google-apis-securitycenter_v1beta2 0.28.0 → 0.31.0

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: aa9063cb47b9ed5987201cf369b87cd169e76a78a24dc47b051b96f935a034fe
4
- data.tar.gz: d00251c485541e5f625e200283b3ebda1a4b429488079eae8b91832ccc3001f9
3
+ metadata.gz: c73c84748fe0a23446285b35b96017c88461f4510d4ef5e1912788e7d4cc6e1e
4
+ data.tar.gz: 466c1291bbc372919523d541702de16497fedba3eb458ef565c5b86f1a98f182
5
5
  SHA512:
6
- metadata.gz: 5d395c5773df23cc2a4ddf842f676ae493621c1a59561e1e0dda3e1d60f3378224c3b26cf45fc0ac270c8ea49f33f436f82f6c2f7454f095b622cadff80b22d8
7
- data.tar.gz: 300f060a3e35afe6aa496f32acd40b6a5e59dc6c703e92076adb716ecf3252f62863ffa71fdbc126d3ca216af23b5b1d758d34dd005a7404a95d1baa9059ab5e
6
+ metadata.gz: d33dd87ec053c1027b4ad4fe89f963d158eca52866f78e9cf39c1eb3159979c1baf342317af6ecbb15944e20825e0507d7f69058a6dec7fc0251ec303e8e8555
7
+ data.tar.gz: 7b2e935a5311ae91708cc30c99c3bee9ebd60da873710cf351a8a7b8001f7364f68b6b52312517c130cf4f9a62b467365762d92e13f1c3124f0cf00ee7977f55
data/CHANGELOG.md CHANGED
@@ -1,5 +1,17 @@
1
1
  # Release history for google-apis-securitycenter_v1beta2
2
2
 
3
+ ### v0.31.0 (2022-08-02)
4
+
5
+ * Regenerated from discovery document revision 20220728
6
+
7
+ ### v0.30.0 (2022-07-26)
8
+
9
+ * Regenerated from discovery document revision 20220720
10
+
11
+ ### v0.29.0 (2022-07-19)
12
+
13
+ * Regenerated from discovery document revision 20220713
14
+
3
15
  ### v0.28.0 (2022-07-12)
4
16
 
5
17
  * Regenerated from discovery document revision 20220707
@@ -41,11 +41,44 @@ module Google
41
41
  # @return [String]
42
42
  attr_accessor :method_name
43
43
 
44
- # Associated email, such as "foo@google.com".
44
+ # Associated email, such as "foo@google.com". The email address of the
45
+ # authenticated user (or service account on behalf of third party principal)
46
+ # making the request. For third party identity callers, the `principal_subject`
47
+ # field is populated instead of this field. For privacy reasons, the principal
48
+ # email address is sometimes redacted. For more information, see [Caller
49
+ # identities in audit logs](https://cloud.google.com/logging/docs/audit#user-id).
45
50
  # Corresponds to the JSON property `principalEmail`
46
51
  # @return [String]
47
52
  attr_accessor :principal_email
48
53
 
54
+ # A string representing the principal_subject associated with the identity. As
55
+ # compared to `principal_email`, supports principals that aren't associated with
56
+ # email addresses, such as third party principals. For most identities, the
57
+ # format will be `principal://iam.googleapis.com/`identity pool name`/subject/`
58
+ # subject)` except for some GKE identities (GKE_WORKLOAD, FREEFORM,
59
+ # GKE_HUB_WORKLOAD) that are still in the legacy format `serviceAccount:`
60
+ # identity pool name`[`subject`]`
61
+ # Corresponds to the JSON property `principalSubject`
62
+ # @return [String]
63
+ attr_accessor :principal_subject
64
+
65
+ # Identity delegation history of an authenticated service account that makes the
66
+ # request. It contains information on the real authorities that try to access
67
+ # GCP resources by delegating on a service account. When multiple authorities
68
+ # are present, they are guaranteed to be sorted based on the original ordering
69
+ # of the identity delegation events.
70
+ # Corresponds to the JSON property `serviceAccountDelegationInfo`
71
+ # @return [Array<Google::Apis::SecuritycenterV1beta2::ServiceAccountDelegationInfo>]
72
+ attr_accessor :service_account_delegation_info
73
+
74
+ # The name of the service account key used to create or exchange credentials for
75
+ # authenticating the service account making the request. This is a scheme-less
76
+ # URI full resource name. For example: "//iam.googleapis.com/projects/`
77
+ # PROJECT_ID`/serviceAccounts/`ACCOUNT`/keys/`key`"
78
+ # Corresponds to the JSON property `serviceAccountKeyName`
79
+ # @return [String]
80
+ attr_accessor :service_account_key_name
81
+
49
82
  # This is the API service that the service account made a call to, e.g. "iam.
50
83
  # googleapis.com"
51
84
  # Corresponds to the JSON property `serviceName`
@@ -68,11 +101,72 @@ module Google
68
101
  @caller_ip_geo = args[:caller_ip_geo] if args.key?(:caller_ip_geo)
69
102
  @method_name = args[:method_name] if args.key?(:method_name)
70
103
  @principal_email = args[:principal_email] if args.key?(:principal_email)
104
+ @principal_subject = args[:principal_subject] if args.key?(:principal_subject)
105
+ @service_account_delegation_info = args[:service_account_delegation_info] if args.key?(:service_account_delegation_info)
106
+ @service_account_key_name = args[:service_account_key_name] if args.key?(:service_account_key_name)
71
107
  @service_name = args[:service_name] if args.key?(:service_name)
72
108
  @user_agent_family = args[:user_agent_family] if args.key?(:user_agent_family)
73
109
  end
74
110
  end
75
111
 
