google-cloud-asset 0.8.1 → 1.1.1
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/.yardopts +2 -1
- data/AUTHENTICATION.md +51 -59
- data/LICENSE.md +203 -0
- data/MIGRATING.md +334 -0
- data/README.md +36 -24
- data/lib/{google/cloud/asset/v1/doc/google/protobuf/empty.rb → google-cloud-asset.rb} +4 -14
- data/lib/google/cloud/asset.rb +87 -116
- data/lib/google/cloud/asset/version.rb +1 -1
- metadata +62 -81
- data/LICENSE +0 -201
- data/lib/google/cloud/asset/v1.rb +0 -146
- data/lib/google/cloud/asset/v1/asset_service_client.rb +0 -669
- data/lib/google/cloud/asset/v1/asset_service_client_config.json +0 -61
- data/lib/google/cloud/asset/v1/asset_service_pb.rb +0 -123
- data/lib/google/cloud/asset/v1/asset_service_services_pb.rb +0 -69
- data/lib/google/cloud/asset/v1/assets_pb.rb +0 -51
- data/lib/google/cloud/asset/v1/credentials.rb +0 -41
- data/lib/google/cloud/asset/v1/doc/google/cloud/asset/v1/asset_service.rb +0 -295
- data/lib/google/cloud/asset/v1/doc/google/cloud/asset/v1/assets.rb +0 -116
- data/lib/google/cloud/asset/v1/doc/google/iam/v1/policy.rb +0 -151
- data/lib/google/cloud/asset/v1/doc/google/longrunning/operations.rb +0 -51
- data/lib/google/cloud/asset/v1/doc/google/protobuf/any.rb +0 -131
- data/lib/google/cloud/asset/v1/doc/google/protobuf/field_mask.rb +0 -222
- data/lib/google/cloud/asset/v1/doc/google/protobuf/struct.rb +0 -74
- data/lib/google/cloud/asset/v1/doc/google/protobuf/timestamp.rb +0 -113
- data/lib/google/cloud/asset/v1/doc/google/rpc/status.rb +0 -39
- data/lib/google/cloud/asset/v1/doc/google/type/expr.rb +0 -45
- data/lib/google/cloud/asset/v1/helpers.rb +0 -39
- data/lib/google/cloud/asset/v1beta1.rb +0 -146
- data/lib/google/cloud/asset/v1beta1/asset_service_client.rb +0 -400
- data/lib/google/cloud/asset/v1beta1/asset_service_client_config.json +0 -36
- data/lib/google/cloud/asset/v1beta1/asset_service_pb.rb +0 -67
- data/lib/google/cloud/asset/v1beta1/asset_service_services_pb.rb +0 -59
- data/lib/google/cloud/asset/v1beta1/assets_pb.rb +0 -50
- data/lib/google/cloud/asset/v1beta1/credentials.rb +0 -41
- data/lib/google/cloud/asset/v1beta1/doc/google/cloud/asset/v1beta1/asset_service.rb +0 -140
- data/lib/google/cloud/asset/v1beta1/doc/google/cloud/asset/v1beta1/assets.rb +0 -108
- data/lib/google/cloud/asset/v1beta1/doc/google/iam/v1/policy.rb +0 -151
- data/lib/google/cloud/asset/v1beta1/doc/google/longrunning/operations.rb +0 -51
- data/lib/google/cloud/asset/v1beta1/doc/google/protobuf/any.rb +0 -131
- data/lib/google/cloud/asset/v1beta1/doc/google/protobuf/struct.rb +0 -74
- data/lib/google/cloud/asset/v1beta1/doc/google/protobuf/timestamp.rb +0 -113
- data/lib/google/cloud/asset/v1beta1/doc/google/rpc/status.rb +0 -39
- data/lib/google/cloud/asset/v1beta1/doc/google/type/expr.rb +0 -45
- data/lib/google/cloud/asset/v1beta1/helpers.rb +0 -31
- data/lib/google/cloud/orgpolicy/v1/doc/google/cloud/orgpolicy/v1/orgpolicy.rb +0 -308
