google-iam-credentials-v1 0.3.1 → 0.3.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/.yardopts +1 -1
- data/AUTHENTICATION.md +15 -33
- data/README.md +1 -1
- data/lib/google/iam/credentials/v1/common_pb.rb +2 -2
- data/lib/google/iam/credentials/v1/iam_credentials/client.rb +126 -69
- data/lib/google/iam/credentials/v1/iamcredentials_pb.rb +2 -2
- data/lib/google/iam/credentials/v1/version.rb +1 -1
- data/proto_docs/google/api/field_behavior.rb +7 -1
- data/proto_docs/google/api/resource.rb +10 -71
- metadata +5 -5
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: bcf8aa0fa16a1116d0d84dffb3d3f414aa1c24a532a4894c56d1f4a252215e6c
|
|
4
|
+
data.tar.gz: 01774f8a25e5a214c127f588f974ff45ed4b30e69bb3fa4e22488e3cb1614f51
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 6a35f10a0fb47d7d159ff87faf75a48a6cbc3f391bf523611e06ead92cb4b2561dff6b09447f4ddf6f135576ea91f57c2646e1208edd98945d72f59d71aa3489
|
|
7
|
+
data.tar.gz: c8f536130100a30204df59dfc53cb31803f4c19b73d760c799188c1034d78d8fd0fdd23050491022fc119cf13e3cc7e14f2d182018c96743ced71fd4695f7a94
|
data/.yardopts
CHANGED
data/AUTHENTICATION.md
CHANGED
|
@@ -66,11 +66,11 @@ The environment variables that google-iam-credentials-v1
|
|
|
66
66
|
checks for credentials are configured on the service Credentials class (such as
|
|
67
67
|
{::Google::Iam::Credentials::V1::IAMCredentials::Credentials}):
|
|
68
68
|
|
|
69
|
-
|
|
70
|
-
|
|
71
|
-
|
|
72
|
-
|
|
73
|
-
|
|
69
|
+
* `IAM_CREDENTIALS_CREDENTIALS` - Path to JSON file, or JSON contents
|
|
70
|
+
* `IAM_CREDENTIALS_KEYFILE` - Path to JSON file, or JSON contents
|
|
71
|
+
* `GOOGLE_CLOUD_CREDENTIALS` - Path to JSON file, or JSON contents
|
|
72
|
+
* `GOOGLE_CLOUD_KEYFILE` - Path to JSON file, or JSON contents
|
|
73
|
+
* `GOOGLE_APPLICATION_CREDENTIALS` - Path to JSON file
|
|
74
74
|
|
|
75
75
|
```ruby
|
|
76
76
|
require "google/iam/credentials/v1"
|
|
@@ -82,8 +82,8 @@ client = ::Google::Iam::Credentials::V1::IAMCredentials::Client.new
|
|
|
82
82
|
|
|
83
83
|
### Configuration
|
|
84
84
|
|
|
85
|
-
The **Credentials JSON** can be configured instead of
|
|
86
|
-
environment
|
|
85
|
+
The path to the **Credentials JSON** file can be configured instead of storing
|
|
86
|
+
it in an environment variable. Either on an individual client initialization:
|
|
87
87
|
|
|
88
88
|
```ruby
|
|
89
89
|
require "google/iam/credentials/v1"
|
|
@@ -93,7 +93,7 @@ client = ::Google::Iam::Credentials::V1::IAMCredentials::Client.new do |config|
|
|
|
93
93
|
end
|
|
94
94
|
```
|
|
95
95
|
|
|
96
|
-
Or
|
|
96
|
+
Or globally for all clients:
|
|
97
97
|
|
|
98
98
|
```ruby
|
|
99
99
|
require "google/iam/credentials/v1"
|
|
@@ -120,15 +120,6 @@ To configure your system for this, simply:
|
|
|
120
120
|
**NOTE:** This is _not_ recommended for running in production. The Cloud SDK
|
|
121
121
|
*should* only be used during development.
|
|
122
122
|
|
|
123
|
-
[gce-how-to]: https://cloud.google.com/compute/docs/authentication#using
|
|
124
|
-
[dev-console]: https://console.cloud.google.com/project
|
|
125
|
-
|
|
126
|
-
[enable-apis]: https://raw.githubusercontent.com/GoogleCloudPlatform/gcloud-common/master/authentication/enable-apis.png
|
|
127
|
-
|
|
128
|
-
[create-new-service-account]: https://raw.githubusercontent.com/GoogleCloudPlatform/gcloud-common/master/authentication/create-new-service-account.png
|
|
129
|
-
[create-new-service-account-existing-keys]: https://raw.githubusercontent.com/GoogleCloudPlatform/gcloud-common/master/authentication/create-new-service-account-existing-keys.png
|
|
130
|
-
[reuse-service-account]: https://raw.githubusercontent.com/GoogleCloudPlatform/gcloud-common/master/authentication/reuse-service-account.png
|
|
131
|
-
|
|
132
123
|
## Creating a Service Account
|
|
133
124
|
|
|
134
125
|
Google Cloud requires **Service Account Credentials** to
|
|
@@ -139,31 +130,22 @@ If you are not running this client within
|
|
|
139
130
|
[Google Cloud Platform environments](#google-cloud-platform-environments), you
|
|
140
131
|
need a Google Developers service account.
