google-cloud-org_policy-v2 0.7.0 → 0.8.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (15) hide show
  1. checksums.yaml +4 -4
  2. data/lib/google/cloud/org_policy/v2/org_policy/client.rb +574 -41
  3. data/lib/google/cloud/org_policy/v2/org_policy/paths.rb +17 -0
  4. data/lib/google/cloud/org_policy/v2/org_policy/rest/client.rb +539 -41
  5. data/lib/google/cloud/org_policy/v2/org_policy/rest/service_stub.rb +297 -0
  6. data/lib/google/cloud/org_policy/v2/org_policy/rest.rb +13 -13
  7. data/lib/google/cloud/org_policy/v2/org_policy.rb +13 -13
  8. data/lib/google/cloud/org_policy/v2/version.rb +1 -1
  9. data/lib/google/cloud/orgpolicy/v2/constraint_pb.rb +5 -1
  10. data/lib/google/cloud/orgpolicy/v2/orgpolicy_pb.rb +7 -1
  11. data/lib/google/cloud/orgpolicy/v2/orgpolicy_services_pb.rb +55 -27
  12. data/proto_docs/google/api/client.rb +13 -0
  13. data/proto_docs/google/cloud/orgpolicy/v2/constraint.rb +110 -18
  14. data/proto_docs/google/cloud/orgpolicy/v2/orgpolicy.rb +155 -52
  15. metadata +3 -3
data/proto_docs/google/cloud/orgpolicy/v2/constraint.rb CHANGED
@@ -21,24 +21,25 @@ module Google
21
21
  module Cloud
22
22
  module OrgPolicy
23
23
  module V2
24
- # A `constraint` describes a way to restrict resource's configuration. For
25
- # example, you could enforce a constraint that controls which cloud services
26
- # can be activated across an organization, or whether a Compute Engine instance
27
- # can have serial port connections established. `Constraints` can be configured
28
- # by the organization's policy administrator to fit the needs of the
29
- # organization by setting a `policy` that includes `constraints` at different
24
+ # A constraint describes a way to restrict resource's configuration. For
25
+ # example, you could enforce a constraint that controls which Google Cloud
26
+ # services can be activated across an organization, or whether a Compute Engine
27
+ # instance can have serial port connections established. Constraints can be
28
+ # configured by the organization policy administrator to fit the needs of the
29
+ # organization by setting a policy that includes constraints at different
30
30
  # locations in the organization's resource hierarchy. Policies are inherited
31
31
  # down the resource hierarchy from higher levels, but can also be overridden.
32
32
  # For details about the inheritance rules please read about
33
33
  # [`policies`][google.cloud.OrgPolicy.v2.Policy].
34
34
  #
35
- # `Constraints` have a default behavior determined by the `constraint_default`
35
+ # Constraints have a default behavior determined by the `constraint_default`
36
36
  # field, which is the enforcement behavior that is used in the absence of a
37
- # `policy` being defined or inherited for the resource in question.
37
+ # policy being defined or inherited for the resource in question.
38
38
  # @!attribute [rw] name
39
39
  # @return [::String]
40
- # Immutable. The resource name of the Constraint. Must be in one of
40
+ # Immutable. The resource name of the constraint. Must be in one of
41
41
  # the following forms:
42
+ #
42
43
  # * `projects/{project_number}/constraints/{constraint_name}`
43
44
  # * `folders/{folder_id}/constraints/{constraint_name}`
44
45
  # * `organizations/{organization_id}/constraints/{constraint_name}`
@@ -51,25 +52,28 @@ module Google
51
52
  # Mutable.
52
53
  # @!attribute [rw] description
53
54
  # @return [::String]
54
- # Detailed description of what this `Constraint` controls as well as how and
55
+ # Detailed description of what this constraint controls as well as how and
55
56
  # where it is enforced.
56
57
  #
57
58
  # Mutable.
58
59
  # @!attribute [rw] constraint_default
59
60
  # @return [::Google::Cloud::OrgPolicy::V2::Constraint::ConstraintDefault]
60
- # The evaluation behavior of this constraint in the absence of 'Policy'.
