google-cloud-iap-v1 0.2.0 → 0.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f50fdb004bb7ea5e1b2806c53a60957c408ac75fafcf5e1ed97ea8b12bff5a6e
-  data.tar.gz: 4f56167db7bc16ffbee189b05e6ca928290a2ed8578f656a8c82320a1b9059b3
+  metadata.gz: 4d0e2c3423feead8e29e5b6528c55edbbdf659c4c10919f6aafb0797ed31484a
+  data.tar.gz: 3499c5349aa082a92568e12607764fb8ffd8de52db2060233c14f8be8e295a6c
 SHA512:
-  metadata.gz: 8f2f9bd3a4a0cb71377139a88c17ddcb9d5ae09b543ac1051109f3734868611e65163bfa52990c4f937cd160840fdc2720c13c3515b37f3936158796e7aa3b58
-  data.tar.gz: 9ebb229221d9c8e4b26381003b06517fd16cfdad6fdbb8b0641223f2c4a23cc7dae8b1367f6db35493ffeef1849edc33f52b365b326545f90996dee77b14f68f
+  metadata.gz: 9c9e63413d86964952f6ca3d0119d06b8f0c0f8863394366a518b5b4b91e25ca94f26fc1deb459b3f8c2398e68758a6975174fa5d86359a4fb6640c87c660960
+  data.tar.gz: 8746f1f52c6beca3e631ad05f5bad0d0ae261c1b94d4cdb11e20ee4a200b6bb026748845ccf28995fd9d760885691e6e97d3dc96bea7561d7ac07327a57e278e

data/README.md

@@ -69,6 +69,11 @@ module GRPC
 end
 ```
 
+
+## Google Cloud Samples
+
+To browse ready to use code samples check [Google Cloud Samples](https://cloud.google.com/docs/samples).
+
 ## Supported Ruby Versions
 
 This library is supported on Ruby 2.5+.

data/lib/google/cloud/iap/v1/identity_aware_proxy_admin_service/client.rb

@@ -30,6 +30,8 @@ module Google
           # APIs for Identity-Aware Proxy Admin configurations.
           #
           class Client
+            include Paths
+
             # @private
             attr_reader :identity_aware_proxy_admin_service_stub
 
@@ -609,6 +611,473 @@ module Google
               raise ::Google::Cloud::Error.from_error(e)
             end
 
+            ##
+            # Lists the existing TunnelDestGroups. To group across all locations, use a
+            # `-` as the location ID. For example:
+            # `/v1/projects/123/iap_tunnel/locations/-/destGroups`
+            #
+            # @overload list_tunnel_dest_groups(request, options = nil)
+            #   Pass arguments to `list_tunnel_dest_groups` via a request object, either of type
+            #   {::Google::Cloud::Iap::V1::ListTunnelDestGroupsRequest} or an equivalent Hash.
+            #
+            #   @param request [::Google::Cloud::Iap::V1::ListTunnelDestGroupsRequest, ::Hash]
+            #     A request object representing the call parameters. Required. To specify no
+            #     parameters, or to keep all the default parameter values, pass an empty Hash.
+            #   @param options [::Gapic::CallOptions, ::Hash]
+            #     Overrides the default settings for this call, e.g, timeout, retries, etc. Optional.
+            #
+            # @overload list_tunnel_dest_groups(parent: nil, page_size: nil, page_token: nil)
+            #   Pass arguments to `list_tunnel_dest_groups` via keyword arguments. Note that at
+            #   least one keyword argument is required. To specify no parameters, or to keep all
+            #   the default parameter values, pass an empty Hash as a request object (see above).
+            #
+            #   @param parent [::String]
+            #     Required. Google Cloud Project ID and location.
+            #     In the following format:
+            #     `projects/{project_number/id}/iap_tunnel/locations/{location}`.
+            #     A `-` can be used for the location to group across all locations.
+            #   @param page_size [::Integer]
+            #     The maximum number of groups to return. The service might return fewer than
+            #     this value.
+            #     If unspecified, at most 100 groups are returned.
+            #     The maximum value is 1000; values above 1000 are coerced to 1000.
+            #   @param page_token [::String]
+            #     A page token, received from a previous `ListTunnelDestGroups`
+            #     call. Provide this to retrieve the subsequent page.
+            #
+            #     When paginating, all other parameters provided to
+            #     `ListTunnelDestGroups` must match the call that provided the page
+            #     token.
+            #
+            # @yield [response, operation] Access the result along with the RPC operation
+            # @yieldparam response [::Gapic::PagedEnumerable<::Google::Cloud::Iap::V1::TunnelDestGroup>]
+            # @yieldparam operation [::GRPC::ActiveCall::Operation]
+            #
+            # @return [::Gapic::PagedEnumerable<::Google::Cloud::Iap::V1::TunnelDestGroup>]
+            #
+            # @raise [::Google::Cloud::Error] if the RPC is aborted.
+            #
+            # @example Basic example
+            #   require "google/cloud/iap/v1"
+            #
+            #   # Create a client object. The client can be reused for multiple calls.
+            #   client = Google::Cloud::Iap::V1::IdentityAwareProxyAdminService::Client.new
+            #
+            #   # Create a request. To set request fields, pass in keyword arguments.
+            #   request = Google::Cloud::Iap::V1::ListTunnelDestGroupsRequest.new
+            #
+            #   # Call the list_tunnel_dest_groups method.
+            #   result = client.list_tunnel_dest_groups request
+            #
+            #   # The returned object is of type Gapic::PagedEnumerable. You can
+            #   # iterate over all elements by calling #each, and the enumerable
+            #   # will lazily make API calls to fetch subsequent pages. Other
+            #   # methods are also available for managing paging directly.
+            #   result.each do |response|
+            #     # Each element is of type ::Google::Cloud::Iap::V1::TunnelDestGroup.
+            #     p response
+            #   end
+            #
+            def list_tunnel_dest_groups request, options = nil
+              raise ::ArgumentError, "request must be provided" if request.nil?
