google-cloud-assured_workloads-v1beta1 0.9.1 → 0.11.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6f8de4e4633a698f38df8c706ddda6ba01527ca5e876a104a7b6c1b84b452dc9
-  data.tar.gz: 5c476d3b009f3f277d9f0f99b2642989a642cd02c5ab450b5b9aad86ca9d95e5
+  metadata.gz: f479122bff9a64722a6a5f757e0cc4068534e9302a40b4d16397d19a5fffbb89
+  data.tar.gz: aea0101fb0ef24be06df4ebf439a87c19898fe77483c43498677a570deff46a2
 SHA512:
-  metadata.gz: be7e309d2edfa808b56c12d165420abcb5a84c81c35dd0380b31b61a6919e7c262f6e15e0cd04d12d29fa7c9f423babdea8bc551a4c125a842657bfbf78451a9
-  data.tar.gz: 7a3970109e164c258d2006cf812e88ec0952d4dbe0c53af7c83a08ec9ba44192f4089498a208f55fb63466c3a61730b8b0259f288c9ec523b9745da7e9e626e0
+  metadata.gz: 682c3223f92d0eb6b8c278fde284328e66ca2719e32c07808d02b0d743f9db91363bf9c58f80dd2b53aed0194b8e2825e229a1b1362359565764752409cf2bf4
+  data.tar.gz: 137603dbf018c4dd70a067d9a820956f1044a43815f9e4825703c903e08dc57baa5f67ece3e8fc869c3dd5772c5e1767ac18b3ed06f0f516d627104a2007cca3

data/README.md

@@ -37,7 +37,7 @@ request = ::Google::Cloud::AssuredWorkloads::V1beta1::CreateWorkloadRequest.new
 response = client.create_workload request
 ```
 
-View the [Client Library Documentation](https://googleapis.dev/ruby/google-cloud-assured_workloads-v1beta1/latest)
+View the [Client Library Documentation](https://cloud.google.com/ruby/docs/reference/google-cloud-assured_workloads-v1beta1/latest)
 for class and method documentation.
 
 See also the [Product Documentation](https://cloud.google.com/assured-workloads/)
@@ -69,16 +69,21 @@ module GRPC
 end
 ```
 
+
+## Google Cloud Samples
+
+To browse ready to use code samples check [Google Cloud Samples](https://cloud.google.com/docs/samples).
+
 ## Supported Ruby Versions
 
-This library is supported on Ruby 2.5+.
+This library is supported on Ruby 2.6+.
 
 Google provides official support for Ruby versions that are actively supported
 by Ruby Core—that is, Ruby versions that are either in normal maintenance or
-in security maintenance, and not end of life. Currently, this means Ruby 2.5
-and later. Older versions of Ruby _may_ still work, but are unsupported and not
-recommended. See https://www.ruby-lang.org/en/downloads/branches/ for details
-about the Ruby support schedule.
+in security maintenance, and not end of life. Older versions of Ruby _may_
+still work, but are unsupported and not recommended. See
+https://www.ruby-lang.org/en/downloads/branches/ for details about the Ruby
+support schedule.
 
 ## Which client should I use?
 

data/lib/google/cloud/assured_workloads/v1beta1/assured_workloads_service/client.rb

@@ -17,7 +17,7 @@
 # Auto-generated by gapic-generator-ruby. DO NOT EDIT!
 
 require "google/cloud/errors"
-require "google/cloud/assuredworkloads/v1beta1/assuredworkloads_v1beta1_pb"
+require "google/cloud/assuredworkloads/v1beta1/assuredworkloads_service_pb"
 
 module Google
   module Cloud
@@ -78,6 +78,11 @@ module Google
                   initial_delay: 0.2, max_delay: 30.0, multiplier: 1.3, retry_codes: [14]
                 }
 
+                default_config.rpcs.analyze_workload_move.timeout = 60.0
+                default_config.rpcs.analyze_workload_move.retry_policy = {
+                  initial_delay: 0.2, max_delay: 30.0, multiplier: 1.3, retry_codes: [14]
+                }
+
                 default_config.rpcs.list_workloads.timeout = 60.0
                 default_config.rpcs.list_workloads.retry_policy = {
                   initial_delay: 0.2, max_delay: 30.0, multiplier: 1.3, retry_codes: [14]
@@ -130,7 +135,7 @@ module Google
               # the gRPC module only when it's required.
               # See https://github.com/googleapis/toolkit/issues/446
               require "gapic/grpc"
-              require "google/cloud/assuredworkloads/v1beta1/assuredworkloads_v1beta1_services_pb"
+              require "google/cloud/assuredworkloads/v1beta1/assuredworkloads_service_services_pb"
 
               # Create the configuration object
               @config = Configuration.new Client.configure
@@ -200,8 +205,8 @@ module Google
             #   @param workload [::Google::Cloud::AssuredWorkloads::V1beta1::Workload, ::Hash]
             #     Required. Assured Workload to create
             #   @param external_id [::String]
-            #     Optional. A identifier associated with the workload and underlying projects
-            #     which allows for the break down of billing costs for a workload. The value
+            #     Optional. A identifier associated with the workload and underlying projects which
+            #     allows for the break down of billing costs for a workload. The value
             #     provided for the identifier will add a label to the workload and contained
             #     projects with the identifier as the value.
             #
@@ -300,7 +305,7 @@ module Google
             #
             #   @param workload [::Google::Cloud::AssuredWorkloads::V1beta1::Workload, ::Hash]
             #     Required. The workload to update.
-            #     The workload’s `name` field is used to identify the workload to be updated.
+            #     The workload's `name` field is used to identify the workload to be updated.
             #     Format:
             #     organizations/\\{org_id}/locations/\\{location_id}/workloads/\\{workload_id}
             #   @param update_mask [::Google::Protobuf::FieldMask, ::Hash]
@@ -370,10 +375,197 @@ module Google
               raise ::Google::Cloud::Error.from_error(e)
             end
 
