google-cloud-service_control 1.1.0 → 1.3.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (6) hide show
  1. checksums.yaml +4 -4
  2. data/AUTHENTICATION.md +72 -101
  3. data/README.md +1 -27
  4. data/lib/google/cloud/service_control/version.rb +1 -1
  5. data/lib/google/cloud/service_control.rb +25 -16
  6. metadata +5 -5
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 59a7516d1f85d00e06c3ea230f042f77bd209ab102bcecea1ad11d960175e42c
4
- data.tar.gz: 5637ade667709aa9df532054e7b34068e2f4aa77572aba1a170605eed74f6746
3
+ metadata.gz: 2466f2281325ffa4dc88b5f70b5884ce61086f21e127b59633b261cbccb2c283
4
+ data.tar.gz: 14581ab81d0c6df28474a2f0a6a49a35e97e1cc4b9b31ae7dcd7d87dd8058f20
5
5
  SHA512:
6
- metadata.gz: 87859f1e2f52c6e2ce2df52ee2faee5dd627f28bd67854907e96b06d42a1e56406427c8974917b0bdd3672b2ccbea3d92f942c507d196dfaf54e643ee28cf736
7
- data.tar.gz: a0bb3d8cf5a031b926827f563ba0d879a8fe605f27b92e2b6e723267041222fa67ad81a57b99d01220724633047a3f366ba78955213d008e57480c19978d21c6
6
+ metadata.gz: 12fe8cfbcc9c00264ff2c25a6e7e7100eef9f452b60c244b9dfb06d734d0a5407b2b0d214625f9b6a4bf622d6b909f90d6e8f02cd6a98fdb94f606f11e859806
7
+ data.tar.gz: 8801c1f3dafb2d7cefb730528898243ac684df59710966daa1926888240ac4bff58908663d39faf9e62c8525e496852b0e81b755f01db0b0d29ef79c473b3630
data/AUTHENTICATION.md CHANGED
@@ -1,151 +1,122 @@
1
1
  # Authentication
2
2
 
3
- In general, the google-cloud-service_control library uses
4
- [Service Account](https://cloud.google.com/iam/docs/creating-managing-service-accounts)
5
- credentials to connect to Google Cloud services. When running within
6
- [Google Cloud Platform environments](#google-cloud-platform-environments) the
7
- credentials will be discovered automatically. When running on other
8
- environments, the Service Account credentials can be specified by providing the
9
- path to the
10
- [JSON keyfile](https://cloud.google.com/iam/docs/managing-service-account-keys)
11
- for the account (or the JSON itself) in
12
- [environment variables](#environment-variables). Additionally, Cloud SDK
13
- credentials can also be discovered automatically, but this is only recommended
14
- during development.
3
+ The recommended way to authenticate to the google-cloud-service_control library is to use
4
+ [Application Default Credentials (ADC)](https://cloud.google.com/docs/authentication/application-default-credentials).
5
+ To review all of your authentication options, see [Credentials lookup](#credential-lookup).
15
6
 
16
7
  ## Quickstart
17
8
 
18
- 1. [Create a service account and credentials](#creating-a-service-account).
19
- 2. Set the [environment variable](#environment-variables).
9
+ The following example shows how to set up authentication for a local development
10
+ environment with your user credentials.
20
11
 
21
- ```sh
22
- export SERVICE_CONTROL_CREDENTIALS=path/to/keyfile.json
23
- ```
24
-
25
- 3. Initialize the client.
12
+ **NOTE:** This method is _not_ recommended for running in production. User credentials
13
+ should be used only during development.
26
14
 
