strongdm 1.0.10 → 1.0.15

data/lib/strongdm.rb

@@ -1,17 +1,17 @@
 # Copyright 2020 StrongDM Inc
-# 
+#
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
 # You may obtain a copy of the License at
-# 
+#
 #     http://www.apache.org/licenses/LICENSE-2.0
-# 
+#
 # Unless required by applicable law or agreed to in writing, software
 # distributed under the License is distributed on an "AS IS" BASIS,
 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 # See the License for the specific language governing permissions and
 # limitations under the License.
-# 
+#
 
 # This file was generated by protogen. DO NOT EDIT.
 
@@ -25,104 +25,107 @@ DEFAULT_MAX_RETRY_DELAY = 300 # 300 seconds
 
 module SDM
 
-    # Client bundles all the services together and initializes them.
-    class Client
-        # Creates a new strongDM API client.
-        def initialize(api_access_key, api_secret_key, host:"api.strongdm.com:443", insecure:false)
-            @api_access_key = api_access_key
-            @api_secret_key = Base64.strict_decode64(api_secret_key)
-            @max_retries = DEFAULT_MAX_RETRIES
-            @base_retry_delay = DEFAULT_BASE_RETRY_DELAY
-            @max_retry_delay = DEFAULT_MAX_RETRY_DELAY
-            @account_attachments = AccountAttachments.new(host, insecure, self)
-            @account_grants = AccountGrants.new(host, insecure, self)
-            @accounts = Accounts.new(host, insecure, self)
-            @nodes = Nodes.new(host, insecure, self)
-            @resources = Resources.new(host, insecure, self)
-            @role_attachments = RoleAttachments.new(host, insecure, self)
-            @role_grants = RoleGrants.new(host, insecure, self)
-            @roles = Roles.new(host, insecure, self)
-            @_test_options = Hash.new
-        end
-
-        def get_metadata(method_name, req)
-            return { 'x-sdm-authentication': @api_access_key,'x-sdm-signature': self.sign(method_name, req.to_proto)}
-        end
-
-        def sign(method_name, msg_bytes)
-            current_utc_date = Time.now.utc
-            date = sprintf("%04d-%02d-%02d",current_utc_date.year, current_utc_date.month, current_utc_date.day)
-
-            signing_key = OpenSSL::HMAC.digest(OpenSSL::Digest::SHA256.new, @api_secret_key, date)
-            signing_key = OpenSSL::HMAC.digest(OpenSSL::Digest::SHA256.new, signing_key, 'sdm_api_v1')
+  # Client bundles all the services together and initializes them.
+  class Client
+    # Creates a new strongDM API client.
+    def initialize(api_access_key, api_secret_key, host: "api.strongdm.com:443", insecure: false)
+      @api_access_key = api_access_key
+      @api_secret_key = Base64.strict_decode64(api_secret_key)
+      @max_retries = DEFAULT_MAX_RETRIES
+      @base_retry_delay = DEFAULT_BASE_RETRY_DELAY
+      @max_retry_delay = DEFAULT_MAX_RETRY_DELAY
+      @account_attachments = AccountAttachments.new(host, insecure, self)
+      @account_grants = AccountGrants.new(host, insecure, self)
+      @accounts = Accounts.new(host, insecure, self)
+      @control_panel = ControlPanel.new(host, insecure, self)
+      @nodes = Nodes.new(host, insecure, self)
+      @resources = Resources.new(host, insecure, self)
+      @role_attachments = RoleAttachments.new(host, insecure, self)
+      @role_grants = RoleGrants.new(host, insecure, self)
+      @roles = Roles.new(host, insecure, self)
+      @secret_stores = SecretStores.new(host, insecure, self)
+      @_test_options = Hash.new
+    end
 
-            sha_req = Digest::SHA256.new
-            sha_req << method_name
-            sha_req << "\n"
-            sha_req << msg_bytes
-            request_hash = sha_req.digest
+    def get_metadata(method_name, req)
+      return { 'x-sdm-authentication': @api_access_key, 'x-sdm-signature': self.sign(method_name, req.to_proto) }
+    end
 
-            return Base64.strict_encode64(OpenSSL::HMAC.digest(OpenSSL::Digest::SHA256.new, signing_key, request_hash))
-        end
+    def sign(method_name, msg_bytes)
+      current_utc_date = Time.now.utc
+      date = sprintf("%04d-%02d-%02d", current_utc_date.year, current_utc_date.month, current_utc_date.day)
 
