google-cloud-assured_workloads-v1beta1 0.10.0 → 0.13.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/AUTHENTICATION.md +1 -1
- data/lib/google/cloud/assured_workloads/v1beta1/assured_workloads_service/client.rb +218 -28
- data/lib/google/cloud/assured_workloads/v1beta1/version.rb +1 -1
- data/lib/google/cloud/assuredworkloads/v1beta1/assuredworkloads_pb.rb +28 -4
- data/lib/google/cloud/assuredworkloads/v1beta1/assuredworkloads_service_pb.rb +24 -0
- data/lib/google/cloud/assuredworkloads/v1beta1/{assuredworkloads_services_pb.rb → assuredworkloads_service_services_pb.rb} +16 -3
- data/proto_docs/google/cloud/assuredworkloads/v1beta1/assuredworkloads.rb +123 -41
- data/proto_docs/google/protobuf/empty.rb +0 -2
- metadata +4 -3
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: f1a7f16f11752933c4bf50751f4515f9a98f78870822e14d8e9ceacec71a8b8b
|
4
|
+
data.tar.gz: 0dc49f9f11791399c08584be899504afec018b6d294039ce9260a47af8222fd8
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 3c500164e781fdc222a05b4f4d0fb01862cb134d206dcde2e5b9f484525d89eef0ae4ff72d16d4ffa2f8e1ea133d7e8e252e2ffcf40bfc2dd44e814db1ca9728
|
7
|
+
data.tar.gz: 40f7f58f897631e35facdb45e746a341a99a17fc743e5ea8f78f149d851e053d1140d39f9b6a2a3d137698aef967c7659537255ba3c3940979a0aa5fd9b1c7db
|
data/AUTHENTICATION.md
CHANGED
@@ -114,7 +114,7 @@ credentials are discovered.
|
|
114
114
|
To configure your system for this, simply:
|
115
115
|
|
116
116
|
1. [Download and install the Cloud SDK](https://cloud.google.com/sdk)
|
117
|
-
2. Authenticate using OAuth 2.0 `$ gcloud auth login`
|
117
|
+
2. Authenticate using OAuth 2.0 `$ gcloud auth application-default login`
|
118
118
|
3. Write code as if already authenticated.
|
119
119
|
|
120
120
|
**NOTE:** This is _not_ recommended for running in production. The Cloud SDK
|
@@ -17,7 +17,7 @@
|
|
17
17
|
# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
|
18
18
|
|
19
19
|
require "google/cloud/errors"
|
20
|
-
require "google/cloud/assuredworkloads/v1beta1/
|
20
|
+
require "google/cloud/assuredworkloads/v1beta1/assuredworkloads_service_pb"
|
21
21
|
|
22
22
|
module Google
|
23
23
|
module Cloud
|
@@ -78,6 +78,11 @@ module Google
|
|
78
78
|
initial_delay: 0.2, max_delay: 30.0, multiplier: 1.3, retry_codes: [14]
|
79
79
|
}
|
80
80
|
|
81
|
+
default_config.rpcs.analyze_workload_move.timeout = 60.0
|
82
|
+
default_config.rpcs.analyze_workload_move.retry_policy = {
|
83
|
+
initial_delay: 0.2, max_delay: 30.0, multiplier: 1.3, retry_codes: [14]
|
84
|
+
}
|
85
|
+
|
81
86
|
default_config.rpcs.list_workloads.timeout = 60.0
|
82
87
|
default_config.rpcs.list_workloads.retry_policy = {
|
83
88
|
initial_delay: 0.2, max_delay: 30.0, multiplier: 1.3, retry_codes: [14]
|
@@ -130,7 +135,7 @@ module Google
|
|
130
135
|
# the gRPC module only when it's required.
|
131
136
|
# See https://github.com/googleapis/toolkit/issues/446
|
132
137
|
require "gapic/grpc"
|
133
|
-
require "google/cloud/assuredworkloads/v1beta1/
|
138
|
+
require "google/cloud/assuredworkloads/v1beta1/assuredworkloads_service_services_pb"
|
134
139
|
|
135
140
|
# Create the configuration object
|
136
141
|
@config = Configuration.new Client.configure
|
@@ -200,8 +205,8 @@ module Google
|
|
200
205
|
# @param workload [::Google::Cloud::AssuredWorkloads::V1beta1::Workload, ::Hash]
|
201
206
|
# Required. Assured Workload to create
|
202
207
|
# @param external_id [::String]
|
203
|
-
# Optional. A identifier associated with the workload and underlying projects
|
204
|
-
#
|
208
|
+
# Optional. A identifier associated with the workload and underlying projects which
|
209
|
+
# allows for the break down of billing costs for a workload. The value
|
205
210
|
# provided for the identifier will add a label to the workload and contained
|
206
211
|
# projects with the identifier as the value.
|
207
212
|
#
|
@@ -300,7 +305,7 @@ module Google
|
|
300
305
|
#
|
301
306
|
# @param workload [::Google::Cloud::AssuredWorkloads::V1beta1::Workload, ::Hash]
|
302
307
|
# Required. The workload to update.
|
303
|
-
# The workload
|
308
|
+
# The workload's `name` field is used to identify the workload to be updated.
|
304
309
|
# Format:
|
305
310
|
# organizations/\\{org_id}/locations/\\{location_id}/workloads/\\{workload_id}
|
306
311
|
# @param update_mask [::Google::Protobuf::FieldMask, ::Hash]
|
@@ -346,23 +351,111 @@ module Google
|
|
346
351
|
gapic_version: ::Google::Cloud::AssuredWorkloads::V1beta1::VERSION
|
347
352
|
metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
|
348
353
|
|
354
|
+
options.apply_defaults timeout: @config.rpcs.update_workload.timeout,
|
355
|
+
metadata: metadata,
|
356
|
+
retry_policy: @config.rpcs.update_workload.retry_policy
|
357
|
+
|
358
|
+
options.apply_defaults timeout: @config.timeout,
|
359
|
+
metadata: @config.metadata,
|
360
|
+
retry_policy: @config.retry_policy
|
361
|
+
|
362
|
+
@assured_workloads_service_stub.call_rpc :update_workload, request, options: options do |response, operation|
|
363
|
+
yield response, operation if block_given?
