google-cloud-os_config-v1alpha 0.2.2 → 0.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: eb340e210e2695dd010f8ea30efde6ffb2cdee23cb5170b38fbc24fbe2c9f56c
-  data.tar.gz: ff49afbd9702dc99ef4736ed77d6cb014bfb2a52b7d7091ab776992b8924f8e9
+  metadata.gz: 1dab932136f9c5df0eb2edd784b359c2464bf23f363c123b708db0bc17fe3def
+  data.tar.gz: 5e45c9b0af797fa25fbde8e73d45e42aae34d374573e9b340b3ad48d5cb3bc0b
 SHA512:
-  metadata.gz: '0868c5c465497197b66272bd616de1dcb69fb13e09ff9049773f66d59c999cdc7e84c0ac81752b825193b0cc7cf699f5f822670c1b21ead92969166705bca7f0'
-  data.tar.gz: 57121a004ea9a73667c7893916ff0babc5caa74717d3185424eac7588559006b03eb5d98b1c8c2a58ed900ff50587b228501e4505b355def5d4356b1a40f0b1d
+  metadata.gz: 7264a5c47ad16a4b44aa471a97649799897bd3150b4ff407709b0daeb0b48ffe24e72dc941d2c5a802ab0c14f2bda4037747ef9302ed7358df59e2949f658811
+  data.tar.gz: 4078b9a721a4f341fddb2bca8d1ec8f7f7ed2a83971c28027206bd98bf313ff159a96b3919a53ca16098ebc06e6184131094ee3d3a6b973b9c8c1ed3ff0dcbdb

data/README.md

@@ -37,7 +37,7 @@ request = ::Google::Cloud::OsConfig::V1alpha::CreateOSPolicyAssignmentRequest.ne
 response = client.create_os_policy_assignment request
 ```
 
-View the [Client Library Documentation](https://googleapis.dev/ruby/google-cloud-os_config-v1alpha/latest)
+View the [Client Library Documentation](https://cloud.google.com/ruby/docs/reference/google-cloud-os_config-v1alpha/latest)
 for class and method documentation.
 
 See also the [Product Documentation](https://cloud.google.com/compute/docs/manage-os)

data/lib/google/cloud/os_config/v1alpha/os_config_zonal_service/client.rb

@@ -779,6 +779,8 @@ module Google
             # Get OS policies compliance data for the specified Compute Engine VM
             # instance.
             #
+            # @deprecated This method is deprecated and may be removed in the next major version update.
+            #
             # @overload get_instance_os_policies_compliance(request, options = nil)
             #   Pass arguments to `get_instance_os_policies_compliance` via a request object, either of type
             #   {::Google::Cloud::OsConfig::V1alpha::GetInstanceOSPoliciesComplianceRequest} or an equivalent Hash.
@@ -873,6 +875,8 @@ module Google
             # List OS policies compliance data for all Compute Engine VM instances in the
             # specified zone.
             #
+            # @deprecated This method is deprecated and may be removed in the next major version update.
+            #
             # @overload list_instance_os_policies_compliances(request, options = nil)
             #   Pass arguments to `list_instance_os_policies_compliances` via a request object, either of type
             #   {::Google::Cloud::OsConfig::V1alpha::ListInstanceOSPoliciesCompliancesRequest} or an equivalent Hash.
@@ -976,6 +980,222 @@ module Google
               raise ::Google::Cloud::Error.from_error(e)
             end
 
+            ##
+            # Get the OS policy asssignment report for the specified Compute Engine VM
+            # instance.
+            #
+            # @overload get_os_policy_assignment_report(request, options = nil)
+            #   Pass arguments to `get_os_policy_assignment_report` via a request object, either of type
+            #   {::Google::Cloud::OsConfig::V1alpha::GetOSPolicyAssignmentReportRequest} or an equivalent Hash.
+            #
+            #   @param request [::Google::Cloud::OsConfig::V1alpha::GetOSPolicyAssignmentReportRequest, ::Hash]
+            #     A request object representing the call parameters. Required. To specify no
+            #     parameters, or to keep all the default parameter values, pass an empty Hash.
+            #   @param options [::Gapic::CallOptions, ::Hash]
+            #     Overrides the default settings for this call, e.g, timeout, retries, etc. Optional.
+            #
+            # @overload get_os_policy_assignment_report(name: nil)
+            #   Pass arguments to `get_os_policy_assignment_report` via keyword arguments. Note that at
+            #   least one keyword argument is required. To specify no parameters, or to keep all
+            #   the default parameter values, pass an empty Hash as a request object (see above).
+            #
+            #   @param name [::String]
+            #     Required. API resource name for OS policy assignment report.
+            #
+            #     Format:
+            #     `/projects/{project}/locations/{location}/instances/{instance}/osPolicyAssignments/{assignment}/report`
+            #
+            #     For `{project}`, either `project-number` or `project-id` can be provided.
+            #     For `{instance_id}`, either Compute Engine `instance-id` or `instance-name`
+            #     can be provided.
+            #     For `{assignment_id}`, the OSPolicyAssignment id must be provided.
+            #
+            # @yield [response, operation] Access the result along with the RPC operation
+            # @yieldparam response [::Google::Cloud::OsConfig::V1alpha::OSPolicyAssignmentReport]
+            # @yieldparam operation [::GRPC::ActiveCall::Operation]
+            #
+            # @return [::Google::Cloud::OsConfig::V1alpha::OSPolicyAssignmentReport]
+            #
+            # @raise [::Google::Cloud::Error] if the RPC is aborted.
+            #
+            # @example Basic example
+            #   require "google/cloud/os_config/v1alpha"
+            #
+            #   # Create a client object. The client can be reused for multiple calls.
+            #   client = Google::Cloud::OsConfig::V1alpha::OsConfigZonalService::Client.new
+            #
+            #   # Create a request. To set request fields, pass in keyword arguments.
+            #   request = Google::Cloud::OsConfig::V1alpha::GetOSPolicyAssignmentReportRequest.new
+            #
+            #   # Call the get_os_policy_assignment_report method.
+            #   result = client.get_os_policy_assignment_report request
+            #
+            #   # The returned object is of type Google::Cloud::OsConfig::V1alpha::OSPolicyAssignmentReport.
+            #   p result
+            #
+            def get_os_policy_assignment_report request, options = nil
+              raise ::ArgumentError, "request must be provided" if request.nil?
+
+              request = ::Gapic::Protobuf.coerce request, to: ::Google::Cloud::OsConfig::V1alpha::GetOSPolicyAssignmentReportRequest
+
+              # Converts hash and nil to an options object
+              options = ::Gapic::CallOptions.new(**options.to_h) if options.respond_to? :to_h
+
+              # Customize the options with defaults
+              metadata = @config.rpcs.get_os_policy_assignment_report.metadata.to_h
+
+              # Set x-goog-api-client and x-goog-user-project headers
+              metadata[:"x-goog-api-client"] ||= ::Gapic::Headers.x_goog_api_client \
+                lib_name: @config.lib_name, lib_version: @config.lib_version,
+                gapic_version: ::Google::Cloud::OsConfig::V1alpha::VERSION
+              metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
+
+              header_params = {}
+              if request.name
+                header_params["name"] = request.name
+              end
+
+              request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
+              metadata[:"x-goog-request-params"] ||= request_params_header
+
+              options.apply_defaults timeout:      @config.rpcs.get_os_policy_assignment_report.timeout,
+                                     metadata:     metadata,
+                                     retry_policy: @config.rpcs.get_os_policy_assignment_report.retry_policy
+
+              options.apply_defaults timeout:      @config.timeout,
+                                     metadata:     @config.metadata,
+                                     retry_policy: @config.retry_policy
+
+              @os_config_zonal_service_stub.call_rpc :get_os_policy_assignment_report, request, options: options do |response, operation|
+                yield response, operation if block_given?
+                return response
+              end
+            rescue ::GRPC::BadStatus => e
+              raise ::Google::Cloud::Error.from_error(e)
+            end
+
+            ##
+            # List OS policy asssignment reports for all Compute Engine VM instances in
+            # the specified zone.
