google-cloud-assured_workloads-v1beta1 0.7.1 → 0.9.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 72ef07a10796f9c323b45f864d27ca2b8f54e6485ae31426afe70fc13825216b
-  data.tar.gz: 3fc1da1968b381cebed12267ba404238c34c66d20ba0d15bf3b5d5473d1bf56c
+  metadata.gz: 6f8de4e4633a698f38df8c706ddda6ba01527ca5e876a104a7b6c1b84b452dc9
+  data.tar.gz: 5c476d3b009f3f277d9f0f99b2642989a642cd02c5ab450b5b9aad86ca9d95e5
 SHA512:
-  metadata.gz: 577dd42db891db5d39fdf002ae9584fe7ca1bd2437f48bc462a993567c105b6e0233b6cd7921fbc114c6c5c067d9f22fd4a7890f2a16efe63b20c6ac2706dd3a
-  data.tar.gz: 1282ea17cfa7b4743f0ee62aefa53088ba80ba84085c7f20a01eee5123d4ae2a57cc3a27e6392a0a055fa935d8bda7e16328f0ab81e9d72f1b8c83c2e2cb6e89
+  metadata.gz: be7e309d2edfa808b56c12d165420abcb5a84c81c35dd0380b31b61a6919e7c262f6e15e0cd04d12d29fa7c9f423babdea8bc551a4c125a842657bfbf78451a9
+  data.tar.gz: 7a3970109e164c258d2006cf812e88ec0952d4dbe0c53af7c83a08ec9ba44192f4089498a208f55fb63466c3a61730b8b0259f288c9ec523b9745da7e9e626e0

data/.yardopts

@@ -1,5 +1,5 @@
 --no-private
---title=Assured Workloads for Government V1beta1 API
+--title="Assured Workloads for Government V1beta1 API"
 --exclude _pb\.rb$
 --markup markdown
 --markup-provider redcarpet

data/AUTHENTICATION.md

@@ -120,15 +120,6 @@ To configure your system for this, simply:
 **NOTE:** This is _not_ recommended for running in production. The Cloud SDK
 *should* only be used during development.
 
-[gce-how-to]: https://cloud.google.com/compute/docs/authentication#using
-[dev-console]: https://console.cloud.google.com/project
-
-[enable-apis]: https://raw.githubusercontent.com/GoogleCloudPlatform/gcloud-common/master/authentication/enable-apis.png
-
-[create-new-service-account]: https://raw.githubusercontent.com/GoogleCloudPlatform/gcloud-common/master/authentication/create-new-service-account.png
-[create-new-service-account-existing-keys]: https://raw.githubusercontent.com/GoogleCloudPlatform/gcloud-common/master/authentication/create-new-service-account-existing-keys.png
-[reuse-service-account]: https://raw.githubusercontent.com/GoogleCloudPlatform/gcloud-common/master/authentication/reuse-service-account.png
-
 ## Creating a Service Account
 
 Google Cloud requires **Service Account Credentials** to
@@ -139,31 +130,22 @@ If you are not running this client within
 [Google Cloud Platform environments](#google-cloud-platform-environments), you
 need a Google Developers service account.
 
-1. Visit the [Google Developers Console][dev-console].
+1. Visit the [Google Cloud Console](https://console.cloud.google.com/project).
 2. Create a new project or click on an existing project.
-3. Activate the slide-out navigation tray and select **API Manager**. From
+3. Activate the menu in the upper left and select **APIs & Services**. From
    here, you will enable the APIs that your application requires.
 
-   ![Enable the APIs that your application requires][enable-apis]
-
    *Note: You may need to enable billing in order to use these services.*
 
 4. Select **Credentials** from the side navigation.
 
-   You should see a screen like one of the following.
-
-   ![Create a new service account][create-new-service-account]
-
-   ![Create a new service account With Existing Keys][create-new-service-account-existing-keys]
-
-   Find the "Add credentials" drop down and select "Service account" to be
-   guided through downloading a new JSON key file.
+   Find the "Create credentials" drop down near the top of the page, and select
+   "Service account" to be guided through downloading a new JSON key file.
 
    If you want to re-use an existing service account, you can easily generate a
-   new key file. Just select the account you wish to re-use, and click "Generate
-   new JSON key":
-
-   ![Re-use an existing service account][reuse-service-account]
+   new key file. Just select the account you wish to re-use, click the pencil
+   tool on the right side to edit the service account, select the **Keys** tab,
+   and then select **Add Key**.
 
    The key file you download will be used by this library to authenticate API
    requests and should be stored in a secure location.

data/lib/google/cloud/assured_workloads/v1beta1/assured_workloads_service/client.rb

@@ -154,6 +154,7 @@ module Google
 
               @operations_client = Operations.new do |config|
                 config.credentials = credentials
+                config.quota_project = @quota_project_id
                 config.endpoint = @config.endpoint
               end
 
