google-cloud-security_center-v1 0.17.0 → 0.18.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/lib/google/cloud/security_center/v1/version.rb +1 -1
- data/lib/google/cloud/securitycenter/v1/container_pb.rb +27 -0
- data/lib/google/cloud/securitycenter/v1/finding_pb.rb +4 -0
- data/lib/google/cloud/securitycenter/v1/kubernetes_pb.rb +88 -0
- data/lib/google/cloud/securitycenter/v1/label_pb.rb +23 -0
- data/lib/google/cloud/securitycenter/v1/mitre_attack_pb.rb +1 -0
- data/proto_docs/google/cloud/securitycenter/v1/container.rb +47 -0
- data/proto_docs/google/cloud/securitycenter/v1/finding.rb +7 -0
- data/proto_docs/google/cloud/securitycenter/v1/kubernetes.rb +203 -0
- data/proto_docs/google/cloud/securitycenter/v1/label.rb +39 -0
- data/proto_docs/google/cloud/securitycenter/v1/mitre_attack.rb +3 -0
- metadata +8 -2
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 1dcbd2fc868bd371ebbff1145bfddcb5633f1fe90010535b4795adcaca364aab
|
|
4
|
+
data.tar.gz: 64dcff6bab43b4000df6e449b3a5c2fef6ff406ff4590f1809072d0f5a0bc245
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: b002b519de6a36bd7651b2cb34e6e55e09b28233cf3896b90e575cd0d04472ddfb14b7ec872ca6a484fcf600e0b56241442e85fc26d463e02f869435aea88f63
|
|
7
|
+
data.tar.gz: e427067e83f97c195a92c6e3623740fe4d22810ac4ab338be0166b4c5f284101b1ced322e28045314471c47500e59f9328bb67c42d64851d1ac8288c4ceb0b68
|
|
@@ -0,0 +1,27 @@
|
|
|
1
|
+
# Generated by the protocol buffer compiler. DO NOT EDIT!
|
|
2
|
+
# source: google/cloud/securitycenter/v1/container.proto
|
|
3
|
+
|
|
4
|
+
require 'google/protobuf'
|
|
5
|
+
|
|
6
|
+
require 'google/cloud/securitycenter/v1/label_pb'
|
|
7
|
+
|
|
8
|
+
Google::Protobuf::DescriptorPool.generated_pool.build do
|
|
9
|
+
add_file("google/cloud/securitycenter/v1/container.proto", :syntax => :proto3) do
|
|
10
|
+
add_message "google.cloud.securitycenter.v1.Container" do
|
|
11
|
+
optional :name, :string, 1
|
|
12
|
+
optional :uri, :string, 2
|
|
13
|
+
optional :image_id, :string, 3
|
|
14
|
+
repeated :labels, :message, 4, "google.cloud.securitycenter.v1.Label"
|
|
15
|
+
end
|
|
16
|
+
end
|
|
17
|
+
end
|
|
18
|
+
|
|
19
|
+
module Google
|
|
20
|
+
module Cloud
|
|
21
|
+
module SecurityCenter
|
|
22
|
+
module V1
|
|
23
|
+
Container = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.securitycenter.v1.Container").msgclass
|
|
24
|
+
end
|
|
25
|
+
end
|
|
26
|
+
end
|
|
27
|
+
end
|
|
@@ -9,10 +9,12 @@ require 'google/cloud/securitycenter/v1/access_pb'
|
|
|
9
9
|
require 'google/cloud/securitycenter/v1/compliance_pb'
|
|
10
10
|
require 'google/cloud/securitycenter/v1/connection_pb'
|
|
11
11
|
require 'google/cloud/securitycenter/v1/contact_details_pb'
|
|
12
|
+
require 'google/cloud/securitycenter/v1/container_pb'
|
|
12
13
|
require 'google/cloud/securitycenter/v1/exfiltration_pb'
|
|
13
14
|
require 'google/cloud/securitycenter/v1/external_system_pb'
|
|
14
15
|
require 'google/cloud/securitycenter/v1/iam_binding_pb'
|
|
