google-cloud-binary_authorization-v1 0.1.0 → 0.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5e0c158eae2b5e3b7d1371c23b1df03a1a06af2646167b4c94c48e55494f5e15
-  data.tar.gz: c2bab90eaa0db1892fa499ecfeeb4a945d669f58faae88224d52704f4d60e049
+  metadata.gz: 64a246cdb79d3a87b35ef9a2633b9188cd333fe09b9daf7f75fad9d4bc6e27d3
+  data.tar.gz: dc4393d0e85e13be9686c79dbe89c446958cc83543d355d077b66346df061656
 SHA512:
-  metadata.gz: 57b05ec502adfbaed7a4befc60aafa0e7cb3b46101f5336c82681c5f1a5f5d793162903d83f128ed82fdce8f0d78c6edc1957a839fbfc003e582d3c38cd08285
-  data.tar.gz: 2fef337f7f8e8bb1029c39225e8e20a67ddca0c9594a60b342c14520318805bf16fcae0c1738bf46b942ecc0b7f7a2c65b97f488fe7a58add07689b7932980f5
+  metadata.gz: 99038b494add38c2d9ae6cda234d00212a3e0b7f07c5dd11cce9aee8e655dff726c9592f63bf32f731287f566fa27c403869a21cb22d908b5fc0c0e9e00b4d4f
+  data.tar.gz: 04a3205a133b78def469af1b39659adbb4d9a85386a16d28bf03a92a24f1f34e909cee984f3058f2523eb2256320ac0a24daf83761a6df39862904f9af6baf2a

data/lib/google/cloud/binary_authorization/v1/binauthz_management_service/client.rb

@@ -218,6 +218,21 @@ module Google
             #
             # @raise [::Google::Cloud::Error] if the RPC is aborted.
             #
+            # @example Basic example
+            #   require "google/cloud/binary_authorization/v1"
+            #
+            #   # Create a client object. The client can be reused for multiple calls.
+            #   client = Google::Cloud::BinaryAuthorization::V1::BinauthzManagementService::Client.new
+            #
+            #   # Create a request. To set request fields, pass in keyword arguments.
+            #   request = Google::Cloud::BinaryAuthorization::V1::GetPolicyRequest.new
+            #
+            #   # Call the get_policy method.
+            #   result = client.get_policy request
+            #
+            #   # The returned object is of type Google::Cloud::BinaryAuthorization::V1::Policy.
+            #   p result
+            #
             def get_policy request, options = nil
               raise ::ArgumentError, "request must be provided" if request.nil?
 
@@ -235,9 +250,11 @@ module Google
                 gapic_version: ::Google::Cloud::BinaryAuthorization::V1::VERSION
               metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
 
-              header_params = {
-                "name" => request.name
-              }
+              header_params = {}
+              if request.name
+                header_params["name"] = request.name
+              end
+
               request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
               metadata[:"x-goog-request-params"] ||= request_params_header
 
@@ -292,6 +309,21 @@ module Google
             #
             # @raise [::Google::Cloud::Error] if the RPC is aborted.
             #
+            # @example Basic example
+            #   require "google/cloud/binary_authorization/v1"
+            #
+            #   # Create a client object. The client can be reused for multiple calls.
+            #   client = Google::Cloud::BinaryAuthorization::V1::BinauthzManagementService::Client.new
+            #
+            #   # Create a request. To set request fields, pass in keyword arguments.
+            #   request = Google::Cloud::BinaryAuthorization::V1::UpdatePolicyRequest.new
+            #
+            #   # Call the update_policy method.
+            #   result = client.update_policy request
+            #
+            #   # The returned object is of type Google::Cloud::BinaryAuthorization::V1::Policy.
+            #   p result
+            #
             def update_policy request, options = nil
               raise ::ArgumentError, "request must be provided" if request.nil?
 
