google-cloud-asset 0.8.1 → 1.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/.yardopts +2 -1
- data/AUTHENTICATION.md +51 -59
- data/LICENSE.md +203 -0
- data/MIGRATING.md +272 -0
- data/README.md +36 -24
- data/lib/{google/cloud/asset/v1/doc/google/protobuf/empty.rb → google-cloud-asset.rb} +4 -14
- data/lib/google/cloud/asset.rb +76 -116
- data/lib/google/cloud/asset/version.rb +1 -1
- metadata +73 -78
- data/LICENSE +0 -201
- data/lib/google/cloud/asset/v1.rb +0 -146
- data/lib/google/cloud/asset/v1/asset_service_client.rb +0 -669
- data/lib/google/cloud/asset/v1/asset_service_client_config.json +0 -61
- data/lib/google/cloud/asset/v1/asset_service_pb.rb +0 -123
- data/lib/google/cloud/asset/v1/asset_service_services_pb.rb +0 -69
- data/lib/google/cloud/asset/v1/assets_pb.rb +0 -51
- data/lib/google/cloud/asset/v1/credentials.rb +0 -41
- data/lib/google/cloud/asset/v1/doc/google/cloud/asset/v1/asset_service.rb +0 -295
- data/lib/google/cloud/asset/v1/doc/google/cloud/asset/v1/assets.rb +0 -116
- data/lib/google/cloud/asset/v1/doc/google/iam/v1/policy.rb +0 -151
- data/lib/google/cloud/asset/v1/doc/google/longrunning/operations.rb +0 -51
- data/lib/google/cloud/asset/v1/doc/google/protobuf/any.rb +0 -131
- data/lib/google/cloud/asset/v1/doc/google/protobuf/field_mask.rb +0 -222
- data/lib/google/cloud/asset/v1/doc/google/protobuf/struct.rb +0 -74
- data/lib/google/cloud/asset/v1/doc/google/protobuf/timestamp.rb +0 -113
- data/lib/google/cloud/asset/v1/doc/google/rpc/status.rb +0 -39
- data/lib/google/cloud/asset/v1/doc/google/type/expr.rb +0 -45
- data/lib/google/cloud/asset/v1/helpers.rb +0 -39
- data/lib/google/cloud/asset/v1beta1.rb +0 -146
- data/lib/google/cloud/asset/v1beta1/asset_service_client.rb +0 -400
- data/lib/google/cloud/asset/v1beta1/asset_service_client_config.json +0 -36
- data/lib/google/cloud/asset/v1beta1/asset_service_pb.rb +0 -67
- data/lib/google/cloud/asset/v1beta1/asset_service_services_pb.rb +0 -59
- data/lib/google/cloud/asset/v1beta1/assets_pb.rb +0 -50
- data/lib/google/cloud/asset/v1beta1/credentials.rb +0 -41
- data/lib/google/cloud/asset/v1beta1/doc/google/cloud/asset/v1beta1/asset_service.rb +0 -140
- data/lib/google/cloud/asset/v1beta1/doc/google/cloud/asset/v1beta1/assets.rb +0 -108
- data/lib/google/cloud/asset/v1beta1/doc/google/iam/v1/policy.rb +0 -151
- data/lib/google/cloud/asset/v1beta1/doc/google/longrunning/operations.rb +0 -51
- data/lib/google/cloud/asset/v1beta1/doc/google/protobuf/any.rb +0 -131
- data/lib/google/cloud/asset/v1beta1/doc/google/protobuf/struct.rb +0 -74
- data/lib/google/cloud/asset/v1beta1/doc/google/protobuf/timestamp.rb +0 -113
- data/lib/google/cloud/asset/v1beta1/doc/google/rpc/status.rb +0 -39
- data/lib/google/cloud/asset/v1beta1/doc/google/type/expr.rb +0 -45
- data/lib/google/cloud/asset/v1beta1/helpers.rb +0 -31
- data/lib/google/cloud/orgpolicy/v1/doc/google/cloud/orgpolicy/v1/orgpolicy.rb +0 -308