15
16
|
require 'google/cloud/securitycenter/v1/indicator_pb'
|
|
17
|
+
require 'google/cloud/securitycenter/v1/kubernetes_pb'
|
|
16
18
|
require 'google/cloud/securitycenter/v1/mitre_attack_pb'
|
|
17
19
|
require 'google/cloud/securitycenter/v1/process_pb'
|
|
18
20
|
require 'google/cloud/securitycenter/v1/security_marks_pb'
|
|
@@ -52,6 +54,8 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
|
|
|
52
54
|
optional :exfiltration, :message, 38, "google.cloud.securitycenter.v1.Exfiltration"
|
|
53
55
|
repeated :iam_bindings, :message, 39, "google.cloud.securitycenter.v1.IamBinding"
|
|
54
56
|
optional :next_steps, :string, 40
|
|
57
|
+
repeated :containers, :message, 42, "google.cloud.securitycenter.v1.Container"
|
|
58
|
+
optional :kubernetes, :message, 43, "google.cloud.securitycenter.v1.Kubernetes"
|
|
55
59
|
end
|
|
56
60
|
add_enum "google.cloud.securitycenter.v1.Finding.State" do
|
|
57
61
|
value :STATE_UNSPECIFIED, 0
|
|
@@ -0,0 +1,88 @@
|
|
|
1
|
+
# Generated by the protocol buffer compiler. DO NOT EDIT!
|
|
2
|
+
# source: google/cloud/securitycenter/v1/kubernetes.proto
|
|
3
|
+
|
|
4
|
+
require 'google/protobuf'
|
|
5
|
+
|
|
6
|
+
require 'google/cloud/securitycenter/v1/container_pb'
|
|
7
|
+
require 'google/cloud/securitycenter/v1/label_pb'
|
|
8
|
+
|
|
9
|
+
Google::Protobuf::DescriptorPool.generated_pool.build do
|
|
10
|
+
add_file("google/cloud/securitycenter/v1/kubernetes.proto", :syntax => :proto3) do
|
|
11
|
+
add_message "google.cloud.securitycenter.v1.Kubernetes" do
|
|
12
|
+
repeated :pods, :message, 1, "google.cloud.securitycenter.v1.Kubernetes.Pod"
|
|
13
|
+
repeated :nodes, :message, 2, "google.cloud.securitycenter.v1.Kubernetes.Node"
|
|
14
|
+
repeated :node_pools, :message, 3, "google.cloud.securitycenter.v1.Kubernetes.NodePool"
|
|
15
|
+
repeated :roles, :message, 4, "google.cloud.securitycenter.v1.Kubernetes.Role"
|
|
16
|
+
repeated :bindings, :message, 5, "google.cloud.securitycenter.v1.Kubernetes.Binding"
|
|
17
|
+
repeated :access_reviews, :message, 6, "google.cloud.securitycenter.v1.Kubernetes.AccessReview"
|
|
18
|
+
end
|
|
19
|
+
add_message "google.cloud.securitycenter.v1.Kubernetes.Pod" do
|
|
20
|
+
optional :ns, :string, 1
|
|
21
|
+
optional :name, :string, 2
|
|
22
|
+
repeated :labels, :message, 3, "google.cloud.securitycenter.v1.Label"
|
|
23
|
+
repeated :containers, :message, 4, "google.cloud.securitycenter.v1.Container"
|
|
24
|
+
end
|
|
25
|
+
add_message "google.cloud.securitycenter.v1.Kubernetes.Node" do
|
|
26
|
+
optional :name, :string, 1
|
|
27
|
+
end
|
|
28
|
+
add_message "google.cloud.securitycenter.v1.Kubernetes.NodePool" do
|
|
29
|
+
optional :name, :string, 1
|
|
30
|
+
repeated :nodes, :message, 2, "google.cloud.securitycenter.v1.Kubernetes.Node"
|
|
31
|
+
end
|
|
32
|
+
add_message "google.cloud.securitycenter.v1.Kubernetes.Role" do
|
|
33
|
+
optional :kind, :enum, 1, "google.cloud.securitycenter.v1.Kubernetes.Role.Kind"
|
|
34
|
+
