google-cloud-org_policy-v2 1.3.0 → 1.4.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/lib/google/cloud/org_policy/v2/org_policy/client.rb +6 -6
- data/lib/google/cloud/org_policy/v2/org_policy/rest/client.rb +5 -5
- data/lib/google/cloud/org_policy/v2/version.rb +1 -1
- data/lib/google/cloud/orgpolicy/v2/constraint_pb.rb +9 -1
- data/lib/google/cloud/orgpolicy/v2/orgpolicy_pb.rb +3 -1
- data/lib/google/cloud/orgpolicy/v2/orgpolicy_services_pb.rb +2 -2
- data/proto_docs/google/api/client.rb +14 -0
- data/proto_docs/google/cloud/orgpolicy/v2/constraint.rb +167 -19
- data/proto_docs/google/cloud/orgpolicy/v2/orgpolicy.rb +18 -7
- data/proto_docs/google/protobuf/struct.rb +108 -0
- metadata +4 -3
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: edcbfe4f40b66f4f49dfc85b55972da04f5514b383541ded7abe4fd73ed2985b
|
|
4
|
+
data.tar.gz: 9ba38745a5ffb1eb1cdd943fb4da82df07a9f8752568abcfa8702e0f86ef464b
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 44b5fc0369a967ee40c6ba8e009d81a3a29fe225b3a52dede5d9ea7cf157ca3aa9e5117eecb5c950ab5553450f6622c43a84b5d9b377ba3919275cbc4ab37543
|
|
7
|
+
data.tar.gz: a6b4bc1e077b19d0348c77861ba4b74cb635407a8509a73041a0e17ce7b286a113a447ad43ad70f7e3d028e32226a22b356da15e9f83693415fa705b550c08d4
|
|
@@ -1126,10 +1126,10 @@ module Google
|
|
|
1126
1126
|
end
|
|
1127
1127
|
|
|
1128
1128
|
##
|
|
1129
|
-
# Gets a custom constraint.
|
|
1129
|
+
# Gets a custom or managed constraint.
|
|
1130
1130
|
#
|
|
1131
1131
|
# Returns a `google.rpc.Status` with `google.rpc.Code.NOT_FOUND` if the
|
|
1132
|
-
# custom constraint does not exist.
|
|
1132
|
+
# custom or managed constraint does not exist.
|
|
1133
1133
|
#
|
|
1134
1134
|
# @overload get_custom_constraint(request, options = nil)
|
|
1135
1135
|
# Pass arguments to `get_custom_constraint` via a request object, either of type
|
|
@@ -1147,8 +1147,8 @@ module Google
|
|
|
1147
1147
|
# the default parameter values, pass an empty Hash as a request object (see above).
|
|
1148
1148
|
#
|
|
1149
1149
|
# @param name [::String]
|
|
1150
|
-
# Required. Resource name of the custom constraint. See the custom
|
|
1151
|
-
# entry for naming requirements.
|
|
1150
|
+
# Required. Resource name of the custom or managed constraint. See the custom
|
|
1151
|
+
# constraint entry for naming requirements.
|
|
1152
1152
|
#
|
|
1153
1153
|
# @yield [response, operation] Access the result along with the RPC operation
|
|
1154
1154
|
# @yieldparam response [::Google::Cloud::OrgPolicy::V2::CustomConstraint]
|
|
@@ -1511,8 +1511,8 @@ module Google
|
|
|
1511
1511
|
|
|
1512
1512
|
config_attr :endpoint, nil, ::String, nil
|
|
1513
1513
|
config_attr :credentials, nil do |value|
|
|
1514
|
-
allowed = [::String, ::Hash, ::Proc, ::Symbol, ::Google::Auth::Credentials, ::Signet::OAuth2::Client, nil]
|
|
1515
|
-
allowed += [::GRPC::Core::Channel, ::GRPC::Core::ChannelCredentials] if defined? ::GRPC
|
|
1514
|
+
allowed = [::String, ::Hash, ::Proc, ::Symbol, ::Google::Auth::Credentials, ::Google::Auth::BaseClient, ::Signet::OAuth2::Client, nil]
|
|
1515
|
+
allowed += [::GRPC::Core::Channel, ::GRPC::Core::ChannelCredentials] if defined? ::GRPC::Core::Channel
|
|
1516
1516
|
allowed.any? { |klass| klass === value }
|
|
1517
1517
|
end
|
|
1518
1518
|
config_attr :scope, nil, ::String, ::Array, nil
|
|
@@ -1056,10 +1056,10 @@ module Google
|
|
|
1056
1056
|
end
|
|
1057
1057
|
|
|
1058
1058
|
##
|
|
1059
|
-
# Gets a custom constraint.
|
|
1059
|
+
# Gets a custom or managed constraint.
|
|
1060
1060
|
#
|
|
1061
1061
|
# Returns a `google.rpc.Status` with `google.rpc.Code.NOT_FOUND` if the
|
|
1062
|
-
# custom constraint does not exist.
|
|
1062
|
+
# custom or managed constraint does not exist.
|
|
1063
1063
|
#
|
|
1064
1064
|
# @overload get_custom_constraint(request, options = nil)
|
|
1065
1065
|
# Pass arguments to `get_custom_constraint` via a request object, either of type
|
|
@@ -1077,8 +1077,8 @@ module Google
|
|
|
1077
1077
|
# the default parameter values, pass an empty Hash as a request object (see above).
|
|
1078
1078
|
#
|
|
1079
1079
|
# @param name [::String]
|
|
1080
|
-
# Required. Resource name of the custom constraint. See the custom
|
|
1081
|
-
# entry for naming requirements.
|
|
1080
|
+
# Required. Resource name of the custom or managed constraint. See the custom
|
|
1081
|
+
# constraint entry for naming requirements.
|
|
1082
1082
|
# @yield [result, operation] Access the result along with the TransportOperation object
|
|
1083
1083
|
# @yieldparam result [::Google::Cloud::OrgPolicy::V2::CustomConstraint]
|
|
1084
1084
|
# @yieldparam operation [::Gapic::Rest::TransportOperation]
|
|
@@ -1411,7 +1411,7 @@ module Google
|
|
|
1411
1411
|
|
|
1412
1412
|
config_attr :endpoint, nil, ::String, nil
|
|
1413
1413
|
config_attr :credentials, nil do |value|
|
|
1414
|
-
allowed = [::String, ::Hash, ::Proc, ::Symbol, ::Google::Auth::Credentials, ::Signet::OAuth2::Client, nil]
|
|
1414
|
+
allowed = [::String, ::Hash, ::Proc, ::Symbol, ::Google::Auth::Credentials, ::Google::Auth::BaseClient, ::Signet::OAuth2::Client, nil]
|
|
1415
1415
|
allowed.any? { |klass| klass === value }
|
|
1416
1416
|
end
|
|
1417
1417
|
config_attr :scope, nil, ::String, ::Array, nil
|
|
@@ -6,10 +6,11 @@ require 'google/protobuf'
|
|
|
6
6
|
|
|
7
7
|
require 'google/api/field_behavior_pb'
|
|
8
8
|
require 'google/api/resource_pb'
|
|
9
|
+
require 'google/protobuf/struct_pb'
|
|
9
10
|
require 'google/protobuf/timestamp_pb'
|
|
10
11
|
|
|
11
12
|
|
|
12
|
-
descriptor_data = "\n*google/cloud/orgpolicy/v2/constraint.proto\x12\x19google.cloud.orgpolicy.v2\x1a\x1fgoogle/api/field_behavior.proto\x1a\x19google/api/resource.proto\x1a\x1fgoogle/protobuf/timestamp.proto\"\
|
|
13
|
+