61
+ # The evaluation behavior of this constraint in the absence of a policy.
61
62
  # @!attribute [rw] list_constraint
62
63
  # @return [::Google::Cloud::OrgPolicy::V2::Constraint::ListConstraint]
63
64
  # Defines this constraint as being a ListConstraint.
64
65
  # @!attribute [rw] boolean_constraint
65
66
  # @return [::Google::Cloud::OrgPolicy::V2::Constraint::BooleanConstraint]
66
67
  # Defines this constraint as being a BooleanConstraint.
68
+ # @!attribute [rw] supports_dry_run
69
+ # @return [::Boolean]
70
+ # Shows if dry run is supported for this constraint or not.
67
71
  class Constraint
68
72
  include ::Google::Protobuf::MessageExts
69
73
  extend ::Google::Protobuf::MessageExts::ClassMethods
70
74
 
71
- # A `Constraint` that allows or disallows a list of string values, which are
72
- # configured by an Organization's policy administrator with a `Policy`.
75
+ # A constraint that allows or disallows a list of string values, which are
76
+ # configured by an Organization Policy administrator with a policy.
73
77
  # @!attribute [rw] supports_in
74
78
  # @return [::Boolean]
75
79
  # Indicates whether values grouped into categories can be used in
@@ -77,7 +81,7 @@ module Google
77
81
  # `"in:Python"` would match any value in the 'Python' group.
78
82
  # @!attribute [rw] supports_under
79
83
  # @return [::Boolean]
80
- # Indicates whether subtrees of Cloud Resource Manager resource hierarchy
84
+ # Indicates whether subtrees of the Resource Manager resource hierarchy
81
85
  # can be used in `Policy.allowed_values` and `Policy.denied_values`. For
82
86
  # example, `"under:folders/123"` would match any resource under the
83
87
  # 'folders/123' folder.
@@ -86,9 +90,9 @@ module Google
86
90
  extend ::Google::Protobuf::MessageExts::ClassMethods
87
91
  end
88
92
 
89
- # A `Constraint` that is either enforced or not.
93
+ # A constraint that is either enforced or not.
90
94
  #
91
- # For example a constraint `constraints/compute.disableSerialPortAccess`.
95
+ # For example, a constraint `constraints/compute.disableSerialPortAccess`.
92
96
  # If it is enforced on a VM instance, serial port connections will not be
93
97
  # opened to that instance.
94
98
  class BooleanConstraint
@@ -96,8 +100,8 @@ module Google
96
100
  extend ::Google::Protobuf::MessageExts::ClassMethods
97
101
  end
98
102
 
99
- # Specifies the default behavior in the absence of any `Policy` for the
100
- # `Constraint`. This must not be `CONSTRAINT_DEFAULT_UNSPECIFIED`.
103
+ # Specifies the default behavior in the absence of any policy for the
104
+ # constraint. This must not be `CONSTRAINT_DEFAULT_UNSPECIFIED`.
101
105
  #
102
106
  # Immutable after creation.
103
107
  module ConstraintDefault
@@ -114,6 +118,94 @@ module Google
114
118
  DENY = 2
115
119
  end
116
120
  end
121
+
122
+ # A custom constraint defined by customers which can *only* be applied to the
123
+ # given resource types and organization.
124
+ #
125
+ # By creating a custom constraint, customers can apply policies of this
126
+ # custom constraint. *Creating a custom constraint itself does NOT apply any
127
+ # policy enforcement*.
128
+ # @!attribute [rw] name
129
+ # @return [::String]
130
+ # Immutable. Name of the constraint. This is unique within the organization.
