rcloadenv 0.0.1.rc1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: 7a87297ed8dee36a3aed034991042cd36fca122b
+  data.tar.gz: 1714fafa57d7e35fe6f5a258a5ffd939f7253bce
+SHA512:
+  metadata.gz: 3f8cc786c9a142a0d7381488b9d8282d4507bceb9e9b3c14b0b4e0597f6be5dff2ce2dd4590a4b5b2aad093a37dc34f32479dccf73d28f83ff27edb51ebda12d
+  data.tar.gz: 977c7bb995baa901fb36934b4d5f9ec552047d2778d3e7212c207307760748eae840d77d3ea385d70944b1bce34e56b5b2b5fe7546a4f63368bd8c2d9083a128

data/.yardopts

@@ -0,0 +1,9 @@
+--no-private
+--title=RCLoadEnv
+--markup markdown
+
+./lib/rcloadenv.rb
+./lib/rcloadenv/*.rb
+-
+README.md
+CHANGELOG.md

data/CHANGELOG.md

@@ -0,0 +1,6 @@
+# Changelog for Ruby rcloadenv
+
+## v0.1.0 / (not yet released)
+
+*   Initial implementation; parallels the nodejs implementation features
+    including all supported command line arguments.

data/README.md

@@ -0,0 +1,132 @@
+# Ruby implementation of rcloadenv
+
+`rcloadenv` is a tool for loading configuration from the [Runtime Config
+API](https://cloud.google.com/deployment-manager/runtime-configurator/).
+
+This is a Ruby implementation that may be installed as a Rubygem.
+
+## Usage
+
+Install the gem using
+
+    gem install rcloadenv
+
+Alternately, include "rcloadenv" in your bundle.
+
+You may then invoke the "rcloadenv" binary. You must pass the name of the
+runtime config resource, and then the command to execute. For example:
+
+    bundle exec rcloadenv my-config -- bin/rails s
+
+If `rcloadenv` is run on Google Cloud Platform hosting (such as Google Compute
+Engine, Container Engine, or App Engine), then it infers the project name and
+credentials from the hosting environment.
+
+If you are not running on GCP, you may set the project using the `--project`
+switch, or by setting the `GOOGLE_CLOUD_PROJECT` environment variable. For
+example:
+
+    bundle exec rcloadenv --project=my-project my-config -- bin/rails s
+
+Run `rcloadenv --help` for more information on flags you can set.
+When not running on GCP, credentials are obtained from
+[Application Default Credentials](https://developers.google.com/identity/protocols/application-default-credentials)
+so you can the `GOOGLE_APPLICATION_CREDENTIALS` environment variable or
+configure `gcloud auth`.
+
+## Example: Loading the Rails SECRET_KEY in Google App Engine
+
+This gem is commonly used to provide sensitive information such as API keys or
+database passwords to a Ruby application deployed to Google Cloud Platform,
+without exposing them to configuration files checked into source control.
+
+For example, Rails applications require the environment variable `SECRET_KEY`
+to be set in the production environment. When deploying a Rails application to
+Google App Engine, you could set this environment variable in the "app.yaml"
+configuration file, but that is not recommended because the "app.yaml" file
+is commonly checked into source control. Instead, you can set the `SECRET_KEY`
+value securely in the Runtime Config service, and use `rcloadenv` to load it
+into the Rails app. Here's how.
+
+1.  We will assume that:
+
+    *   You have a Ruby on Rails application
+    *   You have a Google Cloud App Engine project to deploy it to
+    *   You have installed the Google Cloud SDK, have logged in, and have
+        set your project name in the configuration.
+
+    See https://cloud.google.com/ruby for more information on deploying a
+    Ruby application to Google App Engine.
+
+2.  Enable the Runtime Config API for your project using the Google Cloud
+    Console (https://console.cloud.google.com/). To do so, navigate to
+    https://console.cloud.google.com/apis/api/runtimeconfig.googleapis.com/overview
+    choose the correct project and click "Enable".
+
+3.  Use the gcloud command line to create a Runtime Configuration:
+
+        gcloud beta runtime-config configs create my-config
+
+    Choose a name for your configuration and replace `my-config` with that
+    name. Any keys you set in this configuration will be loaded as environment
+    variables in your application.
+
+    Because you will be storing sensitive information in this configuration
+    resource, you may consider restricting access to it. See
+    https://cloud.google.com/deployment-manager/runtime-configurator/access-control
+    for more information. If you do so, make sure any service accounts that
+    run `rcloadenv` retain access to the resource. That includes the App Engine
+    service account (which runs your application in App Engine) and the
+    Cloud Build service account (which performs build steps such as asset
+    precompilation for your application).
+
+4.  Create a secret key
+
+        bundle exec rake secret
+
+    This will generate a random key and print it to the console.
+
+5.  Use the gcloud command line to set the `SECRET_KEY` in your configuration.
+
+        gcloud beta runtime-config configs variables set SECRET_KEY 12345678 \
+          --config-name=my-config
+
+    Replace `my-config` with the name of your configuration, and `12345678`
+    with the secret key that you generated above.
+
+6.  Add the `rcloadenv` gem to your Gemfile, and run `bundle install` to update
+    your bundle.
+
+7.  Now set the entrypoint in your "app.yaml" configuration file to load the
+    Runtime Configuration into environment variables using `rcloadenv`. For
+    example, if entrypoint would normally be:
+
+        bundle exec bin/rails s
+
+    Then change it to:
+
+        bundle exec rcloadenv my-config -- bin/rails s
+
+    Replace `my-config` with the name of your configuration.
+
+    (If you previously set SECRET_KEY in the env_variables section of your
+    app.yaml, remove it. You no longer need it!)
+
+    Now when you deploy and run your application, it should load the
+    SECRET_KEY value from your Runtime Configuration.
+
+8.  If you have set any custom build steps for your application that require
+    this configuration, make sure you update them too. For example, you might
+    use the following to build rails assets:
+
+        bundle exec rcloadenv my-config -- rake assets:precompile
+
+You may set additional environment variables, such as database names and
+passwords, in this config as well, whether or not they are sensitive. It's a
+useful way to manage your application's configuration independent of its
+source code and config files.
+
+## More info
+
+More info can be found in the general cross-language rcloadenv README at
+https://github.com/GoogleCloudPlatform/rcloadenv

