google-cloud-os_login-v1beta 0.2.2 → 0.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: eacccdd7f85dc0a8486169c00a29457de11e2b1d898eb8757ab31266e8103433
-  data.tar.gz: 95c07749372663aecf665ee68b07b0ebe208d64ba1231450866c081b3a824a8e
+  metadata.gz: 86d622dc7b2b4a5bfd8acb44fba9062d2adbc6bf7df77e1cbbc93d3532b69a98
+  data.tar.gz: d4a08240e19296efbebdd815d914a23cbab618331d30faf3f6285b11f603b5a7
 SHA512:
-  metadata.gz: 873ac1e5466cba9f7362a1994a8f00321169a1cc2e8b793b5dab777b801cd0ab604ebbd6cfe461b7cd75d952cd59c08e7a868d8b16d35ab387dae93ad0971740
-  data.tar.gz: 13b64f1b41505a12852f92527714194138c1b4dfdaaa15732d669d36cedcc920316598cccc2b3a87a88a82f272536956243ae17c777e7d1c111e071a79926962
+  metadata.gz: c9259e10f566d64441f799ee61231f09381a0357c26896ced5ad2d83d1959a9dd03c26b2c2b928e84530c9dfa753b49858710ec5dc4d8ce26e44c852d231d312
+  data.tar.gz: e11720d59058f8fe5a2e09a1b5b433d7d6a1c9b8feb7d98af213f4be81224bfd14f63dd3d35519653116b5596c75c6061c9198f309cf64d3ad444d7e9c1c620d

data/README.md

@@ -6,6 +6,12 @@ Use OS Login to manage SSH access to your instances using IAM without having to
 
 https://github.com/googleapis/google-cloud-ruby
 
+This gem is a _versioned_ client. It provides basic client classes for a
+specific version of the Cloud OS Login V1beta API. Most users should consider using
+the main client gem,
+[google-cloud-os_login](https://rubygems.org/gems/google-cloud-os_login).
+See the section below titled *Which client should I use?* for more information.
+
 ## Installation
 
 ```
@@ -18,6 +24,7 @@ In order to use this library, you first need to go through the following steps:
 
 1. [Select or create a Cloud Platform project.](https://console.cloud.google.com/project)
 1. [Enable billing for your project.](https://cloud.google.com/billing/docs/how-to/modify-project#enable_billing_for_a_project)
+1. [Enable the API.](https://console.cloud.google.com/apis/library/oslogin.googleapis.com)
 1. {file:AUTHENTICATION.md Set up authentication.}
 
 ## Quick Start
@@ -33,6 +40,9 @@ response = client.delete_posix_account request
 View the [Client Library Documentation](https://googleapis.dev/ruby/google-cloud-os_login-v1beta/latest)
 for class and method documentation.
 
+See also the [Product Documentation](https://cloud.google.com/compute/docs/oslogin)
+for general usage information.
+
 ## Enabling Logging
 
 To enable logging for this library, set the logger for the underlying [gRPC](https://github.com/grpc/grpc/tree/master/src/ruby) library.
@@ -69,3 +79,61 @@ in security maintenance, and not end of life. Currently, this means Ruby 2.4
 and later. Older versions of Ruby _may_ still work, but are unsupported and not
 recommended. See https://www.ruby-lang.org/en/downloads/branches/ for details
 about the Ruby support schedule.
+
+## Which client should I use?
+
+Most modern Ruby client libraries for Google APIs come in two flavors: the main
+client library with a name such as `google-cloud-os_login`,
+and lower-level _versioned_ client libraries with names such as
+`google-cloud-os_login-v1beta`.
+_In most cases, you should install the main client._
+
+### What's the difference between the main client and a versioned client?
+
+A _versioned client_ provides a basic set of data types and client classes for
+a _single version_ of a specific service. (That is, for a service with multiple
+versions, there might be a separate versioned client for each service version.)
+Most versioned clients are written and maintained by a code generator.
