google-cloud-security-private_ca-v1 0.9.0 → 0.10.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/AUTHENTICATION.md +72 -101
- data/lib/google/cloud/security/private_ca/v1/certificate_authority_service/client.rb +34 -8
- data/lib/google/cloud/security/private_ca/v1/certificate_authority_service/operations.rb +28 -6
- data/lib/google/cloud/security/private_ca/v1/certificate_authority_service/rest/client.rb +36 -7
- data/lib/google/cloud/security/private_ca/v1/certificate_authority_service/rest/operations.rb +33 -8
- data/lib/google/cloud/security/private_ca/v1/certificate_authority_service/rest/service_stub.rb +14 -2
- data/lib/google/cloud/security/private_ca/v1/version.rb +1 -1
- data/proto_docs/google/api/client.rb +14 -0
- metadata +9 -9
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 27f616641563821eaa3a6e4d017cf54eb45ec81d0c5ff95fbf0fe02da9bde12d
|
|
4
|
+
data.tar.gz: 77939d4e9509ce60b3adecd187d7826695c87812aa4d6381a7f1e0a1b1db6cf6
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 448e8d3442a7cc5cbdf13329df0996c2e98c7d70b04c69f492afedda384a3415bad973ad470f72e9a41cb6abfe347c2c5a6d413d21a655d03ba241f708d18240
|
|
7
|
+
data.tar.gz: 4d0012b595bbf57ab8ba5ddf9fd6cc46234b18a8b29d7aa9fca9aeff0d66ca4956604411ff22238e90a4e78e51796a2512b5e7e35309adf99caea6a741ec4f86
|
data/AUTHENTICATION.md
CHANGED
|
@@ -1,151 +1,122 @@
|
|
|
1
1
|
# Authentication
|
|
2
2
|
|
|
3
|
-
|
|
4
|
-
[
|
|
5
|
-
|
|
6
|
-
[Google Cloud Platform environments](#google-cloud-platform-environments) the
|
|
7
|
-
credentials will be discovered automatically. When running on other
|
|
8
|
-
environments, the Service Account credentials can be specified by providing the
|
|
9
|
-
path to the
|
|
10
|
-
[JSON keyfile](https://cloud.google.com/iam/docs/managing-service-account-keys)
|
|
11
|
-
for the account (or the JSON itself) in
|
|
12
|
-
[environment variables](#environment-variables). Additionally, Cloud SDK
|
|
13
|
-
credentials can also be discovered automatically, but this is only recommended
|
|
14
|
-
during development.
|
|
3
|
+
The recommended way to authenticate to the google-cloud-security-private_ca-v1 library is to use
|
|
4
|
+
[Application Default Credentials (ADC)](https://cloud.google.com/docs/authentication/application-default-credentials).
|
|
5
|
+
To review all of your authentication options, see [Credentials lookup](#credential-lookup).
|
|
15
6
|
|
|
16
7
|
## Quickstart
|
|
17
8
|
|
|
18
|
-
|
|
19
|
-
|
|
9
|
+
The following example shows how to set up authentication for a local development
|
|
10
|
+
environment with your user credentials.
|
|
20
11
|
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
```
|
|
24
|
-
|
|
25
|
-
3. Initialize the client.
|
|
12
|
+
**NOTE:** This method is _not_ recommended for running in production. User credentials
|
|
13
|
+
should be used only during development.
|
|
26
14
|
|
|
27
|
-
|
|
28
|
-
|
|
15
|
+
1. [Download and install the Google Cloud CLI](https://cloud.google.com/sdk).
|
|
16
|
+
2. Set up a local ADC file with your user credentials:
|
|
29
17
|
|
|
30
|
-
|
|
18
|
+
```sh
|
|
19
|
+
gcloud auth application-default login
|
|
31
20
|
```
|
|
32
21
|
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
The google-cloud-security-private_ca-v1 library aims to make authentication
|
|
36
|
-
as simple as possible, and provides several mechanisms to configure your system
|
|
37
|
-
without requiring **Service Account Credentials** directly in code.
|
|
38
|
-
|
|
39
|
-
**Credentials** are discovered in the following order:
|
|
40
|
-
|
|
41
|
-
1. Specify credentials in method arguments
|
|
42
|
-
2. Specify credentials in configuration
|
|
43
|
-
3. Discover credentials path in environment variables
|
|
44
|
-
4. Discover credentials JSON in environment variables
|
|
45
|
-
5. Discover credentials file in the Cloud SDK's path
|
|
46
|
-
6. Discover GCP credentials
|
|
47
|
-
|
|
48
|
-
### Google Cloud Platform environments
|
|
22
|
+
3. Write code as if already authenticated.
|
|
49
23
|
|
|
50
|
-
|
|
51
|
-
|
|
52
|
-
Functions (GCF) and Cloud Run, **Credentials** are discovered automatically.
|
|
53
|
-
Code should be written as if already authenticated.
|
|
24
|
+
For more information about setting up authentication for a local development environment, see
|
|
25
|
+
[Set up Application Default Credentials](https://cloud.google.com/docs/authentication/provide-credentials-adc#local-dev).
|
|
54
26
|
|
|
55
|
-
|
|
27
|
+
## Credential Lookup
|
|
56
28
|
|
|
57
|
-
The
|
|
58
|
-
|
|
59
|
-
|
|
60
|
-
|
|
61
|
-
**Credentials JSON** file can be stored in the environment variable, or the
|
|
62
|
-
**Credentials JSON** itself can be stored for environments such as Docker
|
|
63
|
-
containers where writing files is difficult or not encouraged.