+            #
+            # @overload list_os_policy_assignment_reports(request, options = nil)
+            #   Pass arguments to `list_os_policy_assignment_reports` via a request object, either of type
+            #   {::Google::Cloud::OsConfig::V1alpha::ListOSPolicyAssignmentReportsRequest} or an equivalent Hash.
+            #
+            #   @param request [::Google::Cloud::OsConfig::V1alpha::ListOSPolicyAssignmentReportsRequest, ::Hash]
+            #     A request object representing the call parameters. Required. To specify no
+            #     parameters, or to keep all the default parameter values, pass an empty Hash.
+            #   @param options [::Gapic::CallOptions, ::Hash]
+            #     Overrides the default settings for this call, e.g, timeout, retries, etc. Optional.
+            #
+            # @overload list_os_policy_assignment_reports(parent: nil, page_size: nil, filter: nil, page_token: nil)
+            #   Pass arguments to `list_os_policy_assignment_reports` via keyword arguments. Note that at
+            #   least one keyword argument is required. To specify no parameters, or to keep all
+            #   the default parameter values, pass an empty Hash as a request object (see above).
+            #
+            #   @param parent [::String]
+            #     Required. The parent resource name.
+            #
+            #     Format:
+            #     `projects/{project}/locations/{location}/instances/{instance}/osPolicyAssignments/{assignment}/reports`
+            #
+            #     For `{project}`, either `project-number` or `project-id` can be provided.
+            #     For `{instance}`, either `instance-name`, `instance-id`, or `-` can be
+            #     provided. If '-' is provided, the response will include
+            #     OSPolicyAssignmentReports for all instances in the project/location.
+            #     For `{assignment}`, either `assignment-id` or `-` can be provided. If '-'
+            #     is provided, the response will include OSPolicyAssignmentReports for all
+            #     OSPolicyAssignments in the project/location.
+            #     Either \\{instance} or \\{assignment} must be `-`.
+            #
+            #     For example:
+            #     `projects/{project}/locations/{location}/instances/{instance}/osPolicyAssignments/-/reports`
+            #      returns all reports for the instance
+            #     `projects/{project}/locations/{location}/instances/-/osPolicyAssignments/{assignment-id}/reports`
+            #      returns all the reports for the given assignment across all instances.
+            #     `projects/{project}/locations/{location}/instances/-/osPolicyAssignments/-/reports`
+            #      returns all the reports for all assignments across all instances.
+            #   @param page_size [::Integer]
+            #     The maximum number of results to return.
+            #   @param filter [::String]
+            #     If provided, this field specifies the criteria that must be met by the
+            #     `OSPolicyAssignmentReport` API resource that is included in the response.
+            #   @param page_token [::String]
+            #     A pagination token returned from a previous call to the
+            #     `ListOSPolicyAssignmentReports` method that indicates where this listing
+            #     should continue from.
+            #
+            # @yield [response, operation] Access the result along with the RPC operation
+            # @yieldparam response [::Gapic::PagedEnumerable<::Google::Cloud::OsConfig::V1alpha::OSPolicyAssignmentReport>]
+            # @yieldparam operation [::GRPC::ActiveCall::Operation]
+            #
+            # @return [::Gapic::PagedEnumerable<::Google::Cloud::OsConfig::V1alpha::OSPolicyAssignmentReport>]
+            #
+            # @raise [::Google::Cloud::Error] if the RPC is aborted.
+            #
+            # @example Basic example
+            #   require "google/cloud/os_config/v1alpha"
+            #
+            #   # Create a client object. The client can be reused for multiple calls.
+            #   client = Google::Cloud::OsConfig::V1alpha::OsConfigZonalService::Client.new
+            #
+            #   # Create a request. To set request fields, pass in keyword arguments.
+            #   request = Google::Cloud::OsConfig::V1alpha::ListOSPolicyAssignmentReportsRequest.new
+            #
+            #   # Call the list_os_policy_assignment_reports method.
+            #   result = client.list_os_policy_assignment_reports request
+            #
+            #   # The returned object is of type Gapic::PagedEnumerable. You can
+            #   # iterate over all elements by calling #each, and the enumerable
+            #   # will lazily make API calls to fetch subsequent pages. Other
+            #   # methods are also available for managing paging directly.
+            #   result.each do |response|
+            #     # Each element is of type ::Google::Cloud::OsConfig::V1alpha::OSPolicyAssignmentReport.
+            #     p response
+            #   end
+            #
+            def list_os_policy_assignment_reports request, options = nil
+              raise ::ArgumentError, "request must be provided" if request.nil?
+
+              request = ::Gapic::Protobuf.coerce request, to: ::Google::Cloud::OsConfig::V1alpha::ListOSPolicyAssignmentReportsRequest
+
+              # Converts hash and nil to an options object
+              options = ::Gapic::CallOptions.new(**options.to_h) if options.respond_to? :to_h
+
+              # Customize the options with defaults
+              metadata = @config.rpcs.list_os_policy_assignment_reports.metadata.to_h
+
+              # Set x-goog-api-client and x-goog-user-project headers
+              metadata[:"x-goog-api-client"] ||= ::Gapic::Headers.x_goog_api_client \
+                lib_name: @config.lib_name, lib_version: @config.lib_version,
+                gapic_version: ::Google::Cloud::OsConfig::V1alpha::VERSION
+              metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
+
+              header_params = {}
+              if request.parent
+                header_params["parent"] = request.parent
+              end
+
+              request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
+              metadata[:"x-goog-request-params"] ||= request_params_header
+
+              options.apply_defaults timeout:      @config.rpcs.list_os_policy_assignment_reports.timeout,
+                                     metadata:     metadata,
+                                     retry_policy: @config.rpcs.list_os_policy_assignment_reports.retry_policy
+
+              options.apply_defaults timeout:      @config.timeout,
+                                     metadata:     @config.metadata,
+                                     retry_policy: @config.retry_policy
+
+              @os_config_zonal_service_stub.call_rpc :list_os_policy_assignment_reports, request, options: options do |response, operation|
+                response = ::Gapic::PagedEnumerable.new @os_config_zonal_service_stub, :list_os_policy_assignment_reports, request, response, operation, options
+                yield response, operation if block_given?
+                return response
+              end
+            rescue ::GRPC::BadStatus => e
+              raise ::Google::Cloud::Error.from_error(e)
+            end
+
             ##
             # Get inventory data for the specified VM instance. If the VM has no
             # associated inventory, the message `NOT_FOUND` is returned.
@@ -1093,11 +1313,9 @@ module Google
             #   @param parent [::String]
             #     Required. The parent resource name.
             #
-            #     Format: `projects/{project}/locations/{location}/instances/{instance}`
+            #     Format: `projects/{project}/locations/{location}/instances/-`
             #
-            #     For `{project}`, either `project-number` or `project-id` can be
-            #     provided. For `{instance}`, only hyphen or dash character is supported to
-            #     list inventories across VMs.
+            #     For `{project}`, either `project-number` or `project-id` can be provided.
             #   @param view [::Google::Cloud::OsConfig::V1alpha::InventoryView]
             #     Inventory view indicating what information should be included in the
             #     inventory resource. If unspecified, the default view is BASIC.
@@ -1296,11 +1514,9 @@ module Google
             #   @param parent [::String]
             #     Required. The parent resource name.
             #
-            #     Format: `projects/{project}/locations/{location}/instances/{instance}`
+            #     Format: `projects/{project}/locations/{location}/instances/-`
             #
             #     For `{project}`, either `project-number` or `project-id` can be provided.
-            #     For `{instance}`, only `-` character is supported to list vulnerability
-            #     reports across VMs.