descriptor_data = "\n*google/cloud/orgpolicy/v2/constraint.proto\x12\x19google.cloud.orgpolicy.v2\x1a\x1fgoogle/api/field_behavior.proto\x1a\x19google/api/resource.proto\x1a\x1cgoogle/protobuf/struct.proto\x1a\x1fgoogle/protobuf/timestamp.proto\"\xfa\x0f\n\nConstraint\x12\x11\n\x04name\x18\x01 \x01(\tB\x03\xe0\x41\x05\x12\x14\n\x0c\x64isplay_name\x18\x02 \x01(\t\x12\x13\n\x0b\x64\x65scription\x18\x03 \x01(\t\x12S\n\x12\x63onstraint_default\x18\x04 \x01(\x0e\x32\x37.google.cloud.orgpolicy.v2.Constraint.ConstraintDefault\x12O\n\x0flist_constraint\x18\x05 \x01(\x0b\x32\x34.google.cloud.orgpolicy.v2.Constraint.ListConstraintH\x00\x12U\n\x12\x62oolean_constraint\x18\x06 \x01(\x0b\x32\x37.google.cloud.orgpolicy.v2.Constraint.BooleanConstraintH\x00\x12\x18\n\x10supports_dry_run\x18\x07 \x01(\x08\x12\x1d\n\x15\x65quivalent_constraint\x18\x08 \x01(\t\x12\x1b\n\x13supports_simulation\x18\t \x01(\x08\x1a=\n\x0eListConstraint\x12\x13\n\x0bsupports_in\x18\x01 \x01(\x08\x12\x16\n\x0esupports_under\x18\x02 \x01(\x08\x1a\x82\t\n\x1a\x43ustomConstraintDefinition\x12\x16\n\x0eresource_types\x18\x01 \x03(\t\x12\x61\n\x0cmethod_types\x18\x02 \x03(\x0e\x32K.google.cloud.orgpolicy.v2.Constraint.CustomConstraintDefinition.MethodType\x12\x11\n\tcondition\x18\x03 \x01(\t\x12`\n\x0b\x61\x63tion_type\x18\x04 \x01(\x0e\x32K.google.cloud.orgpolicy.v2.Constraint.CustomConstraintDefinition.ActionType\x12\x64\n\nparameters\x18\x05 \x03(\x0b\x32P.google.cloud.orgpolicy.v2.Constraint.CustomConstraintDefinition.ParametersEntry\x1a\xdc\x03\n\tParameter\x12]\n\x04type\x18\x01 \x01(\x0e\x32O.google.cloud.orgpolicy.v2.Constraint.CustomConstraintDefinition.Parameter.Type\x12-\n\rdefault_value\x18\x02 \x01(\x0b\x32\x16.google.protobuf.Value\x12\x19\n\x11valid_values_expr\x18\x03 \x01(\t\x12\x65\n\x08metadata\x18\x04 \x01(\x0b\x32S.google.cloud.orgpolicy.v2.Constraint.CustomConstraintDefinition.Parameter.Metadata\x12]\n\x04item\x18\x05 \x01(\x0e\x32O.google.cloud.orgpolicy.v2.Constraint.CustomConstraintDefinition.Parameter.Type\x1a\x1f\n\x08Metadata\x12\x13\n\x0b\x64\x65scription\x18\x01 \x01(\t\"?\n\x04Type\x12\x14\n\x10TYPE_UNSPECIFIED\x10\x00\x12\x08\n\x04LIST\x10\x01\x12\n\n\x06STRING\x10\x02\x12\x0b\n\x07\x42OOLEAN\x10\x03\x1a}\n\x0fParametersEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12Y\n\x05value\x18\x02 \x01(\x0b\x32J.google.cloud.orgpolicy.v2.Constraint.CustomConstraintDefinition.Parameter:\x02\x38\x01\"p\n\nMethodType\x12\x1b\n\x17METHOD_TYPE_UNSPECIFIED\x10\x00\x12\n\n\x06\x43REATE\x10\x01\x12\n\n\x06UPDATE\x10\x02\x12\n\n\x06\x44\x45LETE\x10\x03\x12\x10\n\x0cREMOVE_GRANT\x10\x04\x12\x0f\n\x0bGOVERN_TAGS\x10\x05\">\n\nActionType\x12\x1b\n\x17\x41\x43TION_TYPE_UNSPECIFIED\x10\x00\x12\t\n\x05\x41LLOW\x10\x01\x12\x08\n\x04\x44\x45NY\x10\x02\x1a{\n\x11\x42ooleanConstraint\x12\x66\n\x1c\x63ustom_constraint_definition\x18\x01 \x01(\x0b\x32@.google.cloud.orgpolicy.v2.Constraint.CustomConstraintDefinition\"L\n\x11\x43onstraintDefault\x12\"\n\x1e\x43ONSTRAINT_DEFAULT_UNSPECIFIED\x10\x00\x12\t\n\x05\x41LLOW\x10\x01\x12\x08\n\x04\x44\x45NY\x10\x02:\xb8\x01\xea\x41\xb4\x01\n#orgpolicy.googleapis.com/Constraint\x12+projects/{project}/constraints/{constraint}\x12)folders/{folder}/constraints/{constraint}\x12\x35organizations/{organization}/constraints/{constraint}B\x11\n\x0f\x63onstraint_type\"\xf7\x04\n\x10\x43ustomConstraint\x12\x11\n\x04name\x18\x01 \x01(\tB\x03\xe0\x41\x05\x12\x1b\n\x0eresource_types\x18\x02 \x03(\tB\x03\xe0\x41\x05\x12L\n\x0cmethod_types\x18\x03 \x03(\x0e\x32\x36.google.cloud.orgpolicy.v2.CustomConstraint.MethodType\x12\x11\n\tcondition\x18\x04 \x01(\t\x12K\n\x0b\x61\x63tion_type\x18\x05 \x01(\x0e\x32\x36.google.cloud.orgpolicy.v2.CustomConstraint.ActionType\x12\x14\n\x0c\x64isplay_name\x18\x06 \x01(\t\x12\x13\n\x0b\x64\x65scription\x18\x07 \x01(\t\x12\x34\n\x0bupdate_time\x18\x08 \x01(\x0b\x32\x1a.google.protobuf.TimestampB\x03\xe0\x41\x03\"p\n\nMethodType\x12\x1b\n\x17METHOD_TYPE_UNSPECIFIED\x10\x00\x12\n\n\x06\x43REATE\x10\x01\x12\n\n\x06UPDATE\x10\x02\x12\n\n\x06\x44\x45LETE\x10\x03\x12\x10\n\x0cREMOVE_GRANT\x10\x04\x12\x0f\n\x0bGOVERN_TAGS\x10\x05\">\n\nActionType\x12\x1b\n\x17\x41\x43TION_TYPE_UNSPECIFIED\x10\x00\x12\t\n\x05\x41LLOW\x10\x01\x12\x08\n\x04\x44\x45NY\x10\x02:r\xea\x41o\n)orgpolicy.googleapis.com/CustomConstraint\x12\x42organizations/{organization}/customConstraints/{custom_constraint}B\xc6\x01\n\x1d\x63om.google.cloud.orgpolicy.v2B\x0f\x43onstraintProtoP\x01Z;cloud.google.com/go/orgpolicy/apiv2/orgpolicypb;orgpolicypb\xaa\x02\x19Google.Cloud.OrgPolicy.V2\xca\x02\x19Google\\Cloud\\OrgPolicy\\V2\xea\x02\x1cGoogle::Cloud::OrgPolicy::V2b\x06proto3"
|
|
13
14
|
|
|
14
15
|
pool = Google::Protobuf::DescriptorPool.generated_pool
|
|
15
16
|
|
|
@@ -24,6 +25,7 @@ rescue TypeError
|
|
|
24
25
|
file = pool.add_serialized_file(serialized)
|
|
25
26
|
warn "Warning: Protobuf detected an import path issue while loading generated file #{__FILE__}"
|
|
26
27
|
imports = [
|
|
28
|
+
["google.protobuf.Value", "google/protobuf/struct.proto"],
|
|
27
29
|
["google.protobuf.Timestamp", "google/protobuf/timestamp.proto"],
|
|
28
30
|
]
|
|
29
31
|
imports.each do |type_name, expected_filename|
|
|
@@ -42,6 +44,12 @@ module Google
|
|
|
42
44
|
module V2
|
|
43
45
|
Constraint = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.orgpolicy.v2.Constraint").msgclass
|
|
44
46
|
Constraint::ListConstraint = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.orgpolicy.v2.Constraint.ListConstraint").msgclass
|
|
47
|
+
Constraint::CustomConstraintDefinition = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.orgpolicy.v2.Constraint.CustomConstraintDefinition").msgclass
|
|
48
|
+
Constraint::CustomConstraintDefinition::Parameter = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.orgpolicy.v2.Constraint.CustomConstraintDefinition.Parameter").msgclass
|
|
49
|
+
Constraint::CustomConstraintDefinition::Parameter::Metadata = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.orgpolicy.v2.Constraint.CustomConstraintDefinition.Parameter.Metadata").msgclass
|