|
364
|
+
return response
|
365
|
+
end
|
366
|
+
rescue ::GRPC::BadStatus => e
|
367
|
+
raise ::Google::Cloud::Error.from_error(e)
|
368
|
+
end
|
369
|
+
|
370
|
+
##
|
371
|
+
# Restrict the list of resources allowed in the Workload environment.
|
372
|
+
# The current list of allowed products can be found at
|
373
|
+
# https://cloud.google.com/assured-workloads/docs/supported-products
|
374
|
+
# In addition to assuredworkloads.workload.update permission, the user should
|
375
|
+
# also have orgpolicy.policy.set permission on the folder resource
|
376
|
+
# to use this functionality.
|
377
|
+
#
|
378
|
+
# @overload restrict_allowed_resources(request, options = nil)
|
379
|
+
# Pass arguments to `restrict_allowed_resources` via a request object, either of type
|
380
|
+
# {::Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedResourcesRequest} or an equivalent Hash.
|
381
|
+
#
|
382
|
+
# @param request [::Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedResourcesRequest, ::Hash]
|
383
|
+
# A request object representing the call parameters. Required. To specify no
|
384
|
+
# parameters, or to keep all the default parameter values, pass an empty Hash.
|
385
|
+
# @param options [::Gapic::CallOptions, ::Hash]
|
386
|
+
# Overrides the default settings for this call, e.g, timeout, retries, etc. Optional.
|
387
|
+
#
|
388
|
+
# @overload restrict_allowed_resources(name: nil, restriction_type: nil)
|
389
|
+
# Pass arguments to `restrict_allowed_resources` via keyword arguments. Note that at
|
390
|
+
# least one keyword argument is required. To specify no parameters, or to keep all
|
391
|
+
# the default parameter values, pass an empty Hash as a request object (see above).
|
392
|
+
#
|
393
|
+
# @param name [::String]
|
394
|
+
# Required. The resource name of the Workload. This is the workloads's
|
395
|
+
# relative path in the API, formatted as
|
396
|
+
# "organizations/\\{organization_id}/locations/\\{location_id}/workloads/\\{workload_id}".
|
397
|
+
# For example,
|
398
|
+
# "organizations/123/locations/us-east1/workloads/assured-workload-1".
|
399
|
+
# @param restriction_type [::Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedResourcesRequest::RestrictionType]
|
400
|
+
# Required. The type of restriction for using gcp products in the Workload environment.
|
401
|
+
#
|
402
|
+
# @yield [response, operation] Access the result along with the RPC operation
|
403
|
+
# @yieldparam response [::Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedResourcesResponse]
|
404
|
+
# @yieldparam operation [::GRPC::ActiveCall::Operation]
|
405
|
+
#
|
406
|
+
# @return [::Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedResourcesResponse]
|
407
|
+
#
|
408
|
+
# @raise [::Google::Cloud::Error] if the RPC is aborted.
|
409
|
+
#
|
410
|
+
# @example Basic example
|
411
|
+
# require "google/cloud/assured_workloads/v1beta1"
|
412
|
+
#
|
413
|
+
# # Create a client object. The client can be reused for multiple calls.
|
414
|
+
# client = Google::Cloud::AssuredWorkloads::V1beta1::AssuredWorkloadsService::Client.new
|
415
|
+
#
|
416
|
+
# # Create a request. To set request fields, pass in keyword arguments.
|
417
|
+
# request = Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedResourcesRequest.new
|
418
|
+
#
|
419
|
+
# # Call the restrict_allowed_resources method.
|
420
|
+
# result = client.restrict_allowed_resources request
|
421
|
+
#
|
422
|
+
# # The returned object is of type Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedResourcesResponse.
|
423
|
+
# p result
|
424
|
+
#
|
425
|
+
def restrict_allowed_resources request, options = nil
|
426
|
+
raise ::ArgumentError, "request must be provided" if request.nil?
|
427
|
+
|
428
|
+
request = ::Gapic::Protobuf.coerce request, to: ::Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedResourcesRequest
|
429
|
+
|
430
|
+
# Converts hash and nil to an options object
|
431
|
+
options = ::Gapic::CallOptions.new(**options.to_h) if options.respond_to? :to_h
|
432
|
+
|
433
|
+
# Customize the options with defaults
|
434
|
+
metadata = @config.rpcs.restrict_allowed_resources.metadata.to_h
|
435
|
+
|
436
|
+
# Set x-goog-api-client and x-goog-user-project headers
|
437
|
+
metadata[:"x-goog-api-client"] ||= ::Gapic::Headers.x_goog_api_client \
|
438
|
+
lib_name: @config.lib_name, lib_version: @config.lib_version,
|
439
|
+
gapic_version: ::Google::Cloud::AssuredWorkloads::V1beta1::VERSION
|
440
|
+
metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
|
441
|
+
|
349
442
|
header_params = {}
|
350
|
-
if request.
|
351
|
-
header_params["
|
443
|
+
if request.name
|
444
|
+
header_params["name"] = request.name
|
352
445
|
end
|
353
446
|
|
354
447
|
request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
|
355
448
|
metadata[:"x-goog-request-params"] ||= request_params_header
|
356
449
|
|
357
|
-
options.apply_defaults timeout: @config.rpcs.
|
450
|
+
options.apply_defaults timeout: @config.rpcs.restrict_allowed_resources.timeout,
|
358
451
|
metadata: metadata,
|
359
|
-
retry_policy: @config.rpcs.
|
452
|
+
retry_policy: @config.rpcs.restrict_allowed_resources.retry_policy
|
360
453
|
|
361
454
|
options.apply_defaults timeout: @config.timeout,
|
362
455
|
metadata: @config.metadata,
|
363
456
|
retry_policy: @config.retry_policy
|
364
457
|
|
365
|
-
@assured_workloads_service_stub.call_rpc :
|
458
|
+
@assured_workloads_service_stub.call_rpc :restrict_allowed_resources, request, options: options do |response, operation|
|
366
459
|
yield response, operation if block_given?