|
|
141
132
|
|
|
142
|
-
1. Visit the [Google
|
|
133
|
+
1. Visit the [Google Cloud Console](https://console.cloud.google.com/project).
|
|
143
134
|
2. Create a new project or click on an existing project.
|
|
144
|
-
3. Activate the
|
|
135
|
+
3. Activate the menu in the upper left and select **APIs & Services**. From
|
|
145
136
|
here, you will enable the APIs that your application requires.
|
|
146
137
|
|
|
147
|
-
![Enable the APIs that your application requires][enable-apis]
|
|
148
|
-
|
|
149
138
|
*Note: You may need to enable billing in order to use these services.*
|
|
150
139
|
|
|
151
140
|
4. Select **Credentials** from the side navigation.
|
|
152
141
|
|
|
153
|
-
|
|
154
|
-
|
|
155
|
-
![Create a new service account][create-new-service-account]
|
|
156
|
-
|
|
157
|
-
![Create a new service account With Existing Keys][create-new-service-account-existing-keys]
|
|
158
|
-
|
|
159
|
-
Find the "Add credentials" drop down and select "Service account" to be
|
|
160
|
-
guided through downloading a new JSON key file.
|
|
142
|
+
Find the "Create credentials" drop down near the top of the page, and select
|
|
143
|
+
"Service account" to be guided through downloading a new JSON key file.
|
|
161
144
|
|
|
162
145
|
If you want to re-use an existing service account, you can easily generate a
|
|
163
|
-
new key file. Just select the account you wish to re-use,
|
|
164
|
-
|
|
165
|
-
|
|
166
|
-
![Re-use an existing service account][reuse-service-account]
|
|
146
|
+
new key file. Just select the account you wish to re-use, click the pencil
|
|
147
|
+
tool on the right side to edit the service account, select the **Keys** tab,
|
|
148
|
+
and then select **Add Key**.
|
|
167
149
|
|
|
168
150
|
The key file you download will be used by this library to authenticate API
|
|
169
151
|
requests and should be stored in a secure location.
|
data/README.md
CHANGED
|
@@ -33,7 +33,7 @@ In order to use this library, you first need to go through the following steps:
|
|
|
33
33
|
require "google/iam/credentials/v1"
|
|
34
34
|
|
|
35
35
|
client = ::Google::Iam::Credentials::V1::IAMCredentials::Client.new
|
|
36
|
-
request =
|
|
36
|
+
request = ::Google::Iam::Credentials::V1::GenerateAccessTokenRequest.new # (request fields as keyword arguments...)
|
|
37
37
|
response = client.generate_access_token request
|
|
38
38
|
```
|
|
39
39
|
|
|
@@ -1,12 +1,12 @@
|
|
|
1
1
|
# Generated by the protocol buffer compiler. DO NOT EDIT!
|
|
2
2
|
# source: google/iam/credentials/v1/common.proto
|
|
3
3
|
|
|
4
|
-
require 'google/protobuf'
|
|
5
|
-
|
|
6
4
|
require 'google/api/field_behavior_pb'
|
|
7
5
|
require 'google/api/resource_pb'
|
|
8
6
|
require 'google/protobuf/duration_pb'
|
|
9
7
|
require 'google/protobuf/timestamp_pb'
|
|
8
|
+
require 'google/protobuf'
