google-cloud-asset-v1 0.5.0 → 0.6.1

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 3dfb61d335222011eb319476e5f7ebc66d737ed5b5344b5db618247eeeb582c5
4
- data.tar.gz: 14fd0db29853d3d81b4ce7093eab112ec73e59e8cf1a1a62113c4b897525c874
3
+ metadata.gz: 7601e08b3f6d242baec633460a4e82037603a86284c15071dda3595e20984b4d
4
+ data.tar.gz: 5dddf6f643e226cc7a0c9d070bd755a9735fad69d33ad1237070b80d38276a24
5
5
  SHA512:
6
- metadata.gz: 13b021e3db5800d776932c101235106596c33a2af3cee87ce69a1eaa384e34816439cebfb16b87fa0420028799d22ff291de97ea0e0fc9edb6ed576862e779e9
7
- data.tar.gz: 45c5ff63879d978b1e7f44b9b3c2a88c3aa6aaf52be333abf5a8f09519a889617a05e9c0e3c9b01f230df0b46d2acb45ec0352fe980759077dba93071048d0bc
6
+ metadata.gz: 5ee7a713b523233cdc7b35f12ae891388713619ca96743a8e3b1d3c30bdefd09a3be70ec00c0ada079c0a93ab85d890d1d3c7e11b7b266b51ba9d7406765ad5e
7
+ data.tar.gz: b3d0f7fa841d88066fe72e4835cd33891a0fb9be93ce60a80a221647bf4850e72901ee5b429c36aa733983648083d024d3118044a00099ca6e1d31dc236395e6
@@ -72,7 +72,35 @@ module Google
72
72
  initial_delay: 0.1,
73
73
  max_delay: 60.0,
74
74
  multiplier: 1.3,
75
- retry_codes: ["DEADLINE_EXCEEDED", "UNAVAILABLE"]
75
+ retry_codes: [4, 14]
76
+ }
77
+
78
+ default_config.rpcs.create_feed.timeout = 60.0
79
+
80
+ default_config.rpcs.get_feed.timeout = 60.0
81
+ default_config.rpcs.get_feed.retry_policy = {
82
+ initial_delay: 0.1,
83
+ max_delay: 60.0,
84
+ multiplier: 1.3,
85
+ retry_codes: [4, 14]
86
+ }
87
+
88
+ default_config.rpcs.list_feeds.timeout = 60.0
89
+ default_config.rpcs.list_feeds.retry_policy = {
90
+ initial_delay: 0.1,
91
+ max_delay: 60.0,
92
+ multiplier: 1.3,
93
+ retry_codes: [4, 14]
94
+ }
95
+
96
+ default_config.rpcs.update_feed.timeout = 60.0
97
+
98
+ default_config.rpcs.delete_feed.timeout = 60.0
99
+ default_config.rpcs.delete_feed.retry_policy = {
100
+ initial_delay: 0.1,
101
+ max_delay: 60.0,
102
+ multiplier: 1.3,
103
+ retry_codes: [4, 14]
76
104
  }
77
105
 
78
106
  default_config.rpcs.search_all_resources.timeout = 15.0
@@ -80,7 +108,7 @@ module Google
80
108
  initial_delay: 0.1,
81
109
  max_delay: 60.0,
82
110
  multiplier: 1.3,
83
- retry_codes: ["DEADLINE_EXCEEDED", "UNAVAILABLE"]
111
+ retry_codes: [4, 14]
84
112
  }
85
113
 
86
114
  default_config.rpcs.search_all_iam_policies.timeout = 15.0
@@ -88,7 +116,7 @@ module Google
88
116
  initial_delay: 0.1,
89
117
  max_delay: 60.0,
90
118
  multiplier: 1.3,
91
- retry_codes: ["DEADLINE_EXCEEDED", "UNAVAILABLE"]
119
+ retry_codes: [4, 14]
92
120
  }
93
121
 
94
122
  default_config
@@ -186,14 +214,13 @@ module Google
186
214
  # Exports assets with time and resource types to a given Cloud Storage
187
215
  # location/BigQuery table. For Cloud Storage location destinations, the
188
216
  # output format is newline-delimited JSON. Each line represents a
189
- # {::Google::Cloud::Asset::V1::Asset google.cloud.asset.v1.Asset} in the JSON
190
- # format; for BigQuery table destinations, the output table stores the fields
191
- # in asset proto as columns. This API implements the
192
- # {::Google::Longrunning::Operation google.longrunning.Operation} API , which
193
- # allows you to keep track of the export. We recommend intervals of at least
194
- # 2 seconds with exponential retry to poll the export operation result. For
195
- # regular-size resource parent, the export operation usually finishes within
196
- # 5 minutes.
217
+ # {::Google::Cloud::Asset::V1::Asset google.cloud.asset.v1.Asset} in the JSON format; for BigQuery table
218
+ # destinations, the output table stores the fields in asset proto as columns.
219
+ # This API implements the {::Google::Longrunning::Operation google.longrunning.Operation} API
220
+ # , which allows you to keep track of the export. We recommend intervals of
221
+ # at least 2 seconds with exponential retry to poll the export operation
222
+ # result. For regular-size resource parent, the export operation usually
223
+ # finishes within 5 minutes.
197
224
  #
198
225
  # @overload export_assets(request, options = nil)
199
226
  # Pass arguments to `export_assets` via a request object, either of type
@@ -222,17 +249,29 @@ module Google
222
249
  # data collection and indexing, there is a volatile window during which
223
250
  # running the same query may get different results.
224
251
  # @param asset_types [::Array<::String>]
225
- # A list of asset types of which to take a snapshot for. Example:
226
- # "compute.googleapis.com/Disk". If specified, only matching assets will be
227
- # returned. See [Introduction to Cloud Asset
252
+ # A list of asset types to take a snapshot for. For example:
253
+ # "compute.googleapis.com/Disk".
254
+ #
255
+ # Regular expressions are also supported. For example:
256
+ #
257
+ # * "compute.googleapis.com.*" snapshots resources whose asset type starts
258
+ # with "compute.googleapis.com".
259
+ # * ".*Instance" snapshots resources whose asset type ends with "Instance".
260
+ # * ".*Instance.*" snapshots resources whose asset type contains "Instance".
261
+ #
262
+ # See [RE2](https://github.com/google/re2/wiki/Syntax) for all supported
263
+ # regular expression syntax. If the regular expression does not match any
264
+ # supported asset type, an INVALID_ARGUMENT error will be returned.
265
+ #
266
+ # If specified, only matching assets will be returned, otherwise, it will
267
+ # snapshot all asset types. See [Introduction to Cloud Asset
228
268
  # Inventory](https://cloud.google.com/asset-inventory/docs/overview)
229
269
  # for all supported asset types.
230
270
  # @param content_type [::Google::Cloud::Asset::V1::ContentType]
231
271
  # Asset content type. If not specified, no content but the asset name will be
232
272
  # returned.
233
273
  # @param output_config [::Google::Cloud::Asset::V1::OutputConfig, ::Hash]
234
- # Required. Output configuration indicating where the results will be output
235
- # to.
274
+ # Required. Output configuration indicating where the results will be output to.
236
275
  #
237
276
  # @yield [response, operation] Access the result along with the RPC operation
238
277
  # @yieldparam response [::Gapic::Operation]
@@ -401,8 +440,9 @@ module Google
401
440
  # Required. This is the client-assigned asset feed identifier and it needs to
402
441
  # be unique under a specific parent project/folder/organization.
403
442
  # @param feed [::Google::Cloud::Asset::V1::Feed, ::Hash]
404
- # Required. The feed details. The field `name` must be empty and it will be
405
- # generated in the format of: projects/project_number/feeds/feed_id
443
+ # Required. The feed details. The field `name` must be empty and it will be generated
444
+ # in the format of:
445
+ # projects/project_number/feeds/feed_id
406
446
  # folders/folder_number/feeds/feed_id
407
447
  # organizations/organization_number/feeds/feed_id
408
448
  #
@@ -607,8 +647,8 @@ module Google
607
647
  # the default parameter values, pass an empty Hash as a request object (see above).
608
648
  #
609
649
  # @param feed [::Google::Cloud::Asset::V1::Feed, ::Hash]
610
- # Required. The new values of feed details. It must match an existing feed
611
- # and the field `name` must be in the format of:
650
+ # Required. The new values of feed details. It must match an existing feed and the
651
+ # field `name` must be in the format of:
612
652
  # projects/project_number/feeds/feed_id or
613
653
  # folders/folder_number/feeds/feed_id or
614
654
  # organizations/organization_number/feeds/feed_id.
@@ -732,9 +772,9 @@ module Google
732
772
  end
733
773
 