27
- ```ruby
28
- require "google/cloud/service_control"
15
+ 1. [Download and install the Google Cloud CLI](https://cloud.google.com/sdk).
16
+ 2. Set up a local ADC file with your user credentials:
29
17
 
30
- client = Google::Cloud::ServiceControl.quota_controller
18
+ ```sh
19
+ gcloud auth application-default login
31
20
  ```
32
21
 
33
- ## Credential Lookup
34
-
35
- The google-cloud-service_control library aims to make authentication
36
- as simple as possible, and provides several mechanisms to configure your system
37
- without requiring **Service Account Credentials** directly in code.
38
-
39
- **Credentials** are discovered in the following order:
40
-
41
- 1. Specify credentials in method arguments
42
- 2. Specify credentials in configuration
43
- 3. Discover credentials path in environment variables
44
- 4. Discover credentials JSON in environment variables
45
- 5. Discover credentials file in the Cloud SDK's path
46
- 6. Discover GCP credentials
47
-
48
- ### Google Cloud Platform environments
22
+ 3. Write code as if already authenticated.
49
23
 
50
- When running on Google Cloud Platform (GCP), including Google Compute Engine
51
- (GCE), Google Kubernetes Engine (GKE), Google App Engine (GAE), Google Cloud
52
- Functions (GCF) and Cloud Run, **Credentials** are discovered automatically.
53
- Code should be written as if already authenticated.
24
+ For more information about setting up authentication for a local development environment, see
25
+ [Set up Application Default Credentials](https://cloud.google.com/docs/authentication/provide-credentials-adc#local-dev).
54
26
 
55
- ### Environment Variables
27
+ ## Credential Lookup
56
28
 
57
- The **Credentials JSON** can be placed in environment variables instead of
58
- declaring them directly in code. Each service has its own environment variable,
59
- allowing for different service accounts to be used for different services. (See
60
- the READMEs for the individual service gems for details.) The path to the
61
- **Credentials JSON** file can be stored in the environment variable, or the
62
- **Credentials JSON** itself can be stored for environments such as Docker
63
- containers where writing files is difficult or not encouraged.
29
+ The google-cloud-service_control library provides several mechanisms to configure your system.
30
+ Generally, using Application Default Credentials to facilitate automatic
31
+ credentials discovery is the easist method. But if you need to explicitly specify
32
+ credentials, there are several methods available to you.
64
33
 
65
- The environment variables that google-cloud-service_control
66
- checks for credentials are configured on the service Credentials class (such as
67
- `::Google::Cloud::ServiceControl::V1::QuotaController::Credentials`):
34
+ Credentials are accepted in the following ways, in the following order or precedence:
68
35
 
69
- * `SERVICE_CONTROL_CREDENTIALS` - Path to JSON file, or JSON contents
70
- * `SERVICE_CONTROL_KEYFILE` - Path to JSON file, or JSON contents
71
- * `GOOGLE_CLOUD_CREDENTIALS` - Path to JSON file, or JSON contents
72
- * `GOOGLE_CLOUD_KEYFILE` - Path to JSON file, or JSON contents
73
- * `GOOGLE_APPLICATION_CREDENTIALS` - Path to JSON file
36
+ 1. Credentials specified in method arguments
37
+ 2. Credentials specified in configuration
38
+ 3. Credentials pointed to or included in environment variables
39
+ 4. Credentials found in local ADC file
40
+ 5. Credentials returned by the metadata server for the attached service account (GCP)
74
41
 
75
- ```ruby
76
- require "google/cloud/service_control"
77
-
78
- ENV["SERVICE_CONTROL_CREDENTIALS"] = "path/to/keyfile.json"
42
+ ### Configuration
79
43
 
80
- client = Google::Cloud::ServiceControl.quota_controller
81
- ```
44
+ You can configure a path to a JSON credentials file, either for an individual client object or
45
+ globally, for all client objects. The JSON file can contain credentials created for
46
+ [workload identity federation](https://cloud.google.com/iam/docs/workload-identity-federation),
47
+ [workforce identity federation](https://cloud.google.com/iam/docs/workforce-identity-federation), or a
48
+ [service account key](https://cloud.google.com/docs/authentication/provide-credentials-adc#local-key).
82
49
 
83
- ### Configuration
50
+ Note: Service account keys are a security risk if not managed correctly. You should
51
+ [choose a more secure alternative to service account keys](https://cloud.google.com/docs/authentication#auth-decision-tree)
52
+ whenever possible.
84
53
 
85
- The path to the **Credentials JSON** file can be configured instead of storing
86
- it in an environment variable. Either on an individual client initialization:
54
+ To configure a credentials file for an individual client initialization:
87
55
 
88
56
  ```ruby
89
57
  require "google/cloud/service_control"
90
58
 