131
+ # Format of the name should be
132
+ #
133
+ # * `organizations/{organization_id}/customConstraints/{custom_constraint_id}`
134
+ #
135
+ # Example: `organizations/123/customConstraints/custom.createOnlyE2TypeVms`
136
+ #
137
+ # The max length is 70 characters and the minimum length is 1. Note that the
138
+ # prefix `organizations/{organization_id}/customConstraints/` is not counted.
139
+ # @!attribute [rw] resource_types
140
+ # @return [::Array<::String>]
141
+ # Immutable. The resource instance type on which this policy applies. Format
142
+ # will be of the form : `<canonical service name>/<type>` Example:
143
+ #
144
+ # * `compute.googleapis.com/Instance`.
145
+ # @!attribute [rw] method_types
146
+ # @return [::Array<::Google::Cloud::OrgPolicy::V2::CustomConstraint::MethodType>]
147
+ # All the operations being applied for this constraint.
148
+ # @!attribute [rw] condition
149
+ # @return [::String]
150
+ # Org policy condition/expression. For example:
151
+ # `resource.instanceName.matches("[production|test]_.*_(\d)+")` or,
152
+ # `resource.management.auto_upgrade == true`
153
+ #
154
+ # The max length of the condition is 1000 characters.
155
+ # @!attribute [rw] action_type
156
+ # @return [::Google::Cloud::OrgPolicy::V2::CustomConstraint::ActionType]
157
+ # Allow or deny type.
158
+ # @!attribute [rw] display_name
159
+ # @return [::String]
160
+ # One line display name for the UI.
161
+ # The max length of the display_name is 200 characters.
162
+ # @!attribute [rw] description
163
+ # @return [::String]
164
+ # Detailed information about this custom policy constraint.
165
+ # The max length of the description is 2000 characters.
166
+ # @!attribute [r] update_time
167
+ # @return [::Google::Protobuf::Timestamp]
168
+ # Output only. The last time this custom constraint was updated. This
169
+ # represents the last time that the `CreateCustomConstraint` or
170
+ # `UpdateCustomConstraint` RPC was called
171
+ class CustomConstraint
172
+ include ::Google::Protobuf::MessageExts
173
+ extend ::Google::Protobuf::MessageExts::ClassMethods
174
+
175
+ # The operation for which this constraint will be applied. To apply this
176
+ # constraint only when creating new VMs, the `method_types` should be
177
+ # `CREATE` only. To apply this constraint when creating or deleting
178
+ # VMs, the `method_types` should be `CREATE` and `DELETE`.
179
+ #
180
+ # `UPDATE` only custom constraints are not supported. Use `CREATE` or
181
+ # `CREATE, UPDATE`.
182
+ module MethodType
183
+ # Unspecified. Results in an error.
184
+ METHOD_TYPE_UNSPECIFIED = 0
185
+
186
+ # Constraint applied when creating the resource.
187
+ CREATE = 1
188
+
189
+ # Constraint applied when updating the resource.
190
+ UPDATE = 2
191
+
192
+ # Constraint applied when deleting the resource.
193
+ # Not supported yet.
194
+ DELETE = 3
195
+ end
196
+
197
+ # Allow or deny type.
198
+ module ActionType
199
+ # Unspecified. Results in an error.
200
+ ACTION_TYPE_UNSPECIFIED = 0
201
+
202
+ # Allowed action type.
203
+ ALLOW = 1
204
+
205
+ # Deny action type.
206
+ DENY = 2
207
+ end
208
+ end
117
209
  end
118
210
  end
119
211
  end
data/proto_docs/google/cloud/orgpolicy/v2/orgpolicy.rb CHANGED
@@ -21,18 +21,19 @@ module Google
21
21
  module Cloud
22
22
  module OrgPolicy
23
23
  module V2
24
- # Defines a Cloud Organization `Policy` which is used to specify `Constraints`
25
- # for configurations of Cloud Platform resources.
24
+ # Defines an organization policy which is used to specify constraints
25
+ # for configurations of Google Cloud resources.