734
774
  ##
735
- # Searches all the resources within the given accessible scope (e.g., a
736
- # project, a folder or an organization). Callers should have
737
- # cloud.assets.SearchAllResources permission upon the requested scope,
775
+ # Searches all Cloud resources within the specified scope, such as a project,
776
+ # folder, or organization. The caller must be granted the
777
+ # `cloudasset.assets.searchAllResources` permission on the desired scope,
738
778
  # otherwise the request will be rejected.
739
779
  #
740
780
  # @overload search_all_resources(request, options = nil)
@@ -753,70 +793,76 @@ module Google
753
793
  # the default parameter values, pass an empty Hash as a request object (see above).
754
794
  #
755
795
  # @param scope [::String]
756
- # Required. A scope can be a project, a folder or an organization. The search
757
- # is limited to the resources within the `scope`.
796
+ # Required. A scope can be a project, a folder, or an organization. The search is
797
+ # limited to the resources within the `scope`. The caller must be granted the
798
+ # [`cloudasset.assets.searchAllResources`](http://cloud.google.com/asset-inventory/docs/access-control#required_permissions)
799
+ # permission on the desired scope.
758
800
  #
759
801
  # The allowed values are:
760
802
  #
761
- # * projects/\\{PROJECT_ID}
762
- # * projects/\\{PROJECT_NUMBER}
763
- # * folders/\\{FOLDER_NUMBER}
764
- # * organizations/\\{ORGANIZATION_NUMBER}
803
+ # * projects/\\{PROJECT_ID} (e.g., "projects/foo-bar")
804
+ # * projects/\\{PROJECT_NUMBER} (e.g., "projects/12345678")
805
+ # * folders/\\{FOLDER_NUMBER} (e.g., "folders/1234567")
806
+ # * organizations/\\{ORGANIZATION_NUMBER} (e.g., "organizations/123456")
765
807
  # @param query [::String]
766
- # Optional. The query statement. An empty query can be specified to search
767
- # all the resources of certain `asset_types` within the given `scope`.
808
+ # Optional. The query statement. See [how to construct a
809
+ # query](http://cloud.google.com/asset-inventory/docs/searching-resources#how_to_construct_a_query)
810
+ # for more information. If not specified or empty, it will search all the
811
+ # resources within the specified `scope`. Note that the query string is
812
+ # compared against each Cloud IAM policy binding, including its members,
813
+ # roles, and Cloud IAM conditions. The returned Cloud IAM policies will only
814
+ # contain the bindings that match your query. To learn more about the IAM
815
+ # policy structure, see [IAM policy
816
+ # doc](https://cloud.google.com/iam/docs/policies#structure).
768
817
  #
769
818
  # Examples:
770
819
  #
771
- # * `name : "Important"` to find Cloud resources whose name contains
820
+ # * `name:Important` to find Cloud resources whose name contains
772
821
  # "Important" as a word.
773
- # * `displayName : "Impor*"` to find Cloud resources whose display name
774
- # contains "Impor" as a word prefix.
775
- # * `description : "*por*"` to find Cloud resources whose description
822
+ # * `displayName:Impor*` to find Cloud resources whose display name
823
+ # contains "Impor" as a prefix.
824
+ # * `description:*por*` to find Cloud resources whose description
776
825
  # contains "por" as a substring.
777
- # * `location : "us-west*"` to find Cloud resources whose location is
826
+ # * `location:us-west*` to find Cloud resources whose location is
778
827
  # prefixed with "us-west".
779
- # * `labels : "prod"` to find Cloud resources whose labels contain "prod" as
828
+ # * `labels:prod` to find Cloud resources whose labels contain "prod" as
780
829
  # a key or value.
781
- # * `labels.env : "prod"` to find Cloud resources which have a label "env"
830
+ # * `labels.env:prod` to find Cloud resources that have a label "env"
782
831
  # and its value is "prod".
783
- # * `labels.env : *` to find Cloud resources which have a label "env".
784
- # * `"Important"` to find Cloud resources which contain "Important" as a word
832
+ # * `labels.env:*` to find Cloud resources that have a label "env".
833
+ # * `Important` to find Cloud resources that contain "Important" as a word
785
834
  # in any of the searchable fields.
786
- # * `"Impor*"` to find Cloud resources which contain "Impor" as a word prefix
835
+ # * `Impor*` to find Cloud resources that contain "Impor" as a prefix
787
836
  # in any of the searchable fields.
788
- # * `"*por*"` to find Cloud resources which contain "por" as a substring in
837
+ # * `*por*` to find Cloud resources that contain "por" as a substring in
789
838
  # any of the searchable fields.
790
- # * `("Important" AND location : ("us-west1" OR "global"))` to find Cloud
791
- # resources which contain "Important" as a word in any of the searchable
839
+ # * `Important location:(us-west1 OR global)` to find Cloud
840
+ # resources that contain "Important" as a word in any of the searchable
792
841
  # fields and are also located in the "us-west1" region or the "global"
793
842
  # location.
794
- #
795
- # See [how to construct a
796
- # query](https://cloud.google.com/asset-inventory/docs/searching-resources#how_to_construct_a_query)
797
- # for more details.
798
843
  # @param asset_types [::Array<::String>]
799
- # Optional. A list of asset types that this request searches for. If empty,
800
- # it will search all the [searchable asset
844
+ # Optional. A list of asset types that this request searches for. If empty, it will
845
+ # search all the [searchable asset
801
846
  # types](https://cloud.google.com/asset-inventory/docs/supported-asset-types#searchable_asset_types).
802
847
  # @param page_size [::Integer]
803
- # Optional. The page size for search result pagination. Page size is capped
804
- # at 500 even if a larger value is given. If set to zero, server will pick an
805
- # appropriate default. Returned results may be fewer than requested. When
806
- # this happens, there could be more results as long as `next_page_token` is
807
- # returned.
848
+ # Optional. The page size for search result pagination. Page size is capped at 500 even
849
+ # if a larger value is given. If set to zero, server will pick an appropriate
850
+ # default. Returned results may be fewer than requested. When this happens,
851
+ # there could be more results as long as `next_page_token` is returned.
808
852
  # @param page_token [::String]
809
- # Optional. If present, then retrieve the next batch of results from the
810
- # preceding call to this method. `page_token` must be the value of
811
- # `next_page_token` from the previous response. The values of all other
812
- # method parameters, must be identical to those in the previous call.
853
+ # Optional. If present, then retrieve the next batch of results from the preceding call
854
+ # to this method. `page_token` must be the value of `next_page_token` from
855
+ # the previous response. The values of all other method parameters, must be
856
+ # identical to those in the previous call.
813
857
  # @param order_by [::String]
814
- # Optional. A comma separated list of fields specifying the sorting order of
815
- # the results. The default order is ascending. Add " DESC" after the field
816
- # name to indicate descending order. Redundant space characters are ignored.
817
- # Example: "location DESC, name". See [supported resource metadata
818
- # fields](https://cloud.google.com/asset-inventory/docs/searching-resources#query_on_resource_metadata_fields)
819
- # for more details.
858
+ # Optional. A comma separated list of fields specifying the sorting order of the
859
+ # results. The default order is ascending. Add " DESC" after the field name
860
+ # to indicate descending order. Redundant space characters are ignored.
861
+ # Example: "location DESC, name". Only string fields in the response are
862
+ # sortable, including `name`, `displayName`, `description`, `location`. All
863
+ # the other fields such as repeated fields (e.g., `networkTags`), map
864
+ # fields (e.g., `labels`) and struct fields (e.g., `additionalAttributes`)
865
+ # are not supported.
820
866
  #
821
867
  # @yield [response, operation] Access the result along with the RPC operation
822
868
  # @yieldparam response [::Gapic::PagedEnumerable<::Google::Cloud::Asset::V1::ResourceSearchResult>]
@@ -865,9 +911,9 @@ module Google
865
911
  end
866
912
 