+
+              request = ::Gapic::Protobuf.coerce request, to: ::Google::Cloud::Iap::V1::ListTunnelDestGroupsRequest
+
+              # Converts hash and nil to an options object
+              options = ::Gapic::CallOptions.new(**options.to_h) if options.respond_to? :to_h
+
+              # Customize the options with defaults
+              metadata = @config.rpcs.list_tunnel_dest_groups.metadata.to_h
+
+              # Set x-goog-api-client and x-goog-user-project headers
+              metadata[:"x-goog-api-client"] ||= ::Gapic::Headers.x_goog_api_client \
+                lib_name: @config.lib_name, lib_version: @config.lib_version,
+                gapic_version: ::Google::Cloud::Iap::V1::VERSION
+              metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
+
+              header_params = {}
+              if request.parent
+                header_params["parent"] = request.parent
+              end
+
+              request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
+              metadata[:"x-goog-request-params"] ||= request_params_header
+
+              options.apply_defaults timeout:      @config.rpcs.list_tunnel_dest_groups.timeout,
+                                     metadata:     metadata,
+                                     retry_policy: @config.rpcs.list_tunnel_dest_groups.retry_policy
+
+              options.apply_defaults timeout:      @config.timeout,
+                                     metadata:     @config.metadata,
+                                     retry_policy: @config.retry_policy
+
+              @identity_aware_proxy_admin_service_stub.call_rpc :list_tunnel_dest_groups, request, options: options do |response, operation|
+                response = ::Gapic::PagedEnumerable.new @identity_aware_proxy_admin_service_stub, :list_tunnel_dest_groups, request, response, operation, options
+                yield response, operation if block_given?
+                return response
+              end
+            rescue ::GRPC::BadStatus => e
+              raise ::Google::Cloud::Error.from_error(e)
+            end
+
+            ##
+            # Creates a new TunnelDestGroup.
+            #
+            # @overload create_tunnel_dest_group(request, options = nil)
+            #   Pass arguments to `create_tunnel_dest_group` via a request object, either of type
+            #   {::Google::Cloud::Iap::V1::CreateTunnelDestGroupRequest} or an equivalent Hash.
+            #
+            #   @param request [::Google::Cloud::Iap::V1::CreateTunnelDestGroupRequest, ::Hash]
+            #     A request object representing the call parameters. Required. To specify no
+            #     parameters, or to keep all the default parameter values, pass an empty Hash.
+            #   @param options [::Gapic::CallOptions, ::Hash]
+            #     Overrides the default settings for this call, e.g, timeout, retries, etc. Optional.
+            #
+            # @overload create_tunnel_dest_group(parent: nil, tunnel_dest_group: nil, tunnel_dest_group_id: nil)
+            #   Pass arguments to `create_tunnel_dest_group` via keyword arguments. Note that at
+            #   least one keyword argument is required. To specify no parameters, or to keep all
+            #   the default parameter values, pass an empty Hash as a request object (see above).
+            #
+            #   @param parent [::String]
+            #     Required. Google Cloud Project ID and location.
+            #     In the following format:
+            #     `projects/{project_number/id}/iap_tunnel/locations/{location}`.
+            #   @param tunnel_dest_group [::Google::Cloud::Iap::V1::TunnelDestGroup, ::Hash]
+            #     Required. The TunnelDestGroup to create.
+            #   @param tunnel_dest_group_id [::String]
+            #     Required. The ID to use for the TunnelDestGroup, which becomes the final component of
+            #     the resource name.
+            #
+            #     This value must be 4-63 characters, and valid characters
+            #     are `[a-z][0-9]-`.
+            #
+            # @yield [response, operation] Access the result along with the RPC operation
+            # @yieldparam response [::Google::Cloud::Iap::V1::TunnelDestGroup]
+            # @yieldparam operation [::GRPC::ActiveCall::Operation]
+            #
+            # @return [::Google::Cloud::Iap::V1::TunnelDestGroup]
+            #
+            # @raise [::Google::Cloud::Error] if the RPC is aborted.
+            #
+            # @example Basic example
+            #   require "google/cloud/iap/v1"
+            #
+            #   # Create a client object. The client can be reused for multiple calls.
+            #   client = Google::Cloud::Iap::V1::IdentityAwareProxyAdminService::Client.new
+            #
+            #   # Create a request. To set request fields, pass in keyword arguments.
+            #   request = Google::Cloud::Iap::V1::CreateTunnelDestGroupRequest.new
+            #
+            #   # Call the create_tunnel_dest_group method.
+            #   result = client.create_tunnel_dest_group request
+            #
+            #   # The returned object is of type Google::Cloud::Iap::V1::TunnelDestGroup.
+            #   p result
+            #
+            def create_tunnel_dest_group request, options = nil
+              raise ::ArgumentError, "request must be provided" if request.nil?
+
+              request = ::Gapic::Protobuf.coerce request, to: ::Google::Cloud::Iap::V1::CreateTunnelDestGroupRequest
+
+              # Converts hash and nil to an options object
+              options = ::Gapic::CallOptions.new(**options.to_h) if options.respond_to? :to_h
+
+              # Customize the options with defaults
+              metadata = @config.rpcs.create_tunnel_dest_group.metadata.to_h
+
+              # Set x-goog-api-client and x-goog-user-project headers
+              metadata[:"x-goog-api-client"] ||= ::Gapic::Headers.x_goog_api_client \
+                lib_name: @config.lib_name, lib_version: @config.lib_version,
+                gapic_version: ::Google::Cloud::Iap::V1::VERSION
+              metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
+
+              header_params = {}
+              if request.parent
+                header_params["parent"] = request.parent
+              end
+
+              request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
+              metadata[:"x-goog-request-params"] ||= request_params_header
+
+              options.apply_defaults timeout:      @config.rpcs.create_tunnel_dest_group.timeout,
+                                     metadata:     metadata,
+                                     retry_policy: @config.rpcs.create_tunnel_dest_group.retry_policy
+
+              options.apply_defaults timeout:      @config.timeout,
+                                     metadata:     @config.metadata,
+                                     retry_policy: @config.retry_policy
+
+              @identity_aware_proxy_admin_service_stub.call_rpc :create_tunnel_dest_group, request, options: options do |response, operation|
+                yield response, operation if block_given?
+                return response
+              end
+            rescue ::GRPC::BadStatus => e
+              raise ::Google::Cloud::Error.from_error(e)
+            end
+
+            ##
+            # Retrieves an existing TunnelDestGroup.
+            #
+            # @overload get_tunnel_dest_group(request, options = nil)
+            #   Pass arguments to `get_tunnel_dest_group` via a request object, either of type
+            #   {::Google::Cloud::Iap::V1::GetTunnelDestGroupRequest} or an equivalent Hash.
+            #
+            #   @param request [::Google::Cloud::Iap::V1::GetTunnelDestGroupRequest, ::Hash]
+            #     A request object representing the call parameters. Required. To specify no
+            #     parameters, or to keep all the default parameter values, pass an empty Hash.
+            #   @param options [::Gapic::CallOptions, ::Hash]
+            #     Overrides the default settings for this call, e.g, timeout, retries, etc. Optional.