@@ -309,9 +341,11 @@ module Google
                 gapic_version: ::Google::Cloud::BinaryAuthorization::V1::VERSION
               metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
 
-              header_params = {
-                "policy.name" => request.policy.name
-              }
+              header_params = {}
+              if request.policy&.name
+                header_params["policy.name"] = request.policy.name
+              end
+
               request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
               metadata[:"x-goog-request-params"] ||= request_params_header
 
@@ -369,6 +403,21 @@ module Google
             #
             # @raise [::Google::Cloud::Error] if the RPC is aborted.
             #
+            # @example Basic example
+            #   require "google/cloud/binary_authorization/v1"
+            #
+            #   # Create a client object. The client can be reused for multiple calls.
+            #   client = Google::Cloud::BinaryAuthorization::V1::BinauthzManagementService::Client.new
+            #
+            #   # Create a request. To set request fields, pass in keyword arguments.
+            #   request = Google::Cloud::BinaryAuthorization::V1::CreateAttestorRequest.new
+            #
+            #   # Call the create_attestor method.
+            #   result = client.create_attestor request
+            #
+            #   # The returned object is of type Google::Cloud::BinaryAuthorization::V1::Attestor.
+            #   p result
+            #
             def create_attestor request, options = nil
               raise ::ArgumentError, "request must be provided" if request.nil?
 
@@ -386,9 +435,11 @@ module Google
                 gapic_version: ::Google::Cloud::BinaryAuthorization::V1::VERSION
               metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
 
-              header_params = {
-                "parent" => request.parent
-              }
+              header_params = {}
+              if request.parent
+                header_params["parent"] = request.parent
+              end
+
               request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
               metadata[:"x-goog-request-params"] ||= request_params_header
 
@@ -439,6 +490,21 @@ module Google
             #
             # @raise [::Google::Cloud::Error] if the RPC is aborted.
             #
+            # @example Basic example
+            #   require "google/cloud/binary_authorization/v1"
+            #
+            #   # Create a client object. The client can be reused for multiple calls.
+            #   client = Google::Cloud::BinaryAuthorization::V1::BinauthzManagementService::Client.new
+            #
+            #   # Create a request. To set request fields, pass in keyword arguments.
+            #   request = Google::Cloud::BinaryAuthorization::V1::GetAttestorRequest.new
+            #
+            #   # Call the get_attestor method.
+            #   result = client.get_attestor request
+            #
+            #   # The returned object is of type Google::Cloud::BinaryAuthorization::V1::Attestor.
+            #   p result
+            #
             def get_attestor request, options = nil
               raise ::ArgumentError, "request must be provided" if request.nil?
 
@@ -456,9 +522,11 @@ module Google
                 gapic_version: ::Google::Cloud::BinaryAuthorization::V1::VERSION
               metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
 
-              header_params = {
-                "name" => request.name
-              }
+              header_params = {}
+              if request.name
+                header_params["name"] = request.name
+              end
+
               request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
               metadata[:"x-goog-request-params"] ||= request_params_header
 
@@ -510,6 +578,21 @@ module Google
             #
             # @raise [::Google::Cloud::Error] if the RPC is aborted.
             #
+            # @example Basic example
+            #   require "google/cloud/binary_authorization/v1"
+            #
+            #   # Create a client object. The client can be reused for multiple calls.
+            #   client = Google::Cloud::BinaryAuthorization::V1::BinauthzManagementService::Client.new
+            #
+            #   # Create a request. To set request fields, pass in keyword arguments.
+            #   request = Google::Cloud::BinaryAuthorization::V1::UpdateAttestorRequest.new
+            #
+            #   # Call the update_attestor method.
+            #   result = client.update_attestor request
+            #
+            #   # The returned object is of type Google::Cloud::BinaryAuthorization::V1::Attestor.
+            #   p result
+            #
             def update_attestor request, options = nil
               raise ::ArgumentError, "request must be provided" if request.nil?
 