- data/lib/google/cloud/orgpolicy/v1/orgpolicy_pb.rb +0 -55
@@ -1,39 +0,0 @@
|
|
1
|
-
# Copyright 2020 Google LLC
|
2
|
-
#
|
3
|
-
# Licensed under the Apache License, Version 2.0 (the "License");
|
4
|
-
# you may not use this file except in compliance with the License.
|
5
|
-
# You may obtain a copy of the License at
|
6
|
-
#
|
7
|
-
# https://www.apache.org/licenses/LICENSE-2.0
|
8
|
-
#
|
9
|
-
# Unless required by applicable law or agreed to in writing, software
|
10
|
-
# distributed under the License is distributed on an "AS IS" BASIS,
|
11
|
-
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
12
|
-
# See the License for the specific language governing permissions and
|
13
|
-
# limitations under the License.
|
14
|
-
|
15
|
-
|
16
|
-
module Google
|
17
|
-
module Rpc
|
18
|
-
# The `Status` type defines a logical error model that is suitable for
|
19
|
-
# different programming environments, including REST APIs and RPC APIs. It is
|
20
|
-
# used by [gRPC](https://github.com/grpc). Each `Status` message contains
|
21
|
-
# three pieces of data: error code, error message, and error details.
|
22
|
-
#
|
23
|
-
# You can find out more about this error model and how to work with it in the
|
24
|
-
# [API Design Guide](https://cloud.google.com/apis/design/errors).
|
25
|
-
# @!attribute [rw] code
|
26
|
-
# @return [Integer]
|
27
|
-
# The status code, which should be an enum value of {Google::Rpc::Code}.
|
28
|
-
# @!attribute [rw] message
|
29
|
-
# @return [String]
|
30
|
-
# A developer-facing error message, which should be in English. Any
|
31
|
-
# user-facing error message should be localized and sent in the
|
32
|
-
# {Google::Rpc::Status#details} field, or localized by the client.
|
33
|
-
# @!attribute [rw] details
|
34
|
-
# @return [Array<Google::Protobuf::Any>]
|
35
|
-
# A list of messages that carry the error details. There is a common set of
|
36
|
-
# message types for APIs to use.
|
37
|
-
class Status; end
|
38
|
-
end
|
39
|
-
end
|
@@ -1,45 +0,0 @@
|
|
1
|
-
# Copyright 2020 Google LLC
|
2
|
-
#
|
3
|
-
# Licensed under the Apache License, Version 2.0 (the "License");
|
4
|
-
# you may not use this file except in compliance with the License.
|
5
|
-
# You may obtain a copy of the License at
|
6
|
-
#
|
7
|
-
# https://www.apache.org/licenses/LICENSE-2.0
|
8
|
-
#
|
9
|
-
# Unless required by applicable law or agreed to in writing, software
|
10
|
-
# distributed under the License is distributed on an "AS IS" BASIS,
|
11
|
-
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
12
|
-
# See the License for the specific language governing permissions and
|
13
|
-
# limitations under the License.
|
14
|
-
|
15
|
-
|
16
|
-
module Google
|
17
|
-
module Type
|
18
|
-
# Represents an expression text. Example:
|
19
|
-
#
|
20
|
-
# title: "User account presence"
|
21
|
-
# description: "Determines whether the request has a user account"
|
22
|
-
# expression: "size(request.user) > 0"
|
23
|
-
# @!attribute [rw] expression
|
24
|
-
# @return [String]
|
25
|
-
# Textual representation of an expression in
|
26
|
-
# Common Expression Language syntax.
|
27
|
-
#
|
28
|
-
# The application context of the containing message determines which
|
29
|
-
# well-known feature set of CEL is supported.
|
30
|
-
# @!attribute [rw] title
|
31
|
-
# @return [String]
|
32
|
-
# An optional title for the expression, i.e. a short string describing
|