+            ##
+            # Restrict the list of services allowed in the Workload environment.
+            # The current list of allowed services can be found at
+            # https://cloud.google.com/assured-workloads/docs/supported-products
+            # In addition to assuredworkloads.workload.update permission, the user should
+            # also have orgpolicy.policy.set permission on the folder resource
+            # to use this functionality.
+            #
+            # @overload restrict_allowed_services(request, options = nil)
+            #   Pass arguments to `restrict_allowed_services` via a request object, either of type
+            #   {::Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedServicesRequest} or an equivalent Hash.
+            #
+            #   @param request [::Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedServicesRequest, ::Hash]
+            #     A request object representing the call parameters. Required. To specify no
+            #     parameters, or to keep all the default parameter values, pass an empty Hash.
+            #   @param options [::Gapic::CallOptions, ::Hash]
+            #     Overrides the default settings for this call, e.g, timeout, retries, etc. Optional.
+            #
+            # @overload restrict_allowed_services(name: nil, restriction_type: nil)
+            #   Pass arguments to `restrict_allowed_services` via keyword arguments. Note that at
+            #   least one keyword argument is required. To specify no parameters, or to keep all
+            #   the default parameter values, pass an empty Hash as a request object (see above).
+            #
+            #   @param name [::String]
+            #     Required. The resource name of the Workload. This is the workloads's
+            #     relative path in the API, formatted as
+            #     "organizations/\\{organization_id}/locations/\\{location_id}/workloads/\\{workload_id}".
+            #     For example,
+            #     "organizations/123/locations/us-east1/workloads/assured-workload-1".
+            #   @param restriction_type [::Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedServicesRequest::RestrictionType]
+            #     Required. The type of restriction for using gcp services in the Workload environment.
+            #
+            # @yield [response, operation] Access the result along with the RPC operation
+            # @yieldparam response [::Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedServicesResponse]
+            # @yieldparam operation [::GRPC::ActiveCall::Operation]
+            #
+            # @return [::Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedServicesResponse]
+            #
+            # @raise [::Google::Cloud::Error] if the RPC is aborted.
+            #
+            # @example Basic example
+            #   require "google/cloud/assured_workloads/v1beta1"
+            #
+            #   # Create a client object. The client can be reused for multiple calls.
+            #   client = Google::Cloud::AssuredWorkloads::V1beta1::AssuredWorkloadsService::Client.new
+            #
+            #   # Create a request. To set request fields, pass in keyword arguments.
+            #   request = Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedServicesRequest.new
+            #
+            #   # Call the restrict_allowed_services method.
+            #   result = client.restrict_allowed_services request
+            #
+            #   # The returned object is of type Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedServicesResponse.
+            #   p result
+            #
+            def restrict_allowed_services request, options = nil
+              raise ::ArgumentError, "request must be provided" if request.nil?
+
+              request = ::Gapic::Protobuf.coerce request, to: ::Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedServicesRequest
+
+              # Converts hash and nil to an options object
+              options = ::Gapic::CallOptions.new(**options.to_h) if options.respond_to? :to_h
+
+              # Customize the options with defaults
+              metadata = @config.rpcs.restrict_allowed_services.metadata.to_h
+
+              # Set x-goog-api-client and x-goog-user-project headers
+              metadata[:"x-goog-api-client"] ||= ::Gapic::Headers.x_goog_api_client \
+                lib_name: @config.lib_name, lib_version: @config.lib_version,
+                gapic_version: ::Google::Cloud::AssuredWorkloads::V1beta1::VERSION
+              metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
+
+              options.apply_defaults timeout:      @config.rpcs.restrict_allowed_services.timeout,
+                                     metadata:     metadata,
+                                     retry_policy: @config.rpcs.restrict_allowed_services.retry_policy
+
+              options.apply_defaults timeout:      @config.timeout,
+                                     metadata:     @config.metadata,
+                                     retry_policy: @config.retry_policy
+
+              @assured_workloads_service_stub.call_rpc :restrict_allowed_services, request, options: options do |response, operation|
+                yield response, operation if block_given?
+                return response
+              end
+            rescue ::GRPC::BadStatus => e
+              raise ::Google::Cloud::Error.from_error(e)
+            end
+
+            ##
+            # Restrict the list of resources allowed in the Workload environment.
+            # The current list of allowed products can be found at
+            # https://cloud.google.com/assured-workloads/docs/supported-products
+            # In addition to assuredworkloads.workload.update permission, the user should
+            # also have orgpolicy.policy.set permission on the folder resource
+            # to use this functionality.
+            #
+            # @overload restrict_allowed_resources(request, options = nil)
+            #   Pass arguments to `restrict_allowed_resources` via a request object, either of type
+            #   {::Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedResourcesRequest} or an equivalent Hash.
+            #
+            #   @param request [::Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedResourcesRequest, ::Hash]
+            #     A request object representing the call parameters. Required. To specify no
+            #     parameters, or to keep all the default parameter values, pass an empty Hash.
+            #   @param options [::Gapic::CallOptions, ::Hash]
+            #     Overrides the default settings for this call, e.g, timeout, retries, etc. Optional.
+            #
+            # @overload restrict_allowed_resources(name: nil, restriction_type: nil)
+            #   Pass arguments to `restrict_allowed_resources` via keyword arguments. Note that at
+            #   least one keyword argument is required. To specify no parameters, or to keep all
+            #   the default parameter values, pass an empty Hash as a request object (see above).
+            #
+            #   @param name [::String]
+            #     Required. The resource name of the Workload. This is the workloads's
+            #     relative path in the API, formatted as
+            #     "organizations/\\{organization_id}/locations/\\{location_id}/workloads/\\{workload_id}".
+            #     For example,
+            #     "organizations/123/locations/us-east1/workloads/assured-workload-1".
+            #   @param restriction_type [::Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedResourcesRequest::RestrictionType]
+            #     Required. The type of restriction for using gcp products in the Workload environment.
+            #
+            # @yield [response, operation] Access the result along with the RPC operation
+            # @yieldparam response [::Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedResourcesResponse]
+            # @yieldparam operation [::GRPC::ActiveCall::Operation]
+            #
+            # @return [::Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedResourcesResponse]
+            #
+            # @raise [::Google::Cloud::Error] if the RPC is aborted.
+            #
+            # @example Basic example
+            #   require "google/cloud/assured_workloads/v1beta1"
+            #
+            #   # Create a client object. The client can be reused for multiple calls.
+            #   client = Google::Cloud::AssuredWorkloads::V1beta1::AssuredWorkloadsService::Client.new
+            #
+            #   # Create a request. To set request fields, pass in keyword arguments.
+            #   request = Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedResourcesRequest.new
+            #
+            #   # Call the restrict_allowed_resources method.
+            #   result = client.restrict_allowed_resources request
+            #
+            #   # The returned object is of type Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedResourcesResponse.
+            #   p result
+            #
+            def restrict_allowed_resources request, options = nil
+              raise ::ArgumentError, "request must be provided" if request.nil?
+
+              request = ::Gapic::Protobuf.coerce request, to: ::Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedResourcesRequest
+
+              # Converts hash and nil to an options object
+              options = ::Gapic::CallOptions.new(**options.to_h) if options.respond_to? :to_h
+
+              # Customize the options with defaults
+              metadata = @config.rpcs.restrict_allowed_resources.metadata.to_h
+
+              # Set x-goog-api-client and x-goog-user-project headers
+              metadata[:"x-goog-api-client"] ||= ::Gapic::Headers.x_goog_api_client \
+                lib_name: @config.lib_name, lib_version: @config.lib_version,
+                gapic_version: ::Google::Cloud::AssuredWorkloads::V1beta1::VERSION
+              metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
+
+              header_params = {}
+              if request.name
+                header_params["name"] = request.name
+              end
+
+              request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
+              metadata[:"x-goog-request-params"] ||= request_params_header
+
+              options.apply_defaults timeout:      @config.rpcs.restrict_allowed_resources.timeout,
+                                     metadata:     metadata,
+                                     retry_policy: @config.rpcs.restrict_allowed_resources.retry_policy
+
+              options.apply_defaults timeout:      @config.timeout,
+                                     metadata:     @config.metadata,
+                                     retry_policy: @config.retry_policy
+
+              @assured_workloads_service_stub.call_rpc :restrict_allowed_resources, request, options: options do |response, operation|
+                yield response, operation if block_given?
+                return response
+              end
+            rescue ::GRPC::BadStatus => e
+              raise ::Google::Cloud::Error.from_error(e)
+            end
+
             ##
             # Deletes the workload. Make sure that workload's direct children are already
             # in a deleted state, otherwise the request will fail with a
             # FAILED_PRECONDITION error.
+            # In addition to assuredworkloads.workload.delete permission, the user should
+            # also have orgpolicy.policy.set permission on the deleted folder to remove
+            # Assured Workloads OrgPolicies.
             #
             # @overload delete_workload(request, options = nil)
             #   Pass arguments to `delete_workload` via a request object, either of type
@@ -481,8 +673,8 @@ module Google
             #   the default parameter values, pass an empty Hash as a request object (see above).
             #
             #   @param name [::String]
-            #     Required. The resource name of the Workload to fetch. This is the
-            #     workloads's relative path in the API, formatted as
+            #     Required. The resource name of the Workload to fetch. This is the workloads's
+            #     relative path in the API, formatted as
             #     "organizations/\\{organization_id}/locations/\\{location_id}/workloads/\\{workload_id}".
             #     For example,
             #     "organizations/123/locations/us-east1/workloads/assured-workload-1".
@@ -527,14 +719,6 @@ module Google
                 gapic_version: ::Google::Cloud::AssuredWorkloads::V1beta1::VERSION
               metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
 