data/bin/rcloadenv

@@ -0,0 +1,29 @@
+#!/usr/bin/env ruby
+
+# Copyright 2017 Google Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+begin
+  require "rcloadenv"
+rescue LoadError
+  # If the gem is not installed, attempt to use the library from local source
+  # (i.e. for local testing).
+  path = File.dirname ::File.dirname __FILE__
+  path = File.join path, "lib"
+  $:.unshift path
+  require "rcloadenv"
+end
+
+cli = RCLoadEnv::CLI.new ARGV
+cli.run

data/lib/rcloadenv.rb

@@ -0,0 +1,30 @@
+# Copyright 2017 Google Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+;
+
+require "optparse"
+
+##
+# # Ruby implementation of rcloadenv
+#
+# See https://github.com/GoogleCloudPlatform/rcloadenv for more information
+# on this tool.
+#
+module RCLoadEnv
+end
+
+require "rcloadenv/cli"
+require "rcloadenv/credentials"
+require "rcloadenv/loader"
+require "rcloadenv/version"

data/lib/rcloadenv/api_client.rb

@@ -0,0 +1,24 @@
+# Copyright 2017 Google Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+;
+
+# As of google-api-client 0.13.1 (July 2017) there isn't a client for
+# RuntimeConfig V1beta1, but there might be in the future. So first we attempt
+# to load a client from google-api-client, but if it doesn't exist, we use
+# a vendored client we generated on 2017-07-19.
+begin
+  require "google/apis/runtimeconfig_v1beta1"
+rescue LoadError
+  require "rcloadenv/google/apis/runtimeconfig_v1beta1"
+end

data/lib/rcloadenv/cli.rb

@@ -0,0 +1,83 @@
+# Copyright 2017 Google Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+;
+
+require "optparse"
+
+module RCLoadEnv
+
+  ##
+  # Implementation of the rcloadenv command line.
+  #
+  class CLI
+
+    ##
+    # Create a command line handler.
+    #
+    # @param [Array<String>] args Command-line arguments
+    #
+    def initialize args
+      @project = nil
+      @exclude = []
+      @include = []
+      @override = false
+      @debug = false
+      parser = OptionParser.new do |opts|
+        opts.banner = "Usage: rcloadenv [options] <config-name> -- <command>"
+        opts.on "-p name", "--project=name", "--projectId=name",
+                "Project to read runtime config from" do |p|
+          @project = p
+        end
+        opts.on "-E key1,key2,key3", "--except=key1,key2,key3",
+                "Runtime-config variables to exclude, comma delimited" do |v|
+          @exclude += v.split ","
+        end
+        opts.on "-O key1,key2,key3", "--only=key1,key2,key3",
+                "Runtime-config variables to include, comma delimited" do |v|
+          @include += v.split ","
+        end
+        opts.on "-o", "--override",
+                "Cause config to override existing environment variables" do
+          @override = true
+        end
+        opts.on "-d", "--debug", "Enable debug output" do
+          @debug = true
+        end
+        opts.on "-?", "--help", "Show the help text and exit" do
+          puts parser.help
+          exit
+        end
+      end
+      @command_list = parser.parse args
+      @config_name = @command_list.shift
+      unless @config_name && @command_list.size > 0
+        STDERR.puts "rcloadenv: config name and command are both required."
+        STDERR.puts parser.help
+        exit 1
+      end
+    end
+
+    ##
+    # Run the command line handler. This method either never returns or throws
+    # an exception.
+    #
+    def run
+      loader = RCLoadEnv::Loader.new @config_name,
+          exclude: @exclude, include: @include, override: @override,
+          project: @project, debug: @debug
+      loader.modify_env ENV
+      exec(*@command_list)
+    end
+  end
+end

