google-cloud-assured_workloads-v1beta1 0.8.1 → 0.9.0

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 1e0a780eeabce7bf7b855b58fe63620614d2e3ee9b574a99e86d67dda315b48a
4
- data.tar.gz: 3b761ae99c0777b309153122e844814ad64816e61f7903f1d8a0ba052474b6bf
3
+ metadata.gz: 5b4db4bac7eca108bedc87f89ea7af55287894ad86791aea37705a0f26212f10
4
+ data.tar.gz: b18e8abfebe2ed59ba49e4b938af839f5e52cc2bbb762b0d511c32a6a01a298d
5
5
  SHA512:
6
- metadata.gz: 3e63d558c2cc7c51f1d20be20296930e92bbe9a6d5bb5cd4615ef1ea3161eb30b711f69a4fa40e5aa0e649d1aa72e96b9003bed0b5bf1d02ad0cbf24ea527d9f
7
- data.tar.gz: 2e7df0739af6f15a1417f8f69145c2e131a4e4f3e93822dd37445e794de58b8d648959ed986f01c3454f67e3f2db5e2c4fc43ef888edfe2495ed8baf0eca1eb8
6
+ metadata.gz: c2e337ba2c062dd1d7dc3aeb3a55ad16250c5d5f0f8dbc487d7cf86da02a2e7e50b6f39ea2e8388e825bfe191c0d5c5b1b4810ff2375531a53100d9362750cb0
7
+ data.tar.gz: 3dee983a8bce0bd141abd0c7a2bb39800fe377d9e9bbdd399c180562302c684385d3020e94470a55518b10edb6cb84c51caa3bc0e64042cb51d0a7b97246d02d
@@ -199,8 +199,8 @@ module Google
199
199
  # @param workload [::Google::Cloud::AssuredWorkloads::V1beta1::Workload, ::Hash]
200
200
  # Required. Assured Workload to create
201
201
  # @param external_id [::String]
202
- # Optional. A identifier associated with the workload and underlying projects which
203
- # allows for the break down of billing costs for a workload. The value
202
+ # Optional. A identifier associated with the workload and underlying projects
203
+ # which allows for the break down of billing costs for a workload. The value
204
204
  # provided for the identifier will add a label to the workload and contained
205
205
  # projects with the identifier as the value.
206
206
  #
@@ -480,8 +480,8 @@ module Google
480
480
  # the default parameter values, pass an empty Hash as a request object (see above).
481
481
  #
482
482
  # @param name [::String]
483
- # Required. The resource name of the Workload to fetch. This is the workloads's