+            #
+            # @overload get_tunnel_dest_group(name: nil)
+            #   Pass arguments to `get_tunnel_dest_group` via keyword arguments. Note that at
+            #   least one keyword argument is required. To specify no parameters, or to keep all
+            #   the default parameter values, pass an empty Hash as a request object (see above).
+            #
+            #   @param name [::String]
+            #     Required. Name of the TunnelDestGroup to be fetched.
+            #     In the following format:
+            #     `projects/{project_number/id}/iap_tunnel/locations/{location}/destGroups/{dest_group}`.
+            #
+            # @yield [response, operation] Access the result along with the RPC operation
+            # @yieldparam response [::Google::Cloud::Iap::V1::TunnelDestGroup]
+            # @yieldparam operation [::GRPC::ActiveCall::Operation]
+            #
+            # @return [::Google::Cloud::Iap::V1::TunnelDestGroup]
+            #
+            # @raise [::Google::Cloud::Error] if the RPC is aborted.
+            #
+            # @example Basic example
+            #   require "google/cloud/iap/v1"
+            #
+            #   # Create a client object. The client can be reused for multiple calls.
+            #   client = Google::Cloud::Iap::V1::IdentityAwareProxyAdminService::Client.new
+            #
+            #   # Create a request. To set request fields, pass in keyword arguments.
+            #   request = Google::Cloud::Iap::V1::GetTunnelDestGroupRequest.new
+            #
+            #   # Call the get_tunnel_dest_group method.
+            #   result = client.get_tunnel_dest_group request
+            #
+            #   # The returned object is of type Google::Cloud::Iap::V1::TunnelDestGroup.
+            #   p result
+            #
+            def get_tunnel_dest_group request, options = nil
+              raise ::ArgumentError, "request must be provided" if request.nil?
+
+              request = ::Gapic::Protobuf.coerce request, to: ::Google::Cloud::Iap::V1::GetTunnelDestGroupRequest
+
+              # Converts hash and nil to an options object
+              options = ::Gapic::CallOptions.new(**options.to_h) if options.respond_to? :to_h
+
+              # Customize the options with defaults
+              metadata = @config.rpcs.get_tunnel_dest_group.metadata.to_h
+
+              # Set x-goog-api-client and x-goog-user-project headers
+              metadata[:"x-goog-api-client"] ||= ::Gapic::Headers.x_goog_api_client \
+                lib_name: @config.lib_name, lib_version: @config.lib_version,
+                gapic_version: ::Google::Cloud::Iap::V1::VERSION
+              metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
+
+              header_params = {}
+              if request.name
+                header_params["name"] = request.name
+              end
+
+              request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
+              metadata[:"x-goog-request-params"] ||= request_params_header
+
+              options.apply_defaults timeout:      @config.rpcs.get_tunnel_dest_group.timeout,
+                                     metadata:     metadata,
+                                     retry_policy: @config.rpcs.get_tunnel_dest_group.retry_policy
+
+              options.apply_defaults timeout:      @config.timeout,
+                                     metadata:     @config.metadata,
+                                     retry_policy: @config.retry_policy
+
+              @identity_aware_proxy_admin_service_stub.call_rpc :get_tunnel_dest_group, request, options: options do |response, operation|
+                yield response, operation if block_given?
+                return response
+              end
+            rescue ::GRPC::BadStatus => e
+              raise ::Google::Cloud::Error.from_error(e)
+            end
+
+            ##
+            # Deletes a TunnelDestGroup.
+            #
+            # @overload delete_tunnel_dest_group(request, options = nil)
+            #   Pass arguments to `delete_tunnel_dest_group` via a request object, either of type
+            #   {::Google::Cloud::Iap::V1::DeleteTunnelDestGroupRequest} or an equivalent Hash.
+            #
+            #   @param request [::Google::Cloud::Iap::V1::DeleteTunnelDestGroupRequest, ::Hash]
+            #     A request object representing the call parameters. Required. To specify no
+            #     parameters, or to keep all the default parameter values, pass an empty Hash.
+            #   @param options [::Gapic::CallOptions, ::Hash]
+            #     Overrides the default settings for this call, e.g, timeout, retries, etc. Optional.
+            #
+            # @overload delete_tunnel_dest_group(name: nil)
+            #   Pass arguments to `delete_tunnel_dest_group` via keyword arguments. Note that at
+            #   least one keyword argument is required. To specify no parameters, or to keep all
+            #   the default parameter values, pass an empty Hash as a request object (see above).
+            #
+            #   @param name [::String]
+            #     Required. Name of the TunnelDestGroup to delete.
+            #     In the following format:
+            #     `projects/{project_number/id}/iap_tunnel/locations/{location}/destGroups/{dest_group}`.
+            #
+            # @yield [response, operation] Access the result along with the RPC operation
+            # @yieldparam response [::Google::Protobuf::Empty]
+            # @yieldparam operation [::GRPC::ActiveCall::Operation]
+            #
+            # @return [::Google::Protobuf::Empty]
+            #
+            # @raise [::Google::Cloud::Error] if the RPC is aborted.
+            #
+            # @example Basic example
+            #   require "google/cloud/iap/v1"
+            #
+            #   # Create a client object. The client can be reused for multiple calls.
+            #   client = Google::Cloud::Iap::V1::IdentityAwareProxyAdminService::Client.new
+            #
+            #   # Create a request. To set request fields, pass in keyword arguments.
+            #   request = Google::Cloud::Iap::V1::DeleteTunnelDestGroupRequest.new
+            #
+            #   # Call the delete_tunnel_dest_group method.
+            #   result = client.delete_tunnel_dest_group request
+            #
+            #   # The returned object is of type Google::Protobuf::Empty.
+            #   p result
+            #
+            def delete_tunnel_dest_group request, options = nil
+              raise ::ArgumentError, "request must be provided" if request.nil?
