google-cloud-pubsub 0.35.0 → 0.36.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9eb65ead0bfa397fca5d4eab13a005d64dabb629da1b0b4638fbbd45fab65cf3
-  data.tar.gz: 01027a9e96bda8a16107309c06eba2f4cd971a56ca851b59463a1958c06a63ec
+  metadata.gz: e6bdfb3062337b8aaf70394ea5f2c35054ac9cbe83836631b188456b8801c39e
+  data.tar.gz: 6f51848602a6702095214030780ddeae82e715b364541d2c1b8014232610c6b7
 SHA512:
-  metadata.gz: 93dfbbcc2ea3e8cb444ed00bbf92a9d514cbf3868fc7cbe540be112358203c0d0becf16dd36e459accd65a1cb12db589f7e29a8942685418356b8a530ce374c9
-  data.tar.gz: 660f2887f98ddef1f1c5a83f928e4855008f6770c3bbe02ac6f9a1c567ad8bd3dfc160bdbb7abc397de8197ccd27e6d588443c352a8ff3a6b8cfd3e09b3231bb
+  metadata.gz: 693140e1add6261c55b61d3a9514db9c10afcf4dd04f0e0d1dd369aabd915aa8dce15eda2408e1d9be6cc9f54d9f546c638eb7d8aa66ca63319dd014e2382536
+  data.tar.gz: 8872761deb3b50239a4bee8d8ef9259492e5e60259e6a6508f632134e0521443910dc54dd4536c0dc4242a2d40c0fc9e4cb911109a5754aace8c8596f2c36138

data/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Release History
 
+### 0.36.0 / 2019-05-21
+
+* Add Topic#kms_key
+  * Add the Cloud KMS encryption key that will be used to
+    protect access to messages published on a topic.
+* Updates to the low-level API:
+  * Add Topic#kms_key_name (experimental)
+  * Snapshots no longer marked beta.
+  * Update IAM documentation.
+
 ### 0.35.0 / 2019-04-25
 
 * Add Subscription#push_config and Subscription::PushConfig

data/lib/google/cloud/pubsub/project.rb

@@ -171,6 +171,9 @@ module Google
         #   optional. Label keys must start with a letter and each label in the
         #   list must have a different key. See [Creating and Managing
         #   Labels](https://cloud.google.com/pubsub/docs/labels).
+        # @param [String] kms_key The Cloud KMS encryption key that will be used
+        #   to protect access to messages published on this topic. Optional.
+        #   For example: `projects/a/locations/b/keyRings/c/cryptoKeys/d`
         # @param [Hash] async A hash of values to configure the topic's
         #   {AsyncPublisher} that is created when {Topic#publish_async}
         #   is called. Optional.
@@ -199,9 +202,11 @@ module Google
         #   pubsub = Google::Cloud::PubSub.new
         #   topic = pubsub.create_topic "my-topic"
         #
-        def create_topic topic_name, labels: nil, async: nil
+        def create_topic topic_name, labels: nil, kms_key: nil, async: nil
           ensure_service!
-          grpc = service.create_topic topic_name, labels: labels
+          grpc = service.create_topic topic_name,
+                                      labels:       labels,
+                                      kms_key_name: kms_key
           Topic.from_grpc grpc, service, async: async
         end
         alias new_topic create_topic

data/lib/google/cloud/pubsub/service.rb

@@ -125,11 +125,12 @@ module Google
 
         ##
         # Creates the given topic with the given name.
-        def create_topic topic_name, labels: nil, options: {}
+        def create_topic topic_name, labels: nil, kms_key_name: nil, options: {}
           execute do
             publisher.create_topic topic_path(topic_name, options),
-                                   labels:  labels,
-                                   options: default_options
+                                   labels:       labels,
+                                   kms_key_name: kms_key_name,
+                                   options:      default_options
           end
         end
 