867
913
  ##
868
- # Searches all the IAM policies within the given accessible scope (e.g., a
869
- # project, a folder or an organization). Callers should have
870
- # cloud.assets.SearchAllIamPolicies permission upon the requested scope,
914
+ # Searches all IAM policies within the specified scope, such as a project,
915
+ # folder, or organization. The caller must be granted the
916
+ # `cloudasset.assets.searchAllIamPolicies` permission on the desired scope,
871
917
  # otherwise the request will be rejected.
872
918
  #
873
919
  # @overload search_all_iam_policies(request, options = nil)
@@ -886,48 +932,55 @@ module Google
886
932
  # the default parameter values, pass an empty Hash as a request object (see above).
887
933
  #
888
934
  # @param scope [::String]
889
- # Required. A scope can be a project, a folder or an organization. The search
890
- # is limited to the IAM policies within the `scope`.
935
+ # Required. A scope can be a project, a folder, or an organization. The search is
936
+ # limited to the IAM policies within the `scope`. The caller must be granted
937
+ # the
938
+ # [`cloudasset.assets.searchAllIamPolicies`](http://cloud.google.com/asset-inventory/docs/access-control#required_permissions)
939
+ # permission on the desired scope.
891
940
  #
892
941
  # The allowed values are:
893
942
  #
894
- # * projects/\\{PROJECT_ID}
895
- # * projects/\\{PROJECT_NUMBER}
896
- # * folders/\\{FOLDER_NUMBER}
897
- # * organizations/\\{ORGANIZATION_NUMBER}
943
+ # * projects/\\{PROJECT_ID} (e.g., "projects/foo-bar")
944
+ # * projects/\\{PROJECT_NUMBER} (e.g., "projects/12345678")
945
+ # * folders/\\{FOLDER_NUMBER} (e.g., "folders/1234567")
946
+ # * organizations/\\{ORGANIZATION_NUMBER} (e.g., "organizations/123456")
898
947
  # @param query [::String]
899
- # Optional. The query statement. An empty query can be specified to search
900
- # all the IAM policies within the given `scope`.
948
+ # Optional. The query statement. See [how to construct a
949
+ # query](https://cloud.google.com/asset-inventory/docs/searching-iam-policies#how_to_construct_a_query)
950
+ # for more information. If not specified or empty, it will search all the
951
+ # IAM policies within the specified `scope`.
901
952
  #
902
953
  # Examples:
903
954
  #
904
- # * `policy : "amy@gmail.com"` to find Cloud IAM policy bindings that
905
- # specify user "amy@gmail.com".
906
- # * `policy : "roles/compute.admin"` to find Cloud IAM policy bindings that
907
- # specify the Compute Admin role.
908
- # * `policy.role.permissions : "storage.buckets.update"` to find Cloud IAM
909
- # policy bindings that specify a role containing "storage.buckets.update"
910
- # permission.
911
- # * `resource : "organizations/123"` to find Cloud IAM policy bindings that
912
- # are set on "organizations/123".
913
- # * `(resource : ("organizations/123" OR "folders/1234") AND policy : "amy")`
914
- # to find Cloud IAM policy bindings that are set on "organizations/123" or
915
- # "folders/1234", and also specify user "amy".
916
- #
917
- # See [how to construct a
918
- # query](https://cloud.google.com/asset-inventory/docs/searching-iam-policies#how_to_construct_a_query)
919
- # for more details.
955
+ # * `policy:amy@gmail.com` to find IAM policy bindings that specify user
956
+ # "amy@gmail.com".
957
+ # * `policy:roles/compute.admin` to find IAM policy bindings that specify
958
+ # the Compute Admin role.
959
+ # * `policy.role.permissions:storage.buckets.update` to find IAM policy
960
+ # bindings that specify a role containing "storage.buckets.update"
961
+ # permission. Note that if callers don't have `iam.roles.get` access to a
962
+ # role's included permissions, policy bindings that specify this role will
963
+ # be dropped from the search results.
964
+ # * `resource:organizations/123456` to find IAM policy bindings
965
+ # that are set on "organizations/123456".
966
+ # * `Important` to find IAM policy bindings that contain "Important" as a
967
+ # word in any of the searchable fields (except for the included
968
+ # permissions).
969
+ # * `*por*` to find IAM policy bindings that contain "por" as a substring
970
+ # in any of the searchable fields (except for the included permissions).
971
+ # * `resource:(instance1 OR instance2) policy:amy` to find
972
+ # IAM policy bindings that are set on resources "instance1" or
973
+ # "instance2" and also specify user "amy".
920
974
  # @param page_size [::Integer]
921
- # Optional. The page size for search result pagination. Page size is capped
922
- # at 500 even if a larger value is given. If set to zero, server will pick an
923
- # appropriate default. Returned results may be fewer than requested. When
924
- # this happens, there could be more results as long as `next_page_token` is
925
- # returned.
975
+ # Optional. The page size for search result pagination. Page size is capped at 500 even
976
+ # if a larger value is given. If set to zero, server will pick an appropriate
977
+ # default. Returned results may be fewer than requested. When this happens,
978
+ # there could be more results as long as `next_page_token` is returned.
926
979
  # @param page_token [::String]
927
- # Optional. If present, retrieve the next batch of results from the preceding
928
- # call to this method. `page_token` must be the value of `next_page_token`
929
- # from the previous response. The values of all other method parameters must
930
- # be identical to those in the previous call.
980
+ # Optional. If present, retrieve the next batch of results from the preceding call to
981
+ # this method. `page_token` must be the value of `next_page_token` from the
982
+ # previous response. The values of all other method parameters must be
983
+ # identical to those in the previous call.
931
984
  #
932
985
  # @yield [response, operation] Access the result along with the RPC operation
933
986
  # @yieldparam response [::Gapic::PagedEnumerable<::Google::Cloud::Asset::V1::IamPolicySearchResult>]
@@ -1060,7 +1113,7 @@ module Google
1060
1113
 