26
26
  # @!attribute [rw] name
27
27
  # @return [::String]
28
- # Immutable. The resource name of the Policy. Must be one of the following
29
- # forms, where constraint_name is the name of the constraint which this
30
- # Policy configures:
28
+ # Immutable. The resource name of the policy. Must be one of the following
29
+ # forms, where `constraint_name` is the name of the constraint which this
30
+ # policy configures:
31
+ #
31
32
  # * `projects/{project_number}/policies/{constraint_name}`
32
33
  # * `folders/{folder_id}/policies/{constraint_name}`
33
34
  # * `organizations/{organization_id}/policies/{constraint_name}`
34
35
  #
35
- # For example, "projects/123/policies/compute.disableSerialPortAccess".
36
+ # For example, `projects/123/policies/compute.disableSerialPortAccess`.
36
37
  #
37
38
  # Note: `projects/{project_id}/policies/{constraint_name}` is also an
38
39
  # acceptable name for API requests, but responses will return the name using
@@ -45,9 +46,15 @@ module Google
45
46
  # Deprecated.
46
47
  # @!attribute [rw] dry_run_spec
47
48
  # @return [::Google::Cloud::OrgPolicy::V2::PolicySpec]
48
- # dry-run policy.
49
+ # Dry-run policy.
49
50
  # Audit-only policy, can be used to monitor how the policy would have
50
51
  # impacted the existing and future resources if it's enforced.
52
+ # @!attribute [rw] etag
53
+ # @return [::String]
54
+ # Optional. An opaque tag indicating the current state of the policy, used
55
+ # for concurrency control. This 'etag' is computed by the server based on the
56
+ # value of other fields, and may be sent on update and delete requests to
57
+ # ensure the client has an up-to-date value before proceeding.
51
58
  class Policy
52
59
  include ::Google::Protobuf::MessageExts
53
60
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -62,55 +69,54 @@ module Google
62
69
  # Should be set only in the alternate policy.
63
70
  # @!attribute [rw] spec
64
71
  # @return [::Google::Cloud::OrgPolicy::V2::PolicySpec]
65
- # Specify `Constraint` for configurations of Cloud Platform resources.
72
+ # Specify constraint for configurations of Google Cloud resources.
66
73
  class AlternatePolicySpec
67
74
  include ::Google::Protobuf::MessageExts
68
75
  extend ::Google::Protobuf::MessageExts::ClassMethods
69
76
  end
70
77
 
71
- # Defines a Cloud Organization `PolicySpec` which is used to specify
72
- # `Constraints` for configurations of Cloud Platform resources.
78
+ # Defines a Google Cloud policy specification which is used to specify
79
+ # constraints for configurations of Google Cloud resources.
73
80
  # @!attribute [rw] etag
74
81
  # @return [::String]
75
- # An opaque tag indicating the current version of the `Policy`, used for
82
+ # An opaque tag indicating the current version of the policySpec, used for
76
83
  # concurrency control.
77
84
  #
78
85
  # This field is ignored if used in a `CreatePolicy` request.
79
86
  #
80
- # When the `Policy` is returned from either a `GetPolicy` or a
87
+ # When the policy is returned from either a `GetPolicy` or a
81
88
  # `ListPolicies` request, this `etag` indicates the version of the
82
- # current `Policy` to use when executing a read-modify-write loop.
89
+ # current policySpec to use when executing a read-modify-write loop.
83
90
  #
84
- # When the `Policy` is returned from a `GetEffectivePolicy` request, the
91
+ # When the policy is returned from a `GetEffectivePolicy` request, the
85
92
  # `etag` will be unset.
86
93
  # @!attribute [r] update_time
87
94
  # @return [::Google::Protobuf::Timestamp]
88
95
  # Output only. The time stamp this was previously updated. This
89
96
  # represents the last time a call to `CreatePolicy` or `UpdatePolicy` was
90
- # made for that `Policy`.
