google-cloud-assured_workloads-v1beta1 0.11.0 → 0.12.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f479122bff9a64722a6a5f757e0cc4068534e9302a40b4d16397d19a5fffbb89
-  data.tar.gz: aea0101fb0ef24be06df4ebf439a87c19898fe77483c43498677a570deff46a2
+  metadata.gz: e5a52c3887c6436e24ce7535b92e5d6274891ed1651721c048c7e7bc33bcf51f
+  data.tar.gz: 6f9960e32cfee95043570df17e6834452198965b0419a578007962afe6e71d03
 SHA512:
-  metadata.gz: 682c3223f92d0eb6b8c278fde284328e66ca2719e32c07808d02b0d743f9db91363bf9c58f80dd2b53aed0194b8e2825e229a1b1362359565764752409cf2bf4
-  data.tar.gz: 137603dbf018c4dd70a067d9a820956f1044a43815f9e4825703c903e08dc57baa5f67ece3e8fc869c3dd5772c5e1767ac18b3ed06f0f516d627104a2007cca3
+  metadata.gz: 2e3feda38888728040afda80c6cace5946e43ccc0218434a3296516e5bded4f03c2a87b50792a197b1808244251346ae07b759533d020b08f611984109ad06ce
+  data.tar.gz: 9f9c2640ca0790092fadebe5a7e8a7ed154ae5536c27827287148935e3f9a5d259a3de09901704696507903ef71483a3e5bf7e62f414a14ffa4bd384e8721c92

data/lib/google/cloud/assured_workloads/v1beta1/assured_workloads_service/client.rb

@@ -351,14 +351,6 @@ module Google
                 gapic_version: ::Google::Cloud::AssuredWorkloads::V1beta1::VERSION
               metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
 
-              header_params = {}
-              if request.workload&.name
-                header_params["workload.name"] = request.workload.name
-              end
-
-              request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
-              metadata[:"x-goog-request-params"] ||= request_params_header
-
               options.apply_defaults timeout:      @config.rpcs.update_workload.timeout,
                                      metadata:     metadata,
                                      retry_policy: @config.rpcs.update_workload.retry_policy
@@ -375,94 +367,6 @@ module Google
               raise ::Google::Cloud::Error.from_error(e)
             end
 
-            ##
-            # Restrict the list of services allowed in the Workload environment.
-            # The current list of allowed services can be found at
-            # https://cloud.google.com/assured-workloads/docs/supported-products
-            # In addition to assuredworkloads.workload.update permission, the user should
-            # also have orgpolicy.policy.set permission on the folder resource
-            # to use this functionality.
-            #
-            # @overload restrict_allowed_services(request, options = nil)
-            #   Pass arguments to `restrict_allowed_services` via a request object, either of type
-            #   {::Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedServicesRequest} or an equivalent Hash.
-            #
-            #   @param request [::Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedServicesRequest, ::Hash]
-            #     A request object representing the call parameters. Required. To specify no
-            #     parameters, or to keep all the default parameter values, pass an empty Hash.
-            #   @param options [::Gapic::CallOptions, ::Hash]
-            #     Overrides the default settings for this call, e.g, timeout, retries, etc. Optional.
-            #
-            # @overload restrict_allowed_services(name: nil, restriction_type: nil)
-            #   Pass arguments to `restrict_allowed_services` via keyword arguments. Note that at
-            #   least one keyword argument is required. To specify no parameters, or to keep all
-            #   the default parameter values, pass an empty Hash as a request object (see above).
-            #
-            #   @param name [::String]
-            #     Required. The resource name of the Workload. This is the workloads's
-            #     relative path in the API, formatted as
-            #     "organizations/\\{organization_id}/locations/\\{location_id}/workloads/\\{workload_id}".
-            #     For example,
-            #     "organizations/123/locations/us-east1/workloads/assured-workload-1".
-            #   @param restriction_type [::Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedServicesRequest::RestrictionType]
-            #     Required. The type of restriction for using gcp services in the Workload environment.
-            #
-            # @yield [response, operation] Access the result along with the RPC operation
-            # @yieldparam response [::Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedServicesResponse]
-            # @yieldparam operation [::GRPC::ActiveCall::Operation]
-            #
-            # @return [::Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedServicesResponse]
-            #
-            # @raise [::Google::Cloud::Error] if the RPC is aborted.
-            #
-            # @example Basic example
-            #   require "google/cloud/assured_workloads/v1beta1"
-            #
-            #   # Create a client object. The client can be reused for multiple calls.
-            #   client = Google::Cloud::AssuredWorkloads::V1beta1::AssuredWorkloadsService::Client.new
-            #
-            #   # Create a request. To set request fields, pass in keyword arguments.
-            #   request = Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedServicesRequest.new
-            #
-            #   # Call the restrict_allowed_services method.
-            #   result = client.restrict_allowed_services request
-            #
-            #   # The returned object is of type Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedServicesResponse.
-            #   p result
-            #
-            def restrict_allowed_services request, options = nil
-              raise ::ArgumentError, "request must be provided" if request.nil?
-
-              request = ::Gapic::Protobuf.coerce request, to: ::Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedServicesRequest
-
-              # Converts hash and nil to an options object
-              options = ::Gapic::CallOptions.new(**options.to_h) if options.respond_to? :to_h
-
-              # Customize the options with defaults
-              metadata = @config.rpcs.restrict_allowed_services.metadata.to_h
-
-              # Set x-goog-api-client and x-goog-user-project headers
-              metadata[:"x-goog-api-client"] ||= ::Gapic::Headers.x_goog_api_client \
-                lib_name: @config.lib_name, lib_version: @config.lib_version,
-                gapic_version: ::Google::Cloud::AssuredWorkloads::V1beta1::VERSION
-              metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
-
-              options.apply_defaults timeout:      @config.rpcs.restrict_allowed_services.timeout,
-                                     metadata:     metadata,
-                                     retry_policy: @config.rpcs.restrict_allowed_services.retry_policy
-
-              options.apply_defaults timeout:      @config.timeout,
-                                     metadata:     @config.metadata,
-                                     retry_policy: @config.retry_policy
-
-              @assured_workloads_service_stub.call_rpc :restrict_allowed_services, request, options: options do |response, operation|
-                yield response, operation if block_given?
-                return response
-              end
-            rescue ::GRPC::BadStatus => e
-              raise ::Google::Cloud::Error.from_error(e)
-            end
-
             ##
             # Restrict the list of resources allowed in the Workload environment.
             # The current list of allowed products can be found at
@@ -736,8 +640,8 @@ module Google
             end
 