+
+              request = ::Gapic::Protobuf.coerce request, to: ::Google::Cloud::Iap::V1::DeleteTunnelDestGroupRequest
+
+              # Converts hash and nil to an options object
+              options = ::Gapic::CallOptions.new(**options.to_h) if options.respond_to? :to_h
+
+              # Customize the options with defaults
+              metadata = @config.rpcs.delete_tunnel_dest_group.metadata.to_h
+
+              # Set x-goog-api-client and x-goog-user-project headers
+              metadata[:"x-goog-api-client"] ||= ::Gapic::Headers.x_goog_api_client \
+                lib_name: @config.lib_name, lib_version: @config.lib_version,
+                gapic_version: ::Google::Cloud::Iap::V1::VERSION
+              metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
+
+              header_params = {}
+              if request.name
+                header_params["name"] = request.name
+              end
+
+              request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
+              metadata[:"x-goog-request-params"] ||= request_params_header
+
+              options.apply_defaults timeout:      @config.rpcs.delete_tunnel_dest_group.timeout,
+                                     metadata:     metadata,
+                                     retry_policy: @config.rpcs.delete_tunnel_dest_group.retry_policy
+
+              options.apply_defaults timeout:      @config.timeout,
+                                     metadata:     @config.metadata,
+                                     retry_policy: @config.retry_policy
+
+              @identity_aware_proxy_admin_service_stub.call_rpc :delete_tunnel_dest_group, request, options: options do |response, operation|
+                yield response, operation if block_given?
+                return response
+              end
+            rescue ::GRPC::BadStatus => e
+              raise ::Google::Cloud::Error.from_error(e)
+            end
+
+            ##
+            # Updates a TunnelDestGroup.
+            #
+            # @overload update_tunnel_dest_group(request, options = nil)
+            #   Pass arguments to `update_tunnel_dest_group` via a request object, either of type
+            #   {::Google::Cloud::Iap::V1::UpdateTunnelDestGroupRequest} or an equivalent Hash.
+            #
+            #   @param request [::Google::Cloud::Iap::V1::UpdateTunnelDestGroupRequest, ::Hash]
+            #     A request object representing the call parameters. Required. To specify no
+            #     parameters, or to keep all the default parameter values, pass an empty Hash.
+            #   @param options [::Gapic::CallOptions, ::Hash]
+            #     Overrides the default settings for this call, e.g, timeout, retries, etc. Optional.
+            #
+            # @overload update_tunnel_dest_group(tunnel_dest_group: nil, update_mask: nil)
+            #   Pass arguments to `update_tunnel_dest_group` via keyword arguments. Note that at
+            #   least one keyword argument is required. To specify no parameters, or to keep all
+            #   the default parameter values, pass an empty Hash as a request object (see above).
+            #
+            #   @param tunnel_dest_group [::Google::Cloud::Iap::V1::TunnelDestGroup, ::Hash]
+            #     Required. The new values for the TunnelDestGroup.
+            #   @param update_mask [::Google::Protobuf::FieldMask, ::Hash]
+            #     A field mask that specifies which IAP settings to update.
+            #     If omitted, then all of the settings are updated. See
+            #     https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#fieldmask
+            #
+            # @yield [response, operation] Access the result along with the RPC operation
+            # @yieldparam response [::Google::Cloud::Iap::V1::TunnelDestGroup]
+            # @yieldparam operation [::GRPC::ActiveCall::Operation]
+            #
+            # @return [::Google::Cloud::Iap::V1::TunnelDestGroup]
+            #
+            # @raise [::Google::Cloud::Error] if the RPC is aborted.
+            #
+            # @example Basic example
+            #   require "google/cloud/iap/v1"
+            #
+            #   # Create a client object. The client can be reused for multiple calls.
+            #   client = Google::Cloud::Iap::V1::IdentityAwareProxyAdminService::Client.new
+            #
+            #   # Create a request. To set request fields, pass in keyword arguments.
+            #   request = Google::Cloud::Iap::V1::UpdateTunnelDestGroupRequest.new
+            #
+            #   # Call the update_tunnel_dest_group method.
+            #   result = client.update_tunnel_dest_group request
+            #
+            #   # The returned object is of type Google::Cloud::Iap::V1::TunnelDestGroup.
+            #   p result
+            #
+            def update_tunnel_dest_group request, options = nil
+              raise ::ArgumentError, "request must be provided" if request.nil?
+
+              request = ::Gapic::Protobuf.coerce request, to: ::Google::Cloud::Iap::V1::UpdateTunnelDestGroupRequest
+
+              # Converts hash and nil to an options object
+              options = ::Gapic::CallOptions.new(**options.to_h) if options.respond_to? :to_h
+
+              # Customize the options with defaults
+              metadata = @config.rpcs.update_tunnel_dest_group.metadata.to_h
+
+              # Set x-goog-api-client and x-goog-user-project headers
+              metadata[:"x-goog-api-client"] ||= ::Gapic::Headers.x_goog_api_client \
+                lib_name: @config.lib_name, lib_version: @config.lib_version,
+                gapic_version: ::Google::Cloud::Iap::V1::VERSION
+              metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
+
+              header_params = {}
+              if request.tunnel_dest_group&.name
+                header_params["tunnel_dest_group.name"] = request.tunnel_dest_group.name
+              end
+
+              request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
+              metadata[:"x-goog-request-params"] ||= request_params_header
+
+              options.apply_defaults timeout:      @config.rpcs.update_tunnel_dest_group.timeout,
+                                     metadata:     metadata,
+                                     retry_policy: @config.rpcs.update_tunnel_dest_group.retry_policy
+
+              options.apply_defaults timeout:      @config.timeout,
+                                     metadata:     @config.metadata,
+                                     retry_policy: @config.retry_policy
+
+              @identity_aware_proxy_admin_service_stub.call_rpc :update_tunnel_dest_group, request, options: options do |response, operation|
+                yield response, operation if block_given?
+                return response
+              end
+            rescue ::GRPC::BadStatus => e
+              raise ::Google::Cloud::Error.from_error(e)