- data/lib/google/cloud/orgpolicy/v1/orgpolicy_pb.rb +0 -55
@@ -1,39 +0,0 @@
|
|
1
|
-
# Copyright 2020 Google LLC
|
2
|
-
#
|
3
|
-
# Licensed under the Apache License, Version 2.0 (the "License");
|
4
|
-
# you may not use this file except in compliance with the License.
|
5
|
-
# You may obtain a copy of the License at
|
6
|
-
#
|
7
|
-
# https://www.apache.org/licenses/LICENSE-2.0
|
8
|
-
#
|
9
|
-
# Unless required by applicable law or agreed to in writing, software
|
10
|
-
# distributed under the License is distributed on an "AS IS" BASIS,
|
11
|
-
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
12
|
-
# See the License for the specific language governing permissions and
|
13
|
-
# limitations under the License.
|
14
|
-
|
15
|
-
|
16
|
-
module Google
|
17
|
-
module Rpc
|
18
|
-
# The `Status` type defines a logical error model that is suitable for
|
19
|
-
# different programming environments, including REST APIs and RPC APIs. It is
|
20
|
-
# used by [gRPC](https://github.com/grpc). Each `Status` message contains
|
21
|
-
# three pieces of data: error code, error message, and error details.
|
22
|
-
#
|
23
|
-
# You can find out more about this error model and how to work with it in the
|
24
|
-
# [API Design Guide](https://cloud.google.com/apis/design/errors).
|
25
|
-
# @!attribute [rw] code
|
26
|
-
# @return [Integer]
|
27
|
-
# The status code, which should be an enum value of {Google::Rpc::Code}.
|
28
|
-
# @!attribute [rw] message
|
29
|
-
# @return [String]
|
30
|
-
# A developer-facing error message, which should be in English. Any
|
31
|
-
# user-facing error message should be localized and sent in the
|
32
|
-
# {Google::Rpc::Status#details} field, or localized by the client.
|
33
|
-
# @!attribute [rw] details
|
34
|
-
# @return [Array<Google::Protobuf::Any>]
|
35
|
-
# A list of messages that carry the error details. There is a common set of
|
36
|
-
# message types for APIs to use.
|
37
|
-
class Status; end
|
38
|
-
end
|
39
|
-
end
|
@@ -1,45 +0,0 @@
|
|
1
|
-
# Copyright 2020 Google LLC
|
2
|
-
#
|
3
|
-
# Licensed under the Apache License, Version 2.0 (the "License");
|
4
|
-
# you may not use this file except in compliance with the License.
|
5
|
-
# You may obtain a copy of the License at
|
6
|
-
#
|
7
|
-
# https://www.apache.org/licenses/LICENSE-2.0
|
8
|
-
#
|
9
|
-
# Unless required by applicable law or agreed to in writing, software
|
10
|
-
# distributed under the License is distributed on an "AS IS" BASIS,
|
11
|
-
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
12
|
-
# See the License for the specific language governing permissions and
|
13
|
-
# limitations under the License.
|
14
|
-
|
15
|
-
|
16
|
-
module Google
|
17
|
-
module Type
|
18
|
-
# Represents an expression text. Example:
|
19
|
-
#
|
20
|
-
# title: "User account presence"
|
21
|
-
# description: "Determines whether the request has a user account"
|
22
|
-
# expression: "size(request.user) > 0"
|
23
|
-
# @!attribute [rw] expression
|
24
|
-
# @return [String]
|
25
|
-
# Textual representation of an expression in
|
26
|
-
# Common Expression Language syntax.
|
27
|
-
#
|
28
|
-
# The application context of the containing message determines which
|
29
|
-
# well-known feature set of CEL is supported.
|
30
|
-
# @!attribute [rw] title
|
31
|
-
# @return [String]
|
32
|
-
# An optional title for the expression, i.e. a short string describing
|
