google-cloud-os_config-v1alpha 0.2.1 → 0.4.0

data/lib/google/cloud/osconfig/v1alpha/os_policy_assignments_pb.rb

@@ -1,6 +1,9 @@
 # Generated by the protocol buffer compiler.  DO NOT EDIT!
 # source: google/cloud/osconfig/v1alpha/os_policy_assignments.proto
 
+require 'google/protobuf'
+
+require 'google/api/annotations_pb'
 require 'google/api/field_behavior_pb'
 require 'google/api/resource_pb'
 require 'google/cloud/osconfig/v1alpha/os_policy_pb'
@@ -8,7 +11,6 @@ require 'google/cloud/osconfig/v1alpha/osconfig_common_pb'
 require 'google/protobuf/duration_pb'
 require 'google/protobuf/field_mask_pb'
 require 'google/protobuf/timestamp_pb'
-require 'google/protobuf'
 
 Google::Protobuf::DescriptorPool.generated_pool.build do
   add_file("google/cloud/osconfig/v1alpha/os_policy_assignments.proto", :syntax => :proto3) do
@@ -20,6 +22,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :rollout, :message, 5, "google.cloud.osconfig.v1alpha.OSPolicyAssignment.Rollout"
       optional :revision_id, :string, 6
       optional :revision_create_time, :message, 7, "google.protobuf.Timestamp"
+      optional :etag, :string, 8
       optional :rollout_state, :enum, 9, "google.cloud.osconfig.v1alpha.OSPolicyAssignment.RolloutState"
       optional :baseline, :bool, 10
       optional :deleted, :bool, 11
@@ -34,6 +37,11 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       repeated :os_short_names, :string, 2
       repeated :inclusion_labels, :message, 3, "google.cloud.osconfig.v1alpha.OSPolicyAssignment.LabelSet"
       repeated :exclusion_labels, :message, 4, "google.cloud.osconfig.v1alpha.OSPolicyAssignment.LabelSet"
+      repeated :inventories, :message, 5, "google.cloud.osconfig.v1alpha.OSPolicyAssignment.InstanceFilter.Inventory"
+    end
+    add_message "google.cloud.osconfig.v1alpha.OSPolicyAssignment.InstanceFilter.Inventory" do
+      optional :os_short_name, :string, 1
+      optional :os_version, :string, 2
     end
     add_message "google.cloud.osconfig.v1alpha.OSPolicyAssignment.Rollout" do
       optional :disruption_budget, :message, 1, "google.cloud.osconfig.v1alpha.FixedOrPercent"
@@ -109,6 +117,7 @@ module Google
         OSPolicyAssignment = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.OSPolicyAssignment").msgclass
         OSPolicyAssignment::LabelSet = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.OSPolicyAssignment.LabelSet").msgclass
         OSPolicyAssignment::InstanceFilter = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.OSPolicyAssignment.InstanceFilter").msgclass
+        OSPolicyAssignment::InstanceFilter::Inventory = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.OSPolicyAssignment.InstanceFilter.Inventory").msgclass
         OSPolicyAssignment::Rollout = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.OSPolicyAssignment.Rollout").msgclass
         OSPolicyAssignment::RolloutState = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.OSPolicyAssignment.RolloutState").enummodule
         OSPolicyAssignmentOperationMetadata = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.OSPolicyAssignmentOperationMetadata").msgclass

data/lib/google/cloud/osconfig/v1alpha/os_policy_pb.rb

@@ -1,9 +1,11 @@
 # Generated by the protocol buffer compiler.  DO NOT EDIT!
 # source: google/cloud/osconfig/v1alpha/os_policy.proto
 
-require 'google/api/field_behavior_pb'
 require 'google/protobuf'
 