112
+ # Conveys information about a Kubernetes access review (e.g. kubectl auth can-i .
113
+ # ..) that was involved in a finding.
114
+ class AccessReview
115
+ include Google::Apis::Core::Hashable
116
+
117
+ # Group is the API Group of the Resource. "*" means all.
118
+ # Corresponds to the JSON property `group`
119
+ # @return [String]
120
+ attr_accessor :group
121
+
122
+ # Name is the name of the resource being requested. Empty means all.
123
+ # Corresponds to the JSON property `name`
124
+ # @return [String]
125
+ attr_accessor :name
126
+
127
+ # Namespace of the action being requested. Currently, there is no distinction
128
+ # between no namespace and all namespaces. Both are represented by "" (empty).
129
+ # Corresponds to the JSON property `ns`
130
+ # @return [String]
131
+ attr_accessor :ns
132
+
133
+ # Resource is the optional resource type requested. "*" means all.
134
+ # Corresponds to the JSON property `resource`
135
+ # @return [String]
136
+ attr_accessor :resource
137
+
138
+ # Subresource is the optional subresource type.
139
+ # Corresponds to the JSON property `subresource`
140
+ # @return [String]
141
+ attr_accessor :subresource
142
+
143
+ # Verb is a Kubernetes resource API verb, like: get, list, watch, create, update,
144
+ # delete, proxy. "*" means all.
145
+ # Corresponds to the JSON property `verb`
146
+ # @return [String]
147
+ attr_accessor :verb
148
+
149
+ # Version is the API Version of the Resource. "*" means all.
150
+ # Corresponds to the JSON property `version`
151
+ # @return [String]
152
+ attr_accessor :version
153
+
154
+ def initialize(**args)
155
+ update!(**args)
156
+ end
157
+
158
+ # Update properties of this object
159
+ def update!(**args)
160
+ @group = args[:group] if args.key?(:group)
161
+ @name = args[:name] if args.key?(:name)
162
+ @ns = args[:ns] if args.key?(:ns)
163
+ @resource = args[:resource] if args.key?(:resource)
164
+ @subresource = args[:subresource] if args.key?(:subresource)
165
+ @verb = args[:verb] if args.key?(:verb)
166
+ @version = args[:version] if args.key?(:version)
167
+ end
168
+ end
169
+
76
170
  # Contains compliance information about a security standard indicating unmet
77
171
  # recommendations.
78
172
  class Compliance
@@ -214,6 +308,45 @@ module Google
214
308
  end
215
309
  end
216
310
 
311
+ # Container associated with the finding.
312
+ class Container
313
+ include Google::Apis::Core::Hashable
314
+
315
+ # Optional container image id, when provided by the container runtime. Uniquely
316
+ # identifies the container image launched using a container image digest.
317
+ # Corresponds to the JSON property `imageId`
318
+ # @return [String]
319
+ attr_accessor :image_id
320
+
321
+ # Container labels, as provided by the container runtime.
322
+ # Corresponds to the JSON property `labels`
323
+ # @return [Array<Google::Apis::SecuritycenterV1beta2::Label>]
324
+ attr_accessor :labels
325
+
326
+ # Container name.
327
+ # Corresponds to the JSON property `name`
328
+ # @return [String]
329
+ attr_accessor :name
330
+
331
+ # Container image URI provided when configuring a pod/container. May identify a
332
+ # container image version using mutable tags.
333
+ # Corresponds to the JSON property `uri`
334
+ # @return [String]
335
+ attr_accessor :uri
336
+
337
+ def initialize(**args)
338
+ update!(**args)
339
+ end
340
+
341
+ # Update properties of this object
342
+ def update!(**args)
343
+ @image_id = args[:image_id] if args.key?(:image_id)
344
+ @labels = args[:labels] if args.key?(:labels)
345
+ @name = args[:name] if args.key?(:name)
346
+ @uri = args[:uri] if args.key?(:uri)
347
+ end
348
+ end
349
+
217
350
  # Resource capturing the settings for the Container Threat Detection service.
218
351
  class ContainerThreatDetectionSettings
219
352
  include Google::Apis::Core::Hashable
@@ -662,12 +795,18 @@ module Google
662
795
  # key represents the type of contact, while the value contains a list of all the
663
796
  # contacts that pertain. Please refer to: https://cloud.google.com/resource-
664
797
  # manager/docs/managing-notification-contacts#notification-categories ` "
665
- # security":[ ` "contact":` "email":"person1@company.com" ` `, ` "contact":` "
666
- # email":“person2@company.com ` ` ] `
798
+ # security": ` "contacts": [ ` "email": "person1@company.com" `, ` "email": "
799
+ # person2@company.com" ` ] `
667
800
  # Corresponds to the JSON property `contacts`
668
801
  # @return [Hash<String,Google::Apis::SecuritycenterV1beta2::ContactDetails>]
669
802
  attr_accessor :contacts
670
803
 
804
+ # Containers associated with the finding. containers provides information for
805
+ # both Kubernetes and non-Kubernetes containers.
806
+ # Corresponds to the JSON property `containers`
807
+ # @return [Array<Google::Apis::SecuritycenterV1beta2::Container>]
808
+ attr_accessor :containers
809
+
671
810
  # The time at which the finding was created in Security Command Center.
672
811
  # Corresponds to the JSON property `createTime`
673
812
  # @return [String]
@@ -726,6 +865,11 @@ module Google
726
865
  # @return [Google::Apis::SecuritycenterV1beta2::Indicator]
727
866
  attr_accessor :indicator
728
867
 