-        def jitterSleep(iter)
-            dur_max = @base_retry_delay * 2**iter
-            if (dur_max > @max_retry_delay)
-                dur_max = @max_retry_delay
-            end
-            dur = rand() * dur_max
-            sleep(dur)
-        end
+      signing_key = OpenSSL::HMAC.digest(OpenSSL::Digest::SHA256.new, @api_secret_key, date)
+      signing_key = OpenSSL::HMAC.digest(OpenSSL::Digest::SHA256.new, signing_key, "sdm_api_v1")
 
-        def shouldRetry(iter, err)
-            if (iter >= @max_retries-1)
-                return false
-            end
-            if not err .is_a? GRPC::BadStatus
-                return true
-            end
-            return err.code() == 13
-        end
+      sha_req = Digest::SHA256.new
+      sha_req << method_name
+      sha_req << "\n"
+      sha_req << msg_bytes
+      request_hash = sha_req.digest
 
-        attr_reader :max_retries
-        attr_reader :base_retry_delay
-        attr_reader :max_retry_delay
+      return Base64.strict_encode64(OpenSSL::HMAC.digest(OpenSSL::Digest::SHA256.new, signing_key, request_hash))
+    end
 
-        # API authentication token (read-only).
-        attr_reader :api_access_key
-        # AccountAttachments assign an account to a role.
-        attr_reader :account_attachments
-        # AccountGrants assign a resource directly to an account, giving the account the permission to connect to that resource.
-        attr_reader :account_grants
-        # Accounts are users that have access to strongDM.
-        # There are two types of accounts:
-        # 1. **Regular users:** humans who are authenticated through username and password or SSO
-        # 2. **Service users:** machines that are authneticated using a service token
-        attr_reader :accounts
-        # Nodes make up the strongDM network, and allow your users to connect securely to your resources.
-        # There are two types of nodes:
-        # 1. **Relay:** creates connectivity to your datasources, while maintaining the egress-only nature of your firewall
-        # 1. **Gateways:** a relay that also listens for connections from strongDM clients
-        attr_reader :nodes
+    def jitterSleep(iter)
+      dur_max = @base_retry_delay * 2 ** iter
+      if (dur_max > @max_retry_delay)
+        dur_max = @max_retry_delay
+      end
+      dur = rand() * dur_max
+      sleep(dur)
+    end
 
-        attr_reader :resources
-        # RoleAttachments represent relationships between composite roles and the roles
-        # that make up those composite roles. When a composite role is attached to another
-        # role, the permissions granted to members of the composite role are augmented to
-        # include the permissions granted to members of the attached role.
-        attr_reader :role_attachments
-        # RoleGrants represent relationships between composite roles and the roles
-        # that make up those composite roles. When a composite role is attached to another
-        # role, the permissions granted to members of the composite role are augmented to
-        # include the permissions granted to members of the attached role.
-        attr_reader :role_grants
-        # Roles are tools for controlling user access to resources. Each Role holds a
-        # list of resources which they grant access to. Composite roles are a special
-        # type of Role which have no resource associations of their own, but instead
-        # grant access to the combined resources associated with a set of child roles.
-        # Each user can be a member of one Role or composite role.
-        attr_reader :roles
-        attr_reader :_test_options
+    def shouldRetry(iter, err)
+      if (iter >= @max_retries - 1)
+        return false
+      end
+      if not err.is_a? GRPC::BadStatus
+        return true
+      end
+      return err.code() == 13
     end
 