+require 'google/api/annotations_pb'
+require 'google/api/field_behavior_pb'
+
 Google::Protobuf::DescriptorPool.generated_pool.build do
   add_file("google/cloud/osconfig/v1alpha/os_policy.proto", :syntax => :proto3) do
     add_message "google.cloud.osconfig.v1alpha.OSPolicy" do
@@ -17,6 +19,10 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :os_short_name, :string, 1
       optional :os_version, :string, 2
     end
+    add_message "google.cloud.osconfig.v1alpha.OSPolicy.InventoryFilter" do
+      optional :os_short_name, :string, 1
+      optional :os_version, :string, 2
+    end
     add_message "google.cloud.osconfig.v1alpha.OSPolicy.Resource" do
       optional :id, :string, 1
       oneof :resource_type do
@@ -156,6 +162,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
     end
     add_message "google.cloud.osconfig.v1alpha.OSPolicy.ResourceGroup" do
       optional :os_filter, :message, 1, "google.cloud.osconfig.v1alpha.OSPolicy.OSFilter"
+      repeated :inventory_filters, :message, 3, "google.cloud.osconfig.v1alpha.OSPolicy.InventoryFilter"
       repeated :resources, :message, 2, "google.cloud.osconfig.v1alpha.OSPolicy.Resource"
     end
     add_enum "google.cloud.osconfig.v1alpha.OSPolicy.Mode" do
@@ -172,6 +179,7 @@ module Google
       module V1alpha
         OSPolicy = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.OSPolicy").msgclass
         OSPolicy::OSFilter = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.OSPolicy.OSFilter").msgclass
+        OSPolicy::InventoryFilter = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.OSPolicy.InventoryFilter").msgclass
         OSPolicy::Resource = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.OSPolicy.Resource").msgclass
         OSPolicy::Resource::File = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.OSPolicy.Resource.File").msgclass
         OSPolicy::Resource::File::Remote = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.OSPolicy.Resource.File.Remote").msgclass

data/lib/google/cloud/osconfig/v1alpha/osconfig_common_pb.rb

@@ -3,6 +3,8 @@
 
 require 'google/protobuf'
 
+require 'google/api/annotations_pb'
+
 Google::Protobuf::DescriptorPool.generated_pool.build do
   add_file("google/cloud/osconfig/v1alpha/osconfig_common.proto", :syntax => :proto3) do
     add_message "google.cloud.osconfig.v1alpha.FixedOrPercent" do

data/lib/google/cloud/osconfig/v1alpha/osconfig_zonal_service_pb.rb

@@ -1,15 +1,17 @@
 # Generated by the protocol buffer compiler.  DO NOT EDIT!
 # source: google/cloud/osconfig/v1alpha/osconfig_zonal_service.proto
 
+require 'google/protobuf'
+
 require 'google/api/annotations_pb'
 require 'google/api/client_pb'
 require 'google/api/resource_pb'
 require 'google/cloud/osconfig/v1alpha/instance_os_policies_compliance_pb'
 require 'google/cloud/osconfig/v1alpha/inventory_pb'
+require 'google/cloud/osconfig/v1alpha/os_policy_assignment_reports_pb'
 require 'google/cloud/osconfig/v1alpha/os_policy_assignments_pb'
 require 'google/cloud/osconfig/v1alpha/vulnerability_pb'
 require 'google/longrunning/operations_pb'
-require 'google/protobuf'
 
 Google::Protobuf::DescriptorPool.generated_pool.build do
   add_file("google/cloud/osconfig/v1alpha/osconfig_zonal_service.proto", :syntax => :proto3) do

data/lib/google/cloud/osconfig/v1alpha/osconfig_zonal_service_services_pb.rb

@@ -87,6 +87,12 @@ module Google
             # List OS policies compliance data for all Compute Engine VM instances in the
             # specified zone.
             rpc :ListInstanceOSPoliciesCompliances, ::Google::Cloud::OsConfig::V1alpha::ListInstanceOSPoliciesCompliancesRequest, ::Google::Cloud::OsConfig::V1alpha::ListInstanceOSPoliciesCompliancesResponse
+            # Get the OS policy asssignment report for the specified Compute Engine VM
+            # instance.
+            rpc :GetOSPolicyAssignmentReport, ::Google::Cloud::OsConfig::V1alpha::GetOSPolicyAssignmentReportRequest, ::Google::Cloud::OsConfig::V1alpha::OSPolicyAssignmentReport
+            # List OS policy asssignment reports for all Compute Engine VM instances in
+            # the specified zone.
+            rpc :ListOSPolicyAssignmentReports, ::Google::Cloud::OsConfig::V1alpha::ListOSPolicyAssignmentReportsRequest, ::Google::Cloud::OsConfig::V1alpha::ListOSPolicyAssignmentReportsResponse
             # Get inventory data for the specified VM instance. If the VM has no
             # associated inventory, the message `NOT_FOUND` is returned.
             rpc :GetInventory, ::Google::Cloud::OsConfig::V1alpha::GetInventoryRequest, ::Google::Cloud::OsConfig::V1alpha::Inventory

data/lib/google/cloud/osconfig/v1alpha/vulnerability_pb.rb

@@ -1,10 +1,12 @@
 # Generated by the protocol buffer compiler.  DO NOT EDIT!
 # source: google/cloud/osconfig/v1alpha/vulnerability.proto
 