|
367
460
|
return response
|
368
461
|
end
|
@@ -374,6 +467,9 @@ module Google
|
|
374
467
|
# Deletes the workload. Make sure that workload's direct children are already
|
375
468
|
# in a deleted state, otherwise the request will fail with a
|
376
469
|
# FAILED_PRECONDITION error.
|
470
|
+
# In addition to assuredworkloads.workload.delete permission, the user should
|
471
|
+
# also have orgpolicy.policy.set permission on the deleted folder to remove
|
472
|
+
# Assured Workloads OrgPolicies.
|
377
473
|
#
|
378
474
|
# @overload delete_workload(request, options = nil)
|
379
475
|
# Pass arguments to `delete_workload` via a request object, either of type
|
@@ -481,8 +577,8 @@ module Google
|
|
481
577
|
# the default parameter values, pass an empty Hash as a request object (see above).
|
482
578
|
#
|
483
579
|
# @param name [::String]
|
484
|
-
# Required. The resource name of the Workload to fetch. This is the
|
485
|
-
#
|
580
|
+
# Required. The resource name of the Workload to fetch. This is the workloads's
|
581
|
+
# relative path in the API, formatted as
|
486
582
|
# "organizations/\\{organization_id}/locations/\\{location_id}/workloads/\\{workload_id}".
|
487
583
|
# For example,
|
488
584
|
# "organizations/123/locations/us-east1/workloads/assured-workload-1".
|
@@ -527,14 +623,6 @@ module Google
|
|
527
623
|
gapic_version: ::Google::Cloud::AssuredWorkloads::V1beta1::VERSION
|
528
624
|
metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
|
529
625
|
|
530
|
-
header_params = {}
|
531
|
-
if request.name
|
532
|
-
header_params["name"] = request.name
|
533
|
-
end
|
534
|
-
|
535
|
-
request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
|
536
|
-
metadata[:"x-goog-request-params"] ||= request_params_header
|
537
|
-
|
538
626
|
options.apply_defaults timeout: @config.rpcs.get_workload.timeout,
|
539
627
|
metadata: metadata,
|
540
628
|
retry_policy: @config.rpcs.get_workload.retry_policy
|
@@ -551,6 +639,102 @@ module Google
|
|
551
639
|
raise ::Google::Cloud::Error.from_error(e)
|
552
640
|
end
|
553
641
|
|
642
|
+
##
|
643
|
+
# Analyze if the source Assured Workloads can be moved to the target Assured
|
644
|
+
# Workload
|
645
|
+
#
|
646
|
+
# @overload analyze_workload_move(request, options = nil)
|
647
|
+
# Pass arguments to `analyze_workload_move` via a request object, either of type
|
648
|
+
# {::Google::Cloud::AssuredWorkloads::V1beta1::AnalyzeWorkloadMoveRequest} or an equivalent Hash.
|
649
|
+
#
|
650
|
+
# @param request [::Google::Cloud::AssuredWorkloads::V1beta1::AnalyzeWorkloadMoveRequest, ::Hash]
|
651
|
+
# A request object representing the call parameters. Required. To specify no
|
652
|
+
# parameters, or to keep all the default parameter values, pass an empty Hash.
|
653
|
+
# @param options [::Gapic::CallOptions, ::Hash]
|
654
|
+
# Overrides the default settings for this call, e.g, timeout, retries, etc. Optional.
|
655
|
+
#
|
656
|
+
# @overload analyze_workload_move(source: nil, project: nil, target: nil)
|
657
|
+
# Pass arguments to `analyze_workload_move` via keyword arguments. Note that at
|
658
|
+
# least one keyword argument is required. To specify no parameters, or to keep all
|
659
|
+
# the default parameter values, pass an empty Hash as a request object (see above).
|
660
|
+
#
|
661
|
+
# @param source [::String]
|
662
|
+
# The source type is a project-based workload. Specify the workloads's
|
663
|
+
# relative resource name, formatted as:
|
664
|
+
# "organizations/\\{ORGANIZATION_ID}/locations/\\{LOCATION_ID}/workloads/\\{WORKLOAD_ID}"
|
665
|
+
# For example:
|
666
|
+
# "organizations/123/locations/us-east1/workloads/assured-workload-1"
|
667
|
+
# @param project [::String]
|
668
|
+
# The source type is a project. Specify the project's relative resource
|
669
|
+
# name, formatted as either a project number or a project ID:
|
670
|
+
# "projects/\\{PROJECT_NUMBER}" or "projects/\\{PROJECT_ID}"
|
671
|
+
# For example:
|
672
|
+
# "projects/951040570662" when specifying a project number, or
|
673
|
+
# "projects/my-project-123" when specifying a project ID.
|
674
|
+
# @param target [::String]
|
675
|
+
# Required. The resource ID of the folder-based destination workload. This workload is
|
676
|
+
# where the source project will hypothetically be moved to. Specify the
|
677
|
+
# workload's relative resource name, formatted as:
|
678
|
+
# "organizations/\\{ORGANIZATION_ID}/locations/\\{LOCATION_ID}/workloads/\\{WORKLOAD_ID}"
|
679
|
+
# For example:
|
680
|
+
# "organizations/123/locations/us-east1/workloads/assured-workload-2"
|
681
|
+
#
|
682
|
+
# @yield [response, operation] Access the result along with the RPC operation
|
683
|
+
# @yieldparam response [::Google::Cloud::AssuredWorkloads::V1beta1::AnalyzeWorkloadMoveResponse]
|
684
|
+
# @yieldparam operation [::GRPC::ActiveCall::Operation]
|
685
|
+
#
|
686
|
+
# @return [::Google::Cloud::AssuredWorkloads::V1beta1::AnalyzeWorkloadMoveResponse]
|
687
|
+
#
|
688
|
+
# @raise [::Google::Cloud::Error] if the RPC is aborted.
|
689
|
+
#
|
690
|
+
# @example Basic example
|
691
|
+
# require "google/cloud/assured_workloads/v1beta1"
|
692
|
+
#
|
693
|
+
# # Create a client object. The client can be reused for multiple calls.
|
694
|
+
# client = Google::Cloud::AssuredWorkloads::V1beta1::AssuredWorkloadsService::Client.new
|
695
|
+
#
|
696
|
+
# # Create a request. To set request fields, pass in keyword arguments.
|
697
|
+
# request = Google::Cloud::AssuredWorkloads::V1beta1::AnalyzeWorkloadMoveRequest.new
|
698
|
+
#
|
699
|
+
# # Call the analyze_workload_move method.
|
700
|
+
# result = client.analyze_workload_move request
|
701
|
+
#
|
702
|
+
# # The returned object is of type Google::Cloud::AssuredWorkloads::V1beta1::AnalyzeWorkloadMoveResponse.
|
703
|
+
# p result
|
704
|
+
#
|
705
|
+
def analyze_workload_move request, options = nil
|
706
|
+
raise ::ArgumentError, "request must be provided" if request.nil?
|
707
|
+
|
708
|
+
request = ::Gapic::Protobuf.coerce request, to: ::Google::Cloud::AssuredWorkloads::V1beta1::AnalyzeWorkloadMoveRequest
|
709
|
+
|
710
|
+
# Converts hash and nil to an options object
|
711
|
+
options = ::Gapic::CallOptions.new(**options.to_h) if options.respond_to? :to_h
|
712
|
+
|
713
|
+
# Customize the options with defaults
|
714
|
+
metadata = @config.rpcs.analyze_workload_move.metadata.to_h
|
715
|
+
|
716
|
+
# Set x-goog-api-client and x-goog-user-project headers
|
717
|
+
metadata[:"x-goog-api-client"] ||= ::Gapic::Headers.x_goog_api_client \
|
718
|
+
lib_name: @config.lib_name, lib_version: @config.lib_version,
|
719
|
+
gapic_version: ::Google::Cloud::AssuredWorkloads::V1beta1::VERSION
|
720
|
+
metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
|
721
|
+
|
722
|
+
options.apply_defaults timeout: @config.rpcs.analyze_workload_move.timeout,
|
723
|
+
metadata: metadata,
|
724
|
+
retry_policy: @config.rpcs.analyze_workload_move.retry_policy
|
725
|
+
|
726
|
+
options.apply_defaults timeout: @config.timeout,
|
727
|
+
metadata: @config.metadata,
|
728
|
+
retry_policy: @config.retry_policy
|
729
|
+
|
730
|
+
@assured_workloads_service_stub.call_rpc :analyze_workload_move, request, options: options do |response, operation|
|
731
|
+
yield response, operation if block_given?