@@ -527,9 +610,11 @@ module Google
                 gapic_version: ::Google::Cloud::BinaryAuthorization::V1::VERSION
               metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
 
-              header_params = {
-                "attestor.name" => request.attestor.name
-              }
+              header_params = {}
+              if request.attestor&.name
+                header_params["attestor.name"] = request.attestor.name
+              end
+
               request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
               metadata[:"x-goog-request-params"] ||= request_params_header
 
@@ -587,6 +672,27 @@ module Google
             #
             # @raise [::Google::Cloud::Error] if the RPC is aborted.
             #
+            # @example Basic example
+            #   require "google/cloud/binary_authorization/v1"
+            #
+            #   # Create a client object. The client can be reused for multiple calls.
+            #   client = Google::Cloud::BinaryAuthorization::V1::BinauthzManagementService::Client.new
+            #
+            #   # Create a request. To set request fields, pass in keyword arguments.
+            #   request = Google::Cloud::BinaryAuthorization::V1::ListAttestorsRequest.new
+            #
+            #   # Call the list_attestors method.
+            #   result = client.list_attestors request
+            #
+            #   # The returned object is of type Gapic::PagedEnumerable. You can
+            #   # iterate over all elements by calling #each, and the enumerable
+            #   # will lazily make API calls to fetch subsequent pages. Other
+            #   # methods are also available for managing paging directly.
+            #   result.each do |response|
+            #     # Each element is of type ::Google::Cloud::BinaryAuthorization::V1::Attestor.
+            #     p response
+            #   end
+            #
             def list_attestors request, options = nil
               raise ::ArgumentError, "request must be provided" if request.nil?
 
@@ -604,9 +710,11 @@ module Google
                 gapic_version: ::Google::Cloud::BinaryAuthorization::V1::VERSION
               metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
 
-              header_params = {
-                "parent" => request.parent
-              }
+              header_params = {}
+              if request.parent
+                header_params["parent"] = request.parent
+              end
+
               request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
               metadata[:"x-goog-request-params"] ||= request_params_header
 
@@ -658,6 +766,21 @@ module Google
             #
             # @raise [::Google::Cloud::Error] if the RPC is aborted.
             #
+            # @example Basic example
+            #   require "google/cloud/binary_authorization/v1"
+            #
+            #   # Create a client object. The client can be reused for multiple calls.
+            #   client = Google::Cloud::BinaryAuthorization::V1::BinauthzManagementService::Client.new
+            #
+            #   # Create a request. To set request fields, pass in keyword arguments.
+            #   request = Google::Cloud::BinaryAuthorization::V1::DeleteAttestorRequest.new
+            #
+            #   # Call the delete_attestor method.
+            #   result = client.delete_attestor request
+            #
+            #   # The returned object is of type Google::Protobuf::Empty.
+            #   p result
+            #
             def delete_attestor request, options = nil
               raise ::ArgumentError, "request must be provided" if request.nil?
 
@@ -675,9 +798,11 @@ module Google
                 gapic_version: ::Google::Cloud::BinaryAuthorization::V1::VERSION
               metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
 
-              header_params = {
-                "name" => request.name
-              }
+              header_params = {}
+              if request.name
+                header_params["name"] = request.name
+              end
+
               request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
               metadata[:"x-goog-request-params"] ||= request_params_header
 

data/lib/google/cloud/binary_authorization/v1/system_policy/client.rb

@@ -174,6 +174,21 @@ module Google
             #
             # @raise [::Google::Cloud::Error] if the RPC is aborted.
             #
+            # @example Basic example
+            #   require "google/cloud/binary_authorization/v1"
+            #
+            #   # Create a client object. The client can be reused for multiple calls.
+            #   client = Google::Cloud::BinaryAuthorization::V1::SystemPolicy::Client.new
+            #
+            #   # Create a request. To set request fields, pass in keyword arguments.
+            #   request = Google::Cloud::BinaryAuthorization::V1::GetSystemPolicyRequest.new
+            #
+            #   # Call the get_system_policy method.
+            #   result = client.get_system_policy request
+            #
+            #   # The returned object is of type Google::Cloud::BinaryAuthorization::V1::Policy.
+            #   p result
+            #
             def get_system_policy request, options = nil
               raise ::ArgumentError, "request must be provided" if request.nil?
 