+require 'google/protobuf'
+
+require 'google/api/annotations_pb'
 require 'google/api/field_behavior_pb'
 require 'google/api/resource_pb'
 require 'google/protobuf/timestamp_pb'
-require 'google/protobuf'
 
 Google::Protobuf::DescriptorPool.generated_pool.build do
   add_file("google/cloud/osconfig/v1alpha/vulnerability.proto", :syntax => :proto3) do
@@ -19,6 +21,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       repeated :available_inventory_item_ids, :string, 3
       optional :create_time, :message, 4, "google.protobuf.Timestamp"
       optional :update_time, :message, 5, "google.protobuf.Timestamp"
+      repeated :items, :message, 6, "google.cloud.osconfig.v1alpha.VulnerabilityReport.Vulnerability.Item"
     end
     add_message "google.cloud.osconfig.v1alpha.VulnerabilityReport.Vulnerability.Details" do
       optional :cve, :string, 1
@@ -30,6 +33,13 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
     end
     add_message "google.cloud.osconfig.v1alpha.VulnerabilityReport.Vulnerability.Details.Reference" do
       optional :url, :string, 1
+      optional :source, :string, 2
+    end
+    add_message "google.cloud.osconfig.v1alpha.VulnerabilityReport.Vulnerability.Item" do
+      optional :installed_inventory_item_id, :string, 1
+      optional :available_inventory_item_id, :string, 2
+      optional :fixed_cpe_uri, :string, 3
+      optional :upstream_fix, :string, 4
     end
     add_message "google.cloud.osconfig.v1alpha.GetVulnerabilityReportRequest" do
       optional :name, :string, 1
@@ -102,6 +112,7 @@ module Google
         VulnerabilityReport::Vulnerability = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.VulnerabilityReport.Vulnerability").msgclass
         VulnerabilityReport::Vulnerability::Details = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.VulnerabilityReport.Vulnerability.Details").msgclass
         VulnerabilityReport::Vulnerability::Details::Reference = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.VulnerabilityReport.Vulnerability.Details.Reference").msgclass
+        VulnerabilityReport::Vulnerability::Item = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.VulnerabilityReport.Vulnerability.Item").msgclass
         GetVulnerabilityReportRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.GetVulnerabilityReportRequest").msgclass
         ListVulnerabilityReportsRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.ListVulnerabilityReportsRequest").msgclass
         ListVulnerabilityReportsResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.ListVulnerabilityReportsResponse").msgclass