868
+ # Kubernetes related attributes.
869
+ # Corresponds to the JSON property `kubernetes`
870
+ # @return [Google::Apis::SecuritycenterV1beta2::Kubernetes]
871
+ attr_accessor :kubernetes
872
+
729
873
  # MITRE ATT&CK tactics and techniques related to this finding. See: https://
730
874
  # attack.mitre.org
731
875
  # Corresponds to the JSON property `mitreAttack`
@@ -830,6 +974,7 @@ module Google
830
974
  @compliances = args[:compliances] if args.key?(:compliances)
831
975
  @connections = args[:connections] if args.key?(:connections)
832
976
  @contacts = args[:contacts] if args.key?(:contacts)
977
+ @containers = args[:containers] if args.key?(:containers)
833
978
  @create_time = args[:create_time] if args.key?(:create_time)
834
979
  @description = args[:description] if args.key?(:description)
835
980
  @event_time = args[:event_time] if args.key?(:event_time)
@@ -839,6 +984,7 @@ module Google
839
984
  @finding_class = args[:finding_class] if args.key?(:finding_class)
840
985
  @iam_bindings = args[:iam_bindings] if args.key?(:iam_bindings)
841
986
  @indicator = args[:indicator] if args.key?(:indicator)
987
+ @kubernetes = args[:kubernetes] if args.key?(:kubernetes)
842
988
  @mitre_attack = args[:mitre_attack] if args.key?(:mitre_attack)
843
989
  @mute = args[:mute] if args.key?(:mute)
844
990
  @mute_initiator = args[:mute_initiator] if args.key?(:mute_initiator)
@@ -984,6 +1130,44 @@ module Google
984
1130
  end
985
1131
  end
986
1132
 
1133
+ # Represents a Kubernetes RoleBinding or ClusterRoleBinding.
1134
+ class GoogleCloudSecuritycenterV1Binding
1135
+ include Google::Apis::Core::Hashable
1136
+
1137
+ # Name for binding.
1138
+ # Corresponds to the JSON property `name`
1139
+ # @return [String]
1140
+ attr_accessor :name
1141
+
1142
+ # Namespace for binding.
1143
+ # Corresponds to the JSON property `ns`
1144
+ # @return [String]
1145
+ attr_accessor :ns
1146
+
1147
+ # Kubernetes Role or ClusterRole.
1148
+ # Corresponds to the JSON property `role`
1149
+ # @return [Google::Apis::SecuritycenterV1beta2::Role]
1150
+ attr_accessor :role
1151
+
1152
+ # Represents the subjects(s) bound to the role. Not always available for PATCH
1153
+ # requests.
1154
+ # Corresponds to the JSON property `subjects`
1155
+ # @return [Array<Google::Apis::SecuritycenterV1beta2::Subject>]
1156
+ attr_accessor :subjects
1157
+
1158
+ def initialize(**args)
1159
+ update!(**args)
1160
+ end
1161
+
1162
+ # Update properties of this object
1163
+ def update!(**args)
1164
+ @name = args[:name] if args.key?(:name)
1165
+ @ns = args[:ns] if args.key?(:ns)
1166
+ @role = args[:role] if args.key?(:role)
1167
+ @subjects = args[:subjects] if args.key?(:subjects)
1168
+ end
1169
+ end
1170
+
987
1171
  # The response to a BulkMute request. Contains the LRO information.
988
1172
  class GoogleCloudSecuritycenterV1BulkMuteFindingsResponse
989
1173
  include Google::Apis::Core::Hashable
@@ -1623,6 +1807,11 @@ module Google
1623
1807
  # @return [Array<Google::Apis::SecuritycenterV1beta2::ProcessSignature>]
1624
1808
  attr_accessor :signatures
1625
1809
 