484
- # relative path in the API, formatted as
483
+ # Required. The resource name of the Workload to fetch. This is the
484
+ # workloads's relative path in the API, formatted as
485
485
  # "organizations/\\{organization_id}/locations/\\{location_id}/workloads/\\{workload_id}".
486
486
  # For example,
487
487
  # "organizations/123/locations/us-east1/workloads/assured-workload-1".
@@ -21,7 +21,7 @@ module Google
21
21
  module Cloud
22
22
  module AssuredWorkloads
23
23
  module V1beta1
24
- VERSION = "0.8.1"
24
+ VERSION = "0.9.0"
25
25
  end
26
26
  end
27
27
  end
@@ -52,6 +52,9 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
52
52
  optional :provisioned_resources_parent, :string, 13
53
53
  optional :kms_settings, :message, 14, "google.cloud.assuredworkloads.v1beta1.Workload.KMSSettings"
54
54
  repeated :resource_settings, :message, 15, "google.cloud.assuredworkloads.v1beta1.Workload.ResourceSettings"
55
+ optional :kaj_enrollment_state, :enum, 17, "google.cloud.assuredworkloads.v1beta1.Workload.KajEnrollmentState"
56
+ optional :enable_sovereign_controls, :bool, 18
57
+ optional :saa_enrollment_response, :message, 20, "google.cloud.assuredworkloads.v1beta1.Workload.SaaEnrollmentResponse"
55
58
  oneof :compliance_regime_settings do
56
59
  optional :il4_settings, :message, 7, "google.cloud.assuredworkloads.v1beta1.Workload.IL4Settings"
57
60
  optional :cjis_settings, :message, 8, "google.cloud.assuredworkloads.v1beta1.Workload.CJISSettings"
@@ -91,6 +94,22 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
91
94
  optional :resource_type, :enum, 2, "google.cloud.assuredworkloads.v1beta1.Workload.ResourceInfo.ResourceType"
92
95
  optional :display_name, :string, 3
93
96
  end
97
+ add_message "google.cloud.assuredworkloads.v1beta1.Workload.SaaEnrollmentResponse" do
98
+ proto3_optional :setup_status, :enum, 1, "google.cloud.assuredworkloads.v1beta1.Workload.SaaEnrollmentResponse.SetupState"
99
+ repeated :setup_errors, :enum, 2, "google.cloud.assuredworkloads.v1beta1.Workload.SaaEnrollmentResponse.SetupError"
100
+ end
101
+ add_enum "google.cloud.assuredworkloads.v1beta1.Workload.SaaEnrollmentResponse.SetupState" do
102
+ value :SETUP_STATE_UNSPECIFIED, 0
103
+ value :STATUS_PENDING, 1
104
+ value :STATUS_COMPLETE, 2
105
+ end
106
+ add_enum "google.cloud.assuredworkloads.v1beta1.Workload.SaaEnrollmentResponse.SetupError" do
107
+ value :SETUP_ERROR_UNSPECIFIED, 0
108
+ value :ERROR_INVALID_BASE_SETUP, 1
109
+ value :ERROR_MISSING_EXTERNAL_SIGNING_KEY, 2
110
+ value :ERROR_NOT_ALL_SERVICES_ENROLLED, 3
111
+ value :ERROR_SETUP_CHECK_FAILED, 4
112
+ end
94
113
  add_enum "google.cloud.assuredworkloads.v1beta1.Workload.ComplianceRegime" do
95
114
  value :COMPLIANCE_REGIME_UNSPECIFIED, 0
96
115
  value :IL4, 1
@@ -103,6 +122,11 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
103
122
  value :EU_REGIONS_AND_SUPPORT, 8
104
123
  value :CA_REGIONS_AND_SUPPORT, 9
105
124
  end
125
+ add_enum "google.cloud.assuredworkloads.v1beta1.Workload.KajEnrollmentState" do
126
+ value :KAJ_ENROLLMENT_STATE_UNSPECIFIED, 0
127
+ value :KAJ_ENROLLMENT_STATE_PENDING, 1
128
+ value :KAJ_ENROLLMENT_STATE_COMPLETE, 2
129
+ end
106
130
  add_message "google.cloud.assuredworkloads.v1beta1.CreateWorkloadOperationMetadata" do
107
131
  optional :create_time, :message, 1, "google.protobuf.Timestamp"
108
132
  optional :display_name, :string, 2
@@ -132,7 +156,11 @@ module Google
132
156
  Workload::FedrampHighSettings = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.Workload.FedrampHighSettings").msgclass
133
157
  Workload::FedrampModerateSettings = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.Workload.FedrampModerateSettings").msgclass
134
158
  Workload::ResourceSettings = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.Workload.ResourceSettings").msgclass
159
+ Workload::SaaEnrollmentResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.Workload.SaaEnrollmentResponse").msgclass
160
+ Workload::SaaEnrollmentResponse::SetupState = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.Workload.SaaEnrollmentResponse.SetupState").enummodule
161
+ Workload::SaaEnrollmentResponse::SetupError = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.Workload.SaaEnrollmentResponse.SetupError").enummodule
135
162
  Workload::ComplianceRegime = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.Workload.ComplianceRegime").enummodule
163
+ Workload::KajEnrollmentState = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.Workload.KajEnrollmentState").enummodule
136
164
  CreateWorkloadOperationMetadata = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.CreateWorkloadOperationMetadata").msgclass
137
165
  end
138
166
  end
@@ -31,8 +31,8 @@ module Google
31
31
  # Required. Assured Workload to create
32
32
  # @!attribute [rw] external_id
33
33
  # @return [::String]
34
- # Optional. A identifier associated with the workload and underlying projects which