33
|
-
# its purpose. This can be used e.g. in UIs which allow to enter the
|
34
|
-
# expression.
|
35
|
-
# @!attribute [rw] description
|
36
|
-
# @return [String]
|
37
|
-
# An optional description of the expression. This is a longer text which
|
38
|
-
# describes the expression, e.g. when hovered over it in a UI.
|
39
|
-
# @!attribute [rw] location
|
40
|
-
# @return [String]
|
41
|
-
# An optional string indicating the location of the expression for error
|
42
|
-
# reporting, e.g. a file name and a position in the file.
|
43
|
-
class Expr; end
|
44
|
-
end
|
45
|
-
end
|
@@ -1,31 +0,0 @@
|
|
1
|
-
# Copyright 2018 Google LLC
|
2
|
-
#
|
3
|
-
# Licensed under the Apache License, Version 2.0 (the "License");
|
4
|
-
# you may not use this file except in compliance with the License.
|
5
|
-
# You may obtain a copy of the License at
|
6
|
-
#
|
7
|
-
# https://www.apache.org/licenses/LICENSE-2.0
|
8
|
-
#
|
9
|
-
# Unless required by applicable law or agreed to in writing, software
|
10
|
-
# distributed under the License is distributed on an "AS IS" BASIS,
|
11
|
-
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
12
|
-
# See the License for the specific language governing permissions and
|
13
|
-
# # limitations under the License.
|
14
|
-
|
15
|
-
module Google
|
16
|
-
module Cloud
|
17
|
-
module Asset
|
18
|
-
module V1beta1
|
19
|
-
class AssetServiceClient
|
20
|
-
|
21
|
-
# Alias for Google::Cloud::Asset::V1beta1::AssetServiceClient.project_path.
|
22
|
-
# @param project [String]
|
23
|
-
# @return [String]
|
24
|
-
def project_path project
|
25
|
-
self.class.project_path project
|
26
|
-
end
|
27
|
-
end
|
28
|
-
end
|
29
|
-
end
|
30
|
-
end
|
31
|
-
end
|
@@ -1,308 +0,0 @@
|
|
1
|
-
# frozen_string_literal: true
|
2
|
-
|
3
|
-
# Copyright 2020 Google LLC
|
4
|
-
#
|
5
|
-
# Licensed under the Apache License, Version 2.0 (the "License");
|
6
|
-
# you may not use this file except in compliance with the License.
|
7
|
-
# You may obtain a copy of the License at
|
8
|
-
#
|
9
|
-
# https://www.apache.org/licenses/LICENSE-2.0
|
10
|
-
#
|
11
|
-
# Unless required by applicable law or agreed to in writing, software
|
12
|
-
# distributed under the License is distributed on an "AS IS" BASIS,
|
13
|
-
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
14
|
-
# See the License for the specific language governing permissions and
|
15
|
-
# limitations under the License.
|
16
|
-
|
17
|
-
|
18
|
-
# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
|
19
|
-
|
20
|
-
|
21
|
-
module Google
|
22
|
-
module Cloud
|
23
|
-
module OrgPolicy
|
24
|
-
module V1
|
25
|
-
# Defines a Cloud Organization `Policy` which is used to specify `Constraints`
|
26
|
-
# for configurations of Cloud Platform resources.
|
27
|
-
# @!attribute [rw] version
|
28
|
-
# @return [Integer]
|
29
|
-
# Version of the `Policy`. Default version is 0;
|
30
|
-
# @!attribute [rw] constraint
|
31
|
-
# @return [String]
|
32
|
-
# The name of the `Constraint` the `Policy` is configuring, for example,
|
33
|
-
# `constraints/serviceuser.services`.
|
34
|
-
#
|
35
|
-
# Immutable after creation.
|
36
|
-
# @!attribute [rw] etag
|
37
|
-
# @return [String]
|
38
|
-
# An opaque tag indicating the current version of the `Policy`, used for
|
39
|
-
# concurrency control.
|
40
|
-
#
|
41
|
-
# When the `Policy` is returned from either a `GetPolicy` or a
|