1061
1114
  config_attr :endpoint, "cloudasset.googleapis.com", ::String
1062
1115
  config_attr :credentials, nil do |value|
1063
- allowed = [::String, ::Hash, ::Proc, ::Google::Auth::Credentials, ::Signet::OAuth2::Client, nil]
1116
+ allowed = [::String, ::Hash, ::Proc, ::Symbol, ::Google::Auth::Credentials, ::Signet::OAuth2::Client, nil]
1064
1117
  allowed += [::GRPC::Core::Channel, ::GRPC::Core::ChannelCredentials] if defined? ::GRPC
1065
1118
  allowed.any? { |klass| klass === value }
1066
1119
  end
@@ -475,7 +475,7 @@ module Google
475
475
 
476
476
  config_attr :endpoint, "cloudasset.googleapis.com", ::String
477
477
  config_attr :credentials, nil do |value|
478
- allowed = [::String, ::Hash, ::Proc, ::Google::Auth::Credentials, ::Signet::OAuth2::Client, nil]
478
+ allowed = [::String, ::Hash, ::Proc, ::Symbol, ::Google::Auth::Credentials, ::Signet::OAuth2::Client, nil]
479
479
  allowed += [::GRPC::Core::Channel, ::GRPC::Core::ChannelCredentials] if defined? ::GRPC
480
480
  allowed.any? { |klass| klass === value }
481
481
  end
@@ -26,6 +26,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
26
26
  add_message "google.cloud.asset.v1.ExportAssetsResponse" do
27
27
  optional :read_time, :message, 1, "google.protobuf.Timestamp"
28
28
  optional :output_config, :message, 2, "google.cloud.asset.v1.OutputConfig"
29
+ optional :output_result, :message, 3, "google.cloud.asset.v1.OutputResult"
29
30
  end
30
31
  add_message "google.cloud.asset.v1.BatchGetAssetsHistoryRequest" do
31
32
  optional :parent, :string, 1
@@ -63,6 +64,14 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
63
64
  optional :bigquery_destination, :message, 2, "google.cloud.asset.v1.BigQueryDestination"
64
65
  end
65
66
  end
67
+ add_message "google.cloud.asset.v1.OutputResult" do
68
+ oneof :result do
69
+ optional :gcs_result, :message, 1, "google.cloud.asset.v1.GcsOutputResult"
70
+ end
71
+ end
72
+ add_message "google.cloud.asset.v1.GcsOutputResult" do
73
+ repeated :uris, :string, 1
74
+ end
66
75
  add_message "google.cloud.asset.v1.GcsDestination" do
67
76
  oneof :object_uri do
68
77
  optional :uri, :string, 1
@@ -137,6 +146,8 @@ module Google
137
146
  UpdateFeedRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.asset.v1.UpdateFeedRequest").msgclass
138
147
  DeleteFeedRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.asset.v1.DeleteFeedRequest").msgclass
139
148
  OutputConfig = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.asset.v1.OutputConfig").msgclass
149
+ OutputResult = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.asset.v1.OutputResult").msgclass
150
+ GcsOutputResult = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.asset.v1.GcsOutputResult").msgclass
140
151
  GcsDestination = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.asset.v1.GcsDestination").msgclass
141
152
  BigQueryDestination = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.asset.v1.BigQueryDestination").msgclass
142
153
  PubsubDestination = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.asset.v1.PubsubDestination").msgclass
@@ -36,15 +36,14 @@ module Google
36
36
  # Exports assets with time and resource types to a given Cloud Storage
37
37
  # location/BigQuery table. For Cloud Storage location destinations, the
38
38
  # output format is newline-delimited JSON. Each line represents a
39
- # [google.cloud.asset.v1.Asset][google.cloud.asset.v1.Asset] in the JSON
40
- # format; for BigQuery table destinations, the output table stores the fields
41
- # in asset proto as columns. This API implements the
42
- # [google.longrunning.Operation][google.longrunning.Operation] API , which
43
- # allows you to keep track of the export. We recommend intervals of at least
44
- # 2 seconds with exponential retry to poll the export operation result. For
45
- # regular-size resource parent, the export operation usually finishes within
46
- # 5 minutes.
47
- rpc :ExportAssets, ExportAssetsRequest, Google::Longrunning::Operation
39
+ # [google.cloud.asset.v1.Asset][google.cloud.asset.v1.Asset] in the JSON format; for BigQuery table
40
+ # destinations, the output table stores the fields in asset proto as columns.
41
+ # This API implements the [google.longrunning.Operation][google.longrunning.Operation] API
42
+ # , which allows you to keep track of the export. We recommend intervals of
43
+ # at least 2 seconds with exponential retry to poll the export operation
44
+ # result. For regular-size resource parent, the export operation usually
45
+ # finishes within 5 minutes.
46
+ rpc :ExportAssets, Google::Cloud::Asset::V1::ExportAssetsRequest, Google::Longrunning::Operation
48
47
  # Batch gets the update history of assets that overlap a time window.
49
48
  # For IAM_POLICY content, this API outputs history when the asset and its
50
49
  # attached IAM POLICY both exist. This can create gaps in the output history.
@@ -52,28 +51,28 @@ module Google
52
51
  # deleted status.
53
52
  # If a specified asset does not exist, this API returns an INVALID_ARGUMENT
54
53
  # error.
55
- rpc :BatchGetAssetsHistory, BatchGetAssetsHistoryRequest, BatchGetAssetsHistoryResponse
54
+ rpc :BatchGetAssetsHistory, Google::Cloud::Asset::V1::BatchGetAssetsHistoryRequest, Google::Cloud::Asset::V1::BatchGetAssetsHistoryResponse
56
55
  # Creates a feed in a parent project/folder/organization to listen to its
57
56
  # asset updates.
58
- rpc :CreateFeed, CreateFeedRequest, Feed
57
+ rpc :CreateFeed, Google::Cloud::Asset::V1::CreateFeedRequest, Google::Cloud::Asset::V1::Feed
59
58
  # Gets details about an asset feed.
60
- rpc :GetFeed, GetFeedRequest, Feed
59
+ rpc :GetFeed, Google::Cloud::Asset::V1::GetFeedRequest, Google::Cloud::Asset::V1::Feed
61
60
  # Lists all asset feeds in a parent project/folder/organization.
62
- rpc :ListFeeds, ListFeedsRequest, ListFeedsResponse
61
+ rpc :ListFeeds, Google::Cloud::Asset::V1::ListFeedsRequest, Google::Cloud::Asset::V1::ListFeedsResponse
63
62
  # Updates an asset feed configuration.
64
- rpc :UpdateFeed, UpdateFeedRequest, Feed
63
+ rpc :UpdateFeed, Google::Cloud::Asset::V1::UpdateFeedRequest, Google::Cloud::Asset::V1::Feed
65
64
  # Deletes an asset feed.
66
- rpc :DeleteFeed, DeleteFeedRequest, Google::Protobuf::Empty
67
- # Searches all the resources within the given accessible scope (e.g., a
68
- # project, a folder or an organization). Callers should have
69
- # cloud.assets.SearchAllResources permission upon the requested scope,
65
+ rpc :DeleteFeed, Google::Cloud::Asset::V1::DeleteFeedRequest, Google::Protobuf::Empty
66
+ # Searches all Cloud resources within the specified scope, such as a project,
67
+ # folder, or organization. The caller must be granted the
68
+ # `cloudasset.assets.searchAllResources` permission on the desired scope,
70
69
  # otherwise the request will be rejected.
71
- rpc :SearchAllResources, SearchAllResourcesRequest, SearchAllResourcesResponse
72
- # Searches all the IAM policies within the given accessible scope (e.g., a
73
- # project, a folder or an organization). Callers should have
74
- # cloud.assets.SearchAllIamPolicies permission upon the requested scope,
70
+ rpc :SearchAllResources, Google::Cloud::Asset::V1::SearchAllResourcesRequest, Google::Cloud::Asset::V1::SearchAllResourcesResponse
71
+ # Searches all IAM policies within the specified scope, such as a project,
72
+ # folder, or organization. The caller must be granted the
73
+ # `cloudasset.assets.searchAllIamPolicies` permission on the desired scope,
75
74
  # otherwise the request will be rejected.
76
- rpc :SearchAllIamPolicies, SearchAllIamPoliciesRequest, SearchAllIamPoliciesResponse
75
+ rpc :SearchAllIamPolicies, Google::Cloud::Asset::V1::SearchAllIamPoliciesRequest, Google::Cloud::Asset::V1::SearchAllIamPoliciesResponse
77
76
  end
78
77
 