@@ -199,8 +200,8 @@ module Google
             #   @param workload [::Google::Cloud::AssuredWorkloads::V1beta1::Workload, ::Hash]
             #     Required. Assured Workload to create
             #   @param external_id [::String]
-            #     Optional. A identifier associated with the workload and underlying projects which
-            #     allows for the break down of billing costs for a workload. The value
+            #     Optional. A identifier associated with the workload and underlying projects
+            #     which allows for the break down of billing costs for a workload. The value
             #     provided for the identifier will add a label to the workload and contained
             #     projects with the identifier as the value.
             #
@@ -212,6 +213,28 @@ module Google
             #
             # @raise [::Google::Cloud::Error] if the RPC is aborted.
             #
+            # @example Basic example
+            #   require "google/cloud/assured_workloads/v1beta1"
+            #
+            #   # Create a client object. The client can be reused for multiple calls.
+            #   client = Google::Cloud::AssuredWorkloads::V1beta1::AssuredWorkloadsService::Client.new
+            #
+            #   # Create a request. To set request fields, pass in keyword arguments.
+            #   request = Google::Cloud::AssuredWorkloads::V1beta1::CreateWorkloadRequest.new
+            #
+            #   # Call the create_workload method.
+            #   result = client.create_workload request
+            #
+            #   # The returned object is of type Gapic::Operation. You can use this
+            #   # object to check the status of an operation, cancel it, or wait
+            #   # for results. Here is how to block until completion:
+            #   result.wait_until_done! timeout: 60
+            #   if result.response?
+            #     p result.response
+            #   else
+            #     puts "Error!"
+            #   end
+            #
             def create_workload request, options = nil
               raise ::ArgumentError, "request must be provided" if request.nil?
 
@@ -229,9 +252,11 @@ module Google
                 gapic_version: ::Google::Cloud::AssuredWorkloads::V1beta1::VERSION
               metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
 
-              header_params = {
-                "parent" => request.parent
-              }
+              header_params = {}
+              if request.parent
+                header_params["parent"] = request.parent
+              end
+
               request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
               metadata[:"x-goog-request-params"] ||= request_params_header
 
@@ -289,6 +314,21 @@ module Google
             #
             # @raise [::Google::Cloud::Error] if the RPC is aborted.
             #
+            # @example Basic example
+            #   require "google/cloud/assured_workloads/v1beta1"
+            #
+            #   # Create a client object. The client can be reused for multiple calls.
+            #   client = Google::Cloud::AssuredWorkloads::V1beta1::AssuredWorkloadsService::Client.new
+            #
+            #   # Create a request. To set request fields, pass in keyword arguments.
+            #   request = Google::Cloud::AssuredWorkloads::V1beta1::UpdateWorkloadRequest.new
+            #
+            #   # Call the update_workload method.
+            #   result = client.update_workload request
+            #
+            #   # The returned object is of type Google::Cloud::AssuredWorkloads::V1beta1::Workload.
+            #   p result
+            #
             def update_workload request, options = nil
               raise ::ArgumentError, "request must be provided" if request.nil?
 
@@ -306,9 +346,11 @@ module Google
                 gapic_version: ::Google::Cloud::AssuredWorkloads::V1beta1::VERSION
               metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
 
-              header_params = {
-                "workload.name" => request.workload.name
-              }
+              header_params = {}
+              if request.workload&.name
+                header_params["workload.name"] = request.workload.name
+              end
+
               request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
               metadata[:"x-goog-request-params"] ||= request_params_header
 
@@ -364,6 +406,21 @@ module Google
             #
             # @raise [::Google::Cloud::Error] if the RPC is aborted.
             #
+            # @example Basic example
+            #   require "google/cloud/assured_workloads/v1beta1"
+            #
+            #   # Create a client object. The client can be reused for multiple calls.
+            #   client = Google::Cloud::AssuredWorkloads::V1beta1::AssuredWorkloadsService::Client.new
+            #
+            #   # Create a request. To set request fields, pass in keyword arguments.
+            #   request = Google::Cloud::AssuredWorkloads::V1beta1::DeleteWorkloadRequest.new
+            #
+            #   # Call the delete_workload method.
+            #   result = client.delete_workload request
+            #
+            #   # The returned object is of type Google::Protobuf::Empty.
+            #   p result
+            #
             def delete_workload request, options = nil
               raise ::ArgumentError, "request must be provided" if request.nil?
 
@@ -381,9 +438,11 @@ module Google
                 gapic_version: ::Google::Cloud::AssuredWorkloads::V1beta1::VERSION
               metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
 
-              header_params = {
-                "name" => request.name
-              }
+              header_params = {}
+              if request.name
+                header_params["name"] = request.name
+              end
+
               request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
               metadata[:"x-goog-request-params"] ||= request_params_header
 
@@ -422,8 +481,8 @@ module Google
             #   the default parameter values, pass an empty Hash as a request object (see above).
             #
             #   @param name [::String]
-            #     Required. The resource name of the Workload to fetch. This is the workloads's
-            #     relative path in the API, formatted as
+            #     Required. The resource name of the Workload to fetch. This is the
+            #     workloads's relative path in the API, formatted as
             #     "organizations/\\{organization_id}/locations/\\{location_id}/workloads/\\{workload_id}".
             #     For example,
             #     "organizations/123/locations/us-east1/workloads/assured-workload-1".
@@ -436,6 +495,21 @@ module Google
             #
             # @raise [::Google::Cloud::Error] if the RPC is aborted.
             #
+            # @example Basic example
+            #   require "google/cloud/assured_workloads/v1beta1"
+            #
+            #   # Create a client object. The client can be reused for multiple calls.
+            #   client = Google::Cloud::AssuredWorkloads::V1beta1::AssuredWorkloadsService::Client.new
+            #
+            #   # Create a request. To set request fields, pass in keyword arguments.
+            #   request = Google::Cloud::AssuredWorkloads::V1beta1::GetWorkloadRequest.new
+            #
+            #   # Call the get_workload method.
+            #   result = client.get_workload request
+            #
+            #   # The returned object is of type Google::Cloud::AssuredWorkloads::V1beta1::Workload.
+            #   p result
+            #
             def get_workload request, options = nil
               raise ::ArgumentError, "request must be provided" if request.nil?
 