|
732
|
+
return response
|
733
|
+
end
|
734
|
+
rescue ::GRPC::BadStatus => e
|
735
|
+
raise ::Google::Cloud::Error.from_error(e)
|
736
|
+
end
|
737
|
+
|
554
738
|
##
|
555
739
|
# Lists Assured Workloads under a CRM Node.
|
556
740
|
#
|
@@ -628,14 +812,6 @@ module Google
|
|
628
812
|
gapic_version: ::Google::Cloud::AssuredWorkloads::V1beta1::VERSION
|
629
813
|
metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
|
630
814
|
|
631
|
-
header_params = {}
|
632
|
-
if request.parent
|
633
|
-
header_params["parent"] = request.parent
|
634
|
-
end
|
635
|
-
|
636
|
-
request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
|
637
|
-
metadata[:"x-goog-request-params"] ||= request_params_header
|
638
|
-
|
639
815
|
options.apply_defaults timeout: @config.rpcs.list_workloads.timeout,
|
640
816
|
metadata: metadata,
|
641
817
|
retry_policy: @config.rpcs.list_workloads.retry_policy
|
@@ -799,6 +975,11 @@ module Google
|
|
799
975
|
#
|
800
976
|
attr_reader :update_workload
|
801
977
|
##
|
978
|
+
# RPC-specific configuration for `restrict_allowed_resources`
|
979
|
+
# @return [::Gapic::Config::Method]
|
980
|
+
#
|
981
|
+
attr_reader :restrict_allowed_resources
|
982
|
+
##
|
802
983
|
# RPC-specific configuration for `delete_workload`
|
803
984
|
# @return [::Gapic::Config::Method]
|
804
985
|
#
|
@@ -809,6 +990,11 @@ module Google
|
|
809
990
|
#
|
810
991
|
attr_reader :get_workload
|
811
992
|
##
|
993
|
+
# RPC-specific configuration for `analyze_workload_move`
|
994
|
+
# @return [::Gapic::Config::Method]
|
995
|
+
#
|
996
|
+
attr_reader :analyze_workload_move
|
997
|
+
##
|
812
998
|
# RPC-specific configuration for `list_workloads`
|
813
999
|
# @return [::Gapic::Config::Method]
|
814
1000
|
#
|
@@ -820,10 +1006,14 @@ module Google
|
|
820
1006
|
@create_workload = ::Gapic::Config::Method.new create_workload_config
|
821
1007
|
update_workload_config = parent_rpcs.update_workload if parent_rpcs.respond_to? :update_workload
|
822
1008
|
@update_workload = ::Gapic::Config::Method.new update_workload_config
|
1009
|
+
restrict_allowed_resources_config = parent_rpcs.restrict_allowed_resources if parent_rpcs.respond_to? :restrict_allowed_resources
|
1010
|
+
@restrict_allowed_resources = ::Gapic::Config::Method.new restrict_allowed_resources_config
|
823
1011
|
delete_workload_config = parent_rpcs.delete_workload if parent_rpcs.respond_to? :delete_workload
|
824
1012
|
@delete_workload = ::Gapic::Config::Method.new delete_workload_config
|
825
1013
|
get_workload_config = parent_rpcs.get_workload if parent_rpcs.respond_to? :get_workload
|
826
1014
|
@get_workload = ::Gapic::Config::Method.new get_workload_config
|
1015
|
+
analyze_workload_move_config = parent_rpcs.analyze_workload_move if parent_rpcs.respond_to? :analyze_workload_move
|
1016
|
+
@analyze_workload_move = ::Gapic::Config::Method.new analyze_workload_move_config
|
827
1017
|
list_workloads_config = parent_rpcs.list_workloads if parent_rpcs.respond_to? :list_workloads
|
828
1018
|
@list_workloads = ::Gapic::Config::Method.new list_workloads_config
|
829
1019
|
|
@@ -3,13 +3,9 @@
|
|
3
3
|
|
4
4
|
require 'google/protobuf'
|
5
5
|
|
6
|
-
require 'google/api/annotations_pb'
|
7
|
-
require 'google/api/client_pb'
|
8
6
|
require 'google/api/field_behavior_pb'
|
9
7
|
require 'google/api/resource_pb'
|
10
|
-
require 'google/longrunning/operations_pb'
|
11
8
|
require 'google/protobuf/duration_pb'
|
12
|
-
require 'google/protobuf/empty_pb'
|
13
9
|
require 'google/protobuf/field_mask_pb'
|
14
10
|
require 'google/protobuf/timestamp_pb'
|
15
11
|
|
@@ -24,6 +20,17 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
|
|
24
20
|
optional :workload, :message, 1, "google.cloud.assuredworkloads.v1beta1.Workload"
|
25
21
|
optional :update_mask, :message, 2, "google.protobuf.FieldMask"
|
26
22
|
end
|
23
|
+
add_message "google.cloud.assuredworkloads.v1beta1.RestrictAllowedResourcesRequest" do
|
24
|
+
optional :name, :string, 1
|
25
|
+
optional :restriction_type, :enum, 2, "google.cloud.assuredworkloads.v1beta1.RestrictAllowedResourcesRequest.RestrictionType"
|
26
|
+
end
|
27
|
+
add_enum "google.cloud.assuredworkloads.v1beta1.RestrictAllowedResourcesRequest.RestrictionType" do
|
28
|
+
value :RESTRICTION_TYPE_UNSPECIFIED, 0
|
29
|
+
value :ALLOW_ALL_GCP_RESOURCES, 1
|
30
|
+
value :ALLOW_COMPLIANT_RESOURCES, 2
|
31
|
+
end
|
32
|
+
add_message "google.cloud.assuredworkloads.v1beta1.RestrictAllowedResourcesResponse" do
|
33
|
+
end
|
27
34
|
add_message "google.cloud.assuredworkloads.v1beta1.DeleteWorkloadRequest" do
|
28
35
|
optional :name, :string, 1
|
29
36
|
optional :etag, :string, 2
|
@@ -31,6 +38,16 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
|
|
31
38
|
add_message "google.cloud.assuredworkloads.v1beta1.GetWorkloadRequest" do
|
32
39
|
optional :name, :string, 1
|
33
40
|
end
|
41
|
+
add_message "google.cloud.assuredworkloads.v1beta1.AnalyzeWorkloadMoveRequest" do
|
42
|
+
optional :target, :string, 2
|
43
|
+
oneof :projectOrWorkloadResource do
