google-cloud-assured_workloads-v1beta1 0.8.1 → 0.9.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 1e0a780eeabce7bf7b855b58fe63620614d2e3ee9b574a99e86d67dda315b48a
4
- data.tar.gz: 3b761ae99c0777b309153122e844814ad64816e61f7903f1d8a0ba052474b6bf
3
+ metadata.gz: 5b4db4bac7eca108bedc87f89ea7af55287894ad86791aea37705a0f26212f10
4
+ data.tar.gz: b18e8abfebe2ed59ba49e4b938af839f5e52cc2bbb762b0d511c32a6a01a298d
5
5
  SHA512:
6
- metadata.gz: 3e63d558c2cc7c51f1d20be20296930e92bbe9a6d5bb5cd4615ef1ea3161eb30b711f69a4fa40e5aa0e649d1aa72e96b9003bed0b5bf1d02ad0cbf24ea527d9f
7
- data.tar.gz: 2e7df0739af6f15a1417f8f69145c2e131a4e4f3e93822dd37445e794de58b8d648959ed986f01c3454f67e3f2db5e2c4fc43ef888edfe2495ed8baf0eca1eb8
6
+ metadata.gz: c2e337ba2c062dd1d7dc3aeb3a55ad16250c5d5f0f8dbc487d7cf86da02a2e7e50b6f39ea2e8388e825bfe191c0d5c5b1b4810ff2375531a53100d9362750cb0
7
+ data.tar.gz: 3dee983a8bce0bd141abd0c7a2bb39800fe377d9e9bbdd399c180562302c684385d3020e94470a55518b10edb6cb84c51caa3bc0e64042cb51d0a7b97246d02d
@@ -199,8 +199,8 @@ module Google
199
199
  # @param workload [::Google::Cloud::AssuredWorkloads::V1beta1::Workload, ::Hash]
200
200
  # Required. Assured Workload to create
201
201
  # @param external_id [::String]
202
- # Optional. A identifier associated with the workload and underlying projects which
203
- # allows for the break down of billing costs for a workload. The value
202
+ # Optional. A identifier associated with the workload and underlying projects
203
+ # which allows for the break down of billing costs for a workload. The value
204
204
  # provided for the identifier will add a label to the workload and contained
205
205
  # projects with the identifier as the value.
206
206
  #
@@ -480,8 +480,8 @@ module Google
480
480
  # the default parameter values, pass an empty Hash as a request object (see above).
481
481
  #
482
482
  # @param name [::String]
483
- # Required. The resource name of the Workload to fetch. This is the workloads's