+
+The _main client_ is designed to provide you with the _recommended_ client
+interfaces for the service. There will be only one main client for any given
+service, even a service with multiple versions. The main client includes
+factory methods for constructing the client objects we recommend for most
+users. In some cases, those will be classes provided by an underlying versioned
+client; in other cases, they will be handwritten higher-level client objects
+with additional capabilities, convenience methods, or best practices built in.
+Generally, the main client will default to a recommended service version,
+although in some cases you can override this if you need to talk to a specific
+service version.
+
+### Why would I want to use the main client?
+
+We recommend that most users install the main client gem for a service. You can
+identify this gem as the one _without_ a version in its name, e.g.
+`google-cloud-os_login`.
+The main client is recommended because it will embody the best practices for
+accessing the service, and may also provide more convenient interfaces or
+tighter integration into frameworks and third-party libraries. In addition, the
+documentation and samples published by Google will generally demonstrate use of
+the main client.
+
+### Why would I want to use a versioned client?
+
+You can use a versioned client if you are content with a possibly lower-level
+class interface, you explicitly want to avoid features provided by the main
+client, or you want to access a specific service version not be covered by the
+main client. You can identify versioned client gems because the service version
+is part of the name, e.g. `google-cloud-os_login-v1beta`.
+
+### What about the google-apis-<name> clients?
+
+Client library gems with names that begin with `google-apis-` are based on an
+older code generation technology. They talk to a REST/JSON backend (whereas
+most modern clients talk to a [gRPC](https://grpc.io/) backend) and they may
+not offer the same performance, features, and ease of use provided by more
+modern clients.
+
+The `google-apis-` clients have wide coverage across Google services, so you
+might need to use one if there is no modern client available for the service.
+However, if a modern client is available, we generally recommend it over the
+older `google-apis-` clients.

data/lib/google/cloud/os_login/v1beta.rb

@@ -33,3 +33,6 @@ module Google
     end
   end
 end
+
+helper_path = ::File.join __dir__, "v1beta", "_helpers.rb"
+require "google/cloud/os_login/v1beta/_helpers" if ::File.file? helper_path

data/lib/google/cloud/os_login/v1beta/os_login_service/client.rb

@@ -73,7 +73,7 @@ module Google
                   initial_delay: 0.1,
                   max_delay:     60.0,
                   multiplier:    1.3,
-                  retry_codes:   ["UNAVAILABLE", "DEADLINE_EXCEEDED"]
+                  retry_codes:   [14, 4]
                 }
 
                 default_config.rpcs.delete_ssh_public_key.timeout = 10.0
@@ -81,7 +81,7 @@ module Google
                   initial_delay: 0.1,
                   max_delay:     60.0,
                   multiplier:    1.3,
-                  retry_codes:   ["UNAVAILABLE", "DEADLINE_EXCEEDED"]
+                  retry_codes:   [14, 4]
                 }
 
                 default_config.rpcs.get_login_profile.timeout = 10.0
@@ -89,7 +89,7 @@ module Google
                   initial_delay: 0.1,
                   max_delay:     60.0,
                   multiplier:    1.3,
-                  retry_codes:   ["UNAVAILABLE", "DEADLINE_EXCEEDED"]
+                  retry_codes:   [14, 4]
                 }
 
                 default_config.rpcs.get_ssh_public_key.timeout = 10.0
@@ -97,7 +97,7 @@ module Google
                   initial_delay: 0.1,
                   max_delay:     60.0,
                   multiplier:    1.3,
-                  retry_codes:   ["UNAVAILABLE", "DEADLINE_EXCEEDED"]
+                  retry_codes:   [14, 4]
                 }
 
                 default_config.rpcs.import_ssh_public_key.timeout = 10.0
@@ -105,7 +105,7 @@ module Google
                   initial_delay: 0.1,
                   max_delay:     60.0,
                   multiplier:    1.3,
-                  retry_codes:   ["UNAVAILABLE", "DEADLINE_EXCEEDED"]
+                  retry_codes:   [14, 4]
                 }
 
                 default_config.rpcs.update_ssh_public_key.timeout = 10.0
@@ -113,7 +113,7 @@ module Google
                   initial_delay: 0.1,
                   max_delay:     60.0,
                   multiplier:    1.3,
-                  retry_codes:   ["UNAVAILABLE", "DEADLINE_EXCEEDED"]
+                  retry_codes:   [14, 4]
                 }
 
                 default_config
@@ -177,7 +177,13 @@ module Google
 
               # Create credentials
               credentials = @config.credentials
-              credentials ||= Credentials.default scope: @config.scope
+              # Use self-signed JWT if the scope and endpoint are unchanged from default,
+              # but only if the default endpoint does not have a region prefix.