|
|
9
|
+
|
|
10
10
|
Google::Protobuf::DescriptorPool.generated_pool.build do
|
|
11
11
|
add_file("google/iam/credentials/v1/common.proto", :syntax => :proto3) do
|
|
12
12
|
add_message "google.iam.credentials.v1.GenerateAccessTokenRequest" do
|
|
@@ -49,13 +49,12 @@ module Google
|
|
|
49
49
|
# See {::Google::Iam::Credentials::V1::IAMCredentials::Client::Configuration}
|
|
50
50
|
# for a description of the configuration fields.
|
|
51
51
|
#
|
|
52
|
-
#
|
|
52
|
+
# @example
|
|
53
53
|
#
|
|
54
|
-
#
|
|
55
|
-
#
|
|
56
|
-
#
|
|
57
|
-
#
|
|
58
|
-
# end
|
|
54
|
+
# # Modify the configuration for all IAMCredentials clients
|
|
55
|
+
# ::Google::Iam::Credentials::V1::IAMCredentials::Client.configure do |config|
|
|
56
|
+
# config.timeout = 10.0
|
|
57
|
+
# end
|
|
59
58
|
#
|
|
60
59
|
# @yield [config] Configure the Client client.
|
|
61
60
|
# @yieldparam config [Client::Configuration]
|
|
@@ -75,34 +74,22 @@ module Google
|
|
|
75
74
|
|
|
76
75
|
default_config.rpcs.generate_access_token.timeout = 60.0
|
|
77
76
|
default_config.rpcs.generate_access_token.retry_policy = {
|
|
78
|
-
initial_delay: 0.1,
|
|
79
|
-
max_delay: 60.0,
|
|
80
|
-
multiplier: 1.3,
|
|
81
|
-
retry_codes: [14, 4]
|
|
77
|
+
initial_delay: 0.1, max_delay: 60.0, multiplier: 1.3, retry_codes: [14, 4]
|
|
82
78
|
}
|
|
83
79
|
|
|
84
80
|
default_config.rpcs.generate_id_token.timeout = 60.0
|
|
85
81
|
default_config.rpcs.generate_id_token.retry_policy = {
|
|
86
|
-
initial_delay: 0.1,
|
|
87
|
-
max_delay: 60.0,
|
|
88
|
-
multiplier: 1.3,
|
|
89
|
-
retry_codes: [14, 4]
|
|
82
|
+
initial_delay: 0.1, max_delay: 60.0, multiplier: 1.3, retry_codes: [14, 4]
|
|
90
83
|
}
|
|
91
84
|
|
|
92
85
|
default_config.rpcs.sign_blob.timeout = 60.0
|
|
93
86
|
default_config.rpcs.sign_blob.retry_policy = {
|
|
94
|
-
initial_delay: 0.1,
|
|
95
|
-
max_delay: 60.0,
|
|
96
|
-
multiplier: 1.3,
|
|
97
|
-
retry_codes: [14, 4]
|
|
87
|
+
initial_delay: 0.1, max_delay: 60.0, multiplier: 1.3, retry_codes: [14, 4]
|
|
98
88
|
}
|
|
99
89
|
|
|
100
90
|
default_config.rpcs.sign_jwt.timeout = 60.0
|
|
101
91
|
default_config.rpcs.sign_jwt.retry_policy = {
|
|
102
|
-
initial_delay: 0.1,
|
|
103
|
-
max_delay: 60.0,
|
|
104
|
-
multiplier: 1.3,
|
|
105
|
-
retry_codes: [14, 4]
|
|
92
|
+
initial_delay: 0.1, max_delay: 60.0, multiplier: 1.3, retry_codes: [14, 4]
|
|
106
93
|
}
|
|
107
94
|
|
|
108
95
|
default_config
|
|
@@ -134,19 +121,15 @@ module Google
|
|
|
134
121
|
##
|
|
135
122
|
# Create a new IAMCredentials client object.
|
|
136
123
|
#
|
|
137
|
-
#
|
|
138
|
-
#
|
|
139
|
-
# To create a new IAMCredentials client with the default
|
|
140
|
-
# configuration:
|
|
141
|
-
#
|
|
142
|
-
# client = ::Google::Iam::Credentials::V1::IAMCredentials::Client.new
|
|
124
|
+
# @example
|
|
143
125
|
#
|
|
144
|
-
#
|
|
145
|
-
#
|
|
126
|
+
# # Create a client using the default configuration
|
|
127
|
+
# client = ::Google::Iam::Credentials::V1::IAMCredentials::Client.new
|
|
146
128
|
#
|
|
147
|
-
#
|
|
148
|
-
#
|
|
149
|
-
#
|
|
129
|
+
# # Create a client using a custom configuration
|
|
130
|
+
# client = ::Google::Iam::Credentials::V1::IAMCredentials::Client.new do |config|
|
|
131
|
+
# config.timeout = 10.0
|
|
132
|
+
# end
|
|
150
133
|
#
|
|
151
134
|
# @yield [config] Configure the IAMCredentials client.
|
|
152
135
|
# @yieldparam config [Client::Configuration]
|
|
@@ -166,14 +149,13 @@ module Google
|
|
|
166
149
|
|
|
167
150
|
# Create credentials
|
|
168
151
|
credentials = @config.credentials
|
|
169
|
-
# Use self-signed JWT if the
|
|
152
|
+
# Use self-signed JWT if the endpoint is unchanged from default,
|
|
170
153
|
# but only if the default endpoint does not have a region prefix.
|
|
171
|
-
enable_self_signed_jwt = @config.