484
- # relative path in the API, formatted as
483
+ # Required. The resource name of the Workload to fetch. This is the
484
+ # workloads's relative path in the API, formatted as
485
485
  # "organizations/\\{organization_id}/locations/\\{location_id}/workloads/\\{workload_id}".
486
486
  # For example,
487
487
  # "organizations/123/locations/us-east1/workloads/assured-workload-1".
@@ -21,7 +21,7 @@ module Google
21
21
  module Cloud
22
22
  module AssuredWorkloads
23
23
  module V1beta1
24
- VERSION = "0.8.1"
24
+ VERSION = "0.9.0"
25
25
  end
26
26
  end
27
27
  end
@@ -52,6 +52,9 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
52
52
  optional :provisioned_resources_parent, :string, 13
53
53
  optional :kms_settings, :message, 14, "google.cloud.assuredworkloads.v1beta1.Workload.KMSSettings"
54
54
  repeated :resource_settings, :message, 15, "google.cloud.assuredworkloads.v1beta1.Workload.ResourceSettings"
55
+ optional :kaj_enrollment_state, :enum, 17, "google.cloud.assuredworkloads.v1beta1.Workload.KajEnrollmentState"
56
+ optional :enable_sovereign_controls, :bool, 18
57
+ optional :saa_enrollment_response, :message, 20, "google.cloud.assuredworkloads.v1beta1.Workload.SaaEnrollmentResponse"
55
58
  oneof :compliance_regime_settings do
56
59
  optional :il4_settings, :message, 7, "google.cloud.assuredworkloads.v1beta1.Workload.IL4Settings"
57
60
  optional :cjis_settings, :message, 8, "google.cloud.assuredworkloads.v1beta1.Workload.CJISSettings"
@@ -91,6 +94,22 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
91
94
  optional :resource_type, :enum, 2, "google.cloud.assuredworkloads.v1beta1.Workload.ResourceInfo.ResourceType"
92
95
  optional :display_name, :string, 3
93
96
  end
97
+ add_message "google.cloud.assuredworkloads.v1beta1.Workload.SaaEnrollmentResponse" do
98
+ proto3_optional :setup_status, :enum, 1, "google.cloud.assuredworkloads.v1beta1.Workload.SaaEnrollmentResponse.SetupState"
99
+ repeated :setup_errors, :enum, 2, "google.cloud.assuredworkloads.v1beta1.Workload.SaaEnrollmentResponse.SetupError"
100
+ end
101
+ add_enum "google.cloud.assuredworkloads.v1beta1.Workload.SaaEnrollmentResponse.SetupState" do
102
+ value :SETUP_STATE_UNSPECIFIED, 0
103
+ value :STATUS_PENDING, 1
104
+ value :STATUS_COMPLETE, 2
105
+ end
106
+ add_enum "google.cloud.assuredworkloads.v1beta1.Workload.SaaEnrollmentResponse.SetupError" do
107
+ value :SETUP_ERROR_UNSPECIFIED, 0
108
+ value :ERROR_INVALID_BASE_SETUP, 1
109
+ value :ERROR_MISSING_EXTERNAL_SIGNING_KEY, 2
110
+ value :ERROR_NOT_ALL_SERVICES_ENROLLED, 3
111
+ value :ERROR_SETUP_CHECK_FAILED, 4
112
+ end
94
113
  add_enum "google.cloud.assuredworkloads.v1beta1.Workload.ComplianceRegime" do
95
114
  value :COMPLIANCE_REGIME_UNSPECIFIED, 0
96
115
  value :IL4, 1
@@ -103,6 +122,11 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
103
122
  value :EU_REGIONS_AND_SUPPORT, 8
104
123
  value :CA_REGIONS_AND_SUPPORT, 9
105
124
  end
125
+ add_enum "google.cloud.assuredworkloads.v1beta1.Workload.KajEnrollmentState" do
126
+ value :KAJ_ENROLLMENT_STATE_UNSPECIFIED, 0
127
+ value :KAJ_ENROLLMENT_STATE_PENDING, 1
128
+ value :KAJ_ENROLLMENT_STATE_COMPLETE, 2
129
+ end
106
130
  add_message "google.cloud.assuredworkloads.v1beta1.CreateWorkloadOperationMetadata" do
107
131
  optional :create_time, :message, 1, "google.protobuf.Timestamp"
108
132
  optional :display_name, :string, 2
@@ -132,7 +156,11 @@ module Google
132
156
  Workload::FedrampHighSettings = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.Workload.FedrampHighSettings").msgclass
133
157
  Workload::FedrampModerateSettings = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.Workload.FedrampModerateSettings").msgclass
134
158
  Workload::ResourceSettings = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.Workload.ResourceSettings").msgclass
159
+ Workload::SaaEnrollmentResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.Workload.SaaEnrollmentResponse").msgclass
160
+ Workload::SaaEnrollmentResponse::SetupState = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.Workload.SaaEnrollmentResponse.SetupState").enummodule
161
+ Workload::SaaEnrollmentResponse::SetupError = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.Workload.SaaEnrollmentResponse.SetupError").enummodule
135
162
  Workload::ComplianceRegime = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.Workload.ComplianceRegime").enummodule
163
+ Workload::KajEnrollmentState = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.Workload.KajEnrollmentState").enummodule
136
164
  CreateWorkloadOperationMetadata = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.CreateWorkloadOperationMetadata").msgclass
137
165
  end
138
166
  end
@@ -31,8 +31,8 @@ module Google
31
31
  # Required. Assured Workload to create
32
32
  # @!attribute [rw] external_id
33
33
  # @return [::String]
34
- # Optional. A identifier associated with the workload and underlying projects which