1810
+ # The list of URIs associated to the Findings
1811
+ # Corresponds to the JSON property `uris`
1812
+ # @return [Array<String>]
1813
+ attr_accessor :uris
1814
+
1626
1815
  def initialize(**args)
1627
1816
  update!(**args)
1628
1817
  end
@@ -1632,6 +1821,87 @@ module Google
1632
1821
  @domains = args[:domains] if args.key?(:domains)
1633
1822
  @ip_addresses = args[:ip_addresses] if args.key?(:ip_addresses)
1634
1823
  @signatures = args[:signatures] if args.key?(:signatures)
1824
+ @uris = args[:uris] if args.key?(:uris)
1825
+ end
1826
+ end
1827
+
1828
+ # Kubernetes related attributes.
1829
+ class Kubernetes
1830
+ include Google::Apis::Core::Hashable
1831
+
1832
+ # Provides information on any Kubernetes access reviews (i.e. privilege checks)
1833
+ # relevant to the finding.
1834
+ # Corresponds to the JSON property `accessReviews`
1835
+ # @return [Array<Google::Apis::SecuritycenterV1beta2::AccessReview>]
1836
+ attr_accessor :access_reviews
1837
+
1838
+ # Provides Kubernetes role binding information for findings that involve
1839
+ # RoleBindings or ClusterRoleBindings.
1840
+ # Corresponds to the JSON property `bindings`
1841
+ # @return [Array<Google::Apis::SecuritycenterV1beta2::GoogleCloudSecuritycenterV1Binding>]
1842
+ attr_accessor :bindings
1843
+
1844
+ # GKE Node Pools associated with the finding. This field will contain NodePool
1845
+ # information for each Node, when it is available.
1846
+ # Corresponds to the JSON property `nodePools`
1847
+ # @return [Array<Google::Apis::SecuritycenterV1beta2::NodePool>]
1848
+ attr_accessor :node_pools
1849
+
1850
+ # Provides Kubernetes Node information.
1851
+ # Corresponds to the JSON property `nodes`
1852
+ # @return [Array<Google::Apis::SecuritycenterV1beta2::Node>]
1853
+ attr_accessor :nodes
1854
+
1855
+ # Kubernetes Pods associated with the finding. This field will contain Pod
1856
+ # records for each container that is owned by a Pod.
1857
+ # Corresponds to the JSON property `pods`
1858
+ # @return [Array<Google::Apis::SecuritycenterV1beta2::Pod>]
1859
+ attr_accessor :pods
1860
+
1861
+ # Provides Kubernetes role information for findings that involve Roles or
1862
+ # ClusterRoles.
1863
+ # Corresponds to the JSON property `roles`
1864
+ # @return [Array<Google::Apis::SecuritycenterV1beta2::Role>]
1865
+ attr_accessor :roles
1866
+
1867
+ def initialize(**args)
1868
+ update!(**args)
1869
+ end
1870
+
1871
+ # Update properties of this object
1872
+ def update!(**args)
1873
+ @access_reviews = args[:access_reviews] if args.key?(:access_reviews)
1874
+ @bindings = args[:bindings] if args.key?(:bindings)
1875
+ @node_pools = args[:node_pools] if args.key?(:node_pools)
1876
+ @nodes = args[:nodes] if args.key?(:nodes)
1877
+ @pods = args[:pods] if args.key?(:pods)
1878
+ @roles = args[:roles] if args.key?(:roles)
1879
+ end
1880
+ end
1881
+
1882
+ # Label represents a generic name=value label. Label has separate name and value
1883
+ # fields to support filtering with contains().
1884
+ class Label
1885
+ include Google::Apis::Core::Hashable
1886
+
1887
+ # Label name.
1888
+ # Corresponds to the JSON property `name`
1889
+ # @return [String]
1890
+ attr_accessor :name
1891
+
1892
+ # Label value.
1893
+ # Corresponds to the JSON property `value`
1894
+ # @return [String]
1895
+ attr_accessor :value
1896
+
1897
+ def initialize(**args)
1898
+ update!(**args)
1899
+ end
1900
+
1901
+ # Update properties of this object
1902
+ def update!(**args)
1903
+ @name = args[:name] if args.key?(:name)
1904
+ @value = args[:value] if args.key?(:value)
1635
1905
  end
1636
1906
  end
1637
1907
 
@@ -1710,6 +1980,50 @@ module Google
1710
1980
  end
1711
1981
  end
1712
1982
 
1983
+ # Kubernetes Nodes associated with the finding.
1984
+ class Node
1985
+ include Google::Apis::Core::Hashable
1986
+
1987
+ # Full Resource name of the Compute Engine VM running the cluster node.
1988
+ # Corresponds to the JSON property `name`
1989
+ # @return [String]
1990
+ attr_accessor :name
1991
+
1992
+ def initialize(**args)
1993
+ update!(**args)
1994
+ end
1995
+
1996
+ # Update properties of this object
1997
+ def update!(**args)
1998
+ @name = args[:name] if args.key?(:name)
1999
+ end
2000
+ end
2001
+
2002
+ # Provides GKE Node Pool information.
2003
+ class NodePool
2004
+ include Google::Apis::Core::Hashable
2005
+
2006
+ # Kubernetes Node pool name.
2007
+ # Corresponds to the JSON property `name`
2008
+ # @return [String]
2009
+ attr_accessor :name
2010
+
2011
+ # Nodes associated with the finding.
2012
+ # Corresponds to the JSON property `nodes`
2013
+ # @return [Array<Google::Apis::SecuritycenterV1beta2::Node>]
2014
+ attr_accessor :nodes
2015
+
2016
+ def initialize(**args)
2017
+ update!(**args)
2018
+ end
2019
+
2020
+ # Update properties of this object
2021
+ def update!(**args)
2022
+ @name = args[:name] if args.key?(:name)
2023
+ @nodes = args[:nodes] if args.key?(:nodes)
2024
+ end
2025
+ end
2026
+
1713
2027
  # Resource capturing onboarding information for a given CRM resource.
1714
2028
  class OnboardingState
1715
2029
  include Google::Apis::Core::Hashable
@@ -1738,6 +2052,43 @@ module Google
1738
2052
  end
1739
2053
  end
1740
2054
 