35
- # allows for the break down of billing costs for a workload. The value
34
+ # Optional. A identifier associated with the workload and underlying projects
35
+ # which allows for the break down of billing costs for a workload. The value
36
36
  # provided for the identifier will add a label to the workload and contained
37
37
  # projects with the identifier as the value.
38
38
  class CreateWorkloadRequest
@@ -73,8 +73,8 @@ module Google
73
73
  # Request for fetching a workload.
74
74
  # @!attribute [rw] name
75
75
  # @return [::String]
76
- # Required. The resource name of the Workload to fetch. This is the workloads's
77
- # relative path in the API, formatted as
76
+ # Required. The resource name of the Workload to fetch. This is the
77
+ # workloads's relative path in the API, formatted as
78
78
  # "organizations/\\{organization_id}/locations/\\{location_id}/workloads/\\{workload_id}".
79
79
  # For example,
80
80
  # "organizations/123/locations/us-east1/workloads/assured-workload-1".
@@ -158,16 +158,20 @@ module Google
158
158
  # `billingAccounts/012345-567890-ABCDEF`.
159
159
  # @!attribute [rw] il4_settings
160
160
  # @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::IL4Settings]
161
- # Required. Input only. Immutable. Settings specific to resources needed for IL4.
161
+ # Required. Input only. Immutable. Settings specific to resources needed
162
+ # for IL4.
162
163
  # @!attribute [rw] cjis_settings
163
164
  # @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::CJISSettings]
164
- # Required. Input only. Immutable. Settings specific to resources needed for CJIS.
165
+ # Required. Input only. Immutable. Settings specific to resources needed
166
+ # for CJIS.
165
167
  # @!attribute [rw] fedramp_high_settings
166
168
  # @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::FedrampHighSettings]
167
- # Required. Input only. Immutable. Settings specific to resources needed for FedRAMP High.
169
+ # Required. Input only. Immutable. Settings specific to resources needed
170
+ # for FedRAMP High.
168
171
  # @!attribute [rw] fedramp_moderate_settings
169
172
  # @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::FedrampModerateSettings]
170
- # Required. Input only. Immutable. Settings specific to resources needed for FedRAMP Moderate.
173
+ # Required. Input only. Immutable. Settings specific to resources needed
174
+ # for FedRAMP Moderate.
171
175
  # @!attribute [rw] etag
172
176
  # @return [::String]
173
177
  # Optional. ETag of the workload, it is calculated on the basis
@@ -177,22 +181,34 @@ module Google
177
181
  # Optional. Labels applied to the workload.
178
182
  # @!attribute [rw] provisioned_resources_parent
179
183
  # @return [::String]
180
- # Input only. The parent resource for the resources managed by this Assured Workload. May
181
- # be either empty or a folder resource which is a child of the
184
+ # Input only. The parent resource for the resources managed by this Assured
185
+ # Workload. May be either empty or a folder resource which is a child of the
182
186
  # Workload parent. If not specified all resources are created under the
183
187
  # parent organization.
184
188
  # Format:
185
189
  # folders/\\{folder_id}
186
190
  # @!attribute [rw] kms_settings
187
191
  # @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::KMSSettings]
188
- # Input only. Settings used to create a CMEK crypto key. When set a project with a KMS
189
- # CMEK key is provisioned. This field is mandatory for a subset of Compliance
190
- # Regimes.
192
+ # Input only. Settings used to create a CMEK crypto key. When set a project
193
+ # with a KMS CMEK key is provisioned. This field is mandatory for a subset of
194
+ # Compliance Regimes.
191
195
  # @!attribute [rw] resource_settings
192
196
  # @return [::Array<::Google::Cloud::AssuredWorkloads::V1beta1::Workload::ResourceSettings>]
193
- # Input only. Resource properties that are used to customize workload resources.
194
- # These properties (such as custom project id) will be used to create
195
- # workload resources if possible. This field is optional.
197
+ # Input only. Resource properties that are used to customize workload
198
+ # resources. These properties (such as custom project id) will be used to
199
+ # create workload resources if possible. This field is optional.