|
50
|
+
Constraint::CustomConstraintDefinition::Parameter::Type = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.orgpolicy.v2.Constraint.CustomConstraintDefinition.Parameter.Type").enummodule
|
|
51
|
+
Constraint::CustomConstraintDefinition::MethodType = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.orgpolicy.v2.Constraint.CustomConstraintDefinition.MethodType").enummodule
|
|
52
|
+
Constraint::CustomConstraintDefinition::ActionType = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.orgpolicy.v2.Constraint.CustomConstraintDefinition.ActionType").enummodule
|
|
45
53
|
Constraint::BooleanConstraint = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.orgpolicy.v2.Constraint.BooleanConstraint").msgclass
|
|
46
54
|
Constraint::ConstraintDefault = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.orgpolicy.v2.Constraint.ConstraintDefault").enummodule
|
|
47
55
|
CustomConstraint = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.orgpolicy.v2.CustomConstraint").msgclass
|
|
@@ -11,11 +11,12 @@ require 'google/api/resource_pb'
|
|
|
11
11
|
require 'google/cloud/orgpolicy/v2/constraint_pb'
|
|
12
12
|
require 'google/protobuf/empty_pb'
|
|
13
13
|
require 'google/protobuf/field_mask_pb'
|
|
14
|
+
require 'google/protobuf/struct_pb'
|
|
14
15
|
require 'google/protobuf/timestamp_pb'
|
|
15
16
|
require 'google/type/expr_pb'
|
|
16
17
|
|
|
17
18
|
|
|
18
|
-
descriptor_data = "\n)google/cloud/orgpolicy/v2/orgpolicy.proto\x12\x19google.cloud.orgpolicy.v2\x1a\x1cgoogle/api/annotations.proto\x1a\x17google/api/client.proto\x1a\x1fgoogle/api/field_behavior.proto\x1a\x19google/api/resource.proto\x1a*google/cloud/orgpolicy/v2/constraint.proto\x1a\x1bgoogle/protobuf/empty.proto\x1a google/protobuf/field_mask.proto\x1a\x1fgoogle/protobuf/timestamp.proto\x1a\x16google/type/expr.proto\"\x89\x03\n\x06Policy\x12\x11\n\x04name\x18\x01 \x01(\tB\x03\xe0\x41\x05\x12\x33\n\x04spec\x18\x02 \x01(\x0b\x32%.google.cloud.orgpolicy.v2.PolicySpec\x12\x45\n\talternate\x18\x03 \x01(\x0b\x32..google.cloud.orgpolicy.v2.AlternatePolicySpecB\x02\x18\x01\x12;\n\x0c\x64ry_run_spec\x18\x04 \x01(\x0b\x32%.google.cloud.orgpolicy.v2.PolicySpec\x12\x11\n\x04\x65tag\x18\x05 \x01(\tB\x03\xe0\x41\x01:\x9f\x01\xea\x41\x9b\x01\n\x1forgpolicy.googleapis.com/Policy\x12$projects/{project}/policies/{policy}\x12\"folders/{folder}/policies/{policy}\x12.organizations/{organization}/policies/{policy}\"Z\n\x13\x41lternatePolicySpec\x12\x0e\n\x06launch\x18\x01 \x01(\t\x12\x33\n\x04spec\x18\x02 \x01(\x0b\x32%.google.cloud.orgpolicy.v2.PolicySpec\"\
|
|
19
|
+
descriptor_data = "\n)google/cloud/orgpolicy/v2/orgpolicy.proto\x12\x19google.cloud.orgpolicy.v2\x1a\x1cgoogle/api/annotations.proto\x1a\x17google/api/client.proto\x1a\x1fgoogle/api/field_behavior.proto\x1a\x19google/api/resource.proto\x1a*google/cloud/orgpolicy/v2/constraint.proto\x1a\x1bgoogle/protobuf/empty.proto\x1a google/protobuf/field_mask.proto\x1a\x1cgoogle/protobuf/struct.proto\x1a\x1fgoogle/protobuf/timestamp.proto\x1a\x16google/type/expr.proto\"\x89\x03\n\x06Policy\x12\x11\n\x04name\x18\x01 \x01(\tB\x03\xe0\x41\x05\x12\x33\n\x04spec\x18\x02 \x01(\x0b\x32%.google.cloud.orgpolicy.v2.PolicySpec\x12\x45\n\talternate\x18\x03 \x01(\x0b\x32..google.cloud.orgpolicy.v2.AlternatePolicySpecB\x02\x18\x01\x12;\n\x0c\x64ry_run_spec\x18\x04 \x01(\x0b\x32%.google.cloud.orgpolicy.v2.PolicySpec\x12\x11\n\x04\x65tag\x18\x05 \x01(\tB\x03\xe0\x41\x01:\x9f\x01\xea\x41\x9b\x01\n\x1forgpolicy.googleapis.com/Policy\x12$projects/{project}/policies/{policy}\x12\"folders/{folder}/policies/{policy}\x12.organizations/{organization}/policies/{policy}\"Z\n\x13\x41lternatePolicySpec\x12\x0e\n\x06launch\x18\x01 \x01(\t\x12\x33\n\x04spec\x18\x02 \x01(\x0b\x32%.google.cloud.orgpolicy.v2.PolicySpec\"\xf8\x03\n\nPolicySpec\x12\x0c\n\x04\x65tag\x18\x01 \x01(\t\x12\x34\n\x0bupdate_time\x18\x02 \x01(\x0b\x32\x1a.google.protobuf.TimestampB\x03\xe0\x41\x03\x12?\n\x05rules\x18\x03 \x03(\x0b\x32\x30.google.cloud.orgpolicy.v2.PolicySpec.PolicyRule\x12\x1b\n\x13inherit_from_parent\x18\x04 \x01(\x08\x12\r\n\x05reset\x18\x05 \x01(\x08\x1a\xb8\x02\n\nPolicyRule\x12O\n\x06values\x18\x01 \x01(\x0b\x32=.google.cloud.orgpolicy.v2.PolicySpec.PolicyRule.StringValuesH\x00\x12\x13\n\tallow_all\x18\x02 \x01(\x08H\x00\x12\x12\n\x08\x64\x65ny_all\x18\x03 \x01(\x08H\x00\x12\x11\n\x07\x65nforce\x18\x04 \x01(\x08H\x00\x12$\n\tcondition\x18\x05 \x01(\x0b\x32\x11.google.type.Expr\x12\x30\n\nparameters\x18\x06 \x01(\x0b\x32\x17.google.protobuf.StructB\x03\xe0\x41\x01\x1a=\n\x0cStringValues\x12\x16\n\x0e\x61llowed_values\x18\x01 \x03(\t\x12\x15\n\rdenied_values\x18\x02 \x03(\tB\x06\n\x04kind\"|\n\x16ListConstraintsRequest\x12;\n\x06parent\x18\x01 \x01(\tB+\xe0\x41\x02\xfa\x41%\x12#orgpolicy.googleapis.com/Constraint\x12\x11\n\tpage_size\x18\x02 \x01(\x05\x12\x12\n\npage_token\x18\x03 \x01(\t\"n\n\x17ListConstraintsResponse\x12:\n\x0b\x63onstraints\x18\x01 \x03(\x0b\x32%.google.cloud.orgpolicy.v2.Constraint\x12\x17\n\x0fnext_page_token\x18\x02 \x01(\t\"u\n\x13ListPoliciesRequest\x12\x37\n\x06parent\x18\x01 \x01(\tB\'\xe0\x41\x02\xfa\x41!\x12\x1forgpolicy.googleapis.com/Policy\x12\x11\n\tpage_size\x18\x02 \x01(\x05\x12\x12\n\npage_token\x18\x03 \x01(\t\"d\n\x14ListPoliciesResponse\x12\x33\n\x08policies\x18\x01 \x03(\x0b\x32!.google.cloud.orgpolicy.v2.Policy\x12\x17\n\x0fnext_page_token\x18\x02 \x01(\t\"I\n\x10GetPolicyRequest\x12\x35\n\x04name\x18\x01 \x01(\tB\'\xe0\x41\x02\xfa\x41!\n\x1forgpolicy.googleapis.com/Policy\"R\n\x19GetEffectivePolicyRequest\x12\x35\n\x04name\x18\x01 \x01(\tB\'\xe0\x41\x02\xfa\x41!\n\x1forgpolicy.googleapis.com/Policy\"\x86\x01\n\x13\x43reatePolicyRequest\x12\x37\n\x06parent\x18\x01 \x01(\tB\'\xe0\x41\x02\xfa\x41!