|
|
172
|
-
@config.endpoint == Client.configure.endpoint &&
|
|
154
|
+
enable_self_signed_jwt = @config.endpoint == Client.configure.endpoint &&
|
|
173
155
|
!@config.endpoint.split(".").first.include?("-")
|
|
174
156
|
credentials ||= Credentials.default scope: @config.scope,
|
|
175
157
|
enable_self_signed_jwt: enable_self_signed_jwt
|
|
176
|
-
if credentials.is_a?(String) || credentials.is_a?(Hash)
|
|
158
|
+
if credentials.is_a?(::String) || credentials.is_a?(::Hash)
|
|
177
159
|
credentials = Credentials.new credentials, scope: @config.scope
|
|
178
160
|
end
|
|
179
161
|
@quota_project_id = @config.quota_project
|
|
@@ -243,6 +225,21 @@ module Google
|
|
|
243
225
|
#
|
|
244
226
|
# @raise [::Google::Cloud::Error] if the RPC is aborted.
|
|
245
227
|
#
|
|
228
|
+
# @example Basic example
|
|
229
|
+
# require "google/iam/credentials/v1"
|
|
230
|
+
#
|
|
231
|
+
# # Create a client object. The client can be reused for multiple calls.
|
|
232
|
+
# client = Google::Iam::Credentials::V1::IAMCredentials::Client.new
|
|
233
|
+
#
|
|
234
|
+
# # Create a request. To set request fields, pass in keyword arguments.
|
|
235
|
+
# request = Google::Iam::Credentials::V1::GenerateAccessTokenRequest.new
|
|
236
|
+
#
|
|
237
|
+
# # Call the generate_access_token method.
|
|
238
|
+
# result = client.generate_access_token request
|
|
239
|
+
#
|
|
240
|
+
# # The returned object is of type Google::Iam::Credentials::V1::GenerateAccessTokenResponse.
|
|
241
|
+
# p result
|
|
242
|
+
#
|
|
246
243
|
def generate_access_token request, options = nil
|
|
247
244
|
raise ::ArgumentError, "request must be provided" if request.nil?
|
|
248
245
|
|
|
@@ -260,16 +257,20 @@ module Google
|
|
|
260
257
|
gapic_version: ::Google::Iam::Credentials::V1::VERSION
|
|
261
258
|
metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
|
|
262
259
|
|
|
263
|
-
header_params = {
|
|
264
|
-
|
|
265
|
-
|
|
260
|
+
header_params = {}
|
|
261
|
+
if request.name
|
|
262
|
+
header_params["name"] = request.name
|
|
263
|
+
end
|
|
264
|
+
|
|
266
265
|
request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
|
|
267
266
|
metadata[:"x-goog-request-params"] ||= request_params_header
|
|
268
267
|
|
|
269
268
|
options.apply_defaults timeout: @config.rpcs.generate_access_token.timeout,
|
|
270
269
|
metadata: metadata,
|
|
271
270
|
retry_policy: @config.rpcs.generate_access_token.retry_policy
|
|
272
|
-
|
|
271
|
+
|
|
272
|
+
options.apply_defaults timeout: @config.timeout,
|
|
273
|
+
metadata: @config.metadata,
|
|
273
274
|
retry_policy: @config.retry_policy
|
|
274
275
|
|
|
275
276
|
@iam_credentials_stub.call_rpc :generate_access_token, request, options: options do |response, operation|
|
|
@@ -329,6 +330,21 @@ module Google
|
|
|
329
330
|
#
|
|
330
331
|
# @raise [::Google::Cloud::Error] if the RPC is aborted.
|
|
331
332
|
#
|
|
333
|
+
# @example Basic example
|
|
334
|
+
# require "google/iam/credentials/v1"
|
|
335
|
+
#
|
|
336
|
+
# # Create a client object. The client can be reused for multiple calls.
|
|
337
|
+
# client = Google::Iam::Credentials::V1::IAMCredentials::Client.new
|
|
338
|
+
#
|
|
339
|
+
# # Create a request. To set request fields, pass in keyword arguments.
|
|
340
|
+
# request = Google::Iam::Credentials::V1::GenerateIdTokenRequest.new
|
|
341
|
+
#
|
|
342
|
+
# # Call the generate_id_token method.
|
|
343
|
+
# result = client.generate_id_token request
|
|
344
|
+
#
|
|
345
|
+
# # The returned object is of type Google::Iam::Credentials::V1::GenerateIdTokenResponse.
|
|
346
|
+
# p result
|
|
347
|
+
#
|
|
332
348
|
def generate_id_token request, options = nil
|
|
333
349
|
raise ::ArgumentError, "request must be provided" if request.nil?