+    attr_reader :max_retries
+    attr_reader :base_retry_delay
+    attr_reader :max_retry_delay
+
+    # API authentication token (read-only).
+    attr_reader :api_access_key
+    # AccountAttachments assign an account to a role or composite role.
+    attr_reader :account_attachments
+    # AccountGrants assign a resource directly to an account, giving the account the permission to connect to that resource.
+    attr_reader :account_grants
+    # Accounts are users that have access to strongDM. There are two types of accounts:
+    # 1. **Users:** humans who are authenticated through username and password or SSO.
+    # 2. **Service Accounts:** machines that are authenticated using a service token.
+    attr_reader :accounts
+    # ControlPanel contains all administrative controls.
+    attr_reader :control_panel
+    # Nodes make up the strongDM network, and allow your users to connect securely to your resources. There are two types of nodes:
+    # - **Gateways** are the entry points into network. They listen for connection from the strongDM client, and provide access to databases and servers.
+    # - **Relays** are used to extend the strongDM network into segmented subnets. They provide access to databases and servers but do not listen for incoming connections.
+    attr_reader :nodes
+
+    attr_reader :resources
+    # RoleAttachments represent relationships between composite roles and the roles
+    # that make up those composite roles. When a composite role is attached to another
+    # role, the permissions granted to members of the composite role are augmented to
+    # include the permissions granted to members of the attached role.
+    attr_reader :role_attachments
+    # RoleGrants represent relationships between composite roles and the roles
+    # that make up those composite roles. When a composite role is attached to another
+    # role, the permissions granted to members of the composite role are augmented to
+    # include the permissions granted to members of the attached role.
+    attr_reader :role_grants
+    # Roles are tools for controlling user access to resources. Each Role holds a
+    # list of resources which they grant access to. Composite roles are a special
+    # type of Role which have no resource associations of their own, but instead
+    # grant access to the combined resources associated with a set of child roles.
+    # Each user can be a member of one Role or composite role.
+    attr_reader :roles
+    # SecretStores are servers where resource secrets (passwords, keys) are stored.
+    attr_reader :secret_stores
+    attr_reader :_test_options
+  end
 end

data/lib/svc.rb

@@ -1,1329 +1,1522 @@
 # Copyright 2020 StrongDM Inc
-# 
+#
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
 # You may obtain a copy of the License at
-# 
+#
 #     http://www.apache.org/licenses/LICENSE-2.0
-# 
+#
 # Unless required by applicable law or agreed to in writing, software
 # distributed under the License is distributed on an "AS IS" BASIS,
 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 # See the License for the specific language governing permissions and
 # limitations under the License.
-# 
+#
 
 # This file was generated by protogen. DO NOT EDIT.
 
 this_dir = File.expand_path(File.dirname(__FILE__))
-lib_dir = File.join(this_dir, 'grpc')
+lib_dir = File.join(this_dir, "grpc")
 $LOAD_PATH.unshift(lib_dir) unless $LOAD_PATH.include?(lib_dir)
-require 'grpc'
-require 'enumerator'
-Dir[File.join(__dir__, 'grpc', '*.rb')].each {|file| require file }
-Dir[File.join(__dir__, 'models', '*.rb')].each {|file| require file }
+require "grpc"
+require "enumerator"
+Dir[File.join(__dir__, "grpc", "*.rb")].each { |file| require file }
+Dir[File.join(__dir__, "models", "*.rb")].each { |file| require file }
 
 module SDM
-    # AccountAttachments assign an account to a role.
-    class AccountAttachments
-        def initialize(host, insecure, parent)
-            begin
-                if insecure
-                    @stub = V1::AccountAttachments::Stub.new(host, :this_channel_is_insecure)
-                else
-                    cred = GRPC::Core::ChannelCredentials.new()
-                    @stub = V1::AccountAttachments::Stub.new(host, cred)
-                end
-            rescue => exception
-                raise Plumbing::convert_error_to_porcelain(exception)
-            end
-            @parent = parent
+  # AccountAttachments assign an account to a role or composite role.
+  class AccountAttachments
+    def initialize(host, insecure, parent)
+      begin
+        if insecure
+          @stub = V1::AccountAttachments::Stub.new(host, :this_channel_is_insecure)
+        else
+          cred = GRPC::Core::ChannelCredentials.new()
+          @stub = V1::AccountAttachments::Stub.new(host, cred)
         end
-        # Create registers a new AccountAttachment.
-        def create(
-account_attachment \
-,
- deadline:nil)
-            req = V1::AccountAttachmentCreateRequest.new()
-			
-            req.account_attachment = Plumbing::convert_account_attachment_to_plumbing(account_attachment)
-            tries = 0
-            plumbing_response = nil
-            loop do
-                begin
-                    plumbing_response = @stub.create(req, metadata: @parent.get_metadata('AccountAttachments.Create', req), deadline:deadline)
-                rescue => exception
-                    if (@parent.shouldRetry(tries, exception))
-                        tries++
-                        @parent.jitterSleep(tries)
-                        next
-                    end
-                    raise Plumbing::convert_error_to_porcelain(exception)
-                end
-                break
-            end
+      rescue => exception
+        raise Plumbing::convert_error_to_porcelain(exception)
+      end
+      @parent = parent
+    end
 