\x12\x1forgpolicy.googleapis.com/Policy\x12\x36\n\x06policy\x18\x03 \x01(\x0b\x32!.google.cloud.orgpolicy.v2.PolicyB\x03\xe0\x41\x02\"~\n\x13UpdatePolicyRequest\x12\x36\n\x06policy\x18\x01 \x01(\x0b\x32!.google.cloud.orgpolicy.v2.PolicyB\x03\xe0\x41\x02\x12/\n\x0bupdate_mask\x18\x03 \x01(\x0b\x32\x1a.google.protobuf.FieldMask\"_\n\x13\x44\x65letePolicyRequest\x12\x35\n\x04name\x18\x01 \x01(\tB\'\xe0\x41\x02\xfa\x41!\n\x1forgpolicy.googleapis.com/Policy\x12\x11\n\x04\x65tag\x18\x02 \x01(\tB\x03\xe0\x41\x01\"\xaf\x01\n\x1d\x43reateCustomConstraintRequest\x12\x41\n\x06parent\x18\x01 \x01(\tB1\xe0\x41\x02\xfa\x41+\x12)orgpolicy.googleapis.com/CustomConstraint\x12K\n\x11\x63ustom_constraint\x18\x02 \x01(\x0b\x32+.google.cloud.orgpolicy.v2.CustomConstraintB\x03\xe0\x41\x02\"]\n\x1aGetCustomConstraintRequest\x12?\n\x04name\x18\x01 \x01(\tB1\xe0\x41\x02\xfa\x41+\n)orgpolicy.googleapis.com/CustomConstraint\"\x88\x01\n\x1cListCustomConstraintsRequest\x12\x41\n\x06parent\x18\x01 \x01(\tB1\xe0\x41\x02\xfa\x41+\x12)orgpolicy.googleapis.com/CustomConstraint\x12\x11\n\tpage_size\x18\x02 \x01(\x05\x12\x12\n\npage_token\x18\x03 \x01(\t\"\x81\x01\n\x1dListCustomConstraintsResponse\x12G\n\x12\x63ustom_constraints\x18\x01 \x03(\x0b\x32+.google.cloud.orgpolicy.v2.CustomConstraint\x12\x17\n\x0fnext_page_token\x18\x02 \x01(\t\"l\n\x1dUpdateCustomConstraintRequest\x12K\n\x11\x63ustom_constraint\x18\x01 \x01(\x0b\x32+.google.cloud.orgpolicy.v2.CustomConstraintB\x03\xe0\x41\x02\"`\n\x1d\x44\x65leteCustomConstraintRequest\x12?\n\x04name\x18\x01 \x01(\tB1\xe0\x41\x02\xfa\x41+\n)orgpolicy.googleapis.com/CustomConstraint2\xcd\x16\n\tOrgPolicy\x12\x81\x02\n\x0fListConstraints\x12\x31.google.cloud.orgpolicy.v2.ListConstraintsRequest\x1a\x32.google.cloud.orgpolicy.v2.ListConstraintsResponse\"\x86\x01\xda\x41\x06parent\x82\xd3\xe4\x93\x02w\x12#/v2/{parent=projects/*}/constraintsZ$\x12\"/v2/{parent=folders/*}/constraintsZ*\x12(/v2/{parent=organizations/*}/constraints\x12\xee\x01\n\x0cListPolicies\x12..google.cloud.orgpolicy.v2.ListPoliciesRequest\x1a/.google.cloud.orgpolicy.v2.ListPoliciesResponse\"}\xda\x41\x06parent\x82\xd3\xe4\x93\x02n\x12 /v2/{parent=projects/*}/policiesZ!\x12\x1f/v2/{parent=folders/*}/policiesZ\'\x12%/v2/{parent=organizations/*}/policies\x12\xd8\x01\n\tGetPolicy\x12+.google.cloud.orgpolicy.v2.GetPolicyRequest\x1a!.google.cloud.orgpolicy.v2.Policy\"{\xda\x41\x04name\x82\xd3\xe4\x93\x02n\x12 /v2/{name=projects/*/policies/*}Z!\x12\x1f/v2/{name=folders/*/policies/*}Z\'\x12%/v2/{name=organizations/*/policies/*}\x12\xa5\x02\n\x12GetEffectivePolicy\x12\x34.google.cloud.orgpolicy.v2.GetEffectivePolicyRequest\x1a!.google.cloud.orgpolicy.v2.Policy\"\xb5\x01\xda\x41\x04name\x82\xd3\xe4\x93\x02\xa7\x01\x12\x33/v2/{name=projects/*/policies/*}:getEffectivePolicyZ4\x12\x32/v2/{name=folders/*/policies/*}:getEffectivePolicyZ:\x12\x38/v2/{name=organizations/*/policies/*}:getEffectivePolicy\x12\x81\x02\n\x0c\x43reatePolicy\x12..google.cloud.orgpolicy.v2.CreatePolicyRequest\x1a!.google.cloud.orgpolicy.v2.Policy\"\x9d\x01\xda\x41\rparent,policy\x82\xd3\xe4\x93\x02\x86\x01\" /v2/{parent=projects/*}/policies:\x06policyZ)\"\x1f/v2/{parent=folders/*}/policies:\x06policyZ/\"%/v2/{parent=organizations/*}/policies:\x06policy\x12\x8f\x02\n\x0cUpdatePolicy\x12..google.cloud.orgpolicy.v2.UpdatePolicyRequest\x1a!.google.cloud.orgpolicy.v2.Policy\"\xab\x01\xda\x41\x06policy\x82\xd3\xe4\x93\x02\x9b\x01\x32\'/v2/{policy.name=projects/*/policies/*}:\x06policyZ02&/v2/{policy.name=folders/*/policies/*}:\x06policyZ62,/v2/{policy.name=organizations/*/policies/*}:\x06policy\x12\xd3\x01\n\x0c\x44\x65letePolicy\x12..google.cloud.orgpolicy.v2.DeletePolicyRequest\x1a\x16.google.protobuf.Empty\"{\xda\x41\x04name\x82\xd3\xe4\x93\x02n* /v2/{name=projects/*/policies/*}Z!*\x1f/v2/{name=folders/*/policies/*}Z\'*%/v2/{name=organizations/*/policies/*}\x12\xe5\x01\n\x16\x43reateCustomConstraint\x12\x38.google.cloud.orgpolicy.v2.CreateCustomConstraintRequest\x1a+.google.cloud.orgpolicy.v2.CustomConstraint\"d\xda\x41\x18parent,custom_constraint\x82\xd3\xe4\x93\x02\x43\"./v2/{parent=organizations/*}/customConstraints:\x11\x63ustom_constraint\x12\xf0\x01\n\x16UpdateCustomConstraint\x12\x38.google.cloud.orgpolicy.v2.UpdateCustomConstraintRequest\x1a+.google.cloud.orgpolicy.v2.CustomConstraint\"o\xda\x41\x11\x63ustom_constraint\x82\xd3\xe4\x93\x02U2@/v2/{custom_constraint.name=organizations/*/customConstraints/*}:\x11\x63ustom_constraint\x12\xb8\x01\n\x13GetCustomConstraint\x12\x35.google.cloud.orgpolicy.v2.GetCustomConstraintRequest\x1a+.google.cloud.orgpolicy.v2.CustomConstraint\"=\xda\x41\x04name\x82\xd3\xe4\x93\x02\x30\x12./v2/{name=organizations/*/customConstraints/*}\x12\xcb\x01\n\x15ListCustomConstraints\x12\x37.google.cloud.orgpolicy.v2.ListCustomConstraintsRequest\x1a\x38.google.cloud.orgpolicy.v2.ListCustomConstraintsResponse\"?\xda\x41\x06parent\x82\xd3\xe4\x93\x02\x30\x12./v2/{parent=organizations/*}/customConstraints\x12\xa9\x01\n\x16\x44\x65leteCustomConstraint\x12\x38.google.cloud.orgpolicy.v2.DeleteCustomConstraintRequest\x1a\x16.google.protobuf.Empty\"=\xda\x41\x04name\x82\xd3\xe4\x93\x02\x30*./v2/{name=organizations/*/customConstraints/*}\x1aL\xca\x41\x18orgpolicy.googleapis.com\xd2\x41.https://www.googleapis.com/auth/cloud-platformB\xc5\x01\n\x1d\x63om.google.cloud.orgpolicy.v2B\x0eOrgPolicyProtoP\x01Z;cloud.google.com/go/orgpolicy/apiv2/orgpolicypb;orgpolicypb\xaa\x02\x19Google.Cloud.OrgPolicy.V2\xca\x02\x19Google\\Cloud\\OrgPolicy\\V2\xea\x02\x1cGoogle::Cloud::OrgPolicy::V2b\x06proto3"
|
|
19
20
|
|
|
20
21
|
pool = Google::Protobuf::DescriptorPool.generated_pool
|
|
21
22
|
|
|
@@ -32,6 +33,7 @@ rescue TypeError
|
|
|
32
33
|
imports = [
|
|
33
34
|
["google.protobuf.Timestamp", "google/protobuf/timestamp.proto"],
|
|
34
35
|
["google.type.Expr", "google/type/expr.proto"],
|
|
36
|
+
["google.protobuf.Struct", "google/protobuf/struct.proto"],
|
|
35
37
|
["google.cloud.orgpolicy.v2.Constraint", "google/cloud/orgpolicy/v2/constraint.proto"],
|
|
36
38
|
["google.protobuf.FieldMask", "google/protobuf/field_mask.proto"],
|
|
37
39
|
]