optional :ns, :string, 2
|
|
35
|
+
optional :name, :string, 3
|
|
36
|
+
end
|
|
37
|
+
add_enum "google.cloud.securitycenter.v1.Kubernetes.Role.Kind" do
|
|
38
|
+
value :KIND_UNSPECIFIED, 0
|
|
39
|
+
value :ROLE, 1
|
|
40
|
+
value :CLUSTER_ROLE, 2
|
|
41
|
+
end
|
|
42
|
+
add_message "google.cloud.securitycenter.v1.Kubernetes.Binding" do
|
|
43
|
+
optional :ns, :string, 1
|
|
44
|
+
optional :name, :string, 2
|
|
45
|
+
optional :role, :message, 3, "google.cloud.securitycenter.v1.Kubernetes.Role"
|
|
46
|
+
repeated :subjects, :message, 4, "google.cloud.securitycenter.v1.Kubernetes.Subject"
|
|
47
|
+
end
|
|
48
|
+
add_message "google.cloud.securitycenter.v1.Kubernetes.Subject" do
|
|
49
|
+
optional :kind, :enum, 1, "google.cloud.securitycenter.v1.Kubernetes.Subject.AuthType"
|
|
50
|
+
optional :ns, :string, 2
|
|
51
|
+
optional :name, :string, 3
|
|
52
|
+
end
|
|
53
|
+
add_enum "google.cloud.securitycenter.v1.Kubernetes.Subject.AuthType" do
|
|
54
|
+
value :AUTH_TYPE_UNSPECIFIED, 0
|
|
55
|
+
value :USER, 1
|
|
56
|
+
value :SERVICEACCOUNT, 2
|
|
57
|
+
value :GROUP, 3
|
|
58
|
+
end
|
|
59
|
+
add_message "google.cloud.securitycenter.v1.Kubernetes.AccessReview" do
|
|
60
|
+
optional :group, :string, 1
|
|
61
|
+
optional :ns, :string, 2
|
|
62
|
+
optional :name, :string, 3
|
|
63
|
+
optional :resource, :string, 4
|
|
64
|
+
optional :subresource, :string, 5
|
|
65
|
+
optional :verb, :string, 6
|
|
66
|
+
optional :version, :string, 7
|
|
67
|
+
end
|
|
68
|
+
end
|
|
69
|
+
end
|
|
70
|
+
|
|
71
|
+
module Google
|
|
72
|
+
module Cloud
|
|
73
|
+
module SecurityCenter
|
|
74
|
+
module V1
|
|
75
|
+
Kubernetes = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.securitycenter.v1.Kubernetes").msgclass
|
|
76
|
+
Kubernetes::Pod = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.securitycenter.v1.Kubernetes.Pod").msgclass
|
|
77
|
+
Kubernetes::Node = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.securitycenter.v1.Kubernetes.Node").msgclass
|
|
78
|
+
Kubernetes::NodePool = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.securitycenter.v1.Kubernetes.NodePool").msgclass
|
|
79
|
+
Kubernetes::Role = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.securitycenter.v1.Kubernetes.Role").msgclass
|
|
80
|
+
Kubernetes::Role::Kind = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.securitycenter.v1.Kubernetes.Role.Kind").enummodule
|
|
81
|
+
Kubernetes::Binding = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.securitycenter.v1.Kubernetes.Binding").msgclass
|
|
82
|
+
Kubernetes::Subject = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.securitycenter.v1.Kubernetes.Subject").msgclass
|
|
83
|
+
Kubernetes::Subject::AuthType = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.securitycenter.v1.Kubernetes.Subject.AuthType").enummodule
|
|
84
|
+
Kubernetes::AccessReview = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.securitycenter.v1.Kubernetes.AccessReview").msgclass