@@ -191,9 +206,11 @@ module Google
                 gapic_version: ::Google::Cloud::BinaryAuthorization::V1::VERSION
               metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
 
-              header_params = {
-                "name" => request.name
-              }
+              header_params = {}
+              if request.name
+                header_params["name"] = request.name
+              end
+
               request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
               metadata[:"x-goog-request-params"] ||= request_params_header
 

data/lib/google/cloud/binary_authorization/v1/validation_helper/client.rb

@@ -185,6 +185,21 @@ module Google
             #
             # @raise [::Google::Cloud::Error] if the RPC is aborted.
             #
+            # @example Basic example
+            #   require "google/cloud/binary_authorization/v1"
+            #
+            #   # Create a client object. The client can be reused for multiple calls.
+            #   client = Google::Cloud::BinaryAuthorization::V1::ValidationHelper::Client.new
+            #
+            #   # Create a request. To set request fields, pass in keyword arguments.
+            #   request = Google::Cloud::BinaryAuthorization::V1::ValidateAttestationOccurrenceRequest.new
+            #
+            #   # Call the validate_attestation_occurrence method.
+            #   result = client.validate_attestation_occurrence request
+            #
+            #   # The returned object is of type Google::Cloud::BinaryAuthorization::V1::ValidateAttestationOccurrenceResponse.
+            #   p result
+            #
             def validate_attestation_occurrence request, options = nil
               raise ::ArgumentError, "request must be provided" if request.nil?
 
@@ -202,9 +217,11 @@ module Google
                 gapic_version: ::Google::Cloud::BinaryAuthorization::V1::VERSION
               metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
 
-              header_params = {
-                "attestor" => request.attestor
-              }
+              header_params = {}
+              if request.attestor
+                header_params["attestor"] = request.attestor
+              end
+
               request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
               metadata[:"x-goog-request-params"] ||= request_params_header
 

data/lib/google/cloud/binary_authorization/v1/version.rb

@@ -21,7 +21,7 @@ module Google
   module Cloud
     module BinaryAuthorization
       module V1
-        VERSION = "0.1.0"
+        VERSION = "0.1.1"
       end
     end
   end

data/lib/google/cloud/binaryauthorization/v1/resources_pb.rb

@@ -1,12 +1,12 @@
 # Generated by the protocol buffer compiler.  DO NOT EDIT!
 # source: google/cloud/binaryauthorization/v1/resources.proto
 
-require 'google/protobuf'
-
 require 'google/api/field_behavior_pb'
 require 'google/api/resource_pb'
 require 'google/protobuf/timestamp_pb'
 require 'google/api/annotations_pb'
+require 'google/protobuf'
+
 Google::Protobuf::DescriptorPool.generated_pool.build do
   add_file("google/cloud/binaryauthorization/v1/resources.proto", :syntax => :proto3) do
     add_message "google.cloud.binaryauthorization.v1.Policy" do

data/lib/google/cloud/binaryauthorization/v1/service_pb.rb

@@ -1,8 +1,6 @@
 # Generated by the protocol buffer compiler.  DO NOT EDIT!
 # source: google/cloud/binaryauthorization/v1/service.proto
 
-require 'google/protobuf'
-
 require 'google/api/annotations_pb'
 require 'google/api/client_pb'
 require 'google/api/field_behavior_pb'
@@ -10,6 +8,8 @@ require 'google/api/resource_pb'
 require 'google/cloud/binaryauthorization/v1/resources_pb'
 require 'google/protobuf/empty_pb'
 require 'grafeas/v1/attestation_pb'
+require 'google/protobuf'
+
 Google::Protobuf::DescriptorPool.generated_pool.build do
   add_file("google/cloud/binaryauthorization/v1/service.proto", :syntax => :proto3) do
     add_message "google.cloud.binaryauthorization.v1.GetPolicyRequest" do