97
+ # made for that policy.
91
98
  # @!attribute [rw] rules
92
99
  # @return [::Array<::Google::Cloud::OrgPolicy::V2::PolicySpec::PolicyRule>]
93
- # Up to 10 PolicyRules are allowed.
100
+ # In policies for boolean constraints, the following requirements apply:
94
101
  #
95
- # In Policies for boolean constraints, the following requirements apply:
96
- # - There must be one and only one PolicyRule where condition is unset.
97
- # - BooleanPolicyRules with conditions must set `enforced` to the opposite
98
- # of the PolicyRule without a condition.
99
- # - During policy evaluation, PolicyRules with conditions that are
102
+ # - There must be one and only one policy rule where condition is unset.
103
+ # - Boolean policy rules with conditions must set `enforced` to the
104
+ # opposite of the policy rule without a condition.
105
+ # - During policy evaluation, policy rules with conditions that are
100
106
  # true for a target resource take precedence.
101
107
  # @!attribute [rw] inherit_from_parent
102
108
  # @return [::Boolean]
103
- # Determines the inheritance behavior for this `Policy`.
109
+ # Determines the inheritance behavior for this policy.
104
110
  #
105
- # If `inherit_from_parent` is true, PolicyRules set higher up in the
111
+ # If `inherit_from_parent` is true, policy rules set higher up in the
106
112
  # hierarchy (up to the closest root) are inherited and present in the
107
113
  # effective policy. If it is false, then no rules are inherited, and this
108
- # Policy becomes the new root for evaluation.
109
- # This field can be set only for Policies which configure list constraints.
114
+ # policy becomes the new root for evaluation.
115
+ # This field can be set only for policies which configure list constraints.
110
116
  # @!attribute [rw] reset
111
117
  # @return [::Boolean]
112
118
  # Ignores policies set above this resource and restores the
113
- # `constraint_default` enforcement behavior of the specific `Constraint` at
119
+ # `constraint_default` enforcement behavior of the specific constraint at
114
120
  # this resource.
115
121
  # This field can be set in policies for either list or boolean
116
122
  # constraints. If set, `rules` must be empty and `inherit_from_parent`
@@ -122,21 +128,21 @@ module Google
122
128
  # A rule used to express this policy.
123
129
  # @!attribute [rw] values
124
130
  # @return [::Google::Cloud::OrgPolicy::V2::PolicySpec::PolicyRule::StringValues]
125
- # List of values to be used for this PolicyRule. This field can be set
126
- # only in Policies for list constraints.
131
+ # List of values to be used for this policy rule. This field can be set
132
+ # only in policies for list constraints.
127
133
  # @!attribute [rw] allow_all
128
134
  # @return [::Boolean]
129
135
  # Setting this to true means that all values are allowed. This field can
130
- # be set only in Policies for list constraints.
136
+ # be set only in policies for list constraints.
131
137
  # @!attribute [rw] deny_all
132
138
  # @return [::Boolean]
133
139
  # Setting this to true means that all values are denied. This field can
134
- # be set only in Policies for list constraints.
140
+ # be set only in policies for list constraints.
135
141
  # @!attribute [rw] enforce
136
142
  # @return [::Boolean]
137
- # If `true`, then the `Policy` is enforced. If `false`, then any
143
+ # If `true`, then the policy is enforced. If `false`, then any
138
144
  # configuration is acceptable.
139
- # This field can be set only in Policies for boolean constraints.
145
+ # This field can be set only in policies for boolean constraints.