|
|
85
|
+
end
|
|
86
|
+
end
|
|
87
|
+
end
|
|
88
|
+
end
|
|
@@ -0,0 +1,23 @@
|
|
|
1
|
+
# Generated by the protocol buffer compiler. DO NOT EDIT!
|
|
2
|
+
# source: google/cloud/securitycenter/v1/label.proto
|
|
3
|
+
|
|
4
|
+
require 'google/protobuf'
|
|
5
|
+
|
|
6
|
+
Google::Protobuf::DescriptorPool.generated_pool.build do
|
|
7
|
+
add_file("google/cloud/securitycenter/v1/label.proto", :syntax => :proto3) do
|
|
8
|
+
add_message "google.cloud.securitycenter.v1.Label" do
|
|
9
|
+
optional :name, :string, 1
|
|
10
|
+
optional :value, :string, 2
|
|
11
|
+
end
|
|
12
|
+
end
|
|
13
|
+
end
|
|
14
|
+
|
|
15
|
+
module Google
|
|
16
|
+
module Cloud
|
|
17
|
+
module SecurityCenter
|
|
18
|
+
module V1
|
|
19
|
+
Label = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.securitycenter.v1.Label").msgclass
|
|
20
|
+
end
|
|
21
|
+
end
|
|
22
|
+
end
|
|
23
|
+
end
|
|
@@ -0,0 +1,47 @@
|
|
|
1
|
+
# frozen_string_literal: true
|
|
2
|
+
|
|
3
|
+
# Copyright 2022 Google LLC
|
|
4
|
+
#
|
|
5
|
+
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
6
|
+
# you may not use this file except in compliance with the License.
|
|
7
|
+
# You may obtain a copy of the License at
|
|
8
|
+
#
|
|
9
|
+
# https://www.apache.org/licenses/LICENSE-2.0
|
|
10
|
+
#
|
|
11
|
+
# Unless required by applicable law or agreed to in writing, software
|
|
12
|
+
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
13
|
+
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
14
|
+
# See the License for the specific language governing permissions and
|
|
15
|
+
# limitations under the License.
|
|
16
|
+
|
|
17
|
+
# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
|
|
18
|
+
|
|
19
|
+
|
|
20
|
+
module Google
|
|
21
|
+
module Cloud
|
|
22
|
+
module SecurityCenter
|
|
23
|
+
module V1
|
|
24
|
+
# Container associated with the finding.
|
|
25
|
+
# @!attribute [rw] name
|
|
26
|
+
# @return [::String]
|
|
27
|
+
# Container name.
|
|
28
|
+
# @!attribute [rw] uri
|
|
29
|
+
# @return [::String]
|
|
30
|
+
# Container image URI provided when configuring a pod/container.
|
|
31
|
+
# May identify a container image version using mutable tags.
|
|
32
|
+
# @!attribute [rw] image_id
|
|
33
|
+
# @return [::String]
|
|
34
|
+
# Optional container image id, when provided by the container runtime.
|
|
35
|
+
# Uniquely identifies the container image launched using a container image
|
|
36
|
+
# digest.
|
|
37
|
+
# @!attribute [rw] labels
|
|
38
|
+
# @return [::Array<::Google::Cloud::SecurityCenter::V1::Label>]
|
|
39
|
+
# Container labels, as provided by the container runtime.
|
|
40
|
+
class Container
|
|
41
|
+
include ::Google::Protobuf::MessageExts
|
|
42
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
43
|
+
end
|
|
44
|
+
end
|
|
45
|
+
end
|
|
46
|
+
end
|
|
47
|
+
end
|
|
@@ -179,6 +179,13 @@ module Google
|
|
|
179
179
|
# @!attribute [rw] next_steps
|
|
180
180
|
# @return [::String]
|
|
181
181
|
# Next steps associate to the finding.
|
|
182
|
+
# @!attribute [rw] containers
|
|
183
|
+
# @return [::Array<::Google::Cloud::SecurityCenter::V1::Container>]
|
|
184
|
+
# Containers associated with the finding. containers provides information
|
|
185
|
+
# for both Kubernetes and non-Kubernetes containers.
|