@@ -453,9 +527,11 @@ module Google
                 gapic_version: ::Google::Cloud::AssuredWorkloads::V1beta1::VERSION
               metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
 
-              header_params = {
-                "name" => request.name
-              }
+              header_params = {}
+              if request.name
+                header_params["name"] = request.name
+              end
+
               request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
               metadata[:"x-goog-request-params"] ||= request_params_header
 
@@ -514,6 +590,27 @@ module Google
             #
             # @raise [::Google::Cloud::Error] if the RPC is aborted.
             #
+            # @example Basic example
+            #   require "google/cloud/assured_workloads/v1beta1"
+            #
+            #   # Create a client object. The client can be reused for multiple calls.
+            #   client = Google::Cloud::AssuredWorkloads::V1beta1::AssuredWorkloadsService::Client.new
+            #
+            #   # Create a request. To set request fields, pass in keyword arguments.
+            #   request = Google::Cloud::AssuredWorkloads::V1beta1::ListWorkloadsRequest.new
+            #
+            #   # Call the list_workloads method.
+            #   result = client.list_workloads request
+            #
+            #   # The returned object is of type Gapic::PagedEnumerable. You can
+            #   # iterate over all elements by calling #each, and the enumerable
+            #   # will lazily make API calls to fetch subsequent pages. Other
+            #   # methods are also available for managing paging directly.
+            #   result.each do |response|
+            #     # Each element is of type ::Google::Cloud::AssuredWorkloads::V1beta1::Workload.
+            #     p response
+            #   end
+            #
             def list_workloads request, options = nil
               raise ::ArgumentError, "request must be provided" if request.nil?
 
@@ -531,9 +628,11 @@ module Google
                 gapic_version: ::Google::Cloud::AssuredWorkloads::V1beta1::VERSION
               metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
 
-              header_params = {
-                "parent" => request.parent
-              }
+              header_params = {}
+              if request.parent
+                header_params["parent"] = request.parent
+              end
+
               request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
               metadata[:"x-goog-request-params"] ||= request_params_header
 

data/lib/google/cloud/assured_workloads/v1beta1/assured_workloads_service/operations.rb

@@ -143,6 +143,27 @@ module Google
             #
             # @raise [::Google::Cloud::Error] if the RPC is aborted.
             #
+            # @example Basic example
+            #   require "google/longrunning"
+            #
+            #   # Create a client object. The client can be reused for multiple calls.
+            #   client = Google::Longrunning::Operations::Client.new
+            #
+            #   # Create a request. To set request fields, pass in keyword arguments.
+            #   request = Google::Longrunning::ListOperationsRequest.new
+            #
+            #   # Call the list_operations method.
+            #   result = client.list_operations request
+            #
+            #   # The returned object is of type Gapic::PagedEnumerable. You can
+            #   # iterate over all elements by calling #each, and the enumerable
+            #   # will lazily make API calls to fetch subsequent pages. Other
+            #   # methods are also available for managing paging directly.
+            #   result.each do |response|
+            #     # Each element is of type ::Google::Longrunning::Operation.
+            #     p response
+            #   end
+            #
             def list_operations request, options = nil
               raise ::ArgumentError, "request must be provided" if request.nil?
 
@@ -160,9 +181,11 @@ module Google
                 gapic_version: ::Google::Cloud::AssuredWorkloads::V1beta1::VERSION
               metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
 
-              header_params = {
-                "name" => request.name
-              }
+              header_params = {}
+              if request.name
+                header_params["name"] = request.name
+              end
+
               request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
               metadata[:"x-goog-request-params"] ||= request_params_header
 
@@ -215,6 +238,28 @@ module Google
             #
             # @raise [::Google::Cloud::Error] if the RPC is aborted.
             #
+            # @example Basic example
+            #   require "google/longrunning"
+            #
+            #   # Create a client object. The client can be reused for multiple calls.
+            #   client = Google::Longrunning::Operations::Client.new
+            #
+            #   # Create a request. To set request fields, pass in keyword arguments.
+            #   request = Google::Longrunning::GetOperationRequest.new
+            #
+            #   # Call the get_operation method.
+            #   result = client.get_operation request
+            #
+            #   # The returned object is of type Gapic::Operation. You can use this
+            #   # object to check the status of an operation, cancel it, or wait
+            #   # for results. Here is how to block until completion:
+            #   result.wait_until_done! timeout: 60
+            #   if result.response?
+            #     p result.response
+            #   else
+            #     puts "Error!"
+            #   end
+            #
             def get_operation request, options = nil
               raise ::ArgumentError, "request must be provided" if request.nil?
 
@@ -232,9 +277,11 @@ module Google
                 gapic_version: ::Google::Cloud::AssuredWorkloads::V1beta1::VERSION
               metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
 
-              header_params = {
-                "name" => request.name
-              }
+              header_params = {}
+              if request.name
+                header_params["name"] = request.name
+              end
+
               request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
               metadata[:"x-goog-request-params"] ||= request_params_header
 
@@ -287,6 +334,21 @@ module Google
             #
             # @raise [::Google::Cloud::Error] if the RPC is aborted.
             #
+            # @example Basic example
+            #   require "google/longrunning"
+            #
+            #   # Create a client object. The client can be reused for multiple calls.
+            #   client = Google::Longrunning::Operations::Client.new
+            #
+            #   # Create a request. To set request fields, pass in keyword arguments.
+            #   request = Google::Longrunning::DeleteOperationRequest.new
+            #
+            #   # Call the delete_operation method.
+            #   result = client.delete_operation request
+            #
+            #   # The returned object is of type Google::Protobuf::Empty.
+            #   p result
+            #
             def delete_operation request, options = nil
               raise ::ArgumentError, "request must be provided" if request.nil?
 