33
|
-
# its purpose. This can be used e.g. in UIs which allow to enter the
|
34
|
-
# expression.
|
35
|
-
# @!attribute [rw] description
|
36
|
-
# @return [String]
|
37
|
-
# An optional description of the expression. This is a longer text which
|
38
|
-
# describes the expression, e.g. when hovered over it in a UI.
|
39
|
-
# @!attribute [rw] location
|
40
|
-
# @return [String]
|
41
|
-
# An optional string indicating the location of the expression for error
|
42
|
-
# reporting, e.g. a file name and a position in the file.
|
43
|
-
class Expr; end
|
44
|
-
end
|
45
|
-
end
|
@@ -1,31 +0,0 @@
|
|
1
|
-
# Copyright 2018 Google LLC
|
2
|
-
#
|
3
|
-
# Licensed under the Apache License, Version 2.0 (the "License");
|
4
|
-
# you may not use this file except in compliance with the License.
|
5
|
-
# You may obtain a copy of the License at
|
6
|
-
#
|
7
|
-
# https://www.apache.org/licenses/LICENSE-2.0
|
8
|
-
#
|
9
|
-
# Unless required by applicable law or agreed to in writing, software
|
10
|
-
# distributed under the License is distributed on an "AS IS" BASIS,
|
11
|
-
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
12
|
-
# See the License for the specific language governing permissions and
|
13
|
-
# # limitations under the License.
|
14
|
-
|
15
|
-
module Google
|
16
|
-
module Cloud
|
17
|
-
module Asset
|
18
|
-
module V1beta1
|
19
|
-
class AssetServiceClient
|
20
|
-
|
21
|
-
# Alias for Google::Cloud::Asset::V1beta1::AssetServiceClient.project_path.
|
22
|
-
# @param project [String]
|
23
|
-
# @return [String]
|
24
|
-
def project_path project
|
25
|
-
self.class.project_path project
|
26
|
-
end
|
27
|
-
end
|
28
|
-
end
|
29
|
-
end
|
30
|
-
end
|
31
|
-
end
|
@@ -1,308 +0,0 @@
|
|
1
|
-
# frozen_string_literal: true
|
2
|
-
|
3
|
-
# Copyright 2020 Google LLC
|
4
|
-
#
|
5
|
-
# Licensed under the Apache License, Version 2.0 (the "License");
|
6
|
-
# you may not use this file except in compliance with the License.
|
7
|
-
# You may obtain a copy of the License at
|
8
|
-
#
|
9
|
-
# https://www.apache.org/licenses/LICENSE-2.0
|
10
|
-
#
|
11
|
-
# Unless required by applicable law or agreed to in writing, software
|
12
|
-
# distributed under the License is distributed on an "AS IS" BASIS,
|
13
|
-
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
14
|
-
# See the License for the specific language governing permissions and
|
15
|
-
# limitations under the License.
|
16
|
-
|
17
|
-
|
18
|
-
# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
|
19
|
-
|
20
|
-
|
21
|
-
module Google
|
22
|
-
module Cloud
|
23
|
-
module OrgPolicy
|
24
|
-
module V1
|
25
|
-
# Defines a Cloud Organization `Policy` which is used to specify `Constraints`
|
26
|
-
# for configurations of Cloud Platform resources.
|
27
|
-
# @!attribute [rw] version
|
28
|
-
# @return [Integer]
|
29
|
-
# Version of the `Policy`. Default version is 0;
|
30
|
-
# @!attribute [rw] constraint
|
31
|
-
# @return [String]
|
32
|
-
# The name of the `Constraint` the `Policy` is configuring, for example,
|
33
|
-
# `constraints/serviceuser.services`.
|
34
|
-
#
|
35
|
-
# Immutable after creation.
|
36
|
-
# @!attribute [rw] etag
|
37
|
-
# @return [String]
|
38
|
-
# An opaque tag indicating the current version of the `Policy`, used for
|
39
|
-
# concurrency control.
|
40
|
-
#
|
41
|
-
# When the `Policy` is returned from either a `GetPolicy` or a
|