             #   @param page_size [::Integer]
             #     The maximum number of results to return.
             #   @param page_token [::String]
@@ -1558,6 +1774,16 @@ module Google
                 #
                 attr_reader :list_instance_os_policies_compliances
                 ##
+                # RPC-specific configuration for `get_os_policy_assignment_report`
+                # @return [::Gapic::Config::Method]
+                #
+                attr_reader :get_os_policy_assignment_report
+                ##
+                # RPC-specific configuration for `list_os_policy_assignment_reports`
+                # @return [::Gapic::Config::Method]
+                #
+                attr_reader :list_os_policy_assignment_reports
+                ##
                 # RPC-specific configuration for `get_inventory`
                 # @return [::Gapic::Config::Method]
                 #
@@ -1596,6 +1822,10 @@ module Google
                   @get_instance_os_policies_compliance = ::Gapic::Config::Method.new get_instance_os_policies_compliance_config
                   list_instance_os_policies_compliances_config = parent_rpcs.list_instance_os_policies_compliances if parent_rpcs.respond_to? :list_instance_os_policies_compliances
                   @list_instance_os_policies_compliances = ::Gapic::Config::Method.new list_instance_os_policies_compliances_config
+                  get_os_policy_assignment_report_config = parent_rpcs.get_os_policy_assignment_report if parent_rpcs.respond_to? :get_os_policy_assignment_report
+                  @get_os_policy_assignment_report = ::Gapic::Config::Method.new get_os_policy_assignment_report_config
+                  list_os_policy_assignment_reports_config = parent_rpcs.list_os_policy_assignment_reports if parent_rpcs.respond_to? :list_os_policy_assignment_reports
+                  @list_os_policy_assignment_reports = ::Gapic::Config::Method.new list_os_policy_assignment_reports_config
                   get_inventory_config = parent_rpcs.get_inventory if parent_rpcs.respond_to? :get_inventory
                   @get_inventory = ::Gapic::Config::Method.new get_inventory_config
                   list_inventories_config = parent_rpcs.list_inventories if parent_rpcs.respond_to? :list_inventories

data/lib/google/cloud/os_config/v1alpha/os_config_zonal_service/paths.rb

@@ -62,6 +62,27 @@ module Google
               "projects/#{project}/locations/#{location}/instanceOSPoliciesCompliances/#{instance}"
             end
 
+            ##
+            # Create a fully-qualified InstanceOSPolicyAssignment resource string.
+            #
+            # The resource will be in the following format:
+            #
+            # `projects/{project}/locations/{location}/instances/{instance}/osPolicyAssignments/{assignment}`
+            #
+            # @param project [String]
+            # @param location [String]
+            # @param instance [String]
+            # @param assignment [String]
+            #
+            # @return [::String]
+            def instance_os_policy_assignment_path project:, location:, instance:, assignment:
+              raise ::ArgumentError, "project cannot contain /" if project.to_s.include? "/"
+              raise ::ArgumentError, "location cannot contain /" if location.to_s.include? "/"
+              raise ::ArgumentError, "instance cannot contain /" if instance.to_s.include? "/"
+
+              "projects/#{project}/locations/#{location}/instances/#{instance}/osPolicyAssignments/#{assignment}"
+            end
+
             ##
             # Create a fully-qualified Inventory resource string.
             #
@@ -117,6 +138,27 @@ module Google
               "projects/#{project}/locations/#{location}/osPolicyAssignments/#{os_policy_assignment}"
             end
 
+            ##
+            # Create a fully-qualified OSPolicyAssignmentReport resource string.
+            #
+            # The resource will be in the following format:
+            #
+            # `projects/{project}/locations/{location}/instances/{instance}/osPolicyAssignments/{assignment}/report`
+            #
+            # @param project [String]
+            # @param location [String]
+            # @param instance [String]
+            # @param assignment [String]
+            #
+            # @return [::String]
+            def os_policy_assignment_report_path project:, location:, instance:, assignment:
+              raise ::ArgumentError, "project cannot contain /" if project.to_s.include? "/"
+              raise ::ArgumentError, "location cannot contain /" if location.to_s.include? "/"
+              raise ::ArgumentError, "instance cannot contain /" if instance.to_s.include? "/"
+
+              "projects/#{project}/locations/#{location}/instances/#{instance}/osPolicyAssignments/#{assignment}/report"
+            end
+
             ##
             # Create a fully-qualified VulnerabilityReport resource string.
             #

data/lib/google/cloud/os_config/v1alpha/version.rb

@@ -21,7 +21,7 @@ module Google
   module Cloud
     module OsConfig
       module V1alpha
-        VERSION = "0.2.2"
+        VERSION = "0.3.0"
       end
     end
   end

data/lib/google/cloud/osconfig/v1alpha/config_common_pb.rb

@@ -1,6 +1,7 @@
 # Generated by the protocol buffer compiler.  DO NOT EDIT!
 # source: google/cloud/osconfig/v1alpha/config_common.proto
 
+require 'google/api/annotations_pb'
 require 'google/protobuf'
 
 Google::Protobuf::DescriptorPool.generated_pool.build do

data/lib/google/cloud/osconfig/v1alpha/instance_os_policies_compliance_pb.rb

@@ -1,6 +1,7 @@
 # Generated by the protocol buffer compiler.  DO NOT EDIT!
 # source: google/cloud/osconfig/v1alpha/instance_os_policies_compliance.proto
 
+require 'google/api/annotations_pb'
 require 'google/api/field_behavior_pb'
 require 'google/api/resource_pb'
 require 'google/cloud/osconfig/v1alpha/config_common_pb'

data/lib/google/cloud/osconfig/v1alpha/inventory_pb.rb

@@ -1,6 +1,7 @@
 # Generated by the protocol buffer compiler.  DO NOT EDIT!
 # source: google/cloud/osconfig/v1alpha/inventory.proto
 
+require 'google/api/annotations_pb'
 require 'google/api/field_behavior_pb'
 require 'google/api/resource_pb'
 require 'google/protobuf/timestamp_pb'

data/lib/google/cloud/osconfig/v1alpha/os_policy_assignment_reports_pb.rb

@@ -0,0 +1,93 @@
+# Generated by the protocol buffer compiler.  DO NOT EDIT!
+# source: google/cloud/osconfig/v1alpha/os_policy_assignment_reports.proto
+
+require 'google/api/annotations_pb'
+require 'google/api/field_behavior_pb'
+require 'google/api/resource_pb'
+require 'google/protobuf/timestamp_pb'
+require 'google/protobuf'
+
+Google::Protobuf::DescriptorPool.generated_pool.build do
+  add_file("google/cloud/osconfig/v1alpha/os_policy_assignment_reports.proto", :syntax => :proto3) do
+    add_message "google.cloud.osconfig.v1alpha.GetOSPolicyAssignmentReportRequest" do
+      optional :name, :string, 1
+    end
+    add_message "google.cloud.osconfig.v1alpha.ListOSPolicyAssignmentReportsRequest" do
+      optional :parent, :string, 1
+      optional :page_size, :int32, 2
+      optional :filter, :string, 3
+      optional :page_token, :string, 4
+    end
+    add_message "google.cloud.osconfig.v1alpha.ListOSPolicyAssignmentReportsResponse" do
+      repeated :os_policy_assignment_reports, :message, 1, "google.cloud.osconfig.v1alpha.OSPolicyAssignmentReport"
+      optional :next_page_token, :string, 2
+    end
+    add_message "google.cloud.osconfig.v1alpha.OSPolicyAssignmentReport" do
+      optional :name, :string, 1
+      optional :instance, :string, 2
+      optional :os_policy_assignment, :string, 3
+      repeated :os_policy_compliances, :message, 4, "google.cloud.osconfig.v1alpha.OSPolicyAssignmentReport.OSPolicyCompliance"
