis::SecuritycenterV1beta2::Node, decorator: Google::Apis::SecuritycenterV1beta2::Node::Representation
842
+
843
+ collection :pods, as: 'pods', class: Google::Apis::SecuritycenterV1beta2::Pod, decorator: Google::Apis::SecuritycenterV1beta2::Pod::Representation
844
+
845
+ collection :roles, as: 'roles', class: Google::Apis::SecuritycenterV1beta2::Role, decorator: Google::Apis::SecuritycenterV1beta2::Role::Representation
846
+
847
+ end
848
+ end
849
+
850
+ class Label
851
+ # @private
852
+ class Representation < Google::Apis::Core::JsonRepresentation
853
+ property :name, as: 'name'
854
+ property :value, as: 'value'
718
855
  end
719
856
  end
720
857
 
@@ -738,6 +875,22 @@ module Google
738
875
  end
739
876
  end
740
877
 
878
+ class Node
879
+ # @private
880
+ class Representation < Google::Apis::Core::JsonRepresentation
881
+ property :name, as: 'name'
882
+ end
883
+ end
884
+
885
+ class NodePool
886
+ # @private
887
+ class Representation < Google::Apis::Core::JsonRepresentation
888
+ property :name, as: 'name'
889
+ collection :nodes, as: 'nodes', class: Google::Apis::SecuritycenterV1beta2::Node, decorator: Google::Apis::SecuritycenterV1beta2::Node::Representation
890
+
891
+ end
892
+ end
893
+
741
894
  class OnboardingState
742
895
  # @private
743
896
  class Representation < Google::Apis::Core::JsonRepresentation
@@ -746,6 +899,18 @@ module Google
746
899
  end
747
900
  end
748
901
 
902
+ class Pod
903
+ # @private
904
+ class Representation < Google::Apis::Core::JsonRepresentation
905
+ collection :containers, as: 'containers', class: Google::Apis::SecuritycenterV1beta2::Container, decorator: Google::Apis::SecuritycenterV1beta2::Container::Representation
906
+
907
+ collection :labels, as: 'labels', class: Google::Apis::SecuritycenterV1beta2::Label, decorator: Google::Apis::SecuritycenterV1beta2::Label::Representation
908
+
909
+ property :name, as: 'name'
910
+ property :ns, as: 'ns'
911
+ end
912
+ end
913
+
749
914
  class Process
750
915
  # @private
751
916
  class Representation < Google::Apis::Core::JsonRepresentation
@@ -795,6 +960,15 @@ module Google
795
960
  end
796
961
  end
797
962
 
963
+ class Role
964
+ # @private
965
+ class Representation < Google::Apis::Core::JsonRepresentation
966
+ property :kind, as: 'kind'
967
+ property :name, as: 'name'
968
+ property :ns, as: 'ns'
969
+ end
970
+ end
971
+
798
972
  class SecurityCenterSettings
799
973
  # @private
800
974
  class Representation < Google::Apis::Core::JsonRepresentation
@@ -826,6 +1000,23 @@ module Google
826
1000
  end
827
1001
  end
828
1002
 
1003
+ class ServiceAccountDelegationInfo
1004
+ # @private
1005
+ class Representation < Google::Apis::Core::JsonRepresentation
1006
+ property :principal_email, as: 'principalEmail'
1007
+ property :principal_subject, as: 'principalSubject'
1008
+ end
1009
+ end
1010
+
1011
+ class Subject
1012
+ # @private
1013
+ class Representation < Google::Apis::Core::JsonRepresentation
1014
+ property :kind, as: 'kind'
1015
+ property :name, as: 'name'
1016
+ property :ns, as: 'ns'
1017
+ end
1018
+ end
1019
+
829
1020
  class Subscription
830
1021
  # @private
831
1022
  class Representation < Google::Apis::Core::JsonRepresentation
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: google-apis-securitycenter_v1beta2
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.28.0
4
+ version: 0.31.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Google LLC
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2022-07-18 00:00:00.000000000 Z
11
+ date: 2022-08-08 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: google-apis-core
@@ -58,7 +58,7 @@ licenses:
58
58
  metadata:
59
59
  bug_tracker_uri: https://github.com/googleapis/google-api-ruby-client/issues
60
60
  changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-securitycenter_v1beta2/CHANGELOG.md
61
- documentation_uri: https://googleapis.dev/ruby/google-apis-securitycenter_v1beta2/v0.28.0
61
+ documentation_uri: https://googleapis.dev/ruby/google-apis-securitycenter_v1beta2/v0.31.0
62
62
  source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-securitycenter_v1beta2
63
63
  post_install_message:
64
64
  rdoc_options: []