|
186
|
+
# @!attribute [rw] kubernetes
|
|
187
|
+
# @return [::Google::Cloud::SecurityCenter::V1::Kubernetes]
|
|
188
|
+
# Kubernetes resources associated with the finding.
|
|
182
189
|
class Finding
|
|
183
190
|
include ::Google::Protobuf::MessageExts
|
|
184
191
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
@@ -0,0 +1,203 @@
|
|
|
1
|
+
# frozen_string_literal: true
|
|
2
|
+
|
|
3
|
+
# Copyright 2022 Google LLC
|
|
4
|
+
#
|
|
5
|
+
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
6
|
+
# you may not use this file except in compliance with the License.
|
|
7
|
+
# You may obtain a copy of the License at
|
|
8
|
+
#
|
|
9
|
+
# https://www.apache.org/licenses/LICENSE-2.0
|
|
10
|
+
#
|
|
11
|
+
# Unless required by applicable law or agreed to in writing, software
|
|
12
|
+
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
13
|
+
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
14
|
+
# See the License for the specific language governing permissions and
|
|
15
|
+
# limitations under the License.
|
|
16
|
+
|
|
17
|
+
# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
|
|
18
|
+
|
|
19
|
+
|
|
20
|
+
module Google
|
|
21
|
+
module Cloud
|
|
22
|
+
module SecurityCenter
|
|
23
|
+
module V1
|
|
24
|
+
# Kubernetes related attributes.
|
|
25
|
+
# @!attribute [rw] pods
|
|
26
|
+
# @return [::Array<::Google::Cloud::SecurityCenter::V1::Kubernetes::Pod>]
|
|
27
|
+
# Kubernetes Pods associated with the finding. This field will contain Pod
|
|
28
|
+
# records for each container that is owned by a Pod.
|
|
29
|
+
# @!attribute [rw] nodes
|
|
30
|
+
# @return [::Array<::Google::Cloud::SecurityCenter::V1::Kubernetes::Node>]
|
|
31
|
+
# Provides Kubernetes Node information.
|
|
32
|
+
# @!attribute [rw] node_pools
|
|
33
|
+
# @return [::Array<::Google::Cloud::SecurityCenter::V1::Kubernetes::NodePool>]
|
|
34
|
+
# GKE Node Pools associated with the finding. This field will
|
|
35
|
+
# contain NodePool information for each Node, when it is available.
|
|
36
|
+
# @!attribute [rw] roles
|
|
37
|
+
# @return [::Array<::Google::Cloud::SecurityCenter::V1::Kubernetes::Role>]
|
|
38
|
+
# Provides Kubernetes role information for findings that involve
|
|
39
|
+
# Roles or ClusterRoles.
|
|
40
|
+
# @!attribute [rw] bindings
|
|
41
|
+
# @return [::Array<::Google::Cloud::SecurityCenter::V1::Kubernetes::Binding>]
|
|
42
|
+
# Provides Kubernetes role binding information for findings that involve
|
|
43
|
+
# RoleBindings or ClusterRoleBindings.
|
|
44
|
+
# @!attribute [rw] access_reviews
|
|
45
|
+
# @return [::Array<::Google::Cloud::SecurityCenter::V1::Kubernetes::AccessReview>]
|
|
46
|
+
# Provides information on any Kubernetes access reviews (i.e. privilege
|
|
47
|
+
# checks) relevant to the finding.
|
|
48
|
+
class Kubernetes
|
|
49
|
+
include ::Google::Protobuf::MessageExts
|
|
50
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
51
|
+
|
|
52
|
+
# Kubernetes Pod.
|
|
53
|
+
# @!attribute [rw] ns
|
|
54
|
+
# @return [::String]
|
|
55
|
+
# Kubernetes Pod namespace.
|
|
56
|
+
# @!attribute [rw] name
|
|
57
|
+
# @return [::String]
|
|
58
|
+
# Kubernetes Pod name.
|
|
59
|
+
# @!attribute [rw] labels
|
|
60
|
+
# @return [::Array<::Google::Cloud::SecurityCenter::V1::Label>]
|