-              header_params = {}
-              if request.name
-                header_params["name"] = request.name
-              end
-
-              request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
-              metadata[:"x-goog-request-params"] ||= request_params_header
-
               options.apply_defaults timeout:      @config.rpcs.get_workload.timeout,
                                      metadata:     metadata,
                                      retry_policy: @config.rpcs.get_workload.retry_policy
@@ -551,6 +735,103 @@ module Google
               raise ::Google::Cloud::Error.from_error(e)
             end
 
+            ##
+            # Analyze if the source Assured Workloads can be moved to the target Assured
+            # Workload
+            #
+            # @overload analyze_workload_move(request, options = nil)
+            #   Pass arguments to `analyze_workload_move` via a request object, either of type
+            #   {::Google::Cloud::AssuredWorkloads::V1beta1::AnalyzeWorkloadMoveRequest} or an equivalent Hash.
+            #
+            #   @param request [::Google::Cloud::AssuredWorkloads::V1beta1::AnalyzeWorkloadMoveRequest, ::Hash]
+            #     A request object representing the call parameters. Required. To specify no
+            #     parameters, or to keep all the default parameter values, pass an empty Hash.
+            #   @param options [::Gapic::CallOptions, ::Hash]
+            #     Overrides the default settings for this call, e.g, timeout, retries, etc. Optional.
+            #
+            # @overload analyze_workload_move(source: nil, project: nil, target: nil)
+            #   Pass arguments to `analyze_workload_move` via keyword arguments. Note that at
+            #   least one keyword argument is required. To specify no parameters, or to keep all
+            #   the default parameter values, pass an empty Hash as a request object (see above).
+            #
+            #   @param source [::String]
+            #     The Source is project based Workload to be moved. This is the workloads's
+            #     relative path in the API, formatted as
+            #     "organizations/\\{organization_id}/locations/\\{location_id}/workloads/\\{workload_id}".
+            #     For example,
+            #     "organizations/123/locations/us-east1/workloads/assured-workload-1".
+            #   @param project [::String]
+            #     The Source is a project based to be moved.
+            #     This is the project's relative path in the API, formatted as
+            #     "cloudresourcemanager.googleapis.com/projects/\\{project_number}"
+            #     "projects/\\{project_number}"
+            #     "cloudresourcemanager.googleapis.com/projects/\\{project_id}"
+            #     "projects/\\{project_id}"
+            #     For example,
+            #     "organizations/123/locations/us-east1/workloads/assured-workload-1".
+            #   @param target [::String]
+            #     Required. The resource name of the Workload to fetch. This is the workloads's
+            #     relative path in the API, formatted as
+            #     "organizations/\\{organization_id}/locations/\\{location_id}/workloads/\\{workload_id}".
+            #     For example,
+            #     "organizations/123/locations/us-east1/workloads/assured-workload-2".
+            #
+            # @yield [response, operation] Access the result along with the RPC operation
+            # @yieldparam response [::Google::Cloud::AssuredWorkloads::V1beta1::AnalyzeWorkloadMoveResponse]
+            # @yieldparam operation [::GRPC::ActiveCall::Operation]
+            #
+            # @return [::Google::Cloud::AssuredWorkloads::V1beta1::AnalyzeWorkloadMoveResponse]
+            #
+            # @raise [::Google::Cloud::Error] if the RPC is aborted.
+            #
+            # @example Basic example
+            #   require "google/cloud/assured_workloads/v1beta1"
+            #
+            #   # Create a client object. The client can be reused for multiple calls.
+            #   client = Google::Cloud::AssuredWorkloads::V1beta1::AssuredWorkloadsService::Client.new
+            #
+            #   # Create a request. To set request fields, pass in keyword arguments.
+            #   request = Google::Cloud::AssuredWorkloads::V1beta1::AnalyzeWorkloadMoveRequest.new
+            #
+            #   # Call the analyze_workload_move method.
+            #   result = client.analyze_workload_move request
+            #
+            #   # The returned object is of type Google::Cloud::AssuredWorkloads::V1beta1::AnalyzeWorkloadMoveResponse.
+            #   p result
+            #
+            def analyze_workload_move request, options = nil
+              raise ::ArgumentError, "request must be provided" if request.nil?
+
+              request = ::Gapic::Protobuf.coerce request, to: ::Google::Cloud::AssuredWorkloads::V1beta1::AnalyzeWorkloadMoveRequest
+
+              # Converts hash and nil to an options object
+              options = ::Gapic::CallOptions.new(**options.to_h) if options.respond_to? :to_h
+
+              # Customize the options with defaults
+              metadata = @config.rpcs.analyze_workload_move.metadata.to_h
+
+              # Set x-goog-api-client and x-goog-user-project headers
+              metadata[:"x-goog-api-client"] ||= ::Gapic::Headers.x_goog_api_client \
+                lib_name: @config.lib_name, lib_version: @config.lib_version,
+                gapic_version: ::Google::Cloud::AssuredWorkloads::V1beta1::VERSION
+              metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
+
+              options.apply_defaults timeout:      @config.rpcs.analyze_workload_move.timeout,
+                                     metadata:     metadata,
+                                     retry_policy: @config.rpcs.analyze_workload_move.retry_policy
+
+              options.apply_defaults timeout:      @config.timeout,
+                                     metadata:     @config.metadata,
+                                     retry_policy: @config.retry_policy
+
+              @assured_workloads_service_stub.call_rpc :analyze_workload_move, request, options: options do |response, operation|
+                yield response, operation if block_given?
+                return response
+              end
+            rescue ::GRPC::BadStatus => e
+              raise ::Google::Cloud::Error.from_error(e)
+            end
+
             ##
             # Lists Assured Workloads under a CRM Node.
             #
@@ -628,14 +909,6 @@ module Google
                 gapic_version: ::Google::Cloud::AssuredWorkloads::V1beta1::VERSION
               metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
 