+              enable_self_signed_jwt = @config.scope == Client.configure.scope &&
+                                       @config.endpoint == Client.configure.endpoint &&
+                                       !@config.endpoint.split(".").first.include?("-")
+              credentials ||= Credentials.default scope:                  @config.scope,
+                                                  enable_self_signed_jwt: enable_self_signed_jwt
               if credentials.is_a?(String) || credentials.is_a?(Hash)
                 credentials = Credentials.new credentials, scope: @config.scope
               end
@@ -700,7 +706,7 @@ module Google
 
               config_attr :endpoint,      "oslogin.googleapis.com", ::String
               config_attr :credentials,   nil do |value|
-                allowed = [::String, ::Hash, ::Proc, ::Google::Auth::Credentials, ::Signet::OAuth2::Client, nil]
+                allowed = [::String, ::Hash, ::Proc, ::Symbol, ::Google::Auth::Credentials, ::Signet::OAuth2::Client, nil]
                 allowed += [::GRPC::Core::Channel, ::GRPC::Core::ChannelCredentials] if defined? ::GRPC
                 allowed.any? { |klass| klass === value }
               end
@@ -740,7 +746,7 @@ module Google
               # Each configuration object is of type `Gapic::Config::Method` and includes
               # the following configuration fields:
               #
-              #  *  `timeout` (*type:* `Numeric`) - The call timeout in milliseconds
+              #  *  `timeout` (*type:* `Numeric`) - The call timeout in seconds
               #  *  `metadata` (*type:* `Hash{Symbol=>String}`) - Additional gRPC headers
               #  *  `retry_policy (*type:* `Hash`) - The retry policy. The policy fields
               #     include the following keys:

data/lib/google/cloud/os_login/v1beta/version.rb

@@ -21,7 +21,7 @@ module Google
   module Cloud
     module OsLogin
       module V1beta
-        VERSION = "0.2.2"
+        VERSION = "0.3.0"
       end
     end
   end

data/lib/google/cloud/oslogin/v1beta/oslogin_services_pb.rb

@@ -38,21 +38,21 @@ module Google
             self.service_name = 'google.cloud.oslogin.v1beta.OsLoginService'
 
             # Deletes a POSIX account.
-            rpc :DeletePosixAccount, Google::Cloud::OsLogin::V1beta::DeletePosixAccountRequest, Google::Protobuf::Empty
+            rpc :DeletePosixAccount, ::Google::Cloud::OsLogin::V1beta::DeletePosixAccountRequest, ::Google::Protobuf::Empty
             # Deletes an SSH public key.
-            rpc :DeleteSshPublicKey, Google::Cloud::OsLogin::V1beta::DeleteSshPublicKeyRequest, Google::Protobuf::Empty
+            rpc :DeleteSshPublicKey, ::Google::Cloud::OsLogin::V1beta::DeleteSshPublicKeyRequest, ::Google::Protobuf::Empty