data/lib/rcloadenv/credentials.rb

@@ -0,0 +1,28 @@
+# Copyright 2017 Google Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+;
+
+require "rcloadenv/api_client"
+require "google/cloud/credentials"
+
+module RCLoadEnv
+  ##
+  # @private Represents the OAuth 2.0 signing logic for Runtime Config.
+  #
+  class Credentials < Google::Cloud::Credentials
+    SCOPE = [Google::Apis::RuntimeconfigV1beta1::AUTH_CLOUDRUNTIMECONFIG]
+    PATH_ENV_VARS = %w(GOOGLE_CLOUD_KEYFILE GCLOUD_KEYFILE)
+    JSON_ENV_VARS = %w(GOOGLE_CLOUD_KEYFILE_JSON GCLOUD_KEYFILE_JSON)
+  end
+end

data/lib/rcloadenv/google/apis/runtimeconfig_v1beta1.rb

@@ -0,0 +1,44 @@
+# Copyright 2015 Google Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Note this is a vendored copy of this class, generated 2017-07-19 alongside
+# google-api-client 0.13.1.
+
+# Vendored location: "rcloadenv/google/apis/runtimeconfig_v1beta1"
+require 'rcloadenv/google/apis/runtimeconfig_v1beta1/service.rb'
+require 'rcloadenv/google/apis/runtimeconfig_v1beta1/classes.rb'
+require 'rcloadenv/google/apis/runtimeconfig_v1beta1/representations.rb'
+
+module Google
+  module Apis
+    # Google Cloud Runtime Configuration API
+    #
+    # The Runtime Configurator allows you to dynamically configure and expose
+    # variables through Google Cloud Platform. In addition, you can also set
+    # Watchers and Waiters that will watch for changes to your data and return based
+    # on certain conditions.
+    #
+    # @see https://cloud.google.com/deployment-manager/runtime-configurator/
+    module RuntimeconfigV1beta1
+      VERSION = 'V1beta1'
+      REVISION = '20170620'
+
+      # View and manage your data across Google Cloud Platform services
+      AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'
+
+      # Manage your Google Cloud Platform services' runtime configuration
+      AUTH_CLOUDRUNTIMECONFIG = 'https://www.googleapis.com/auth/cloudruntimeconfig'
+    end
+  end
+end