             ##
-            # Analyze if the source Assured Workloads can be moved to the target Assured
-            # Workload
+            # A request to analyze a hypothetical move of a source project or
+            # project-based workload to a target (destination) folder-based workload.
             #
             # @overload analyze_workload_move(request, options = nil)
             #   Pass arguments to `analyze_workload_move` via a request object, either of type
@@ -755,26 +659,25 @@ module Google
             #   the default parameter values, pass an empty Hash as a request object (see above).
             #
             #   @param source [::String]
-            #     The Source is project based Workload to be moved. This is the workloads's
-            #     relative path in the API, formatted as
-            #     "organizations/\\{organization_id}/locations/\\{location_id}/workloads/\\{workload_id}".
-            #     For example,
-            #     "organizations/123/locations/us-east1/workloads/assured-workload-1".
+            #     The source type is a project-based workload. Specify the workloads's
+            #     relative resource name, formatted as:
+            #     "organizations/\\{ORGANIZATION_ID}/locations/\\{LOCATION_ID}/workloads/\\{WORKLOAD_ID}"
+            #     For example:
+            #     "organizations/123/locations/us-east1/workloads/assured-workload-1"
             #   @param project [::String]
-            #     The Source is a project based to be moved.
-            #     This is the project's relative path in the API, formatted as
-            #     "cloudresourcemanager.googleapis.com/projects/\\{project_number}"
-            #     "projects/\\{project_number}"
-            #     "cloudresourcemanager.googleapis.com/projects/\\{project_id}"
-            #     "projects/\\{project_id}"
-            #     For example,
-            #     "organizations/123/locations/us-east1/workloads/assured-workload-1".
+            #     The source type is a project. Specify the project's relative resource
+            #     name, formatted as either a project number or a project ID:
+            #     "projects/\\{PROJECT_NUMBER}" or "projects/\\{PROJECT_ID}"
+            #     For example:
+            #     "projects/951040570662" when specifying a project number, or
+            #     "projects/my-project-123" when specifying a project ID.
             #   @param target [::String]
-            #     Required. The resource name of the Workload to fetch. This is the workloads's
-            #     relative path in the API, formatted as
-            #     "organizations/\\{organization_id}/locations/\\{location_id}/workloads/\\{workload_id}".
-            #     For example,
-            #     "organizations/123/locations/us-east1/workloads/assured-workload-2".
+            #     Required. The resource ID of the folder-based destination workload. This workload is
+            #     where the source project will hypothetically be moved to. Specify the
+            #     workload's relative resource name, formatted as:
+            #     "organizations/\\{ORGANIZATION_ID}/locations/\\{LOCATION_ID}/workloads/\\{WORKLOAD_ID}"
+            #     For example:
+            #     "organizations/123/locations/us-east1/workloads/assured-workload-2"
             #
             # @yield [response, operation] Access the result along with the RPC operation
             # @yieldparam response [::Google::Cloud::AssuredWorkloads::V1beta1::AnalyzeWorkloadMoveResponse]
@@ -1072,11 +975,6 @@ module Google
                 #
                 attr_reader :update_workload
                 ##
-                # RPC-specific configuration for `restrict_allowed_services`
-                # @return [::Gapic::Config::Method]
-                #
-                attr_reader :restrict_allowed_services
-                ##
                 # RPC-specific configuration for `restrict_allowed_resources`
                 # @return [::Gapic::Config::Method]
                 #
@@ -1108,8 +1006,6 @@ module Google
                   @create_workload = ::Gapic::Config::Method.new create_workload_config
                   update_workload_config = parent_rpcs.update_workload if parent_rpcs.respond_to? :update_workload
                   @update_workload = ::Gapic::Config::Method.new update_workload_config
-                  restrict_allowed_services_config = parent_rpcs.restrict_allowed_services if parent_rpcs.respond_to? :restrict_allowed_services
-                  @restrict_allowed_services = ::Gapic::Config::Method.new restrict_allowed_services_config
                   restrict_allowed_resources_config = parent_rpcs.restrict_allowed_resources if parent_rpcs.respond_to? :restrict_allowed_resources
                   @restrict_allowed_resources = ::Gapic::Config::Method.new restrict_allowed_resources_config
                   delete_workload_config = parent_rpcs.delete_workload if parent_rpcs.respond_to? :delete_workload