91
59
  client = Google::Cloud::ServiceControl.quota_controller do |config|
92
- config.credentials = "path/to/keyfile.json"
60
+ config.credentials = "path/to/credentialfile.json"
93
61
  end
94
62
  ```
95
63
 
96
- Or globally for all clients:
64
+ To configure a credentials file globally for all clients:
97
65
 
98
66
  ```ruby
99
67
  require "google/cloud/service_control"
100
68
 
101
69
  Google::Cloud::ServiceControl.configure do |config|
102
- config.credentials = "path/to/keyfile.json"
70
+ config.credentials = "path/to/credentialfile.json"
103
71
  end
104
72
 
105
73
  client = Google::Cloud::ServiceControl.quota_controller
106
74
  ```
107
75
 
108
- ### Cloud SDK
76
+ ### Environment Variables
109
77
 
110
- This option allows for an easy way to authenticate during development. If
111
- credentials are not provided in code or in environment variables, then Cloud SDK
112
- credentials are discovered.
78
+ You can also use an environment variable to provide a JSON credentials file.
79
+ The environment variable can contain a path to the credentials file or, for
80
+ environments such as Docker containers where writing files is not encouraged,
81
+ you can include the credentials file itself.
113
82
 
114
- To configure your system for this, simply:
83
+ The JSON file can contain credentials created for
84
+ [workload identity federation](https://cloud.google.com/iam/docs/workload-identity-federation),
85
+ [workforce identity federation](https://cloud.google.com/iam/docs/workforce-identity-federation), or a
86
+ [service account key](https://cloud.google.com/docs/authentication/provide-credentials-adc#local-key).
115
87
 
116
- 1. [Download and install the Cloud SDK](https://cloud.google.com/sdk)
117
- 2. Authenticate using OAuth 2.0 `$ gcloud auth login`
118
- 3. Write code as if already authenticated.
88
+ Note: Service account keys are a security risk if not managed correctly. You should
89
+ [choose a more secure alternative to service account keys](https://cloud.google.com/docs/authentication#auth-decision-tree)
90
+ whenever possible.
91
+
92
+ The environment variables that google-cloud-service_control
93
+ checks for credentials are:
119
94
 
120
- **NOTE:** This is _not_ recommended for running in production. The Cloud SDK
121
- *should* only be used during development.
95
+ * `GOOGLE_CLOUD_CREDENTIALS` - Path to JSON file, or JSON contents
96
+ * `GOOGLE_APPLICATION_CREDENTIALS` - Path to JSON file
122
97
 
123
- ## Creating a Service Account
98
+ ```ruby
99
+ require "google/cloud/service_control"
124
100
 
125
- Google Cloud requires **Service Account Credentials** to
126
- connect to the APIs. You will use the **JSON key file** to
127
- connect to most services with google-cloud-service_control.
101
+ ENV["GOOGLE_APPLICATION_CREDENTIALS"] = "path/to/credentialfile.json"
128
102
 