-			
-            resp = AccountAttachmentCreateResponse.new()
-            resp.meta = Plumbing::convert_create_response_metadata_to_porcelain(plumbing_response.meta)
-            resp.account_attachment = Plumbing::convert_account_attachment_to_porcelain(plumbing_response.account_attachment)
-            resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
-            resp
+    # Create registers a new AccountAttachment.
+    def create(
+      account_attachment,
+      deadline: nil
+    )
+      req = V1::AccountAttachmentCreateRequest.new()
+
+      req.account_attachment = Plumbing::convert_account_attachment_to_plumbing(account_attachment)
+      tries = 0
+      plumbing_response = nil
+      loop do
+        begin
+          plumbing_response = @stub.create(req, metadata: @parent.get_metadata("AccountAttachments.Create", req), deadline: deadline)
+        rescue => exception
+          if (@parent.shouldRetry(tries, exception))
+            tries + +@parent.jitterSleep(tries)
+            next
+          end
+          raise Plumbing::convert_error_to_porcelain(exception)
         end
-        # Get reads one AccountAttachment by ID.
-        def get(
-id \
-,
- deadline:nil)
-            req = V1::AccountAttachmentGetRequest.new()
-			
-            req.id = (id)
-            tries = 0
-            plumbing_response = nil
-            loop do
-                begin
-                    plumbing_response = @stub.get(req, metadata: @parent.get_metadata('AccountAttachments.Get', req), deadline:deadline)
-                rescue => exception
-                    if (@parent.shouldRetry(tries, exception))
-                        tries++
-                        @parent.jitterSleep(tries)
-                        next
-                    end
-                    raise Plumbing::convert_error_to_porcelain(exception)
-                end
-                break
-            end
+        break
+      end
+
+      resp = AccountAttachmentCreateResponse.new()
+      resp.meta = Plumbing::convert_create_response_metadata_to_porcelain(plumbing_response.meta)
+      resp.account_attachment = Plumbing::convert_account_attachment_to_porcelain(plumbing_response.account_attachment)
+      resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
+      resp
+    end
+
+    # Get reads one AccountAttachment by ID.
+    def get(
+      id,
+      deadline: nil
+    )
+      req = V1::AccountAttachmentGetRequest.new()
 
-			
-            resp = AccountAttachmentGetResponse.new()
-            resp.meta = Plumbing::convert_get_response_metadata_to_porcelain(plumbing_response.meta)
-            resp.account_attachment = Plumbing::convert_account_attachment_to_porcelain(plumbing_response.account_attachment)
-            resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
-            resp
+      req.id = (id)
+      tries = 0
+      plumbing_response = nil
+      loop do
+        begin
+          plumbing_response = @stub.get(req, metadata: @parent.get_metadata("AccountAttachments.Get", req), deadline: deadline)
+        rescue => exception
+          if (@parent.shouldRetry(tries, exception))
+            tries + +@parent.jitterSleep(tries)
+            next
+          end
+          raise Plumbing::convert_error_to_porcelain(exception)
         end
-        # Delete removes a AccountAttachment by ID.
-        def delete(
-id \
-,
- deadline:nil)
-            req = V1::AccountAttachmentDeleteRequest.new()
-			
-            req.id = (id)
-            tries = 0
-            plumbing_response = nil
-            loop do
-                begin
-                    plumbing_response = @stub.delete(req, metadata: @parent.get_metadata('AccountAttachments.Delete', req), deadline:deadline)
-                rescue => exception
-                    if (@parent.shouldRetry(tries, exception))
-                        tries++
-                        @parent.jitterSleep(tries)
-                        next
-                    end
-                    raise Plumbing::convert_error_to_porcelain(exception)
-                end
-                break
-            end
+        break
+      end
+
+      resp = AccountAttachmentGetResponse.new()
+      resp.meta = Plumbing::convert_get_response_metadata_to_porcelain(plumbing_response.meta)
+      resp.account_attachment = Plumbing::convert_account_attachment_to_porcelain(plumbing_response.account_attachment)
+      resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
+      resp
+    end
+
+    # Delete removes a AccountAttachment by ID.
+    def delete(
+      id,
+      deadline: nil
+    )
+      req = V1::AccountAttachmentDeleteRequest.new()
 