42
|
-
# `ListOrgPolicy` request, this `etag` indicates the version of the current
|
43
|
-
# `Policy` to use when executing a read-modify-write loop.
|
44
|
-
#
|
45
|
-
# When the `Policy` is returned from a `GetEffectivePolicy` request, the
|
46
|
-
# `etag` will be unset.
|
47
|
-
#
|
48
|
-
# When the `Policy` is used in a `SetOrgPolicy` method, use the `etag` value
|
49
|
-
# that was returned from a `GetOrgPolicy` request as part of a
|
50
|
-
# read-modify-write loop for concurrency control. Not setting the `etag`in a
|
51
|
-
# `SetOrgPolicy` request will result in an unconditional write of the
|
52
|
-
# `Policy`.
|
53
|
-
# @!attribute [rw] update_time
|
54
|
-
# @return [Google::Protobuf::Timestamp]
|
55
|
-
# The time stamp the `Policy` was previously updated. This is set by the
|
56
|
-
# server, not specified by the caller, and represents the last time a call to
|
57
|
-
# `SetOrgPolicy` was made for that `Policy`. Any value set by the client will
|
58
|
-
# be ignored.
|
59
|
-
# @!attribute [rw] list_policy
|
60
|
-
# @return [Google::Cloud::OrgPolicy::V1::Policy::ListPolicy]
|
61
|
-
# List of values either allowed or disallowed.
|
62
|
-
# @!attribute [rw] boolean_policy
|
63
|
-
# @return [Google::Cloud::OrgPolicy::V1::Policy::BooleanPolicy]
|
64
|
-
# For boolean `Constraints`, whether to enforce the `Constraint` or not.
|
65
|
-
# @!attribute [rw] restore_default
|
66
|
-
# @return [Google::Cloud::OrgPolicy::V1::Policy::RestoreDefault]
|
67
|
-
# Restores the default behavior of the constraint; independent of
|
68
|
-
# `Constraint` type.
|
69
|
-
class Policy
|
70
|
-
include Google::Protobuf::MessageExts
|
71
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
72
|
-
|
73
|
-
# Used in `policy_type` to specify how `list_policy` behaves at this
|
74
|
-
# resource.
|
75
|
-
#
|
76
|
-
# `ListPolicy` can define specific values and subtrees of Cloud Resource
|
77
|
-
# Manager resource hierarchy (`Organizations`, `Folders`, `Projects`) that
|
78
|
-
# are allowed or denied by setting the `allowed_values` and `denied_values`
|
79
|
-
# fields. This is achieved by using the `under:` and optional `is:` prefixes.
|
80
|
-
# The `under:` prefix is used to denote resource subtree values.
|
81
|
-
# The `is:` prefix is used to denote specific values, and is required only
|
82
|
-
# if the value contains a ":". Values prefixed with "is:" are treated the
|
83
|
-
# same as values with no prefix.
|
84
|
-
# Ancestry subtrees must be in one of the following formats:
|
85
|
-
# - "projects/<project-id>", e.g. "projects/tokyo-rain-123"
|
86
|
-
# - "folders/<folder-id>", e.g. "folders/1234"
|
87
|
-
# - "organizations/<organization-id>", e.g. "organizations/1234"
|
88
|
-
# The `supports_under` field of the associated `Constraint` defines whether
|
89
|
-
# ancestry prefixes can be used. You can set `allowed_values` and
|
90
|
-
# `denied_values` in the same `Policy` if `all_values` is
|
91
|
-
# `ALL_VALUES_UNSPECIFIED`. `ALLOW` or `DENY` are used to allow or deny all
|
92
|
-
# values. If `all_values` is set to either `ALLOW` or `DENY`,
|
93
|
-
# `allowed_values` and `denied_values` must be unset.
|
94
|
-
# @!attribute [rw] allowed_values
|
95
|
-
# @return [Array<String>]
|
96
|
-
# List of values allowed at this resource. Can only be set if `all_values`
|
97
|
-
# is set to `ALL_VALUES_UNSPECIFIED`.
|
98
|