data/lib/rcloadenv/google/apis/runtimeconfig_v1beta1/classes.rb

@@ -0,0 +1,805 @@
+# Copyright 2015 Google Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+require 'date'
+require 'google/apis/core/base_service'
+require 'google/apis/core/json_representation'
+require 'google/apis/core/hashable'
+require 'google/apis/errors'
+
+module Google
+  module Apis
+    module RuntimeconfigV1beta1
+      
+      # Request message for `SetIamPolicy` method.
+      class SetIamPolicyRequest
+        include Google::Apis::Core::Hashable
+      
+        # Defines an Identity and Access Management (IAM) policy. It is used to
+        # specify access control policies for Cloud Platform resources.
+        # A `Policy` consists of a list of `bindings`. A `Binding` binds a list of
+        # `members` to a `role`, where the members can be user accounts, Google groups,
+        # Google domains, and service accounts. A `role` is a named list of permissions
+        # defined by IAM.
+        # **Example**
+        # `
+        # "bindings": [
+        # `
+        # "role": "roles/owner",
+        # "members": [
+        # "user:mike@example.com",
+        # "group:admins@example.com",
+        # "domain:google.com",
+        # "serviceAccount:my-other-app@appspot.gserviceaccount.com",
+        # ]
+        # `,
+        # `
+        # "role": "roles/viewer",
+        # "members": ["user:sean@example.com"]
+        # `
+        # ]
+        # `
+        # For a description of IAM and its features, see the
+        # [IAM developer's guide](https://cloud.google.com/iam).
+        # Corresponds to the JSON property `policy`
+        # @return [Google::Apis::RuntimeconfigV1beta1::Policy]
+        attr_accessor :policy
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @policy = args[:policy] if args.key?(:policy)
+        end
+      end
+      
+      # The `Status` type defines a logical error model that is suitable for different
+      # programming environments, including REST APIs and RPC APIs. It is used by
+      # [gRPC](https://github.com/grpc). The error model is designed to be:
+      # - Simple to use and understand for most users
+      # - Flexible enough to meet unexpected needs
+      # # Overview
+      # The `Status` message contains three pieces of data: error code, error message,
+      # and error details. The error code should be an enum value of
+      # google.rpc.Code, but it may accept additional error codes if needed.  The
+      # error message should be a developer-facing English message that helps
+      # developers *understand* and *resolve* the error. If a localized user-facing
+      # error message is needed, put the localized message in the error details or
+      # localize it in the client. The optional error details may contain arbitrary
+      # information about the error. There is a predefined set of error detail types
+      # in the package `google.rpc` that can be used for common error conditions.
+      # # Language mapping
+      # The `Status` message is the logical representation of the error model, but it
+      # is not necessarily the actual wire format. When the `Status` message is
+      # exposed in different client libraries and different wire protocols, it can be
+      # mapped differently. For example, it will likely be mapped to some exceptions
+      # in Java, but more likely mapped to some error codes in C.
+      # # Other uses
+      # The error model and the `Status` message can be used in a variety of
+      # environments, either with or without APIs, to provide a
+      # consistent developer experience across different environments.
+      # Example uses of this error model include:
+      # - Partial errors. If a service needs to return partial errors to the client,
+      # it may embed the `Status` in the normal response to indicate the partial
+      # errors.
+      # - Workflow errors. A typical workflow has multiple steps. Each step may
+      # have a `Status` message for error reporting.
+      # - Batch operations. If a client uses batch request and batch response, the
+      # `Status` message should be used directly inside batch response, one for
+      # each error sub-response.
+      # - Asynchronous operations. If an API call embeds asynchronous operation
+      # results in its response, the status of those operations should be
+      # represented directly using the `Status` message.
+      # - Logging. If some API errors are stored in logs, the message `Status` could
+      # be used directly after any stripping needed for security/privacy reasons.
+      class Status
+        include Google::Apis::Core::Hashable
+      
+        # A list of messages that carry the error details.  There will be a
+        # common set of message types for APIs to use.
+        # Corresponds to the JSON property `details`
+        # @return [Array<Hash<String,Object>>]
+        attr_accessor :details
+      
+        # The status code, which should be an enum value of google.rpc.Code.
+        # Corresponds to the JSON property `code`
+        # @return [Fixnum]
+        attr_accessor :code
+      
+        # A developer-facing error message, which should be in English. Any
+        # user-facing error message should be localized and sent in the
+        # google.rpc.Status.details field, or localized by the client.
+        # Corresponds to the JSON property `message`
+        # @return [String]
+        attr_accessor :message
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @details = args[:details] if args.key?(:details)
+          @code = args[:code] if args.key?(:code)
+          @message = args[:message] if args.key?(:message)
+        end
+      end
+      
+      # Associates `members` with a `role`.
+      class Binding
+        include Google::Apis::Core::Hashable
+      
+        # Specifies the identities requesting access for a Cloud Platform resource.
+        # `members` can have the following values:
+        # * `allUsers`: A special identifier that represents anyone who is
+        # on the internet; with or without a Google account.
+        # * `allAuthenticatedUsers`: A special identifier that represents anyone
+        # who is authenticated with a Google account or a service account.
+        # * `user:`emailid``: An email address that represents a specific Google
+        # account. For example, `alice@gmail.com` or `joe@example.com`.
+        # * `serviceAccount:`emailid``: An email address that represents a service
+        # account. For example, `my-other-app@appspot.gserviceaccount.com`.
+        # * `group:`emailid``: An email address that represents a Google group.
+        # For example, `admins@example.com`.
+        # * `domain:`domain``: A Google Apps domain name that represents all the
+        # users of that domain. For example, `google.com` or `example.com`.
+        # Corresponds to the JSON property `members`
+        # @return [Array<String>]