-			
-            resp = AccountAttachmentDeleteResponse.new()
-            resp.meta = Plumbing::convert_delete_response_metadata_to_porcelain(plumbing_response.meta)
-            resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
-            resp
+      req.id = (id)
+      tries = 0
+      plumbing_response = nil
+      loop do
+        begin
+          plumbing_response = @stub.delete(req, metadata: @parent.get_metadata("AccountAttachments.Delete", req), deadline: deadline)
+        rescue => exception
+          if (@parent.shouldRetry(tries, exception))
+            tries + +@parent.jitterSleep(tries)
+            next
+          end
+          raise Plumbing::convert_error_to_porcelain(exception)
         end
-        # List gets a list of AccountAttachments matching a given set of criteria.
-        def list(
-filter \
-,
-*args,
- deadline:nil)
-            req = V1::AccountAttachmentListRequest.new()
-            req.meta = V1::ListRequestMetadata.new()
-            page_size_option = @parent._test_options['PageSize']
-            if page_size_option.is_a? Integer
-                req.meta.limit = page_size_option
+        break
+      end
+
+      resp = AccountAttachmentDeleteResponse.new()
+      resp.meta = Plumbing::convert_delete_response_metadata_to_porcelain(plumbing_response.meta)
+      resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
+      resp
+    end
+
+    # List gets a list of AccountAttachments matching a given set of criteria.
+    def list(
+      filter,
+      *args,
+      deadline: nil
+    )
+      req = V1::AccountAttachmentListRequest.new()
+      req.meta = V1::ListRequestMetadata.new()
+      page_size_option = @parent._test_options["PageSize"]
+      if page_size_option.is_a? Integer
+        req.meta.limit = page_size_option
+      end
+
+      req.filter = Plumbing::quote_filter_args(filter, *args)
+      resp = Enumerator::Generator.new { |g|
+        tries = 0
+        loop do
+          begin
+            plumbing_response = @stub.list(req, metadata: @parent.get_metadata("AccountAttachments.List", req), deadline: deadline)
+          rescue => exception
+            if (@parent.shouldRetry(tries, exception))
+              tries + +@parent.jitterSleep(tries)
+              next
             end
-			
-            req.filter = Plumbing::quote_filter_args(filter, *args)
-            resp = Enumerator::Generator.new { |g|
-                tries = 0
-                loop do
-                    begin
-                        plumbing_response = @stub.list(req, metadata: @parent.get_metadata('AccountAttachments.List', req), deadline:deadline)
-                    rescue => exception
-                        if (@parent.shouldRetry(tries, exception))
-                            tries++
-                            @parent.jitterSleep(tries)
-                            next
-                        end
-                        raise Plumbing::convert_error_to_porcelain(exception)
-                    end
-                    tries = 0
-                    plumbing_response.account_attachments.each do |plumbing_item|
-                        g.yield Plumbing::convert_account_attachment_to_porcelain(plumbing_item)
-                    end
-                    break if plumbing_response.meta.next_cursor == ""
-                    req.meta.cursor = plumbing_response.meta.next_cursor
-                end
-            }
-            resp
+            raise Plumbing::convert_error_to_porcelain(exception)
+          end
+          tries = 0
+          plumbing_response.account_attachments.each do |plumbing_item|
+            g.yield Plumbing::convert_account_attachment_to_porcelain(plumbing_item)
+          end
+          break if plumbing_response.meta.next_cursor == ""
+          req.meta.cursor = plumbing_response.meta.next_cursor
         end
+      }
+      resp
     end
-    # AccountGrants assign a resource directly to an account, giving the account the permission to connect to that resource.
-    class AccountGrants
-        def initialize(host, insecure, parent)
-            begin
-                if insecure
-                    @stub = V1::AccountGrants::Stub.new(host, :this_channel_is_insecure)
-                else
-                    cred = GRPC::Core::ChannelCredentials.new()
-                    @stub = V1::AccountGrants::Stub.new(host, cred)
-                end
-            rescue => exception
-                raise Plumbing::convert_error_to_porcelain(exception)
-            end
-            @parent = parent
+  end
+
+  # AccountGrants assign a resource directly to an account, giving the account the permission to connect to that resource.
+  class AccountGrants
+    def initialize(host, insecure, parent)
+      begin
+        if insecure
+          @stub = V1::AccountGrants::Stub.new(host, :this_channel_is_insecure)
+        else
+          cred = GRPC::Core::ChannelCredentials.new()
+          @stub = V1::AccountGrants::Stub.new(host, cred)
         end
-        # Create registers a new AccountGrant.
-        def create(
-account_grant \
-,
- deadline:nil)
-            req = V1::AccountGrantCreateRequest.new()
-			
-            req.account_grant = Plumbing::convert_account_grant_to_plumbing(account_grant)
-            tries = 0
-            plumbing_response = nil
-            loop do
-                begin
-                    plumbing_response = @stub.create(req, metadata: @parent.get_metadata('AccountGrants.Create', req), deadline:deadline)
-                rescue => exception
-                    if (@parent.shouldRetry(tries, exception))
-                        tries++
-                        @parent.jitterSleep(tries)
-                        next
-                    end
-                    raise Plumbing::convert_error_to_porcelain(exception)
-                end
-                break
-            end
+      rescue => exception
+        raise Plumbing::convert_error_to_porcelain(exception)
+      end
+      @parent = parent
+    end
+
+    # Create registers a new AccountGrant.
+    def create(
+      account_grant,
+      deadline: nil
+    )
+      req = V1::AccountGrantCreateRequest.new()
 