+      optional :update_time, :message, 5, "google.protobuf.Timestamp"
+      optional :last_run_id, :string, 6
+    end
+    add_message "google.cloud.osconfig.v1alpha.OSPolicyAssignmentReport.OSPolicyCompliance" do
+      optional :os_policy_id, :string, 1
+      optional :compliance_state, :enum, 2, "google.cloud.osconfig.v1alpha.OSPolicyAssignmentReport.OSPolicyCompliance.ComplianceState"
+      optional :compliance_state_reason, :string, 3
+      repeated :os_policy_resource_compliances, :message, 4, "google.cloud.osconfig.v1alpha.OSPolicyAssignmentReport.OSPolicyCompliance.OSPolicyResourceCompliance"
+    end
+    add_message "google.cloud.osconfig.v1alpha.OSPolicyAssignmentReport.OSPolicyCompliance.OSPolicyResourceCompliance" do
+      optional :os_policy_resource_id, :string, 1
+      repeated :config_steps, :message, 2, "google.cloud.osconfig.v1alpha.OSPolicyAssignmentReport.OSPolicyCompliance.OSPolicyResourceCompliance.OSPolicyResourceConfigStep"
+      optional :compliance_state, :enum, 3, "google.cloud.osconfig.v1alpha.OSPolicyAssignmentReport.OSPolicyCompliance.OSPolicyResourceCompliance.ComplianceState"
+      optional :compliance_state_reason, :string, 4
+      oneof :output do
+        optional :exec_resource_output, :message, 5, "google.cloud.osconfig.v1alpha.OSPolicyAssignmentReport.OSPolicyCompliance.OSPolicyResourceCompliance.ExecResourceOutput"
+      end
+    end
+    add_message "google.cloud.osconfig.v1alpha.OSPolicyAssignmentReport.OSPolicyCompliance.OSPolicyResourceCompliance.OSPolicyResourceConfigStep" do
+      optional :type, :enum, 1, "google.cloud.osconfig.v1alpha.OSPolicyAssignmentReport.OSPolicyCompliance.OSPolicyResourceCompliance.OSPolicyResourceConfigStep.Type"
+      optional :error_message, :string, 2
+    end
+    add_enum "google.cloud.osconfig.v1alpha.OSPolicyAssignmentReport.OSPolicyCompliance.OSPolicyResourceCompliance.OSPolicyResourceConfigStep.Type" do
+      value :TYPE_UNSPECIFIED, 0
+      value :VALIDATION, 1
+      value :DESIRED_STATE_CHECK, 2
+      value :DESIRED_STATE_ENFORCEMENT, 3
+      value :DESIRED_STATE_CHECK_POST_ENFORCEMENT, 4
+    end
+    add_message "google.cloud.osconfig.v1alpha.OSPolicyAssignmentReport.OSPolicyCompliance.OSPolicyResourceCompliance.ExecResourceOutput" do
+      optional :enforcement_output, :bytes, 2
+    end
+    add_enum "google.cloud.osconfig.v1alpha.OSPolicyAssignmentReport.OSPolicyCompliance.OSPolicyResourceCompliance.ComplianceState" do
+      value :UNKNOWN, 0
+      value :COMPLIANT, 1
+      value :NON_COMPLIANT, 2
+    end
+    add_enum "google.cloud.osconfig.v1alpha.OSPolicyAssignmentReport.OSPolicyCompliance.ComplianceState" do
+      value :UNKNOWN, 0
+      value :COMPLIANT, 1
+      value :NON_COMPLIANT, 2
+    end
+  end
+end
+
+module Google
+  module Cloud
+    module OsConfig
+      module V1alpha
+        GetOSPolicyAssignmentReportRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.GetOSPolicyAssignmentReportRequest").msgclass
+        ListOSPolicyAssignmentReportsRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.ListOSPolicyAssignmentReportsRequest").msgclass
+        ListOSPolicyAssignmentReportsResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.ListOSPolicyAssignmentReportsResponse").msgclass
+        OSPolicyAssignmentReport = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.OSPolicyAssignmentReport").msgclass
+        OSPolicyAssignmentReport::OSPolicyCompliance = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.OSPolicyAssignmentReport.OSPolicyCompliance").msgclass
+        OSPolicyAssignmentReport::OSPolicyCompliance::OSPolicyResourceCompliance = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.OSPolicyAssignmentReport.OSPolicyCompliance.OSPolicyResourceCompliance").msgclass
+        OSPolicyAssignmentReport::OSPolicyCompliance::OSPolicyResourceCompliance::OSPolicyResourceConfigStep = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.OSPolicyAssignmentReport.OSPolicyCompliance.OSPolicyResourceCompliance.OSPolicyResourceConfigStep").msgclass
+        OSPolicyAssignmentReport::OSPolicyCompliance::OSPolicyResourceCompliance::OSPolicyResourceConfigStep::Type = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.OSPolicyAssignmentReport.OSPolicyCompliance.OSPolicyResourceCompliance.OSPolicyResourceConfigStep.Type").enummodule
+        OSPolicyAssignmentReport::OSPolicyCompliance::OSPolicyResourceCompliance::ExecResourceOutput = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.OSPolicyAssignmentReport.OSPolicyCompliance.OSPolicyResourceCompliance.ExecResourceOutput").msgclass
+        OSPolicyAssignmentReport::OSPolicyCompliance::OSPolicyResourceCompliance::ComplianceState = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.OSPolicyAssignmentReport.OSPolicyCompliance.OSPolicyResourceCompliance.ComplianceState").enummodule
+        OSPolicyAssignmentReport::OSPolicyCompliance::ComplianceState = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.OSPolicyAssignmentReport.OSPolicyCompliance.ComplianceState").enummodule
+      end
+    end
+  end
+end

data/lib/google/cloud/osconfig/v1alpha/os_policy_assignments_pb.rb

@@ -1,6 +1,7 @@
 # Generated by the protocol buffer compiler.  DO NOT EDIT!
 # source: google/cloud/osconfig/v1alpha/os_policy_assignments.proto
 
+require 'google/api/annotations_pb'
 require 'google/api/field_behavior_pb'
 require 'google/api/resource_pb'
 require 'google/cloud/osconfig/v1alpha/os_policy_pb'
@@ -20,6 +21,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :rollout, :message, 5, "google.cloud.osconfig.v1alpha.OSPolicyAssignment.Rollout"
       optional :revision_id, :string, 6
       optional :revision_create_time, :message, 7, "google.protobuf.Timestamp"
+      optional :etag, :string, 8
       optional :rollout_state, :enum, 9, "google.cloud.osconfig.v1alpha.OSPolicyAssignment.RolloutState"
       optional :baseline, :bool, 10
       optional :deleted, :bool, 11
@@ -34,6 +36,11 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       repeated :os_short_names, :string, 2
       repeated :inclusion_labels, :message, 3, "google.cloud.osconfig.v1alpha.OSPolicyAssignment.LabelSet"
       repeated :exclusion_labels, :message, 4, "google.cloud.osconfig.v1alpha.OSPolicyAssignment.LabelSet"
+      repeated :inventories, :message, 5, "google.cloud.osconfig.v1alpha.OSPolicyAssignment.InstanceFilter.Inventory"
+    end
+    add_message "google.cloud.osconfig.v1alpha.OSPolicyAssignment.InstanceFilter.Inventory" do
+      optional :os_short_name, :string, 1
+      optional :os_version, :string, 2
     end
     add_message "google.cloud.osconfig.v1alpha.OSPolicyAssignment.Rollout" do
       optional :disruption_budget, :message, 1, "google.cloud.osconfig.v1alpha.FixedOrPercent"
@@ -109,6 +116,7 @@ module Google
         OSPolicyAssignment = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.OSPolicyAssignment").msgclass
         OSPolicyAssignment::LabelSet = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.OSPolicyAssignment.LabelSet").msgclass
         OSPolicyAssignment::InstanceFilter = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.OSPolicyAssignment.InstanceFilter").msgclass
+        OSPolicyAssignment::InstanceFilter::Inventory = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.OSPolicyAssignment.InstanceFilter.Inventory").msgclass
         OSPolicyAssignment::Rollout = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.OSPolicyAssignment.Rollout").msgclass
         OSPolicyAssignment::RolloutState = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.OSPolicyAssignment.RolloutState").enummodule
         OSPolicyAssignmentOperationMetadata = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.OSPolicyAssignmentOperationMetadata").msgclass

data/lib/google/cloud/osconfig/v1alpha/os_policy_pb.rb