|
44
|
+
optional :source, :string, 1
|
45
|
+
optional :project, :string, 3
|
46
|
+
end
|
47
|
+
end
|
48
|
+
add_message "google.cloud.assuredworkloads.v1beta1.AnalyzeWorkloadMoveResponse" do
|
49
|
+
repeated :blockers, :string, 1
|
50
|
+
end
|
34
51
|
add_message "google.cloud.assuredworkloads.v1beta1.ListWorkloadsRequest" do
|
35
52
|
optional :parent, :string, 1
|
36
53
|
optional :page_size, :int32, 2
|
@@ -56,6 +73,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
|
|
56
73
|
optional :kaj_enrollment_state, :enum, 17, "google.cloud.assuredworkloads.v1beta1.Workload.KajEnrollmentState"
|
57
74
|
optional :enable_sovereign_controls, :bool, 18
|
58
75
|
optional :saa_enrollment_response, :message, 20, "google.cloud.assuredworkloads.v1beta1.Workload.SaaEnrollmentResponse"
|
76
|
+
repeated :compliant_but_disallowed_services, :string, 24
|
59
77
|
oneof :compliance_regime_settings do
|
60
78
|
optional :il4_settings, :message, 7, "google.cloud.assuredworkloads.v1beta1.Workload.IL4Settings"
|
61
79
|
optional :cjis_settings, :message, 8, "google.cloud.assuredworkloads.v1beta1.Workload.CJISSettings"
|
@@ -123,6 +141,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
|
|
123
141
|
value :EU_REGIONS_AND_SUPPORT, 8
|
124
142
|
value :CA_REGIONS_AND_SUPPORT, 9
|
125
143
|
value :ITAR, 10
|
144
|
+
value :AU_REGIONS_AND_US_SUPPORT, 11
|
126
145
|
end
|
127
146
|
add_enum "google.cloud.assuredworkloads.v1beta1.Workload.KajEnrollmentState" do
|
128
147
|
value :KAJ_ENROLLMENT_STATE_UNSPECIFIED, 0
|
@@ -145,8 +164,13 @@ module Google
|
|
145
164
|
module V1beta1
|
146
165
|
CreateWorkloadRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.CreateWorkloadRequest").msgclass
|
147
166
|
UpdateWorkloadRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.UpdateWorkloadRequest").msgclass
|
167
|
+
RestrictAllowedResourcesRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.RestrictAllowedResourcesRequest").msgclass
|
168
|
+
RestrictAllowedResourcesRequest::RestrictionType = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.RestrictAllowedResourcesRequest.RestrictionType").enummodule
|
169
|
+
RestrictAllowedResourcesResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.RestrictAllowedResourcesResponse").msgclass
|
148
170
|
DeleteWorkloadRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.DeleteWorkloadRequest").msgclass
|
149
171
|
GetWorkloadRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.GetWorkloadRequest").msgclass
|
172
|
+
AnalyzeWorkloadMoveRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.AnalyzeWorkloadMoveRequest").msgclass
|
173
|
+
AnalyzeWorkloadMoveResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.AnalyzeWorkloadMoveResponse").msgclass
|
150
174
|
ListWorkloadsRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.ListWorkloadsRequest").msgclass
|
151
175
|
ListWorkloadsResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.ListWorkloadsResponse").msgclass
|
152
176
|
Workload = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.Workload").msgclass
|
@@ -0,0 +1,24 @@
|
|
1
|
+
# Generated by the protocol buffer compiler. DO NOT EDIT!
|
2
|
+
# source: google/cloud/assuredworkloads/v1beta1/assuredworkloads_service.proto
|
3
|
+
|
4
|
+
require 'google/protobuf'
|
5
|
+
|
6
|
+
require 'google/api/annotations_pb'
|
7
|
+
require 'google/api/client_pb'
|
8
|
+
require 'google/cloud/assuredworkloads/v1beta1/assuredworkloads_pb'
|
9
|
+
require 'google/longrunning/operations_pb'
|
10
|
+
require 'google/protobuf/empty_pb'
|
11
|
+
|
12
|
+
Google::Protobuf::DescriptorPool.generated_pool.build do
|
13
|
+
add_file("google/cloud/assuredworkloads/v1beta1/assuredworkloads_service.proto", :syntax => :proto3) do
|
14
|
+
end
|
15
|
+
end
|
16
|
+
|
17
|
+
module Google
|
18
|
+
module Cloud
|
19
|
+
module AssuredWorkloads
|
20
|
+
module V1beta1
|
21
|
+
end
|
22
|
+
end
|
23
|
+
end
|
24
|
+
end
|
@@ -1,7 +1,7 @@
|
|
1
1
|
# Generated by the protocol buffer compiler. DO NOT EDIT!
|
2
|
-
# Source: google/cloud/assuredworkloads/v1beta1/
|
2
|
+
# Source: google/cloud/assuredworkloads/v1beta1/assuredworkloads_service.proto for package 'Google.Cloud.AssuredWorkloads.V1beta1'
|
3
3
|
# Original file comments:
|
4
|
-
# Copyright
|
4
|
+
# Copyright 2022 Google LLC
|
5
5
|
#
|
6
6
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
7
7
|
# you may not use this file except in compliance with the License.
|
@@ -17,7 +17,7 @@
|
|
17
17
|
#
|
18
18
|
|
19
19
|
require 'grpc'
|
20
|
-
require 'google/cloud/assuredworkloads/v1beta1/
|
20
|
+
require 'google/cloud/assuredworkloads/v1beta1/assuredworkloads_service_pb'
|
21
21
|
|
22
22
|
module Google
|
23
23
|
module Cloud
|
@@ -40,12 +40,25 @@ module Google
|
|
40
40
|
# For force updates don't set etag field in the Workload.
|
41
41
|
# Only one update operation per workload can be in progress.
|
42
42
|
rpc :UpdateWorkload, ::Google::Cloud::AssuredWorkloads::V1beta1::UpdateWorkloadRequest, ::Google::Cloud::AssuredWorkloads::V1beta1::Workload