data/proto_docs/google/api/resource.rb

@@ -33,11 +33,7 @@ module Google
     #       // For Kubernetes resources, the format is {api group}/{kind}.
     #       option (google.api.resource) = {
     #         type: "pubsub.googleapis.com/Topic"
-    #         name_descriptor: {
-    #           pattern: "projects/{project}/topics/{topic}"
-    #           parent_type: "cloudresourcemanager.googleapis.com/Project"
-    #           parent_name_extractor: "projects/{project}"
-    #         }
+    #         pattern: "projects/{project}/topics/{topic}"
     #       };
     #     }
     #
@@ -45,10 +41,7 @@ module Google
     #
     #     resources:
     #     - type: "pubsub.googleapis.com/Topic"
-    #       name_descriptor:
-    #         - pattern: "projects/{project}/topics/{topic}"
-    #           parent_type: "cloudresourcemanager.googleapis.com/Project"
-    #           parent_name_extractor: "projects/{project}"
+    #       pattern: "projects/{project}/topics/{topic}"
     #
     # Sometimes, resources have multiple patterns, typically because they can
     # live under multiple parents.
@@ -58,26 +51,10 @@ module Google
     #     message LogEntry {
     #       option (google.api.resource) = {
     #         type: "logging.googleapis.com/LogEntry"
-    #         name_descriptor: {
-    #           pattern: "projects/{project}/logs/{log}"
-    #           parent_type: "cloudresourcemanager.googleapis.com/Project"
-    #           parent_name_extractor: "projects/{project}"
-    #         }
-    #         name_descriptor: {
-    #           pattern: "folders/{folder}/logs/{log}"
-    #           parent_type: "cloudresourcemanager.googleapis.com/Folder"
-    #           parent_name_extractor: "folders/{folder}"
-    #         }
-    #         name_descriptor: {
-    #           pattern: "organizations/{organization}/logs/{log}"
-    #           parent_type: "cloudresourcemanager.googleapis.com/Organization"
-    #           parent_name_extractor: "organizations/{organization}"
-    #         }
-    #         name_descriptor: {
-    #           pattern: "billingAccounts/{billing_account}/logs/{log}"
-    #           parent_type: "billing.googleapis.com/BillingAccount"
-    #           parent_name_extractor: "billingAccounts/{billing_account}"
-    #         }
+    #         pattern: "projects/{project}/logs/{log}"
+    #         pattern: "folders/{folder}/logs/{log}"
+    #         pattern: "organizations/{organization}/logs/{log}"
+    #         pattern: "billingAccounts/{billing_account}/logs/{log}"
     #       };
     #     }
     #
@@ -85,48 +62,10 @@ module Google
     #
     #     resources:
     #     - type: 'logging.googleapis.com/LogEntry'
-    #       name_descriptor:
-    #         - pattern: "projects/{project}/logs/{log}"
-    #           parent_type: "cloudresourcemanager.googleapis.com/Project"
-    #           parent_name_extractor: "projects/{project}"
-    #         - pattern: "folders/{folder}/logs/{log}"
-    #           parent_type: "cloudresourcemanager.googleapis.com/Folder"
-    #           parent_name_extractor: "folders/{folder}"
-    #         - pattern: "organizations/{organization}/logs/{log}"
-    #           parent_type: "cloudresourcemanager.googleapis.com/Organization"
-    #           parent_name_extractor: "organizations/{organization}"
-    #         - pattern: "billingAccounts/{billing_account}/logs/{log}"
-    #           parent_type: "billing.googleapis.com/BillingAccount"
-    #           parent_name_extractor: "billingAccounts/{billing_account}"
-    #
-    # For flexible resources, the resource name doesn't contain parent names, but
-    # the resource itself has parents for policy evaluation.
-    #
-    # Example:
-    #
-    #     message Shelf {
-    #       option (google.api.resource) = {
-    #         type: "library.googleapis.com/Shelf"
-    #         name_descriptor: {
-    #           pattern: "shelves/{shelf}"
-    #           parent_type: "cloudresourcemanager.googleapis.com/Project"
-    #         }
-    #         name_descriptor: {
-    #           pattern: "shelves/{shelf}"
-    #           parent_type: "cloudresourcemanager.googleapis.com/Folder"
-    #         }
-    #       };
-    #     }
-    #
-    # The ResourceDescriptor Yaml config will look like:
-    #
-    #     resources:
-    #     - type: 'library.googleapis.com/Shelf'
-    #       name_descriptor:
-    #         - pattern: "shelves/{shelf}"
-    #           parent_type: "cloudresourcemanager.googleapis.com/Project"
-    #         - pattern: "shelves/{shelf}"
-    #           parent_type: "cloudresourcemanager.googleapis.com/Folder"
+    #       pattern: "projects/{project}/logs/{log}"
+    #       pattern: "folders/{folder}/logs/{log}"
+    #       pattern: "organizations/{organization}/logs/{log}"
+    #       pattern: "billingAccounts/{billing_account}/logs/{log}"
     # @!attribute [rw] type
     #   @return [::String]
     #     The resource type. It must be in the format of

data/proto_docs/google/cloud/osconfig/v1alpha/inventory.rb

@@ -39,10 +39,10 @@ module Google
         #     Output only. Base level operating system information for the VM.
         # @!attribute [r] items
         #   @return [::Google::Protobuf::Map{::String => ::Google::Cloud::OsConfig::V1alpha::Inventory::Item}]
-        #     Output only. Inventory items related to the VM keyed by an opaque unique
-        #     identifier for each inventory item. The identifier is unique to each
-        #     distinct and addressable inventory item and will change, when there is a
-        #     new package version.
+        #     Output only. Inventory items related to the VM keyed by an opaque unique identifier for
+        #     each inventory item. The identifier is unique to each distinct and
+        #     addressable inventory item and will change, when there is a new package
+        #     version.
         # @!attribute [r] update_time
         #   @return [::Google::Protobuf::Timestamp]
         #     Output only. Timestamp of the last reported inventory for the VM.
@@ -287,12 +287,9 @@ module Google
             extend ::Google::Protobuf::MessageExts::ClassMethods
           end
 