2055
+ # Kubernetes Pod.
2056
+ class Pod
2057
+ include Google::Apis::Core::Hashable
2058
+
2059
+ # Pod containers associated with this finding, if any.
2060
+ # Corresponds to the JSON property `containers`
2061
+ # @return [Array<Google::Apis::SecuritycenterV1beta2::Container>]
2062
+ attr_accessor :containers
2063
+
2064
+ # Pod labels. For Kubernetes containers, these are applied to the container.
2065
+ # Corresponds to the JSON property `labels`
2066
+ # @return [Array<Google::Apis::SecuritycenterV1beta2::Label>]
2067
+ attr_accessor :labels
2068
+
2069
+ # Kubernetes Pod name.
2070
+ # Corresponds to the JSON property `name`
2071
+ # @return [String]
2072
+ attr_accessor :name
2073
+
2074
+ # Kubernetes Pod namespace.
2075
+ # Corresponds to the JSON property `ns`
2076
+ # @return [String]
2077
+ attr_accessor :ns
2078
+
2079
+ def initialize(**args)
2080
+ update!(**args)
2081
+ end
2082
+
2083
+ # Update properties of this object
2084
+ def update!(**args)
2085
+ @containers = args[:containers] if args.key?(:containers)
2086
+ @labels = args[:labels] if args.key?(:labels)
2087
+ @name = args[:name] if args.key?(:name)
2088
+ @ns = args[:ns] if args.key?(:ns)
2089
+ end
2090
+ end
2091
+
1741
2092
  # Represents an operating system process.
1742
2093
  class Process
1743
2094
  include Google::Apis::Core::Hashable
@@ -1910,6 +2261,37 @@ module Google
1910
2261
  end
1911
2262
  end
1912
2263
 
2264
+ # Kubernetes Role or ClusterRole.
2265
+ class Role
2266
+ include Google::Apis::Core::Hashable
2267
+
2268
+ # Role type.
2269
+ # Corresponds to the JSON property `kind`
2270
+ # @return [String]
2271
+ attr_accessor :kind
2272
+
2273
+ # Role name.
2274
+ # Corresponds to the JSON property `name`
2275
+ # @return [String]
2276
+ attr_accessor :name
2277
+
2278
+ # Role namespace.
2279
+ # Corresponds to the JSON property `ns`
2280
+ # @return [String]
2281
+ attr_accessor :ns
2282
+
2283
+ def initialize(**args)
2284
+ update!(**args)
2285
+ end
2286
+
2287
+ # Update properties of this object
2288
+ def update!(**args)
2289
+ @kind = args[:kind] if args.key?(:kind)
2290
+ @name = args[:name] if args.key?(:name)
2291
+ @ns = args[:ns] if args.key?(:ns)
2292
+ end
2293
+ end
2294
+
1913
2295
  # Resource capturing the settings for Security Center.
1914
2296
  class SecurityCenterSettings
1915
2297
  include Google::Apis::Core::Hashable
@@ -1918,7 +2300,8 @@ module Google
1918
2300
  # the organization this resource resides in. The format is `projects/`project_id`
1919
2301
  # `. An empty value disables logging. This value is only referenced by services
1920
2302
  # that support log sink. Please refer to the documentation for an updated list
1921
- # of compatible services.
2303
+ # of compatible services. This may only be specified for organization level
2304
+ # onboarding.
1922
2305
  # Corresponds to the JSON property `logSinkProject`
1923
2306
  # @return [String]
1924
2307
  attr_accessor :log_sink_project
@@ -1930,13 +2313,13 @@ module Google
1930
2313
  # @return [String]
1931
2314
  attr_accessor :name
1932
2315
 
1933
- # Timestamp of when the customer organization was onboarded to SCC.
2316
+ # Output only. Timestamp of when the customer organization was onboarded to SCC.
1934
2317
  # Corresponds to the JSON property `onboardingTime`
1935
2318
  # @return [String]
1936
2319
  attr_accessor :onboarding_time
1937
2320
 
1938
- # The organization level service account to be used for security center
1939
- # components.
2321
+ # Output only. The organization level service account to be used for security
2322
+ # center components.
1940
2323
  # Corresponds to the JSON property `orgServiceAccount`
1941
2324
  # @return [String]
1942
2325
  attr_accessor :org_service_account
@@ -2050,6 +2433,68 @@ module Google
2050
2433
  end
2051
2434
  end
2052
2435
 
2436
+ # Identity delegation history of an authenticated service account.
2437
+ class ServiceAccountDelegationInfo
2438
+ include Google::Apis::Core::Hashable
2439
+
2440
+ # The email address of a Google account. .
2441
+ # Corresponds to the JSON property `principalEmail`
2442
+ # @return [String]
2443
+ attr_accessor :principal_email
2444
+
2445
+ # A string representing the principal_subject associated with the identity. As
2446
+ # compared to `principal_email`, supports principals that aren't associated with
2447
+ # email addresses, such as third party principals. For most identities, the
2448
+ # format will be `principal://iam.googleapis.com/`identity pool name`/subject/`
2449
+ # subject)` except for some GKE identities (GKE_WORKLOAD, FREEFORM,
2450
+ # GKE_HUB_WORKLOAD) that are still in the legacy format `serviceAccount:`
2451
+ # identity pool name`[`subject`]`
2452
+ # Corresponds to the JSON property `principalSubject`
2453
+ # @return [String]
2454
+ attr_accessor :principal_subject
2455
+
2456
+ def initialize(**args)
2457
+ update!(**args)
2458
+ end
2459
+
2460
+ # Update properties of this object
2461
+ def update!(**args)
2462
+ @principal_email = args[:principal_email] if args.key?(:principal_email)
2463
+ @principal_subject = args[:principal_subject] if args.key?(:principal_subject)
2464
+ end
2465
+ end
2466
+
2467
+ # Represents a Kubernetes Subject.
2468
+ class Subject
2469
+ include Google::Apis::Core::Hashable
2470
+
2471
+ # Authentication type for subject.
2472
+ # Corresponds to the JSON property `kind`
2473
+ # @return [String]
2474
+ attr_accessor :kind
2475
+
2476
+ # Name for subject.
2477
+ # Corresponds to the JSON property `name`
2478
+ # @return [String]
2479
+ attr_accessor :name
2480
+
2481
+ # Namespace for subject.
2482
+ # Corresponds to the JSON property `ns`
2483
+ # @return [String]
2484
+ attr_accessor :ns
2485
+
2486
+ def initialize(**args)
2487
+ update!(**args)
2488
+ end
2489
+
2490
+ # Update properties of this object
2491
+ def update!(**args)
2492
+ @kind = args[:kind] if args.key?(:kind)
2493
+ @name = args[:name] if args.key?(:name)
2494
+ @ns = args[:ns] if args.key?(:ns)
2495
+ end
2496
+ end
2497
+
2053
2498
  # Resource capturing the state of an organization's subscription.
2054
2499
  class Subscription
2055
2500
  include Google::Apis::Core::Hashable
@@ -16,13 +16,13 @@ module Google
16
16
  module Apis
17
17
  module SecuritycenterV1beta2
18
18
  # Version of the google-apis-securitycenter_v1beta2 gem
19
- GEM_VERSION = "0.28.0"
19
+ GEM_VERSION = "0.31.0"
20
20
 