data/lib/google/cloud/assured_workloads/v1beta1/version.rb

@@ -21,7 +21,7 @@ module Google
   module Cloud
     module AssuredWorkloads
       module V1beta1
-        VERSION = "0.11.0"
+        VERSION = "0.12.0"
       end
     end
   end

data/lib/google/cloud/assuredworkloads/v1beta1/assuredworkloads_pb.rb

@@ -20,17 +20,6 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :workload, :message, 1, "google.cloud.assuredworkloads.v1beta1.Workload"
       optional :update_mask, :message, 2, "google.protobuf.FieldMask"
     end
-    add_message "google.cloud.assuredworkloads.v1beta1.RestrictAllowedServicesRequest" do
-      optional :name, :string, 1
-      optional :restriction_type, :enum, 2, "google.cloud.assuredworkloads.v1beta1.RestrictAllowedServicesRequest.RestrictionType"
-    end
-    add_enum "google.cloud.assuredworkloads.v1beta1.RestrictAllowedServicesRequest.RestrictionType" do
-      value :RESTRICTION_TYPE_UNSPECIFIED, 0
-      value :ALLOW_ALL_GCP_SERVICES, 1
-      value :ALLOW_COMPLIANT_SERVICES, 2
-    end
-    add_message "google.cloud.assuredworkloads.v1beta1.RestrictAllowedServicesResponse" do
-    end
     add_message "google.cloud.assuredworkloads.v1beta1.RestrictAllowedResourcesRequest" do
       optional :name, :string, 1
       optional :restriction_type, :enum, 2, "google.cloud.assuredworkloads.v1beta1.RestrictAllowedResourcesRequest.RestrictionType"
@@ -151,6 +140,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       value :EU_REGIONS_AND_SUPPORT, 8
       value :CA_REGIONS_AND_SUPPORT, 9
       value :ITAR, 10
+      value :AU_REGIONS_AND_US_SUPPORT, 11
     end
     add_enum "google.cloud.assuredworkloads.v1beta1.Workload.KajEnrollmentState" do
       value :KAJ_ENROLLMENT_STATE_UNSPECIFIED, 0
@@ -173,9 +163,6 @@ module Google
       module V1beta1
         CreateWorkloadRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.CreateWorkloadRequest").msgclass
         UpdateWorkloadRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.UpdateWorkloadRequest").msgclass
-        RestrictAllowedServicesRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.RestrictAllowedServicesRequest").msgclass
-        RestrictAllowedServicesRequest::RestrictionType = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.RestrictAllowedServicesRequest.RestrictionType").enummodule
-        RestrictAllowedServicesResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.RestrictAllowedServicesResponse").msgclass
         RestrictAllowedResourcesRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.RestrictAllowedResourcesRequest").msgclass
         RestrictAllowedResourcesRequest::RestrictionType = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.RestrictAllowedResourcesRequest.RestrictionType").enummodule
         RestrictAllowedResourcesResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.assuredworkloads.v1beta1.RestrictAllowedResourcesResponse").msgclass

data/lib/google/cloud/assuredworkloads/v1beta1/assuredworkloads_service_services_pb.rb