|
|
@@ -106,10 +106,10 @@ module Google
|
|
|
106
106
|
# Note: the supplied policy will perform a full overwrite of all
|
|
107
107
|
# fields.
|
|
108
108
|
rpc :UpdateCustomConstraint, ::Google::Cloud::OrgPolicy::V2::UpdateCustomConstraintRequest, ::Google::Cloud::OrgPolicy::V2::CustomConstraint
|
|
109
|
-
# Gets a custom constraint.
|
|
109
|
+
# Gets a custom or managed constraint.
|
|
110
110
|
#
|
|
111
111
|
# Returns a `google.rpc.Status` with `google.rpc.Code.NOT_FOUND` if the
|
|
112
|
-
# custom constraint does not exist.
|
|
112
|
+
# custom or managed constraint does not exist.
|
|
113
113
|
rpc :GetCustomConstraint, ::Google::Cloud::OrgPolicy::V2::GetCustomConstraintRequest, ::Google::Cloud::OrgPolicy::V2::CustomConstraint
|
|
114
114
|
# Retrieves all of the custom constraints that exist on a particular
|
|
115
115
|
# organization resource.
|
|
@@ -221,6 +221,12 @@ module Google
|
|
|
221
221
|
# Pythonic which are included in `protobuf>=5.29.x`. This feature will be
|
|
222
222
|
# enabled by default 1 month after launching the feature in preview
|
|
223
223
|
# packages.
|
|
224
|
+
# @!attribute [rw] unversioned_package_disabled
|
|
225
|
+
# @return [::Boolean]
|
|
226
|
+
# Disables generation of an unversioned Python package for this client
|
|
227
|
+
# library. This means that the module names will need to be versioned in
|
|
228
|
+
# import statements. For example `import google.cloud.library_v2` instead
|
|
229
|
+
# of `import google.cloud.library`.
|
|
224
230
|
class ExperimentalFeatures
|
|
225
231
|
include ::Google::Protobuf::MessageExts
|
|
226
232
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
@@ -409,6 +415,14 @@ module Google
|
|
|
409
415
|
# @return [::Array<::String>]
|
|
410
416
|
# An allowlist of the fully qualified names of RPCs that should be included
|
|
411
417
|
# on public client surfaces.
|
|
418
|
+
# @!attribute [rw] generate_omitted_as_internal
|
|
419
|
+
# @return [::Boolean]
|
|
420
|
+
# Setting this to true indicates to the client generators that methods
|
|
421
|
+
# that would be excluded from the generation should instead be generated
|
|
422
|
+
# in a way that indicates these methods should not be consumed by
|
|
423
|
+
# end users. How this is expressed is up to individual language
|
|
424
|
+
# implementations to decide. Some examples may be: added annotations,
|
|
425
|
+
# obfuscated identifiers, or other language idiomatic patterns.
|
|
412
426
|
class SelectiveGapicGeneration
|
|
413
427
|
include ::Google::Protobuf::MessageExts
|
|
414
428
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
@@ -29,8 +29,8 @@ module Google
|
|
|
29
29
|
# organization by setting a policy that includes constraints at different
|
|
30
30
|
# locations in the organization's resource hierarchy. Policies are inherited
|
|
31
31
|
# down the resource hierarchy from higher levels, but can also be overridden.
|
|
32
|
-
# For details about the inheritance rules
|
|
33
|
-
#
|
|
32
|
+
# For details about the inheritance rules, see
|
|
33
|
+
# {::Google::Cloud::OrgPolicy::V2::Policy `Policy`}.
|
|
34
34
|
#
|
|
35
35
|
# Constraints have a default behavior determined by the `constraint_default`
|
|
36
36
|
# field, which is the enforcement behavior that is used in the absence of a
|
|
@@ -61,23 +61,31 @@ module Google
|
|
|
61
61
|
# The evaluation behavior of this constraint in the absence of a policy.
|
|
62
62
|
# @!attribute [rw] list_constraint
|
|
63
63
|
# @return [::Google::Cloud::OrgPolicy::V2::Constraint::ListConstraint]
|
|
64
|
-
# Defines this constraint as being a
|
|
64
|
+
# Defines this constraint as being a list constraint.
|
|
65
65
|
#
|
|
66
66
|
# Note: The following fields are mutually exclusive: `list_constraint`, `boolean_constraint`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
67
67
|
# @!attribute [rw] boolean_constraint
|
|
68
68
|
# @return [::Google::Cloud::OrgPolicy::V2::Constraint::BooleanConstraint]
|
|
69
|
-
# Defines this constraint as being a
|
|
69
|
+
# Defines this constraint as being a boolean constraint.
|
|
70
70
|
#
|
|
71
71
|
# Note: The following fields are mutually exclusive: `boolean_constraint`, `list_constraint`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