-              header_params = {}
-              if request.parent
-                header_params["parent"] = request.parent
-              end
-
-              request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
-              metadata[:"x-goog-request-params"] ||= request_params_header
-
               options.apply_defaults timeout:      @config.rpcs.list_workloads.timeout,
                                      metadata:     metadata,
                                      retry_policy: @config.rpcs.list_workloads.retry_policy
@@ -799,6 +1072,16 @@ module Google
                 #
                 attr_reader :update_workload
                 ##
+                # RPC-specific configuration for `restrict_allowed_services`
+                # @return [::Gapic::Config::Method]
+                #
+                attr_reader :restrict_allowed_services
+                ##
+                # RPC-specific configuration for `restrict_allowed_resources`
+                # @return [::Gapic::Config::Method]
+                #
+                attr_reader :restrict_allowed_resources
+                ##
                 # RPC-specific configuration for `delete_workload`
                 # @return [::Gapic::Config::Method]
                 #
@@ -809,6 +1092,11 @@ module Google
                 #
                 attr_reader :get_workload
                 ##
+                # RPC-specific configuration for `analyze_workload_move`
+                # @return [::Gapic::Config::Method]
+                #
+                attr_reader :analyze_workload_move
+                ##
                 # RPC-specific configuration for `list_workloads`
                 # @return [::Gapic::Config::Method]
                 #
@@ -820,10 +1108,16 @@ module Google
                   @create_workload = ::Gapic::Config::Method.new create_workload_config
                   update_workload_config = parent_rpcs.update_workload if parent_rpcs.respond_to? :update_workload
                   @update_workload = ::Gapic::Config::Method.new update_workload_config
+                  restrict_allowed_services_config = parent_rpcs.restrict_allowed_services if parent_rpcs.respond_to? :restrict_allowed_services
+                  @restrict_allowed_services = ::Gapic::Config::Method.new restrict_allowed_services_config
+                  restrict_allowed_resources_config = parent_rpcs.restrict_allowed_resources if parent_rpcs.respond_to? :restrict_allowed_resources
+                  @restrict_allowed_resources = ::Gapic::Config::Method.new restrict_allowed_resources_config
                   delete_workload_config = parent_rpcs.delete_workload if parent_rpcs.respond_to? :delete_workload
                   @delete_workload = ::Gapic::Config::Method.new delete_workload_config
                   get_workload_config = parent_rpcs.get_workload if parent_rpcs.respond_to? :get_workload
                   @get_workload = ::Gapic::Config::Method.new get_workload_config
+                  analyze_workload_move_config = parent_rpcs.analyze_workload_move if parent_rpcs.respond_to? :analyze_workload_move
+                  @analyze_workload_move = ::Gapic::Config::Method.new analyze_workload_move_config
                   list_workloads_config = parent_rpcs.list_workloads if parent_rpcs.respond_to? :list_workloads
                   @list_workloads = ::Gapic::Config::Method.new list_workloads_config
 

data/lib/google/cloud/assured_workloads/v1beta1/assured_workloads_service/operations.rb

@@ -95,6 +95,9 @@ module Google
                 channel_args: @config.channel_args,
                 interceptors: @config.interceptors
               )
+
+              # Used by an LRO wrapper for some methods of this service
+              @operations_client = self
             end
 
             # Service calls

data/lib/google/cloud/assured_workloads/v1beta1/version.rb

@@ -21,7 +21,7 @@ module Google
   module Cloud
     module AssuredWorkloads
       module V1beta1
-        VERSION = "0.9.1"
+        VERSION = "0.11.0"
       end
     end
   end

data/lib/google/cloud/assured_workloads/v1beta1.rb

@@ -25,6 +25,8 @@ module Google
       ##
       # To load this package, including all its services, and instantiate a client:
       #
+      # @example
+      #
       #     require "google/cloud/assured_workloads/v1beta1"
       #     client = ::Google::Cloud::AssuredWorkloads::V1beta1::AssuredWorkloadsService::Client.new
       #

data/lib/google/cloud/assuredworkloads/v1beta1/{assuredworkloads_v1beta1_pb.rb → assuredworkloads_pb.rb}

@@ -1,19 +1,16 @@
 # Generated by the protocol buffer compiler.  DO NOT EDIT!
-# source: google/cloud/assuredworkloads/v1beta1/assuredworkloads_v1beta1.proto
+# source: google/cloud/assuredworkloads/v1beta1/assuredworkloads.proto
+
+require 'google/protobuf'
 
-require 'google/api/annotations_pb'
-require 'google/api/client_pb'
 require 'google/api/field_behavior_pb'
 require 'google/api/resource_pb'
-require 'google/longrunning/operations_pb'
 require 'google/protobuf/duration_pb'
-require 'google/protobuf/empty_pb'
 require 'google/protobuf/field_mask_pb'
 require 'google/protobuf/timestamp_pb'
-require 'google/protobuf'
 