@@ -40,13 +40,6 @@ module Google
             # For force updates don't set etag field in the Workload.
             # Only one update operation per workload can be in progress.
             rpc :UpdateWorkload, ::Google::Cloud::AssuredWorkloads::V1beta1::UpdateWorkloadRequest, ::Google::Cloud::AssuredWorkloads::V1beta1::Workload
-            # Restrict the list of services allowed in the Workload environment.
-            # The current list of allowed services can be found at
-            # https://cloud.google.com/assured-workloads/docs/supported-products
-            # In addition to assuredworkloads.workload.update permission, the user should
-            # also have orgpolicy.policy.set permission on the folder resource
-            # to use this functionality.
-            rpc :RestrictAllowedServices, ::Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedServicesRequest, ::Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedServicesResponse
             # Restrict the list of resources allowed in the Workload environment.
             # The current list of allowed products can be found at
             # https://cloud.google.com/assured-workloads/docs/supported-products
@@ -63,8 +56,8 @@ module Google
             rpc :DeleteWorkload, ::Google::Cloud::AssuredWorkloads::V1beta1::DeleteWorkloadRequest, ::Google::Protobuf::Empty
             # Gets Assured Workload associated with a CRM Node
             rpc :GetWorkload, ::Google::Cloud::AssuredWorkloads::V1beta1::GetWorkloadRequest, ::Google::Cloud::AssuredWorkloads::V1beta1::Workload
-            # Analyze if the source Assured Workloads can be moved to the target Assured
-            # Workload
+            # A request to analyze a hypothetical move of a source project or
+            # project-based workload to a target (destination) folder-based workload.
             rpc :AnalyzeWorkloadMove, ::Google::Cloud::AssuredWorkloads::V1beta1::AnalyzeWorkloadMoveRequest, ::Google::Cloud::AssuredWorkloads::V1beta1::AnalyzeWorkloadMoveResponse
             # Lists Assured Workloads under a CRM Node.
             rpc :ListWorkloads, ::Google::Cloud::AssuredWorkloads::V1beta1::ListWorkloadsRequest, ::Google::Cloud::AssuredWorkloads::V1beta1::ListWorkloadsResponse

data/proto_docs/google/cloud/assuredworkloads/v1beta1/assuredworkloads.rb

@@ -55,43 +55,6 @@ module Google
           extend ::Google::Protobuf::MessageExts::ClassMethods
         end
 
-        # Request for restricting list of available services in Workload environment.
-        # @!attribute [rw] name
-        #   @return [::String]
-        #     Required. The resource name of the Workload. This is the workloads's
-        #     relative path in the API, formatted as
-        #     "organizations/\\{organization_id}/locations/\\{location_id}/workloads/\\{workload_id}".
-        #     For example,
-        #     "organizations/123/locations/us-east1/workloads/assured-workload-1".
-        # @!attribute [rw] restriction_type
-        #   @return [::Google::Cloud::AssuredWorkloads::V1beta1::RestrictAllowedServicesRequest::RestrictionType]
-        #     Required. The type of restriction for using gcp services in the Workload environment.
-        class RestrictAllowedServicesRequest
-          include ::Google::Protobuf::MessageExts
-          extend ::Google::Protobuf::MessageExts::ClassMethods
-
-          # The type of restriction.
-          module RestrictionType
-            # Unknown restriction type.
-            RESTRICTION_TYPE_UNSPECIFIED = 0
-
-            # Allow the use all services. This effectively remove all restrictions
-            # placed on the Folder.
-            ALLOW_ALL_GCP_SERVICES = 1
-
-            # Based on Workload's compliance regime, allowed list changes.
-            # See - https://cloud.google.com/assured-workloads/docs/supported-products
-            # for the list of allowed services.
-            ALLOW_COMPLIANT_SERVICES = 2
-          end
-        end
-
-        # Response for restricting the list of allowed services.
-        class RestrictAllowedServicesResponse
-          include ::Google::Protobuf::MessageExts
-          extend ::Google::Protobuf::MessageExts::ClassMethods
-        end
-
         # Request for restricting list of available resources in Workload environment.
         # @!attribute [rw] name
         #   @return [::String]
@@ -158,42 +121,41 @@ module Google
           extend ::Google::Protobuf::MessageExts::ClassMethods
         end
 