data/lib/google/cloud/pubsub/topic.rb

@@ -132,6 +132,56 @@ module Google
           @resource_name = nil
         end
 
+        ##
+        # The Cloud KMS encryption key that will be used to protect access
+        # to messages published on this topic.
+        # For example: `projects/a/locations/b/keyRings/c/cryptoKeys/d`
+        # The default value is `nil`, which means default encryption is used.
+        #
+        # Makes an API call to retrieve the KMS encryption key when called on a
+        # reference object. See {#reference?}.
+        #
+        # @return [String]
+        #
+        # @example
+        #   require "google/cloud/pubsub"
+        #
+        #   pubsub = Google::Cloud::PubSub.new
+        #
+        #   topic = pubsub.topic "my-topic"
+        #
+        #   topic.kms_key #=> "projects/a/locations/b/keyRings/c/cryptoKeys/d"
+        #
+        def kms_key
+          ensure_grpc!
+          @grpc.kms_key_name
+        end
+
+        ##
+        # Set the Cloud KMS encryption key that will be used to protect access
+        # to messages published on this topic.
+        # For example: `projects/a/locations/b/keyRings/c/cryptoKeys/d`
+        # The default value is `nil`, which means default encryption is used.
+        #
+        # @param [String] new_kms_key_name New Cloud KMS key name
+        #
+        # @example
+        #   require "google/cloud/pubsub"
+        #
+        #   pubsub = Google::Cloud::PubSub.new
+        #
+        #   topic = pubsub.topic "my-topic"
+        #
+        #   key_name = "projects/a/locations/b/keyRings/c/cryptoKeys/d"
+        #   topic.kms_key = key_name
+        #
+        def kms_key= new_kms_key_name
+          update_grpc = Google::Cloud::PubSub::V1::Topic.new \
+            name: name, kms_key_name: new_kms_key_name
+          @grpc = service.update_topic update_grpc, :kms_key_name
+          @resource_name = nil
+        end
+
         ##
         # Permanently deletes the topic.
         #

data/lib/google/cloud/pubsub/v1/doc/google/pubsub/v1/pubsub.rb

@@ -48,6 +48,15 @@ module Google
       #     CreateTopic or to UpdateTopic. This field will be populated in the
       #     responses for GetTopic, CreateTopic, and UpdateTopic: if not present in the
       #     response, then no constraints are in effect.
+      # @!attribute [rw] kms_key_name
+      #   @return [String]
+      #     The resource name of the Cloud KMS CryptoKey to be used to protect access
+      #     to messages published on this topic.
+      #
+      #     The expected format is `projects/*/locations/*/keyRings/*/cryptoKeys/*`.
+      #     <b>EXPERIMENTAL:</b> This feature is part of a closed alpha release. This
+      #     API might be changed in backward-incompatible ways and is not recommended
+      #     for production use. It is not subject to any SLA or deprecation policy.
       class Topic; end
 
       # A message that is published by publishers and consumed by subscribers. The
@@ -176,10 +185,7 @@ module Google
       #     `ListTopicSubscriptionsRequest` to get more subscriptions.
       class ListTopicSubscriptionsResponse; end
 
-      # Request for the `ListTopicSnapshots` method. <br><br>
-      # <b>BETA:</b> This feature is part of a beta release. This API might be
-      # changed in backward-incompatible ways and is not recommended for production
-      # use. It is not subject to any SLA or deprecation policy.
+      # Request for the `ListTopicSnapshots` method.
       # @!attribute [rw] topic
       #   @return [String]
       #     The name of the topic that snapshots are attached to.
@@ -194,10 +200,7 @@ module Google
       #     that the system should return the next page of data.
       class ListTopicSnapshotsRequest; end
 
-      # Response for the `ListTopicSnapshots` method.<br><br>
-      # <b>BETA:</b> This feature is part of a beta release. This API might be
-      # changed in backward-incompatible ways and is not recommended for production
-      # use. It is not subject to any SLA or deprecation policy.
+      # Response for the `ListTopicSnapshots` method.
       # @!attribute [rw] snapshots
       #   @return [Array<String>]
       #     The names of the snapshots that match the request.
@@ -266,10 +269,6 @@ module Google
       #     <a
       #     href="https://cloud.google.com/pubsub/docs/replay-overview#seek_to_a_time">
       #     Seek to a timestamp</a>.
-      #     <br><br>
-      #     <b>BETA:</b> This feature is part of a beta release. This API might be
-      #     changed in backward-incompatible ways and is not recommended for production
-      #     use. It is not subject to any SLA or deprecation policy.
       # @!attribute [rw] message_retention_duration
       #   @return [Google::Protobuf::Duration]
       #     How long to retain unacknowledged messages in the subscription's backlog,
@@ -277,10 +276,7 @@ module Google
       #     If `retain_acked_messages` is true, then this also configures the retention
       #     of acknowledged messages, and thus configures how far back in time a `Seek`
       #     can be done. Defaults to 7 days. Cannot be more than 7 days or less than 10
-      #     minutes.<br><br>
-      #     <b>BETA:</b> This feature is part of a beta release. This API might be
-      #     changed in backward-incompatible ways and is not recommended for production
-      #     use. It is not subject to any SLA or deprecation policy.
+      #     minutes.
       # @!attribute [rw] labels
       #   @return [Hash{String => String}]
       #     See <a href="https://cloud.google.com/pubsub/docs/labels"> Creating and
@@ -302,9 +298,6 @@ module Google
       #     operations on the subscription. If `expiration_policy` is not set, a
       #     *default policy* with `ttl` of 31 days will be used. The minimum allowed
       #     value for `expiration_policy.ttl` is 1 day.
-      #     <b>BETA:</b> This feature is part of a beta release. This API might be
-      #     changed in backward-incompatible ways and is not recommended for production
-      #     use. It is not subject to any SLA or deprecation policy.
       class Subscription; end
 