42
|
-
# `ListOrgPolicy` request, this `etag` indicates the version of the current
|
43
|
-
# `Policy` to use when executing a read-modify-write loop.
|
44
|
-
#
|
45
|
-
# When the `Policy` is returned from a `GetEffectivePolicy` request, the
|
46
|
-
# `etag` will be unset.
|
47
|
-
#
|
48
|
-
# When the `Policy` is used in a `SetOrgPolicy` method, use the `etag` value
|
49
|
-
# that was returned from a `GetOrgPolicy` request as part of a
|
50
|
-
# read-modify-write loop for concurrency control. Not setting the `etag`in a
|
51
|
-
# `SetOrgPolicy` request will result in an unconditional write of the
|
52
|
-
# `Policy`.
|
53
|
-
# @!attribute [rw] update_time
|
54
|
-
# @return [Google::Protobuf::Timestamp]
|
55
|
-
# The time stamp the `Policy` was previously updated. This is set by the
|
56
|
-
# server, not specified by the caller, and represents the last time a call to
|
57
|
-
# `SetOrgPolicy` was made for that `Policy`. Any value set by the client will
|
58
|
-
# be ignored.
|
59
|
-
# @!attribute [rw] list_policy
|
60
|
-
# @return [Google::Cloud::OrgPolicy::V1::Policy::ListPolicy]
|
61
|
-
# List of values either allowed or disallowed.
|
62
|
-
# @!attribute [rw] boolean_policy
|
63
|
-
# @return [Google::Cloud::OrgPolicy::V1::Policy::BooleanPolicy]
|
64
|
-
# For boolean `Constraints`, whether to enforce the `Constraint` or not.
|
65
|
-
# @!attribute [rw] restore_default
|
66
|
-
# @return [Google::Cloud::OrgPolicy::V1::Policy::RestoreDefault]
|
67
|
-
# Restores the default behavior of the constraint; independent of
|
68
|
-
# `Constraint` type.
|
69
|
-
class Policy
|
70
|
-
include Google::Protobuf::MessageExts
|
71
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
72
|
-
|
73
|
-
# Used in `policy_type` to specify how `list_policy` behaves at this
|
74
|
-
# resource.
|
75
|
-
#
|
76
|
-
# `ListPolicy` can define specific values and subtrees of Cloud Resource
|
77
|
-
# Manager resource hierarchy (`Organizations`, `Folders`, `Projects`) that
|
78
|
-
# are allowed or denied by setting the `allowed_values` and `denied_values`
|
79
|
-
# fields. This is achieved by using the `under:` and optional `is:` prefixes.
|
80
|
-
# The `under:` prefix is used to denote resource subtree values.
|
81
|
-
# The `is:` prefix is used to denote specific values, and is required only
|
82
|
-
# if the value contains a ":". Values prefixed with "is:" are treated the
|
83
|
-
# same as values with no prefix.
|
84
|
-
# Ancestry subtrees must be in one of the following formats:
|
85
|
-
# - "projects/<project-id>", e.g. "projects/tokyo-rain-123"
|
86
|
-
# - "folders/<folder-id>", e.g. "folders/1234"
|
87
|
-
# - "organizations/<organization-id>", e.g. "organizations/1234"
|
88
|
-
# The `supports_under` field of the associated `Constraint` defines whether
|
89
|
-
# ancestry prefixes can be used. You can set `allowed_values` and
|
90
|
-
# `denied_values` in the same `Policy` if `all_values` is
|
91
|
-
# `ALL_VALUES_UNSPECIFIED`. `ALLOW` or `DENY` are used to allow or deny all
|
92
|
-
# values. If `all_values` is set to either `ALLOW` or `DENY`,
|
93
|
-
# `allowed_values` and `denied_values` must be unset.
|
94
|
-
# @!attribute [rw] allowed_values
|
95
|
-
# @return [Array<String>]
|
96
|
-
# List of values allowed at this resource. Can only be set if `all_values`
|
97
|
-
# is set to `ALL_VALUES_UNSPECIFIED`.
|
98
|