+        attr_accessor :members
+      
+        # Role that is assigned to `members`.
+        # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
+        # Required
+        # Corresponds to the JSON property `role`
+        # @return [String]
+        attr_accessor :role
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @members = args[:members] if args.key?(:members)
+          @role = args[:role] if args.key?(:role)
+        end
+      end
+      
+      # A generic empty message that you can re-use to avoid defining duplicated
+      # empty messages in your APIs. A typical example is to use it as the request
+      # or the response type of an API method. For instance:
+      # service Foo `
+      # rpc Bar(google.protobuf.Empty) returns (google.protobuf.Empty);
+      # `
+      # The JSON representation for `Empty` is empty JSON object ````.
+      class Empty
+        include Google::Apis::Core::Hashable
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+        end
+      end
+      
+      # A Cardinality condition for the Waiter resource. A cardinality condition is
+      # met when the number of variables under a specified path prefix reaches a
+      # predefined number. For example, if you set a Cardinality condition where
+      # the `path` is set to `/foo` and the number of paths is set to 2, the
+      # following variables would meet the condition in a RuntimeConfig resource:
+      # + `/foo/variable1 = "value1"`
+      # + `/foo/variable2 = "value2"`
+      # + `/bar/variable3 = "value3"`
+      # It would not would not satisify the same condition with the `number` set to
+      # 3, however, because there is only 2 paths that start with `/foo`.
+      # Cardinality conditions are recursive; all subtrees under the specific
+      # path prefix are counted.
+      class Cardinality
+        include Google::Apis::Core::Hashable
+      
+        # The number variables under the `path` that must exist to meet this
+        # condition. Defaults to 1 if not specified.
+        # Corresponds to the JSON property `number`
+        # @return [Fixnum]
+        attr_accessor :number
+      
+        # The root of the variable subtree to monitor. For example, `/foo`.
+        # Corresponds to the JSON property `path`
+        # @return [String]
+        attr_accessor :path
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @number = args[:number] if args.key?(:number)
+          @path = args[:path] if args.key?(:path)
+        end
+      end
+      
+      # `ListConfigs()` returns the following response. The order of returned
+      # objects is arbitrary; that is, it is not ordered in any particular way.
+      class ListConfigsResponse
+        include Google::Apis::Core::Hashable
+      
+        # A list of the configurations in the project. The order of returned
+        # objects is arbitrary; that is, it is not ordered in any particular way.
+        # Corresponds to the JSON property `configs`
+        # @return [Array<Google::Apis::RuntimeconfigV1beta1::RuntimeConfig>]
+        attr_accessor :configs
+      
+        # This token allows you to get the next page of results for list requests.
+        # If the number of results is larger than `pageSize`, use the `nextPageToken`
+        # as a value for the query parameter `pageToken` in the next list request.
+        # Subsequent list requests will have their own `nextPageToken` to continue
+        # paging through the results
+        # Corresponds to the JSON property `nextPageToken`
+        # @return [String]
+        attr_accessor :next_page_token
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @configs = args[:configs] if args.key?(:configs)
+          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
+        end
+      end
+      
+      # The condition that a Waiter resource is waiting for.
+      class EndCondition
+        include Google::Apis::Core::Hashable
+      
+        # A Cardinality condition for the Waiter resource. A cardinality condition is
+        # met when the number of variables under a specified path prefix reaches a
+        # predefined number. For example, if you set a Cardinality condition where
+        # the `path` is set to `/foo` and the number of paths is set to 2, the
+        # following variables would meet the condition in a RuntimeConfig resource:
+        # + `/foo/variable1 = "value1"`
+        # + `/foo/variable2 = "value2"`
+        # + `/bar/variable3 = "value3"`
+        # It would not would not satisify the same condition with the `number` set to
+        # 3, however, because there is only 2 paths that start with `/foo`.
+        # Cardinality conditions are recursive; all subtrees under the specific
+        # path prefix are counted.
+        # Corresponds to the JSON property `cardinality`
+        # @return [Google::Apis::RuntimeconfigV1beta1::Cardinality]
+        attr_accessor :cardinality
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @cardinality = args[:cardinality] if args.key?(:cardinality)
+        end
+      end
+      
+      # Response message for `TestIamPermissions` method.
+      class TestIamPermissionsResponse
+        include Google::Apis::Core::Hashable
+      
+        # A subset of `TestPermissionsRequest.permissions` that the caller is
+        # allowed.
+        # Corresponds to the JSON property `permissions`
+        # @return [Array<String>]
+        attr_accessor :permissions
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @permissions = args[:permissions] if args.key?(:permissions)
+        end
+      end
+      
+      # Response for the `ListVariables()` method.
+      class ListVariablesResponse
+        include Google::Apis::Core::Hashable
+      
+        # This token allows you to get the next page of results for list requests.
+        # If the number of results is larger than `pageSize`, use the `nextPageToken`
+        # as a value for the query parameter `pageToken` in the next list request.
+        # Subsequent list requests will have their own `nextPageToken` to continue
+        # paging through the results
+        # Corresponds to the JSON property `nextPageToken`
+        # @return [String]
+        attr_accessor :next_page_token
+      
+        # A list of variables and their values. The order of returned variable
+        # objects is arbitrary.
+        # Corresponds to the JSON property `variables`
+        # @return [Array<Google::Apis::RuntimeconfigV1beta1::Variable>]
+        attr_accessor :variables
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
+          @variables = args[:variables] if args.key?(:variables)
+        end
+      end
+      
+      # A RuntimeConfig resource is the primary resource in the Cloud RuntimeConfig
+      # service. A RuntimeConfig resource consists of metadata and a hierarchy of
+      # variables.
+      class RuntimeConfig
+        include Google::Apis::Core::Hashable
+      