@@ -304,9 +366,11 @@ module Google
                 gapic_version: ::Google::Cloud::AssuredWorkloads::V1beta1::VERSION
               metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
 
-              header_params = {
-                "name" => request.name
-              }
+              header_params = {}
+              if request.name
+                header_params["name"] = request.name
+              end
+
               request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
               metadata[:"x-goog-request-params"] ||= request_params_header
 
@@ -364,6 +428,21 @@ module Google
             #
             # @raise [::Google::Cloud::Error] if the RPC is aborted.
             #
+            # @example Basic example
+            #   require "google/longrunning"
+            #
+            #   # Create a client object. The client can be reused for multiple calls.
+            #   client = Google::Longrunning::Operations::Client.new
+            #
+            #   # Create a request. To set request fields, pass in keyword arguments.
+            #   request = Google::Longrunning::CancelOperationRequest.new
+            #
+            #   # Call the cancel_operation method.
+            #   result = client.cancel_operation request
+            #
+            #   # The returned object is of type Google::Protobuf::Empty.
+            #   p result
+            #
             def cancel_operation request, options = nil
               raise ::ArgumentError, "request must be provided" if request.nil?
 
@@ -381,9 +460,11 @@ module Google
                 gapic_version: ::Google::Cloud::AssuredWorkloads::V1beta1::VERSION
               metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
 
-              header_params = {
-                "name" => request.name
-              }
+              header_params = {}
+              if request.name
+                header_params["name"] = request.name
+              end
+
               request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
               metadata[:"x-goog-request-params"] ||= request_params_header
 
@@ -444,6 +525,28 @@ module Google
             #
             # @raise [::Google::Cloud::Error] if the RPC is aborted.
             #
+            # @example Basic example
+            #   require "google/longrunning"
+            #
+            #   # Create a client object. The client can be reused for multiple calls.
+            #   client = Google::Longrunning::Operations::Client.new
+            #
+            #   # Create a request. To set request fields, pass in keyword arguments.
+            #   request = Google::Longrunning::WaitOperationRequest.new
+            #
+            #   # Call the wait_operation method.
+            #   result = client.wait_operation request
+            #
+            #   # The returned object is of type Gapic::Operation. You can use this
+            #   # object to check the status of an operation, cancel it, or wait
+            #   # for results. Here is how to block until completion:
+            #   result.wait_until_done! timeout: 60
+            #   if result.response?
+            #     p result.response
+            #   else
+            #     puts "Error!"
+            #   end
+            #
             def wait_operation request, options = nil
               raise ::ArgumentError, "request must be provided" if request.nil?
 

data/lib/google/cloud/assured_workloads/v1beta1/version.rb

@@ -21,7 +21,7 @@ module Google
   module Cloud
     module AssuredWorkloads
       module V1beta1
-        VERSION = "0.7.1"
+        VERSION = "0.9.1"
       end
     end
   end

data/lib/google/cloud/assuredworkloads/v1beta1/assuredworkloads_v1beta1_pb.rb

@@ -1,8 +1,6 @@
 # Generated by the protocol buffer compiler.  DO NOT EDIT!
 # source: google/cloud/assuredworkloads/v1beta1/assuredworkloads_v1beta1.proto
 