-
# @!attribute [rw] denied_values
|
99
|
-
# @return [Array<String>]
|
100
|
-
# List of values denied at this resource. Can only be set if `all_values`
|
101
|
-
# is set to `ALL_VALUES_UNSPECIFIED`.
|
102
|
-
# @!attribute [rw] all_values
|
103
|
-
# @return [Google::Cloud::OrgPolicy::V1::Policy::ListPolicy::AllValues]
|
104
|
-
# The policy all_values state.
|
105
|
-
# @!attribute [rw] suggested_value
|
106
|
-
# @return [String]
|
107
|
-
# Optional. The Google Cloud Console will try to default to a configuration
|
108
|
-
# that matches the value specified in this `Policy`. If `suggested_value`
|
109
|
-
# is not set, it will inherit the value specified higher in the hierarchy,
|
110
|
-
# unless `inherit_from_parent` is `false`.
|
111
|
-
# @!attribute [rw] inherit_from_parent
|
112
|
-
# @return [Boolean]
|
113
|
-
# Determines the inheritance behavior for this `Policy`.
|
114
|
-
#
|
115
|
-
# By default, a `ListPolicy` set at a resource supercedes any `Policy` set
|
116
|
-
# anywhere up the resource hierarchy. However, if `inherit_from_parent` is
|
117
|
-
# set to `true`, then the values from the effective `Policy` of the parent
|
118
|
-
# resource are inherited, meaning the values set in this `Policy` are
|
119
|
-
# added to the values inherited up the hierarchy.
|
120
|
-
#
|
121
|
-
# Setting `Policy` hierarchies that inherit both allowed values and denied
|
122
|
-
# values isn't recommended in most circumstances to keep the configuration
|
123
|
-
# simple and understandable. However, it is possible to set a `Policy` with
|
124
|
-
# `allowed_values` set that inherits a `Policy` with `denied_values` set.
|
125
|
-
# In this case, the values that are allowed must be in `allowed_values` and
|
126
|
-
# not present in `denied_values`.
|
127
|
-
#
|
128
|
-
# For example, suppose you have a `Constraint`
|
129
|
-
# `constraints/serviceuser.services`, which has a `constraint_type` of
|
130
|
-
# `list_constraint`, and with `constraint_default` set to `ALLOW`.
|
131
|
-
# Suppose that at the Organization level, a `Policy` is applied that
|
132
|
-
# restricts the allowed API activations to \\{`E1`, `E2`}. Then, if a
|
133
|
-
# `Policy` is applied to a project below the Organization that has
|
134
|
-
# `inherit_from_parent` set to `false` and field all_values set to DENY,
|
135
|
-
# then an attempt to activate any API will be denied.
|
136
|
-
#
|
137
|
-
# The following examples demonstrate different possible layerings for
|
138
|
-
# `projects/bar` parented by `organizations/foo`:
|
139
|
-
#
|
140
|
-
# Example 1 (no inherited values):
|
141
|
-
# `organizations/foo` has a `Policy` with values:
|
142
|
-
# \\{allowed_values: "E1" allowed_values:"E2"}
|
143
|
-
# `projects/bar` has `inherit_from_parent` `false` and values:
|
144
|
-
# \\{allowed_values: "E3" allowed_values: "E4"}
|
145
|
-
# The accepted values at `organizations/foo` are `E1`, `E2`.
|
146
|
-
# The accepted values at `projects/bar` are `E3`, and `E4`.
|
147
|
-
#
|
148
|
-
# Example 2 (inherited values):
|
149
|
-
# `organizations/foo` has a `Policy` with values:
|
150
|
-
# \\{allowed_values: "E1" allowed_values:"E2"}
|
151
|
-
# `projects/bar` has a `Policy` with values:
|
152
|
-
# \\{value: "E3" value: "E4" inherit_from_parent: true}
|
153
|
-
# The accepted values at `organizations/foo` are `E1`, `E2`.
|
154
|
-
# The accepted values at `projects/bar` are `E1`, `E2`, `E3`, and `E4`.
|