+            end
+
             ##
             # Configuration class for the IdentityAwareProxyAdminService API.
             #
@@ -769,6 +1238,31 @@ module Google
                 # @return [::Gapic::Config::Method]
                 #
                 attr_reader :update_iap_settings
+                ##
+                # RPC-specific configuration for `list_tunnel_dest_groups`
+                # @return [::Gapic::Config::Method]
+                #
+                attr_reader :list_tunnel_dest_groups
+                ##
+                # RPC-specific configuration for `create_tunnel_dest_group`
+                # @return [::Gapic::Config::Method]
+                #
+                attr_reader :create_tunnel_dest_group
+                ##
+                # RPC-specific configuration for `get_tunnel_dest_group`
+                # @return [::Gapic::Config::Method]
+                #
+                attr_reader :get_tunnel_dest_group
+                ##
+                # RPC-specific configuration for `delete_tunnel_dest_group`
+                # @return [::Gapic::Config::Method]
+                #
+                attr_reader :delete_tunnel_dest_group
+                ##
+                # RPC-specific configuration for `update_tunnel_dest_group`
+                # @return [::Gapic::Config::Method]
+                #
+                attr_reader :update_tunnel_dest_group
 
                 # @private
                 def initialize parent_rpcs = nil
@@ -782,6 +1276,16 @@ module Google
                   @get_iap_settings = ::Gapic::Config::Method.new get_iap_settings_config
                   update_iap_settings_config = parent_rpcs.update_iap_settings if parent_rpcs.respond_to? :update_iap_settings
                   @update_iap_settings = ::Gapic::Config::Method.new update_iap_settings_config
+                  list_tunnel_dest_groups_config = parent_rpcs.list_tunnel_dest_groups if parent_rpcs.respond_to? :list_tunnel_dest_groups
+                  @list_tunnel_dest_groups = ::Gapic::Config::Method.new list_tunnel_dest_groups_config
+                  create_tunnel_dest_group_config = parent_rpcs.create_tunnel_dest_group if parent_rpcs.respond_to? :create_tunnel_dest_group
+                  @create_tunnel_dest_group = ::Gapic::Config::Method.new create_tunnel_dest_group_config
+                  get_tunnel_dest_group_config = parent_rpcs.get_tunnel_dest_group if parent_rpcs.respond_to? :get_tunnel_dest_group
+                  @get_tunnel_dest_group = ::Gapic::Config::Method.new get_tunnel_dest_group_config
+                  delete_tunnel_dest_group_config = parent_rpcs.delete_tunnel_dest_group if parent_rpcs.respond_to? :delete_tunnel_dest_group
+                  @delete_tunnel_dest_group = ::Gapic::Config::Method.new delete_tunnel_dest_group_config
+                  update_tunnel_dest_group_config = parent_rpcs.update_tunnel_dest_group if parent_rpcs.respond_to? :update_tunnel_dest_group
+                  @update_tunnel_dest_group = ::Gapic::Config::Method.new update_tunnel_dest_group_config
 
                   yield self if block_given?
                 end

data/lib/google/cloud/iap/v1/identity_aware_proxy_admin_service/paths.rb

@@ -0,0 +1,69 @@
+# frozen_string_literal: true
+
+# Copyright 2022 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
+
+
+module Google
+  module Cloud
+    module Iap
+      module V1
+        module IdentityAwareProxyAdminService
+          # Path helper methods for the IdentityAwareProxyAdminService API.
+          module Paths
+            ##
+            # Create a fully-qualified TunnelDestGroup resource string.
+            #
+            # The resource will be in the following format:
+            #
+            # `projects/{project}/iap_tunnel/locations/{location}/destGroups/{dest_group}`
+            #
+            # @param project [String]
+            # @param location [String]
+            # @param dest_group [String]
+            #
+            # @return [::String]
+            def tunnel_dest_group_path project:, location:, dest_group:
+              raise ::ArgumentError, "project cannot contain /" if project.to_s.include? "/"
+              raise ::ArgumentError, "location cannot contain /" if location.to_s.include? "/"
+
+              "projects/#{project}/iap_tunnel/locations/#{location}/destGroups/#{dest_group}"
+            end
+
+            ##
+            # Create a fully-qualified TunnelLocation resource string.
+            #
+            # The resource will be in the following format:
+            #
+            # `projects/{project}/iap_tunnel/locations/{location}`
+            #
+            # @param project [String]
+            # @param location [String]
+            #
+            # @return [::String]
+            def tunnel_location_path project:, location:
+              raise ::ArgumentError, "project cannot contain /" if project.to_s.include? "/"
+
+              "projects/#{project}/iap_tunnel/locations/#{location}"
+            end
+
+            extend self
+          end
+        end
+      end
+    end
+  end
+end

data/lib/google/cloud/iap/v1/identity_aware_proxy_admin_service.rb

@@ -23,6 +23,7 @@ require "gapic/config/method"
 require "google/cloud/iap/v1/version"
 
 require "google/cloud/iap/v1/identity_aware_proxy_admin_service/credentials"
+require "google/cloud/iap/v1/identity_aware_proxy_admin_service/paths"
 require "google/cloud/iap/v1/identity_aware_proxy_admin_service/client"
 
 module Google

data/lib/google/cloud/iap/v1/identity_aware_proxy_o_auth_service/client.rb

@@ -235,11 +235,12 @@ module Google
             ##
             # Constructs a new OAuth brand for the project if one does not exist.
             # The created brand is "internal only", meaning that OAuth clients created
-            # under it only accept requests from users who belong to the same G Suite
-            # organization as the project. The brand is created in an un-reviewed status.
-            # NOTE: The "internal only" status can be manually changed in the Google
-            # Cloud console. Requires that a brand does not already exist for the
-            # project, and that the specified support email is owned by the caller.
+            # under it only accept requests from users who belong to the same Google
+            # Workspace organization as the project. The brand is created in an
+            # un-reviewed status. NOTE: The "internal only" status can be manually
+            # changed in the Google Cloud Console. Requires that a brand does not already
+            # exist for the project, and that the specified support email is owned by the
+            # caller.
             #
             # @overload create_brand(request, options = nil)
             #   Pass arguments to `create_brand` via a request object, either of type

data/lib/google/cloud/iap/v1/service_pb.rb