|
|
29
|
+
The google-cloud-security-private_ca-v1 library provides several mechanisms to configure your system.
|
|
30
|
+
Generally, using Application Default Credentials to facilitate automatic
|
|
31
|
+
credentials discovery is the easist method. But if you need to explicitly specify
|
|
32
|
+
credentials, there are several methods available to you.
|
|
64
33
|
|
|
65
|
-
|
|
66
|
-
checks for credentials are configured on the service Credentials class (such as
|
|
67
|
-
{::Google::Cloud::Security::PrivateCA::V1::CertificateAuthorityService::Credentials}):
|
|
34
|
+
Credentials are accepted in the following ways, in the following order or precedence:
|
|
68
35
|
|
|
69
|
-
|
|
70
|
-
|
|
71
|
-
|
|
72
|
-
|
|
73
|
-
|
|
36
|
+
1. Credentials specified in method arguments
|
|
37
|
+
2. Credentials specified in configuration
|
|
38
|
+
3. Credentials pointed to or included in environment variables
|
|
39
|
+
4. Credentials found in local ADC file
|
|
40
|
+
5. Credentials returned by the metadata server for the attached service account (GCP)
|
|
74
41
|
|
|
75
|
-
|
|
76
|
-
require "google/cloud/security/private_ca/v1"
|
|
77
|
-
|
|
78
|
-
ENV["PRIVATE_CA_CREDENTIALS"] = "path/to/keyfile.json"
|
|
42
|
+
### Configuration
|
|
79
43
|
|
|
80
|
-
client
|
|
81
|
-
|
|
44
|
+
You can configure a path to a JSON credentials file, either for an individual client object or
|
|
45
|
+
globally, for all client objects. The JSON file can contain credentials created for
|
|
46
|
+
[workload identity federation](https://cloud.google.com/iam/docs/workload-identity-federation),
|
|
47
|
+
[workforce identity federation](https://cloud.google.com/iam/docs/workforce-identity-federation), or a
|
|
48
|
+
[service account key](https://cloud.google.com/docs/authentication/provide-credentials-adc#local-key).
|
|
82
49
|
|
|
83
|
-
|
|
50
|
+
Note: Service account keys are a security risk if not managed correctly. You should
|
|
51
|
+
[choose a more secure alternative to service account keys](https://cloud.google.com/docs/authentication#auth-decision-tree)
|
|
52
|
+
whenever possible.
|
|
84
53
|
|
|
85
|
-
|
|
86
|
-
it in an environment variable. Either on an individual client initialization:
|
|
54
|
+
To configure a credentials file for an individual client initialization:
|
|
87
55
|
|
|
88
56
|
```ruby
|
|
89
57
|
require "google/cloud/security/private_ca/v1"
|
|
90
58
|
|
|
91
59
|
client = ::Google::Cloud::Security::PrivateCA::V1::CertificateAuthorityService::Client.new do |config|
|
|
92
|
-
config.credentials = "path/to/
|
|
60
|
+
config.credentials = "path/to/credentialfile.json"
|
|
93
61
|
end
|
|
94
62
|
```
|
|
95
63
|
|
|
96
|
-
|
|
64
|
+
To configure a credentials file globally for all clients:
|
|
97
65
|
|
|
98
66
|
```ruby
|
|
99
67
|
require "google/cloud/security/private_ca/v1"
|
|
100
68
|
|
|
101
69
|
::Google::Cloud::Security::PrivateCA::V1::CertificateAuthorityService::Client.configure do |config|
|
|
102
|
-
config.credentials = "path/to/
|
|
70
|
+
config.credentials = "path/to/credentialfile.json"
|
|
103
71
|
end
|
|
104
72
|
|
|
105
73
|
client = ::Google::Cloud::Security::PrivateCA::V1::CertificateAuthorityService::Client.new
|
|
106
74
|
```
|
|
107
75
|
|
|
108
|
-
###
|
|
76
|
+
### Environment Variables
|
|
109
77
|
|
|
110
|
-
|
|
111
|
-
|
|
112
|
-
|
|
78
|
+
You can also use an environment variable to provide a JSON credentials file.
|
|
79
|
+
The environment variable can contain a path to the credentials file or, for
|
|
80
|
+
environments such as Docker containers where writing files is not encouraged,
|
|
81
|
+
you can include the credentials file itself.
|
|
113
82
|
|
|
114
|
-
|
|
83
|
+
The JSON file can contain credentials created for
|
|
84
|
+
[workload identity federation](https://cloud.google.com/iam/docs/workload-identity-federation),
|
|
85
|
+
[workforce identity federation](https://cloud.google.com/iam/docs/workforce-identity-federation), or a
|
|
86
|
+
[service account key](https://cloud.google.com/docs/authentication/provide-credentials-adc#local-key).
|
|
115
87
|
|
|
116
|
-
|
|
117
|
-
|
|
118
|
-
|
|
88
|
+
Note: Service account keys are a security risk if not managed correctly. You should
|
|
89
|
+
[choose a more secure alternative to service account keys](https://cloud.google.com/docs/authentication#auth-decision-tree)
|
|
90
|
+
whenever possible.
|
|
91
|
+
|
|
92
|
+
The environment variables that google-cloud-security-private_ca-v1
|
|
93
|
+
checks for credentials are:
|
|
119
94
|
|
|
120
|
-
|
|
121
|
-
*
|
|
95
|
+
* `GOOGLE_CLOUD_CREDENTIALS` - Path to JSON file, or JSON contents
|
|
96
|
+
* `GOOGLE_APPLICATION_CREDENTIALS` - Path to JSON file
|
|
122
97
|
|
|
123
|
-
|
|
98
|
+
```ruby
|
|
99
|
+
require "google/cloud/security/private_ca/v1"
|
|
124
100
|
|
|
125
|
-
|
|
126
|
-
connect to the APIs. You will use the **JSON key file** to
|
|
127
|
-
connect to most services with google-cloud-security-private_ca-v1.