140
146
  # @!attribute [rw] condition
141
147
  # @return [::Google::Type::Expr]
142
148
  # A condition which determines whether this rule is used
@@ -156,7 +162,7 @@ module Google
156
162
  extend ::Google::Protobuf::MessageExts::ClassMethods
157
163
 
158
164
  # A message that holds specific allowed and denied values.
159
- # This message can define specific values and subtrees of Cloud Resource
165
+ # This message can define specific values and subtrees of the Resource
160
166
  # Manager resource hierarchy (`Organizations`, `Folders`, `Projects`) that
161
167
  # are allowed or denied. This is achieved by using the `under:` and
162
168
  # optional `is:` prefixes.
@@ -165,9 +171,11 @@ module Google
165
171
  # if the value contains a ":". Values prefixed with "is:" are treated the
166
172
  # same as values with no prefix.
167
173
  # Ancestry subtrees must be in one of the following formats:
168
- # - "projects/<project-id>", e.g. "projects/tokyo-rain-123"
169
- # - "folders/<folder-id>", e.g. "folders/1234"
170
- # - "organizations/<organization-id>", e.g. "organizations/1234"
174
+ #
175
+ # - `projects/<project-id>` (for example, `projects/tokyo-rain-123`)
176
+ # - `folders/<folder-id>` (for example, `folders/1234`)
177
+ # - `organizations/<organization-id>` (for example, `organizations/1234`)
178
+ #
171
179
  # The `supports_under` field of the associated `Constraint` defines
172
180
  # whether ancestry prefixes can be used.
173
181
  # @!attribute [rw] allowed_values
@@ -187,8 +195,9 @@ module Google
187
195
  # [google.cloud.orgpolicy.v2.OrgPolicy.ListConstraints] method.
188
196
  # @!attribute [rw] parent
189
197
  # @return [::String]
190
- # Required. The Cloud resource that parents the constraint. Must be in one of
191
- # the following forms:
198
+ # Required. The Google Cloud resource that parents the constraint. Must be in
199
+ # one of the following forms:
200
+ #
192
201
  # * `projects/{project_number}`
193
202
  # * `projects/{project_id}`
194
203
  # * `folders/{folder_id}`
@@ -224,9 +233,10 @@ module Google
224
233
  # [google.cloud.orgpolicy.v2.OrgPolicy.ListPolicies] method.
225
234
  # @!attribute [rw] parent
226
235
  # @return [::String]
227
- # Required. The target Cloud resource that parents the set of constraints and
228
- # policies that will be returned from this call. Must be in one of the
229
- # following forms:
236
+ # Required. The target Google Cloud resource that parents the set of
237
+ # constraints and policies that will be returned from this call. Must be in
238
+ # one of the following forms:
239
+ #
230
240
  # * `projects/{project_number}`
231
241
  # * `projects/{project_id}`
232
242
  # * `folders/{folder_id}`
@@ -247,11 +257,11 @@ module Google
247
257
 
248
258
  # The response returned from the [ListPolicies]
249
259
  # [google.cloud.orgpolicy.v2.OrgPolicy.ListPolicies] method. It will be empty
250
- # if no `Policies` are set on the resource.
260
+ # if no policies are set on the resource.
251
261
  # @!attribute [rw] policies
252
262
  # @return [::Array<::Google::Cloud::OrgPolicy::V2::Policy>]
253
- # All `Policies` that exist on the resource. It will be empty if no
254
- # `Policies` are set.
263
+ # All policies that exist on the resource. It will be empty if no
264
+ # policies are set.
255
265
  # @!attribute [rw] next_page_token
256
266
  # @return [::String]
257
267
  # Page token used to retrieve the next page. This is currently not used, but
@@ -265,8 +275,8 @@ module Google
265
275
  # [google.cloud.orgpolicy.v2.OrgPolicy.GetPolicy] method.
266
276
  # @!attribute [rw] name
267
277
  # @return [::String]
268
- # Required. Resource name of the policy. See `Policy` for naming
269
- # requirements.
278
+ # Required. Resource name of the policy. See
279
+ # {::Google::Cloud::OrgPolicy::V2::Policy Policy} for naming requirements.