@@ -1,18 +1,50 @@
 # Generated by the protocol buffer compiler.  DO NOT EDIT!
 # source: google/cloud/iap/v1/service.proto
 
+require 'google/protobuf'
+
 require 'google/api/annotations_pb'
+require 'google/api/client_pb'
 require 'google/api/field_behavior_pb'
+require 'google/api/resource_pb'
 require 'google/iam/v1/iam_policy_pb'
 require 'google/iam/v1/policy_pb'
+require 'google/protobuf/duration_pb'
 require 'google/protobuf/empty_pb'
 require 'google/protobuf/field_mask_pb'
 require 'google/protobuf/wrappers_pb'
-require 'google/api/client_pb'
-require 'google/protobuf'
 
 Google::Protobuf::DescriptorPool.generated_pool.build do
   add_file("google/cloud/iap/v1/service.proto", :syntax => :proto3) do
+    add_message "google.cloud.iap.v1.ListTunnelDestGroupsRequest" do
+      optional :parent, :string, 1
+      optional :page_size, :int32, 2
+      optional :page_token, :string, 3
+    end
+    add_message "google.cloud.iap.v1.ListTunnelDestGroupsResponse" do
+      repeated :tunnel_dest_groups, :message, 1, "google.cloud.iap.v1.TunnelDestGroup"
+      optional :next_page_token, :string, 2
+    end
+    add_message "google.cloud.iap.v1.CreateTunnelDestGroupRequest" do
+      optional :parent, :string, 1
+      optional :tunnel_dest_group, :message, 2, "google.cloud.iap.v1.TunnelDestGroup"
+      optional :tunnel_dest_group_id, :string, 3
+    end
+    add_message "google.cloud.iap.v1.GetTunnelDestGroupRequest" do
+      optional :name, :string, 1
+    end
+    add_message "google.cloud.iap.v1.DeleteTunnelDestGroupRequest" do
+      optional :name, :string, 1
+    end
+    add_message "google.cloud.iap.v1.UpdateTunnelDestGroupRequest" do
+      optional :tunnel_dest_group, :message, 1, "google.cloud.iap.v1.TunnelDestGroup"
+      optional :update_mask, :message, 2, "google.protobuf.FieldMask"
+    end
+    add_message "google.cloud.iap.v1.TunnelDestGroup" do
+      optional :name, :string, 1
+      repeated :cidrs, :string, 2
+      repeated :fqdns, :string, 3
+    end
     add_message "google.cloud.iap.v1.GetIapSettingsRequest" do
       optional :name, :string, 1
     end
@@ -29,6 +61,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :gcip_settings, :message, 1, "google.cloud.iap.v1.GcipSettings"
       optional :cors_settings, :message, 2, "google.cloud.iap.v1.CorsSettings"
       optional :oauth_settings, :message, 3, "google.cloud.iap.v1.OAuthSettings"
+      optional :reauth_settings, :message, 6, "google.cloud.iap.v1.ReauthSettings"
     end
     add_message "google.cloud.iap.v1.GcipSettings" do
       repeated :tenant_ids, :string, 1
@@ -40,6 +73,22 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
     add_message "google.cloud.iap.v1.OAuthSettings" do
       optional :login_hint, :message, 2, "google.protobuf.StringValue"
     end
+    add_message "google.cloud.iap.v1.ReauthSettings" do
+      optional :method, :enum, 1, "google.cloud.iap.v1.ReauthSettings.Method"
+      optional :max_age, :message, 2, "google.protobuf.Duration"
+      optional :policy_type, :enum, 3, "google.cloud.iap.v1.ReauthSettings.PolicyType"
+    end
+    add_enum "google.cloud.iap.v1.ReauthSettings.Method" do
+      value :METHOD_UNSPECIFIED, 0
+      value :LOGIN, 1
+      value :PASSWORD, 2
+      value :SECURE_KEY, 3
+    end
+    add_enum "google.cloud.iap.v1.ReauthSettings.PolicyType" do
+      value :POLICY_TYPE_UNSPECIFIED, 0
+      value :MINIMUM, 1
+      value :DEFAULT, 2
+    end
     add_message "google.cloud.iap.v1.ApplicationSettings" do
       optional :csm_settings, :message, 1, "google.cloud.iap.v1.CsmSettings"
       optional :access_denied_page_settings, :message, 2, "google.cloud.iap.v1.AccessDeniedPageSettings"
@@ -105,6 +154,13 @@ module Google
   module Cloud
     module Iap
       module V1
+        ListTunnelDestGroupsRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.iap.v1.ListTunnelDestGroupsRequest").msgclass
+        ListTunnelDestGroupsResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.iap.v1.ListTunnelDestGroupsResponse").msgclass
+        CreateTunnelDestGroupRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.iap.v1.CreateTunnelDestGroupRequest").msgclass
+        GetTunnelDestGroupRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.iap.v1.GetTunnelDestGroupRequest").msgclass
+        DeleteTunnelDestGroupRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.iap.v1.DeleteTunnelDestGroupRequest").msgclass
+        UpdateTunnelDestGroupRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.iap.v1.UpdateTunnelDestGroupRequest").msgclass
+        TunnelDestGroup = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.iap.v1.TunnelDestGroup").msgclass
         GetIapSettingsRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.iap.v1.GetIapSettingsRequest").msgclass
         UpdateIapSettingsRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.iap.v1.UpdateIapSettingsRequest").msgclass
         IapSettings = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.iap.v1.IapSettings").msgclass
@@ -112,6 +168,9 @@ module Google
         GcipSettings = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.iap.v1.GcipSettings").msgclass
         CorsSettings = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.iap.v1.CorsSettings").msgclass
         OAuthSettings = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.iap.v1.OAuthSettings").msgclass
+        ReauthSettings = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.iap.v1.ReauthSettings").msgclass
+        ReauthSettings::Method = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.iap.v1.ReauthSettings.Method").enummodule
+        ReauthSettings::PolicyType = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.iap.v1.ReauthSettings.PolicyType").enummodule
         ApplicationSettings = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.iap.v1.ApplicationSettings").msgclass
         CsmSettings = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.iap.v1.CsmSettings").msgclass
         AccessDeniedPageSettings = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.iap.v1.AccessDeniedPageSettings").msgclass

data/lib/google/cloud/iap/v1/service_services_pb.rb

@@ -53,6 +53,18 @@ module Google
             # Updates the IAP settings on a particular IAP protected resource. It
             # replaces all fields unless the `update_mask` is set.
             rpc :UpdateIapSettings, ::Google::Cloud::Iap::V1::UpdateIapSettingsRequest, ::Google::Cloud::Iap::V1::IapSettings
+            # Lists the existing TunnelDestGroups. To group across all locations, use a
+            # `-` as the location ID. For example:
+            # `/v1/projects/123/iap_tunnel/locations/-/destGroups`
+            rpc :ListTunnelDestGroups, ::Google::Cloud::Iap::V1::ListTunnelDestGroupsRequest, ::Google::Cloud::Iap::V1::ListTunnelDestGroupsResponse
+            # Creates a new TunnelDestGroup.
+            rpc :CreateTunnelDestGroup, ::Google::Cloud::Iap::V1::CreateTunnelDestGroupRequest, ::Google::Cloud::Iap::V1::TunnelDestGroup
+            # Retrieves an existing TunnelDestGroup.
+            rpc :GetTunnelDestGroup, ::Google::Cloud::Iap::V1::GetTunnelDestGroupRequest, ::Google::Cloud::Iap::V1::TunnelDestGroup
+            # Deletes a TunnelDestGroup.
+            rpc :DeleteTunnelDestGroup, ::Google::Cloud::Iap::V1::DeleteTunnelDestGroupRequest, ::Google::Protobuf::Empty
+            # Updates a TunnelDestGroup.