|
|
101
|
+
ENV["GOOGLE_APPLICATION_CREDENTIALS"] = "path/to/credentialfile.json"
|
|
128
102
|
|
|
129
|
-
|
|
130
|
-
|
|
131
|
-
need a Google Developers service account.
|
|
103
|
+
client = ::Google::Cloud::Security::PrivateCA::V1::CertificateAuthorityService::Client.new
|
|
104
|
+
```
|
|
132
105
|
|
|
133
|
-
|
|
134
|
-
2. Create a new project or click on an existing project.
|
|
135
|
-
3. Activate the menu in the upper left and select **APIs & Services**. From
|
|
136
|
-
here, you will enable the APIs that your application requires.
|
|
106
|
+
### Local ADC file
|
|
137
107
|
|
|
138
|
-
|
|
108
|
+
You can set up a local ADC file with your user credentials for authentication during
|
|
109
|
+
development. If credentials are not provided in code or in environment variables,
|
|
110
|
+
then the local ADC credentials are discovered.
|
|
139
111
|
|
|
140
|
-
|
|
112
|
+
Follow the steps in [Quickstart](#quickstart) to set up a local ADC file.
|
|
141
113
|
|
|
142
|
-
|
|
143
|
-
"Service account" to be guided through downloading a new JSON key file.
|
|
114
|
+
### Google Cloud Platform environments
|
|
144
115
|
|
|
145
|
-
|
|
146
|
-
|
|
147
|
-
|
|
148
|
-
|
|
116
|
+
When running on Google Cloud Platform (GCP), including Google Compute Engine
|
|
117
|
+
(GCE), Google Kubernetes Engine (GKE), Google App Engine (GAE), Google Cloud
|
|
118
|
+
Functions (GCF) and Cloud Run, credentials are retrieved from the attached
|
|
119
|
+
service account automatically. Code should be written as if already authenticated.
|
|
149
120
|
|
|
150
|
-
|
|
151
|
-
|
|
121
|
+
For more information, see
|
|
122
|
+
[Set up ADC for Google Cloud services](https://cloud.google.com/docs/authentication/provide-credentials-adc#attached-sa).
|
|
@@ -35,6 +35,9 @@ module Google
|
|
|
35
35
|
# manages private certificate authorities and issued certificates.
|
|
36
36
|
#
|
|
37
37
|
class Client
|
|
38
|
+
# @private
|
|
39
|
+
DEFAULT_ENDPOINT_TEMPLATE = "privateca.$UNIVERSE_DOMAIN$"
|
|
40
|
+
|
|
38
41
|
include Paths
|
|
39
42
|
|
|
40
43
|
# @private
|
|
@@ -100,6 +103,15 @@ module Google
|
|
|
100
103
|
@config
|
|
101
104
|
end
|
|
102
105
|
|
|
106
|
+
##
|
|
107
|
+
# The effective universe domain
|
|
108
|
+
#
|
|
109
|
+
# @return [String]
|
|
110
|
+
#
|
|
111
|
+
def universe_domain
|
|
112
|
+
@certificate_authority_service_stub.universe_domain
|
|
113
|
+
end
|
|
114
|
+
|
|
103
115
|
##
|
|
104
116
|
# Create a new CertificateAuthorityService client object.
|
|
105
117
|
#
|
|
@@ -133,8 +145,9 @@ module Google
|
|
|
133
145
|
credentials = @config.credentials
|
|
134
146
|
# Use self-signed JWT if the endpoint is unchanged from default,
|
|
135
147
|
# but only if the default endpoint does not have a region prefix.
|
|
136
|
-
enable_self_signed_jwt = @config.endpoint
|
|
137
|
-
|
|
148
|
+
enable_self_signed_jwt = @config.endpoint.nil? ||
|
|
149
|
+
(@config.endpoint == Configuration::DEFAULT_ENDPOINT &&
|
|
150
|
+
!@config.endpoint.split(".").first.include?("-"))
|
|
138
151
|
credentials ||= Credentials.default scope: @config.scope,
|
|
139
152
|
enable_self_signed_jwt: enable_self_signed_jwt
|
|
140
153
|
if credentials.is_a?(::String) || credentials.is_a?(::Hash)
|
|
@@ -147,24 +160,29 @@ module Google
|
|
|
147
160
|
config.credentials = credentials
|
|
148
161
|
config.quota_project = @quota_project_id
|
|
149
162
|
config.endpoint = @config.endpoint
|
|
163
|
+
config.universe_domain = @config.universe_domain
|
|
150
164
|
end
|
|
151
165
|
|
|
152
166
|
@location_client = Google::Cloud::Location::Locations::Client.new do |config|
|
|
153
167
|
config.credentials = credentials
|
|
154
168
|
config.quota_project = @quota_project_id
|
|
155
169
|
config.endpoint = @config.endpoint
|
|
170
|
+
config.universe_domain = @config.universe_domain
|
|
156
171
|
end
|
|
157
172
|
|
|
158
173
|
@iam_policy_client = Google::Iam::V1::IAMPolicy::Client.new do |config|
|
|
159
174
|
config.credentials = credentials
|
|
160
175
|
config.quota_project = @quota_project_id
|
|
161
176
|
config.endpoint = @config.endpoint
|
|
177
|
+
config.universe_domain = @config.universe_domain
|
|
162
178
|
end
|
|
163
179
|
|
|
164
180
|
@certificate_authority_service_stub = ::Gapic::ServiceStub.new(
|
|
165
181
|
::Google::Cloud::Security::PrivateCA::V1::CertificateAuthorityService::Stub,
|
|
166
|
-
credentials:
|
|
167
|
-
endpoint:
|
|
182
|
+
credentials: credentials,
|
|
183
|
+
endpoint: @config.endpoint,
|
|
184
|
+
endpoint_template: DEFAULT_ENDPOINT_TEMPLATE,
|
|
185
|
+
universe_domain: @config.universe_domain,
|
|
168
186
|
channel_args: @config.channel_args,
|
|
169
187
|
interceptors: @config.interceptors,
|
|
170
188
|
channel_pool_config: @config.channel_pool
|
|
@@ -3369,9 +3387,9 @@ module Google
|
|
|
3369
3387
|
# end
|
|
3370
3388
|
#
|
|
3371
3389
|
# @!attribute [rw] endpoint
|
|
3372
|
-
#
|
|
3373
|
-
#
|
|
3374
|
-
# @return [::String]
|
|
3390
|
+
# A custom service endpoint, as a hostname or hostname:port. The default is
|
|
3391
|
+
# nil, indicating to use the default endpoint in the current universe domain.
|
|
3392
|
+
# @return [::String,nil]
|
|
3375
3393
|
# @!attribute [rw] credentials
|
|
3376
3394
|
# Credentials to send with calls. You may provide any of the following types:
|
|
3377
3395
|
# * (`String`) The path to a service account key file in JSON format
|
|
@@ -3417,13 +3435,20 @@ module Google
|
|
|
3417
3435
|
# @!attribute [rw] quota_project
|
|
3418
3436
|
# A separate project against which to charge quota.
|
|
3419
3437
|
# @return [::String]
|
|
3438
|
+
# @!attribute [rw] universe_domain
|
|
3439
|
+
# The universe domain within which to make requests. This determines the
|
|
3440
|
+
# default endpoint URL. The default value of nil uses the environment
|
|
3441
|
+
# universe (usually the default "googleapis.com" universe).
|
|
3442
|
+
# @return [::String,nil]
|
|
3420
3443
|
#
|
|
3421
3444
|
class Configuration
|
|
3422
3445
|
extend ::Gapic::Config
|
|
3423
3446
|
|
|
3447
|
+
# @private
|
|
3448
|
+
# The endpoint specific to the default "googleapis.com" universe. Deprecated.
|
|
3424
3449
|
DEFAULT_ENDPOINT = "privateca.googleapis.com"
|
|
3425
3450
|
|
|
3426
|
-
config_attr :endpoint,
|
|
3451
|
+
config_attr :endpoint, nil, ::String, nil
|
|
3427
3452
|
config_attr :credentials, nil do |value|
|
|
3428
3453
|
allowed = [::String, ::Hash, ::Proc, ::Symbol, ::Google::Auth::Credentials, ::Signet::OAuth2::Client, nil]
|
|
3429
3454
|
allowed += [::GRPC::Core::Channel, ::GRPC::Core::ChannelCredentials] if defined? ::GRPC
|
|
@@ -3438,6 +3463,7 @@ module Google
|
|
|
3438
3463
|
config_attr :metadata, nil, ::Hash, nil
|
|
3439
3464
|
config_attr :retry_policy, nil, ::Hash, ::Proc, nil
|
|
3440
3465
|
config_attr :quota_project, nil, ::String, nil
|
|
3466
|
+
config_attr :universe_domain, nil, ::String, nil
|
|
3441
3467
|
|
|
3442
3468
|
# @private
|
|
3443
3469
|
def initialize parent_config = nil
|
|
@@ -27,6 +27,9 @@ module Google
|
|
|
27
27
|
module CertificateAuthorityService
|
|
28
28
|
# Service that implements Longrunning Operations API.
|
|
29
29
|
class Operations
|
|
30
|
+
# @private
|
|
31
|
+
DEFAULT_ENDPOINT_TEMPLATE = "privateca.$UNIVERSE_DOMAIN$"