21
21
  # Version of the code generator used to generate this client
22
22
  GENERATOR_VERSION = "0.9.0"
23
23
 
24
24
  # Revision of the discovery document this client was generated from
25
- REVISION = "20220707"
25
+ REVISION = "20220728"
26
26
  end
27
27
  end
28
28
  end
@@ -28,6 +28,12 @@ module Google
28
28
  include Google::Apis::Core::JsonObjectSupport
29
29
  end
30
30
 
31
+ class AccessReview
32
+ class Representation < Google::Apis::Core::JsonRepresentation; end
33
+
34
+ include Google::Apis::Core::JsonObjectSupport
35
+ end
36
+
31
37
  class Compliance
32
38
  class Representation < Google::Apis::Core::JsonRepresentation; end
33
39
 
@@ -58,6 +64,12 @@ module Google
58
64
  include Google::Apis::Core::JsonObjectSupport
59
65
  end
60
66
 
67
+ class Container
68
+ class Representation < Google::Apis::Core::JsonRepresentation; end
69
+
70
+ include Google::Apis::Core::JsonObjectSupport
71
+ end
72
+
61
73
  class ContainerThreatDetectionSettings
62
74
  class Representation < Google::Apis::Core::JsonRepresentation; end
63
75
 
@@ -142,6 +154,12 @@ module Google
142
154
  include Google::Apis::Core::JsonObjectSupport
143
155
  end
144
156
 
157
+ class GoogleCloudSecuritycenterV1Binding
158
+ class Representation < Google::Apis::Core::JsonRepresentation; end
159
+
160
+ include Google::Apis::Core::JsonObjectSupport
161
+ end
162
+
145
163
  class GoogleCloudSecuritycenterV1BulkMuteFindingsResponse
146
164
  class Representation < Google::Apis::Core::JsonRepresentation; end
147
165
 
@@ -232,6 +250,18 @@ module Google
232
250
  include Google::Apis::Core::JsonObjectSupport
233
251
  end
234
252
 
253
+ class Kubernetes
254
+ class Representation < Google::Apis::Core::JsonRepresentation; end
255
+
256
+ include Google::Apis::Core::JsonObjectSupport
257
+ end
258
+
259
+ class Label
260
+ class Representation < Google::Apis::Core::JsonRepresentation; end
261
+
262
+ include Google::Apis::Core::JsonObjectSupport
263
+ end
264
+
235
265
  class MemoryHashSignature
236
266
  class Representation < Google::Apis::Core::JsonRepresentation; end
237
267
 
@@ -244,12 +274,30 @@ module Google
244
274
  include Google::Apis::Core::JsonObjectSupport
245
275
  end
246
276
 
277
+ class Node
278
+ class Representation < Google::Apis::Core::JsonRepresentation; end
279
+
280
+ include Google::Apis::Core::JsonObjectSupport
281
+ end
282
+
283
+ class NodePool
284
+ class Representation < Google::Apis::Core::JsonRepresentation; end
285
+
286
+ include Google::Apis::Core::JsonObjectSupport
287
+ end
288
+
247
289
  class OnboardingState
248
290
  class Representation < Google::Apis::Core::JsonRepresentation; end
249
291
 
250
292
  include Google::Apis::Core::JsonObjectSupport
251
293
  end
252
294
 
295
+ class Pod
296
+ class Representation < Google::Apis::Core::JsonRepresentation; end
297
+
298
+ include Google::Apis::Core::JsonObjectSupport
299
+ end
300
+
253
301
  class Process
254
302
  class Representation < Google::Apis::Core::JsonRepresentation; end
255
303
 
@@ -274,6 +322,12 @@ module Google
274
322
  include Google::Apis::Core::JsonObjectSupport
275
323
  end
276
324
 
325
+ class Role
326
+ class Representation < Google::Apis::Core::JsonRepresentation; end
327
+
328
+ include Google::Apis::Core::JsonObjectSupport
329
+ end
330
+
277
331
  class SecurityCenterSettings
278
332
  class Representation < Google::Apis::Core::JsonRepresentation; end
279
333
 
@@ -292,6 +346,18 @@ module Google
292
346
  include Google::Apis::Core::JsonObjectSupport
293
347
  end
294
348
 