+            rpc :UpdateTunnelDestGroup, ::Google::Cloud::Iap::V1::UpdateTunnelDestGroupRequest, ::Google::Cloud::Iap::V1::TunnelDestGroup
           end
 
           Stub = Service.rpc_stub_class
@@ -73,11 +85,12 @@ module Google
             rpc :ListBrands, ::Google::Cloud::Iap::V1::ListBrandsRequest, ::Google::Cloud::Iap::V1::ListBrandsResponse
             # Constructs a new OAuth brand for the project if one does not exist.
             # The created brand is "internal only", meaning that OAuth clients created
-            # under it only accept requests from users who belong to the same G Suite
-            # organization as the project. The brand is created in an un-reviewed status.
-            # NOTE: The "internal only" status can be manually changed in the Google
-            # Cloud console. Requires that a brand does not already exist for the
-            # project, and that the specified support email is owned by the caller.
+            # under it only accept requests from users who belong to the same Google
+            # Workspace organization as the project. The brand is created in an
+            # un-reviewed status. NOTE: The "internal only" status can be manually
+            # changed in the Google Cloud Console. Requires that a brand does not already
+            # exist for the project, and that the specified support email is owned by the
+            # caller.
             rpc :CreateBrand, ::Google::Cloud::Iap::V1::CreateBrandRequest, ::Google::Cloud::Iap::V1::Brand
             # Retrieves the OAuth brand of the project.
             rpc :GetBrand, ::Google::Cloud::Iap::V1::GetBrandRequest, ::Google::Cloud::Iap::V1::Brand

data/lib/google/cloud/iap/v1/version.rb

@@ -21,7 +21,7 @@ module Google
   module Cloud
     module Iap
       module V1
-        VERSION = "0.2.0"
+        VERSION = "0.3.0"
       end
     end
   end

data/proto_docs/google/cloud/iap/v1/service.rb

@@ -21,6 +21,118 @@ module Google
   module Cloud
     module Iap
       module V1
+        # The request to ListTunnelDestGroups.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. Google Cloud Project ID and location.
+        #     In the following format:
+        #     `projects/{project_number/id}/iap_tunnel/locations/{location}`.
+        #     A `-` can be used for the location to group across all locations.
+        # @!attribute [rw] page_size
+        #   @return [::Integer]
+        #     The maximum number of groups to return. The service might return fewer than
+        #     this value.
+        #     If unspecified, at most 100 groups are returned.
+        #     The maximum value is 1000; values above 1000 are coerced to 1000.
+        # @!attribute [rw] page_token
+        #   @return [::String]
+        #     A page token, received from a previous `ListTunnelDestGroups`
+        #     call. Provide this to retrieve the subsequent page.
+        #
+        #     When paginating, all other parameters provided to
+        #     `ListTunnelDestGroups` must match the call that provided the page
+        #     token.
+        class ListTunnelDestGroupsRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # The response from ListTunnelDestGroups.
+        # @!attribute [rw] tunnel_dest_groups
+        #   @return [::Array<::Google::Cloud::Iap::V1::TunnelDestGroup>]
+        #     TunnelDestGroup existing in the project.
+        # @!attribute [rw] next_page_token
+        #   @return [::String]
+        #     A token that you can send as `page_token` to retrieve the next page.
+        #     If this field is omitted, there are no subsequent pages.
+        class ListTunnelDestGroupsResponse
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # The request to CreateTunnelDestGroup.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. Google Cloud Project ID and location.
+        #     In the following format:
+        #     `projects/{project_number/id}/iap_tunnel/locations/{location}`.
+        # @!attribute [rw] tunnel_dest_group
+        #   @return [::Google::Cloud::Iap::V1::TunnelDestGroup]
+        #     Required. The TunnelDestGroup to create.
+        # @!attribute [rw] tunnel_dest_group_id
+        #   @return [::String]
+        #     Required. The ID to use for the TunnelDestGroup, which becomes the final component of
+        #     the resource name.
+        #
+        #     This value must be 4-63 characters, and valid characters
+        #     are `[a-z][0-9]-`.
+        class CreateTunnelDestGroupRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # The request to GetTunnelDestGroup.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. Name of the TunnelDestGroup to be fetched.
+        #     In the following format:
+        #     `projects/{project_number/id}/iap_tunnel/locations/{location}/destGroups/{dest_group}`.
+        class GetTunnelDestGroupRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # The request to DeleteTunnelDestGroup.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. Name of the TunnelDestGroup to delete.
+        #     In the following format:
+        #     `projects/{project_number/id}/iap_tunnel/locations/{location}/destGroups/{dest_group}`.
+        class DeleteTunnelDestGroupRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # The request to UpdateTunnelDestGroup.
+        # @!attribute [rw] tunnel_dest_group
+        #   @return [::Google::Cloud::Iap::V1::TunnelDestGroup]
+        #     Required. The new values for the TunnelDestGroup.
+        # @!attribute [rw] update_mask
+        #   @return [::Google::Protobuf::FieldMask]
+        #     A field mask that specifies which IAP settings to update.
+        #     If omitted, then all of the settings are updated. See
+        #     https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#fieldmask
+        class UpdateTunnelDestGroupRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # A TunnelDestGroup.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. Immutable. Identifier for the TunnelDestGroup. Must be unique within the
+        #     project.
+        # @!attribute [rw] cidrs
+        #   @return [::Array<::String>]
+        #     null List of CIDRs that this group applies to.
+        # @!attribute [rw] fqdns
+        #   @return [::Array<::String>]
+        #     null List of FQDNs that this group applies to.
+        class TunnelDestGroup
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
         # The request sent to GetIapSettings.
         # @!attribute [rw] name
         #   @return [::String]
@@ -73,6 +185,9 @@ module Google
         # @!attribute [rw] oauth_settings
         #   @return [::Google::Cloud::Iap::V1::OAuthSettings]
         #     Settings to configure IAP's OAuth behavior.
+        # @!attribute [rw] reauth_settings
+        #   @return [::Google::Cloud::Iap::V1::ReauthSettings]
+        #     Settings to configure reauthentication policies in IAP.
         class AccessSettings
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -122,6 +237,55 @@ module Google
           extend ::Google::Protobuf::MessageExts::ClassMethods
         end
 
+        # Configuration for IAP reauthentication policies.
+        # @!attribute [rw] method
+        #   @return [::Google::Cloud::Iap::V1::ReauthSettings::Method]
+        #     Reauth method required by the policy.
+        # @!attribute [rw] max_age
+        #   @return [::Google::Protobuf::Duration]
+        #     Reauth session lifetime, how long before a user has to reauthenticate
+        #     again.