@@ -1,6 +1,7 @@
 # Generated by the protocol buffer compiler.  DO NOT EDIT!
 # source: google/cloud/osconfig/v1alpha/os_policy.proto
 
+require 'google/api/annotations_pb'
 require 'google/api/field_behavior_pb'
 require 'google/protobuf'
 
@@ -17,6 +18,10 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :os_short_name, :string, 1
       optional :os_version, :string, 2
     end
+    add_message "google.cloud.osconfig.v1alpha.OSPolicy.InventoryFilter" do
+      optional :os_short_name, :string, 1
+      optional :os_version, :string, 2
+    end
     add_message "google.cloud.osconfig.v1alpha.OSPolicy.Resource" do
       optional :id, :string, 1
       oneof :resource_type do
@@ -156,6 +161,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
     end
     add_message "google.cloud.osconfig.v1alpha.OSPolicy.ResourceGroup" do
       optional :os_filter, :message, 1, "google.cloud.osconfig.v1alpha.OSPolicy.OSFilter"
+      repeated :inventory_filters, :message, 3, "google.cloud.osconfig.v1alpha.OSPolicy.InventoryFilter"
       repeated :resources, :message, 2, "google.cloud.osconfig.v1alpha.OSPolicy.Resource"
     end
     add_enum "google.cloud.osconfig.v1alpha.OSPolicy.Mode" do
@@ -172,6 +178,7 @@ module Google
       module V1alpha
         OSPolicy = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.OSPolicy").msgclass
         OSPolicy::OSFilter = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.OSPolicy.OSFilter").msgclass
+        OSPolicy::InventoryFilter = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.OSPolicy.InventoryFilter").msgclass
         OSPolicy::Resource = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.OSPolicy.Resource").msgclass
         OSPolicy::Resource::File = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.OSPolicy.Resource.File").msgclass
         OSPolicy::Resource::File::Remote = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.OSPolicy.Resource.File.Remote").msgclass

data/lib/google/cloud/osconfig/v1alpha/osconfig_common_pb.rb

@@ -1,6 +1,7 @@
 # Generated by the protocol buffer compiler.  DO NOT EDIT!
 # source: google/cloud/osconfig/v1alpha/osconfig_common.proto
 
+require 'google/api/annotations_pb'
 require 'google/protobuf'
 
 Google::Protobuf::DescriptorPool.generated_pool.build do

data/lib/google/cloud/osconfig/v1alpha/osconfig_zonal_service_pb.rb

@@ -6,6 +6,7 @@ require 'google/api/client_pb'
 require 'google/api/resource_pb'
 require 'google/cloud/osconfig/v1alpha/instance_os_policies_compliance_pb'
 require 'google/cloud/osconfig/v1alpha/inventory_pb'
+require 'google/cloud/osconfig/v1alpha/os_policy_assignment_reports_pb'
 require 'google/cloud/osconfig/v1alpha/os_policy_assignments_pb'
 require 'google/cloud/osconfig/v1alpha/vulnerability_pb'
 require 'google/longrunning/operations_pb'

data/lib/google/cloud/osconfig/v1alpha/osconfig_zonal_service_services_pb.rb

@@ -87,6 +87,12 @@ module Google
             # List OS policies compliance data for all Compute Engine VM instances in the
             # specified zone.
             rpc :ListInstanceOSPoliciesCompliances, ::Google::Cloud::OsConfig::V1alpha::ListInstanceOSPoliciesCompliancesRequest, ::Google::Cloud::OsConfig::V1alpha::ListInstanceOSPoliciesCompliancesResponse
+            # Get the OS policy asssignment report for the specified Compute Engine VM
+            # instance.
+            rpc :GetOSPolicyAssignmentReport, ::Google::Cloud::OsConfig::V1alpha::GetOSPolicyAssignmentReportRequest, ::Google::Cloud::OsConfig::V1alpha::OSPolicyAssignmentReport
+            # List OS policy asssignment reports for all Compute Engine VM instances in
+            # the specified zone.
+            rpc :ListOSPolicyAssignmentReports, ::Google::Cloud::OsConfig::V1alpha::ListOSPolicyAssignmentReportsRequest, ::Google::Cloud::OsConfig::V1alpha::ListOSPolicyAssignmentReportsResponse
             # Get inventory data for the specified VM instance. If the VM has no
             # associated inventory, the message `NOT_FOUND` is returned.
             rpc :GetInventory, ::Google::Cloud::OsConfig::V1alpha::GetInventoryRequest, ::Google::Cloud::OsConfig::V1alpha::Inventory

data/lib/google/cloud/osconfig/v1alpha/vulnerability_pb.rb

@@ -1,6 +1,7 @@
 # Generated by the protocol buffer compiler.  DO NOT EDIT!
 # source: google/cloud/osconfig/v1alpha/vulnerability.proto
 
+require 'google/api/annotations_pb'
 require 'google/api/field_behavior_pb'
 require 'google/api/resource_pb'
 require 'google/protobuf/timestamp_pb'
@@ -19,6 +20,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       repeated :available_inventory_item_ids, :string, 3
       optional :create_time, :message, 4, "google.protobuf.Timestamp"
       optional :update_time, :message, 5, "google.protobuf.Timestamp"
+      repeated :items, :message, 6, "google.cloud.osconfig.v1alpha.VulnerabilityReport.Vulnerability.Item"
     end
     add_message "google.cloud.osconfig.v1alpha.VulnerabilityReport.Vulnerability.Details" do
       optional :cve, :string, 1
@@ -30,6 +32,13 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
     end
     add_message "google.cloud.osconfig.v1alpha.VulnerabilityReport.Vulnerability.Details.Reference" do
       optional :url, :string, 1
+      optional :source, :string, 2
+    end
+    add_message "google.cloud.osconfig.v1alpha.VulnerabilityReport.Vulnerability.Item" do
+      optional :installed_inventory_item_id, :string, 1
+      optional :available_inventory_item_id, :string, 2
+      optional :fixed_cpe_uri, :string, 3
+      optional :upstream_fix, :string, 4
     end
     add_message "google.cloud.osconfig.v1alpha.GetVulnerabilityReportRequest" do
       optional :name, :string, 1
@@ -102,6 +111,7 @@ module Google
         VulnerabilityReport::Vulnerability = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.VulnerabilityReport.Vulnerability").msgclass
         VulnerabilityReport::Vulnerability::Details = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.VulnerabilityReport.Vulnerability.Details").msgclass
         VulnerabilityReport::Vulnerability::Details::Reference = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.VulnerabilityReport.Vulnerability.Details.Reference").msgclass
+        VulnerabilityReport::Vulnerability::Item = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.VulnerabilityReport.Vulnerability.Item").msgclass
         GetVulnerabilityReportRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.GetVulnerabilityReportRequest").msgclass
         ListVulnerabilityReportsRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.ListVulnerabilityReportsRequest").msgclass
         ListVulnerabilityReportsResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.osconfig.v1alpha.ListVulnerabilityReportsResponse").msgclass

data/proto_docs/google/cloud/osconfig/v1alpha/inventory.rb

@@ -39,10 +39,10 @@ module Google
         #     Output only. Base level operating system information for the VM.
         # @!attribute [r] items
         #   @return [::Google::Protobuf::Map{::String => ::Google::Cloud::OsConfig::V1alpha::Inventory::Item}]
-        #     Output only. Inventory items related to the VM keyed by an opaque unique
-        #     identifier for each inventory item. The identifier is unique to each
-        #     distinct and addressable inventory item and will change, when there is a
-        #     new package version.
+        #     Output only. Inventory items related to the VM keyed by an opaque unique identifier for
+        #     each inventory item. The identifier is unique to each distinct and
+        #     addressable inventory item and will change, when there is a new package
+        #     version.
         # @!attribute [r] update_time
         #   @return [::Google::Protobuf::Timestamp]
         #     Output only. Timestamp of the last reported inventory for the VM.
@@ -287,12 +287,9 @@ module Google
             extend ::Google::Protobuf::MessageExts::ClassMethods
           end
 
-          # Contains information about a Windows application as retrieved from the
-          # Windows Registry. For more information about these fields, see
-          #
-          # [Windows Installer Properties for the Uninstall
-          # Registry](https://docs.microsoft.com/en-us/windows/win32/msi/uninstall-registry-key){:
-          # class="external" }
+          # Contains information about a Windows application that is retrieved from the
+          # Windows Registry. For more information about these fields, see:
+          # https://docs.microsoft.com/en-us/windows/win32/msi/uninstall-registry-key
           # @!attribute [rw] display_name
           #   @return [::String]
           #     The name of the application or product.
@@ -351,11 +348,9 @@ module Google
         #   @return [::String]
         #     Required. The parent resource name.
         #
-        #     Format: `projects/{project}/locations/{location}/instances/{instance}`
+        #     Format: `projects/{project}/locations/{location}/instances/-`
         #
-        #     For `{project}`, either `project-number` or `project-id` can be
-        #     provided. For `{instance}`, only hyphen or dash character is supported to
-        #     list inventories across VMs.