             # Retrieves the profile information used for logging in to a virtual machine
             # on Google Compute Engine.
-            rpc :GetLoginProfile, Google::Cloud::OsLogin::V1beta::GetLoginProfileRequest, Google::Cloud::OsLogin::V1beta::LoginProfile
+            rpc :GetLoginProfile, ::Google::Cloud::OsLogin::V1beta::GetLoginProfileRequest, ::Google::Cloud::OsLogin::V1beta::LoginProfile
             # Retrieves an SSH public key.
-            rpc :GetSshPublicKey, Google::Cloud::OsLogin::V1beta::GetSshPublicKeyRequest, Google::Cloud::OsLogin::Common::SshPublicKey
+            rpc :GetSshPublicKey, ::Google::Cloud::OsLogin::V1beta::GetSshPublicKeyRequest, ::Google::Cloud::OsLogin::Common::SshPublicKey
             # Adds an SSH public key and returns the profile information. Default POSIX
             # account information is set when no username and UID exist as part of the
             # login profile.
-            rpc :ImportSshPublicKey, Google::Cloud::OsLogin::V1beta::ImportSshPublicKeyRequest, Google::Cloud::OsLogin::V1beta::ImportSshPublicKeyResponse
+            rpc :ImportSshPublicKey, ::Google::Cloud::OsLogin::V1beta::ImportSshPublicKeyRequest, ::Google::Cloud::OsLogin::V1beta::ImportSshPublicKeyResponse
             # Updates an SSH public key and returns the profile information. This method
             # supports patch semantics.
-            rpc :UpdateSshPublicKey, Google::Cloud::OsLogin::V1beta::UpdateSshPublicKeyRequest, Google::Cloud::OsLogin::Common::SshPublicKey
+            rpc :UpdateSshPublicKey, ::Google::Cloud::OsLogin::V1beta::UpdateSshPublicKeyRequest, ::Google::Cloud::OsLogin::Common::SshPublicKey
           end
 
           Stub = Service.rpc_stub_class

data/proto_docs/google/api/field_behavior.rb

@@ -54,6 +54,12 @@ module Google
       # This indicates that the field may be set once in a request to create a
       # resource, but may not be changed thereafter.
       IMMUTABLE = 5
+
+      # Denotes that a (repeated) field is an unordered list.
+      # This indicates that the service may provide the elements of the list
+      # in any arbitrary order, rather than the order the user originally
+      # provided. Additionally, the list's order may or may not be stable.
+      UNORDERED_LIST = 6
     end
   end
 end

data/proto_docs/google/api/resource.rb

@@ -43,12 +43,12 @@ module Google
     #
     # The ResourceDescriptor Yaml config will look like:
     #
-    #    resources:
-    #    - type: "pubsub.googleapis.com/Topic"
-    #      name_descriptor:
-    #        - pattern: "projects/\\{project}/topics/\\{topic}"
-    #          parent_type: "cloudresourcemanager.googleapis.com/Project"
-    #          parent_name_extractor: "projects/\\{project}"
+    #     resources:
+    #     - type: "pubsub.googleapis.com/Topic"
+    #       name_descriptor:
+    #         - pattern: "projects/{project}/topics/{topic}"
+    #           parent_type: "cloudresourcemanager.googleapis.com/Project"
+    #           parent_name_extractor: "projects/{project}"
     #
     # Sometimes, resources have multiple patterns, typically because they can
     # live under multiple parents.
@@ -183,15 +183,24 @@ module Google
     #         }
     # @!attribute [rw] plural
     #   @return [::String]
-    #     The plural name used in the resource name, such as 'projects' for
-    #     the name of 'projects/\\{project}'. It is the same concept of the `plural`
-    #     field in k8s CRD spec
+    #     The plural name used in the resource name and permission names, such as
+    #     'projects' for the resource name of 'projects/\\{project}' and the permission
+    #     name of 'cloudresourcemanager.googleapis.com/projects.get'. It is the same
+    #     concept of the `plural` field in k8s CRD spec
     #     https://kubernetes.io/docs/tasks/access-kubernetes-api/custom-resources/custom-resource-definitions/
+    #
+    #     Note: The plural form is required even for singleton resources. See
+    #     https://aip.dev/156
     # @!attribute [rw] singular
     #   @return [::String]
     #     The same concept of the `singular` field in k8s CRD spec
     #     https://kubernetes.io/docs/tasks/access-kubernetes-api/custom-resources/custom-resource-definitions/
     #     Such as "project" for the `resourcemanager.googleapis.com/Project` type.
+    # @!attribute [rw] style
+    #   @return [::Array<::Google::Api::ResourceDescriptor::Style>]
+    #     Style flag(s) for this resource.