-          # Contains information about a Windows application as retrieved from the
-          # Windows Registry. For more information about these fields, see
-          #
-          # [Windows Installer Properties for the Uninstall
-          # Registry](https://docs.microsoft.com/en-us/windows/win32/msi/uninstall-registry-key){:
-          # class="external" }
+          # Contains information about a Windows application that is retrieved from the
+          # Windows Registry. For more information about these fields, see:
+          # https://docs.microsoft.com/en-us/windows/win32/msi/uninstall-registry-key
           # @!attribute [rw] display_name
           #   @return [::String]
           #     The name of the application or product.
@@ -351,11 +348,9 @@ module Google
         #   @return [::String]
         #     Required. The parent resource name.
         #
-        #     Format: `projects/{project}/locations/{location}/instances/{instance}`
+        #     Format: `projects/{project}/locations/{location}/instances/-`
         #
-        #     For `{project}`, either `project-number` or `project-id` can be
-        #     provided. For `{instance}`, only hyphen or dash character is supported to
-        #     list inventories across VMs.
+        #     For `{project}`, either `project-number` or `project-id` can be provided.
         # @!attribute [rw] view
         #   @return [::Google::Cloud::OsConfig::V1alpha::InventoryView]
         #     Inventory view indicating what information should be included in the

data/proto_docs/google/cloud/osconfig/v1alpha/os_policy.rb

@@ -58,8 +58,7 @@ module Google
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
 
-          # The `OSFilter` is used to specify the OS filtering criteria for the
-          # resource group.
+          # Filtering criteria to select VMs based on OS details.
           # @!attribute [rw] os_short_name
           #   @return [::String]
           #     This should match OS short name emitted by the OS inventory agent.
@@ -76,6 +75,24 @@ module Google
             extend ::Google::Protobuf::MessageExts::ClassMethods
           end
 
+          # Filtering criteria to select VMs based on inventory details.
+          # @!attribute [rw] os_short_name
+          #   @return [::String]
+          #     Required. The OS short name
+          # @!attribute [rw] os_version
+          #   @return [::String]
+          #     The OS version
+          #
+          #     Prefix matches are supported if asterisk(*) is provided as the
+          #     last character. For example, to match all versions with a major
+          #     version of `7`, specify the following value for this field `7.*`
+          #
+          #     An empty string matches all OS versions.
+          class InventoryFilter
+            include ::Google::Protobuf::MessageExts
+            extend ::Google::Protobuf::MessageExts::ClassMethods
+          end
+
           # An OS policy resource is used to define the desired state configuration
           # and provides a specific functionality like installing/removing packages,
           # executing a script etc.
@@ -473,21 +490,21 @@ module Google
 
                 # The interpreter to use.
                 module Interpreter
-                  # Defaults to NONE.
+                  # Invalid value, the request will return validation error.
                   INTERPRETER_UNSPECIFIED = 0
 
-                  # If no interpreter is specified the
-                  # source will be executed directly, which will likely only
-                  # succeed for executables and scripts with shebang lines.
-                  # [Wikipedia
-                  # shebang](https://en.wikipedia.org/wiki/Shebang_(Unix)).
+                  # If an interpreter is not specified, the
+                  # source is executed directly. This execution, without an
+                  # interpreter, only succeeds for executables and scripts that have <a
+                  # href="https://en.wikipedia.org/wiki/Shebang_(Unix)"
+                  # class="external">shebang lines</a>.
                   NONE = 1
 
-                  # Indicates that the script will be run with /bin/sh on Linux and
-                  # cmd.exe on windows.
+                  # Indicates that the script runs with `/bin/sh` on Linux and
+                  # `cmd.exe` on Windows.
                   SHELL = 2
 
-                  # Indicates that the script will be run with powershell.
+                  # Indicates that the script runs with PowerShell.
                   POWERSHELL = 3
                 end
               end
@@ -554,7 +571,23 @@ module Google
           # within the resource group.
           # @!attribute [rw] os_filter
           #   @return [::Google::Cloud::OsConfig::V1alpha::OSPolicy::OSFilter]
+          #     Deprecated. Use the `inventory_filters` field instead.
           #     Used to specify the OS filter for a resource group
+          # @!attribute [rw] inventory_filters
+          #   @return [::Array<::Google::Cloud::OsConfig::V1alpha::OSPolicy::InventoryFilter>]
+          #     List of inventory filters for the resource group.
+          #
+          #     The resources in this resource group are applied to the target VM if it
+          #     satisfies at least one of the following inventory filters.
+          #
+          #     For example, to apply this resource group to VMs running either `RHEL` or
+          #     `CentOS` operating systems, specify 2 items for the list with following
+          #     values:
+          #     inventory_filters[0].os_short_name='rhel' and
+          #     inventory_filters[1].os_short_name='centos'
+          #
+          #     If the list is empty, this resource group will be applied to the target
+          #     VM unconditionally.
           # @!attribute [rw] resources
           #   @return [::Array<::Google::Cloud::OsConfig::V1alpha::OSPolicy::Resource>]
           #     Required. List of resources configured for this resource group.