-			
-            resp = AccountGrantCreateResponse.new()
-            resp.meta = Plumbing::convert_create_response_metadata_to_porcelain(plumbing_response.meta)
-            resp.account_grant = Plumbing::convert_account_grant_to_porcelain(plumbing_response.account_grant)
-            resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
-            resp
+      req.account_grant = Plumbing::convert_account_grant_to_plumbing(account_grant)
+      tries = 0
+      plumbing_response = nil
+      loop do
+        begin
+          plumbing_response = @stub.create(req, metadata: @parent.get_metadata("AccountGrants.Create", req), deadline: deadline)
+        rescue => exception
+          if (@parent.shouldRetry(tries, exception))
+            tries + +@parent.jitterSleep(tries)
+            next
+          end
+          raise Plumbing::convert_error_to_porcelain(exception)
         end
-        # Get reads one AccountGrant by ID.
-        def get(
-id \
-,
- deadline:nil)
-            req = V1::AccountGrantGetRequest.new()
-			
-            req.id = (id)
-            tries = 0
-            plumbing_response = nil
-            loop do
-                begin
-                    plumbing_response = @stub.get(req, metadata: @parent.get_metadata('AccountGrants.Get', req), deadline:deadline)
-                rescue => exception
-                    if (@parent.shouldRetry(tries, exception))
-                        tries++
-                        @parent.jitterSleep(tries)
-                        next
-                    end
-                    raise Plumbing::convert_error_to_porcelain(exception)
-                end
-                break
-            end
+        break
+      end
+
+      resp = AccountGrantCreateResponse.new()
+      resp.meta = Plumbing::convert_create_response_metadata_to_porcelain(plumbing_response.meta)
+      resp.account_grant = Plumbing::convert_account_grant_to_porcelain(plumbing_response.account_grant)
+      resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
+      resp
+    end
+
+    # Get reads one AccountGrant by ID.
+    def get(
+      id,
+      deadline: nil
+    )
+      req = V1::AccountGrantGetRequest.new()
 