+        # The resource name of a runtime config. The name must have the format:
+        # projects/[PROJECT_ID]/configs/[CONFIG_NAME]
+        # The `[PROJECT_ID]` must be a valid project ID, and `[CONFIG_NAME]` is an
+        # arbitrary name that matches RFC 1035 segment specification. The length of
+        # `[CONFIG_NAME]` must be less than 64 bytes.
+        # You pick the RuntimeConfig resource name, but the server will validate that
+        # the name adheres to this format. After you create the resource, you cannot
+        # change the resource's name.
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        # An optional description of the RuntimeConfig object.
+        # Corresponds to the JSON property `description`
+        # @return [String]
+        attr_accessor :description
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @name = args[:name] if args.key?(:name)
+          @description = args[:description] if args.key?(:description)
+        end
+      end
+      
+      # Request for the `WatchVariable()` method.
+      class WatchVariableRequest
+        include Google::Apis::Core::Hashable
+      
+        # If specified, checks the current timestamp of the variable and if the
+        # current timestamp is newer than `newerThan` timestamp, the method returns
+        # immediately.
+        # If not specified or the variable has an older timestamp, the watcher waits
+        # for a the value to change before returning.
+        # Corresponds to the JSON property `newerThan`
+        # @return [String]
+        attr_accessor :newer_than
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @newer_than = args[:newer_than] if args.key?(:newer_than)
+        end
+      end
+      
+      # Response for the `ListWaiters()` method.
+      # Order of returned waiter objects is arbitrary.
+      class ListWaitersResponse
+        include Google::Apis::Core::Hashable
+      
+        # This token allows you to get the next page of results for list requests.
+        # If the number of results is larger than `pageSize`, use the `nextPageToken`
+        # as a value for the query parameter `pageToken` in the next list request.
+        # Subsequent list requests will have their own `nextPageToken` to continue
+        # paging through the results
+        # Corresponds to the JSON property `nextPageToken`
+        # @return [String]
+        attr_accessor :next_page_token
+      
+        # Found waiters in the project.
+        # Corresponds to the JSON property `waiters`
+        # @return [Array<Google::Apis::RuntimeconfigV1beta1::Waiter>]
+        attr_accessor :waiters
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
+          @waiters = args[:waiters] if args.key?(:waiters)
+        end
+      end
+      
+      # Request message for `TestIamPermissions` method.
+      class TestIamPermissionsRequest
+        include Google::Apis::Core::Hashable
+      
+        # The set of permissions to check for the `resource`. Permissions with
+        # wildcards (such as '*' or 'storage.*') are not allowed. For more
+        # information see
+        # [IAM Overview](https://cloud.google.com/iam/docs/overview#permissions).
+        # Corresponds to the JSON property `permissions`
+        # @return [Array<String>]
+        attr_accessor :permissions
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @permissions = args[:permissions] if args.key?(:permissions)
+        end
+      end
+      
+      # A Waiter resource waits for some end condition within a RuntimeConfig resource
+      # to be met before it returns. For example, assume you have a distributed
+      # system where each node writes to a Variable resource indidicating the node's
+      # readiness as part of the startup process.
+      # You then configure a Waiter resource with the success condition set to wait
+      # until some number of nodes have checked in. Afterwards, your application
+      # runs some arbitrary code after the condition has been met and the waiter
+      # returns successfully.
+      # Once created, a Waiter resource is immutable.
+      # To learn more about using waiters, read the
+      # [Creating a Waiter](/deployment-manager/runtime-configurator/creating-a-waiter)
+      # documentation.
+      class Waiter
+        include Google::Apis::Core::Hashable
+      
+        # The `Status` type defines a logical error model that is suitable for different
+        # programming environments, including REST APIs and RPC APIs. It is used by
+        # [gRPC](https://github.com/grpc). The error model is designed to be:
+        # - Simple to use and understand for most users
+        # - Flexible enough to meet unexpected needs
+        # # Overview
+        # The `Status` message contains three pieces of data: error code, error message,
+        # and error details. The error code should be an enum value of
+        # google.rpc.Code, but it may accept additional error codes if needed.  The
+        # error message should be a developer-facing English message that helps
+        # developers *understand* and *resolve* the error. If a localized user-facing
+        # error message is needed, put the localized message in the error details or
+        # localize it in the client. The optional error details may contain arbitrary
+        # information about the error. There is a predefined set of error detail types
+        # in the package `google.rpc` that can be used for common error conditions.
+        # # Language mapping
+        # The `Status` message is the logical representation of the error model, but it
+        # is not necessarily the actual wire format. When the `Status` message is
+        # exposed in different client libraries and different wire protocols, it can be
+        # mapped differently. For example, it will likely be mapped to some exceptions
+        # in Java, but more likely mapped to some error codes in C.
+        # # Other uses
+        # The error model and the `Status` message can be used in a variety of
+        # environments, either with or without APIs, to provide a
+        # consistent developer experience across different environments.
+        # Example uses of this error model include:
+        # - Partial errors. If a service needs to return partial errors to the client,
+        # it may embed the `Status` in the normal response to indicate the partial
+        # errors.
+        # - Workflow errors. A typical workflow has multiple steps. Each step may
+        # have a `Status` message for error reporting.
+        # - Batch operations. If a client uses batch request and batch response, the
+        # `Status` message should be used directly inside batch response, one for
+        # each error sub-response.
+        # - Asynchronous operations. If an API call embeds asynchronous operation
+        # results in its response, the status of those operations should be
+        # represented directly using the `Status` message.