79
78
  Stub = Service.rpc_stub_class
@@ -3,7 +3,6 @@
3
3
 
4
4
  require 'google/protobuf'
5
5
 
6
- require 'google/api/annotations_pb'
7
6
  require 'google/api/resource_pb'
8
7
  require 'google/cloud/orgpolicy/v1/orgpolicy_pb'
9
8
  require 'google/iam/v1/policy_pb'
@@ -14,6 +13,7 @@ require 'google/protobuf/any_pb'
14
13
  require 'google/protobuf/struct_pb'
15
14
  require 'google/protobuf/timestamp_pb'
16
15
  require 'google/rpc/code_pb'
16
+ require 'google/api/annotations_pb'
17
17
  Google::Protobuf::DescriptorPool.generated_pool.build do
18
18
  add_file("google/cloud/asset/v1/assets.proto", :syntax => :proto3) do
19
19
  add_message "google.cloud.asset.v1.TemporalAsset" do
@@ -21,7 +21,7 @@ module Google
21
21
  module Cloud
22
22
  module Asset
23
23
  module V1
24
- VERSION = "0.5.0"
24
+ VERSION = "0.6.1"
25
25
  end
26
26
  end
27
27
  end
@@ -37,9 +37,22 @@ module Google
37
37
  # running the same query may get different results.
38
38
  # @!attribute [rw] asset_types
39
39
  # @return [::Array<::String>]
40
- # A list of asset types of which to take a snapshot for. Example:
41
- # "compute.googleapis.com/Disk". If specified, only matching assets will be
42
- # returned. See [Introduction to Cloud Asset
40
+ # A list of asset types to take a snapshot for. For example:
41
+ # "compute.googleapis.com/Disk".
42
+ #
43
+ # Regular expressions are also supported. For example:
44
+ #
45
+ # * "compute.googleapis.com.*" snapshots resources whose asset type starts
46
+ # with "compute.googleapis.com".
47
+ # * ".*Instance" snapshots resources whose asset type ends with "Instance".
48
+ # * ".*Instance.*" snapshots resources whose asset type contains "Instance".
49
+ #
50
+ # See [RE2](https://github.com/google/re2/wiki/Syntax) for all supported
51
+ # regular expression syntax. If the regular expression does not match any
52
+ # supported asset type, an INVALID_ARGUMENT error will be returned.
53
+ #
54
+ # If specified, only matching assets will be returned, otherwise, it will
55
+ # snapshot all asset types. See [Introduction to Cloud Asset
43
56
  # Inventory](https://cloud.google.com/asset-inventory/docs/overview)
44
57
  # for all supported asset types.
45
58
  # @!attribute [rw] content_type
@@ -48,24 +61,28 @@ module Google
48
61
  # returned.
49
62
  # @!attribute [rw] output_config
50
63
  # @return [::Google::Cloud::Asset::V1::OutputConfig]
51
- # Required. Output configuration indicating where the results will be output
52
- # to.
64
+ # Required. Output configuration indicating where the results will be output to.
53
65
  class ExportAssetsRequest
54
66
  include ::Google::Protobuf::MessageExts
55
67
  extend ::Google::Protobuf::MessageExts::ClassMethods
56
68
  end
57
69
 
58
70
  # The export asset response. This message is returned by the
59
- # google.longrunning.Operations.GetOperation
60
- # method in the returned
61
- # {::Google::Longrunning::Operation#response google.longrunning.Operation.response}
62
- # field.
71
+ # google.longrunning.Operations.GetOperation method in the returned
72
+ # {::Google::Longrunning::Operation#response google.longrunning.Operation.response} field.
63
73
  # @!attribute [rw] read_time
64
74
  # @return [::Google::Protobuf::Timestamp]
65
75
  # Time the snapshot was taken.
66
76
  # @!attribute [rw] output_config
67
77
  # @return [::Google::Cloud::Asset::V1::OutputConfig]
68
78
  # Output configuration indicating where the results were output to.
79
+ # @!attribute [rw] output_result
80
+ # @return [::Google::Cloud::Asset::V1::OutputResult]
81
+ # Output result indicating where the assets were exported to. For example, a
82
+ # set of actual Google Cloud Storage object uris where the assets are
83
+ # exported to. The uris can be different from what [output_config] has
84
+ # specified, as the service will split the output object into multiple ones
85
+ # once it exceeds a single Google Cloud Storage object limit.
69
86
  class ExportAssetsResponse
70
87
  include ::Google::Protobuf::MessageExts
71
88
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -126,8 +143,9 @@ module Google
126
143
  # be unique under a specific parent project/folder/organization.
127
144
  # @!attribute [rw] feed
128
145
  # @return [::Google::Cloud::Asset::V1::Feed]
129
- # Required. The feed details. The field `name` must be empty and it will be
130
- # generated in the format of: projects/project_number/feeds/feed_id
146
+ # Required. The feed details. The field `name` must be empty and it will be generated
147
+ # in the format of:
148
+ # projects/project_number/feeds/feed_id
131
149
  # folders/folder_number/feeds/feed_id
132
150
  # organizations/organization_number/feeds/feed_id
133
151
  class CreateFeedRequest
@@ -169,8 +187,8 @@ module Google
169
187
  # Update asset feed request.
170
188
  # @!attribute [rw] feed
171
189
  # @return [::Google::Cloud::Asset::V1::Feed]
172
- # Required. The new values of feed details. It must match an existing feed
173
- # and the field `name` must be in the format of:
190
+ # Required. The new values of feed details. It must match an existing feed and the
191
+ # field `name` must be in the format of:
174
192
  # projects/project_number/feeds/feed_id or
175
193
  # folders/folder_number/feeds/feed_id or
176
194
  # organizations/organization_number/feeds/feed_id.
@@ -208,6 +226,25 @@ module Google
208
226
  extend ::Google::Protobuf::MessageExts::ClassMethods
209
227
  end
210
228
 