270
280
  class GetPolicyRequest
271
281
  include ::Google::Protobuf::MessageExts
272
282
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -276,7 +286,8 @@ module Google
276
286
  # [google.cloud.orgpolicy.v2.OrgPolicy.GetEffectivePolicy] method.
277
287
  # @!attribute [rw] name
278
288
  # @return [::String]
279
- # Required. The effective policy to compute. See `Policy` for naming rules.
289
+ # Required. The effective policy to compute. See
290
+ # {::Google::Cloud::OrgPolicy::V2::Policy Policy} for naming requirements.
280
291
  class GetEffectivePolicyRequest
281
292
  include ::Google::Protobuf::MessageExts
282
293
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -286,15 +297,16 @@ module Google
286
297
  # [google.cloud.orgpolicy.v2.OrgPolicy.CreatePolicy] method.
287
298
  # @!attribute [rw] parent
288
299
  # @return [::String]
289
- # Required. The Cloud resource that will parent the new Policy. Must be in
290
- # one of the following forms:
300
+ # Required. The Google Cloud resource that will parent the new policy. Must
301
+ # be in one of the following forms:
302
+ #
291
303
  # * `projects/{project_number}`
292
304
  # * `projects/{project_id}`
293
305
  # * `folders/{folder_id}`
294
306
  # * `organizations/{organization_id}`
295
307
  # @!attribute [rw] policy
296
308
  # @return [::Google::Cloud::OrgPolicy::V2::Policy]
297
- # Required. `Policy` to create.
309
+ # Required. Policy to create.
298
310
  class CreatePolicyRequest
299
311
  include ::Google::Protobuf::MessageExts
300
312
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -304,7 +316,7 @@ module Google
304
316
  # [google.cloud.orgpolicy.v2.OrgPolicy.UpdatePolicy] method.
305
317
  # @!attribute [rw] policy
306
318
  # @return [::Google::Cloud::OrgPolicy::V2::Policy]
307
- # Required. `Policy` to update.
319
+ # Required. Policy to update.
308
320
  # @!attribute [rw] update_mask
309
321
  # @return [::Google::Protobuf::FieldMask]
310
322
  # Field mask used to specify the fields to be overwritten in the policy
@@ -320,11 +332,102 @@ module Google
320
332
  # @!attribute [rw] name
321
333
  # @return [::String]
322
334
  # Required. Name of the policy to delete.
323
- # See `Policy` for naming rules.
335
+ # See the policy entry for naming rules.
336
+ # @!attribute [rw] etag
337
+ # @return [::String]
338
+ # Optional. The current etag of policy. If an etag is provided and does not
339
+ # match the current etag of the policy, deletion will be blocked and an
340
+ # ABORTED error will be returned.
324
341
  class DeletePolicyRequest
325
342
  include ::Google::Protobuf::MessageExts
326
343
  extend ::Google::Protobuf::MessageExts::ClassMethods
327
344
  end
345
+
346
+ # The request sent to the [CreateCustomConstraintRequest]
347
+ # [google.cloud.orgpolicy.v2.OrgPolicy.CreateCustomConstraint] method.
348
+ # @!attribute [rw] parent
349
+ # @return [::String]
350
+ # Required. Must be in the following form:
351
+ #
352
+ # * `organizations/{organization_id}`
353
+ # @!attribute [rw] custom_constraint
354
+ # @return [::Google::Cloud::OrgPolicy::V2::CustomConstraint]
355
+ # Required. Custom constraint to create.
356
+ class CreateCustomConstraintRequest
357
+ include ::Google::Protobuf::MessageExts
358
+ extend ::Google::Protobuf::MessageExts::ClassMethods
359
+ end
360
+
361
+ # The request sent to the [GetCustomConstraint]
362
+ # [google.cloud.orgpolicy.v2.OrgPolicy.GetCustomConstraint] method.
363
+ # @!attribute [rw] name
364
+ # @return [::String]
365
+ # Required. Resource name of the custom constraint. See the custom constraint
366
+ # entry for naming requirements.