72
72
|
# @!attribute [rw] supports_dry_run
|
|
73
73
|
# @return [::Boolean]
|
|
74
74
|
# Shows if dry run is supported for this constraint or not.
|
|
75
|
+
# @!attribute [rw] equivalent_constraint
|
|
76
|
+
# @return [::String]
|
|
77
|
+
# Managed constraint and canned constraint sometimes can have
|
|
78
|
+
# equivalents. This field is used to store the equivalent constraint name.
|
|
79
|
+
# @!attribute [rw] supports_simulation
|
|
80
|
+
# @return [::Boolean]
|
|
81
|
+
# Shows if simulation is supported for this constraint or not.
|
|
75
82
|
class Constraint
|
|
76
83
|
include ::Google::Protobuf::MessageExts
|
|
77
84
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
78
85
|
|
|
79
|
-
# A constraint that allows or disallows a list of string values, which
|
|
80
|
-
# configured
|
|
86
|
+
# A constraint type that allows or disallows a list of string values, which
|
|
87
|
+
# are configured in the
|
|
88
|
+
# {::Google::Cloud::OrgPolicy::V2::PolicySpec::PolicyRule `PolicyRule`}.
|
|
81
89
|
# @!attribute [rw] supports_in
|
|
82
90
|
# @return [::Boolean]
|
|
83
91
|
# Indicates whether values grouped into categories can be used in
|
|
@@ -94,11 +102,148 @@ module Google
|
|
|
94
102
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
95
103
|
end
|
|
96
104
|
|
|
97
|
-
#
|
|
105
|
+
# Custom constraint definition. Defines this as a managed constraint.
|
|
106
|
+
# @!attribute [rw] resource_types
|
|
107
|
+
# @return [::Array<::String>]
|
|
108
|
+
# The resource instance type on which this policy applies. Format will be
|
|
109
|
+
# of the form : `<service name>/<type>` Example:
|
|
110
|
+
#
|
|
111
|
+
# * `compute.googleapis.com/Instance`.
|
|
112
|
+
# @!attribute [rw] method_types
|
|
113
|
+
# @return [::Array<::Google::Cloud::OrgPolicy::V2::Constraint::CustomConstraintDefinition::MethodType>]
|
|
114
|
+
# All the operations being applied for this constraint.
|
|
115
|
+
# @!attribute [rw] condition
|
|
116
|
+
# @return [::String]
|
|
117
|
+
# Org policy condition/expression. For example:
|
|
118
|
+
# `resource.instanceName.matches("[production|test]_.*_(\d)+")` or,
|
|
119
|
+
# `resource.management.auto_upgrade == true`
|
|
120
|
+
#
|
|
121
|
+
# The max length of the condition is 1000 characters.
|
|
122
|
+
# @!attribute [rw] action_type
|
|
123
|
+
# @return [::Google::Cloud::OrgPolicy::V2::Constraint::CustomConstraintDefinition::ActionType]
|
|
124
|
+
# Allow or deny type.
|
|
125
|
+
# @!attribute [rw] parameters
|
|
126
|
+
# @return [::Google::Protobuf::Map{::String => ::Google::Cloud::OrgPolicy::V2::Constraint::CustomConstraintDefinition::Parameter}]