129
- If you are not running this client within
130
- [Google Cloud Platform environments](#google-cloud-platform-environments), you
131
- need a Google Developers service account.
103
+ client = Google::Cloud::ServiceControl.quota_controller
104
+ ```
132
105
 
133
- 1. Visit the [Google Cloud Console](https://console.cloud.google.com/project).
134
- 2. Create a new project or click on an existing project.
135
- 3. Activate the menu in the upper left and select **APIs & Services**. From
136
- here, you will enable the APIs that your application requires.
106
+ ### Local ADC file
137
107
 
138
- *Note: You may need to enable billing in order to use these services.*
108
+ You can set up a local ADC file with your user credentials for authentication during
109
+ development. If credentials are not provided in code or in environment variables,
110
+ then the local ADC credentials are discovered.
139
111
 
140
- 4. Select **Credentials** from the side navigation.
112
+ Follow the steps in [Quickstart](#quickstart) to set up a local ADC file.
141
113
 
142
- Find the "Create credentials" drop down near the top of the page, and select
143
- "Service account" to be guided through downloading a new JSON key file.
114
+ ### Google Cloud Platform environments
144
115
 
145
- If you want to re-use an existing service account, you can easily generate a
146
- new key file. Just select the account you wish to re-use, click the pencil
147
- tool on the right side to edit the service account, select the **Keys** tab,
148
- and then select **Add Key**.
116
+ When running on Google Cloud Platform (GCP), including Google Compute Engine
117
+ (GCE), Google Kubernetes Engine (GKE), Google App Engine (GAE), Google Cloud
118
+ Functions (GCF) and Cloud Run, credentials are retrieved from the attached
119
+ service account automatically. Code should be written as if already authenticated.
149
120
 
150
- The key file you download will be used by this library to authenticate API
151
- requests and should be stored in a secure location.
121
+ For more information, see
122
+ [Set up ADC for Google Cloud services](https://cloud.google.com/docs/authentication/provide-credentials-adc#attached-sa).
data/README.md CHANGED
@@ -16,7 +16,7 @@ for this library, google-cloud-service_control, to see the convenience methods f
16
16
  constructing client objects. Reference documentation for the client objects
17
17
  themselves can be found in the client library documentation for the versioned
18
18
  client gems:
19
- [google-cloud-service_control-v1](https://googleapis.dev/ruby/google-cloud-service_control-v1/latest).
19
+ [google-cloud-service_control-v1](https://cloud.google.com/ruby/docs/reference/google-cloud-service_control-v1/latest).
20
20
 
21
21
  See also the [Product Documentation](https://cloud.google.com/service-infrastructure/docs/overview/)
22
22
  for more usage information.
@@ -34,32 +34,6 @@ In order to use this library, you first need to go through the following steps:
34
34
  1. [Enable the API.](https://console.cloud.google.com/apis/library/servicecontrol.googleapis.com)
35
35
  1. {file:AUTHENTICATION.md Set up authentication.}
36
36
 
37
- ## Enabling Logging
38
-
39
- To enable logging for this library, set the logger for the underlying [gRPC](https://github.com/grpc/grpc/tree/master/src/ruby) library.
40
- The logger that you set may be a Ruby stdlib [`Logger`](https://ruby-doc.org/stdlib/libdoc/logger/rdoc/Logger.html) as shown below,
41
- or a [`Google::Cloud::Logging::Logger`](https://googleapis.dev/ruby/google-cloud-logging/latest)
42
- that will write logs to [Cloud Logging](https://cloud.google.com/logging/). See [grpc/logconfig.rb](https://github.com/grpc/grpc/blob/master/src/ruby/lib/grpc/logconfig.rb)
43
- and the gRPC [spec_helper.rb](https://github.com/grpc/grpc/blob/master/src/ruby/spec/spec_helper.rb) for additional information.
44
-
45
- Configuring a Ruby stdlib logger:
46
-
47
- ```ruby
48
- require "logger"