+        # - Logging. If some API errors are stored in logs, the message `Status` could
+        # be used directly after any stripping needed for security/privacy reasons.
+        # Corresponds to the JSON property `error`
+        # @return [Google::Apis::RuntimeconfigV1beta1::Status]
+        attr_accessor :error
+      
+        # The condition that a Waiter resource is waiting for.
+        # Corresponds to the JSON property `failure`
+        # @return [Google::Apis::RuntimeconfigV1beta1::EndCondition]
+        attr_accessor :failure
+      
+        # The condition that a Waiter resource is waiting for.
+        # Corresponds to the JSON property `success`
+        # @return [Google::Apis::RuntimeconfigV1beta1::EndCondition]
+        attr_accessor :success
+      
+        # [Output Only] If the value is `false`, it means the waiter is still waiting
+        # for one of its conditions to be met.
+        # If true, the waiter has finished. If the waiter finished due to a timeout
+        # or failure, `error` will be set.
+        # Corresponds to the JSON property `done`
+        # @return [Boolean]
+        attr_accessor :done
+        alias_method :done?, :done
+      
+        # [Output Only] The instant at which this Waiter resource was created. Adding
+        # the value of `timeout` to this instant yields the timeout deadline for the
+        # waiter.
+        # Corresponds to the JSON property `createTime`
+        # @return [String]
+        attr_accessor :create_time
+      
+        # [Required] Specifies the timeout of the waiter in seconds, beginning from
+        # the instant that `waiters().create` method is called. If this time elapses
+        # before the success or failure conditions are met, the waiter fails and sets
+        # the `error` code to `DEADLINE_EXCEEDED`.
+        # Corresponds to the JSON property `timeout`
+        # @return [String]
+        attr_accessor :timeout
+      
+        # The name of the Waiter resource, in the format:
+        # projects/[PROJECT_ID]/configs/[CONFIG_NAME]/waiters/[WAITER_NAME]
+        # The `[PROJECT_ID]` must be a valid Google Cloud project ID,
+        # the `[CONFIG_NAME]` must be a valid RuntimeConfig resource, the
+        # `[WAITER_NAME]` must match RFC 1035 segment specification, and the length
+        # of `[WAITER_NAME]` must be less than 64 bytes.
+        # After you create a Waiter resource, you cannot change the resource name.
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @error = args[:error] if args.key?(:error)
+          @failure = args[:failure] if args.key?(:failure)
+          @success = args[:success] if args.key?(:success)
+          @done = args[:done] if args.key?(:done)
+          @create_time = args[:create_time] if args.key?(:create_time)
+          @timeout = args[:timeout] if args.key?(:timeout)
+          @name = args[:name] if args.key?(:name)
+        end
+      end
+      
+      # Defines an Identity and Access Management (IAM) policy. It is used to
+      # specify access control policies for Cloud Platform resources.
+      # A `Policy` consists of a list of `bindings`. A `Binding` binds a list of
+      # `members` to a `role`, where the members can be user accounts, Google groups,
+      # Google domains, and service accounts. A `role` is a named list of permissions
+      # defined by IAM.
+      # **Example**
+      # `
+      # "bindings": [
+      # `
+      # "role": "roles/owner",
+      # "members": [
+      # "user:mike@example.com",
+      # "group:admins@example.com",
+      # "domain:google.com",
+      # "serviceAccount:my-other-app@appspot.gserviceaccount.com",
+      # ]
+      # `,
+      # `
+      # "role": "roles/viewer",
+      # "members": ["user:sean@example.com"]
+      # `
+      # ]
+      # `
+      # For a description of IAM and its features, see the
+      # [IAM developer's guide](https://cloud.google.com/iam).
+      class Policy
+        include Google::Apis::Core::Hashable
+      
+        # `etag` is used for optimistic concurrency control as a way to help
+        # prevent simultaneous updates of a policy from overwriting each other.
+        # It is strongly suggested that systems make use of the `etag` in the
+        # read-modify-write cycle to perform policy updates in order to avoid race
+        # conditions: An `etag` is returned in the response to `getIamPolicy`, and
+        # systems are expected to put that etag in the request to `setIamPolicy` to
+        # ensure that their change will be applied to the same version of the policy.
+        # If no `etag` is provided in the call to `setIamPolicy`, then the existing
+        # policy is overwritten blindly.
+        # Corresponds to the JSON property `etag`
+        # NOTE: Values are automatically base64 encoded/decoded in the client library.
+        # @return [String]
+        attr_accessor :etag
+      
+        # Version of the `Policy`. The default version is 0.
+        # Corresponds to the JSON property `version`
+        # @return [Fixnum]
+        attr_accessor :version
+      
+        # Associates a list of `members` to a `role`.
+        # `bindings` with no members will result in an error.
+        # Corresponds to the JSON property `bindings`
+        # @return [Array<Google::Apis::RuntimeconfigV1beta1::Binding>]
+        attr_accessor :bindings
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @etag = args[:etag] if args.key?(:etag)
+          @version = args[:version] if args.key?(:version)
+          @bindings = args[:bindings] if args.key?(:bindings)
+        end
+      end
+      
+      # Describes a single variable within a RuntimeConfig resource.
+      # The name denotes the hierarchical variable name. For example,
+      # `ports/serving_port` is a valid variable name. The variable value is an
+      # opaque string and only leaf variables can have values (that is, variables
+      # that do not have any child variables).
+      class Variable
+        include Google::Apis::Core::Hashable
+      
+        # The binary value of the variable. The length of the value must be less
+        # than 4096 bytes. Empty values are also accepted. The value must be
+        # base64 encoded. Only one of `value` or `text` can be set.
+        # Corresponds to the JSON property `value`
+        # NOTE: Values are automatically base64 encoded/decoded in the client library.
+        # @return [String]
+        attr_accessor :value
+      
+        # [Ouput only] The current state of the variable. The variable state indicates
+        # the outcome of the `variables().watch` call and is visible through the
+        # `get` and `list` calls.
+        # Corresponds to the JSON property `state`
+        # @return [String]
+        attr_accessor :state
+      
+        # [Output Only] The time of the last variable update.
+        # Corresponds to the JSON property `updateTime`
+        # @return [String]
+        attr_accessor :update_time