229
+ # Output result of export assets.
230
+ # @!attribute [rw] gcs_result
231
+ # @return [::Google::Cloud::Asset::V1::GcsOutputResult]
232
+ # Export result on Cloud Storage.
233
+ class OutputResult
234
+ include ::Google::Protobuf::MessageExts
235
+ extend ::Google::Protobuf::MessageExts::ClassMethods
236
+ end
237
+
238
+ # A Cloud Storage output result.
239
+ # @!attribute [rw] uris
240
+ # @return [::Array<::String>]
241
+ # List of uris of the Cloud Storage objects. Example:
242
+ # "gs://bucket_name/object_name".
243
+ class GcsOutputResult
244
+ include ::Google::Protobuf::MessageExts
245
+ extend ::Google::Protobuf::MessageExts::ClassMethods
246
+ end
247
+
211
248
  # A Cloud Storage location.
212
249
  # @!attribute [rw] uri
213
250
  # @return [::String]
@@ -324,8 +361,12 @@ module Google
324
361
  # When set, `expression` field in the `Expr` must be a valid [CEL expression]
325
362
  # (https://github.com/google/cel-spec) on a TemporalAsset with name
326
363
  # `temporal_asset`. Example: a Feed with expression ("temporal_asset.deleted
327
- # == true") will only publish Asset deletions. Other fields in `Expr` are
364
+ # == true") will only publish Asset deletions. Other fields of `Expr` are
328
365
  # optional.
366
+ #
367
+ # See our [user
368
+ # guide](https://cloud.google.com/asset-inventory/docs/monitoring-asset-changes#feed_with_condition)
369
+ # for detailed instructions.
329
370
  class Feed
330
371
  include ::Google::Protobuf::MessageExts
331
372
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -334,75 +375,81 @@ module Google
334
375
  # Search all resources request.
335
376
  # @!attribute [rw] scope
336
377
  # @return [::String]
337
- # Required. A scope can be a project, a folder or an organization. The search
338
- # is limited to the resources within the `scope`.
378
+ # Required. A scope can be a project, a folder, or an organization. The search is
379
+ # limited to the resources within the `scope`. The caller must be granted the
380
+ # [`cloudasset.assets.searchAllResources`](http://cloud.google.com/asset-inventory/docs/access-control#required_permissions)
381
+ # permission on the desired scope.
339
382
  #
340
383
  # The allowed values are:
341
384
  #
342
- # * projects/\\{PROJECT_ID}
343
- # * projects/\\{PROJECT_NUMBER}
344
- # * folders/\\{FOLDER_NUMBER}
345
- # * organizations/\\{ORGANIZATION_NUMBER}
385
+ # * projects/\\{PROJECT_ID} (e.g., "projects/foo-bar")
386
+ # * projects/\\{PROJECT_NUMBER} (e.g., "projects/12345678")
387
+ # * folders/\\{FOLDER_NUMBER} (e.g., "folders/1234567")
388
+ # * organizations/\\{ORGANIZATION_NUMBER} (e.g., "organizations/123456")
346
389
  # @!attribute [rw] query
347
390
  # @return [::String]
348
- # Optional. The query statement. An empty query can be specified to search
349
- # all the resources of certain `asset_types` within the given `scope`.
391
+ # Optional. The query statement. See [how to construct a
392
+ # query](http://cloud.google.com/asset-inventory/docs/searching-resources#how_to_construct_a_query)
393
+ # for more information. If not specified or empty, it will search all the
394
+ # resources within the specified `scope`. Note that the query string is
395
+ # compared against each Cloud IAM policy binding, including its members,
396
+ # roles, and Cloud IAM conditions. The returned Cloud IAM policies will only
397
+ # contain the bindings that match your query. To learn more about the IAM
398
+ # policy structure, see [IAM policy
399
+ # doc](https://cloud.google.com/iam/docs/policies#structure).
350
400
  #
351
401
  # Examples:
352
402
  #
353
- # * `name : "Important"` to find Cloud resources whose name contains
403
+ # * `name:Important` to find Cloud resources whose name contains
354
404
  # "Important" as a word.
355
- # * `displayName : "Impor*"` to find Cloud resources whose display name
356
- # contains "Impor" as a word prefix.
357
- # * `description : "*por*"` to find Cloud resources whose description
405
+ # * `displayName:Impor*` to find Cloud resources whose display name
406
+ # contains "Impor" as a prefix.
407
+ # * `description:*por*` to find Cloud resources whose description
358
408
  # contains "por" as a substring.
359
- # * `location : "us-west*"` to find Cloud resources whose location is
409
+ # * `location:us-west*` to find Cloud resources whose location is
360
410
  # prefixed with "us-west".
361
- # * `labels : "prod"` to find Cloud resources whose labels contain "prod" as
411
+ # * `labels:prod` to find Cloud resources whose labels contain "prod" as
362
412
  # a key or value.
363
- # * `labels.env : "prod"` to find Cloud resources which have a label "env"
413
+ # * `labels.env:prod` to find Cloud resources that have a label "env"
364
414
  # and its value is "prod".
365
- # * `labels.env : *` to find Cloud resources which have a label "env".
366
- # * `"Important"` to find Cloud resources which contain "Important" as a word
415
+ # * `labels.env:*` to find Cloud resources that have a label "env".
416
+ # * `Important` to find Cloud resources that contain "Important" as a word
367
417
  # in any of the searchable fields.
368
- # * `"Impor*"` to find Cloud resources which contain "Impor" as a word prefix
418
+ # * `Impor*` to find Cloud resources that contain "Impor" as a prefix
369
419
  # in any of the searchable fields.
370
- # * `"*por*"` to find Cloud resources which contain "por" as a substring in
420
+ # * `*por*` to find Cloud resources that contain "por" as a substring in
371
421
  # any of the searchable fields.
372
- # * `("Important" AND location : ("us-west1" OR "global"))` to find Cloud
373
- # resources which contain "Important" as a word in any of the searchable
422
+ # * `Important location:(us-west1 OR global)` to find Cloud
423
+ # resources that contain "Important" as a word in any of the searchable
374
424
  # fields and are also located in the "us-west1" region or the "global"
375
425
  # location.
376
- #
377
- # See [how to construct a
378
- # query](https://cloud.google.com/asset-inventory/docs/searching-resources#how_to_construct_a_query)
379
- # for more details.
380
426
  # @!attribute [rw] asset_types
381
427
  # @return [::Array<::String>]
382
- # Optional. A list of asset types that this request searches for. If empty,
383
- # it will search all the [searchable asset
428
+ # Optional. A list of asset types that this request searches for. If empty, it will
429
+ # search all the [searchable asset
384
430
  # types](https://cloud.google.com/asset-inventory/docs/supported-asset-types#searchable_asset_types).
385
431
  # @!attribute [rw] page_size
386
432
  # @return [::Integer]
387
- # Optional. The page size for search result pagination. Page size is capped
388
- # at 500 even if a larger value is given. If set to zero, server will pick an
389
- # appropriate default. Returned results may be fewer than requested. When
390
- # this happens, there could be more results as long as `next_page_token` is
391
- # returned.
433
+ # Optional. The page size for search result pagination. Page size is capped at 500 even
434
+ # if a larger value is given. If set to zero, server will pick an appropriate
435
+ # default. Returned results may be fewer than requested. When this happens,
436
+ # there could be more results as long as `next_page_token` is returned.
392
437
  # @!attribute [rw] page_token
393
438
  # @return [::String]
394