155
|
-
#
|
156
|
-
# Example 3 (inheriting both allowed and denied values):
|
157
|
-
# `organizations/foo` has a `Policy` with values:
|
158
|
-
# \\{allowed_values: "E1" allowed_values: "E2"}
|
159
|
-
# `projects/bar` has a `Policy` with:
|
160
|
-
# \\{denied_values: "E1"}
|
161
|
-
# The accepted values at `organizations/foo` are `E1`, `E2`.
|
162
|
-
# The value accepted at `projects/bar` is `E2`.
|
163
|
-
#
|
164
|
-
# Example 4 (RestoreDefault):
|
165
|
-
# `organizations/foo` has a `Policy` with values:
|
166
|
-
# \\{allowed_values: "E1" allowed_values:"E2"}
|
167
|
-
# `projects/bar` has a `Policy` with values:
|
168
|
-
# \\{RestoreDefault: \\{}}
|
169
|
-
# The accepted values at `organizations/foo` are `E1`, `E2`.
|
170
|
-
# The accepted values at `projects/bar` are either all or none depending on
|
171
|
-
# the value of `constraint_default` (if `ALLOW`, all; if
|
172
|
-
# `DENY`, none).
|
173
|
-
#
|
174
|
-
# Example 5 (no policy inherits parent policy):
|
175
|
-
# `organizations/foo` has no `Policy` set.
|
176
|
-
# `projects/bar` has no `Policy` set.
|
177
|
-
# The accepted values at both levels are either all or none depending on
|
178
|
-
# the value of `constraint_default` (if `ALLOW`, all; if
|
179
|
-
# `DENY`, none).
|
180
|
-
#
|
181
|
-
# Example 6 (ListConstraint allowing all):
|
182
|
-
# `organizations/foo` has a `Policy` with values:
|
183
|
-
# \\{allowed_values: "E1" allowed_values: "E2"}
|
184
|
-
# `projects/bar` has a `Policy` with:
|
185
|
-
# \\{all: ALLOW}
|
186
|
-
# The accepted values at `organizations/foo` are `E1`, E2`.
|
187
|
-
# Any value is accepted at `projects/bar`.
|
188
|
-
#
|
189
|
-
# Example 7 (ListConstraint allowing none):
|
190
|
-
# `organizations/foo` has a `Policy` with values:
|
191
|
-
# \\{allowed_values: "E1" allowed_values: "E2"}
|
192
|
-
# `projects/bar` has a `Policy` with:
|
193
|
-
# \\{all: DENY}
|
194
|
-
# The accepted values at `organizations/foo` are `E1`, E2`.
|
195
|
-
# No value is accepted at `projects/bar`.
|
196
|
-
#
|
197
|
-
# Example 10 (allowed and denied subtrees of Resource Manager hierarchy):
|
198
|
-
# Given the following resource hierarchy
|
199
|
-
# O1->\\{F1, F2}; F1->\\{P1}; F2->\\{P2, P3},
|
200
|
-
# `organizations/foo` has a `Policy` with values:
|
201
|
-
# \\{allowed_values: "under:organizations/O1"}
|
202
|
-
# `projects/bar` has a `Policy` with:
|
203
|
-
# \\{allowed_values: "under:projects/P3"}
|
204
|
-
# \\{denied_values: "under:folders/F2"}
|
205
|
-
# The accepted values at `organizations/foo` are `organizations/O1`,
|
206
|
-
# `folders/F1`, `folders/F2`, `projects/P1`, `projects/P2`,
|
207
|
-
# `projects/P3`.
|
208
|
-
# The accepted values at `projects/bar` are `organizations/O1`,
|
209
|
-
# `folders/F1`, `projects/P1`.
|
210
|
-
class ListPolicy
|
211
|
-
include Google::Protobuf::MessageExts
|
212
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
213
|
-
|
214
|
-
# This enum can be used to set `Policies` that apply to all possible
|
215
|
-
# configuration values rather than specific values in `allowed_values` or
|
216
|
-
# `denied_values`.
|
217
|
-
#
|
218
|
-
# Settting this to `ALLOW` will mean this `Policy` allows all values.
|
219
|
-
# Similarly, setting it to `DENY` will mean no values are allowed. If
|
220
|
-
# set to either `ALLOW` or `DENY, `allowed_values` and `denied_values`
|