|
43
|
+
# Restrict the list of resources allowed in the Workload environment.
|
44
|
+
# The current list of allowed products can be found at
|
45
|
+
# https://cloud.google.com/assured-workloads/docs/supported-products
|
46
|
+
# In addition to assuredworkloads.workload.update permission, the user should
|
47
|
+
# also have orgpolicy.policy.set permission on the folder resource
|
48
|
+
# to use this functionality.
|
49
|
+
rpc :RestrictAllowedResources, ::Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedResourcesRequest, ::Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedResourcesResponse
|
43
50
|
# Deletes the workload. Make sure that workload's direct children are already
|
44
51
|
# in a deleted state, otherwise the request will fail with a
|
45
52
|
# FAILED_PRECONDITION error.
|
53
|
+
# In addition to assuredworkloads.workload.delete permission, the user should
|
54
|
+
# also have orgpolicy.policy.set permission on the deleted folder to remove
|
55
|
+
# Assured Workloads OrgPolicies.
|
46
56
|
rpc :DeleteWorkload, ::Google::Cloud::AssuredWorkloads::V1beta1::DeleteWorkloadRequest, ::Google::Protobuf::Empty
|
47
57
|
# Gets Assured Workload associated with a CRM Node
|
48
58
|
rpc :GetWorkload, ::Google::Cloud::AssuredWorkloads::V1beta1::GetWorkloadRequest, ::Google::Cloud::AssuredWorkloads::V1beta1::Workload
|
59
|
+
# Analyze if the source Assured Workloads can be moved to the target Assured
|
60
|
+
# Workload
|
61
|
+
rpc :AnalyzeWorkloadMove, ::Google::Cloud::AssuredWorkloads::V1beta1::AnalyzeWorkloadMoveRequest, ::Google::Cloud::AssuredWorkloads::V1beta1::AnalyzeWorkloadMoveResponse
|
49
62
|
# Lists Assured Workloads under a CRM Node.
|
50
63
|
rpc :ListWorkloads, ::Google::Cloud::AssuredWorkloads::V1beta1::ListWorkloadsRequest, ::Google::Cloud::AssuredWorkloads::V1beta1::ListWorkloadsResponse