-
# @!attribute [rw] denied_values
|
99
|
-
# @return [Array<String>]
|
100
|
-
# List of values denied at this resource. Can only be set if `all_values`
|
101
|
-
# is set to `ALL_VALUES_UNSPECIFIED`.
|
102
|
-
# @!attribute [rw] all_values
|
103
|
-
# @return [Google::Cloud::OrgPolicy::V1::Policy::ListPolicy::AllValues]
|
104
|
-
# The policy all_values state.
|
105
|
-
# @!attribute [rw] suggested_value
|
106
|
-
# @return [String]
|
107
|
-
# Optional. The Google Cloud Console will try to default to a configuration
|
108
|
-
# that matches the value specified in this `Policy`. If `suggested_value`
|
109
|
-
# is not set, it will inherit the value specified higher in the hierarchy,
|
110
|
-
# unless `inherit_from_parent` is `false`.
|
111
|
-
# @!attribute [rw] inherit_from_parent
|
112
|
-
# @return [Boolean]
|
113
|
-
# Determines the inheritance behavior for this `Policy`.
|
114
|
-
#
|
115
|
-
# By default, a `ListPolicy` set at a resource supercedes any `Policy` set
|
116
|
-
# anywhere up the resource hierarchy. However, if `inherit_from_parent` is
|
117
|
-
# set to `true`, then the values from the effective `Policy` of the parent
|
118
|
-
# resource are inherited, meaning the values set in this `Policy` are
|
119
|
-
# added to the values inherited up the hierarchy.
|
120
|
-
#
|
121
|
-
# Setting `Policy` hierarchies that inherit both allowed values and denied
|
122
|
-
# values isn't recommended in most circumstances to keep the configuration
|
123
|
-
# simple and understandable. However, it is possible to set a `Policy` with
|
124
|
-
# `allowed_values` set that inherits a `Policy` with `denied_values` set.
|
125
|
-
# In this case, the values that are allowed must be in `allowed_values` and
|
126
|
-
# not present in `denied_values`.
|
127
|
-
#
|
128
|
-
# For example, suppose you have a `Constraint`
|
129
|
-
# `constraints/serviceuser.services`, which has a `constraint_type` of
|
130
|
-
# `list_constraint`, and with `constraint_default` set to `ALLOW`.
|
131
|
-
# Suppose that at the Organization level, a `Policy` is applied that
|
132
|
-
# restricts the allowed API activations to \\{`E1`, `E2`}. Then, if a
|
133
|
-
# `Policy` is applied to a project below the Organization that has
|
134
|
-
# `inherit_from_parent` set to `false` and field all_values set to DENY,
|
135
|
-
# then an attempt to activate any API will be denied.
|
136
|
-
#
|
137
|
-
# The following examples demonstrate different possible layerings for
|
138
|
-
# `projects/bar` parented by `organizations/foo`:
|
139
|
-
#
|
140
|
-
# Example 1 (no inherited values):
|
141
|
-
# `organizations/foo` has a `Policy` with values:
|
142
|
-
# \\{allowed_values: "E1" allowed_values:"E2"}
|
143
|
-
# `projects/bar` has `inherit_from_parent` `false` and values:
|
144
|
-
# \\{allowed_values: "E3" allowed_values: "E4"}
|
145
|
-
# The accepted values at `organizations/foo` are `E1`, `E2`.
|
146
|
-
# The accepted values at `projects/bar` are `E3`, and `E4`.
|
147
|
-
#
|
148
|
-
# Example 2 (inherited values):
|
149
|
-
# `organizations/foo` has a `Policy` with values:
|
150
|
-
# \\{allowed_values: "E1" allowed_values:"E2"}
|
151
|
-
# `projects/bar` has a `Policy` with values:
|
152
|
-
# \\{value: "E3" value: "E4" inherit_from_parent: true}
|
153
|
-
# The accepted values at `organizations/foo` are `E1`, `E2`.
|
154
|
-
# The accepted values at `projects/bar` are `E1`, `E2`, `E3`, and `E4`.
|