349
+ class ServiceAccountDelegationInfo
350
+ class Representation < Google::Apis::Core::JsonRepresentation; end
351
+
352
+ include Google::Apis::Core::JsonObjectSupport
353
+ end
354
+
355
+ class Subject
356
+ class Representation < Google::Apis::Core::JsonRepresentation; end
357
+
358
+ include Google::Apis::Core::JsonObjectSupport
359
+ end
360
+
295
361
  class Subscription
296
362
  class Representation < Google::Apis::Core::JsonRepresentation; end
297
363
 
@@ -330,11 +396,28 @@ module Google
330
396
 
331
397
  property :method_name, as: 'methodName'
332
398
  property :principal_email, as: 'principalEmail'
399
+ property :principal_subject, as: 'principalSubject'
400
+ collection :service_account_delegation_info, as: 'serviceAccountDelegationInfo', class: Google::Apis::SecuritycenterV1beta2::ServiceAccountDelegationInfo, decorator: Google::Apis::SecuritycenterV1beta2::ServiceAccountDelegationInfo::Representation
401
+
402
+ property :service_account_key_name, as: 'serviceAccountKeyName'
333
403
  property :service_name, as: 'serviceName'
334
404
  property :user_agent_family, as: 'userAgentFamily'
335
405
  end
336
406
  end
337
407
 
408
+ class AccessReview
409
+ # @private
410
+ class Representation < Google::Apis::Core::JsonRepresentation
411
+ property :group, as: 'group'
412
+ property :name, as: 'name'
413
+ property :ns, as: 'ns'
414
+ property :resource, as: 'resource'
415
+ property :subresource, as: 'subresource'
416
+ property :verb, as: 'verb'
417
+ property :version, as: 'version'
418
+ end
419
+ end
420
+
338
421
  class Compliance
339
422
  # @private
340
423
  class Representation < Google::Apis::Core::JsonRepresentation
@@ -378,6 +461,17 @@ module Google
378
461
  end
379
462
  end
380
463
 
464
+ class Container
465
+ # @private
466
+ class Representation < Google::Apis::Core::JsonRepresentation
467
+ property :image_id, as: 'imageId'
468
+ collection :labels, as: 'labels', class: Google::Apis::SecuritycenterV1beta2::Label, decorator: Google::Apis::SecuritycenterV1beta2::Label::Representation
469
+
470
+ property :name, as: 'name'
471
+ property :uri, as: 'uri'
472
+ end
473
+ end
474
+
381
475
  class ContainerThreatDetectionSettings
382
476
  # @private
383
477
  class Representation < Google::Apis::Core::JsonRepresentation
@@ -496,6 +590,8 @@ module Google
496
590
 
497
591
  hash :contacts, as: 'contacts', class: Google::Apis::SecuritycenterV1beta2::ContactDetails, decorator: Google::Apis::SecuritycenterV1beta2::ContactDetails::Representation
498
592
 
593
+ collection :containers, as: 'containers', class: Google::Apis::SecuritycenterV1beta2::Container, decorator: Google::Apis::SecuritycenterV1beta2::Container::Representation
594
+
499
595
  property :create_time, as: 'createTime'
500
596
  property :description, as: 'description'
501
597
  property :event_time, as: 'eventTime'
@@ -509,6 +605,8 @@ module Google
509
605
 
510
606
  property :indicator, as: 'indicator', class: Google::Apis::SecuritycenterV1beta2::Indicator, decorator: Google::Apis::SecuritycenterV1beta2::Indicator::Representation
511
607
 
608
+ property :kubernetes, as: 'kubernetes', class: Google::Apis::SecuritycenterV1beta2::Kubernetes, decorator: Google::Apis::SecuritycenterV1beta2::Kubernetes::Representation
609
+
512
610
  property :mitre_attack, as: 'mitreAttack', class: Google::Apis::SecuritycenterV1beta2::MitreAttack, decorator: Google::Apis::SecuritycenterV1beta2::MitreAttack::Representation
513
611
 
514
612
  property :mute, as: 'mute'
@@ -559,6 +657,18 @@ module Google
559
657
  end
560
658
  end
561
659
 
660
+ class GoogleCloudSecuritycenterV1Binding
661
+ # @private
662
+ class Representation < Google::Apis::Core::JsonRepresentation
663
+ property :name, as: 'name'
664
+ property :ns, as: 'ns'
665
+ property :role, as: 'role', class: Google::Apis::SecuritycenterV1beta2::Role, decorator: Google::Apis::SecuritycenterV1beta2::Role::Representation
666
+
667
+ collection :subjects, as: 'subjects', class: Google::Apis::SecuritycenterV1beta2::Subject, decorator: Google::Apis::SecuritycenterV1beta2::Subject::Representation
668
+
669
+ end
670
+ end
671
+
562
672
  class GoogleCloudSecuritycenterV1BulkMuteFindingsResponse
563
673
  # @private
564
674
  class Representation < Google::Apis::Core::JsonRepresentation
@@ -715,6 +825,33 @@ module Google
715
825
  collection :ip_addresses, as: 'ipAddresses'
716
826
  collection :signatures, as: 'signatures', class: Google::Apis::SecuritycenterV1beta2::ProcessSignature, decorator: Google::Apis::SecuritycenterV1beta2::ProcessSignature::Representation
717
827
 