200
+ # @!attribute [r] kaj_enrollment_state
201
+ # @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::KajEnrollmentState]
202
+ # Output only. Represents the KAJ enrollment state of the given workload.
203
+ # @!attribute [rw] enable_sovereign_controls
204
+ # @return [::Boolean]
205
+ # Optional. Indicates the sovereignty status of the given workload.
206
+ # Currently meant to be used by Europe/Canada customers.
207
+ # @!attribute [r] saa_enrollment_response
208
+ # @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::SaaEnrollmentResponse]
209
+ # Output only. Represents the SAA enrollment response of the given workload.
210
+ # SAA enrollment response is queried during GetWorkload call.
211
+ # In failure cases, user friendly error message is shown in SAA details page.
196
212
  class Workload
197
213
  include ::Google::Protobuf::MessageExts
198
214
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -232,13 +248,14 @@ module Google
232
248
  # Settings specific to the Key Management Service.
233
249
  # @!attribute [rw] next_rotation_time
234
250
  # @return [::Google::Protobuf::Timestamp]
235
- # Required. Input only. Immutable. The time at which the Key Management Service will automatically create a
236
- # new version of the crypto key and mark it as the primary.
251
+ # Required. Input only. Immutable. The time at which the Key Management
252
+ # Service will automatically create a new version of the crypto key and
253
+ # mark it as the primary.
237
254
  # @!attribute [rw] rotation_period
238
255
  # @return [::Google::Protobuf::Duration]
239
- # Required. Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key
240
- # Management Service automatically rotates a key. Must be at least 24 hours
241
- # and at most 876,000 hours.
256
+ # Required. Input only. Immutable. [next_rotation_time] will be advanced by
257
+ # this period when the Key Management Service automatically rotates a key.
258
+ # Must be at least 24 hours and at most 876,000 hours.
242
259
  class KMSSettings
243
260
  include ::Google::Protobuf::MessageExts
244
261
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -247,7 +264,8 @@ module Google
247
264
  # Settings specific to resources needed for IL4.
248
265
  # @!attribute [rw] kms_settings
249
266
  # @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::KMSSettings]
250
- # Required. Input only. Immutable. Settings used to create a CMEK crypto key.
267
+ # Required. Input only. Immutable. Settings used to create a CMEK crypto
268
+ # key.
251
269
  class IL4Settings
252
270
  include ::Google::Protobuf::MessageExts
253
271
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -256,7 +274,8 @@ module Google
256
274
  # Settings specific to resources needed for CJIS.
257
275
  # @!attribute [rw] kms_settings
258
276
  # @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::KMSSettings]
259
- # Required. Input only. Immutable. Settings used to create a CMEK crypto key.
277
+ # Required. Input only. Immutable. Settings used to create a CMEK crypto
278
+ # key.
260
279
  class CJISSettings
261
280
  include ::Google::Protobuf::MessageExts
262
281
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -265,7 +284,8 @@ module Google
265
284
  # Settings specific to resources needed for FedRAMP High.
266
285
  # @!attribute [rw] kms_settings
267
286
  # @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::KMSSettings]
268
- # Required. Input only. Immutable. Settings used to create a CMEK crypto key.
287
+ # Required. Input only. Immutable. Settings used to create a CMEK crypto
288
+ # key.
269
289
  class FedrampHighSettings
270
290
  include ::Google::Protobuf::MessageExts
271
291
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -274,7 +294,8 @@ module Google
274
294
  # Settings specific to resources needed for FedRAMP Moderate.
275
295
  # @!attribute [rw] kms_settings
276
296
  # @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::KMSSettings]
277
- # Required. Input only. Immutable. Settings used to create a CMEK crypto key.
297
+ # Required. Input only. Immutable. Settings used to create a CMEK crypto
298
+ # key.
278
299
  class FedrampModerateSettings
279
300
  include ::Google::Protobuf::MessageExts
280
301
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -301,6 +322,51 @@ module Google
301
322
  extend ::Google::Protobuf::MessageExts::ClassMethods
302
323
  end
303
324
 
325
+ # Signed Access Approvals (SAA) enrollment response.