|
|
334
350
|
|
|
@@ -346,16 +362,20 @@ module Google
|
|
|
346
362
|
gapic_version: ::Google::Iam::Credentials::V1::VERSION
|
|
347
363
|
metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
|
|
348
364
|
|
|
349
|
-
header_params = {
|
|
350
|
-
|
|
351
|
-
|
|
365
|
+
header_params = {}
|
|
366
|
+
if request.name
|
|
367
|
+
header_params["name"] = request.name
|
|
368
|
+
end
|
|
369
|
+
|
|
352
370
|
request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
|
|
353
371
|
metadata[:"x-goog-request-params"] ||= request_params_header
|
|
354
372
|
|
|
355
373
|
options.apply_defaults timeout: @config.rpcs.generate_id_token.timeout,
|
|
356
374
|
metadata: metadata,
|
|
357
375
|
retry_policy: @config.rpcs.generate_id_token.retry_policy
|
|
358
|
-
|
|
376
|
+
|
|
377
|
+
options.apply_defaults timeout: @config.timeout,
|
|
378
|
+
metadata: @config.metadata,
|
|
359
379
|
retry_policy: @config.retry_policy
|
|
360
380
|
|
|
361
381
|
@iam_credentials_stub.call_rpc :generate_id_token, request, options: options do |response, operation|
|
|
@@ -411,6 +431,21 @@ module Google
|
|
|
411
431
|
#
|
|
412
432
|
# @raise [::Google::Cloud::Error] if the RPC is aborted.
|
|
413
433
|
#
|
|
434
|
+
# @example Basic example
|
|
435
|
+
# require "google/iam/credentials/v1"
|
|
436
|
+
#
|
|
437
|
+
# # Create a client object. The client can be reused for multiple calls.
|
|
438
|
+
# client = Google::Iam::Credentials::V1::IAMCredentials::Client.new
|
|
439
|
+
#
|
|
440
|
+
# # Create a request. To set request fields, pass in keyword arguments.
|
|
441
|
+
# request = Google::Iam::Credentials::V1::SignBlobRequest.new
|
|
442
|
+
#
|
|
443
|
+
# # Call the sign_blob method.
|
|
444
|
+
# result = client.sign_blob request
|
|
445
|
+
#
|
|
446
|
+
# # The returned object is of type Google::Iam::Credentials::V1::SignBlobResponse.
|
|
447
|
+
# p result
|
|
448
|
+
#
|
|
414
449
|
def sign_blob request, options = nil
|
|
415
450
|
raise ::ArgumentError, "request must be provided" if request.nil?
|
|
416
451
|
|
|
@@ -428,16 +463,20 @@ module Google
|
|
|
428
463
|
gapic_version: ::Google::Iam::Credentials::V1::VERSION
|
|
429
464
|
metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
|
|
430
465
|
|
|
431
|
-
header_params = {
|
|
432
|
-
|
|
433
|
-
|
|
466
|
+
header_params = {}
|
|
467
|
+
if request.name
|
|
468
|
+
header_params["name"] = request.name
|
|
469
|
+
end
|
|
470
|
+
|
|
434
471
|
request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
|
|
435
472
|
metadata[:"x-goog-request-params"] ||= request_params_header
|
|
436
473
|
|
|
437
474
|
options.apply_defaults timeout: @config.rpcs.sign_blob.timeout,
|
|
438
475
|
metadata: metadata,
|
|
439
476
|
retry_policy: @config.rpcs.sign_blob.retry_policy
|
|
440
|
-
|
|
477
|
+
|
|
478
|
+
options.apply_defaults timeout: @config.timeout,
|
|
479
|
+
metadata: @config.metadata,
|
|
441
480
|
retry_policy: @config.retry_policy
|
|
442
481
|
|
|
443
482
|
@iam_credentials_stub.call_rpc :sign_blob, request, options: options do |response, operation|