49
-
50
- module MyLogger
51
- LOGGER = Logger.new $stderr, level: Logger::WARN
52
- def logger
53
- LOGGER
54
- end
55
- end
56
-
57
- # Define a gRPC module-level logger method before grpc/logconfig.rb loads.
58
- module GRPC
59
- extend MyLogger
60
- end
61
- ```
62
-
63
37
  ## Supported Ruby Versions
64
38
 
65
39
  This library is supported on Ruby 2.6+.
data/lib/google/cloud/service_control/version.rb CHANGED
@@ -20,7 +20,7 @@
20
20
  module Google
21
21
  module Cloud
22
22
  module ServiceControl
23
- VERSION = "1.1.0"
23
+ VERSION = "1.3.0"
24
24
  end
25
25
  end
26
26
  end
data/lib/google/cloud/service_control.rb CHANGED
@@ -29,7 +29,7 @@ require "google/cloud/config"
29
29
 
30
30
  # Set the default configuration
31
31
  ::Google::Cloud.configure.add_config! :service_control do |config|
32
- config.add_field! :endpoint, "servicecontrol.googleapis.com", match: ::String
32
+ config.add_field! :endpoint, nil, match: ::String
33
33
  config.add_field! :credentials, nil, match: [::String, ::Hash, ::Google::Auth::Credentials]
34
34
  config.add_field! :scope, nil, match: [::Array, ::String]
35
35
  config.add_field! :lib_name, nil, match: ::String
@@ -39,6 +39,7 @@ require "google/cloud/config"
39
39
  config.add_field! :metadata, nil, match: ::Hash
40
40
  config.add_field! :retry_policy, nil, match: [::Hash, ::Proc]
41
41
  config.add_field! :quota_project, nil, match: ::String
42
+ config.add_field! :universe_domain, nil, match: ::String
42
43
  end
43
44
 
44
45
  module Google
@@ -48,12 +49,14 @@ module Google
48
49
  # Create a new client object for QuotaController.
49
50
  #
50
51
  # By default, this returns an instance of
51
- # [Google::Cloud::ServiceControl::V1::QuotaController::Client](https://googleapis.dev/ruby/google-cloud-service_control-v1/latest/Google/Cloud/ServiceControl/V1/QuotaController/Client.html)
52
- # for version V1 of the API.
53
- # However, you can specify specify a different API version by passing it in the
52
+ # [Google::Cloud::ServiceControl::V1::QuotaController::Client](https://cloud.google.com/ruby/docs/reference/google-cloud-service_control-v1/latest/Google-Cloud-ServiceControl-V1-QuotaController-Client)
53
+ # for a gRPC client for version V1 of the API.
54
+ # However, you can specify a different API version by passing it in the
54
55
  # `version` parameter. If the QuotaController service is
55
56
  # supported by that API version, and the corresponding gem is available, the
56
57
  # appropriate versioned client will be returned.
58
+ # You can also specify a different transport by passing `:rest` or `:grpc` in
59
+ # the `transport` parameter.
57
60
  #
58
61
  # ## About QuotaController
59
62
  #
@@ -64,29 +67,33 @@ module Google
64
67
  #
65
68
  # @param version [::String, ::Symbol] The API version to connect to. Optional.
66
69
  # Defaults to `:v1`.
67
- # @return [QuotaController::Client] A client object for the specified version.
70
+ # @param transport [:grpc, :rest] The transport to use. Defaults to `:grpc`.
71
+ # @return [::Object] A client object for the specified version.
68
72
  #
69
- def self.quota_controller version: :v1, &block
73
+ def self.quota_controller version: :v1, transport: :grpc, &block
70
74
  require "google/cloud/service_control/#{version.to_s.downcase}"
71
75
 
72
76
  package_name = Google::Cloud::ServiceControl
73
77
  .constants
74
78
  .select { |sym| sym.to_s.downcase == version.to_s.downcase.tr("_", "") }
75
79
  .first
76
- package_module = Google::Cloud::ServiceControl.const_get package_name
77
- package_module.const_get(:QuotaController).const_get(:Client).new(&block)
80
+ service_module = Google::Cloud::ServiceControl.const_get(package_name).const_get(:QuotaController)
81
+ service_module = service_module.const_get(:Rest) if transport == :rest
82
+ service_module.const_get(:Client).new(&block)
78
83
  end
79
84
 
80
85
  ##
81
86
  # Create a new client object for ServiceController.
82
87
  #
83
88