       # A policy that specifies the conditions for resource expiration (i.e.,
@@ -360,9 +353,8 @@ module Google
         #     [Service account
         #     email](https://cloud.google.com/iam/docs/service-accounts)
         #     to be used for generating the OIDC token. The caller (for
-        #     CreateSubscription, UpdateSubscription, and ModifyPushConfig calls) must
+        #     CreateSubscription, UpdateSubscription, and ModifyPushConfig RPCs) must
         #     have the iam.serviceAccounts.actAs permission for the service account.
-        #     See https://cloud.google.com/iam/docs/understanding-roles#service-accounts-roles.
         # @!attribute [rw] audience
         #   @return [String]
         #     Audience to be used when generating OIDC token. The audience claim
@@ -556,10 +548,7 @@ module Google
       #     Received Pub/Sub messages. This will not be empty.
       class StreamingPullResponse; end
 
-      # Request for the `CreateSnapshot` method.<br><br>
-      # <b>BETA:</b> This feature is part of a beta release. This API might be
-      # changed in backward-incompatible ways and is not recommended for production
-      # use. It is not subject to any SLA or deprecation policy.
+      # Request for the `CreateSnapshot` method.
       # @!attribute [rw] name
       #   @return [String]
       #     Optional user-provided name for this snapshot.
@@ -586,10 +575,7 @@ module Google
       #     managing labels</a>.
       class CreateSnapshotRequest; end
 
-      # Request for the UpdateSnapshot method.<br><br>
-      # <b>BETA:</b> This feature is part of a beta release. This API might be
-      # changed in backward-incompatible ways and is not recommended for production
-      # use. It is not subject to any SLA or deprecation policy.
+      # Request for the UpdateSnapshot method.
       # @!attribute [rw] snapshot
       #   @return [Google::Cloud::PubSub::V1::Snapshot]
       #     The updated snapshot object.
@@ -604,10 +590,7 @@ module Google
       # operations, which allow
       # you to manage message acknowledgments in bulk. That is, you can set the
       # acknowledgment state of messages in an existing subscription to the state
-      # captured by a snapshot.<br><br>
-      # <b>BETA:</b> This feature is part of a beta release. This API might be
-      # changed in backward-incompatible ways and is not recommended for production
-      # use. It is not subject to any SLA or deprecation policy.
+      # captured by a snapshot.
       # @!attribute [rw] name
       #   @return [String]
       #     The name of the snapshot.
@@ -632,20 +615,14 @@ module Google
       #     managing labels</a>.
       class Snapshot; end
 
-      # Request for the GetSnapshot method.<br><br>
-      # <b>BETA:</b> This feature is part of a beta release. This API might be
-      # changed in backward-incompatible ways and is not recommended for production
-      # use. It is not subject to any SLA or deprecation policy.
+      # Request for the GetSnapshot method.
       # @!attribute [rw] snapshot
       #   @return [String]
       #     The name of the snapshot to get.
       #     Format is `projects/{project}/snapshots/{snap}`.
       class GetSnapshotRequest; end
 
-      # Request for the `ListSnapshots` method.<br><br>
-      # <b>BETA:</b> This feature is part of a beta release. This API might be
-      # changed in backward-incompatible ways and is not recommended for production
-      # use. It is not subject to any SLA or deprecation policy.
+      # Request for the `ListSnapshots` method.
       # @!attribute [rw] project
       #   @return [String]
       #     The name of the project in which to list snapshots.
@@ -660,10 +637,7 @@ module Google
       #     should return the next page of data.
       class ListSnapshotsRequest; end
 
-      # Response for the `ListSnapshots` method.<br><br>
-      # <b>BETA:</b> This feature is part of a beta release. This API might be
-      # changed in backward-incompatible ways and is not recommended for production
-      # use. It is not subject to any SLA or deprecation policy.
+      # Response for the `ListSnapshots` method.
       # @!attribute [rw] snapshots
       #   @return [Array<Google::Cloud::PubSub::V1::Snapshot>]
       #     The resulting snapshots.
@@ -673,20 +647,14 @@ module Google
       #     request; this value should be passed in a new `ListSnapshotsRequest`.
       class ListSnapshotsResponse; end
 