-require 'google/protobuf'
-
 require 'google/api/annotations_pb'
 require 'google/api/client_pb'
 require 'google/api/field_behavior_pb'
@@ -12,6 +10,8 @@ require 'google/protobuf/duration_pb'
 require 'google/protobuf/empty_pb'
 require 'google/protobuf/field_mask_pb'
 require 'google/protobuf/timestamp_pb'
+require 'google/protobuf'
+
 Google::Protobuf::DescriptorPool.generated_pool.build do
   add_file("google/cloud/assuredworkloads/v1beta1/assuredworkloads_v1beta1.proto", :syntax => :proto3) do
     add_message "google.cloud.assuredworkloads.v1beta1.CreateWorkloadRequest" do
@@ -52,6 +52,9 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :provisioned_resources_parent, :string, 13
       optional :kms_settings, :message, 14, "google.cloud.assuredworkloads.v1beta1.Workload.KMSSettings"
       repeated :resource_settings, :message, 15, "google.cloud.assuredworkloads.v1beta1.Workload.ResourceSettings"
+      optional :kaj_enrollment_state, :enum, 17, "google.cloud.assuredworkloads.v1beta1.Workload.KajEnrollmentState"
+      optional :enable_sovereign_controls, :bool, 18
+      optional :saa_enrollment_response, :message, 20, "google.cloud.assuredworkloads.v1beta1.Workload.SaaEnrollmentResponse"
       oneof :compliance_regime_settings do
         optional :il4_settings, :message, 7, "google.cloud.assuredworkloads.v1beta1.Workload.IL4Settings"
         optional :cjis_settings, :message, 8, "google.cloud.assuredworkloads.v1beta1.Workload.CJISSettings"
@@ -66,7 +69,9 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
     add_enum "google.cloud.assuredworkloads.v1beta1.Workload.ResourceInfo.ResourceType" do
       value :RESOURCE_TYPE_UNSPECIFIED, 0
       value :CONSUMER_PROJECT, 1
+      value :CONSUMER_FOLDER, 4
       value :ENCRYPTION_KEYS_PROJECT, 2
+      value :KEYRING, 3
     end
     add_message "google.cloud.assuredworkloads.v1beta1.Workload.KMSSettings" do
       optional :next_rotation_time, :message, 1, "google.protobuf.Timestamp"
@@ -87,6 +92,23 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
     add_message "google.cloud.assuredworkloads.v1beta1.Workload.ResourceSettings" do
       optional :resource_id, :string, 1
       optional :resource_type, :enum, 2, "google.cloud.assuredworkloads.v1beta1.Workload.ResourceInfo.ResourceType"
+      optional :display_name, :string, 3
+    end
+    add_message "google.cloud.assuredworkloads.v1beta1.Workload.SaaEnrollmentResponse" do
+      proto3_optional :setup_status, :enum, 1, "google.cloud.assuredworkloads.v1beta1.Workload.SaaEnrollmentResponse.SetupState"
+      repeated :setup_errors, :enum, 2, "google.cloud.assuredworkloads.v1beta1.Workload.SaaEnrollmentResponse.SetupError"
+    end
+    add_enum "google.cloud.assuredworkloads.v1beta1.Workload.SaaEnrollmentResponse.SetupState" do
+      value :SETUP_STATE_UNSPECIFIED, 0
+      value :STATUS_PENDING, 1
+      value :STATUS_COMPLETE, 2
+    end
+    add_enum "google.cloud.assuredworkloads.v1beta1.Workload.SaaEnrollmentResponse.SetupError" do
+      value :SETUP_ERROR_UNSPECIFIED, 0
+      value :ERROR_INVALID_BASE_SETUP, 1
+      value :ERROR_MISSING_EXTERNAL_SIGNING_KEY, 2
+      value :ERROR_NOT_ALL_SERVICES_ENROLLED, 3
+      value :ERROR_SETUP_CHECK_FAILED, 4
     end
     add_enum "google.cloud.assuredworkloads.v1beta1.Workload.ComplianceRegime" do
       value :COMPLIANCE_REGIME_UNSPECIFIED, 0
@@ -98,12 +120,19 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       value :HIPAA, 6
       value :HITRUST, 7
       value :EU_REGIONS_AND_SUPPORT, 8
+      value :CA_REGIONS_AND_SUPPORT, 9
+    end
+    add_enum "google.cloud.assuredworkloads.v1beta1.Workload.KajEnrollmentState" do
+      value :KAJ_ENROLLMENT_STATE_UNSPECIFIED, 0
+      value :KAJ_ENROLLMENT_STATE_PENDING, 1
+      value :KAJ_ENROLLMENT_STATE_COMPLETE, 2
     end
     add_message "google.cloud.assuredworkloads.v1beta1.CreateWorkloadOperationMetadata" do
       optional :create_time, :message, 1, "google.protobuf.Timestamp"
       optional :display_name, :string, 2
       optional :parent, :string, 3
       optional :compliance_regime, :enum, 4, "google.cloud.assuredworkloads.v1beta1.Workload.ComplianceRegime"
+      repeated :resource_settings, :message, 5, "google.cloud.assuredworkloads.v1beta1.Workload.ResourceSettings"
     end
   end
 end
@@ -127,7 +156,11 @@ module Google
         Workload::FedrampHighSettings = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.Workload.FedrampHighSettings").msgclass
         Workload::FedrampModerateSettings = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.Workload.FedrampModerateSettings").msgclass
         Workload::ResourceSettings = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.Workload.ResourceSettings").msgclass
+        Workload::SaaEnrollmentResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.Workload.SaaEnrollmentResponse").msgclass
+        Workload::SaaEnrollmentResponse::SetupState = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.Workload.SaaEnrollmentResponse.SetupState").enummodule
+        Workload::SaaEnrollmentResponse::SetupError = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.Workload.SaaEnrollmentResponse.SetupError").enummodule
         Workload::ComplianceRegime = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.Workload.ComplianceRegime").enummodule
+        Workload::KajEnrollmentState = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.Workload.KajEnrollmentState").enummodule
         CreateWorkloadOperationMetadata = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.CreateWorkloadOperationMetadata").msgclass
       end
     end

data/lib/google/cloud/assuredworkloads/v1beta1/assuredworkloads_v1beta1_services_pb.rb

@@ -27,7 +27,7 @@ module Google
           # Service to manage AssuredWorkloads.
           class Service
 
-            include GRPC::GenericService
+            include ::GRPC::GenericService
 
             self.marshal_class_method = :encode
             self.unmarshal_class_method = :decode