|
|
32
|
+
|
|
30
33
|
# @private
|
|
31
34
|
attr_reader :operations_stub
|
|
32
35
|
|
|
@@ -61,6 +64,15 @@ module Google
|
|
|
61
64
|
@config
|
|
62
65
|
end
|
|
63
66
|
|
|
67
|
+
##
|
|
68
|
+
# The effective universe domain
|
|
69
|
+
#
|
|
70
|
+
# @return [String]
|
|
71
|
+
#
|
|
72
|
+
def universe_domain
|
|
73
|
+
@operations_stub.universe_domain
|
|
74
|
+
end
|
|
75
|
+
|
|
64
76
|
##
|
|
65
77
|
# Create a new Operations client object.
|
|
66
78
|
#
|
|
@@ -91,8 +103,10 @@ module Google
|
|
|
91
103
|
|
|
92
104
|
@operations_stub = ::Gapic::ServiceStub.new(
|
|
93
105
|
::Google::Longrunning::Operations::Stub,
|
|
94
|
-
credentials:
|
|
95
|
-
endpoint:
|
|
106
|
+
credentials: credentials,
|
|
107
|
+
endpoint: @config.endpoint,
|
|
108
|
+
endpoint_template: DEFAULT_ENDPOINT_TEMPLATE,
|
|
109
|
+
universe_domain: @config.universe_domain,
|
|
96
110
|
channel_args: @config.channel_args,
|
|
97
111
|
interceptors: @config.interceptors,
|
|
98
112
|
channel_pool_config: @config.channel_pool
|
|
@@ -614,9 +628,9 @@ module Google
|
|
|
614
628
|
# end
|
|
615
629
|
#
|
|
616
630
|
# @!attribute [rw] endpoint
|
|
617
|
-
#
|
|
618
|
-
#
|
|
619
|
-
# @return [::String]
|
|
631
|
+
# A custom service endpoint, as a hostname or hostname:port. The default is
|
|
632
|
+
# nil, indicating to use the default endpoint in the current universe domain.
|
|
633
|
+
# @return [::String,nil]
|
|
620
634
|
# @!attribute [rw] credentials
|
|
621
635
|
# Credentials to send with calls. You may provide any of the following types:
|
|
622
636
|
# * (`String`) The path to a service account key file in JSON format
|
|
@@ -662,13 +676,20 @@ module Google
|
|
|
662
676
|
# @!attribute [rw] quota_project
|
|
663
677
|
# A separate project against which to charge quota.
|
|
664
678
|
# @return [::String]
|
|
679
|
+
# @!attribute [rw] universe_domain
|
|
680
|
+
# The universe domain within which to make requests. This determines the
|
|
681
|
+
# default endpoint URL. The default value of nil uses the environment
|
|
682
|
+
# universe (usually the default "googleapis.com" universe).
|
|
683
|
+
# @return [::String,nil]
|
|
665
684
|
#
|
|
666
685
|
class Configuration
|
|
667
686
|
extend ::Gapic::Config
|
|
668
687
|
|
|
688
|
+
# @private
|
|
689
|
+
# The endpoint specific to the default "googleapis.com" universe. Deprecated.
|
|
669
690
|
DEFAULT_ENDPOINT = "privateca.googleapis.com"
|
|
670
691
|
|
|
671
|
-
config_attr :endpoint,
|
|
692
|
+
config_attr :endpoint, nil, ::String, nil
|
|
672
693
|
config_attr :credentials, nil do |value|
|
|
673
694
|
allowed = [::String, ::Hash, ::Proc, ::Symbol, ::Google::Auth::Credentials, ::Signet::OAuth2::Client, nil]
|
|
674
695
|
allowed += [::GRPC::Core::Channel, ::GRPC::Core::ChannelCredentials] if defined? ::GRPC
|
|
@@ -683,6 +704,7 @@ module Google
|
|
|
683
704
|
config_attr :metadata, nil, ::Hash, nil
|
|
684
705
|
config_attr :retry_policy, nil, ::Hash, ::Proc, nil
|
|
685
706
|
config_attr :quota_project, nil, ::String, nil
|
|
707
|
+
config_attr :universe_domain, nil, ::String, nil
|
|
686
708
|
|
|
687
709
|
# @private
|
|
688
710
|
def initialize parent_config = nil
|
|
@@ -37,6 +37,9 @@ module Google
|
|
|
37
37
|
# manages private certificate authorities and issued certificates.
|
|
38
38
|
#
|
|
39
39
|
class Client
|
|
40
|
+
# @private
|
|
41
|
+
DEFAULT_ENDPOINT_TEMPLATE = "privateca.$UNIVERSE_DOMAIN$"