35
- # allows for the break down of billing costs for a workload. The value
34
+ # Optional. A identifier associated with the workload and underlying projects
35
+ # which allows for the break down of billing costs for a workload. The value
36
36
  # provided for the identifier will add a label to the workload and contained
37
37
  # projects with the identifier as the value.
38
38
  class CreateWorkloadRequest
@@ -73,8 +73,8 @@ module Google
73
73
  # Request for fetching a workload.
74
74
  # @!attribute [rw] name
75
75
  # @return [::String]
76
- # Required. The resource name of the Workload to fetch. This is the workloads's
77
- # relative path in the API, formatted as
76
+ # Required. The resource name of the Workload to fetch. This is the
77
+ # workloads's relative path in the API, formatted as
78
78
  # "organizations/\\{organization_id}/locations/\\{location_id}/workloads/\\{workload_id}".
79
79
  # For example,
80
80
  # "organizations/123/locations/us-east1/workloads/assured-workload-1".
@@ -158,16 +158,20 @@ module Google
158
158
  # `billingAccounts/012345-567890-ABCDEF`.
159
159
  # @!attribute [rw] il4_settings
160
160
  # @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::IL4Settings]
161
- # Required. Input only. Immutable. Settings specific to resources needed for IL4.
161
+ # Required. Input only. Immutable. Settings specific to resources needed
162
+ # for IL4.
162
163
  # @!attribute [rw] cjis_settings
163
164
  # @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::CJISSettings]
164
- # Required. Input only. Immutable. Settings specific to resources needed for CJIS.
165
+ # Required. Input only. Immutable. Settings specific to resources needed
166
+ # for CJIS.
165
167
  # @!attribute [rw] fedramp_high_settings
166
168
  # @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::FedrampHighSettings]
167
- # Required. Input only. Immutable. Settings specific to resources needed for FedRAMP High.
169
+ # Required. Input only. Immutable. Settings specific to resources needed
170
+ # for FedRAMP High.
168
171
  # @!attribute [rw] fedramp_moderate_settings
169
172
  # @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::FedrampModerateSettings]
170
- # Required. Input only. Immutable. Settings specific to resources needed for FedRAMP Moderate.
173
+ # Required. Input only. Immutable. Settings specific to resources needed
174
+ # for FedRAMP Moderate.
171
175
  # @!attribute [rw] etag
172
176
  # @return [::String]
173
177
  # Optional. ETag of the workload, it is calculated on the basis
@@ -177,22 +181,34 @@ module Google
177
181
  # Optional. Labels applied to the workload.
178
182
  # @!attribute [rw] provisioned_resources_parent
179
183
  # @return [::String]
180
- # Input only. The parent resource for the resources managed by this Assured Workload. May
181
- # be either empty or a folder resource which is a child of the
184
+ # Input only. The parent resource for the resources managed by this Assured
185
+ # Workload. May be either empty or a folder resource which is a child of the
182
186
  # Workload parent. If not specified all resources are created under the
183
187
  # parent organization.
184
188
  # Format:
185
189
  # folders/\\{folder_id}
186
190
  # @!attribute [rw] kms_settings
187
191
  # @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::KMSSettings]
188
- # Input only. Settings used to create a CMEK crypto key. When set a project with a KMS
189
- # CMEK key is provisioned. This field is mandatory for a subset of Compliance
190
- # Regimes.
192
+ # Input only. Settings used to create a CMEK crypto key. When set a project
193
+ # with a KMS CMEK key is provisioned. This field is mandatory for a subset of
194
+ # Compliance Regimes.
191
195
  # @!attribute [rw] resource_settings
192
196
  # @return [::Array<::Google::Cloud::AssuredWorkloads::V1beta1::Workload::ResourceSettings>]
193
- # Input only. Resource properties that are used to customize workload resources.
194
- # These properties (such as custom project id) will be used to create
195
- # workload resources if possible. This field is optional.
197
+ # Input only. Resource properties that are used to customize workload
198
+ # resources. These properties (such as custom project id) will be used to
199
+ # create workload resources if possible. This field is optional.