data/proto_docs/google/api/resource.rb

@@ -33,11 +33,7 @@ module Google
     #       // For Kubernetes resources, the format is {api group}/{kind}.
     #       option (google.api.resource) = {
     #         type: "pubsub.googleapis.com/Topic"
-    #         name_descriptor: {
-    #           pattern: "projects/{project}/topics/{topic}"
-    #           parent_type: "cloudresourcemanager.googleapis.com/Project"
-    #           parent_name_extractor: "projects/{project}"
-    #         }
+    #         pattern: "projects/{project}/topics/{topic}"
     #       };
     #     }
     #
@@ -45,10 +41,7 @@ module Google
     #
     #     resources:
     #     - type: "pubsub.googleapis.com/Topic"
-    #       name_descriptor:
-    #         - pattern: "projects/{project}/topics/{topic}"
-    #           parent_type: "cloudresourcemanager.googleapis.com/Project"
-    #           parent_name_extractor: "projects/{project}"
+    #       pattern: "projects/{project}/topics/{topic}"
     #
     # Sometimes, resources have multiple patterns, typically because they can
     # live under multiple parents.
@@ -58,26 +51,10 @@ module Google
     #     message LogEntry {
     #       option (google.api.resource) = {
     #         type: "logging.googleapis.com/LogEntry"
-    #         name_descriptor: {
-    #           pattern: "projects/{project}/logs/{log}"
-    #           parent_type: "cloudresourcemanager.googleapis.com/Project"
-    #           parent_name_extractor: "projects/{project}"
-    #         }
-    #         name_descriptor: {
-    #           pattern: "folders/{folder}/logs/{log}"
-    #           parent_type: "cloudresourcemanager.googleapis.com/Folder"
-    #           parent_name_extractor: "folders/{folder}"
-    #         }
-    #         name_descriptor: {
-    #           pattern: "organizations/{organization}/logs/{log}"
-    #           parent_type: "cloudresourcemanager.googleapis.com/Organization"
-    #           parent_name_extractor: "organizations/{organization}"
-    #         }
-    #         name_descriptor: {
-    #           pattern: "billingAccounts/{billing_account}/logs/{log}"
-    #           parent_type: "billing.googleapis.com/BillingAccount"
-    #           parent_name_extractor: "billingAccounts/{billing_account}"
-    #         }
+    #         pattern: "projects/{project}/logs/{log}"
+    #         pattern: "folders/{folder}/logs/{log}"
+    #         pattern: "organizations/{organization}/logs/{log}"
+    #         pattern: "billingAccounts/{billing_account}/logs/{log}"
     #       };
     #     }
     #
@@ -85,48 +62,10 @@ module Google
     #
     #     resources:
     #     - type: 'logging.googleapis.com/LogEntry'
-    #       name_descriptor:
-    #         - pattern: "projects/{project}/logs/{log}"
-    #           parent_type: "cloudresourcemanager.googleapis.com/Project"
-    #           parent_name_extractor: "projects/{project}"
-    #         - pattern: "folders/{folder}/logs/{log}"
-    #           parent_type: "cloudresourcemanager.googleapis.com/Folder"
-    #           parent_name_extractor: "folders/{folder}"
-    #         - pattern: "organizations/{organization}/logs/{log}"
-    #           parent_type: "cloudresourcemanager.googleapis.com/Organization"
-    #           parent_name_extractor: "organizations/{organization}"
-    #         - pattern: "billingAccounts/{billing_account}/logs/{log}"
-    #           parent_type: "billing.googleapis.com/BillingAccount"
-    #           parent_name_extractor: "billingAccounts/{billing_account}"
-    #
-    # For flexible resources, the resource name doesn't contain parent names, but
-    # the resource itself has parents for policy evaluation.
-    #
-    # Example:
-    #
-    #     message Shelf {
-    #       option (google.api.resource) = {
-    #         type: "library.googleapis.com/Shelf"
-    #         name_descriptor: {
-    #           pattern: "shelves/{shelf}"
-    #           parent_type: "cloudresourcemanager.googleapis.com/Project"
-    #         }
-    #         name_descriptor: {
-    #           pattern: "shelves/{shelf}"
-    #           parent_type: "cloudresourcemanager.googleapis.com/Folder"
-    #         }
-    #       };
-    #     }
-    #
-    # The ResourceDescriptor Yaml config will look like:
-    #
-    #     resources:
-    #     - type: 'library.googleapis.com/Shelf'
-    #       name_descriptor:
-    #         - pattern: "shelves/{shelf}"
-    #           parent_type: "cloudresourcemanager.googleapis.com/Project"
-    #         - pattern: "shelves/{shelf}"
-    #           parent_type: "cloudresourcemanager.googleapis.com/Folder"
+    #       pattern: "projects/{project}/logs/{log}"
+    #       pattern: "folders/{folder}/logs/{log}"
+    #       pattern: "organizations/{organization}/logs/{log}"
+    #       pattern: "billingAccounts/{billing_account}/logs/{log}"
     # @!attribute [rw] type
     #   @return [::String]
     #     The resource type. It must be in the format of

data/proto_docs/google/cloud/assuredworkloads/v1beta1/assuredworkloads_v1beta1.rb