155
|
-
#
|
156
|
-
# Example 3 (inheriting both allowed and denied values):
|
157
|
-
# `organizations/foo` has a `Policy` with values:
|
158
|
-
# \\{allowed_values: "E1" allowed_values: "E2"}
|
159
|
-
# `projects/bar` has a `Policy` with:
|
160
|
-
# \\{denied_values: "E1"}
|
161
|
-
# The accepted values at `organizations/foo` are `E1`, `E2`.
|
162
|
-
# The value accepted at `projects/bar` is `E2`.
|
163
|
-
#
|
164
|
-
# Example 4 (RestoreDefault):
|
165
|
-
# `organizations/foo` has a `Policy` with values:
|
166
|
-
# \\{allowed_values: "E1" allowed_values:"E2"}
|
167
|
-
# `projects/bar` has a `Policy` with values:
|
168
|
-
# \\{RestoreDefault: \\{}}
|
169
|
-
# The accepted values at `organizations/foo` are `E1`, `E2`.
|
170
|
-
# The accepted values at `projects/bar` are either all or none depending on
|
171
|
-
# the value of `constraint_default` (if `ALLOW`, all; if
|
172
|
-
# `DENY`, none).
|
173
|
-
#
|
174
|
-
# Example 5 (no policy inherits parent policy):
|
175
|
-
# `organizations/foo` has no `Policy` set.
|
176
|
-
# `projects/bar` has no `Policy` set.
|
177
|
-
# The accepted values at both levels are either all or none depending on
|
178
|
-
# the value of `constraint_default` (if `ALLOW`, all; if
|
179
|
-
# `DENY`, none).
|
180
|
-
#
|
181
|
-
# Example 6 (ListConstraint allowing all):
|
182
|
-
# `organizations/foo` has a `Policy` with values:
|
183
|
-
# \\{allowed_values: "E1" allowed_values: "E2"}
|
184
|
-
# `projects/bar` has a `Policy` with:
|
185
|
-
# \\{all: ALLOW}
|
186
|
-
# The accepted values at `organizations/foo` are `E1`, E2`.
|
187
|
-
# Any value is accepted at `projects/bar`.
|
188
|
-
#
|
189
|
-
# Example 7 (ListConstraint allowing none):
|
190
|
-
# `organizations/foo` has a `Policy` with values:
|
191
|
-
# \\{allowed_values: "E1" allowed_values: "E2"}
|
192
|
-
# `projects/bar` has a `Policy` with:
|
193
|
-
# \\{all: DENY}
|
194
|
-
# The accepted values at `organizations/foo` are `E1`, E2`.
|
195
|
-
# No value is accepted at `projects/bar`.
|
196
|
-
#
|
197
|
-
# Example 10 (allowed and denied subtrees of Resource Manager hierarchy):
|
198
|
-
# Given the following resource hierarchy
|
199
|
-
# O1->\\{F1, F2}; F1->\\{P1}; F2->\\{P2, P3},
|
200
|
-
# `organizations/foo` has a `Policy` with values:
|
201
|
-
# \\{allowed_values: "under:organizations/O1"}
|
202
|
-
# `projects/bar` has a `Policy` with:
|
203
|
-
# \\{allowed_values: "under:projects/P3"}
|
204
|
-
# \\{denied_values: "under:folders/F2"}
|
205
|
-
# The accepted values at `organizations/foo` are `organizations/O1`,
|
206
|
-
# `folders/F1`, `folders/F2`, `projects/P1`, `projects/P2`,
|
207
|
-
# `projects/P3`.
|
208
|
-
# The accepted values at `projects/bar` are `organizations/O1`,
|
209
|
-
# `folders/F1`, `projects/P1`.
|
210
|
-
class ListPolicy
|
211
|
-
include Google::Protobuf::MessageExts
|
212
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
213
|
-
|
214
|
-
# This enum can be used to set `Policies` that apply to all possible
|
215
|
-
# configuration values rather than specific values in `allowed_values` or
|
216
|
-
# `denied_values`.
|
217
|
-
#
|
218
|
-
# Settting this to `ALLOW` will mean this `Policy` allows all values.
|
219
|
-
# Similarly, setting it to `DENY` will mean no values are allowed. If
|
220
|
-
# set to either `ALLOW` or `DENY, `allowed_values` and `denied_values`
|