367
+ class GetCustomConstraintRequest
368
+ include ::Google::Protobuf::MessageExts
369
+ extend ::Google::Protobuf::MessageExts::ClassMethods
370
+ end
371
+
372
+ # The request sent to the [ListCustomConstraints]
373
+ # [google.cloud.orgpolicy.v2.OrgPolicy.ListCustomConstraints] method.
374
+ # @!attribute [rw] parent
375
+ # @return [::String]
376
+ # Required. The target Google Cloud resource that parents the set of custom
377
+ # constraints that will be returned from this call. Must be in one of the
378
+ # following forms:
379
+ #
380
+ # * `organizations/{organization_id}`
381
+ # @!attribute [rw] page_size
382
+ # @return [::Integer]
383
+ # Size of the pages to be returned. This is currently unsupported and will
384
+ # be ignored. The server may at any point start using this field to limit
385
+ # page size.
386
+ # @!attribute [rw] page_token
387
+ # @return [::String]
388
+ # Page token used to retrieve the next page. This is currently unsupported
389
+ # and will be ignored. The server may at any point start using this field.
390
+ class ListCustomConstraintsRequest
391
+ include ::Google::Protobuf::MessageExts
392
+ extend ::Google::Protobuf::MessageExts::ClassMethods
393
+ end
394
+
395
+ # The response returned from the [ListCustomConstraints]
396
+ # [google.cloud.orgpolicy.v2.OrgPolicy.ListCustomConstraints] method. It will
397
+ # be empty if no custom constraints are set on the organization resource.
398
+ # @!attribute [rw] custom_constraints
399
+ # @return [::Array<::Google::Cloud::OrgPolicy::V2::CustomConstraint>]
400
+ # All custom constraints that exist on the organization resource. It will be
401
+ # empty if no custom constraints are set.
402
+ # @!attribute [rw] next_page_token
403
+ # @return [::String]
404
+ # Page token used to retrieve the next page. This is currently not used, but
405
+ # the server may at any point start supplying a valid token.
406
+ class ListCustomConstraintsResponse
407
+ include ::Google::Protobuf::MessageExts
408
+ extend ::Google::Protobuf::MessageExts::ClassMethods
409
+ end
410
+
411
+ # The request sent to the [UpdateCustomConstraintRequest]
412
+ # [google.cloud.orgpolicy.v2.OrgPolicy.UpdateCustomConstraint] method.
413
+ # @!attribute [rw] custom_constraint
414
+ # @return [::Google::Cloud::OrgPolicy::V2::CustomConstraint]
415
+ # Required. `CustomConstraint` to update.
416
+ class UpdateCustomConstraintRequest
417
+ include ::Google::Protobuf::MessageExts
418
+ extend ::Google::Protobuf::MessageExts::ClassMethods
419
+ end
420
+
421
+ # The request sent to the [DeleteCustomConstraint]
422
+ # [google.cloud.orgpolicy.v2.OrgPolicy.DeleteCustomConstraint] method.
423
+ # @!attribute [rw] name
424
+ # @return [::String]
425
+ # Required. Name of the custom constraint to delete.
426
+ # See the custom constraint entry for naming rules.
427
+ class DeleteCustomConstraintRequest
428
+ include ::Google::Protobuf::MessageExts
429
+ extend ::Google::Protobuf::MessageExts::ClassMethods
430
+ end
328
431
  end
329
432
  end
330
433
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: google-cloud-org_policy-v2
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.7.0
4
+ version: 0.8.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Google LLC
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2023-09-12 00:00:00.000000000 Z
11
+ date: 2024-01-03 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: gapic-common
@@ -215,7 +215,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
215
215
  - !ruby/object:Gem::Version
216
216
  version: '0'
217
217
  requirements: []
218
- rubygems_version: 3.4.19
218
+ rubygems_version: 3.5.3
219
219
  signing_key:
220
220
  specification_version: 4
221
221
  summary: The Organization Policy API allows users to configure governance rules on