@@ -31,8 +31,8 @@ module Google
         #     Required. Assured Workload to create
         # @!attribute [rw] external_id
         #   @return [::String]
-        #     Optional. A identifier associated with the workload and underlying projects which
-        #     allows for the break down of billing costs for a workload. The value
+        #     Optional. A identifier associated with the workload and underlying projects
+        #     which allows for the break down of billing costs for a workload. The value
         #     provided for the identifier will add a label to the workload and contained
         #     projects with the identifier as the value.
         class CreateWorkloadRequest
@@ -73,8 +73,8 @@ module Google
         # Request for fetching a workload.
         # @!attribute [rw] name
         #   @return [::String]
-        #     Required. The resource name of the Workload to fetch. This is the workloads's
-        #     relative path in the API, formatted as
+        #     Required. The resource name of the Workload to fetch. This is the
+        #     workloads's relative path in the API, formatted as
         #     "organizations/\\{organization_id}/locations/\\{location_id}/workloads/\\{workload_id}".
         #     For example,
         #     "organizations/123/locations/us-east1/workloads/assured-workload-1".
@@ -148,7 +148,7 @@ module Google
         #     Output only. Immutable. The Workload creation timestamp.
         # @!attribute [rw] billing_account
         #   @return [::String]
-        #     Required. Input only. The billing account used for the resources which are
+        #     Input only. The billing account used for the resources which are
         #     direct children of workload. This billing account is initially associated
         #     with the resources created as part of Workload creation.
         #     After the initial creation of these resources, the customer can change
@@ -158,16 +158,20 @@ module Google
         #     `billingAccounts/012345-567890-ABCDEF`.
         # @!attribute [rw] il4_settings
         #   @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::IL4Settings]
-        #     Required. Input only. Immutable. Settings specific to resources needed for IL4.
+        #     Required. Input only. Immutable. Settings specific to resources needed
+        #     for IL4.
         # @!attribute [rw] cjis_settings
         #   @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::CJISSettings]
-        #     Required. Input only. Immutable. Settings specific to resources needed for CJIS.
+        #     Required. Input only. Immutable. Settings specific to resources needed
+        #     for CJIS.
         # @!attribute [rw] fedramp_high_settings
         #   @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::FedrampHighSettings]
-        #     Required. Input only. Immutable. Settings specific to resources needed for FedRAMP High.
+        #     Required. Input only. Immutable. Settings specific to resources needed
+        #     for FedRAMP High.
         # @!attribute [rw] fedramp_moderate_settings
         #   @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::FedrampModerateSettings]
-        #     Required. Input only. Immutable. Settings specific to resources needed for FedRAMP Moderate.
+        #     Required. Input only. Immutable. Settings specific to resources needed
+        #     for FedRAMP Moderate.
         # @!attribute [rw] etag
         #   @return [::String]
         #     Optional. ETag of the workload, it is calculated on the basis
@@ -177,23 +181,34 @@ module Google
         #     Optional. Labels applied to the workload.
         # @!attribute [rw] provisioned_resources_parent
         #   @return [::String]
-        #     Input only. The parent resource for the resources managed by this Assured Workload. May
-        #     be either an organization or a folder. Must be the same or a child of the
+        #     Input only. The parent resource for the resources managed by this Assured
+        #     Workload. May be either empty or a folder resource which is a child of the
         #     Workload parent. If not specified all resources are created under the
-        #     Workload parent.
-        #     Formats:
+        #     parent organization.
+        #     Format:
         #     folders/\\{folder_id}
-        #     organizations/\\{organization_id}
         # @!attribute [rw] kms_settings
         #   @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::KMSSettings]
-        #     Input only. Settings used to create a CMEK crypto key. When set a project with a KMS
-        #     CMEK key is provisioned. This field is mandatory for a subset of Compliance
-        #     Regimes.
+        #     Input only. Settings used to create a CMEK crypto key. When set a project
+        #     with a KMS CMEK key is provisioned. This field is mandatory for a subset of
+        #     Compliance Regimes.
         # @!attribute [rw] resource_settings
         #   @return [::Array<::Google::Cloud::AssuredWorkloads::V1beta1::Workload::ResourceSettings>]
-        #     Input only. Resource properties that are used to customize workload resources.
-        #     These properties (such as custom project id) will be used to create
-        #     workload resources if possible. This field is optional.
+        #     Input only. Resource properties that are used to customize workload
+        #     resources. These properties (such as custom project id) will be used to
+        #     create workload resources if possible. This field is optional.
+        # @!attribute [r] kaj_enrollment_state
+        #   @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::KajEnrollmentState]
+        #     Output only. Represents the KAJ enrollment state of the given workload.
+        # @!attribute [rw] enable_sovereign_controls
+        #   @return [::Boolean]
+        #     Optional. Indicates the sovereignty status of the given workload.
+        #     Currently meant to be used by Europe/Canada customers.
+        # @!attribute [r] saa_enrollment_response
+        #   @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::SaaEnrollmentResponse]
+        #     Output only. Represents the SAA enrollment response of the given workload.
+        #     SAA enrollment response is queried during GetWorkload call.
+        #     In failure cases, user friendly error message is shown in SAA details page.
         class Workload
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -215,24 +230,32 @@ module Google
               # Unknown resource type.
               RESOURCE_TYPE_UNSPECIFIED = 0
 
-              # Consumer project.
+              # Deprecated. Existing workloads will continue to support this, but new
+              # CreateWorkloadRequests should not specify this as an input value.
               CONSUMER_PROJECT = 1
 
+              # Consumer Folder.
+              CONSUMER_FOLDER = 4
+
               # Consumer project containing encryption keys.
               ENCRYPTION_KEYS_PROJECT = 2
+
+              # Keyring resource that hosts encryption keys.
+              KEYRING = 3
             end
           end
 