  # By default, this returns an instance of
84
- # [Google::Cloud::ServiceControl::V1::ServiceController::Client](https://googleapis.dev/ruby/google-cloud-service_control-v1/latest/Google/Cloud/ServiceControl/V1/ServiceController/Client.html)
85
- # for version V1 of the API.
86
- # However, you can specify specify a different API version by passing it in the
89
+ # [Google::Cloud::ServiceControl::V1::ServiceController::Client](https://cloud.google.com/ruby/docs/reference/google-cloud-service_control-v1/latest/Google-Cloud-ServiceControl-V1-ServiceController-Client)
90
+ # for a gRPC client for version V1 of the API.
91
+ # However, you can specify a different API version by passing it in the
87
92
  # `version` parameter. If the ServiceController service is
88
93
  # supported by that API version, and the corresponding gem is available, the
89
94
  # appropriate versioned client will be returned.
95
+ # You can also specify a different transport by passing `:rest` or `:grpc` in
96
+ # the `transport` parameter.
90
97
  #
91
98
  # ## About ServiceController
92
99
  #
@@ -97,17 +104,19 @@ module Google
97
104
  #
98
105
  # @param version [::String, ::Symbol] The API version to connect to. Optional.
99
106
  # Defaults to `:v1`.
100
- # @return [ServiceController::Client] A client object for the specified version.
107
+ # @param transport [:grpc, :rest] The transport to use. Defaults to `:grpc`.
108
+ # @return [::Object] A client object for the specified version.
101
109
  #
102
- def self.service_controller version: :v1, &block
110
+ def self.service_controller version: :v1, transport: :grpc, &block
103
111
  require "google/cloud/service_control/#{version.to_s.downcase}"
104
112
 
105
113
  package_name = Google::Cloud::ServiceControl
106
114
  .constants
107
115
  .select { |sym| sym.to_s.downcase == version.to_s.downcase.tr("_", "") }
108
116
  .first
109
- package_module = Google::Cloud::ServiceControl.const_get package_name
110
- package_module.const_get(:ServiceController).const_get(:Client).new(&block)
117
+ service_module = Google::Cloud::ServiceControl.const_get(package_name).const_get(:ServiceController)
118
+ service_module = service_module.const_get(:Rest) if transport == :rest
119
+ service_module.const_get(:Client).new(&block)
111
120
  end
112
121
 
113
122
  ##
@@ -127,7 +136,7 @@ module Google
127
136
  # * `timeout` (*type:* `Numeric`) -
128
137
  # Default timeout in seconds.
129
138
  # * `metadata` (*type:* `Hash{Symbol=>String}`) -
130
- # Additional gRPC headers to be sent with the call.
139
+ # Additional headers to be sent with the call.
131
140
  # * `retry_policy` (*type:* `Hash`) -
132
141
  # The retry policy. The value is a hash with the following keys:
133
142
  # * `:initial_delay` (*type:* `Numeric`) - The initial delay in seconds.
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: google-cloud-service_control
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.1.0
4
+ version: 1.3.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Google LLC
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2022-07-08 00:00:00.000000000 Z
11
+ date: 2024-01-15 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: google-cloud-core
@@ -30,7 +30,7 @@ dependencies:
30
30
  requirements:
31
31
  - - ">="
32
32
  - !ruby/object:Gem::Version
33
- version: '0.3'
33
+ version: '0.9'
34
34
  - - "<"
35
35
  - !ruby/object:Gem::Version
36
36
  version: 2.a
@@ -40,7 +40,7 @@ dependencies:
40
40
  requirements:
41
41
  - - ">="
42
42
  - !ruby/object:Gem::Version
43
- version: '0.3'
43
+ version: '0.9'
44
44
  - - "<"
45
45
  - !ruby/object:Gem::Version
46
46
  version: 2.a
@@ -189,7 +189,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
189
189
  - !ruby/object:Gem::Version
190
190
  version: '0'
191
191
  requirements: []
192
- rubygems_version: 3.3.14
192
+ rubygems_version: 3.5.3
193
193
  signing_key:
194
194
  specification_version: 4
195
195
  summary: API Client library for the Service Control API API