-      # Request for the `DeleteSnapshot` method.<br><br>
-      # <b>BETA:</b> This feature is part of a beta release. This API might be
-      # changed in backward-incompatible ways and is not recommended for production
-      # use. It is not subject to any SLA or deprecation policy.
+      # Request for the `DeleteSnapshot` method.
       # @!attribute [rw] snapshot
       #   @return [String]
       #     The name of the snapshot to delete.
       #     Format is `projects/{project}/snapshots/{snap}`.
       class DeleteSnapshotRequest; end
 
-      # Request for the `Seek` method. <br><br>
-      # <b>BETA:</b> This feature is part of a beta release. This API might be
-      # changed in backward-incompatible ways and is not recommended for production
-      # use. It is not subject to any SLA or deprecation policy.
+      # Request for the `Seek` method.
       # @!attribute [rw] subscription
       #   @return [String]
       #     The subscription to affect.

data/lib/google/cloud/pubsub/v1/doc/google/type/expr.rb

@@ -0,0 +1,19 @@
+# Copyright 2019 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+
+module Google
+  module Type
+  end
+end

data/lib/google/cloud/pubsub/v1/publisher_client.rb

@@ -87,17 +87,26 @@ module Google
           ].freeze
 
 
+          PROJECT_PATH_TEMPLATE = Google::Gax::PathTemplate.new(
+            "projects/{project}"
+          )
+
+          private_constant :PROJECT_PATH_TEMPLATE
+
           TOPIC_PATH_TEMPLATE = Google::Gax::PathTemplate.new(
             "projects/{project}/topics/{topic}"
           )
 
           private_constant :TOPIC_PATH_TEMPLATE
 
-          PROJECT_PATH_TEMPLATE = Google::Gax::PathTemplate.new(
-            "projects/{project}"
-          )
-
-          private_constant :PROJECT_PATH_TEMPLATE
+          # Returns a fully-qualified project resource name string.
+          # @param project [String]
+          # @return [String]
+          def self.project_path project
+            PROJECT_PATH_TEMPLATE.render(
+              :"project" => project
+            )
+          end
 
           # Returns a fully-qualified topic resource name string.
           # @param project [String]
@@ -110,15 +119,6 @@ module Google
             )
           end
 
-          # Returns a fully-qualified project resource name string.
-          # @param project [String]
-          # @return [String]
-          def self.project_path project
-            PROJECT_PATH_TEMPLATE.render(
-              :"project" => project
-            )
-          end
-
           # @param credentials [Google::Auth::Credentials, String, Hash, GRPC::Core::Channel, GRPC::Core::ChannelCredentials, Proc]
           #   Provides the means for authenticating requests made by the client. This parameter can
           #   be many types.
@@ -341,6 +341,14 @@ module Google
           #   response, then no constraints are in effect.
           #   A hash of the same form as `Google::Cloud::PubSub::V1::MessageStoragePolicy`
           #   can also be provided.
+          # @param kms_key_name [String]
+          #   The resource name of the Cloud KMS CryptoKey to be used to protect access
+          #   to messages published on this topic.
+          #
+          #   The expected format is `projects/*/locations/*/keyRings/*/cryptoKeys/*`.
+          #   <b>EXPERIMENTAL:</b> This feature is part of a closed alpha release. This
+          #   API might be changed in backward-incompatible ways and is not recommended
+          #   for production use. It is not subject to any SLA or deprecation policy.
           # @param options [Google::Gax::CallOptions]
           #   Overrides the default settings for this call, e.g, timeout,
           #   retries, etc.
@@ -360,12 +368,14 @@ module Google
               name,
               labels: nil,
               message_storage_policy: nil,
+              kms_key_name: nil,
               options: nil,
               &block
             req = {
               name: name,
               labels: labels,
-              message_storage_policy: message_storage_policy
+              message_storage_policy: message_storage_policy,
+              kms_key_name: kms_key_name
             }.delete_if { |_, v| v.nil? }
             req = Google::Gax::to_proto(req, Google::Cloud::PubSub::V1::Topic)
             @create_topic.call(req, options, &block)
@@ -641,8 +651,7 @@ module Google
           #
           # @param resource [String]
           #   REQUIRED: The resource for which the policy is being specified.
-          #   `resource` is usually specified as a path. For example, a Project
-          #   resource is specified as `projects/{project}`.
+          #   See the operation documentation for the appropriate value for this field.
           # @param policy [Google::Iam::V1::Policy | Hash]
           #   REQUIRED: The complete policy to be applied to the `resource`. The size of
           #   the policy is limited to a few 10s of KB. An empty policy is a
@@ -687,8 +696,7 @@ module Google
           #
           # @param resource [String]
           #   REQUIRED: The resource for which the policy is being requested.
-          #   `resource` is usually specified as a path. For example, a Project
-          #   resource is specified as `projects/{project}`.
+          #   See the operation documentation for the appropriate value for this field.
           # @param options [Google::Gax::CallOptions]
           #   Overrides the default settings for this call, e.g, timeout,
           #   retries, etc.
@@ -719,10 +727,13 @@ module Google
           # If the resource does not exist, this will return an empty set of
           # permissions, not a NOT_FOUND error.
           #
+          # Note: This operation is designed to be used for building permission-aware
+          # UIs and command-line tools, not for authorization checking. This operation
+          # may "fail open" without warning.
+          #
           # @param resource [String]
           #   REQUIRED: The resource for which the policy detail is being requested.
-          #   `resource` is usually specified as a path. For example, a Project
-          #   resource is specified as `projects/{project}`.
+          #   See the operation documentation for the appropriate value for this field.
           # @param permissions [Array<String>]
           #   The set of permissions to check for the `resource`. Permissions with
           #   wildcards (such as '*' or 'storage.*') are not allowed. For more