           # Settings specific to the Key Management Service.
           # @!attribute [rw] next_rotation_time
           #   @return [::Google::Protobuf::Timestamp]
-          #     Required. Input only. Immutable. The time at which the Key Management Service will automatically create a
-          #     new version of the crypto key and mark it as the primary.
+          #     Required. Input only. Immutable. The time at which the Key Management
+          #     Service will automatically create a new version of the crypto key and
+          #     mark it as the primary.
           # @!attribute [rw] rotation_period
           #   @return [::Google::Protobuf::Duration]
-          #     Required. Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key
-          #     Management Service automatically rotates a key. Must be at least 24 hours
-          #     and at most 876,000 hours.
+          #     Required. Input only. Immutable. [next_rotation_time] will be advanced by
+          #     this period when the Key Management Service automatically rotates a key.
+          #     Must be at least 24 hours and at most 876,000 hours.
           class KMSSettings
             include ::Google::Protobuf::MessageExts
             extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -241,7 +264,8 @@ module Google
           # Settings specific to resources needed for IL4.
           # @!attribute [rw] kms_settings
           #   @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::KMSSettings]
-          #     Required. Input only. Immutable. Settings used to create a CMEK crypto key.
+          #     Required. Input only. Immutable. Settings used to create a CMEK crypto
+          #     key.
           class IL4Settings
             include ::Google::Protobuf::MessageExts
             extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -250,7 +274,8 @@ module Google
           # Settings specific to resources needed for CJIS.
           # @!attribute [rw] kms_settings
           #   @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::KMSSettings]
-          #     Required. Input only. Immutable. Settings used to create a CMEK crypto key.
+          #     Required. Input only. Immutable. Settings used to create a CMEK crypto
+          #     key.
           class CJISSettings
             include ::Google::Protobuf::MessageExts
             extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -259,7 +284,8 @@ module Google
           # Settings specific to resources needed for FedRAMP High.
           # @!attribute [rw] kms_settings
           #   @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::KMSSettings]
-          #     Required. Input only. Immutable. Settings used to create a CMEK crypto key.
+          #     Required. Input only. Immutable. Settings used to create a CMEK crypto
+          #     key.
           class FedrampHighSettings
             include ::Google::Protobuf::MessageExts
             extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -268,7 +294,8 @@ module Google
           # Settings specific to resources needed for FedRAMP Moderate.
           # @!attribute [rw] kms_settings
           #   @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::KMSSettings]
-          #     Required. Input only. Immutable. Settings used to create a CMEK crypto key.
+          #     Required. Input only. Immutable. Settings used to create a CMEK crypto
+          #     key.
           class FedrampModerateSettings
             include ::Google::Protobuf::MessageExts
             extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -285,11 +312,61 @@ module Google
           #     Indicates the type of resource. This field should be specified to
           #     correspond the id to the right project type (CONSUMER_PROJECT or
           #     ENCRYPTION_KEYS_PROJECT)
+          # @!attribute [rw] display_name
+          #   @return [::String]
+          #     User-assigned resource display name.
+          #     If not empty it will be used to create a resource with the specified
+          #     name.
           class ResourceSettings
             include ::Google::Protobuf::MessageExts
             extend ::Google::Protobuf::MessageExts::ClassMethods
           end
 
+          # Signed Access Approvals (SAA) enrollment response.
+          # @!attribute [rw] setup_status
+          #   @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::SaaEnrollmentResponse::SetupState]
+          #     Indicates SAA enrollment status of a given workload.
+          # @!attribute [rw] setup_errors
+          #   @return [::Array<::Google::Cloud::AssuredWorkloads::V1beta1::Workload::SaaEnrollmentResponse::SetupError>]
+          #     Indicates SAA enrollment setup error if any.
+          class SaaEnrollmentResponse
+            include ::Google::Protobuf::MessageExts
+            extend ::Google::Protobuf::MessageExts::ClassMethods
+
+            # Setup state of SAA enrollment.
+            module SetupState
+              # Unspecified.
+              SETUP_STATE_UNSPECIFIED = 0
+
+              # SAA enrollment pending.
+              STATUS_PENDING = 1
+
+              # SAA enrollment comopleted.
+              STATUS_COMPLETE = 2
+            end
+
+            # Setup error of SAA enrollment.
+            module SetupError
+              # Unspecified.
+              SETUP_ERROR_UNSPECIFIED = 0
+
+              # Invalid states for all customers, to be redirected to AA UI for
+              # additional details.
+              ERROR_INVALID_BASE_SETUP = 1
+
+              # Returned when there is not an EKM key configured.
+              ERROR_MISSING_EXTERNAL_SIGNING_KEY = 2
+
+              # Returned when there are no enrolled services or the customer is
+              # enrolled in CAA only for a subset of services.
+              ERROR_NOT_ALL_SERVICES_ENROLLED = 3
+
+              # Returned when exception was encountered during evaluation of other
+              # criteria.
+              ERROR_SETUP_CHECK_FAILED = 4
+            end
+          end
+
           # @!attribute [rw] key
           #   @return [::String]
           # @!attribute [rw] value
@@ -327,6 +404,21 @@ module Google
 
             # Assured Workloads For EU Regions and Support controls
             EU_REGIONS_AND_SUPPORT = 8
+
+            # Assured Workloads For Canada Regions and Support controls
+            CA_REGIONS_AND_SUPPORT = 9
+          end
+
+          # Key Access Justifications(KAJ) Enrollment State.
+          module KajEnrollmentState
+            # Default State for KAJ Enrollment.
+            KAJ_ENROLLMENT_STATE_UNSPECIFIED = 0
+
+            # Pending State for KAJ Enrollment.
+            KAJ_ENROLLMENT_STATE_PENDING = 1
+
+            # Complete State for KAJ Enrollment.
+            KAJ_ENROLLMENT_STATE_COMPLETE = 2
           end
         end
 
@@ -342,8 +434,12 @@ module Google
         #     Optional. The parent of the workload.
         # @!attribute [rw] compliance_regime
         #   @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::ComplianceRegime]
-        #     Optional. Compliance controls that should be applied to the resources managed by
-        #     the workload.
+        #     Optional. Compliance controls that should be applied to the resources
+        #     managed by the workload.
+        # @!attribute [rw] resource_settings
+        #   @return [::Array<::Google::Cloud::AssuredWorkloads::V1beta1::Workload::ResourceSettings>]
+        #     Optional. Resource properties in the input that are used for
+        #     creating/customizing workload resources.
         class CreateWorkloadOperationMetadata
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: google-cloud-assured_workloads-v1beta1
 version: !ruby/object:Gem::Version
-  version: 0.7.1
+  version: 0.9.1
 platform: ruby
 authors:
 - Google LLC
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-08-11 00:00:00.000000000 Z
+date: 2022-01-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: gapic-common
@@ -210,7 +210,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.2.17
+rubygems_version: 3.3.4
 signing_key: 
 specification_version: 4
 summary: API Client library for the Assured Workloads for Government V1beta1 API