200
+ # @!attribute [r] kaj_enrollment_state
201
+ # @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::KajEnrollmentState]
202
+ # Output only. Represents the KAJ enrollment state of the given workload.
203
+ # @!attribute [rw] enable_sovereign_controls
204
+ # @return [::Boolean]
205
+ # Optional. Indicates the sovereignty status of the given workload.
206
+ # Currently meant to be used by Europe/Canada customers.
207
+ # @!attribute [r] saa_enrollment_response
208
+ # @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::SaaEnrollmentResponse]
209
+ # Output only. Represents the SAA enrollment response of the given workload.
210
+ # SAA enrollment response is queried during GetWorkload call.
211
+ # In failure cases, user friendly error message is shown in SAA details page.
196
212
  class Workload
197
213
  include ::Google::Protobuf::MessageExts
198
214
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -232,13 +248,14 @@ module Google
232
248
  # Settings specific to the Key Management Service.
233
249
  # @!attribute [rw] next_rotation_time
234
250
  # @return [::Google::Protobuf::Timestamp]
235
- # Required. Input only. Immutable. The time at which the Key Management Service will automatically create a
236
- # new version of the crypto key and mark it as the primary.
251
+ # Required. Input only. Immutable. The time at which the Key Management
252
+ # Service will automatically create a new version of the crypto key and
253
+ # mark it as the primary.
237
254
  # @!attribute [rw] rotation_period
238
255
  # @return [::Google::Protobuf::Duration]
239
- # Required. Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key
240
- # Management Service automatically rotates a key. Must be at least 24 hours
241
- # and at most 876,000 hours.
256
+ # Required. Input only. Immutable. [next_rotation_time] will be advanced by
257
+ # this period when the Key Management Service automatically rotates a key.
258
+ # Must be at least 24 hours and at most 876,000 hours.
242
259
  class KMSSettings
243
260
  include ::Google::Protobuf::MessageExts
244
261
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -247,7 +264,8 @@ module Google
247
264
  # Settings specific to resources needed for IL4.
248
265
  # @!attribute [rw] kms_settings
249
266
  # @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::KMSSettings]
250
- # Required. Input only. Immutable. Settings used to create a CMEK crypto key.
267
+ # Required. Input only. Immutable. Settings used to create a CMEK crypto
268
+ # key.
251
269
  class IL4Settings
252
270
  include ::Google::Protobuf::MessageExts
253
271
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -256,7 +274,8 @@ module Google
256
274
  # Settings specific to resources needed for CJIS.
257
275
  # @!attribute [rw] kms_settings
258
276
  # @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::KMSSettings]
259
- # Required. Input only. Immutable. Settings used to create a CMEK crypto key.
277
+ # Required. Input only. Immutable. Settings used to create a CMEK crypto
278
+ # key.
260
279
  class CJISSettings
261
280
  include ::Google::Protobuf::MessageExts
262
281
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -265,7 +284,8 @@ module Google
265
284
  # Settings specific to resources needed for FedRAMP High.
266
285
  # @!attribute [rw] kms_settings
267
286
  # @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::KMSSettings]
268
- # Required. Input only. Immutable. Settings used to create a CMEK crypto key.
287
+ # Required. Input only. Immutable. Settings used to create a CMEK crypto
288
+ # key.
269
289
  class FedrampHighSettings
270
290
  include ::Google::Protobuf::MessageExts
271
291
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -274,7 +294,8 @@ module Google
274
294
  # Settings specific to resources needed for FedRAMP Moderate.
275
295
  # @!attribute [rw] kms_settings
276
296
  # @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::KMSSettings]
277
- # Required. Input only. Immutable. Settings used to create a CMEK crypto key.
297
+ # Required. Input only. Immutable. Settings used to create a CMEK crypto
298
+ # key.
278
299
  class FedrampModerateSettings
279
300
  include ::Google::Protobuf::MessageExts
280
301
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -301,6 +322,51 @@ module Google
301
322
  extend ::Google::Protobuf::MessageExts::ClassMethods
302
323
  end
303
324
 
325
+ # Signed Access Approvals (SAA) enrollment response.