data/lib/google/cloud/pubsub/v1/subscriber_client.rb

@@ -77,6 +77,18 @@ module Google
           ].freeze
 
 
+          PROJECT_PATH_TEMPLATE = Google::Gax::PathTemplate.new(
+            "projects/{project}"
+          )
+
+          private_constant :PROJECT_PATH_TEMPLATE
+
+          SNAPSHOT_PATH_TEMPLATE = Google::Gax::PathTemplate.new(
+            "projects/{project}/snapshots/{snapshot}"
+          )
+
+          private_constant :SNAPSHOT_PATH_TEMPLATE
+
           SUBSCRIPTION_PATH_TEMPLATE = Google::Gax::PathTemplate.new(
             "projects/{project}/subscriptions/{subscription}"
           )
@@ -89,17 +101,25 @@ module Google
 
           private_constant :TOPIC_PATH_TEMPLATE
 
-          PROJECT_PATH_TEMPLATE = Google::Gax::PathTemplate.new(
-            "projects/{project}"
-          )
-
-          private_constant :PROJECT_PATH_TEMPLATE
-
-          SNAPSHOT_PATH_TEMPLATE = Google::Gax::PathTemplate.new(
-            "projects/{project}/snapshots/{snapshot}"
-          )
+          # Returns a fully-qualified project resource name string.
+          # @param project [String]
+          # @return [String]
+          def self.project_path project
+            PROJECT_PATH_TEMPLATE.render(
+              :"project" => project
+            )
+          end
 
-          private_constant :SNAPSHOT_PATH_TEMPLATE
+          # Returns a fully-qualified snapshot resource name string.
+          # @param project [String]
+          # @param snapshot [String]
+          # @return [String]
+          def self.snapshot_path project, snapshot
+            SNAPSHOT_PATH_TEMPLATE.render(
+              :"project" => project,
+              :"snapshot" => snapshot
+            )
+          end
 
           # Returns a fully-qualified subscription resource name string.
           # @param project [String]
@@ -123,26 +143,6 @@ module Google
             )
           end
 