+        #     For `{project}`, either `project-number` or `project-id` can be provided.
         # @!attribute [rw] view
         #   @return [::Google::Cloud::OsConfig::V1alpha::InventoryView]
         #     Inventory view indicating what information should be included in the

data/proto_docs/google/cloud/osconfig/v1alpha/os_policy.rb

@@ -58,8 +58,7 @@ module Google
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
 
-          # The `OSFilter` is used to specify the OS filtering criteria for the
-          # resource group.
+          # Filtering criteria to select VMs based on OS details.
           # @!attribute [rw] os_short_name
           #   @return [::String]
           #     This should match OS short name emitted by the OS inventory agent.
@@ -76,6 +75,24 @@ module Google
             extend ::Google::Protobuf::MessageExts::ClassMethods
           end
 
+          # Filtering criteria to select VMs based on inventory details.
+          # @!attribute [rw] os_short_name
+          #   @return [::String]
+          #     Required. The OS short name
+          # @!attribute [rw] os_version
+          #   @return [::String]
+          #     The OS version
+          #
+          #     Prefix matches are supported if asterisk(*) is provided as the
+          #     last character. For example, to match all versions with a major
+          #     version of `7`, specify the following value for this field `7.*`
+          #
+          #     An empty string matches all OS versions.
+          class InventoryFilter
+            include ::Google::Protobuf::MessageExts
+            extend ::Google::Protobuf::MessageExts::ClassMethods
+          end
+
           # An OS policy resource is used to define the desired state configuration
           # and provides a specific functionality like installing/removing packages,
           # executing a script etc.
@@ -473,21 +490,21 @@ module Google
 
                 # The interpreter to use.
                 module Interpreter
-                  # Defaults to NONE.
+                  # Invalid value, the request will return validation error.
                   INTERPRETER_UNSPECIFIED = 0
 
-                  # If no interpreter is specified the
-                  # source will be executed directly, which will likely only
-                  # succeed for executables and scripts with shebang lines.
-                  # [Wikipedia
-                  # shebang](https://en.wikipedia.org/wiki/Shebang_(Unix)).
+                  # If an interpreter is not specified, the
+                  # source is executed directly. This execution, without an
+                  # interpreter, only succeeds for executables and scripts that have <a
+                  # href="https://en.wikipedia.org/wiki/Shebang_(Unix)"
+                  # class="external">shebang lines</a>.
                   NONE = 1
 
-                  # Indicates that the script will be run with /bin/sh on Linux and
-                  # cmd.exe on windows.
+                  # Indicates that the script runs with `/bin/sh` on Linux and
+                  # `cmd.exe` on Windows.
                   SHELL = 2
 
-                  # Indicates that the script will be run with powershell.
+                  # Indicates that the script runs with PowerShell.
                   POWERSHELL = 3
                 end
               end
@@ -554,7 +571,23 @@ module Google
           # within the resource group.
           # @!attribute [rw] os_filter
           #   @return [::Google::Cloud::OsConfig::V1alpha::OSPolicy::OSFilter]
+          #     Deprecated. Use the `inventory_filters` field instead.
           #     Used to specify the OS filter for a resource group
+          # @!attribute [rw] inventory_filters
+          #   @return [::Array<::Google::Cloud::OsConfig::V1alpha::OSPolicy::InventoryFilter>]
+          #     List of inventory filters for the resource group.
+          #
+          #     The resources in this resource group are applied to the target VM if it
+          #     satisfies at least one of the following inventory filters.
+          #
+          #     For example, to apply this resource group to VMs running either `RHEL` or
+          #     `CentOS` operating systems, specify 2 items for the list with following
+          #     values:
+          #     inventory_filters[0].os_short_name='rhel' and
+          #     inventory_filters[1].os_short_name='centos'
+          #
+          #     If the list is empty, this resource group will be applied to the target
+          #     VM unconditionally.
           # @!attribute [rw] resources
           #   @return [::Array<::Google::Cloud::OsConfig::V1alpha::OSPolicy::Resource>]
           #     Required. List of resources configured for this resource group.

data/proto_docs/google/cloud/osconfig/v1alpha/os_policy_assignment_reports.rb

@@ -0,0 +1,293 @@
+# frozen_string_literal: true
+
+# Copyright 2022 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
+
+
+module Google
+  module Cloud
+    module OsConfig
+      module V1alpha
+        # Get a report of the OS policy assignment for a VM instance.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. API resource name for OS policy assignment report.
+        #
+        #     Format:
+        #     `/projects/{project}/locations/{location}/instances/{instance}/osPolicyAssignments/{assignment}/report`
+        #
+        #     For `{project}`, either `project-number` or `project-id` can be provided.
+        #     For `{instance_id}`, either Compute Engine `instance-id` or `instance-name`
+        #     can be provided.
+        #     For `{assignment_id}`, the OSPolicyAssignment id must be provided.
+        class GetOSPolicyAssignmentReportRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # List the OS policy assignment reports for VM instances.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. The parent resource name.
+        #
+        #     Format:
+        #     `projects/{project}/locations/{location}/instances/{instance}/osPolicyAssignments/{assignment}/reports`
+        #
+        #     For `{project}`, either `project-number` or `project-id` can be provided.
+        #     For `{instance}`, either `instance-name`, `instance-id`, or `-` can be
+        #     provided. If '-' is provided, the response will include
+        #     OSPolicyAssignmentReports for all instances in the project/location.
+        #     For `{assignment}`, either `assignment-id` or `-` can be provided. If '-'
+        #     is provided, the response will include OSPolicyAssignmentReports for all
+        #     OSPolicyAssignments in the project/location.
+        #     Either \\{instance} or \\{assignment} must be `-`.
+        #
+        #     For example:
+        #     `projects/{project}/locations/{location}/instances/{instance}/osPolicyAssignments/-/reports`
+        #      returns all reports for the instance
+        #     `projects/{project}/locations/{location}/instances/-/osPolicyAssignments/{assignment-id}/reports`
+        #      returns all the reports for the given assignment across all instances.
+        #     `projects/{project}/locations/{location}/instances/-/osPolicyAssignments/-/reports`
+        #      returns all the reports for all assignments across all instances.
+        # @!attribute [rw] page_size
+        #   @return [::Integer]
+        #     The maximum number of results to return.
+        # @!attribute [rw] filter
+        #   @return [::String]
+        #     If provided, this field specifies the criteria that must be met by the
+        #     `OSPolicyAssignmentReport` API resource that is included in the response.
+        # @!attribute [rw] page_token
+        #   @return [::String]
+        #     A pagination token returned from a previous call to the
+        #     `ListOSPolicyAssignmentReports` method that indicates where this listing
+        #     should continue from.
+        class ListOSPolicyAssignmentReportsRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # A response message for listing OS Policy assignment reports including the
+        # page of results and page token.
+        # @!attribute [rw] os_policy_assignment_reports
+        #   @return [::Array<::Google::Cloud::OsConfig::V1alpha::OSPolicyAssignmentReport>]
+        #     List of OS policy assignment reports.
+        # @!attribute [rw] next_page_token
+        #   @return [::String]
+        #     The pagination token to retrieve the next page of OS policy assignment
+        #     report objects.
+        class ListOSPolicyAssignmentReportsResponse
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # A report of the OS policy assignment status for a given instance.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     The `OSPolicyAssignmentReport` API resource name.
+        #
+        #     Format:
+        #     `projects/{project_number}/locations/{location}/instances/{instance_id}/osPolicyAssignments/{os_policy_assignment_id}/report`
+        # @!attribute [rw] instance
+        #   @return [::String]
+        #     The Compute Engine VM instance name.