221
|
-
# must be unset. Setting this to `ALL_VALUES_UNSPECIFIED` allows for
|
222
|
-
# setting `allowed_values` and `denied_values`.
|
223
|
-
module AllValues
|
224
|
-
# Indicates that allowed_values or denied_values must be set.
|
225
|
-
ALL_VALUES_UNSPECIFIED = 0
|
226
|
-
|
227
|
-
# A policy with this set allows all values.
|
228
|
-
ALLOW = 1
|
229
|
-
|
230
|
-
# A policy with this set denies all values.
|
231
|
-
DENY = 2
|
232
|
-
end
|
233
|
-
end
|
234
|
-
|
235
|
-
# Used in `policy_type` to specify how `boolean_policy` will behave at this
|
236
|
-
# resource.
|
237
|
-
# @!attribute [rw] enforced
|
238
|
-
# @return [Boolean]
|
239
|
-
# If `true`, then the `Policy` is enforced. If `false`, then any
|
240
|
-
# configuration is acceptable.
|
241
|
-
#
|
242
|
-
# Suppose you have a `Constraint`
|
243
|
-
# `constraints/compute.disableSerialPortAccess` with `constraint_default`
|
244
|
-
# set to `ALLOW`. A `Policy` for that `Constraint` exhibits the following
|
245
|
-
# behavior:
|
246
|
-
# - If the `Policy` at this resource has enforced set to `false`, serial
|
247
|
-
# port connection attempts will be allowed.
|
248
|
-
# - If the `Policy` at this resource has enforced set to `true`, serial
|
249
|
-
# port connection attempts will be refused.
|
250
|
-
# - If the `Policy` at this resource is `RestoreDefault`, serial port
|
251
|
-
# connection attempts will be allowed.
|
252
|
-
# - If no `Policy` is set at this resource or anywhere higher in the
|
253
|
-
# resource hierarchy, serial port connection attempts will be allowed.
|
254
|
-
# - If no `Policy` is set at this resource, but one exists higher in the
|
255
|
-
# resource hierarchy, the behavior is as if the`Policy` were set at
|
256
|
-
# this resource.
|
257
|
-
#
|
258
|
-
# The following examples demonstrate the different possible layerings:
|
259
|
-
#
|
260
|
-
# Example 1 (nearest `Constraint` wins):
|
261
|
-
# `organizations/foo` has a `Policy` with:
|
262
|
-
# \\{enforced: false}
|
263
|
-
# `projects/bar` has no `Policy` set.
|
264
|
-
# The constraint at `projects/bar` and `organizations/foo` will not be
|
265
|
-
# enforced.
|
266
|
-
#
|
267
|
-
# Example 2 (enforcement gets replaced):
|
268
|
-
# `organizations/foo` has a `Policy` with:
|
269
|
-
# \\{enforced: false}
|
270
|
-
# `projects/bar` has a `Policy` with:
|
271
|
-
# \\{enforced: true}
|
272
|
-
# The constraint at `organizations/foo` is not enforced.
|
273
|
-
# The constraint at `projects/bar` is enforced.
|
274
|
-
#
|
275
|
-
# Example 3 (RestoreDefault):
|
276
|
-
# `organizations/foo` has a `Policy` with:
|
277
|
-
# \\{enforced: true}
|
278
|
-
# `projects/bar` has a `Policy` with:
|
279
|
-
# \\{RestoreDefault: \\{}}
|
280
|
-
# The constraint at `organizations/foo` is enforced.
|
281
|
-
# The constraint at `projects/bar` is not enforced, because
|
282
|
-
# `constraint_default` for the `Constraint` is `ALLOW`.
|
283
|
-
class BooleanPolicy
|
284
|
-
include Google::Protobuf::MessageExts
|
285
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
286
|
-
end
|
287
|
-
|
288
|
-
# Ignores policies set above this resource and restores the
|
289
|
-
# `constraint_default` enforcement behavior of the specific `Constraint` at
|
290
|
-
# this resource.
|
291
|
-
#
|
292
|
-
# Suppose that `constraint_default` is set to `ALLOW` for the
|
293
|
-