|
51
64
|
end
|
@@ -31,8 +31,8 @@ module Google
|
|
31
31
|
# Required. Assured Workload to create
|
32
32
|
# @!attribute [rw] external_id
|
33
33
|
# @return [::String]
|
34
|
-
# Optional. A identifier associated with the workload and underlying projects
|
35
|
-
#
|
34
|
+
# Optional. A identifier associated with the workload and underlying projects which
|
35
|
+
# allows for the break down of billing costs for a workload. The value
|
36
36
|
# provided for the identifier will add a label to the workload and contained
|
37
37
|
# projects with the identifier as the value.
|
38
38
|
class CreateWorkloadRequest
|
@@ -44,7 +44,7 @@ module Google
|
|
44
44
|
# @!attribute [rw] workload
|
45
45
|
# @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload]
|
46
46
|
# Required. The workload to update.
|
47
|
-
# The workload
|
47
|
+
# The workload's `name` field is used to identify the workload to be updated.
|
48
48
|
# Format:
|
49
49
|
# organizations/\\{org_id}/locations/\\{location_id}/workloads/\\{workload_id}
|
50
50
|
# @!attribute [rw] update_mask
|
@@ -55,6 +55,44 @@ module Google
|
|
55
55
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
56
56
|
end
|
57
57
|
|
58
|
+
# Request for restricting list of available resources in Workload environment.
|
59
|
+
# @!attribute [rw] name
|
60
|
+
# @return [::String]
|
61
|
+
# Required. The resource name of the Workload. This is the workloads's
|
62
|
+
# relative path in the API, formatted as
|
63
|
+
# "organizations/\\{organization_id}/locations/\\{location_id}/workloads/\\{workload_id}".
|
64
|
+
# For example,
|
65
|
+
# "organizations/123/locations/us-east1/workloads/assured-workload-1".
|
66
|
+
# @!attribute [rw] restriction_type
|
67
|
+
# @return [::Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedResourcesRequest::RestrictionType]
|
68
|
+
# Required. The type of restriction for using gcp products in the Workload environment.
|
69
|
+
class RestrictAllowedResourcesRequest
|
70
|
+
include ::Google::Protobuf::MessageExts
|
71
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
72
|
+
|
73
|
+
# The type of restriction.
|
74
|
+
module RestrictionType
|
75
|
+
# Unknown restriction type.
|
76
|
+
RESTRICTION_TYPE_UNSPECIFIED = 0
|
77
|
+
|
78
|
+
# Allow the use all of all gcp products, irrespective of the compliance
|
79
|
+
# posture. This effectively removes gcp.restrictServiceUsage OrgPolicy
|
80
|
+
# on the AssuredWorkloads Folder.
|
81
|
+
ALLOW_ALL_GCP_RESOURCES = 1
|
82
|
+
|
83
|
+
# Based on Workload's compliance regime, allowed list changes.
|
84
|
+
# See - https://cloud.google.com/assured-workloads/docs/supported-products
|
85
|
+
# for the list of supported resources.
|
86
|
+
ALLOW_COMPLIANT_RESOURCES = 2
|
87
|
+
end
|
88
|
+
end
|
89
|
+
|
90
|
+
# Response for restricting the list of allowed resources.
|
91
|
+
class RestrictAllowedResourcesResponse
|
92
|
+
include ::Google::Protobuf::MessageExts
|
93
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
94
|
+
end
|
95
|
+
|
58
96
|
# Request for deleting a Workload.
|
59
97
|
# @!attribute [rw] name
|
60
98
|
# @return [::String]
|
@@ -73,8 +111,8 @@ module Google
|
|
73
111
|
# Request for fetching a workload.
|
74
112
|
# @!attribute [rw] name
|
75
113
|
# @return [::String]
|
76
|
-
# Required. The resource name of the Workload to fetch. This is the
|
77
|
-
#
|
114
|
+
# Required. The resource name of the Workload to fetch. This is the workloads's
|
115
|
+
# relative path in the API, formatted as
|
78
116
|
# "organizations/\\{organization_id}/locations/\\{location_id}/workloads/\\{workload_id}".
|
79
117
|
# For example,
|
80
118
|
# "organizations/123/locations/us-east1/workloads/assured-workload-1".
|
@@ -83,6 +121,46 @@ module Google
|
|
83
121
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
84
122
|
end
|
85
123
|
|
124
|
+
# A request to analyze a hypothetical move of a source project or project-based
|
125
|
+
# workload to a target (destination) folder-based workload.
|
126
|
+
# @!attribute [rw] source
|
127
|
+
# @return [::String]
|
128
|
+
# The source type is a project-based workload. Specify the workloads's
|
129
|
+
# relative resource name, formatted as:
|
130
|
+
# "organizations/\\{ORGANIZATION_ID}/locations/\\{LOCATION_ID}/workloads/\\{WORKLOAD_ID}"
|
131
|
+
# For example:
|
132
|
+
# "organizations/123/locations/us-east1/workloads/assured-workload-1"
|
133
|
+
# @!attribute [rw] project
|
134
|
+
# @return [::String]
|
135
|
+
# The source type is a project. Specify the project's relative resource
|
136
|
+
# name, formatted as either a project number or a project ID:
|
137
|
+
# "projects/\\{PROJECT_NUMBER}" or "projects/\\{PROJECT_ID}"
|
138
|
+
# For example:
|
139
|
+
# "projects/951040570662" when specifying a project number, or
|
140
|
+
# "projects/my-project-123" when specifying a project ID.
|
141
|
+
# @!attribute [rw] target
|
142
|
+
# @return [::String]
|
143
|
+
# Required. The resource ID of the folder-based destination workload. This workload is
|
144
|
+
# where the source project will hypothetically be moved to. Specify the
|
145
|
+
# workload's relative resource name, formatted as:
|
146
|
+
# "organizations/\\{ORGANIZATION_ID}/locations/\\{LOCATION_ID}/workloads/\\{WORKLOAD_ID}"
|
147
|
+
# For example:
|
148
|
+
# "organizations/123/locations/us-east1/workloads/assured-workload-2"
|
149
|
+
class AnalyzeWorkloadMoveRequest
|
150
|
+
include ::Google::Protobuf::MessageExts
|
151
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
152
|
+
end
|
153
|
+
|
154
|
+
# A response that includes the analysis of the hypothetical resource move.
|
155
|
+
# @!attribute [rw] blockers
|
156
|
+
# @return [::Array<::String>]
|
157
|
+
# A list of blockers that should be addressed before moving the source
|
158
|
+
# project or project-based workload to the destination folder-based workload.
|
159
|
+
class AnalyzeWorkloadMoveResponse
|
160
|
+
include ::Google::Protobuf::MessageExts
|
161
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
162
|
+
end
|
163
|
+
|
86
164
|
# Request for fetching workloads in an organization.
|
87
165
|
# @!attribute [rw] parent
|
88
166
|
# @return [::String]
|
@@ -146,9 +224,9 @@ module Google
|
|
146
224
|
# @!attribute [r] create_time
|
147
225
|
# @return [::Google::Protobuf::Timestamp]
|
148
226
|
# Output only. Immutable. The Workload creation timestamp.
|
149
|
-
# @!attribute [
|
227
|
+
# @!attribute [r] billing_account
|
150
228
|
# @return [::String]
|
151
|
-
#
|
229
|
+
# Output only. The billing account used for the resources which are
|
152
230
|
# direct children of workload. This billing account is initially associated
|
153
231
|
# with the resources created as part of Workload creation.
|
154
232
|
# After the initial creation of these resources, the customer can change
|
@@ -158,20 +236,16 @@ module Google
|
|
158
236
|
# `billingAccounts/012345-567890-ABCDEF`.
|
159
237
|
# @!attribute [rw] il4_settings
|
160
238
|
# @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::IL4Settings]
|
161
|
-
#
|
162
|
-
# for IL4.
|
239
|
+
# Input only. Immutable. Settings specific to resources needed for IL4.
|
163
240
|
# @!attribute [rw] cjis_settings
|
164
241
|
# @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::CJISSettings]
|
165
|
-
#
|
166
|
-
# for CJIS.
|
242
|
+
# Input only. Immutable. Settings specific to resources needed for CJIS.
|
167
243
|
# @!attribute [rw] fedramp_high_settings
|
168
244
|
# @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::FedrampHighSettings]
|
169
|
-
#
|
170
|
-
# for FedRAMP High.
|
245
|
+
# Input only. Immutable. Settings specific to resources needed for FedRAMP High.
|
171
246
|
# @!attribute [rw] fedramp_moderate_settings
|
172
247
|
# @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::FedrampModerateSettings]
|
173
|
-
#
|
174
|
-
# for FedRAMP Moderate.
|
248
|
+
# Input only. Immutable. Settings specific to resources needed for FedRAMP Moderate.
|
175
249
|
# @!attribute [rw] etag
|
176
250
|
# @return [::String]
|
177
251
|
# Optional. ETag of the workload, it is calculated on the basis
|
@@ -181,22 +255,24 @@ module Google
|
|
181
255
|
# Optional. Labels applied to the workload.
|
182
256
|
# @!attribute [rw] provisioned_resources_parent
|
183
257
|
# @return [::String]
|
184
|
-
# Input only. The parent resource for the resources managed by this Assured
|
185
|
-
#
|
258
|
+
# Input only. The parent resource for the resources managed by this Assured Workload. May
|
259
|
+
# be either empty or a folder resource which is a child of the
|