|
|
42
|
+
|
|
40
43
|
include Paths
|
|
41
44
|
|
|
42
45
|
# @private
|
|
@@ -102,6 +105,15 @@ module Google
|
|
|
102
105
|
@config
|
|
103
106
|
end
|
|
104
107
|
|
|
108
|
+
##
|
|
109
|
+
# The effective universe domain
|
|
110
|
+
#
|
|
111
|
+
# @return [String]
|
|
112
|
+
#
|
|
113
|
+
def universe_domain
|
|
114
|
+
@certificate_authority_service_stub.universe_domain
|
|
115
|
+
end
|
|
116
|
+
|
|
105
117
|
##
|
|
106
118
|
# Create a new CertificateAuthorityService REST client object.
|
|
107
119
|
#
|
|
@@ -129,8 +141,9 @@ module Google
|
|
|
129
141
|
credentials = @config.credentials
|
|
130
142
|
# Use self-signed JWT if the endpoint is unchanged from default,
|
|
131
143
|
# but only if the default endpoint does not have a region prefix.
|
|
132
|
-
enable_self_signed_jwt = @config.endpoint
|
|
133
|
-
|
|
144
|
+
enable_self_signed_jwt = @config.endpoint.nil? ||
|
|
145
|
+
(@config.endpoint == Configuration::DEFAULT_ENDPOINT &&
|
|
146
|
+
!@config.endpoint.split(".").first.include?("-"))
|
|
134
147
|
credentials ||= Credentials.default scope: @config.scope,
|
|
135
148
|
enable_self_signed_jwt: enable_self_signed_jwt
|
|
136
149
|
if credentials.is_a?(::String) || credentials.is_a?(::Hash)
|
|
@@ -144,12 +157,14 @@ module Google
|
|
|
144
157
|
config.credentials = credentials
|
|
145
158
|
config.quota_project = @quota_project_id
|
|
146
159
|
config.endpoint = @config.endpoint
|
|
160
|
+
config.universe_domain = @config.universe_domain
|
|
147
161
|
end
|
|
148
162
|
|
|
149
163
|
@location_client = Google::Cloud::Location::Locations::Rest::Client.new do |config|
|
|
150
164
|
config.credentials = credentials
|
|
151
165
|
config.quota_project = @quota_project_id
|
|
152
166
|
config.endpoint = @config.endpoint
|
|
167
|
+
config.universe_domain = @config.universe_domain
|
|
153
168
|
config.bindings_override = @config.bindings_override
|
|
154
169
|
end
|
|
155
170
|
|
|
@@ -157,10 +172,16 @@ module Google
|
|
|
157
172
|
config.credentials = credentials
|
|
158
173
|
config.quota_project = @quota_project_id
|
|
159
174
|
config.endpoint = @config.endpoint
|
|
175
|
+
config.universe_domain = @config.universe_domain
|
|
160
176
|
config.bindings_override = @config.bindings_override
|
|
161
177
|
end
|
|
162
178
|
|
|
163
|
-
@certificate_authority_service_stub = ::Google::Cloud::Security::PrivateCA::V1::CertificateAuthorityService::Rest::ServiceStub.new
|
|
179
|
+
@certificate_authority_service_stub = ::Google::Cloud::Security::PrivateCA::V1::CertificateAuthorityService::Rest::ServiceStub.new(
|
|
180
|
+
endpoint: @config.endpoint,
|
|
181
|
+
endpoint_template: DEFAULT_ENDPOINT_TEMPLATE,
|
|
182
|
+
universe_domain: @config.universe_domain,
|
|
183
|
+
credentials: credentials
|
|
184
|
+
)
|
|
164
185
|
end
|
|
165
186
|
|
|
166
187
|
##
|
|
@@ -3153,9 +3174,9 @@ module Google
|
|
|
3153
3174
|
# end
|
|
3154
3175
|
#
|
|
3155
3176
|
# @!attribute [rw] endpoint
|
|
3156
|
-
#
|
|
3157
|
-
#
|
|
3158
|
-
# @return [::String]
|
|
3177
|
+
# A custom service endpoint, as a hostname or hostname:port. The default is
|
|
3178
|
+
# nil, indicating to use the default endpoint in the current universe domain.
|
|
3179
|
+
# @return [::String,nil]
|
|
3159
3180
|
# @!attribute [rw] credentials
|
|
3160
3181
|
# Credentials to send with calls. You may provide any of the following types:
|
|
3161
3182
|
# * (`String`) The path to a service account key file in JSON format
|
|
@@ -3192,13 +3213,20 @@ module Google
|
|
|
3192
3213
|
# @!attribute [rw] quota_project
|
|
3193
3214
|
# A separate project against which to charge quota.
|
|
3194
3215
|
# @return [::String]
|
|
3216
|
+
# @!attribute [rw] universe_domain
|
|
3217
|
+
# The universe domain within which to make requests. This determines the
|
|
3218
|
+
# default endpoint URL. The default value of nil uses the environment
|
|
3219
|
+
# universe (usually the default "googleapis.com" universe).
|
|
3220
|
+
# @return [::String,nil]
|
|
3195
3221
|
#
|
|
3196
3222
|
class Configuration
|
|
3197
3223
|
extend ::Gapic::Config
|
|
3198
3224
|
|
|
3225
|
+
# @private
|
|
3226
|
+
# The endpoint specific to the default "googleapis.com" universe. Deprecated.
|
|
3199
3227
|
DEFAULT_ENDPOINT = "privateca.googleapis.com"
|
|
3200
3228
|
|
|
3201
|
-
config_attr :endpoint,
|
|
3229
|
+
config_attr :endpoint, nil, ::String, nil
|
|
3202
3230
|
config_attr :credentials, nil do |value|
|
|
3203
3231
|
allowed = [::String, ::Hash, ::Proc, ::Symbol, ::Google::Auth::Credentials, ::Signet::OAuth2::Client, nil]
|
|
3204
3232
|
allowed.any? { |klass| klass === value }
|
|
@@ -3210,6 +3238,7 @@ module Google
|
|
|
3210
3238
|
config_attr :metadata, nil, ::Hash, nil
|
|
3211
3239
|
config_attr :retry_policy, nil, ::Hash, ::Proc, nil
|
|
3212
3240
|
config_attr :quota_project, nil, ::String, nil
|
|
3241
|
+
config_attr :universe_domain, nil, ::String, nil
|
|
3213
3242
|
|
|
3214
3243
|
# @private
|
|
3215
3244
|
# Overrides for http bindings for the RPCs of this service
|
data/lib/google/cloud/security/private_ca/v1/certificate_authority_service/rest/operations.rb
CHANGED
|
@@ -27,6 +27,9 @@ module Google
|
|
|
27
27
|
module Rest
|
|
28
28
|
# Service that implements Longrunning Operations API.
|
|
29
29
|
class Operations
|
|
30
|
+
# @private
|
|
31
|
+
DEFAULT_ENDPOINT_TEMPLATE = "privateca.$UNIVERSE_DOMAIN$"