 Google::Protobuf::DescriptorPool.generated_pool.build do
-  add_file("google/cloud/assuredworkloads/v1beta1/assuredworkloads_v1beta1.proto", :syntax => :proto3) do
+  add_file("google/cloud/assuredworkloads/v1beta1/assuredworkloads.proto", :syntax => :proto3) do
     add_message "google.cloud.assuredworkloads.v1beta1.CreateWorkloadRequest" do
       optional :parent, :string, 1
       optional :workload, :message, 2, "google.cloud.assuredworkloads.v1beta1.Workload"
@@ -23,6 +20,28 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :workload, :message, 1, "google.cloud.assuredworkloads.v1beta1.Workload"
       optional :update_mask, :message, 2, "google.protobuf.FieldMask"
     end
+    add_message "google.cloud.assuredworkloads.v1beta1.RestrictAllowedServicesRequest" do
+      optional :name, :string, 1
+      optional :restriction_type, :enum, 2, "google.cloud.assuredworkloads.v1beta1.RestrictAllowedServicesRequest.RestrictionType"
+    end
+    add_enum "google.cloud.assuredworkloads.v1beta1.RestrictAllowedServicesRequest.RestrictionType" do
+      value :RESTRICTION_TYPE_UNSPECIFIED, 0
+      value :ALLOW_ALL_GCP_SERVICES, 1
+      value :ALLOW_COMPLIANT_SERVICES, 2
+    end
+    add_message "google.cloud.assuredworkloads.v1beta1.RestrictAllowedServicesResponse" do
+    end
+    add_message "google.cloud.assuredworkloads.v1beta1.RestrictAllowedResourcesRequest" do
+      optional :name, :string, 1
+      optional :restriction_type, :enum, 2, "google.cloud.assuredworkloads.v1beta1.RestrictAllowedResourcesRequest.RestrictionType"
+    end
+    add_enum "google.cloud.assuredworkloads.v1beta1.RestrictAllowedResourcesRequest.RestrictionType" do
+      value :RESTRICTION_TYPE_UNSPECIFIED, 0
+      value :ALLOW_ALL_GCP_RESOURCES, 1
+      value :ALLOW_COMPLIANT_RESOURCES, 2
+    end
+    add_message "google.cloud.assuredworkloads.v1beta1.RestrictAllowedResourcesResponse" do
+    end
     add_message "google.cloud.assuredworkloads.v1beta1.DeleteWorkloadRequest" do
       optional :name, :string, 1
       optional :etag, :string, 2
@@ -30,6 +49,16 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
     add_message "google.cloud.assuredworkloads.v1beta1.GetWorkloadRequest" do
       optional :name, :string, 1
     end
+    add_message "google.cloud.assuredworkloads.v1beta1.AnalyzeWorkloadMoveRequest" do
+      optional :target, :string, 2
+      oneof :projectOrWorkloadResource do
+        optional :source, :string, 1
+        optional :project, :string, 3
+      end
+    end
+    add_message "google.cloud.assuredworkloads.v1beta1.AnalyzeWorkloadMoveResponse" do
+      repeated :blockers, :string, 1
+    end
     add_message "google.cloud.assuredworkloads.v1beta1.ListWorkloadsRequest" do
       optional :parent, :string, 1
       optional :page_size, :int32, 2
@@ -121,6 +150,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       value :HITRUST, 7
       value :EU_REGIONS_AND_SUPPORT, 8
       value :CA_REGIONS_AND_SUPPORT, 9
+      value :ITAR, 10
     end
     add_enum "google.cloud.assuredworkloads.v1beta1.Workload.KajEnrollmentState" do
       value :KAJ_ENROLLMENT_STATE_UNSPECIFIED, 0
@@ -143,8 +173,16 @@ module Google
       module V1beta1
         CreateWorkloadRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.CreateWorkloadRequest").msgclass
         UpdateWorkloadRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.UpdateWorkloadRequest").msgclass
+        RestrictAllowedServicesRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.RestrictAllowedServicesRequest").msgclass
+        RestrictAllowedServicesRequest::RestrictionType = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.RestrictAllowedServicesRequest.RestrictionType").enummodule
+        RestrictAllowedServicesResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.RestrictAllowedServicesResponse").msgclass
+        RestrictAllowedResourcesRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.RestrictAllowedResourcesRequest").msgclass
+        RestrictAllowedResourcesRequest::RestrictionType = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.RestrictAllowedResourcesRequest.RestrictionType").enummodule
+        RestrictAllowedResourcesResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.RestrictAllowedResourcesResponse").msgclass
         DeleteWorkloadRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.DeleteWorkloadRequest").msgclass
         GetWorkloadRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.GetWorkloadRequest").msgclass
+        AnalyzeWorkloadMoveRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.AnalyzeWorkloadMoveRequest").msgclass
+        AnalyzeWorkloadMoveResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.AnalyzeWorkloadMoveResponse").msgclass
         ListWorkloadsRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.ListWorkloadsRequest").msgclass
         ListWorkloadsResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.ListWorkloadsResponse").msgclass
         Workload = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.Workload").msgclass

data/lib/google/cloud/assuredworkloads/v1beta1/assuredworkloads_service_pb.rb

@@ -0,0 +1,24 @@
+# Generated by the protocol buffer compiler.  DO NOT EDIT!
+# source: google/cloud/assuredworkloads/v1beta1/assuredworkloads_service.proto
+
+require 'google/protobuf'
+
+require 'google/api/annotations_pb'
+require 'google/api/client_pb'
+require 'google/cloud/assuredworkloads/v1beta1/assuredworkloads_pb'
+require 'google/longrunning/operations_pb'
+require 'google/protobuf/empty_pb'
+
+Google::Protobuf::DescriptorPool.generated_pool.build do
+  add_file("google/cloud/assuredworkloads/v1beta1/assuredworkloads_service.proto", :syntax => :proto3) do
+  end
+end
+
+module Google
+  module Cloud
+    module AssuredWorkloads
+      module V1beta1
+      end
+    end
+  end
+end

data/lib/google/cloud/assuredworkloads/v1beta1/{assuredworkloads_v1beta1_services_pb.rb → assuredworkloads_service_services_pb.rb}