-          # Returns a fully-qualified project resource name string.
-          # @param project [String]
-          # @return [String]
-          def self.project_path project
-            PROJECT_PATH_TEMPLATE.render(
-              :"project" => project
-            )
-          end
-
-          # Returns a fully-qualified snapshot resource name string.
-          # @param project [String]
-          # @param snapshot [String]
-          # @return [String]
-          def self.snapshot_path project, snapshot
-            SNAPSHOT_PATH_TEMPLATE.render(
-              :"project" => project,
-              :"snapshot" => snapshot
-            )
-          end
-
           # @param credentials [Google::Auth::Credentials, String, Hash, GRPC::Core::Channel, GRPC::Core::ChannelCredentials, Proc]
           #   Provides the means for authenticating requests made by the client. This parameter can
           #   be many types.
@@ -463,20 +463,13 @@ module Google
           #   <a
           #   href="https://cloud.google.com/pubsub/docs/replay-overview#seek_to_a_time">
           #   Seek to a timestamp</a>.
-          #   <br><br>
-          #   <b>BETA:</b> This feature is part of a beta release. This API might be
-          #   changed in backward-incompatible ways and is not recommended for production
-          #   use. It is not subject to any SLA or deprecation policy.
           # @param message_retention_duration [Google::Protobuf::Duration | Hash]
           #   How long to retain unacknowledged messages in the subscription's backlog,
           #   from the moment a message is published.
           #   If `retain_acked_messages` is true, then this also configures the retention
           #   of acknowledged messages, and thus configures how far back in time a `Seek`
           #   can be done. Defaults to 7 days. Cannot be more than 7 days or less than 10
-          #   minutes.<br><br>
-          #   <b>BETA:</b> This feature is part of a beta release. This API might be
-          #   changed in backward-incompatible ways and is not recommended for production
-          #   use. It is not subject to any SLA or deprecation policy.
+          #   minutes.
           #   A hash of the same form as `Google::Protobuf::Duration`
           #   can also be provided.
           # @param labels [Hash{String => String}]
@@ -497,9 +490,6 @@ module Google
           #   operations on the subscription. If `expiration_policy` is not set, a
           #   *default policy* with `ttl` of 31 days will be used. The minimum allowed
           #   value for `expiration_policy.ttl` is 1 day.
-          #   <b>BETA:</b> This feature is part of a beta release. This API might be
-          #   changed in backward-incompatible ways and is not recommended for production
-          #   use. It is not subject to any SLA or deprecation policy.
           #   A hash of the same form as `Google::Cloud::PubSub::V1::ExpirationPolicy`
           #   can also be provided.
           # @param options [Google::Gax::CallOptions]
@@ -958,10 +948,7 @@ module Google
           # operations, which allow
           # you to manage message acknowledgments in bulk. That is, you can set the
           # acknowledgment state of messages in an existing subscription to the state
-          # captured by a snapshot.<br><br>
-          # <b>BETA:</b> This feature is part of a beta release. This API might be
-          # changed in backward-incompatible ways and is not recommended for production
-          # use. It is not subject to any SLA or deprecation policy.
+          # captured by a snapshot.
           #
           # @param project [String]
           #   The name of the project in which to list snapshots.
@@ -1022,11 +1009,7 @@ module Google
           # you to manage message acknowledgments in bulk. That is, you can set the
           # acknowledgment state of messages in an existing subscription to the state
           # captured by a snapshot.
-          # <br><br>
-          # <b>BETA:</b> This feature is part of a beta release. This API might be
-          # changed in backward-incompatible ways and is not recommended for production
-          # use. It is not subject to any SLA or deprecation policy.<br><br>
-          # If the snapshot already exists, returns `ALREADY_EXISTS`.
+          # <br><br>If the snapshot already exists, returns `ALREADY_EXISTS`.
           # If the requested subscription doesn't exist, returns `NOT_FOUND`.
           # If the backlog in the subscription is too old -- and the resulting snapshot