- # Optional. If present, then retrieve the next batch of results from the
395
- # preceding call to this method. `page_token` must be the value of
396
- # `next_page_token` from the previous response. The values of all other
397
- # method parameters, must be identical to those in the previous call.
439
+ # Optional. If present, then retrieve the next batch of results from the preceding call
440
+ # to this method. `page_token` must be the value of `next_page_token` from
441
+ # the previous response. The values of all other method parameters, must be
442
+ # identical to those in the previous call.
398
443
  # @!attribute [rw] order_by
399
444
  # @return [::String]
400
- # Optional. A comma separated list of fields specifying the sorting order of
401
- # the results. The default order is ascending. Add " DESC" after the field
402
- # name to indicate descending order. Redundant space characters are ignored.
403
- # Example: "location DESC, name". See [supported resource metadata
404
- # fields](https://cloud.google.com/asset-inventory/docs/searching-resources#query_on_resource_metadata_fields)
405
- # for more details.
445
+ # Optional. A comma separated list of fields specifying the sorting order of the
446
+ # results. The default order is ascending. Add " DESC" after the field name
447
+ # to indicate descending order. Redundant space characters are ignored.
448
+ # Example: "location DESC, name". Only string fields in the response are
449
+ # sortable, including `name`, `displayName`, `description`, `location`. All
450
+ # the other fields such as repeated fields (e.g., `networkTags`), map
451
+ # fields (e.g., `labels`) and struct fields (e.g., `additionalAttributes`)
452
+ # are not supported.
406
453
  class SearchAllResourcesRequest
407
454
  include ::Google::Protobuf::MessageExts
408
455
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -426,51 +473,58 @@ module Google
426
473
  # Search all IAM policies request.
427
474
  # @!attribute [rw] scope
428
475
  # @return [::String]
429
- # Required. A scope can be a project, a folder or an organization. The search
430
- # is limited to the IAM policies within the `scope`.
476
+ # Required. A scope can be a project, a folder, or an organization. The search is
477
+ # limited to the IAM policies within the `scope`. The caller must be granted
478
+ # the
479
+ # [`cloudasset.assets.searchAllIamPolicies`](http://cloud.google.com/asset-inventory/docs/access-control#required_permissions)
480
+ # permission on the desired scope.
431
481
  #
432
482
  # The allowed values are:
433
483
  #
434
- # * projects/\\{PROJECT_ID}
435
- # * projects/\\{PROJECT_NUMBER}
436
- # * folders/\\{FOLDER_NUMBER}
437
- # * organizations/\\{ORGANIZATION_NUMBER}
484
+ # * projects/\\{PROJECT_ID} (e.g., "projects/foo-bar")
485
+ # * projects/\\{PROJECT_NUMBER} (e.g., "projects/12345678")
486
+ # * folders/\\{FOLDER_NUMBER} (e.g., "folders/1234567")
487
+ # * organizations/\\{ORGANIZATION_NUMBER} (e.g., "organizations/123456")
438
488
  # @!attribute [rw] query
439
489
  # @return [::String]
440
- # Optional. The query statement. An empty query can be specified to search
441
- # all the IAM policies within the given `scope`.
490
+ # Optional. The query statement. See [how to construct a
491
+ # query](https://cloud.google.com/asset-inventory/docs/searching-iam-policies#how_to_construct_a_query)
492
+ # for more information. If not specified or empty, it will search all the
493
+ # IAM policies within the specified `scope`.
442
494
  #
443
495
  # Examples:
444
496
  #
445
- # * `policy : "amy@gmail.com"` to find Cloud IAM policy bindings that
446
- # specify user "amy@gmail.com".
447
- # * `policy : "roles/compute.admin"` to find Cloud IAM policy bindings that
448
- # specify the Compute Admin role.
449
- # * `policy.role.permissions : "storage.buckets.update"` to find Cloud IAM
450
- # policy bindings that specify a role containing "storage.buckets.update"
451
- # permission.
452
- # * `resource : "organizations/123"` to find Cloud IAM policy bindings that
453
- # are set on "organizations/123".
454
- # * `(resource : ("organizations/123" OR "folders/1234") AND policy : "amy")`
455
- # to find Cloud IAM policy bindings that are set on "organizations/123" or
456
- # "folders/1234", and also specify user "amy".
457
- #
458
- # See [how to construct a
459
- # query](https://cloud.google.com/asset-inventory/docs/searching-iam-policies#how_to_construct_a_query)
460
- # for more details.
497
+ # * `policy:amy@gmail.com` to find IAM policy bindings that specify user
498
+ # "amy@gmail.com".
499
+ # * `policy:roles/compute.admin` to find IAM policy bindings that specify
500
+ # the Compute Admin role.
501
+ # * `policy.role.permissions:storage.buckets.update` to find IAM policy
502
+ # bindings that specify a role containing "storage.buckets.update"
503
+ # permission. Note that if callers don't have `iam.roles.get` access to a
504
+ # role's included permissions, policy bindings that specify this role will
505
+ # be dropped from the search results.
506
+ # * `resource:organizations/123456` to find IAM policy bindings
507
+ # that are set on "organizations/123456".
508
+ # * `Important` to find IAM policy bindings that contain "Important" as a
509
+ # word in any of the searchable fields (except for the included
510
+ # permissions).
511
+ # * `*por*` to find IAM policy bindings that contain "por" as a substring
512
+ # in any of the searchable fields (except for the included permissions).
513
+ # * `resource:(instance1 OR instance2) policy:amy` to find
514
+ # IAM policy bindings that are set on resources "instance1" or
515
+ # "instance2" and also specify user "amy".
461
516
  # @!attribute [rw] page_size
462
517
  # @return [::Integer]
463
- # Optional. The page size for search result pagination. Page size is capped
464
- # at 500 even if a larger value is given. If set to zero, server will pick an
465
- # appropriate default. Returned results may be fewer than requested. When
466
- # this happens, there could be more results as long as `next_page_token` is
467
- # returned.
518
+ # Optional. The page size for search result pagination. Page size is capped at 500 even
519
+ # if a larger value is given. If set to zero, server will pick an appropriate
520
+ # default. Returned results may be fewer than requested. When this happens,
521
+ # there could be more results as long as `next_page_token` is returned.
468
522
  # @!attribute [rw] page_token
469
523
  # @return [::String]
470
- # Optional. If present, retrieve the next batch of results from the preceding
471
- # call to this method. `page_token` must be the value of `next_page_token`
472
- # from the previous response. The values of all other method parameters must
473
- # be identical to those in the previous call.
524
+ # Optional. If present, retrieve the next batch of results from the preceding call to
525
+ # this method. `page_token` must be the value of `next_page_token` from the
526
+ # previous response. The values of all other method parameters must be
527
+ # identical to those in the previous call.
474
528
  class SearchAllIamPoliciesRequest
475
529
  include ::Google::Protobuf::MessageExts
476
530
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -505,7 +559,7 @@ module Google
505
559
  # The Cloud Organization Policy set on an asset.
506
560
  ORG_POLICY = 4
507
561
 