@@ -1,7 +1,7 @@
 # Generated by the protocol buffer compiler.  DO NOT EDIT!
-# Source: google/cloud/assuredworkloads/v1beta1/assuredworkloads_v1beta1.proto for package 'Google.Cloud.AssuredWorkloads.V1beta1'
+# Source: google/cloud/assuredworkloads/v1beta1/assuredworkloads_service.proto for package 'Google.Cloud.AssuredWorkloads.V1beta1'
 # Original file comments:
-# Copyright 2020 Google LLC
+# Copyright 2022 Google LLC
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
@@ -17,7 +17,7 @@
 #
 
 require 'grpc'
-require 'google/cloud/assuredworkloads/v1beta1/assuredworkloads_v1beta1_pb'
+require 'google/cloud/assuredworkloads/v1beta1/assuredworkloads_service_pb'
 
 module Google
   module Cloud
@@ -40,12 +40,32 @@ module Google
             # For force updates don't set etag field in the Workload.
             # Only one update operation per workload can be in progress.
             rpc :UpdateWorkload, ::Google::Cloud::AssuredWorkloads::V1beta1::UpdateWorkloadRequest, ::Google::Cloud::AssuredWorkloads::V1beta1::Workload
+            # Restrict the list of services allowed in the Workload environment.
+            # The current list of allowed services can be found at
+            # https://cloud.google.com/assured-workloads/docs/supported-products
+            # In addition to assuredworkloads.workload.update permission, the user should
+            # also have orgpolicy.policy.set permission on the folder resource
+            # to use this functionality.
+            rpc :RestrictAllowedServices, ::Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedServicesRequest, ::Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedServicesResponse
+            # Restrict the list of resources allowed in the Workload environment.
+            # The current list of allowed products can be found at
+            # https://cloud.google.com/assured-workloads/docs/supported-products
+            # In addition to assuredworkloads.workload.update permission, the user should
+            # also have orgpolicy.policy.set permission on the folder resource
+            # to use this functionality.
+            rpc :RestrictAllowedResources, ::Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedResourcesRequest, ::Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedResourcesResponse
             # Deletes the workload. Make sure that workload's direct children are already
             # in a deleted state, otherwise the request will fail with a
             # FAILED_PRECONDITION error.
+            # In addition to assuredworkloads.workload.delete permission, the user should
+            # also have orgpolicy.policy.set permission on the deleted folder to remove
+            # Assured Workloads OrgPolicies.
             rpc :DeleteWorkload, ::Google::Cloud::AssuredWorkloads::V1beta1::DeleteWorkloadRequest, ::Google::Protobuf::Empty
             # Gets Assured Workload associated with a CRM Node
             rpc :GetWorkload, ::Google::Cloud::AssuredWorkloads::V1beta1::GetWorkloadRequest, ::Google::Cloud::AssuredWorkloads::V1beta1::Workload
+            # Analyze if the source Assured Workloads can be moved to the target Assured
+            # Workload
+            rpc :AnalyzeWorkloadMove, ::Google::Cloud::AssuredWorkloads::V1beta1::AnalyzeWorkloadMoveRequest, ::Google::Cloud::AssuredWorkloads::V1beta1::AnalyzeWorkloadMoveResponse
             # Lists Assured Workloads under a CRM Node.
             rpc :ListWorkloads, ::Google::Cloud::AssuredWorkloads::V1beta1::ListWorkloadsRequest, ::Google::Cloud::AssuredWorkloads::V1beta1::ListWorkloadsResponse
           end

data/proto_docs/google/cloud/assuredworkloads/v1beta1/{assuredworkloads_v1beta1.rb → assuredworkloads.rb}

@@ -1,6 +1,6 @@
 # frozen_string_literal: true
 
-# Copyright 2020 Google LLC
+# Copyright 2022 Google LLC
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
@@ -31,8 +31,8 @@ module Google
         #     Required. Assured Workload to create
         # @!attribute [rw] external_id
         #   @return [::String]
-        #     Optional. A identifier associated with the workload and underlying projects
-        #     which allows for the break down of billing costs for a workload. The value
+        #     Optional. A identifier associated with the workload and underlying projects which
+        #     allows for the break down of billing costs for a workload. The value
         #     provided for the identifier will add a label to the workload and contained
         #     projects with the identifier as the value.
         class CreateWorkloadRequest
@@ -44,7 +44,7 @@ module Google
         # @!attribute [rw] workload
         #   @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload]
         #     Required. The workload to update.
-        #     The workload’s `name` field is used to identify the workload to be updated.
+        #     The workload's `name` field is used to identify the workload to be updated.
         #     Format:
         #     organizations/\\{org_id}/locations/\\{location_id}/workloads/\\{workload_id}
         # @!attribute [rw] update_mask
@@ -55,6 +55,81 @@ module Google
           extend ::Google::Protobuf::MessageExts::ClassMethods
         end
 
+        # Request for restricting list of available services in Workload environment.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. The resource name of the Workload. This is the workloads's
+        #     relative path in the API, formatted as
+        #     "organizations/\\{organization_id}/locations/\\{location_id}/workloads/\\{workload_id}".
+        #     For example,
+        #     "organizations/123/locations/us-east1/workloads/assured-workload-1".
+        # @!attribute [rw] restriction_type
+        #   @return [::Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedServicesRequest::RestrictionType]
+        #     Required. The type of restriction for using gcp services in the Workload environment.
+        class RestrictAllowedServicesRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+
+          # The type of restriction.
+          module RestrictionType
+            # Unknown restriction type.
+            RESTRICTION_TYPE_UNSPECIFIED = 0
+
+            # Allow the use all services. This effectively remove all restrictions
+            # placed on the Folder.
+            ALLOW_ALL_GCP_SERVICES = 1
+
+            # Based on Workload's compliance regime, allowed list changes.
+            # See - https://cloud.google.com/assured-workloads/docs/supported-products
+            # for the list of allowed services.
+            ALLOW_COMPLIANT_SERVICES = 2
+          end
+        end
+
+        # Response for restricting the list of allowed services.
+        class RestrictAllowedServicesResponse
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request for restricting list of available resources in Workload environment.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. The resource name of the Workload. This is the workloads's
+        #     relative path in the API, formatted as
+        #     "organizations/\\{organization_id}/locations/\\{location_id}/workloads/\\{workload_id}".
+        #     For example,
+        #     "organizations/123/locations/us-east1/workloads/assured-workload-1".
+        # @!attribute [rw] restriction_type
+        #   @return [::Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedResourcesRequest::RestrictionType]
+        #     Required. The type of restriction for using gcp products in the Workload environment.
+        class RestrictAllowedResourcesRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+
+          # The type of restriction.
+          module RestrictionType
+            # Unknown restriction type.
+            RESTRICTION_TYPE_UNSPECIFIED = 0
+
+            # Allow the use all of all gcp products, irrespective of the compliance
+            # posture. This effectively removes gcp.restrictServiceUsage OrgPolicy
+            # on the AssuredWorkloads Folder.
+            ALLOW_ALL_GCP_RESOURCES = 1
+
+            # Based on Workload's compliance regime, allowed list changes.
+            # See - https://cloud.google.com/assured-workloads/docs/supported-products
+            # for the list of supported resources.
+            ALLOW_COMPLIANT_RESOURCES = 2
+          end
+        end
+
+        # Response for restricting the list of allowed resources.
+        class RestrictAllowedResourcesResponse
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
         # Request for deleting a Workload.
         # @!attribute [rw] name
         #   @return [::String]
@@ -73,8 +148,8 @@ module Google
         # Request for fetching a workload.
         # @!attribute [rw] name
         #   @return [::String]
-        #     Required. The resource name of the Workload to fetch. This is the
-        #     workloads's relative path in the API, formatted as
+        #     Required. The resource name of the Workload to fetch. This is the workloads's
+        #     relative path in the API, formatted as
         #     "organizations/\\{organization_id}/locations/\\{location_id}/workloads/\\{workload_id}".
         #     For example,
         #     "organizations/123/locations/us-east1/workloads/assured-workload-1".
@@ -83,6 +158,47 @@ module Google
           extend ::Google::Protobuf::MessageExts::ClassMethods
         end
 