+      
+        # The name of the variable resource, in the format:
+        # projects/[PROJECT_ID]/configs/[CONFIG_NAME]/variables/[VARIABLE_NAME]
+        # The `[PROJECT_ID]` must be a valid project ID, `[CONFIG_NAME]` must be a
+        # valid RuntimeConfig reource and `[VARIABLE_NAME]` follows Unix file system
+        # file path naming.
+        # The `[VARIABLE_NAME]` can contain ASCII letters, numbers, slashes and
+        # dashes. Slashes are used as path element separators and are not part of the
+        # `[VARIABLE_NAME]` itself, so `[VARIABLE_NAME]` must contain at least one
+        # non-slash character. Multiple slashes are coalesced into single slash
+        # character. Each path segment should follow RFC 1035 segment specification.
+        # The length of a `[VARIABLE_NAME]` must be less than 256 bytes.
+        # Once you create a variable, you cannot change the variable name.
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        # The string value of the variable. The length of the value must be less
+        # than 4096 bytes. Empty values are also accepted. For example,
+        # `text: "my text value"`. The string must be valid UTF-8.
+        # Corresponds to the JSON property `text`
+        # @return [String]
+        attr_accessor :text
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @value = args[:value] if args.key?(:value)
+          @state = args[:state] if args.key?(:state)
+          @update_time = args[:update_time] if args.key?(:update_time)
+          @name = args[:name] if args.key?(:name)
+          @text = args[:text] if args.key?(:text)
+        end
+      end
+      
+      # This resource represents a long-running operation that is the result of a
+      # network API call.
+      class Operation
+        include Google::Apis::Core::Hashable
+      
+        # Service-specific metadata associated with the operation.  It typically
+        # contains progress information and common metadata such as create time.
+        # Some services might not provide such metadata.  Any method that returns a
+        # long-running operation should document the metadata type, if any.
+        # Corresponds to the JSON property `metadata`
+        # @return [Hash<String,Object>]
+        attr_accessor :metadata
+      
+        # If the value is `false`, it means the operation is still in progress.
+        # If true, the operation is completed, and either `error` or `response` is
+        # available.
+        # Corresponds to the JSON property `done`
+        # @return [Boolean]
+        attr_accessor :done
+        alias_method :done?, :done
+      
+        # The normal response of the operation in case of success.  If the original
+        # method returns no data on success, such as `Delete`, the response is
+        # `google.protobuf.Empty`.  If the original method is standard
+        # `Get`/`Create`/`Update`, the response should be the resource.  For other
+        # methods, the response should have the type `XxxResponse`, where `Xxx`
+        # is the original method name.  For example, if the original method name
+        # is `TakeSnapshot()`, the inferred response type is
+        # `TakeSnapshotResponse`.
+        # Corresponds to the JSON property `response`
+        # @return [Hash<String,Object>]
+        attr_accessor :response
+      
+        # The server-assigned name, which is only unique within the same service that
+        # originally returns it. If you use the default HTTP mapping, the
+        # `name` should have the format of `operations/some/unique/name`.
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        # The `Status` type defines a logical error model that is suitable for different
+        # programming environments, including REST APIs and RPC APIs. It is used by
+        # [gRPC](https://github.com/grpc). The error model is designed to be:
+        # - Simple to use and understand for most users
+        # - Flexible enough to meet unexpected needs
+        # # Overview
+        # The `Status` message contains three pieces of data: error code, error message,
+        # and error details. The error code should be an enum value of
+        # google.rpc.Code, but it may accept additional error codes if needed.  The
+        # error message should be a developer-facing English message that helps
+        # developers *understand* and *resolve* the error. If a localized user-facing
+        # error message is needed, put the localized message in the error details or
+        # localize it in the client. The optional error details may contain arbitrary
+        # information about the error. There is a predefined set of error detail types
+        # in the package `google.rpc` that can be used for common error conditions.
+        # # Language mapping
+        # The `Status` message is the logical representation of the error model, but it
+        # is not necessarily the actual wire format. When the `Status` message is
+        # exposed in different client libraries and different wire protocols, it can be
+        # mapped differently. For example, it will likely be mapped to some exceptions
+        # in Java, but more likely mapped to some error codes in C.
+        # # Other uses
+        # The error model and the `Status` message can be used in a variety of
+        # environments, either with or without APIs, to provide a
+        # consistent developer experience across different environments.
+        # Example uses of this error model include:
+        # - Partial errors. If a service needs to return partial errors to the client,
+        # it may embed the `Status` in the normal response to indicate the partial
+        # errors.
+        # - Workflow errors. A typical workflow has multiple steps. Each step may
+        # have a `Status` message for error reporting.
+        # - Batch operations. If a client uses batch request and batch response, the
+        # `Status` message should be used directly inside batch response, one for
+        # each error sub-response.
+        # - Asynchronous operations. If an API call embeds asynchronous operation
+        # results in its response, the status of those operations should be
+        # represented directly using the `Status` message.
+        # - Logging. If some API errors are stored in logs, the message `Status` could
+        # be used directly after any stripping needed for security/privacy reasons.
+        # Corresponds to the JSON property `error`
+        # @return [Google::Apis::RuntimeconfigV1beta1::Status]
+        attr_accessor :error
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @metadata = args[:metadata] if args.key?(:metadata)
+          @done = args[:done] if args.key?(:done)
+          @response = args[:response] if args.key?(:response)
+          @name = args[:name] if args.key?(:name)
+          @error = args[:error] if args.key?(:error)
+        end
+      end
+    end
+  end
+end