# `Constraint` `constraints/serviceuser.services`. Suppose that organization
|
294
|
-
# foo.com sets a `Policy` at their Organization resource node that restricts
|
295
|
-
# the allowed service activations to deny all service activations. They
|
296
|
-
# could then set a `Policy` with the `policy_type` `restore_default` on
|
297
|
-
# several experimental projects, restoring the `constraint_default`
|
298
|
-
# enforcement of the `Constraint` for only those projects, allowing those
|
299
|
-
# projects to have all services activated.
|
300
|
-
class RestoreDefault
|
301
|
-
include Google::Protobuf::MessageExts
|
302
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
303
|
-
end
|
304
|
-
end
|
305
|
-
end
|
306
|
-
end
|
307
|
-
end
|
308
|
-
end
|
@@ -1,55 +0,0 @@
|
|
1
|
-
# Generated by the protocol buffer compiler. DO NOT EDIT!
|
2
|
-
# source: google/cloud/orgpolicy/v1/orgpolicy.proto
|
3
|
-
|
4
|
-
|
5
|
-
require 'google/protobuf'
|
6
|
-
|
7
|
-
require 'google/protobuf/empty_pb'
|
8
|
-
require 'google/protobuf/timestamp_pb'
|
9
|
-
require 'google/api/annotations_pb'
|
10
|
-
Google::Protobuf::DescriptorPool.generated_pool.build do
|
11
|
-
add_file("google/cloud/orgpolicy/v1/orgpolicy.proto", :syntax => :proto3) do
|
12
|
-
add_message "google.cloud.orgpolicy.v1.Policy" do
|
13
|
-
optional :version, :int32, 1
|
14
|
-
optional :constraint, :string, 2
|
15
|
-
optional :etag, :bytes, 3
|
16
|
-
optional :update_time, :message, 4, "google.protobuf.Timestamp"
|
17
|
-
oneof :policy_type do
|
18
|
-
optional :list_policy, :message, 5, "google.cloud.orgpolicy.v1.Policy.ListPolicy"
|
19
|
-
optional :boolean_policy, :message, 6, "google.cloud.orgpolicy.v1.Policy.BooleanPolicy"
|
20
|
-
optional :restore_default, :message, 7, "google.cloud.orgpolicy.v1.Policy.RestoreDefault"
|
21
|
-
end
|
22
|
-
end
|
23
|
-
add_message "google.cloud.orgpolicy.v1.Policy.ListPolicy" do
|
24
|
-
repeated :allowed_values, :string, 1
|
25
|
-
repeated :denied_values, :string, 2
|
26
|
-
optional :all_values, :enum, 3, "google.cloud.orgpolicy.v1.Policy.ListPolicy.AllValues"
|
27
|
-
optional :suggested_value, :string, 4
|
28
|
-
optional :inherit_from_parent, :bool, 5
|
29
|
-
end
|
30
|
-
add_enum "google.cloud.orgpolicy.v1.Policy.ListPolicy.AllValues" do
|
31
|
-
value :ALL_VALUES_UNSPECIFIED, 0
|
32
|
-
value :ALLOW, 1
|
33
|
-
value :DENY, 2
|
34
|
-
end
|
35
|
-
add_message "google.cloud.orgpolicy.v1.Policy.BooleanPolicy" do
|
36
|
-
optional :enforced, :bool, 1
|
37
|
-
end
|
38
|
-
add_message "google.cloud.orgpolicy.v1.Policy.RestoreDefault" do
|
39
|
-
end
|
40
|
-
end
|
41
|
-
end
|
42
|
-
|
43
|
-
module Google
|
44
|
-
module Cloud
|
45
|
-
module OrgPolicy
|
46
|
-
module V1
|
47
|
-
Policy = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.orgpolicy.v1.Policy").msgclass
|
48
|
-
Policy::ListPolicy = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.orgpolicy.v1.Policy.ListPolicy").msgclass
|
49
|
-
Policy::ListPolicy::AllValues = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.orgpolicy.v1.Policy.ListPolicy.AllValues").enummodule
|
50
|
-
Policy::BooleanPolicy = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.orgpolicy.v1.Policy.BooleanPolicy").msgclass
|
51
|
-
Policy::RestoreDefault = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.orgpolicy.v1.Policy.RestoreDefault").msgclass
|
52
|
-
end
|
53
|
-
end
|
54
|
-
end
|
55
|
-
end
|