+        # Request to check if source workload can be moved to target workload.
+        # @!attribute [rw] source
+        #   @return [::String]
+        #     The Source is project based Workload to be moved. This is the workloads's
+        #     relative path in the API, formatted as
+        #     "organizations/\\{organization_id}/locations/\\{location_id}/workloads/\\{workload_id}".
+        #     For example,
+        #     "organizations/123/locations/us-east1/workloads/assured-workload-1".
+        # @!attribute [rw] project
+        #   @return [::String]
+        #     The Source is a project based to be moved.
+        #     This is the project's relative path in the API, formatted as
+        #     "cloudresourcemanager.googleapis.com/projects/\\{project_number}"
+        #     "projects/\\{project_number}"
+        #     "cloudresourcemanager.googleapis.com/projects/\\{project_id}"
+        #     "projects/\\{project_id}"
+        #     For example,
+        #     "organizations/123/locations/us-east1/workloads/assured-workload-1".
+        # @!attribute [rw] target
+        #   @return [::String]
+        #     Required. The resource name of the Workload to fetch. This is the workloads's
+        #     relative path in the API, formatted as
+        #     "organizations/\\{organization_id}/locations/\\{location_id}/workloads/\\{workload_id}".
+        #     For example,
+        #     "organizations/123/locations/us-east1/workloads/assured-workload-2".
+        class AnalyzeWorkloadMoveRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Response with the analysis if the source workload can be moved to the target
+        # workload
+        # @!attribute [rw] blockers
+        #   @return [::Array<::String>]
+        #     List of blockers that prevent moving the source workload to the target
+        #     workload
+        class AnalyzeWorkloadMoveResponse
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
         # Request for fetching workloads in an organization.
         # @!attribute [rw] parent
         #   @return [::String]
@@ -158,20 +274,16 @@ module Google
         #     `billingAccounts/012345-567890-ABCDEF`.
         # @!attribute [rw] il4_settings
         #   @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::IL4Settings]
-        #     Required. Input only. Immutable. Settings specific to resources needed
-        #     for IL4.
+        #     Input only. Immutable. Settings specific to resources needed for IL4.
         # @!attribute [rw] cjis_settings
         #   @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::CJISSettings]
-        #     Required. Input only. Immutable. Settings specific to resources needed
-        #     for CJIS.
+        #     Input only. Immutable. Settings specific to resources needed for CJIS.
         # @!attribute [rw] fedramp_high_settings
         #   @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::FedrampHighSettings]
-        #     Required. Input only. Immutable. Settings specific to resources needed
-        #     for FedRAMP High.
+        #     Input only. Immutable. Settings specific to resources needed for FedRAMP High.
         # @!attribute [rw] fedramp_moderate_settings
         #   @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::FedrampModerateSettings]
-        #     Required. Input only. Immutable. Settings specific to resources needed
-        #     for FedRAMP Moderate.
+        #     Input only. Immutable. Settings specific to resources needed for FedRAMP Moderate.
         # @!attribute [rw] etag
         #   @return [::String]
         #     Optional. ETag of the workload, it is calculated on the basis
@@ -181,22 +293,24 @@ module Google
         #     Optional. Labels applied to the workload.
         # @!attribute [rw] provisioned_resources_parent
         #   @return [::String]
-        #     Input only. The parent resource for the resources managed by this Assured
-        #     Workload. May be either empty or a folder resource which is a child of the
+        #     Input only. The parent resource for the resources managed by this Assured Workload. May
+        #     be either empty or a folder resource which is a child of the
         #     Workload parent. If not specified all resources are created under the
         #     parent organization.
         #     Format:
         #     folders/\\{folder_id}
         # @!attribute [rw] kms_settings
         #   @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::KMSSettings]
-        #     Input only. Settings used to create a CMEK crypto key. When set a project
-        #     with a KMS CMEK key is provisioned. This field is mandatory for a subset of
-        #     Compliance Regimes.
+        #     Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS
+        #     CMEK key is provisioned.
+        #     This field is deprecated as of Feb 28, 2022.
+        #     In order to create a Keyring, callers should specify,
+        #     ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.
         # @!attribute [rw] resource_settings
         #   @return [::Array<::Google::Cloud::AssuredWorkloads::V1beta1::Workload::ResourceSettings>]
-        #     Input only. Resource properties that are used to customize workload
-        #     resources. These properties (such as custom project id) will be used to
-        #     create workload resources if possible. This field is optional.
+        #     Input only. Resource properties that are used to customize workload resources.
+        #     These properties (such as custom project id) will be used to create
+        #     workload resources if possible. This field is optional.
         # @!attribute [r] kaj_enrollment_state
         #   @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::KajEnrollmentState]
         #     Output only. Represents the KAJ enrollment state of the given workload.
@@ -248,14 +362,13 @@ module Google
           # Settings specific to the Key Management Service.
           # @!attribute [rw] next_rotation_time
           #   @return [::Google::Protobuf::Timestamp]
-          #     Required. Input only. Immutable. The time at which the Key Management
-          #     Service will automatically create a new version of the crypto key and
-          #     mark it as the primary.
+          #     Required. Input only. Immutable. The time at which the Key Management Service will automatically create a
+          #     new version of the crypto key and mark it as the primary.
           # @!attribute [rw] rotation_period
           #   @return [::Google::Protobuf::Duration]
-          #     Required. Input only. Immutable. [next_rotation_time] will be advanced by
-          #     this period when the Key Management Service automatically rotates a key.
-          #     Must be at least 24 hours and at most 876,000 hours.
+          #     Required. Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key
+          #     Management Service automatically rotates a key. Must be at least 24 hours
+          #     and at most 876,000 hours.
           class KMSSettings
             include ::Google::Protobuf::MessageExts
             extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -264,8 +377,7 @@ module Google
           # Settings specific to resources needed for IL4.
           # @!attribute [rw] kms_settings
           #   @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::KMSSettings]
-          #     Required. Input only. Immutable. Settings used to create a CMEK crypto
-          #     key.
+          #     Input only. Immutable. Settings used to create a CMEK crypto key.
           class IL4Settings
             include ::Google::Protobuf::MessageExts
             extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -274,8 +386,7 @@ module Google
           # Settings specific to resources needed for CJIS.
           # @!attribute [rw] kms_settings
           #   @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::KMSSettings]
-          #     Required. Input only. Immutable. Settings used to create a CMEK crypto
-          #     key.
+          #     Input only. Immutable. Settings used to create a CMEK crypto key.
           class CJISSettings
             include ::Google::Protobuf::MessageExts
             extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -284,8 +395,7 @@ module Google
           # Settings specific to resources needed for FedRAMP High.
           # @!attribute [rw] kms_settings
           #   @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::KMSSettings]
-          #     Required. Input only. Immutable. Settings used to create a CMEK crypto
-          #     key.
+          #     Input only. Immutable. Settings used to create a CMEK crypto key.
           class FedrampHighSettings
             include ::Google::Protobuf::MessageExts
             extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -294,8 +404,7 @@ module Google
           # Settings specific to resources needed for FedRAMP Moderate.
           # @!attribute [rw] kms_settings
           #   @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::KMSSettings]
-          #     Required. Input only. Immutable. Settings used to create a CMEK crypto
-          #     key.
+          #     Input only. Immutable. Settings used to create a CMEK crypto key.
           class FedrampModerateSettings
             include ::Google::Protobuf::MessageExts
             extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -307,6 +416,8 @@ module Google
           #     Resource identifier.
           #     For a project this represents project_id. If the project is already
           #     taken, the workload creation will fail.
+          #     For KeyRing, this represents the keyring_id.
+          #     For a folder, don't set this value as folder_id is assigned by Google.
           # @!attribute [rw] resource_type
           #   @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::ResourceInfo::ResourceType]
           #     Indicates the type of resource. This field should be specified to
@@ -407,6 +518,9 @@ module Google
 