|
|
127
|
+
# Stores the structure of
|
|
128
|
+
# {::Google::Cloud::OrgPolicy::V2::Constraint::CustomConstraintDefinition::Parameter `Parameters`}
|
|
129
|
+
# used by the constraint condition. The key of `map` represents the name of
|
|
130
|
+
# the parameter.
|
|
131
|
+
class CustomConstraintDefinition
|
|
132
|
+
include ::Google::Protobuf::MessageExts
|
|
133
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
134
|
+
|
|
135
|
+
# Defines a parameter structure.
|
|
136
|
+
# @!attribute [rw] type
|
|
137
|
+
# @return [::Google::Cloud::OrgPolicy::V2::Constraint::CustomConstraintDefinition::Parameter::Type]
|
|
138
|
+
# Type of the parameter.
|
|
139
|
+
# @!attribute [rw] default_value
|
|
140
|
+
# @return [::Google::Protobuf::Value]
|
|
141
|
+
# Sets the value of the parameter in an assignment if no value is given.
|
|
142
|
+
# @!attribute [rw] valid_values_expr
|
|
143
|
+
# @return [::String]
|
|
144
|
+
# Provides a CEL expression to specify the acceptable parameter values
|
|
145
|
+
# during assignment.
|
|
146
|
+
# For example, parameterName in ("parameterValue1", "parameterValue2")
|
|
147
|
+
# @!attribute [rw] metadata
|
|
148
|
+
# @return [::Google::Cloud::OrgPolicy::V2::Constraint::CustomConstraintDefinition::Parameter::Metadata]
|
|
149
|
+
# Defines subproperties primarily used by the UI to display user-friendly
|
|
150
|
+
# information.
|
|
151
|
+
# @!attribute [rw] item
|
|
152
|
+
# @return [::Google::Cloud::OrgPolicy::V2::Constraint::CustomConstraintDefinition::Parameter::Type]
|
|
153
|
+
# Determines the parameter's value structure.
|
|
154
|
+
# For example, `LIST<STRING>` can be specified by defining `type: LIST`,
|
|
155
|
+
# and `item: STRING`.
|
|
156
|
+
class Parameter
|
|
157
|
+
include ::Google::Protobuf::MessageExts
|
|
158
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
159
|
+
|
|
160
|
+
# Defines Metadata structure.
|
|
161
|
+
# @!attribute [rw] description
|
|
162
|
+
# @return [::String]
|
|
163
|
+
# Detailed description of what this `parameter` is and use of it.
|
|
164
|
+
# Mutable.
|
|
165
|
+
class Metadata
|
|
166
|
+
include ::Google::Protobuf::MessageExts
|
|
167
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
168
|
+
end
|
|
169
|
+
|
|
170
|
+
# All valid types of parameter.
|
|
171
|
+
module Type
|
|
172
|
+
# This is only used for distinguishing unset values and should never be
|
|
173
|
+
# used. Results in an error.
|
|
174
|
+
TYPE_UNSPECIFIED = 0
|
|
175
|
+
|
|
176
|
+
# List parameter type.
|
|
177
|
+
LIST = 1
|
|
178
|
+
|
|
179
|
+
# String parameter type.
|
|
180
|
+
STRING = 2
|
|
181
|
+
|
|
182
|
+
# Boolean parameter type.
|
|
183
|
+
BOOLEAN = 3
|
|
184
|
+
end
|
|
185
|
+
end
|
|
186
|
+
|
|
187
|
+
# @!attribute [rw] key
|
|
188
|
+
# @return [::String]
|
|
189
|
+
# @!attribute [rw] value
|
|
190
|
+
# @return [::Google::Cloud::OrgPolicy::V2::Constraint::CustomConstraintDefinition::Parameter]
|
|
191
|
+
class ParametersEntry
|
|
192
|
+
include ::Google::Protobuf::MessageExts
|
|
193
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
194
|
+
end
|
|
195
|
+
|
|
196
|
+
# The operation for which this constraint will be applied. To apply this
|
|
197
|
+
# constraint only when creating new resources, the `method_types` should be
|
|
198
|
+
# `CREATE` only. To apply this constraint when creating or deleting
|
|
199
|
+
# resources, the `method_types` should be `CREATE` and `DELETE`.
|
|
200
|
+
#
|
|
201
|
+
# `UPDATE`-only custom constraints are not supported. Use `CREATE` or
|
|
202
|
+
# `CREATE, UPDATE`.
|
|
203
|
+
module MethodType
|
|
204
|
+
# This is only used for distinguishing unset values and should never be
|
|
205
|
+
# used. Results in an error.
|
|
206
|
+
METHOD_TYPE_UNSPECIFIED = 0
|
|
207
|
+
|
|
208
|
+
# Constraint applied when creating the resource.
|
|
209
|
+
CREATE = 1
|
|
210
|
+
|
|
211
|
+
# Constraint applied when updating the resource.
|
|
212
|
+
UPDATE = 2
|
|
213
|
+
|
|
214
|
+
# Constraint applied when deleting the resource.
|
|
215
|
+
# Not currently supported.
|
|
216
|
+
DELETE = 3
|
|
217
|
+
|
|
218
|
+
# Constraint applied when removing an IAM grant.
|
|
219
|
+
REMOVE_GRANT = 4
|
|
220
|
+
|
|
221
|
+
# Constraint applied when enforcing forced tagging.
|
|
222
|
+
GOVERN_TAGS = 5
|
|
223
|
+
end
|
|
224
|
+
|
|
225
|
+
# Allow or deny type.
|
|
226
|
+
module ActionType
|
|
227
|
+
# This is only used for distinguishing unset values and should never be
|
|
228
|
+
# used. Results in an error.
|
|
229
|
+
ACTION_TYPE_UNSPECIFIED = 0
|
|
230
|
+
|
|
231
|
+
# Allowed action type.
|
|
232
|
+
ALLOW = 1
|
|
233
|
+
|
|
234
|
+
# Deny action type.
|
|
235
|
+
DENY = 2
|
|
236
|
+
end
|
|
237
|
+
end
|
|
238
|
+
|
|
239
|
+
# A constraint type is enforced or not enforced, which is configured in the
|
|
240
|
+
# {::Google::Cloud::OrgPolicy::V2::PolicySpec::PolicyRule `PolicyRule`}.
|
|
98
241
|
#
|
|
99
|
-
#
|
|
100
|
-
#
|
|
101
|
-
#
|
|
242
|
+
# If `customConstraintDefinition` is defined, this constraint is a managed
|
|
243
|
+
# constraint.
|
|
244
|
+
# @!attribute [rw] custom_constraint_definition
|
|
245
|
+
# @return [::Google::Cloud::OrgPolicy::V2::Constraint::CustomConstraintDefinition]
|
|
246
|
+
# Custom constraint definition. Defines this as a managed constraint.
|
|
102
247
|
class BooleanConstraint
|
|
103
248
|
include ::Google::Protobuf::MessageExts
|
|
104
249
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
@@ -110,7 +255,7 @@ module Google
|
|
|
110
255
|
# Immutable after creation.
|
|
111
256
|
module ConstraintDefault
|
|
112
257
|
# This is only used for distinguishing unset values and should never be
|
|
113
|
-
# used.
|
|
258
|
+
# used. Results in an error.
|
|
114
259
|
CONSTRAINT_DEFAULT_UNSPECIFIED = 0
|
|
115
260
|
|
|
116
261
|
# Indicate that all values are allowed for list constraints.
|
|
@@ -143,7 +288,7 @@ module Google
|
|
|
143
288
|
# @!attribute [rw] resource_types
|
|
144
289
|
# @return [::Array<::String>]
|
|
145
290
|
# Immutable. The resource instance type on which this policy applies. Format
|
|
146
|
-
# will be of the form : `<
|
|
291
|
+
# will be of the form : `<service name>/<type>` Example:
|
|
147
292
|
#
|
|
148
293
|
# * `compute.googleapis.com/Instance`.
|
|
149
294
|
# @!attribute [rw] method_types
|
|
@@ -151,7 +296,8 @@ module Google
|
|
|
151
296
|
# All the operations being applied for this constraint.
|
|
152
297
|
# @!attribute [rw] condition
|
|
153
298
|
# @return [::String]
|
|
154
|
-
#
|
|
299
|
+
# A Common Expression Language (CEL) condition which is used in the
|
|
300
|
+
# evaluation of the constraint. For example:
|
|
155
301
|
# `resource.instanceName.matches("[production|test]_.*_(\d)+")` or,
|
|
156
302
|
# `resource.management.auto_upgrade == true`
|
|
157
303
|
#
|
|
@@ -171,20 +317,21 @@ module Google
|
|
|
171
317
|
# @return [::Google::Protobuf::Timestamp]
|
|
172
318
|
# Output only. The last time this custom constraint was updated. This
|
|
173
319
|
# represents the last time that the `CreateCustomConstraint` or
|
|
174
|
-
# `UpdateCustomConstraint`
|
|
320
|
+
# `UpdateCustomConstraint` methods were called.
|
|
175
321
|
class CustomConstraint
|
|
176
322
|
include ::Google::Protobuf::MessageExts
|
|
177
323
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
178
324
|
|
|
179
325
|
# The operation for which this constraint will be applied. To apply this
|
|
180
|
-
# constraint only when creating new
|
|
326
|
+
# constraint only when creating new resources, the `method_types` should be
|
|
181
327
|
# `CREATE` only. To apply this constraint when creating or deleting
|
|
182
|
-
#
|
|
328
|
+
# resources, the `method_types` should be `CREATE` and `DELETE`.
|
|
183
329
|
#
|
|
184
330
|
# `UPDATE` only custom constraints are not supported. Use `CREATE` or
|
|
185
331
|
# `CREATE, UPDATE`.
|
|
186
332
|
module MethodType
|
|
187
|
-
#
|
|
333
|
+
# This is only used for distinguishing unset values and should never be
|
|
334
|
+
# used. Results in an error.
|
|
188
335
|
METHOD_TYPE_UNSPECIFIED = 0
|
|
189
336
|
|
|
190
337
|
# Constraint applied when creating the resource.
|
|
@@ -194,7 +341,7 @@ module Google
|
|
|
194
341
|
UPDATE = 2
|
|
195
342
|
|
|
196
343
|
# Constraint applied when deleting the resource.
|
|
197
|
-
# Not supported
|
|
344
|
+
# Not currently supported.
|
|
198
345
|
DELETE = 3
|
|
199
346
|
|
|
200
347
|
# Constraint applied when removing an IAM grant.
|
|
@@ -206,7 +353,8 @@ module Google
|
|
|
206
353
|
|
|
207
354
|
# Allow or deny type.
|
|
208
355
|
module ActionType
|
|
209
|
-
#
|
|
356
|
+
# This is only used for distinguishing unset values and should never be
|
|
357
|
+
# used. Results in an error.
|
|
210
358
|
ACTION_TYPE_UNSPECIFIED = 0
|
|
211
359
|
|
|
212
360
|
# Allowed action type.
|
|
@@ -40,7 +40,7 @@ module Google
|
|
|
40
40
|
# the equivalent project number.
|
|
41
41
|
# @!attribute [rw] spec
|
|
42
42
|
# @return [::Google::Cloud::OrgPolicy::V2::PolicySpec]
|
|
43
|
-
# Basic information about the
|
|
43
|
+
# Basic information about the organization policy.
|
|
44
44
|
# @!attribute [rw] alternate
|
|
45
45
|
# @deprecated This field is deprecated and may be removed in the next major version update.
|
|
46
46
|
# @return [::Google::Cloud::OrgPolicy::V2::AlternatePolicySpec]
|
|
@@ -62,7 +62,7 @@ module Google
|
|
|
62
62
|
end
|
|
63
63
|
|
|
64
64
|
# Similar to PolicySpec but with an extra 'launch' field for launch reference.
|
|
65