221
|
-
# must be unset. Setting this to `ALL_VALUES_UNSPECIFIED` allows for
|
222
|
-
# setting `allowed_values` and `denied_values`.
|
223
|
-
module AllValues
|
224
|
-
# Indicates that allowed_values or denied_values must be set.
|
225
|
-
ALL_VALUES_UNSPECIFIED = 0
|
226
|
-
|
227
|
-
# A policy with this set allows all values.
|
228
|
-
ALLOW = 1
|
229
|
-
|
230
|
-
# A policy with this set denies all values.
|
231
|
-
DENY = 2
|
232
|
-
end
|
233
|
-
end
|
234
|
-
|
235
|
-
# Used in `policy_type` to specify how `boolean_policy` will behave at this
|
236
|
-
# resource.
|
237
|
-
# @!attribute [rw] enforced
|
238
|
-
# @return [Boolean]
|
239
|
-
# If `true`, then the `Policy` is enforced. If `false`, then any
|
240
|
-
# configuration is acceptable.
|
241
|
-
#
|
242
|
-
# Suppose you have a `Constraint`
|
243
|
-
# `constraints/compute.disableSerialPortAccess` with `constraint_default`
|
244
|
-
# set to `ALLOW`. A `Policy` for that `Constraint` exhibits the following
|
245
|
-
# behavior:
|
246
|
-
# - If the `Policy` at this resource has enforced set to `false`, serial
|
247
|
-
# port connection attempts will be allowed.
|
248
|
-
# - If the `Policy` at this resource has enforced set to `true`, serial
|
249
|
-
# port connection attempts will be refused.
|
250
|
-
# - If the `Policy` at this resource is `RestoreDefault`, serial port
|
251
|
-
# connection attempts will be allowed.
|
252
|
-
# - If no `Policy` is set at this resource or anywhere higher in the
|
253
|
-
# resource hierarchy, serial port connection attempts will be allowed.
|
254
|
-
# - If no `Policy` is set at this resource, but one exists higher in the
|
255
|
-
# resource hierarchy, the behavior is as if the`Policy` were set at
|
256
|
-
# this resource.
|
257
|
-
#
|
258
|
-
# The following examples demonstrate the different possible layerings:
|
259
|
-
#
|
260
|
-
# Example 1 (nearest `Constraint` wins):
|
261
|
-
# `organizations/foo` has a `Policy` with:
|
262
|
-
# \\{enforced: false}
|
263
|
-
# `projects/bar` has no `Policy` set.
|
264
|
-
# The constraint at `projects/bar` and `organizations/foo` will not be
|
265
|
-
# enforced.
|
266
|
-
#
|
267
|
-
# Example 2 (enforcement gets replaced):
|
268
|
-
# `organizations/foo` has a `Policy` with:
|
269
|
-
# \\{enforced: false}
|
270
|
-
# `projects/bar` has a `Policy` with:
|
271
|
-
# \\{enforced: true}
|
272
|
-
# The constraint at `organizations/foo` is not enforced.
|
273
|
-
# The constraint at `projects/bar` is enforced.
|
274
|
-
#
|
275
|
-
# Example 3 (RestoreDefault):
|
276
|
-
# `organizations/foo` has a `Policy` with:
|
277
|
-
# \\{enforced: true}
|
278
|
-
# `projects/bar` has a `Policy` with:
|
279
|
-
# \\{RestoreDefault: \\{}}
|
280
|
-
# The constraint at `organizations/foo` is enforced.
|
281
|
-
# The constraint at `projects/bar` is not enforced, because
|
282
|
-
# `constraint_default` for the `Constraint` is `ALLOW`.
|
283
|
-
class BooleanPolicy
|
284
|
-
include Google::Protobuf::MessageExts
|
285
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
286
|
-
end
|
287
|
-
|
288
|
-
# Ignores policies set above this resource and restores the
|
289
|
-
# `constraint_default` enforcement behavior of the specific `Constraint` at
|
290
|
-
# this resource.
|
291
|
-
#
|
292
|
-
# Suppose that `constraint_default` is set to `ALLOW` for the
|
293
|
-