             # Assured Workloads For Canada Regions and Support controls
             CA_REGIONS_AND_SUPPORT = 9
+
+            # International Traffic in Arms Regulations
+            ITAR = 10
           end
 
           # Key Access Justifications(KAJ) Enrollment State.
@@ -434,12 +548,12 @@ module Google
         #     Optional. The parent of the workload.
         # @!attribute [rw] compliance_regime
         #   @return [::Google::Cloud::AssuredWorkloads::V1beta1::Workload::ComplianceRegime]
-        #     Optional. Compliance controls that should be applied to the resources
-        #     managed by the workload.
+        #     Optional. Compliance controls that should be applied to the resources managed by
+        #     the workload.
         # @!attribute [rw] resource_settings
         #   @return [::Array<::Google::Cloud::AssuredWorkloads::V1beta1::Workload::ResourceSettings>]
-        #     Optional. Resource properties in the input that are used for
-        #     creating/customizing workload resources.
+        #     Optional. Resource properties in the input that are used for creating/customizing
+        #     workload resources.
         class CreateWorkloadOperationMetadata
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods

data/proto_docs/google/protobuf/any.rb

@@ -44,7 +44,7 @@ module Google
     #       foo = any.unpack(Foo.class);
     #     }
     #
-    #  Example 3: Pack and unpack a message in Python.
+    # Example 3: Pack and unpack a message in Python.
     #
     #     foo = Foo(...)
     #     any = Any()
@@ -54,7 +54,7 @@ module Google
     #       any.Unpack(foo)
     #       ...
     #
-    #  Example 4: Pack and unpack a message in Go
+    # Example 4: Pack and unpack a message in Go
     #
     #      foo := &pb.Foo{...}
     #      any, err := anypb.New(foo)
@@ -75,7 +75,7 @@ module Google
     #
     #
     # JSON
-    # ====
+    #
     # The JSON representation of an `Any` value uses the regular
     # representation of the deserialized, embedded message, with an
     # additional field `@type` which contains the type URL. Example:

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: google-cloud-assured_workloads-v1beta1
 version: !ruby/object:Gem::Version
-  version: 0.9.1
+  version: 0.11.0
 platform: ruby
 authors:
 - Google LLC
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-01-11 00:00:00.000000000 Z
+date: 2022-07-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: gapic-common
@@ -16,7 +16,7 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0.7'
+        version: '0.10'
     - - "<"
       - !ruby/object:Gem::Version
         version: 2.a
@@ -26,7 +26,7 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0.7'
+        version: '0.10'
     - - "<"
       - !ruby/object:Gem::Version
         version: 2.a
@@ -50,28 +50,28 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.25.1
+        version: 1.26.1
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.25.1
+        version: 1.26.1
 - !ruby/object:Gem::Dependency
   name: minitest
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '5.14'
+        version: '5.16'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '5.14'
+        version: '5.16'
 - !ruby/object:Gem::Dependency
   name: minitest-focus
   requirement: !ruby/object:Gem::Requirement
@@ -106,14 +106,14 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '12.0'
+        version: '13.0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '12.0'
+        version: '13.0'
 - !ruby/object:Gem::Dependency
   name: redcarpet
   requirement: !ruby/object:Gem::Requirement
@@ -178,12 +178,13 @@ files:
 - lib/google/cloud/assured_workloads/v1beta1/assured_workloads_service/operations.rb
 - lib/google/cloud/assured_workloads/v1beta1/assured_workloads_service/paths.rb
 - lib/google/cloud/assured_workloads/v1beta1/version.rb
-- lib/google/cloud/assuredworkloads/v1beta1/assuredworkloads_v1beta1_pb.rb
-- lib/google/cloud/assuredworkloads/v1beta1/assuredworkloads_v1beta1_services_pb.rb
+- lib/google/cloud/assuredworkloads/v1beta1/assuredworkloads_pb.rb
+- lib/google/cloud/assuredworkloads/v1beta1/assuredworkloads_service_pb.rb
+- lib/google/cloud/assuredworkloads/v1beta1/assuredworkloads_service_services_pb.rb
 - proto_docs/README.md
 - proto_docs/google/api/field_behavior.rb
 - proto_docs/google/api/resource.rb
-- proto_docs/google/cloud/assuredworkloads/v1beta1/assuredworkloads_v1beta1.rb
+- proto_docs/google/cloud/assuredworkloads/v1beta1/assuredworkloads.rb
 - proto_docs/google/longrunning/operations.rb
 - proto_docs/google/protobuf/any.rb
 - proto_docs/google/protobuf/duration.rb
@@ -203,14 +204,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '2.5'
+      version: '2.6'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.4
+rubygems_version: 3.3.14
 signing_key: 
 specification_version: 4
 summary: API Client library for the Assured Workloads for Government V1beta1 API