|
|
@@ -493,6 +532,21 @@ module Google
|
|
|
493
532
|
#
|
|
494
533
|
# @raise [::Google::Cloud::Error] if the RPC is aborted.
|
|
495
534
|
#
|
|
535
|
+
# @example Basic example
|
|
536
|
+
# require "google/iam/credentials/v1"
|
|
537
|
+
#
|
|
538
|
+
# # Create a client object. The client can be reused for multiple calls.
|
|
539
|
+
# client = Google::Iam::Credentials::V1::IAMCredentials::Client.new
|
|
540
|
+
#
|
|
541
|
+
# # Create a request. To set request fields, pass in keyword arguments.
|
|
542
|
+
# request = Google::Iam::Credentials::V1::SignJwtRequest.new
|
|
543
|
+
#
|
|
544
|
+
# # Call the sign_jwt method.
|
|
545
|
+
# result = client.sign_jwt request
|
|
546
|
+
#
|
|
547
|
+
# # The returned object is of type Google::Iam::Credentials::V1::SignJwtResponse.
|
|
548
|
+
# p result
|
|
549
|
+
#
|
|
496
550
|
def sign_jwt request, options = nil
|
|
497
551
|
raise ::ArgumentError, "request must be provided" if request.nil?
|
|
498
552
|
|
|
@@ -510,16 +564,20 @@ module Google
|
|
|
510
564
|
gapic_version: ::Google::Iam::Credentials::V1::VERSION
|
|
511
565
|
metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
|
|
512
566
|
|
|
513
|
-
header_params = {
|
|
514
|
-
|
|
515
|
-
|
|
567
|
+
header_params = {}
|
|
568
|
+
if request.name
|
|
569
|
+
header_params["name"] = request.name
|
|
570
|
+
end
|
|
571
|
+
|
|
516
572
|
request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
|
|
517
573
|
metadata[:"x-goog-request-params"] ||= request_params_header
|
|
518
574
|
|
|
519
575
|
options.apply_defaults timeout: @config.rpcs.sign_jwt.timeout,
|
|
520
576
|
metadata: metadata,
|
|
521
577
|
retry_policy: @config.rpcs.sign_jwt.retry_policy
|
|
522
|
-
|
|
578
|
+
|
|
579
|
+
options.apply_defaults timeout: @config.timeout,
|
|
580
|
+
metadata: @config.metadata,
|
|
523
581
|
retry_policy: @config.retry_policy
|
|
524
582
|
|
|
525
583
|
@iam_credentials_stub.call_rpc :sign_jwt, request, options: options do |response, operation|
|
|
@@ -543,22 +601,21 @@ module Google
|
|
|
543
601
|
# Configuration can be applied globally to all clients, or to a single client
|
|
544
602
|
# on construction.
|
|
545
603
|
#
|
|
546
|
-
#
|
|
547
|
-
#
|
|
548
|
-
#
|
|
549
|
-
# to 20 seconds,
|
|
550
|
-
#
|
|
551
|
-
#
|
|
552
|
-
#
|
|
553
|
-
#
|
|
554
|
-
#
|
|
555
|
-
#
|
|
556
|
-
#
|
|
557
|
-
#
|
|
558
|
-
#
|
|
559
|
-
#
|
|
560
|
-
#
|
|
561
|
-
# end
|
|
604
|
+
# @example
|
|
605
|
+
#
|
|
606
|
+
# # Modify the global config, setting the timeout for
|
|
607
|
+
# # generate_access_token to 20 seconds,
|
|
608
|
+
# # and all remaining timeouts to 10 seconds.
|
|
609
|
+
# ::Google::Iam::Credentials::V1::IAMCredentials::Client.configure do |config|
|
|
610
|
+
# config.timeout = 10.0
|
|
611
|
+
# config.rpcs.generate_access_token.timeout = 20.0
|
|
612
|
+
# end
|
|
613
|
+
#
|
|
614
|
+
# # Apply the above configuration only to a new client.
|
|
615
|
+
# client = ::Google::Iam::Credentials::V1::IAMCredentials::Client.new do |config|
|
|
616
|
+
# config.timeout = 10.0
|
|
617
|
+
# config.rpcs.generate_access_token.timeout = 20.0
|
|
618
|
+
# end
|
|
562
619
|
#
|
|
563
620
|
# @!attribute [rw] endpoint
|
|
564
621
|
# The hostname or hostname:port of the service endpoint.
|
|
@@ -1,11 +1,11 @@
|
|
|
1
1
|
# Generated by the protocol buffer compiler. DO NOT EDIT!
|
|
2
2
|
# source: google/iam/credentials/v1/iamcredentials.proto
|
|
3
3
|
|
|
4
|
-
require 'google/protobuf'
|
|
5
|
-
|
|
6
4
|
require 'google/api/annotations_pb'
|
|
7
5
|
require 'google/api/client_pb'
|
|
8
6
|
require 'google/iam/credentials/v1/common_pb'
|
|
7
|
+
require 'google/protobuf'
|
|
8
|
+
|
|
9
9
|
Google::Protobuf::DescriptorPool.generated_pool.build do
|
|
10
10
|
add_file("google/iam/credentials/v1/iamcredentials.proto", :syntax => :proto3) do