508
- # The Cloud Access context mananger Policy set on an asset.
562
+ # The Cloud Access context manager Policy set on an asset.
509
563
  ACCESS_POLICY = 5
510
564
  end
511
565
  end
@@ -202,7 +202,7 @@ module Google
202
202
  extend ::Google::Protobuf::MessageExts::ClassMethods
203
203
  end
204
204
 
205
- # A result of Resource Search, containing information of a cloud resoure.
205
+ # A result of Resource Search, containing information of a cloud resource.
206
206
  # @!attribute [rw] name
207
207
  # @return [::String]
208
208
  # The full resource name of this resource. Example:
@@ -213,8 +213,8 @@ module Google
213
213
  #
214
214
  # To search against the `name`:
215
215
  #
216
- # * use a field query. Example: `name : "instance1"`
217
- # * use a free text query. Example: `"instance1"`
216
+ # * use a field query. Example: `name:instance1`
217
+ # * use a free text query. Example: `instance1`
218
218
  # @!attribute [rw] asset_type
219
219
  # @return [::String]
220
220
  # The type of this resource. Example: `compute.googleapis.com/Disk`.
@@ -236,7 +236,7 @@ module Google
236
236
  #
237
237
  # To search against the `display_name`:
238
238
  #
239
- # * use a field query. Example: `displayName : "My Instance"`
239
+ # * use a field query. Example: `displayName:"My Instance"`
240
240
  # * use a free text query. Example: `"My Instance"`
241
241
  # @!attribute [rw] description
242
242
  # @return [::String]
@@ -245,7 +245,7 @@ module Google
245
245
  #
246
246
  # To search against the `description`:
247
247
  #
248
- # * use a field query. Example: `description : "*important instance*"`
248
+ # * use a field query. Example: `description:"*important instance*"`
249
249
  # * use a free text query. Example: `"*important instance*"`
250
250
  # @!attribute [rw] location
251
251
  # @return [::String]
@@ -254,8 +254,8 @@ module Google
254
254
  #
255
255
  # To search against the `location`:
256
256
  #
257
- # * use a field query. Example: `location : "us-west*"`
258
- # * use a free text query. Example: `"us-west*"`
257
+ # * use a field query. Example: `location:us-west*`
258
+ # * use a free text query. Example: `us-west*`
259
259
  # @!attribute [rw] labels
260
260
  # @return [::Google::Protobuf::Map{::String => ::String}]
261
261
  # Labels associated with this resource. See [Labelling and grouping GCP
@@ -264,11 +264,11 @@ module Google
264
264
  #
265
265
  # To search against the `labels`:
266
266
  #
267
- # * use a field query, as following:
268
- # - query on any label's key or value. Example: `labels : "prod"`
269
- # - query by a given label. Example: `labels.env : "prod"`
270
- # - query by a given label'sexistence. Example: `labels.env : *`
271
- # * use a free text query. Example: `"prod"`
267
+ # * use a field query:
268
+ # - query on any label's key or value. Example: `labels:prod`
269
+ # - query by a given label. Example: `labels.env:prod`
270
+ # - query by a given label's existence. Example: `labels.env:*`
271
+ # * use a free text query. Example: `prod`
272
272
  # @!attribute [rw] network_tags
273
273
  # @return [::Array<::String>]
274
274
  # Network tags associated with this resource. Like labels, network tags are a
@@ -278,19 +278,29 @@ module Google
278
278
  #
279
279
  # To search against the `network_tags`:
280
280
  #
281
- # * use a field query. Example: `networkTags : "internal"`
282
- # * use a free text query. Example: `"internal"`
281
+ # * use a field query. Example: `networkTags:internal`
282
+ # * use a free text query. Example: `internal`
283
283
  # @!attribute [rw] additional_attributes
284
284
  # @return [::Google::Protobuf::Struct]
285
- # The additional attributes of this resource. The attributes may vary from
286
- # one resource type to another. Examples: `projectId` for Project,
287
- # `dnsName` for DNS ManagedZone.
285
+ # The additional searchable attributes of this resource. The attributes may
286
+ # vary from one resource type to another. Examples: `projectId` for Project,
287
+ # `dnsName` for DNS ManagedZone. This field contains a subset of the resource
288
+ # metadata fields that are returned by the List or Get APIs provided by the
289
+ # corresponding GCP service (e.g., Compute Engine). see [API references and
290
+ # supported searchable
291
+ # attributes](https://cloud.google.com/asset-inventory/docs/supported-asset-types#searchable_asset_types)
292
+ # for more information.
293
+ #
294
+ # You can search values of these fields through free text search. However,
295
+ # you should not consume the field programically as the field names and
296
+ # values may change as the GCP service updates to a new incompatible API
297
+ # version.
288
298
  #
289
299
  # To search against the `additional_attributes`:
290
300
  #
291
301
  # * use a free text query to match the attributes values. Example: to search
292
302
  # `additional_attributes = { dnsName: "foobar" }`, you can issue a query
293
- # `"foobar"`.
303
+ # `foobar`.
294
304
  class ResourceSearchResult
295
305
  include ::Google::Protobuf::MessageExts
296
306
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -317,7 +327,7 @@ module Google
317
327
  #
318
328
  # To search against the `resource`:
319
329
  #
320
- # * use a field query. Example: `resource : "organizations/123"`
330
+ # * use a field query. Example: `resource:organizations/123`
321
331
  # @!attribute [rw] project
322
332
  # @return [::String]
323
333
  # The project that the associated GCP resource belongs to, in the form of
@@ -338,13 +348,13 @@ module Google
338
348
  #
339
349
  # To search against the `policy` bindings:
340
350
  #
341
- # * use a field query, as following:
351
+ # * use a field query:
342
352
  # - query by the policy contained members. Example:
343
- # `policy : "amy@gmail.com"`
353
+ # `policy:amy@gmail.com`
344
354
  # - query by the policy contained roles. Example:
345
- # `policy : "roles/compute.admin"`
346
- # - query by the policy contained roles' implied permissions. Example:
347
- # `policy.role.permissions : "compute.instances.create"`
355
+ # `policy:roles/compute.admin`
356
+ # - query by the policy contained roles' included permissions. Example:
357
+ # `policy.role.permissions:compute.instances.create`
348
358
  # @!attribute [rw] explanation
349
359
  # @return [::Google::Cloud::Asset::V1::IamPolicySearchResult::Explanation]
350
360
  # Explanation about the IAM policy search result. It contains additional
@@ -358,7 +368,7 @@ module Google
358
368
  # @return [::Google::Protobuf::Map{::String => ::Google::Cloud::Asset::V1::IamPolicySearchResult::Explanation::Permissions}]
359
369
  # The map from roles to their included permissions that match the
360
370
  # permission query (i.e., a query containing `policy.role.permissions:`).
361
- # Example: if query `policy.role.permissions : "compute.disk.get"`
371
+ # Example: if query `policy.role.permissions:compute.disk.get`
362
372
  # matches a policy binding that contains owner role, the
363
373
  # matched_permissions will be `{"roles/owner": ["compute.disk.get"]}`. The
364
374
  # roles can also be found in the returned `policy` bindings. Note that the
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: google-cloud-asset-v1
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.5.0
4
+ version: 0.6.1
5
5
  platform: ruby
6
6
  authors:
7
7
  - Google LLC
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2020-06-18 00:00:00.000000000 Z
11
+ date: 2020-09-10 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: gapic-common
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - "~>"
18
18
  - !ruby/object:Gem::Version
19
- version: '0.2'
19
+ version: '0.3'
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - "~>"
25
25
  - !ruby/object:Gem::Version
26
- version: '0.2'
26
+ version: '0.3'
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: google-cloud-errors
29
29
  requirement: !ruby/object:Gem::Requirement