326
+ # @!attribute [rw] setup_status
327
+ # @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::SaaEnrollmentResponse::SetupState]
328
+ # Indicates SAA enrollment status of a given workload.
329
+ # @!attribute [rw] setup_errors
330
+ # @return [::Array<::Google::Cloud::AssuredWorkloads::V1beta1::Workload::SaaEnrollmentResponse::SetupError>]
331
+ # Indicates SAA enrollment setup error if any.
332
+ class SaaEnrollmentResponse
333
+ include ::Google::Protobuf::MessageExts
334
+ extend ::Google::Protobuf::MessageExts::ClassMethods
335
+
336
+ # Setup state of SAA enrollment.
337
+ module SetupState
338
+ # Unspecified.
339
+ SETUP_STATE_UNSPECIFIED = 0
340
+
341
+ # SAA enrollment pending.
342
+ STATUS_PENDING = 1
343
+
344
+ # SAA enrollment comopleted.
345
+ STATUS_COMPLETE = 2
346
+ end
347
+
348
+ # Setup error of SAA enrollment.
349
+ module SetupError
350
+ # Unspecified.
351
+ SETUP_ERROR_UNSPECIFIED = 0
352
+
353
+ # Invalid states for all customers, to be redirected to AA UI for
354
+ # additional details.
355
+ ERROR_INVALID_BASE_SETUP = 1
356
+
357
+ # Returned when there is not an EKM key configured.
358
+ ERROR_MISSING_EXTERNAL_SIGNING_KEY = 2
359
+
360
+ # Returned when there are no enrolled services or the customer is
361
+ # enrolled in CAA only for a subset of services.
362
+ ERROR_NOT_ALL_SERVICES_ENROLLED = 3
363
+
364
+ # Returned when exception was encountered during evaluation of other
365
+ # criteria.
366
+ ERROR_SETUP_CHECK_FAILED = 4
367
+ end
368
+ end
369
+
304
370
  # @!attribute [rw] key
305
371
  # @return [::String]
306
372
  # @!attribute [rw] value
@@ -342,6 +408,18 @@ module Google
342
408
  # Assured Workloads For Canada Regions and Support controls
343
409
  CA_REGIONS_AND_SUPPORT = 9
344
410
  end
411
+
412
+ # Key Access Justifications(KAJ) Enrollment State.
413
+ module KajEnrollmentState
414
+ # Default State for KAJ Enrollment.
415
+ KAJ_ENROLLMENT_STATE_UNSPECIFIED = 0
416
+
417
+ # Pending State for KAJ Enrollment.
418
+ KAJ_ENROLLMENT_STATE_PENDING = 1
419
+
420
+ # Complete State for KAJ Enrollment.
421
+ KAJ_ENROLLMENT_STATE_COMPLETE = 2
422
+ end
345
423
  end
346
424
 
347
425
  # Operation metadata to give request details of CreateWorkload.
@@ -356,12 +434,12 @@ module Google
356
434
  # Optional. The parent of the workload.
357
435
  # @!attribute [rw] compliance_regime
358
436
  # @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::ComplianceRegime]
359
- # Optional. Compliance controls that should be applied to the resources managed by
360
- # the workload.
437
+ # Optional. Compliance controls that should be applied to the resources
438
+ # managed by the workload.
361
439
  # @!attribute [rw] resource_settings
362
440
  # @return [::Array<::Google::Cloud::AssuredWorkloads::V1beta1::Workload::ResourceSettings>]
363
- # Optional. Resource properties in the input that are used for creating/customizing
364
- # workload resources.
441
+ # Optional. Resource properties in the input that are used for
442
+ # creating/customizing workload resources.
365
443
  class CreateWorkloadOperationMetadata
366
444
  include ::Google::Protobuf::MessageExts
367
445
  extend ::Google::Protobuf::MessageExts::ClassMethods
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: google-cloud-assured_workloads-v1beta1
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.8.1
4
+ version: 0.9.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Google LLC
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2021-11-08 00:00:00.000000000 Z
11
+ date: 2021-12-10 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: gapic-common