data/proto_docs/grafeas/v1/attestation.rb

@@ -51,6 +51,16 @@ module Grafeas
       end
     end
 
+    # @!attribute [rw] compact_jwt
+    #   @return [::String]
+    #     The compact encoding of a JWS, which is always three base64 encoded strings
+    #     joined by periods. For details, see:
+    #     https://tools.ietf.org/html/rfc7515.html#section-3.1
+    class Jwt
+      include ::Google::Protobuf::MessageExts
+      extend ::Google::Protobuf::MessageExts::ClassMethods
+    end
+
     # Occurrence that represents a single "attestation". The authenticity of an
     # attestation can be verified using the attached signature. If the verifier
     # trusts the public key of the signer, then verifying the signature is
@@ -69,6 +79,17 @@ module Grafeas
     #     should consider this attestation message verified if at least one
     #     `signature` verifies `serialized_payload`.  See `Signature` in common.proto
     #     for more details on signature structure and verification.
+    # @!attribute [rw] jwts
+    #   @return [::Array<::Grafeas::V1::Jwt>]
+    #     One or more JWTs encoding a self-contained attestation.
+    #     Each JWT encodes the payload that it verifies within the JWT itself.
+    #     Verifier implementation SHOULD ignore the `serialized_payload` field
+    #     when verifying these JWTs.
+    #     If only JWTs are present on this AttestationOccurrence, then the
+    #     `serialized_payload` SHOULD be left empty.
+    #     Each JWT SHOULD encode a claim specific to the `resource_uri` of this
+    #     Occurrence, but this is not validated by Grafeas metadata API
+    #     implementations.  The JWT itself is opaque to Grafeas.
     class AttestationOccurrence
       include ::Google::Protobuf::MessageExts
       extend ::Google::Protobuf::MessageExts::ClassMethods

data/proto_docs/grafeas/v1/common.rb

@@ -65,7 +65,7 @@ module Grafeas
     #   @return [::String]
     #     The identifier for the public key that verifies this signature.
     #       * The `public_key_id` is required.
-    #       * The `public_key_id` MUST be an RFC3986 conformant URI.
+    #       * The `public_key_id` SHOULD be an RFC3986 conformant URI.
     #       * When possible, the `public_key_id` SHOULD be an immutable reference,
     #         such as a cryptographic digest.
     #
@@ -85,9 +85,32 @@ module Grafeas
       extend ::Google::Protobuf::MessageExts::ClassMethods
     end
 
+    # MUST match
+    # https://github.com/secure-systems-lab/dsse/blob/master/envelope.proto. An
+    # authenticated message of arbitrary type.
+    # @!attribute [rw] payload
+    #   @return [::String]
+    # @!attribute [rw] payload_type
+    #   @return [::String]
+    # @!attribute [rw] signatures
+    #   @return [::Array<::Grafeas::V1::EnvelopeSignature>]
+    class Envelope
+      include ::Google::Protobuf::MessageExts
+      extend ::Google::Protobuf::MessageExts::ClassMethods
+    end
+
+    # @!attribute [rw] sig
+    #   @return [::String]
+    # @!attribute [rw] keyid
+    #   @return [::String]
+    class EnvelopeSignature
+      include ::Google::Protobuf::MessageExts
+      extend ::Google::Protobuf::MessageExts::ClassMethods
+    end
+
     # Kind represents the kinds of notes supported.
     module NoteKind
-      # Unknown.
+      # Default value. This value is unused.
       NOTE_KIND_UNSPECIFIED = 0
 
       # The note and occurrence represent a package vulnerability.
@@ -113,6 +136,12 @@ module Grafeas
 
       # This represents an available package upgrade.
       UPGRADE = 8
+
+      # This represents a Compliance Note
+      COMPLIANCE = 9
+
+      # This represents a DSSE attestation Note
+      DSSE_ATTESTATION = 10
     end
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: google-cloud-binary_authorization-v1
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.1.1
 platform: ruby
 authors:
 - Google LLC
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-09-27 00:00:00.000000000 Z
+date: 2021-11-08 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: gapic-common