|
|
11
11
|
end
|
|
@@ -57,9 +57,15 @@ module Google
|
|
|
57
57
|
|
|
58
58
|
# Denotes that a (repeated) field is an unordered list.
|
|
59
59
|
# This indicates that the service may provide the elements of the list
|
|
60
|
-
# in any arbitrary
|
|
60
|
+
# in any arbitrary order, rather than the order the user originally
|
|
61
61
|
# provided. Additionally, the list's order may or may not be stable.
|
|
62
62
|
UNORDERED_LIST = 6
|
|
63
|
+
|
|
64
|
+
# Denotes that this field returns a non-empty default value if not set.
|
|
65
|
+
# This indicates that if the user provides the empty value in a request,
|
|
66
|
+
# a non-empty value will be returned. The user will not be aware of what
|
|
67
|
+
# non-empty value to expect.
|
|
68
|
+
NON_EMPTY_DEFAULT = 7
|
|
63
69
|
end
|
|
64
70
|
end
|
|
65
71
|
end
|
|
@@ -33,11 +33,7 @@ module Google
|
|
|
33
33
|
# // For Kubernetes resources, the format is {api group}/{kind}.
|
|
34
34
|
# option (google.api.resource) = {
|
|
35
35
|
# type: "pubsub.googleapis.com/Topic"
|
|
36
|
-
#
|
|
37
|
-
# pattern: "projects/{project}/topics/{topic}"
|
|
38
|
-
# parent_type: "cloudresourcemanager.googleapis.com/Project"
|
|
39
|
-
# parent_name_extractor: "projects/{project}"
|
|
40
|
-
# }
|
|
36
|
+
# pattern: "projects/{project}/topics/{topic}"
|
|
41
37
|
# };
|
|
42
38
|
# }
|
|
43
39
|
#
|
|
@@ -45,10 +41,7 @@ module Google
|
|
|
45
41
|
#
|
|
46
42
|
# resources:
|
|
47
43
|
# - type: "pubsub.googleapis.com/Topic"
|
|
48
|
-
#
|
|
49
|
-
# - pattern: "projects/{project}/topics/{topic}"
|
|
50
|
-
# parent_type: "cloudresourcemanager.googleapis.com/Project"
|
|
51
|
-
# parent_name_extractor: "projects/{project}"
|
|
44
|
+
# pattern: "projects/{project}/topics/{topic}"
|
|
52
45
|
#
|
|
53
46
|
# Sometimes, resources have multiple patterns, typically because they can
|
|
54
47
|
# live under multiple parents.
|
|
@@ -58,26 +51,10 @@ module Google
|
|
|
58
51
|
# message LogEntry {
|
|
59
52
|
# option (google.api.resource) = {
|
|
60
53
|
# type: "logging.googleapis.com/LogEntry"
|
|
61
|
-
#
|
|
62
|
-
#
|
|
63
|
-
#
|
|
64
|
-
#
|
|
65
|
-
# }
|
|
66
|
-
# name_descriptor: {
|
|
67
|
-
# pattern: "folders/{folder}/logs/{log}"
|
|
68
|
-
# parent_type: "cloudresourcemanager.googleapis.com/Folder"
|
|
69
|
-
# parent_name_extractor: "folders/{folder}"
|
|
70
|
-
# }
|
|
71
|
-
# name_descriptor: {
|
|
72
|
-
# pattern: "organizations/{organization}/logs/{log}"
|
|
73
|
-
# parent_type: "cloudresourcemanager.googleapis.com/Organization"
|
|
74
|
-
# parent_name_extractor: "organizations/{organization}"
|
|
75
|
-
# }
|
|
76
|
-
# name_descriptor: {
|
|
77
|
-
# pattern: "billingAccounts/{billing_account}/logs/{log}"
|
|
78
|
-
# parent_type: "billing.googleapis.com/BillingAccount"
|
|
79
|
-
# parent_name_extractor: "billingAccounts/{billing_account}"
|
|
80
|
-
# }
|
|
54
|
+
# pattern: "projects/{project}/logs/{log}"
|
|
55
|
+
# pattern: "folders/{folder}/logs/{log}"
|
|
56
|
+
# pattern: "organizations/{organization}/logs/{log}"
|
|
57
|
+
# pattern: "billingAccounts/{billing_account}/logs/{log}"
|
|
81
58
|
# };
|
|
82
59
|
# }
|
|
83
60
|
#
|
|
@@ -85,48 +62,10 @@ module Google
|
|
|
85
62
|
#
|
|
86
63
|
# resources:
|
|
87
64
|
# - type: 'logging.googleapis.com/LogEntry'
|
|
88
|
-
#
|
|
89
|
-
#
|
|
90
|
-
#
|
|
91
|
-
#
|
|
92
|
-
# - pattern: "folders/{folder}/logs/{log}"
|