326
+ # @!attribute [rw] setup_status
327
+ # @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::SaaEnrollmentResponse::SetupState]
328
+ # Indicates SAA enrollment status of a given workload.
329
+ # @!attribute [rw] setup_errors
330
+ # @return [::Array<::Google::Cloud::AssuredWorkloads::V1beta1::Workload::SaaEnrollmentResponse::SetupError>]
331
+ # Indicates SAA enrollment setup error if any.
332
+ class SaaEnrollmentResponse
333
+ include ::Google::Protobuf::MessageExts
334
+ extend ::Google::Protobuf::MessageExts::ClassMethods
335
+
336
+ # Setup state of SAA enrollment.
337
+ module SetupState
338
+ # Unspecified.
339
+ SETUP_STATE_UNSPECIFIED = 0
340
+
341
+ # SAA enrollment pending.
342
+ STATUS_PENDING = 1
343
+
344
+ # SAA enrollment comopleted.
345
+ STATUS_COMPLETE = 2
346
+ end
347
+
348
+ # Setup error of SAA enrollment.
349
+ module SetupError
350
+ # Unspecified.
351
+ SETUP_ERROR_UNSPECIFIED = 0
352
+
353
+ # Invalid states for all customers, to be redirected to AA UI for
354
+ # additional details.
355
+ ERROR_INVALID_BASE_SETUP = 1
356
+
357
+ # Returned when there is not an EKM key configured.
358
+ ERROR_MISSING_EXTERNAL_SIGNING_KEY = 2
359
+
360
+ # Returned when there are no enrolled services or the customer is
361
+ # enrolled in CAA only for a subset of services.
362
+ ERROR_NOT_ALL_SERVICES_ENROLLED = 3
363
+
364
+ # Returned when exception was encountered during evaluation of other
365
+ # criteria.
366
+ ERROR_SETUP_CHECK_FAILED = 4
367
+ end
368
+ end
369
+
304
370
  # @!attribute [rw] key
305
371
  # @return [::String]
306
372
  # @!attribute [rw] value
@@ -342,6 +408,18 @@ module Google
342
408
  # Assured Workloads For Canada Regions and Support controls
343
409
  CA_REGIONS_AND_SUPPORT = 9
344
410
  end
411
+
412
+ # Key Access Justifications(KAJ) Enrollment State.
413
+ module KajEnrollmentState
414
+ # Default State for KAJ Enrollment.
415
+ KAJ_ENROLLMENT_STATE_UNSPECIFIED = 0
416
+
417
+ # Pending State for KAJ Enrollment.
418
+ KAJ_ENROLLMENT_STATE_PENDING = 1
419
+
420
+ # Complete State for KAJ Enrollment.
421
+ KAJ_ENROLLMENT_STATE_COMPLETE = 2
422
+ end
345
423
  end
346
424
 
347
425
  # Operation metadata to give request details of CreateWorkload.
@@ -356,12 +434,12 @@ module Google
356
434
  # Optional. The parent of the workload.
357
435
  # @!attribute [rw] compliance_regime
358
436
  # @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::ComplianceRegime]
359
- # Optional. Compliance controls that should be applied to the resources managed by
360
- # the workload.
437
+ # Optional. Compliance controls that should be applied to the resources
438
+ # managed by the workload.
361
439
  # @!attribute [rw] resource_settings
362
440
  # @return [::Array<::Google::Cloud::AssuredWorkloads::V1beta1::Workload::ResourceSettings>]
363
- # Optional. Resource properties in the input that are used for creating/customizing
364
- # workload resources.
441
+ # Optional. Resource properties in the input that are used for
442
+ # creating/customizing workload resources.
365
443
  class CreateWorkloadOperationMetadata
366
444
  include ::Google::Protobuf::MessageExts
367
445
  extend ::Google::Protobuf::MessageExts::ClassMethods
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: google-cloud-assured_workloads-v1beta1
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.8.1
4
+ version: 0.9.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Google LLC
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2021-11-08 00:00:00.000000000 Z
11
+ date: 2021-12-10 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: gapic-common