|
61
|
+
# Pod labels. For Kubernetes containers, these are applied to the
|
|
62
|
+
# container.
|
|
63
|
+
# @!attribute [rw] containers
|
|
64
|
+
# @return [::Array<::Google::Cloud::SecurityCenter::V1::Container>]
|
|
65
|
+
# Pod containers associated with this finding, if any.
|
|
66
|
+
class Pod
|
|
67
|
+
include ::Google::Protobuf::MessageExts
|
|
68
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
69
|
+
end
|
|
70
|
+
|
|
71
|
+
# Kubernetes Nodes associated with the finding.
|
|
72
|
+
# @!attribute [rw] name
|
|
73
|
+
# @return [::String]
|
|
74
|
+
# Full Resource name of the Compute Engine VM running the
|
|
75
|
+
# cluster node.
|
|
76
|
+
class Node
|
|
77
|
+
include ::Google::Protobuf::MessageExts
|
|
78
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
79
|
+
end
|
|
80
|
+
|
|
81
|
+
# Provides GKE Node Pool information.
|
|
82
|
+
# @!attribute [rw] name
|
|
83
|
+
# @return [::String]
|
|
84
|
+
# Kubernetes Node pool name.
|
|
85
|
+
# @!attribute [rw] nodes
|
|
86
|
+
# @return [::Array<::Google::Cloud::SecurityCenter::V1::Kubernetes::Node>]
|
|
87
|
+
# Nodes associated with the finding.
|
|
88
|
+
class NodePool
|
|
89
|
+
include ::Google::Protobuf::MessageExts
|
|
90
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
91
|
+
end
|
|
92
|
+
|
|
93
|
+
# Kubernetes Role or ClusterRole.
|
|
94
|
+
# @!attribute [rw] kind
|
|
95
|
+
# @return [::Google::Cloud::SecurityCenter::V1::Kubernetes::Role::Kind]
|
|
96
|
+
# Role type.
|
|
97
|
+
# @!attribute [rw] ns
|
|
98
|
+
# @return [::String]
|
|
99
|
+
# Role namespace.
|
|
100
|
+
# @!attribute [rw] name
|
|
101
|
+
# @return [::String]
|
|
102
|
+
# Role name.
|
|
103
|
+
class Role
|
|
104
|
+
include ::Google::Protobuf::MessageExts
|
|
105
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
106
|
+
|
|
107
|
+
# Types of Kubernetes roles.
|
|
108
|
+
module Kind
|
|
109
|
+
# Role type is not specified.
|
|
110
|
+
KIND_UNSPECIFIED = 0
|
|
111
|
+
|
|
112
|
+
# Kubernetes Role.
|
|
113
|
+
ROLE = 1
|
|
114
|
+
|
|
115
|
+
# Kubernetes ClusterRole.
|
|
116
|
+
CLUSTER_ROLE = 2
|
|
117
|
+
end
|
|
118
|
+
end
|
|
119
|
+
|
|
120
|
+
# Represents a Kubernetes RoleBinding or ClusterRoleBinding.
|
|
121
|
+
# @!attribute [rw] ns
|
|
122
|
+
# @return [::String]
|
|
123
|
+
# Namespace for binding.
|
|
124
|
+
# @!attribute [rw] name
|
|
125
|
+
# @return [::String]
|
|
126
|
+
# Name for binding.
|
|
127
|
+
# @!attribute [rw] role
|
|
128
|
+
# @return [::Google::Cloud::SecurityCenter::V1::Kubernetes::Role]
|
|
129
|
+
# The Role or ClusterRole referenced by the binding.
|
|
130
|
+
# @!attribute [rw] subjects
|
|
131
|
+
# @return [::Array<::Google::Cloud::SecurityCenter::V1::Kubernetes::Subject>]
|
|
132
|
+
# Represents the subjects(s) bound to the role. Not always available
|
|
133
|
+
# for PATCH requests.
|
|
134
|
+
class Binding
|
|
135
|
+
include ::Google::Protobuf::MessageExts
|
|
136
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
137
|
+
end
|
|
138
|
+
|
|
139
|
+
# Represents a Kubernetes Subject.
|
|
140
|
+
# @!attribute [rw] kind
|
|
141
|
+
# @return [::Google::Cloud::SecurityCenter::V1::Kubernetes::Subject::AuthType]
|
|
142
|
+
# Authentication type for subject.
|