           # would expire in less than 1 hour -- then `FAILED_PRECONDITION` is returned.
@@ -1096,11 +1079,7 @@ module Google
           # operations, which allow
           # you to manage message acknowledgments in bulk. That is, you can set the
           # acknowledgment state of messages in an existing subscription to the state
-          # captured by a snapshot.<br><br>
-          # <b>BETA:</b> This feature is part of a beta release. This API might be
-          # changed in backward-incompatible ways and is not recommended for production
-          # use. It is not subject to any SLA or deprecation policy.
-          # Note that certain properties of a snapshot are not modifiable.
+          # captured by a snapshot.
           #
           # @param snapshot [Google::Cloud::PubSub::V1::Snapshot | Hash]
           #   The updated snapshot object.
@@ -1150,9 +1129,6 @@ module Google
           # you to manage message acknowledgments in bulk. That is, you can set the
           # acknowledgment state of messages in an existing subscription to the state
           # captured by a snapshot.<br><br>
-          # <b>BETA:</b> This feature is part of a beta release. This API might be
-          # changed in backward-incompatible ways and is not recommended for production
-          # use. It is not subject to any SLA or deprecation policy.
           # When the snapshot is deleted, all messages retained in the snapshot
           # are immediately dropped. After a snapshot is deleted, a new one may be
           # created with the same name, but the new one has no association with the old
@@ -1194,10 +1170,7 @@ module Google
           # you to manage message acknowledgments in bulk. That is, you can set the
           # acknowledgment state of messages in an existing subscription to the state
           # captured by a snapshot. Note that both the subscription and the snapshot
-          # must be on the same topic.<br><br>
-          # <b>BETA:</b> This feature is part of a beta release. This API might be
-          # changed in backward-incompatible ways and is not recommended for production
-          # use. It is not subject to any SLA or deprecation policy.
+          # must be on the same topic.
           #
           # @param subscription [String]
           #   The subscription to affect.
@@ -1254,8 +1227,7 @@ module Google
           #
           # @param resource [String]
           #   REQUIRED: The resource for which the policy is being specified.
-          #   `resource` is usually specified as a path. For example, a Project
-          #   resource is specified as `projects/{project}`.
+          #   See the operation documentation for the appropriate value for this field.
           # @param policy [Google::Iam::V1::Policy | Hash]
           #   REQUIRED: The complete policy to be applied to the `resource`. The size of
           #   the policy is limited to a few 10s of KB. An empty policy is a
@@ -1300,8 +1272,7 @@ module Google
           #
           # @param resource [String]
           #   REQUIRED: The resource for which the policy is being requested.
-          #   `resource` is usually specified as a path. For example, a Project
-          #   resource is specified as `projects/{project}`.
+          #   See the operation documentation for the appropriate value for this field.
           # @param options [Google::Gax::CallOptions]
           #   Overrides the default settings for this call, e.g, timeout,
           #   retries, etc.
@@ -1332,10 +1303,13 @@ module Google
           # If the resource does not exist, this will return an empty set of
           # permissions, not a NOT_FOUND error.
           #
+          # Note: This operation is designed to be used for building permission-aware
+          # UIs and command-line tools, not for authorization checking. This operation
+          # may "fail open" without warning.
+          #
           # @param resource [String]
           #   REQUIRED: The resource for which the policy detail is being requested.
-          #   `resource` is usually specified as a path. For example, a Project
-          #   resource is specified as `projects/{project}`.
+          #   See the operation documentation for the appropriate value for this field.
           # @param permissions [Array<String>]
           #   The set of permissions to check for the `resource`. Permissions with
           #   wildcards (such as '*' or 'storage.*') are not allowed. For more