+        # @!attribute [rw] os_policy_assignment
+        #   @return [::String]
+        #     Reference to the `OSPolicyAssignment` API resource that the `OSPolicy`
+        #     belongs to.
+        #
+        #     Format:
+        #     `projects/{project_number}/locations/{location}/osPolicyAssignments/{os_policy_assignment_id@revision_id}`
+        # @!attribute [rw] os_policy_compliances
+        #   @return [::Array<::Google::Cloud::OsConfig::V1alpha::OSPolicyAssignmentReport::OSPolicyCompliance>]
+        #     Compliance data for each `OSPolicy` that is applied to the VM.
+        # @!attribute [rw] update_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Timestamp for when the report was last generated.
+        # @!attribute [rw] last_run_id
+        #   @return [::String]
+        #     Unique identifier of the last attempted run to apply the OS policies
+        #     associated with this assignment on the VM.
+        #
+        #     This ID is logged by the OS Config agent while applying the OS
+        #     policies associated with this assignment on the VM.
+        #     NOTE: If the service is unable to successfully connect to the agent for
+        #     this run, then this id will not be available in the agent logs.
+        class OSPolicyAssignmentReport
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+
+          # Compliance data for an OS policy
+          # @!attribute [rw] os_policy_id
+          #   @return [::String]
+          #     The OS policy id
+          # @!attribute [rw] compliance_state
+          #   @return [::Google::Cloud::OsConfig::V1alpha::OSPolicyAssignmentReport::OSPolicyCompliance::ComplianceState]
+          #     The compliance state of the OS policy.
+          # @!attribute [rw] compliance_state_reason
+          #   @return [::String]
+          #     The reason for the OS policy to be in an unknown compliance state.
+          #     This field is always populated when `compliance_state` is `UNKNOWN`.
+          #
+          #     If populated, the field can contain one of the following values:
+          #
+          #     * `vm-not-running`: The VM was not running.
+          #     * `os-policies-not-supported-by-agent`: The version of the OS Config
+          #     agent running on the VM does not support running OS policies.
+          #     * `no-agent-detected`: The OS Config agent is not detected for the VM.
+          #     * `resource-execution-errors`: The OS Config agent encountered errors
+          #     while executing one or more resources in the policy. See
+          #     `os_policy_resource_compliances` for details.
+          #     * `task-timeout`: The task sent to the agent to apply the policy timed
+          #     out.
+          #     * `unexpected-agent-state`: The OS Config agent did not report the final
+          #     status of the task that attempted to apply the policy. Instead, the agent
+          #     unexpectedly started working on a different task. This mostly happens
+          #     when the agent or VM unexpectedly restarts while applying OS policies.
+          #     * `internal-service-errors`: Internal service errors were encountered
+          #     while attempting to apply the policy.
+          # @!attribute [rw] os_policy_resource_compliances
+          #   @return [::Array<::Google::Cloud::OsConfig::V1alpha::OSPolicyAssignmentReport::OSPolicyCompliance::OSPolicyResourceCompliance>]
+          #     Compliance data for each resource within the policy that is applied to
+          #     the VM.
+          class OSPolicyCompliance
+            include ::Google::Protobuf::MessageExts
+            extend ::Google::Protobuf::MessageExts::ClassMethods
+
+            # Compliance data for an OS policy resource.
+            # @!attribute [rw] os_policy_resource_id
+            #   @return [::String]
+            #     The ID of the OS policy resource.
+            # @!attribute [rw] config_steps
+            #   @return [::Array<::Google::Cloud::OsConfig::V1alpha::OSPolicyAssignmentReport::OSPolicyCompliance::OSPolicyResourceCompliance::OSPolicyResourceConfigStep>]
+            #     Ordered list of configuration completed by the agent for the OS policy
+            #     resource.
+            # @!attribute [rw] compliance_state
+            #   @return [::Google::Cloud::OsConfig::V1alpha::OSPolicyAssignmentReport::OSPolicyCompliance::OSPolicyResourceCompliance::ComplianceState]
+            #     The compliance state of the resource.
+            # @!attribute [rw] compliance_state_reason
+            #   @return [::String]
+            #     A reason for the resource to be in the given compliance state.
+            #     This field is always populated when `compliance_state` is `UNKNOWN`.
+            #
+            #     The following values are supported when `compliance_state == UNKNOWN`
+            #
+            #     * `execution-errors`: Errors were encountered by the agent while
+            #     executing the resource and the compliance state couldn't be
+            #     determined.
+            #     * `execution-skipped-by-agent`: Resource execution was skipped by the
+            #     agent because errors were encountered while executing prior resources
+            #     in the OS policy.
+            #     * `os-policy-execution-attempt-failed`: The execution of the OS policy
+            #     containing this resource failed and the compliance state couldn't be
+            #     determined.
+            # @!attribute [rw] exec_resource_output
+            #   @return [::Google::Cloud::OsConfig::V1alpha::OSPolicyAssignmentReport::OSPolicyCompliance::OSPolicyResourceCompliance::ExecResourceOutput]
+            #     ExecResource specific output.
+            class OSPolicyResourceCompliance
+              include ::Google::Protobuf::MessageExts
+              extend ::Google::Protobuf::MessageExts::ClassMethods
+
+              # Step performed by the OS Config agent for configuring an
+              # `OSPolicy` resource to its desired state.
+              # @!attribute [rw] type
+              #   @return [::Google::Cloud::OsConfig::V1alpha::OSPolicyAssignmentReport::OSPolicyCompliance::OSPolicyResourceCompliance::OSPolicyResourceConfigStep::Type]
+              #     Configuration step type.
+              # @!attribute [rw] error_message
+              #   @return [::String]
+              #     An error message recorded during the execution of this step.
+              #     Only populated if errors were encountered during this step execution.
+              class OSPolicyResourceConfigStep
+                include ::Google::Protobuf::MessageExts
+                extend ::Google::Protobuf::MessageExts::ClassMethods
+
+                # Supported configuration step types
+                module Type
+                  # Default value. This value is unused.
+                  TYPE_UNSPECIFIED = 0
+
+                  # Checks for resource conflicts such as schema errors.
+                  VALIDATION = 1
+
+                  # Checks the current status of the desired state for a resource.
+                  DESIRED_STATE_CHECK = 2
+
+                  # Enforces the desired state for a resource that is not in desired
+                  # state.
+                  DESIRED_STATE_ENFORCEMENT = 3
+
+                  # Re-checks the status of the desired state. This check is done
+                  # for a resource after the enforcement of all OS policies.
+                  #
+                  # This step is used to determine the final desired state status for
+                  # the resource. It accounts for any resources that might have drifted
+                  # from their desired state due to side effects from executing other
+                  # resources.
+                  DESIRED_STATE_CHECK_POST_ENFORCEMENT = 4
+                end
+              end
+
+              # ExecResource specific output.
+              # @!attribute [rw] enforcement_output
+              #   @return [::String]
+              #     Output from enforcement phase output file (if run).
+              #     Output size is limited to 100K bytes.
+              class ExecResourceOutput
+                include ::Google::Protobuf::MessageExts
+                extend ::Google::Protobuf::MessageExts::ClassMethods
+              end
+
+              # Possible compliance states for a resource.
+              module ComplianceState
+                # The resource is in an unknown compliance state.
+                #
+                # To get more details about why the policy is in this state, review
+                # the output of the `compliance_state_reason` field.
+                UNKNOWN = 0
+
+                # Resource is compliant.
+                COMPLIANT = 1
+
+                # Resource is non-compliant.
+                NON_COMPLIANT = 2
+              end
+            end
+
+            # Possible compliance states for an os policy.
+            module ComplianceState
+              # The policy is in an unknown compliance state.
+              #
+              # Refer to the field `compliance_state_reason` to learn the exact reason
+              # for the policy to be in this compliance state.
+              UNKNOWN = 0
+
+              # Policy is compliant.
+              #
+              # The policy is compliant if all the underlying resources are also
+              # compliant.
+              COMPLIANT = 1
+
+              # Policy is non-compliant.
+              #
+              # The policy is non-compliant if one or more underlying resources are
+              # non-compliant.