186
260
|
# Workload parent. If not specified all resources are created under the
|
187
261
|
# parent organization.
|
188
262
|
# Format:
|
189
263
|
# folders/\\{folder_id}
|
190
264
|
# @!attribute [rw] kms_settings
|
191
265
|
# @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::KMSSettings]
|
192
|
-
# Input only. Settings used to create a CMEK crypto key. When set a project
|
193
|
-
#
|
194
|
-
#
|
266
|
+
# Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS
|
267
|
+
# CMEK key is provisioned.
|
268
|
+
# This field is deprecated as of Feb 28, 2022.
|
269
|
+
# In order to create a Keyring, callers should specify,
|
270
|
+
# ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.
|
195
271
|
# @!attribute [rw] resource_settings
|
196
272
|
# @return [::Array<::Google::Cloud::AssuredWorkloads::V1beta1::Workload::ResourceSettings>]
|
197
|
-
# Input only. Resource properties that are used to customize workload
|
198
|
-
#
|
199
|
-
#
|
273
|
+
# Input only. Resource properties that are used to customize workload resources.
|
274
|
+
# These properties (such as custom project id) will be used to create
|
275
|
+
# workload resources if possible. This field is optional.
|
200
276
|
# @!attribute [r] kaj_enrollment_state
|
201
277
|
# @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::KajEnrollmentState]
|
202
278
|
# Output only. Represents the KAJ enrollment state of the given workload.
|
@@ -209,6 +285,12 @@ module Google
|
|
209
285
|
# Output only. Represents the SAA enrollment response of the given workload.
|
210
286
|
# SAA enrollment response is queried during GetWorkload call.
|
211
287
|
# In failure cases, user friendly error message is shown in SAA details page.
|
288
|
+
# @!attribute [r] compliant_but_disallowed_services
|
289
|
+
# @return [::Array<::String>]
|
290
|
+
# Output only. Urls for services which are compliant for this Assured Workload, but which
|
291
|
+
# are currently disallowed by the ResourceUsageRestriction org policy.
|
292
|
+
# Invoke RestrictAllowedResources endpoint to allow your project developers
|
293
|
+
# to use these services in their environment."
|
212
294
|
class Workload
|
213
295
|
include ::Google::Protobuf::MessageExts
|
214
296
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
@@ -248,14 +330,13 @@ module Google
|
|
248
330
|
# Settings specific to the Key Management Service.
|
249
331
|
# @!attribute [rw] next_rotation_time
|
250
332
|
# @return [::Google::Protobuf::Timestamp]
|
251
|
-
# Required. Input only. Immutable. The time at which the Key Management
|
252
|
-
#
|
253
|
-
# mark it as the primary.
|
333
|
+
# Required. Input only. Immutable. The time at which the Key Management Service will automatically create a
|
334
|
+
# new version of the crypto key and mark it as the primary.
|
254
335
|
# @!attribute [rw] rotation_period
|
255
336
|
# @return [::Google::Protobuf::Duration]
|
256
|
-
# Required. Input only. Immutable. [next_rotation_time] will be advanced by
|
257
|
-
#
|
258
|
-
#
|
337
|
+
# Required. Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key
|
338
|
+
# Management Service automatically rotates a key. Must be at least 24 hours
|
339
|
+
# and at most 876,000 hours.
|
259
340
|
class KMSSettings
|
260
341
|
include ::Google::Protobuf::MessageExts
|
261
342
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
@@ -264,8 +345,7 @@ module Google
|
|
264
345
|
# Settings specific to resources needed for IL4.
|
265
346
|
# @!attribute [rw] kms_settings
|
266
347
|
# @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::KMSSettings]
|
267
|
-
#
|
268
|
-
# key.
|
348
|
+
# Input only. Immutable. Settings used to create a CMEK crypto key.
|
269
349
|
class IL4Settings
|
270
350
|
include ::Google::Protobuf::MessageExts
|
271
351
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
@@ -274,8 +354,7 @@ module Google
|
|
274
354
|
# Settings specific to resources needed for CJIS.
|
275
355
|
# @!attribute [rw] kms_settings
|
276
356
|
# @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::KMSSettings]
|
277
|
-
#
|
278
|
-
# key.
|
357
|
+
# Input only. Immutable. Settings used to create a CMEK crypto key.
|
279
358
|
class CJISSettings
|
280
359
|
include ::Google::Protobuf::MessageExts
|
281
360
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
@@ -284,8 +363,7 @@ module Google
|
|
284
363
|
# Settings specific to resources needed for FedRAMP High.
|
285
364
|
# @!attribute [rw] kms_settings
|
286
365
|
# @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::KMSSettings]
|
287
|
-
#
|
288
|
-
# key.
|
366
|
+
# Input only. Immutable. Settings used to create a CMEK crypto key.
|
289
367
|
class FedrampHighSettings
|
290
368
|
include ::Google::Protobuf::MessageExts
|
291
369
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
@@ -294,8 +372,7 @@ module Google
|
|
294
372
|
# Settings specific to resources needed for FedRAMP Moderate.
|
295
373
|
# @!attribute [rw] kms_settings
|
296
374
|
# @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::KMSSettings]
|
297
|
-
#
|
298
|
-
# key.
|
375
|
+
# Input only. Immutable. Settings used to create a CMEK crypto key.
|
299
376
|
class FedrampModerateSettings
|
300
377
|
include ::Google::Protobuf::MessageExts
|
301
378
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
@@ -307,6 +384,8 @@ module Google
|
|
307
384
|
# Resource identifier.
|
308
385
|
# For a project this represents project_id. If the project is already
|
309
386
|
# taken, the workload creation will fail.
|
387
|
+
# For KeyRing, this represents the keyring_id.
|
388
|
+
# For a folder, don't set this value as folder_id is assigned by Google.
|
310
389
|
# @!attribute [rw] resource_type
|
311
390
|
# @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::ResourceInfo::ResourceType]
|
312
391
|
# Indicates the type of resource. This field should be specified to
|
@@ -410,6 +489,9 @@ module Google
|
|
410
489
|
|
411
490
|
# International Traffic in Arms Regulations
|
412
491
|
ITAR = 10
|
492
|
+
|
493
|
+
# Assured Workloads for Australia Regions and Support controls
|
494
|
+
AU_REGIONS_AND_US_SUPPORT = 11
|
413
495
|
end
|
414
496
|
|
415
497
|
# Key Access Justifications(KAJ) Enrollment State.
|
@@ -437,12 +519,12 @@ module Google
|
|
437
519
|
# Optional. The parent of the workload.
|
438
520
|
# @!attribute [rw] compliance_regime
|
439
521
|
# @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::ComplianceRegime]
|
440
|
-
# Optional. Compliance controls that should be applied to the resources
|
441
|
-
#
|
522
|
+
# Optional. Compliance controls that should be applied to the resources managed by
|
523
|
+
# the workload.
|
442
524
|
# @!attribute [rw] resource_settings
|
443
525
|
# @return [::Array<::Google::Cloud::AssuredWorkloads::V1beta1::Workload::ResourceSettings>]
|
444
|
-
# Optional. Resource properties in the input that are used for
|
445
|
-
#
|
526
|
+
# Optional. Resource properties in the input that are used for creating/customizing
|
527
|
+
# workload resources.
|
446
528
|
class CreateWorkloadOperationMetadata
|
447
529
|
include ::Google::Protobuf::MessageExts
|
448
530
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
@@ -26,8 +26,6 @@ module Google
|
|
26
26
|
# service Foo {
|
27
27
|
# rpc Bar(google.protobuf.Empty) returns (google.protobuf.Empty);
|
28
28
|
# }
|
29
|
-
#
|
30
|
-
# The JSON representation for `Empty` is empty JSON object `{}`.
|
31
29
|
class Empty
|
32
30
|
include ::Google::Protobuf::MessageExts
|
33
31
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: google-cloud-assured_workloads-v1beta1
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.
|
4
|
+
version: 0.13.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Google LLC
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2022-07
|
11
|
+
date: 2022-09-07 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: gapic-common
|
@@ -179,7 +179,8 @@ files:
|
|
179
179
|
- lib/google/cloud/assured_workloads/v1beta1/assured_workloads_service/paths.rb
|
180
180
|
- lib/google/cloud/assured_workloads/v1beta1/version.rb
|
181
181
|
- lib/google/cloud/assuredworkloads/v1beta1/assuredworkloads_pb.rb
|
182
|
-
- lib/google/cloud/assuredworkloads/v1beta1/
|
182
|
+
- lib/google/cloud/assuredworkloads/v1beta1/assuredworkloads_service_pb.rb
|
183
|
+
- lib/google/cloud/assuredworkloads/v1beta1/assuredworkloads_service_services_pb.rb
|
183
184
|
- proto_docs/README.md
|
184
185
|
- proto_docs/google/api/field_behavior.rb
|
185
186
|
- proto_docs/google/api/resource.rb
|