+    #     These indicate that a resource is expected to conform to a given
+    #     style. See the specific style flags for additional information.
     class ResourceDescriptor
       include ::Google::Protobuf::MessageExts
       extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -211,6 +220,22 @@ module Google
         # that from being necessary once there are multiple patterns.)
         FUTURE_MULTI_PATTERN = 2
       end
+
+      # A flag representing a specific style that a resource claims to conform to.
+      module Style
+        # The unspecified value. Do not use.
+        STYLE_UNSPECIFIED = 0
+
+        # This resource is intended to be "declarative-friendly".
+        #
+        # Declarative-friendly resources must be more strictly consistent, and
+        # setting this to true communicates to tools that this resource should
+        # adhere to declarative-friendly expectations.
+        #
+        # Note: This is used by the API linter (linter.aip.dev) to enable
+        # additional checks.
+        DECLARATIVE_FRIENDLY = 1
+      end
     end
 
     # Defines a proto annotation that describes a string field that refers to
@@ -226,6 +251,17 @@ module Google
     #             type: "pubsub.googleapis.com/Topic"
     #           }];
     #         }
+    #
+    #     Occasionally, a field may reference an arbitrary resource. In this case,
+    #     APIs use the special value * in their resource reference.
+    #
+    #     Example:
+    #
+    #         message GetIamPolicyRequest {
+    #           string resource = 2 [(google.api.resource_reference) = {
+    #             type: "*"
+    #           }];
+    #         }
     # @!attribute [rw] child_type
     #   @return [::String]
     #     The resource type of a child collection that the annotated field
@@ -234,11 +270,11 @@ module Google
     #
     #     Example:
     #
-    #       message ListLogEntriesRequest {
-    #         string parent = 1 [(google.api.resource_reference) = {
-    #           child_type: "logging.googleapis.com/LogEntry"
-    #         };
-    #       }
+    #         message ListLogEntriesRequest {
+    #           string parent = 1 [(google.api.resource_reference) = {
+    #             child_type: "logging.googleapis.com/LogEntry"
+    #           };
+    #         }
     class ResourceReference
       include ::Google::Protobuf::MessageExts
       extend ::Google::Protobuf::MessageExts::ClassMethods

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: google-cloud-os_login-v1beta
 version: !ruby/object:Gem::Version
-  version: 0.2.2
+  version: 0.3.0
 platform: ruby
 authors:
 - Google LLC
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-06-05 00:00:00.000000000 Z
+date: 2021-02-03 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: gapic-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.2'
+        version: '0.3'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.2'
+        version: '0.3'
 - !ruby/object:Gem::Dependency
   name: google-cloud-errors
   requirement: !ruby/object:Gem::Requirement
@@ -153,7 +153,9 @@ dependencies:
 description: Use OS Login to manage SSH access to your instances using IAM without
   having to create and manage individual SSH keys. OS Login maintains a consistent
   Linux user identity across VM instances and is the recommended way to manage many
-  users across multiple instances or projects.
+  users across multiple instances or projects. Note that google-cloud-os_login-v1beta
+  is a version-specific client library. For most uses, we recommend installing the
+  main client library google-cloud-os_login instead. See the readme for more details.
 email: googleapis-packages@google.com
 executables: []
 extensions: []
@@ -199,7 +201,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.1.3
+rubygems_version: 3.2.6
 signing_key: 
 specification_version: 4
 summary: API Client library for the Cloud OS Login V1beta API