|
143
|
+
# @!attribute [rw] ns
|
|
144
|
+
# @return [::String]
|
|
145
|
+
# Namespace for subject.
|
|
146
|
+
# @!attribute [rw] name
|
|
147
|
+
# @return [::String]
|
|
148
|
+
# Name for subject.
|
|
149
|
+
class Subject
|
|
150
|
+
include ::Google::Protobuf::MessageExts
|
|
151
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
152
|
+
|
|
153
|
+
# Auth types that can be used for Subject's kind field.
|
|
154
|
+
module AuthType
|
|
155
|
+
# Authentication is not specified.
|
|
156
|
+
AUTH_TYPE_UNSPECIFIED = 0
|
|
157
|
+
|
|
158
|
+
# User with valid certificate.
|
|
159
|
+
USER = 1
|
|
160
|
+
|
|
161
|
+
# Users managed by Kubernetes API with credentials stored as Secrets.
|
|
162
|
+
SERVICEACCOUNT = 2
|
|
163
|
+
|
|
164
|
+
# Collection of users.
|
|
165
|
+
GROUP = 3
|
|
166
|
+
end
|
|
167
|
+
end
|
|
168
|
+
|
|
169
|
+
# Conveys information about a Kubernetes access review (e.g. kubectl auth
|
|
170
|
+
# can-i ...) that was involved in a finding.
|
|
171
|
+
# @!attribute [rw] group
|
|
172
|
+
# @return [::String]
|
|
173
|
+
# Group is the API Group of the Resource. "*" means all.
|
|
174
|
+
# @!attribute [rw] ns
|
|
175
|
+
# @return [::String]
|
|
176
|
+
# Namespace of the action being requested. Currently, there is no
|
|
177
|
+
# distinction between no namespace and all namespaces. Both
|
|
178
|
+
# are represented by "" (empty).
|
|
179
|
+
# @!attribute [rw] name
|
|
180
|
+
# @return [::String]
|
|
181
|
+
# Name is the name of the resource being requested. Empty means all.
|
|
182
|
+
# @!attribute [rw] resource
|
|
183
|
+
# @return [::String]
|
|
184
|
+
# Resource is the optional resource type requested. "*" means all.
|
|
185
|
+
# @!attribute [rw] subresource
|
|
186
|
+
# @return [::String]
|
|
187
|
+
# Subresource is the optional subresource type.
|
|
188
|
+
# @!attribute [rw] verb
|
|
189
|
+
# @return [::String]
|
|
190
|
+
# Verb is a Kubernetes resource API verb, like: get, list, watch, create,
|
|
191
|
+
# update, delete, proxy. "*" means all.
|
|
192
|
+
# @!attribute [rw] version
|
|
193
|
+
# @return [::String]
|
|
194
|
+
# Version is the API Version of the Resource. "*" means all.
|
|
195
|
+
class AccessReview
|
|
196
|
+
include ::Google::Protobuf::MessageExts
|
|
197
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
198
|
+
end
|
|
199
|
+
end
|
|
200
|
+
end
|
|
201
|
+
end
|
|
202
|
+
end
|
|
203
|
+
end
|
|
@@ -0,0 +1,39 @@
|
|
|
1
|
+
# frozen_string_literal: true
|
|
2
|
+
|
|
3
|
+
# Copyright 2022 Google LLC
|
|
4
|
+
#
|
|
5
|
+
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
6
|
+
# you may not use this file except in compliance with the License.
|
|
7
|
+
# You may obtain a copy of the License at
|
|
8
|
+
#
|
|
9
|
+
# https://www.apache.org/licenses/LICENSE-2.0
|
|
10
|
+
#
|
|
11
|
+
# Unless required by applicable law or agreed to in writing, software
|
|
12
|
+
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
13
|
+
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
14
|
+
# See the License for the specific language governing permissions and
|
|
15
|
+
# limitations under the License.
|
|
16
|
+
|
|
17
|
+
# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
|
|
18
|
+
|
|
19
|
+
|
|
20
|
+