# `Constraint` `constraints/serviceuser.services`. Suppose that organization
|
294
|
-
# foo.com sets a `Policy` at their Organization resource node that restricts
|
295
|
-
# the allowed service activations to deny all service activations. They
|
296
|
-
# could then set a `Policy` with the `policy_type` `restore_default` on
|
297
|
-
# several experimental projects, restoring the `constraint_default`
|
298
|
-
# enforcement of the `Constraint` for only those projects, allowing those
|
299
|
-
# projects to have all services activated.
|
300
|
-
class RestoreDefault
|
301
|
-
include Google::Protobuf::MessageExts
|
302
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
303
|
-
end
|
304
|
-
end
|
305
|
-
end
|
306
|
-
end
|
307
|
-
end
|
308
|
-
end
|
@@ -1,55 +0,0 @@
|
|
1
|
-
# Generated by the protocol buffer compiler. DO NOT EDIT!
|
2
|
-
# source: google/cloud/orgpolicy/v1/orgpolicy.proto
|
3
|
-
|
4
|
-
|
5
|
-
require 'google/protobuf'
|
6
|
-
|
7
|
-
require 'google/protobuf/empty_pb'
|
8
|
-
require 'google/protobuf/timestamp_pb'
|
9
|
-
require 'google/api/annotations_pb'
|
10
|
-
Google::Protobuf::DescriptorPool.generated_pool.build do
|
11
|
-
add_file("google/cloud/orgpolicy/v1/orgpolicy.proto", :syntax => :proto3) do
|
12
|
-
add_message "google.cloud.orgpolicy.v1.Policy" do
|
13
|
-
optional :version, :int32, 1
|
14
|
-
optional :constraint, :string, 2
|
15
|
-
optional :etag, :bytes, 3
|
16
|
-
optional :update_time, :message, 4, "google.protobuf.Timestamp"
|
17
|
-
oneof :policy_type do
|
18
|
-
optional :list_policy, :message, 5, "google.cloud.orgpolicy.v1.Policy.ListPolicy"
|
19
|
-
optional :boolean_policy, :message, 6, "google.cloud.orgpolicy.v1.Policy.BooleanPolicy"
|
20
|
-
optional :restore_default, :message, 7, "google.cloud.orgpolicy.v1.Policy.RestoreDefault"
|
21
|
-
end
|
22
|
-
end
|
23
|
-
add_message "google.cloud.orgpolicy.v1.Policy.ListPolicy" do
|
24
|
-
repeated :allowed_values, :string, 1
|
25
|
-
repeated :denied_values, :string, 2
|
26
|
-
optional :all_values, :enum, 3, "google.cloud.orgpolicy.v1.Policy.ListPolicy.AllValues"
|
27
|
-
optional :suggested_value, :string, 4
|
28
|
-
optional :inherit_from_parent, :bool, 5
|
29
|
-
end
|
30
|
-
add_enum "google.cloud.orgpolicy.v1.Policy.ListPolicy.AllValues" do
|
31
|
-
value :ALL_VALUES_UNSPECIFIED, 0
|
32
|
-
value :ALLOW, 1
|
33
|
-
value :DENY, 2
|
34
|
-
end
|
35
|
-
add_message "google.cloud.orgpolicy.v1.Policy.BooleanPolicy" do
|
36
|
-
optional :enforced, :bool, 1
|
37
|
-
end
|
38
|
-
add_message "google.cloud.orgpolicy.v1.Policy.RestoreDefault" do
|
39
|
-
end
|
40
|
-
end
|
41
|
-
end
|
42
|
-
|
43
|
-
module Google
|
44
|
-
module Cloud
|
45
|
-
module OrgPolicy
|
46
|
-
module V1
|
47
|
-
Policy = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.orgpolicy.v1.Policy").msgclass
|
48
|
-
Policy::ListPolicy = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.orgpolicy.v1.Policy.ListPolicy").msgclass
|
49
|
-
Policy::ListPolicy::AllValues = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.orgpolicy.v1.Policy.ListPolicy.AllValues").enummodule
|
50
|
-
Policy::BooleanPolicy = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.orgpolicy.v1.Policy.BooleanPolicy").msgclass
|
51
|
-
Policy::RestoreDefault = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.orgpolicy.v1.Policy.RestoreDefault").msgclass
|
52
|
-
end
|
53
|
-
end
|
54
|
-
end
|
55
|
-
end
|