828
+ collection :uris, as: 'uris'
829
+ end
830
+ end
831
+
832
+ class Kubernetes
833
+ # @private
834
+ class Representation < Google::Apis::Core::JsonRepresentation
835
+ collection :access_reviews, as: 'accessReviews', class: Google::Apis::SecuritycenterV1beta2::AccessReview, decorator: Google::Apis::SecuritycenterV1beta2::AccessReview::Representation
836
+
837
+ collection :bindings, as: 'bindings', class: Google::Apis::SecuritycenterV1beta2::GoogleCloudSecuritycenterV1Binding, decorator: Google::Apis::SecuritycenterV1beta2::GoogleCloudSecuritycenterV1Binding::Representation
838
+
839
+ collection :node_pools, as: 'nodePools', class: Google::Apis::SecuritycenterV1beta2::NodePool, decorator: Google::Apis::SecuritycenterV1beta2::NodePool::Representation
840
+
841
+ collection :nodes, as: 'nodes', class: Google::Apis::SecuritycenterV1beta2::Node, decorator: Google::Apis::SecuritycenterV1beta2::Node::Representation
842
+
843
+ collection :pods, as: 'pods', class: Google::Apis::SecuritycenterV1beta2::Pod, decorator: Google::Apis::SecuritycenterV1beta2::Pod::Representation
844
+
845
+ collection :roles, as: 'roles', class: Google::Apis::SecuritycenterV1beta2::Role, decorator: Google::Apis::SecuritycenterV1beta2::Role::Representation
846
+
847
+ end
848
+ end
849
+
850
+ class Label
851
+ # @private
852
+ class Representation < Google::Apis::Core::JsonRepresentation
853
+ property :name, as: 'name'
854
+ property :value, as: 'value'
718
855
  end
719
856
  end
720
857
 
@@ -738,6 +875,22 @@ module Google
738
875
  end
739
876
  end
740
877
 
878
+ class Node
879
+ # @private
880
+ class Representation < Google::Apis::Core::JsonRepresentation
881
+ property :name, as: 'name'
882
+ end
883
+ end
884
+
885
+ class NodePool
886
+ # @private
887
+ class Representation < Google::Apis::Core::JsonRepresentation
888
+ property :name, as: 'name'
889
+ collection :nodes, as: 'nodes', class: Google::Apis::SecuritycenterV1beta2::Node, decorator: Google::Apis::SecuritycenterV1beta2::Node::Representation
890
+
891
+ end
892
+ end
893
+
741
894
  class OnboardingState
742
895
  # @private
743
896
  class Representation < Google::Apis::Core::JsonRepresentation
@@ -746,6 +899,18 @@ module Google
746
899
  end
747
900
  end
748
901
 
902
+ class Pod
903
+ # @private
904
+ class Representation < Google::Apis::Core::JsonRepresentation
905
+ collection :containers, as: 'containers', class: Google::Apis::SecuritycenterV1beta2::Container, decorator: Google::Apis::SecuritycenterV1beta2::Container::Representation
906
+
907
+ collection :labels, as: 'labels', class: Google::Apis::SecuritycenterV1beta2::Label, decorator: Google::Apis::SecuritycenterV1beta2::Label::Representation
908
+
909
+ property :name, as: 'name'
910
+ property :ns, as: 'ns'
911
+ end
912
+ end
913
+
749
914
  class Process
750
915
  # @private
751
916
  class Representation < Google::Apis::Core::JsonRepresentation
@@ -795,6 +960,15 @@ module Google
795
960
  end
796
961
  end
797
962
 
963
+ class Role
964
+ # @private
965
+ class Representation < Google::Apis::Core::JsonRepresentation
966
+ property :kind, as: 'kind'
967
+ property :name, as: 'name'
968
+ property :ns, as: 'ns'
969
+ end
970
+ end
971
+
798
972
  class SecurityCenterSettings
799
973
  # @private
800
974
  class Representation < Google::Apis::Core::JsonRepresentation
@@ -826,6 +1000,23 @@ module Google
826
1000
  end
827
1001
  end
828
1002
 
1003
+ class ServiceAccountDelegationInfo
1004
+ # @private
1005
+ class Representation < Google::Apis::Core::JsonRepresentation
1006
+ property :principal_email, as: 'principalEmail'
1007
+ property :principal_subject, as: 'principalSubject'
1008
+ end
1009
+ end
1010
+
1011
+ class Subject
1012
+ # @private
1013
+ class Representation < Google::Apis::Core::JsonRepresentation
1014
+ property :kind, as: 'kind'
1015
+ property :name, as: 'name'
1016
+ property :ns, as: 'ns'
1017
+ end
1018
+ end
1019
+
829
1020
  class Subscription
830
1021
  # @private
831
1022
  class Representation < Google::Apis::Core::JsonRepresentation
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: google-apis-securitycenter_v1beta2
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.28.0
4
+ version: 0.31.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Google LLC
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2022-07-18 00:00:00.000000000 Z
11
+ date: 2022-08-08 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: google-apis-core
@@ -58,7 +58,7 @@ licenses:
58
58
  metadata:
59
59
  bug_tracker_uri: https://github.com/googleapis/google-api-ruby-client/issues
60
60
  changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-securitycenter_v1beta2/CHANGELOG.md
61
- documentation_uri: https://googleapis.dev/ruby/google-apis-securitycenter_v1beta2/v0.28.0
61
+ documentation_uri: https://googleapis.dev/ruby/google-apis-securitycenter_v1beta2/v0.31.0
62
62
  source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-securitycenter_v1beta2
63
63
  post_install_message:
64
64
  rdoc_options: []