|
|
32
|
+
|
|
30
33
|
# @private
|
|
31
34
|
attr_reader :operations_stub
|
|
32
35
|
|
|
@@ -61,6 +64,15 @@ module Google
|
|
|
61
64
|
@config
|
|
62
65
|
end
|
|
63
66
|
|
|
67
|
+
##
|
|
68
|
+
# The effective universe domain
|
|
69
|
+
#
|
|
70
|
+
# @return [String]
|
|
71
|
+
#
|
|
72
|
+
def universe_domain
|
|
73
|
+
@operations_stub.universe_domain
|
|
74
|
+
end
|
|
75
|
+
|
|
64
76
|
##
|
|
65
77
|
# Create a new Operations client object.
|
|
66
78
|
#
|
|
@@ -85,8 +97,10 @@ module Google
|
|
|
85
97
|
@quota_project_id ||= credentials.quota_project_id if credentials.respond_to? :quota_project_id
|
|
86
98
|
|
|
87
99
|
@operations_stub = OperationsServiceStub.new(
|
|
88
|
-
endpoint:
|
|
89
|
-
|
|
100
|
+
endpoint: @config.endpoint,
|
|
101
|
+
endpoint_template: DEFAULT_ENDPOINT_TEMPLATE,
|
|
102
|
+
universe_domain: @config.universe_domain,
|
|
103
|
+
credentials: credentials
|
|
90
104
|
)
|
|
91
105
|
|
|
92
106
|
# Used by an LRO wrapper for some methods of this service
|
|
@@ -479,9 +493,9 @@ module Google
|
|
|
479
493
|
# end
|
|
480
494
|
#
|
|
481
495
|
# @!attribute [rw] endpoint
|
|
482
|
-
#
|
|
483
|
-
#
|
|
484
|
-
# @return [::String]
|
|
496
|
+
# A custom service endpoint, as a hostname or hostname:port. The default is
|
|
497
|
+
# nil, indicating to use the default endpoint in the current universe domain.
|
|
498
|
+
# @return [::String,nil]
|
|
485
499
|
# @!attribute [rw] credentials
|
|
486
500
|
# Credentials to send with calls. You may provide any of the following types:
|
|
487
501
|
# * (`String`) The path to a service account key file in JSON format
|
|
@@ -518,13 +532,20 @@ module Google
|
|
|
518
532
|
# @!attribute [rw] quota_project
|
|
519
533
|
# A separate project against which to charge quota.
|
|
520
534
|
# @return [::String]
|
|
535
|
+
# @!attribute [rw] universe_domain
|
|
536
|
+
# The universe domain within which to make requests. This determines the
|
|
537
|
+
# default endpoint URL. The default value of nil uses the environment
|
|
538
|
+
# universe (usually the default "googleapis.com" universe).
|
|
539
|
+
# @return [::String,nil]
|
|
521
540
|
#
|
|
522
541
|
class Configuration
|
|
523
542
|
extend ::Gapic::Config
|
|
524
543
|
|
|
544
|
+
# @private
|
|
545
|
+
# The endpoint specific to the default "googleapis.com" universe. Deprecated.
|
|
525
546
|
DEFAULT_ENDPOINT = "privateca.googleapis.com"
|
|
526
547
|
|
|
527
|
-
config_attr :endpoint,
|
|
548
|
+
config_attr :endpoint, nil, ::String, nil
|
|
528
549
|
config_attr :credentials, nil do |value|
|
|
529
550
|
allowed = [::String, ::Hash, ::Proc, ::Symbol, ::Google::Auth::Credentials, ::Signet::OAuth2::Client, nil]
|
|
530
551
|
allowed.any? { |klass| klass === value }
|
|
@@ -536,6 +557,7 @@ module Google
|
|
|
536
557
|
config_attr :metadata, nil, ::Hash, nil
|
|
537
558
|
config_attr :retry_policy, nil, ::Hash, ::Proc, nil
|
|
538
559
|
config_attr :quota_project, nil, ::String, nil
|
|
560
|
+
config_attr :universe_domain, nil, ::String, nil
|
|
539
561
|
|
|
540
562
|
# @private
|
|
541
563
|
def initialize parent_config = nil
|
|
@@ -618,12 +640,15 @@ module Google
|
|
|
618
640
|
# Service stub contains baseline method implementations
|
|
619
641
|
# including transcoding, making the REST call, and deserialing the response.
|
|
620
642
|
class OperationsServiceStub
|
|
621
|
-
def initialize endpoint:, credentials:
|
|
643
|
+
def initialize endpoint:, endpoint_template:, universe_domain:, credentials:
|
|
622
644
|
# These require statements are intentionally placed here to initialize
|
|
623
645
|
# the REST modules only when it's required.
|
|
624
646
|
require "gapic/rest"
|
|
625
647
|
|
|
626
|
-
@client_stub = ::Gapic::Rest::ClientStub.new endpoint: endpoint,
|
|
648
|
+
@client_stub = ::Gapic::Rest::ClientStub.new endpoint: endpoint,
|
|
649
|
+
endpoint_template: endpoint_template,
|
|
650
|
+
universe_domain: universe_domain,
|
|
651
|
+
credentials: credentials
|
|
627
652
|
end
|
|
628
653
|
|
|
629
654
|
##
|
data/lib/google/cloud/security/private_ca/v1/certificate_authority_service/rest/service_stub.rb
CHANGED
|
@@ -31,16 +31,28 @@ module Google
|
|
|
31
31
|
# including transcoding, making the REST call, and deserialing the response.
|
|
32
32
|
#
|
|
33
33
|
class ServiceStub
|
|
34
|
-
def initialize endpoint:, credentials:
|
|
34
|
+
def initialize endpoint:, endpoint_template:, universe_domain:, credentials:
|
|
35
35
|
# These require statements are intentionally placed here to initialize
|
|
36
36
|
# the REST modules only when it's required.
|
|
37
37
|
require "gapic/rest"
|
|
38
38
|
|
|
39
|
-
@client_stub = ::Gapic::Rest::ClientStub.new endpoint: endpoint,
|
|
39
|
+
@client_stub = ::Gapic::Rest::ClientStub.new endpoint: endpoint,
|
|
40
|
+
endpoint_template: endpoint_template,
|
|
41
|
+
universe_domain: universe_domain,
|
|
42
|
+
credentials: credentials,
|
|
40
43
|
numeric_enums: true,
|
|
41
44
|
raise_faraday_errors: false
|
|
42
45
|
end
|
|
43
46
|
|
|
47
|
+
##
|
|
48
|
+
# The effective universe domain
|
|
49
|
+
#
|
|
50
|
+
# @return [String]
|
|
51
|
+
#
|
|
52
|
+
def universe_domain
|
|
53
|
+
@client_stub.universe_domain
|
|
54
|
+
end
|
|
55
|
+
|
|
44
56
|
##
|
|
45
57
|
# Baseline implementation for the create_certificate REST call
|
|
46
58
|
#
|
|
@@ -21,6 +21,7 @@ module Google
|
|
|
21
21
|
module Api
|
|
22
22
|
# Required information for every language.
|
|
23
23
|
# @!attribute [rw] reference_docs_uri
|
|
24
|
+
# @deprecated This field is deprecated and may be removed in the next major version update.
|
|
24
25
|
# @return [::String]
|
|
25
26
|
# Link to automatically generated reference documentation. Example:
|
|
26
27
|
# https://cloud.google.com/nodejs/docs/reference/asset/latest
|
|
@@ -304,6 +305,19 @@ module Google
|
|
|
304
305
|
# seconds: 360 # 6 minutes
|
|
305
306
|
# total_poll_timeout:
|
|
306
307
|
# seconds: 54000 # 90 minutes
|
|
308
|
+
# @!attribute [rw] auto_populated_fields
|
|
309
|
+
# @return [::Array<::String>]
|
|
310
|
+
# List of top-level fields of the request message, that should be
|
|
311
|
+
# automatically populated by the client libraries based on their
|
|
312
|
+
# (google.api.field_info).format. Currently supported format: UUID4.
|
|
313
|
+
#
|
|
314
|
+
# Example of a YAML configuration:
|
|
315
|
+
#
|
|
316
|
+
# publishing:
|
|
317
|
+
# method_settings:
|
|
318
|
+
# - selector: google.example.v1.ExampleService.CreateExample
|
|
319
|
+
# auto_populated_fields:
|
|
320
|
+
# - request_id
|
|
307
321
|
class MethodSettings
|
|
308
322
|
include ::Google::Protobuf::MessageExts
|
|
309
323
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: google-cloud-security-private_ca-v1
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.
|
|
4
|
+
version: 0.10.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Google LLC
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date:
|
|
11
|
+
date: 2024-01-11 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: gapic-common
|
|
@@ -16,7 +16,7 @@ dependencies:
|
|
|
16
16
|
requirements:
|
|
17
17
|
- - ">="
|
|
18
18
|
- !ruby/object:Gem::Version
|
|
19
|
-
version: 0.
|
|
19
|
+
version: 0.21.1
|
|
20
20
|
- - "<"
|
|
21
21
|
- !ruby/object:Gem::Version
|
|
22
22
|
version: 2.a
|
|
@@ -26,7 +26,7 @@ dependencies:
|
|
|
26
26
|
requirements:
|
|
27
27
|
- - ">="
|
|
28
28
|
- !ruby/object:Gem::Version
|
|
29
|
-
version: 0.
|
|
29
|
+
version: 0.21.1
|
|
30
30
|
- - "<"
|
|
31
31
|
- !ruby/object:Gem::Version
|
|
32
32
|
version: 2.a
|
|
@@ -50,7 +50,7 @@ dependencies:
|
|
|
50
50
|
requirements:
|
|
51
51
|
- - ">="
|
|
52
52
|
- !ruby/object:Gem::Version
|
|
53
|
-
version: '0.
|
|
53
|
+
version: '0.7'
|
|
54
54
|
- - "<"
|
|
55
55
|
- !ruby/object:Gem::Version
|
|
56
56
|
version: 2.a
|
|
@@ -60,7 +60,7 @@ dependencies:
|
|
|
60
60
|
requirements:
|
|
61
61
|
- - ">="
|
|
62
62
|
- !ruby/object:Gem::Version
|
|
63
|
-
version: '0.
|
|
63
|
+
version: '0.7'
|
|
64
64
|
- - "<"
|
|
65
65
|
- !ruby/object:Gem::Version
|
|
66
66
|
version: 2.a
|
|
@@ -70,7 +70,7 @@ dependencies:
|
|
|
70
70
|
requirements:
|
|
71
71
|
- - ">="
|
|
72
72
|
- !ruby/object:Gem::Version
|
|
73
|
-
version: '0.
|
|
73
|
+
version: '0.7'
|
|
74
74
|
- - "<"
|
|
75
75
|
- !ruby/object:Gem::Version
|
|
76
76
|
version: 2.a
|
|
@@ -80,7 +80,7 @@ dependencies:
|
|
|
80
80
|
requirements:
|
|
81
81
|
- - ">="
|
|
82
82
|
- !ruby/object:Gem::Version
|
|
83
|
-
version: '0.
|
|
83
|
+
version: '0.7'
|
|
84
84
|
- - "<"
|
|
85
85
|
- !ruby/object:Gem::Version
|
|
86
86
|
version: 2.a
|
|
@@ -262,7 +262,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
|
262
262
|
- !ruby/object:Gem::Version
|
|
263
263
|
version: '0'
|
|
264
264
|
requirements: []
|
|
265
|
-
rubygems_version: 3.
|
|
265
|
+
rubygems_version: 3.5.3
|
|
266
266
|
signing_key:
|
|
267
267
|
specification_version: 4
|
|
268
268
|
summary: The Certificate Authority Service API is a highly-available, scalable service
|