module Google
|
|
21
|
+
module Cloud
|
|
22
|
+
module SecurityCenter
|
|
23
|
+
module V1
|
|
24
|
+
# Label represents a generic name=value label. Label has separate name and
|
|
25
|
+
# value fields to support filtering with contains().
|
|
26
|
+
# @!attribute [rw] name
|
|
27
|
+
# @return [::String]
|
|
28
|
+
# Label name.
|
|
29
|
+
# @!attribute [rw] value
|
|
30
|
+
# @return [::String]
|
|
31
|
+
# Label value.
|
|
32
|
+
class Label
|
|
33
|
+
include ::Google::Protobuf::MessageExts
|
|
34
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
35
|
+
end
|
|
36
|
+
end
|
|
37
|
+
end
|
|
38
|
+
end
|
|
39
|
+
end
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: google-cloud-security_center-v1
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.
|
|
4
|
+
version: 0.18.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Google LLC
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2022-07-
|
|
11
|
+
date: 2022-07-25 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: gapic-common
|
|
@@ -197,6 +197,7 @@ files:
|
|
|
197
197
|
- lib/google/cloud/securitycenter/v1/compliance_pb.rb
|
|
198
198
|
- lib/google/cloud/securitycenter/v1/connection_pb.rb
|
|
199
199
|
- lib/google/cloud/securitycenter/v1/contact_details_pb.rb
|
|
200
|
+
- lib/google/cloud/securitycenter/v1/container_pb.rb
|
|
200
201
|
- lib/google/cloud/securitycenter/v1/exfiltration_pb.rb
|
|
201
202
|
- lib/google/cloud/securitycenter/v1/external_system_pb.rb
|
|
202
203
|
- lib/google/cloud/securitycenter/v1/file_pb.rb
|
|
@@ -204,6 +205,8 @@ files:
|
|
|
204
205
|
- lib/google/cloud/securitycenter/v1/folder_pb.rb
|
|
205
206
|
- lib/google/cloud/securitycenter/v1/iam_binding_pb.rb
|
|
206
207
|
- lib/google/cloud/securitycenter/v1/indicator_pb.rb
|
|
208
|
+
- lib/google/cloud/securitycenter/v1/kubernetes_pb.rb
|
|
209
|
+
- lib/google/cloud/securitycenter/v1/label_pb.rb
|
|
207
210
|
- lib/google/cloud/securitycenter/v1/mitre_attack_pb.rb
|
|
208
211
|
- lib/google/cloud/securitycenter/v1/mute_config_pb.rb
|
|
209
212
|
- lib/google/cloud/securitycenter/v1/notification_config_pb.rb
|
|
@@ -226,6 +229,7 @@ files:
|
|
|
226
229
|
- proto_docs/google/cloud/securitycenter/v1/compliance.rb
|
|
227
230
|
- proto_docs/google/cloud/securitycenter/v1/connection.rb
|
|
228
231
|
- proto_docs/google/cloud/securitycenter/v1/contact_details.rb
|
|
232
|
+
- proto_docs/google/cloud/securitycenter/v1/container.rb
|
|
229
233
|
- proto_docs/google/cloud/securitycenter/v1/exfiltration.rb
|
|
230
234
|
- proto_docs/google/cloud/securitycenter/v1/external_system.rb
|
|
231
235
|
- proto_docs/google/cloud/securitycenter/v1/file.rb
|
|
@@ -233,6 +237,8 @@ files:
|
|
|
233
237
|
- proto_docs/google/cloud/securitycenter/v1/folder.rb
|
|
234
238
|
- proto_docs/google/cloud/securitycenter/v1/iam_binding.rb
|
|
235
239
|
- proto_docs/google/cloud/securitycenter/v1/indicator.rb
|
|
240
|
+
- proto_docs/google/cloud/securitycenter/v1/kubernetes.rb
|
|
241
|
+
- proto_docs/google/cloud/securitycenter/v1/label.rb
|
|
236
242
|
- proto_docs/google/cloud/securitycenter/v1/mitre_attack.rb
|
|
237
243
|
- proto_docs/google/cloud/securitycenter/v1/mute_config.rb
|
|
238
244
|
- proto_docs/google/cloud/securitycenter/v1/notification_config.rb
|