-        # Request to check if source workload can be moved to target workload.
+        # A request to analyze a hypothetical move of a source project or project-based
+        # workload to a target (destination) folder-based workload.
         # @!attribute [rw] source
         #   @return [::String]
-        #     The Source is project based Workload to be moved. This is the workloads's
-        #     relative path in the API, formatted as
-        #     "organizations/\\{organization_id}/locations/\\{location_id}/workloads/\\{workload_id}".
-        #     For example,
-        #     "organizations/123/locations/us-east1/workloads/assured-workload-1".
+        #     The source type is a project-based workload. Specify the workloads's
+        #     relative resource name, formatted as:
+        #     "organizations/\\{ORGANIZATION_ID}/locations/\\{LOCATION_ID}/workloads/\\{WORKLOAD_ID}"
+        #     For example:
+        #     "organizations/123/locations/us-east1/workloads/assured-workload-1"
         # @!attribute [rw] project
         #   @return [::String]
-        #     The Source is a project based to be moved.
-        #     This is the project's relative path in the API, formatted as
-        #     "cloudresourcemanager.googleapis.com/projects/\\{project_number}"
-        #     "projects/\\{project_number}"
-        #     "cloudresourcemanager.googleapis.com/projects/\\{project_id}"
-        #     "projects/\\{project_id}"
-        #     For example,
-        #     "organizations/123/locations/us-east1/workloads/assured-workload-1".
+        #     The source type is a project. Specify the project's relative resource
+        #     name, formatted as either a project number or a project ID:
+        #     "projects/\\{PROJECT_NUMBER}" or "projects/\\{PROJECT_ID}"
+        #     For example:
+        #     "projects/951040570662" when specifying a project number, or
+        #     "projects/my-project-123" when specifying a project ID.
         # @!attribute [rw] target
         #   @return [::String]
-        #     Required. The resource name of the Workload to fetch. This is the workloads's
-        #     relative path in the API, formatted as
-        #     "organizations/\\{organization_id}/locations/\\{location_id}/workloads/\\{workload_id}".
-        #     For example,
-        #     "organizations/123/locations/us-east1/workloads/assured-workload-2".
+        #     Required. The resource ID of the folder-based destination workload. This workload is
+        #     where the source project will hypothetically be moved to. Specify the
+        #     workload's relative resource name, formatted as:
+        #     "organizations/\\{ORGANIZATION_ID}/locations/\\{LOCATION_ID}/workloads/\\{WORKLOAD_ID}"
+        #     For example:
+        #     "organizations/123/locations/us-east1/workloads/assured-workload-2"
         class AnalyzeWorkloadMoveRequest
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
         end
 
-        # Response with the analysis if the source workload can be moved to the target
-        # workload
+        # A response that includes the analysis of the hypothetical resource move.
         # @!attribute [rw] blockers
         #   @return [::Array<::String>]
-        #     List of blockers that prevent moving the source workload to the target
-        #     workload
+        #     A list of blockers that should be addressed before moving the source
+        #     project or project-based workload to the destination folder-based workload.
         class AnalyzeWorkloadMoveResponse
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -262,9 +224,9 @@ module Google
         # @!attribute [r] create_time
         #   @return [::Google::Protobuf::Timestamp]
         #     Output only. Immutable. The Workload creation timestamp.
-        # @!attribute [rw] billing_account
+        # @!attribute [r] billing_account
         #   @return [::String]
-        #     Input only. The billing account used for the resources which are
+        #     Output only. The billing account used for the resources which are
         #     direct children of workload. This billing account is initially associated
         #     with the resources created as part of Workload creation.
         #     After the initial creation of these resources, the customer can change
@@ -521,6 +483,9 @@ module Google
 
             # International Traffic in Arms Regulations
             ITAR = 10
+
+            # Assured Workloads for Australia Regions and Support controls
+            AU_REGIONS_AND_US_SUPPORT = 11
           end
 
           # Key Access Justifications(KAJ) Enrollment State.

data/proto_docs/google/protobuf/empty.rb

@@ -26,8 +26,6 @@ module Google
     #     service Foo {
     #       rpc Bar(google.protobuf.Empty) returns (google.protobuf.Empty);
     #     }
-    #
-    # The JSON representation for `Empty` is empty JSON object `{}`.
     class Empty
       include ::Google::Protobuf::MessageExts
       extend ::Google::Protobuf::MessageExts::ClassMethods

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: google-cloud-assured_workloads-v1beta1
 version: !ruby/object:Gem::Version
-  version: 0.11.0
+  version: 0.12.0
 platform: ruby
 authors:
 - Google LLC
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-07-25 00:00:00.000000000 Z
+date: 2022-08-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: gapic-common