|
-
# The PolicySpec here is specific for dry-run
|
|
65
|
+
# The PolicySpec here is specific for dry-run.
|
|
66
66
|
# @!attribute [rw] launch
|
|
67
67
|
# @return [::String]
|
|
68
68
|
# Reference to the launch that will be used while audit logging and to
|
|
@@ -166,6 +166,16 @@ module Google
|
|
|
166
166
|
# "resource.matchTag('123456789/environment,
|
|
167
167
|
# 'prod')". or "resource.matchTagId('tagKeys/123',
|
|
168
168
|
# 'tagValues/456')".
|
|
169
|
+
# @!attribute [rw] parameters
|
|
170
|
+
# @return [::Google::Protobuf::Struct]
|
|
171
|
+
# Optional. Required for managed constraints if parameters are defined.
|
|
172
|
+
# Passes parameter values when policy enforcement is enabled. Ensure that
|
|
173
|
+
# parameter value types match those defined in the constraint definition.
|
|
174
|
+
# For example:
|
|
175
|
+
# {
|
|
176
|
+
# "allowedLocations" : ["us-east1", "us-west1"],
|
|
177
|
+
# "allowAll" : true
|
|
178
|
+
# }
|
|
169
179
|
class PolicyRule
|
|
170
180
|
include ::Google::Protobuf::MessageExts
|
|
171
181
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
@@ -371,8 +381,8 @@ module Google
|
|
|
371
381
|
# [google.cloud.orgpolicy.v2.OrgPolicy.GetCustomConstraint] method.
|
|
372
382
|
# @!attribute [rw] name
|
|
373
383
|
# @return [::String]
|
|
374
|
-
# Required. Resource name of the custom constraint. See the custom
|
|
375
|
-
# entry for naming requirements.
|
|
384
|
+
# Required. Resource name of the custom or managed constraint. See the custom
|
|
385
|
+
# constraint entry for naming requirements.
|
|
376
386
|
class GetCustomConstraintRequest
|
|
377
387
|
include ::Google::Protobuf::MessageExts
|
|
378
388
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
@@ -403,11 +413,12 @@ module Google
|
|
|
403
413
|
|
|
404
414
|
# The response returned from the [ListCustomConstraints]
|
|
405
415
|
# [google.cloud.orgpolicy.v2.OrgPolicy.ListCustomConstraints] method. It will
|
|
406
|
-
# be empty if no custom constraints are set on the organization
|
|
416
|
+
# be empty if no custom or managed constraints are set on the organization
|
|
417
|
+
# resource.
|
|
407
418
|
# @!attribute [rw] custom_constraints
|
|
408
419
|
# @return [::Array<::Google::Cloud::OrgPolicy::V2::CustomConstraint>]
|
|
409
|
-
# All custom constraints that exist on the organization resource.
|
|
410
|
-
# empty if no custom constraints are set.
|
|
420
|
+
# All custom and managed constraints that exist on the organization resource.
|
|
421
|
+
# It will be empty if no custom constraints are set.
|
|
411
422
|
# @!attribute [rw] next_page_token
|
|
412
423
|
# @return [::String]
|
|
413
424
|
# Page token used to retrieve the next page. This is currently not used, but
|
|
@@ -0,0 +1,108 @@
|
|
|
1
|
+
# frozen_string_literal: true
|
|
2
|
+
|
|
3
|
+
# Copyright 2025 Google LLC
|
|
4
|
+
#
|
|
5
|
+
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
6
|
+
# you may not use this file except in compliance with the License.
|
|
7
|
+
# You may obtain a copy of the License at
|
|
8
|
+
#
|
|
9
|
+
# https://www.apache.org/licenses/LICENSE-2.0
|
|
10
|
+
#
|
|
11
|
+
# Unless required by applicable law or agreed to in writing, software
|
|
12
|
+
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
13
|
+
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
14
|
+
# See the License for the specific language governing permissions and
|
|
15
|
+
# limitations under the License.
|
|
16
|
+
|
|
17
|
+
# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
|
|
18
|
+
|
|
19
|
+
|
|
20
|
+
module Google
|
|
21
|
+
module Protobuf
|
|
22
|
+
# `Struct` represents a structured data value, consisting of fields
|
|
23
|
+
# which map to dynamically typed values. In some languages, `Struct`
|
|
24
|
+
# might be supported by a native representation. For example, in
|
|
25
|
+
# scripting languages like JS a struct is represented as an
|
|
26
|
+
# object. The details of that representation are described together
|
|
27
|
+
# with the proto support for the language.
|
|
28
|
+
#
|
|
29
|
+
# The JSON representation for `Struct` is JSON object.
|
|
30
|
+
# @!attribute [rw] fields
|
|
31
|
+
# @return [::Google::Protobuf::Map{::String => ::Google::Protobuf::Value}]
|
|
32
|
+
# Unordered map of dynamically typed values.
|
|
33
|
+
class Struct
|
|
34
|
+
include ::Google::Protobuf::MessageExts
|
|
35
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
36
|
+
|
|
37
|
+
# @!attribute [rw] key
|
|
38
|
+
# @return [::String]
|
|
39
|
+
# @!attribute [rw] value
|
|
40
|
+
# @return [::Google::Protobuf::Value]
|
|
41
|
+
class FieldsEntry
|
|
42
|
+
include ::Google::Protobuf::MessageExts
|
|
43
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
44
|
+
end
|
|
45
|
+
end
|
|
46
|
+
|
|
47
|
+
# `Value` represents a dynamically typed value which can be either
|
|
48
|
+
# null, a number, a string, a boolean, a recursive struct value, or a
|
|
49
|
+
# list of values. A producer of value is expected to set one of these
|
|
50
|
+
# variants. Absence of any variant indicates an error.
|
|
51
|
+
#
|
|
52
|
+
# The JSON representation for `Value` is JSON value.
|
|
53
|
+
# @!attribute [rw] null_value
|
|
54
|
+
# @return [::Google::Protobuf::NullValue]
|
|
55
|
+
# Represents a null value.
|
|
56
|
+
#
|
|
57
|
+
# Note: The following fields are mutually exclusive: `null_value`, `number_value`, `string_value`, `bool_value`, `struct_value`, `list_value`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
58
|
+
# @!attribute [rw] number_value
|
|
59
|
+
# @return [::Float]
|
|
60
|
+
# Represents a double value.
|
|
61
|
+
#
|
|
62
|
+
# Note: The following fields are mutually exclusive: `number_value`, `null_value`, `string_value`, `bool_value`, `struct_value`, `list_value`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
63
|
+
# @!attribute [rw] string_value
|
|
64
|
+
# @return [::String]
|
|
65
|
+
# Represents a string value.
|
|
66
|
+
#
|
|
67
|
+
# Note: The following fields are mutually exclusive: `string_value`, `null_value`, `number_value`, `bool_value`, `struct_value`, `list_value`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
68
|
+
# @!attribute [rw] bool_value
|
|
69
|
+
# @return [::Boolean]
|
|
70
|
+
# Represents a boolean value.
|
|
71
|
+
#
|
|
72
|
+
# Note: The following fields are mutually exclusive: `bool_value`, `null_value`, `number_value`, `string_value`, `struct_value`, `list_value`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
73
|
+
# @!attribute [rw] struct_value
|
|
74
|
+
# @return [::Google::Protobuf::Struct]
|
|
75
|
+
# Represents a structured value.
|
|
76
|
+
#
|
|
77
|
+
# Note: The following fields are mutually exclusive: `struct_value`, `null_value`, `number_value`, `string_value`, `bool_value`, `list_value`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
78
|
+
# @!attribute [rw] list_value
|
|
79
|
+
# @return [::Google::Protobuf::ListValue]
|
|
80
|
+
# Represents a repeated `Value`.
|
|
81
|
+
#
|
|
82
|
+
# Note: The following fields are mutually exclusive: `list_value`, `null_value`, `number_value`, `string_value`, `bool_value`, `struct_value`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
83
|
+
class Value
|
|
84
|
+
include ::Google::Protobuf::MessageExts
|
|
85
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
86
|
+
end
|
|
87
|
+
|
|
88
|
+
# `ListValue` is a wrapper around a repeated field of values.
|
|
89
|
+
#
|
|
90
|
+
# The JSON representation for `ListValue` is JSON array.
|
|
91
|
+
# @!attribute [rw] values
|
|
92
|
+
# @return [::Array<::Google::Protobuf::Value>]
|
|
93
|
+
# Repeated field of dynamically typed values.
|
|
94
|
+
class ListValue
|
|
95
|
+
include ::Google::Protobuf::MessageExts
|
|
96
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
97
|
+
end
|
|
98
|
+
|
|
99
|
+
# `NullValue` is a singleton enumeration to represent the null value for the
|
|
100
|
+
# `Value` type union.
|
|
101
|
+
#
|
|
102
|
+
# The JSON representation for `NullValue` is JSON `null`.
|
|
103
|
+
module NullValue
|
|
104
|
+
# Null value.
|
|
105
|
+
NULL_VALUE = 0
|
|
106
|
+
end
|
|
107
|
+
end
|
|
108
|
+
end
|
metadata
CHANGED
|
@@ -1,13 +1,13 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: google-cloud-org_policy-v2
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 1.
|
|
4
|
+
version: 1.4.1
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Google LLC
|
|
8
8
|
bindir: bin
|
|
9
9
|
cert_chain: []
|
|
10
|
-
date:
|
|
10
|
+
date: 1980-01-02 00:00:00.000000000 Z
|
|
11
11
|
dependencies:
|
|
12
12
|
- !ruby/object:Gem::Dependency
|
|
13
13
|
name: gapic-common
|
|
@@ -81,6 +81,7 @@ files:
|
|
|
81
81
|
- proto_docs/google/protobuf/duration.rb
|
|
82
82
|
- proto_docs/google/protobuf/empty.rb
|
|
83
83
|
- proto_docs/google/protobuf/field_mask.rb
|
|
84
|
+
- proto_docs/google/protobuf/struct.rb
|
|
84
85
|
- proto_docs/google/protobuf/timestamp.rb
|
|
85
86
|
- proto_docs/google/type/expr.rb
|
|
86
87
|
homepage: https://github.com/googleapis/google-cloud-ruby
|
|
@@ -101,7 +102,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
|
101
102
|
- !ruby/object:Gem::Version
|
|
102
103
|
version: '0'
|
|
103
104
|
requirements: []
|
|
104
|
-
rubygems_version: 3.6.
|
|
105
|
+
rubygems_version: 3.6.8
|
|
105
106
|
specification_version: 4
|
|
106
107
|
summary: The Organization Policy API allows users to configure governance rules on
|
|
107
108
|
their Google Cloud resources across the resource hierarchy.
|