+        # @!attribute [rw] policy_type
+        #   @return [::Google::Cloud::Iap::V1::ReauthSettings::PolicyType]
+        #     How IAP determines the effective policy in cases of hierarchial policies.
+        #     Policies are merged from higher in the hierarchy to lower in the hierarchy.
+        class ReauthSettings
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+
+          # Types of reauthentication methods supported by IAP.
+          module Method
+            # Reauthentication disabled.
+            METHOD_UNSPECIFIED = 0
+
+            # Mimics the behavior as if the user had logged out and tried to log in
+            # again. Users with 2SV (2-step verification) enabled see their 2SV
+            # challenges if they did not opt to have their second factor responses
+            # saved. Apps Core (GSuites) admins can configure settings to disable 2SV
+            # cookies and require 2SV for all Apps Core users in their domains.
+            LOGIN = 1
+
+            # User must type their password.
+            PASSWORD = 2
+
+            # User must use their secure key 2nd factor device.
+            SECURE_KEY = 3
+          end
+
+          # Type of policy in the case of hierarchial policies.
+          module PolicyType
+            # Default value. This value is unused.
+            POLICY_TYPE_UNSPECIFIED = 0
+
+            # This policy acts as a minimum to other policies, lower in the hierarchy.
+            # Effective policy may only be the same or stricter.
+            MINIMUM = 1
+
+            # This policy acts as a default if no other reauth policy is set.
+            DEFAULT = 2
+          end
+        end
+
         # Wrapper over application specific settings for IAP.
         # @!attribute [rw] csm_settings
         #   @return [::Google::Cloud::Iap::V1::CsmSettings]

data/proto_docs/google/protobuf/duration.rb

@@ -0,0 +1,98 @@
+# frozen_string_literal: true
+
+# Copyright 2022 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
+
+
+module Google
+  module Protobuf
+    # A Duration represents a signed, fixed-length span of time represented
+    # as a count of seconds and fractions of seconds at nanosecond
+    # resolution. It is independent of any calendar and concepts like "day"
+    # or "month". It is related to Timestamp in that the difference between
+    # two Timestamp values is a Duration and it can be added or subtracted
+    # from a Timestamp. Range is approximately +-10,000 years.
+    #
+    # # Examples
+    #
+    # Example 1: Compute Duration from two Timestamps in pseudo code.
+    #
+    #     Timestamp start = ...;
+    #     Timestamp end = ...;
+    #     Duration duration = ...;
+    #
+    #     duration.seconds = end.seconds - start.seconds;
+    #     duration.nanos = end.nanos - start.nanos;
+    #
+    #     if (duration.seconds < 0 && duration.nanos > 0) {
+    #       duration.seconds += 1;
+    #       duration.nanos -= 1000000000;
+    #     } else if (duration.seconds > 0 && duration.nanos < 0) {
+    #       duration.seconds -= 1;
+    #       duration.nanos += 1000000000;
+    #     }
+    #
+    # Example 2: Compute Timestamp from Timestamp + Duration in pseudo code.
+    #
+    #     Timestamp start = ...;
+    #     Duration duration = ...;
+    #     Timestamp end = ...;
+    #
+    #     end.seconds = start.seconds + duration.seconds;
+    #     end.nanos = start.nanos + duration.nanos;
+    #
+    #     if (end.nanos < 0) {
+    #       end.seconds -= 1;
+    #       end.nanos += 1000000000;
+    #     } else if (end.nanos >= 1000000000) {
+    #       end.seconds += 1;
+    #       end.nanos -= 1000000000;
+    #     }
+    #
+    # Example 3: Compute Duration from datetime.timedelta in Python.
+    #
+    #     td = datetime.timedelta(days=3, minutes=10)
+    #     duration = Duration()
+    #     duration.FromTimedelta(td)
+    #
+    # # JSON Mapping
+    #
+    # In JSON format, the Duration type is encoded as a string rather than an
+    # object, where the string ends in the suffix "s" (indicating seconds) and
+    # is preceded by the number of seconds, with nanoseconds expressed as
+    # fractional seconds. For example, 3 seconds with 0 nanoseconds should be
+    # encoded in JSON format as "3s", while 3 seconds and 1 nanosecond should
+    # be expressed in JSON format as "3.000000001s", and 3 seconds and 1
+    # microsecond should be expressed in JSON format as "3.000001s".
+    # @!attribute [rw] seconds
+    #   @return [::Integer]
+    #     Signed seconds of the span of time. Must be from -315,576,000,000
+    #     to +315,576,000,000 inclusive. Note: these bounds are computed from:
+    #     60 sec/min * 60 min/hr * 24 hr/day * 365.25 days/year * 10000 years
+    # @!attribute [rw] nanos
+    #   @return [::Integer]
+    #     Signed fractions of a second at nanosecond resolution of the span
+    #     of time. Durations less than one second are represented with a 0
+    #     `seconds` field and a positive or negative `nanos` field. For durations
+    #     of one second or more, a non-zero value for the `nanos` field must be
+    #     of the same sign as the `seconds` field. Must be from -999,999,999
+    #     to +999,999,999 inclusive.
+    class Duration
+      include ::Google::Protobuf::MessageExts
+      extend ::Google::Protobuf::MessageExts::ClassMethods
+    end
+  end
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: google-cloud-iap-v1
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 0.3.0
 platform: ruby
 authors:
 - Google LLC
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-04-20 00:00:00.000000000 Z
+date: 2022-05-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: gapic-common
@@ -189,6 +189,7 @@ files:
 - lib/google/cloud/iap/v1/identity_aware_proxy_admin_service.rb
 - lib/google/cloud/iap/v1/identity_aware_proxy_admin_service/client.rb
 - lib/google/cloud/iap/v1/identity_aware_proxy_admin_service/credentials.rb
+- lib/google/cloud/iap/v1/identity_aware_proxy_admin_service/paths.rb
 - lib/google/cloud/iap/v1/identity_aware_proxy_o_auth_service.rb
 - lib/google/cloud/iap/v1/identity_aware_proxy_o_auth_service/client.rb
 - lib/google/cloud/iap/v1/identity_aware_proxy_o_auth_service/credentials.rb
@@ -202,6 +203,7 @@ files:
 - proto_docs/google/iam/v1/iam_policy.rb
 - proto_docs/google/iam/v1/options.rb
 - proto_docs/google/iam/v1/policy.rb
+- proto_docs/google/protobuf/duration.rb
 - proto_docs/google/protobuf/empty.rb
 - proto_docs/google/protobuf/field_mask.rb
 - proto_docs/google/protobuf/wrappers.rb