+              NON_COMPLIANT = 2
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/proto_docs/google/cloud/osconfig/v1alpha/os_policy_assignments.rb

@@ -68,6 +68,10 @@ module Google
         # @!attribute [r] revision_create_time
         #   @return [::Google::Protobuf::Timestamp]
         #     Output only. The timestamp that the revision was created.
+        # @!attribute [rw] etag
+        #   @return [::String]
+        #     The etag for this OS policy assignment.
+        #     If this is provided on update, it must match the server's etag.
         # @!attribute [r] rollout_state
         #   @return [::Google::Cloud::OsConfig::V1alpha::OSPolicyAssignment::RolloutState]
         #     Output only. OS policy assignment rollout state
@@ -122,14 +126,18 @@ module Google
             end
           end
 
-          # Message to represent the filters to select VMs for an assignment
+          # Filters to select target VMs for an assignment.
+          #
+          # If more than one filter criteria is specified below, a VM will be selected
+          # if and only if it satisfies all of them.
           # @!attribute [rw] all
           #   @return [::Boolean]
           #     Target all VMs in the project. If true, no other criteria is
           #     permitted.
           # @!attribute [rw] os_short_names
           #   @return [::Array<::String>]
-          #     A VM is included if it's OS short name matches with any of the
+          #     Deprecated. Use the `inventories` field instead.
+          #     A VM is selected if it's OS short name matches with any of the
           #     values provided in this list.
           # @!attribute [rw] inclusion_labels
           #   @return [::Array<::Google::Cloud::OsConfig::V1alpha::OSPolicyAssignment::LabelSet>]
@@ -143,13 +151,33 @@ module Google
           #
           #     If the list has more than one label set, the VM is excluded if any
           #     of the label sets are applicable for the VM.
+          # @!attribute [rw] inventories
+          #   @return [::Array<::Google::Cloud::OsConfig::V1alpha::OSPolicyAssignment::InstanceFilter::Inventory>]
+          #     List of inventories to select VMs.
           #
-          #     This filter is applied last in the filtering chain and therefore a
-          #     VM is guaranteed to be excluded if it satisfies one of the below
-          #     label sets.
+          #     A VM is selected if its inventory data matches at least one of the
+          #     following inventories.
           class InstanceFilter
             include ::Google::Protobuf::MessageExts
             extend ::Google::Protobuf::MessageExts::ClassMethods
+
+            # VM inventory details.
+            # @!attribute [rw] os_short_name
+            #   @return [::String]
+            #     Required. The OS short name
+            # @!attribute [rw] os_version
+            #   @return [::String]
+            #     The OS version
+            #
+            #     Prefix matches are supported if asterisk(*) is provided as the
+            #     last character. For example, to match all versions with a major
+            #     version of `7`, specify the following value for this field `7.*`
+            #
+            #     An empty string matches all OS versions.
+            class Inventory
+              include ::Google::Protobuf::MessageExts
+              extend ::Google::Protobuf::MessageExts::ClassMethods
+            end
           end
 
           # Message to configure the rollout at the zonal level for the OS policy

data/proto_docs/google/cloud/osconfig/v1alpha/vulnerability.rb

@@ -37,8 +37,8 @@ module Google
         #     Output only. List of vulnerabilities affecting the VM.
         # @!attribute [r] update_time
         #   @return [::Google::Protobuf::Timestamp]
-        #     Output only. The timestamp for when the last vulnerability report was
-        #     generated for the VM.
+        #     Output only. The timestamp for when the last vulnerability report was generated for the
+        #     VM.
         class VulnerabilityReport
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -69,6 +69,9 @@ module Google
           # @!attribute [rw] update_time
           #   @return [::Google::Protobuf::Timestamp]
           #     The timestamp for when the vulnerability was last modified.
+          # @!attribute [rw] items
+          #   @return [::Array<::Google::Cloud::OsConfig::V1alpha::VulnerabilityReport::Vulnerability::Item>]
+          #     List of items affected by the vulnerability.
           class Vulnerability
             include ::Google::Protobuf::MessageExts
             extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -104,11 +107,43 @@ module Google
               # @!attribute [rw] url
               #   @return [::String]
               #     The url of the reference.
+              # @!attribute [rw] source
+              #   @return [::String]
+              #     The source of the reference e.g. NVD.
               class Reference
                 include ::Google::Protobuf::MessageExts
                 extend ::Google::Protobuf::MessageExts::ClassMethods
               end
             end
+
+            # OS inventory item that is affected by a vulnerability or fixed as a
+            # result of a vulnerability.
+            # @!attribute [rw] installed_inventory_item_id
+            #   @return [::String]
+            #     Corresponds to the `INSTALLED_PACKAGE` inventory item on the VM.
+            #     This field displays the inventory items affected by this vulnerability.
+            #     If the vulnerability report was not updated after the VM inventory
+            #     update, these values might not display in VM inventory. For some
+            #     operating systems, this field might be empty.
+            # @!attribute [rw] available_inventory_item_id
+            #   @return [::String]
+            #     Corresponds to the `AVAILABLE_PACKAGE` inventory item on the VM.
+            #     If the vulnerability report was not updated after the VM inventory
+            #     update, these values might not display in VM inventory. If there is no
+            #     available fix, the field is empty. The `inventory_item` value specifies
+            #     the latest `SoftwarePackage` available to the VM that fixes the
+            #     vulnerability.
+            # @!attribute [rw] fixed_cpe_uri
+            #   @return [::String]
+            #     The recommended [CPE URI](https://cpe.mitre.org/specification/) update
+            #     that contains a fix for this vulnerability.
+            # @!attribute [rw] upstream_fix
+            #   @return [::String]
+            #     The upstream OS patch, packages or KB that fixes the vulnerability.
+            class Item
+              include ::Google::Protobuf::MessageExts
+              extend ::Google::Protobuf::MessageExts::ClassMethods
+            end
           end
         end
 
@@ -134,11 +169,9 @@ module Google
         #   @return [::String]
         #     Required. The parent resource name.
         #
-        #     Format: `projects/{project}/locations/{location}/instances/{instance}`
+        #     Format: `projects/{project}/locations/{location}/instances/-`
         #
         #     For `{project}`, either `project-number` or `project-id` can be provided.
-        #     For `{instance}`, only `-` character is supported to list vulnerability
-        #     reports across VMs.
         # @!attribute [rw] page_size
         #   @return [::Integer]
         #     The maximum number of results to return.

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: google-cloud-os_config-v1alpha
 version: !ruby/object:Gem::Version
-  version: 0.2.2
+  version: 0.3.0
 platform: ruby
 authors:
 - Google LLC
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-01-11 00:00:00.000000000 Z
+date: 2022-02-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: gapic-common
@@ -181,6 +181,7 @@ files:
 - lib/google/cloud/osconfig/v1alpha/config_common_pb.rb
 - lib/google/cloud/osconfig/v1alpha/instance_os_policies_compliance_pb.rb
 - lib/google/cloud/osconfig/v1alpha/inventory_pb.rb
+- lib/google/cloud/osconfig/v1alpha/os_policy_assignment_reports_pb.rb
 - lib/google/cloud/osconfig/v1alpha/os_policy_assignments_pb.rb
 - lib/google/cloud/osconfig/v1alpha/os_policy_pb.rb
 - lib/google/cloud/osconfig/v1alpha/osconfig_common_pb.rb
@@ -194,6 +195,7 @@ files:
 - proto_docs/google/cloud/osconfig/v1alpha/instance_os_policies_compliance.rb
 - proto_docs/google/cloud/osconfig/v1alpha/inventory.rb
 - proto_docs/google/cloud/osconfig/v1alpha/os_policy.rb
+- proto_docs/google/cloud/osconfig/v1alpha/os_policy_assignment_reports.rb
 - proto_docs/google/cloud/osconfig/v1alpha/os_policy_assignments.rb
 - proto_docs/google/cloud/osconfig/v1alpha/osconfig_common.rb
 - proto_docs/google/cloud/osconfig/v1alpha/vulnerability.rb
@@ -224,7 +226,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.4
+rubygems_version: 3.3.5
 signing_key: 
 specification_version: 4
 summary: API Client library for the Cloud OS Config V1alpha API