data/lib/google/cloud/pubsub/version.rb

@@ -16,7 +16,7 @@
 module Google
   module Cloud
     module PubSub
-      VERSION = "0.35.0".freeze
+      VERSION = "0.36.0".freeze
     end
 
     Pubsub = PubSub unless const_defined? :Pubsub

data/lib/google/pubsub/v1/pubsub_pb.rb

@@ -5,6 +5,7 @@
 require 'google/protobuf'
 
 require 'google/api/annotations_pb'
+require 'google/api/resource_pb'
 require 'google/protobuf/duration_pb'
 require 'google/protobuf/empty_pb'
 require 'google/protobuf/field_mask_pb'
@@ -17,6 +18,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
     optional :name, :string, 1
     map :labels, :string, :string, 2
     optional :message_storage_policy, :message, 3, "google.pubsub.v1.MessageStoragePolicy"
+    optional :kms_key_name, :string, 5
   end
   add_message "google.pubsub.v1.PubsubMessage" do
     optional :data, :bytes, 1

data/lib/google/pubsub/v1/pubsub_services_pb.rb

@@ -61,10 +61,7 @@ module Google::Cloud::PubSub::V1
       # operations, which allow
       # you to manage message acknowledgments in bulk. That is, you can set the
       # acknowledgment state of messages in an existing subscription to the state
-      # captured by a snapshot.<br><br>
-      # <b>BETA:</b> This feature is part of a beta release. This API might be
-      # changed in backward-incompatible ways and is not recommended for production
-      # use. It is not subject to any SLA or deprecation policy.
+      # captured by a snapshot.
       rpc :ListTopicSnapshots, ListTopicSnapshotsRequest, ListTopicSnapshotsResponse
       # Deletes the topic with the given name. Returns `NOT_FOUND` if the topic
       # does not exist. After a topic is deleted, a new topic may be created with
@@ -152,20 +149,14 @@ module Google::Cloud::PubSub::V1
       # <a href="https://cloud.google.com/pubsub/docs/replay-overview">Seek</a>
       # operations, which allow you to manage message acknowledgments in bulk. That
       # is, you can set the acknowledgment state of messages in an existing
-      # subscription to the state captured by a snapshot.<br><br>
-      # <b>BETA:</b> This feature is part of a beta release. This API might be
-      # changed in backward-incompatible ways and is not recommended for production
-      # use. It is not subject to any SLA or deprecation policy.
+      # subscription to the state captured by a snapshot.
       rpc :GetSnapshot, GetSnapshotRequest, Snapshot
       # Lists the existing snapshots. Snapshots are used in
       # <a href="https://cloud.google.com/pubsub/docs/replay-overview">Seek</a>
       # operations, which allow
       # you to manage message acknowledgments in bulk. That is, you can set the
       # acknowledgment state of messages in an existing subscription to the state
-      # captured by a snapshot.<br><br>
-      # <b>BETA:</b> This feature is part of a beta release. This API might be
-      # changed in backward-incompatible ways and is not recommended for production
-      # use. It is not subject to any SLA or deprecation policy.
+      # captured by a snapshot.
       rpc :ListSnapshots, ListSnapshotsRequest, ListSnapshotsResponse
       # Creates a snapshot from the requested subscription. Snapshots are used in
       # <a href="https://cloud.google.com/pubsub/docs/replay-overview">Seek</a>
@@ -173,11 +164,7 @@ module Google::Cloud::PubSub::V1
       # you to manage message acknowledgments in bulk. That is, you can set the
       # acknowledgment state of messages in an existing subscription to the state
       # captured by a snapshot.
-      # <br><br>
-      # <b>BETA:</b> This feature is part of a beta release. This API might be
-      # changed in backward-incompatible ways and is not recommended for production
-      # use. It is not subject to any SLA or deprecation policy.<br><br>
-      # If the snapshot already exists, returns `ALREADY_EXISTS`.
+      # <br><br>If the snapshot already exists, returns `ALREADY_EXISTS`.
       # If the requested subscription doesn't exist, returns `NOT_FOUND`.
       # If the backlog in the subscription is too old -- and the resulting snapshot
       # would expire in less than 1 hour -- then `FAILED_PRECONDITION` is returned.
@@ -195,11 +182,7 @@ module Google::Cloud::PubSub::V1
       # operations, which allow
       # you to manage message acknowledgments in bulk. That is, you can set the
       # acknowledgment state of messages in an existing subscription to the state
-      # captured by a snapshot.<br><br>
-      # <b>BETA:</b> This feature is part of a beta release. This API might be
-      # changed in backward-incompatible ways and is not recommended for production
-      # use. It is not subject to any SLA or deprecation policy.
-      # Note that certain properties of a snapshot are not modifiable.
+      # captured by a snapshot.
       rpc :UpdateSnapshot, UpdateSnapshotRequest, Snapshot
       # Removes an existing snapshot. Snapshots are used in
       # <a href="https://cloud.google.com/pubsub/docs/replay-overview">Seek</a>
@@ -207,9 +190,6 @@ module Google::Cloud::PubSub::V1
       # you to manage message acknowledgments in bulk. That is, you can set the
       # acknowledgment state of messages in an existing subscription to the state
       # captured by a snapshot.<br><br>
-      # <b>BETA:</b> This feature is part of a beta release. This API might be
-      # changed in backward-incompatible ways and is not recommended for production
-      # use. It is not subject to any SLA or deprecation policy.
       # When the snapshot is deleted, all messages retained in the snapshot
       # are immediately dropped. After a snapshot is deleted, a new one may be
       # created with the same name, but the new one has no association with the old
@@ -222,10 +202,7 @@ module Google::Cloud::PubSub::V1
       # you to manage message acknowledgments in bulk. That is, you can set the
       # acknowledgment state of messages in an existing subscription to the state
       # captured by a snapshot. Note that both the subscription and the snapshot
-      # must be on the same topic.<br><br>
-      # <b>BETA:</b> This feature is part of a beta release. This API might be
-      # changed in backward-incompatible ways and is not recommended for production
-      # use. It is not subject to any SLA or deprecation policy.
+      # must be on the same topic.
       rpc :Seek, SeekRequest, SeekResponse
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: google-cloud-pubsub
 version: !ruby/object:Gem::Version
-  version: 0.35.0
+  version: 0.36.0
 platform: ruby
 authors:
 - Mike Moore
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-04-25 00:00:00.000000000 Z
+date: 2019-05-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: google-cloud-core
@@ -39,6 +39,26 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '1.3'
+- !ruby/object:Gem::Dependency
+  name: googleapis-common-protos
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.3.9
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.3.9
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '2.0'
 - !ruby/object:Gem::Dependency
   name: grpc-google-iam-v1
   requirement: !ruby/object:Gem::Requirement
@@ -258,6 +278,7 @@ files:
 - lib/google/cloud/pubsub/v1/doc/google/protobuf/field_mask.rb
 - lib/google/cloud/pubsub/v1/doc/google/protobuf/timestamp.rb
 - lib/google/cloud/pubsub/v1/doc/google/pubsub/v1/pubsub.rb
+- lib/google/cloud/pubsub/v1/doc/google/type/expr.rb
 - lib/google/cloud/pubsub/v1/publisher_client.rb
 - lib/google/cloud/pubsub/v1/publisher_client_config.json
 - lib/google/cloud/pubsub/v1/subscriber_client.rb