|
93
|
-
# parent_type: "cloudresourcemanager.googleapis.com/Folder"
|
|
94
|
-
# parent_name_extractor: "folders/{folder}"
|
|
95
|
-
# - pattern: "organizations/{organization}/logs/{log}"
|
|
96
|
-
# parent_type: "cloudresourcemanager.googleapis.com/Organization"
|
|
97
|
-
# parent_name_extractor: "organizations/{organization}"
|
|
98
|
-
# - pattern: "billingAccounts/{billing_account}/logs/{log}"
|
|
99
|
-
# parent_type: "billing.googleapis.com/BillingAccount"
|
|
100
|
-
# parent_name_extractor: "billingAccounts/{billing_account}"
|
|
101
|
-
#
|
|
102
|
-
# For flexible resources, the resource name doesn't contain parent names, but
|
|
103
|
-
# the resource itself has parents for policy evaluation.
|
|
104
|
-
#
|
|
105
|
-
# Example:
|
|
106
|
-
#
|
|
107
|
-
# message Shelf {
|
|
108
|
-
# option (google.api.resource) = {
|
|
109
|
-
# type: "library.googleapis.com/Shelf"
|
|
110
|
-
# name_descriptor: {
|
|
111
|
-
# pattern: "shelves/{shelf}"
|
|
112
|
-
# parent_type: "cloudresourcemanager.googleapis.com/Project"
|
|
113
|
-
# }
|
|
114
|
-
# name_descriptor: {
|
|
115
|
-
# pattern: "shelves/{shelf}"
|
|
116
|
-
# parent_type: "cloudresourcemanager.googleapis.com/Folder"
|
|
117
|
-
# }
|
|
118
|
-
# };
|
|
119
|
-
# }
|
|
120
|
-
#
|
|
121
|
-
# The ResourceDescriptor Yaml config will look like:
|
|
122
|
-
#
|
|
123
|
-
# resources:
|
|
124
|
-
# - type: 'library.googleapis.com/Shelf'
|
|
125
|
-
# name_descriptor:
|
|
126
|
-
# - pattern: "shelves/{shelf}"
|
|
127
|
-
# parent_type: "cloudresourcemanager.googleapis.com/Project"
|
|
128
|
-
# - pattern: "shelves/{shelf}"
|
|
129
|
-
# parent_type: "cloudresourcemanager.googleapis.com/Folder"
|
|
65
|
+
# pattern: "projects/{project}/logs/{log}"
|
|
66
|
+
# pattern: "folders/{folder}/logs/{log}"
|
|
67
|
+
# pattern: "organizations/{organization}/logs/{log}"
|
|
68
|
+
# pattern: "billingAccounts/{billing_account}/logs/{log}"
|
|
130
69
|
# @!attribute [rw] type
|
|
131
70
|
# @return [::String]
|
|
132
71
|
# The resource type. It must be in the format of
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: google-iam-credentials-v1
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.3.
|
|
4
|
+
version: 0.3.5
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Google LLC
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date:
|
|
11
|
+
date: 2022-01-11 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: gapic-common
|
|
@@ -16,7 +16,7 @@ dependencies:
|
|
|
16
16
|
requirements:
|
|
17
17
|
- - ">="
|
|
18
18
|
- !ruby/object:Gem::Version
|
|
19
|
-
version: '0.
|
|
19
|
+
version: '0.7'
|
|
20
20
|
- - "<"
|
|
21
21
|
- !ruby/object:Gem::Version
|
|
22
22
|
version: 2.a
|
|
@@ -26,7 +26,7 @@ dependencies:
|
|
|
26
26
|
requirements:
|
|
27
27
|
- - ">="
|
|
28
28
|
- !ruby/object:Gem::Version
|
|
29
|
-
version: '0.
|
|
29
|
+
version: '0.7'
|
|
30
30
|
- - "<"
|
|
31
31
|
- !ruby/object:Gem::Version
|
|
32
32
|
version: 2.a
|
|
@@ -206,7 +206,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
|
206
206
|
- !ruby/object:Gem::Version
|
|
207
207
|
version: '0'
|
|
208
208
|
requirements: []
|
|
209
|
-
rubygems_version: 3.
|
|
209
|
+
rubygems_version: 3.3.4
|
|
210
210
|
signing_key:
|
|
211
211
|
specification_version: 4
|
|
212
212
|
summary: API Client library for the IAM Service Account Credentials V1 API
|