-			
-            resp = AccountGrantGetResponse.new()
-            resp.meta = Plumbing::convert_get_response_metadata_to_porcelain(plumbing_response.meta)
-            resp.account_grant = Plumbing::convert_account_grant_to_porcelain(plumbing_response.account_grant)
-            resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
-            resp
+      req.id = (id)
+      tries = 0
+      plumbing_response = nil
+      loop do
+        begin
+          plumbing_response = @stub.get(req, metadata: @parent.get_metadata("AccountGrants.Get", req), deadline: deadline)
+        rescue => exception
+          if (@parent.shouldRetry(tries, exception))
+            tries + +@parent.jitterSleep(tries)
+            next
+          end
+          raise Plumbing::convert_error_to_porcelain(exception)
         end
-        # Delete removes a AccountGrant by ID.
-        def delete(
-id \
-,
- deadline:nil)
-            req = V1::AccountGrantDeleteRequest.new()
-			
-            req.id = (id)
-            tries = 0
-            plumbing_response = nil
-            loop do
-                begin
-                    plumbing_response = @stub.delete(req, metadata: @parent.get_metadata('AccountGrants.Delete', req), deadline:deadline)
-                rescue => exception
-                    if (@parent.shouldRetry(tries, exception))
-                        tries++
-                        @parent.jitterSleep(tries)
-                        next
-                    end
-                    raise Plumbing::convert_error_to_porcelain(exception)
-                end
-                break
-            end
+        break
+      end
+
+      resp = AccountGrantGetResponse.new()
+      resp.meta = Plumbing::convert_get_response_metadata_to_porcelain(plumbing_response.meta)
+      resp.account_grant = Plumbing::convert_account_grant_to_porcelain(plumbing_response.account_grant)
+      resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
+      resp
+    end
+
+    # Delete removes a AccountGrant by ID.
+    def delete(
+      id,
+      deadline: nil
+    )
+      req = V1::AccountGrantDeleteRequest.new()
 
-			
-            resp = AccountGrantDeleteResponse.new()
-            resp.meta = Plumbing::convert_delete_response_metadata_to_porcelain(plumbing_response.meta)
-            resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
-            resp
+      req.id = (id)
+      tries = 0
+      plumbing_response = nil
+      loop do
+        begin
+          plumbing_response = @stub.delete(req, metadata: @parent.get_metadata("AccountGrants.Delete", req), deadline: deadline)
+        rescue => exception
+          if (@parent.shouldRetry(tries, exception))
+            tries + +@parent.jitterSleep(tries)
+            next
+          end
+          raise Plumbing::convert_error_to_porcelain(exception)
         end
-        # List gets a list of AccountGrants matching a given set of criteria.
-        def list(
-filter \
-,
-*args,
- deadline:nil)
-            req = V1::AccountGrantListRequest.new()
-            req.meta = V1::ListRequestMetadata.new()
-            page_size_option = @parent._test_options['PageSize']
-            if page_size_option.is_a? Integer
-                req.meta.limit = page_size_option
+        break
+      end
+
+      resp = AccountGrantDeleteResponse.new()
+      resp.meta = Plumbing::convert_delete_response_metadata_to_porcelain(plumbing_response.meta)
+      resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
+      resp
+    end
+
+    # List gets a list of AccountGrants matching a given set of criteria.
+    def list(
+      filter,
+      *args,
+      deadline: nil
+    )
+      req = V1::AccountGrantListRequest.new()
+      req.meta = V1::ListRequestMetadata.new()
+      page_size_option = @parent._test_options["PageSize"]
+      if page_size_option.is_a? Integer
+        req.meta.limit = page_size_option
+      end
+
+      req.filter = Plumbing::quote_filter_args(filter, *args)
+      resp = Enumerator::Generator.new { |g|
+        tries = 0
+        loop do
+          begin
+            plumbing_response = @stub.list(req, metadata: @parent.get_metadata("AccountGrants.List", req), deadline: deadline)
+          rescue => exception
+            if (@parent.shouldRetry(tries, exception))
+              tries + +@parent.jitterSleep(tries)
+              next
             end
-			
-            req.filter = Plumbing::quote_filter_args(filter, *args)
-            resp = Enumerator::Generator.new { |g|
-                tries = 0
-                loop do
-                    begin
-                        plumbing_response = @stub.list(req, metadata: @parent.get_metadata('AccountGrants.List', req), deadline:deadline)
-                    rescue => exception
-                        if (@parent.shouldRetry(tries, exception))
-                            tries++
-                            @parent.jitterSleep(tries)
-                            next
-                        end
-                        raise Plumbing::convert_error_to_porcelain(exception)
-                    end
-                    tries = 0
-                    plumbing_response.account_grants.each do |plumbing_item|
-                        g.yield Plumbing::convert_account_grant_to_porcelain(plumbing_item)
-                    end
-                    break if plumbing_response.meta.next_cursor == ""
-                    req.meta.cursor = plumbing_response.meta.next_cursor
-                end
-            }
-            resp
+            raise Plumbing::convert_error_to_porcelain(exception)
+          end
+          tries = 0
+          plumbing_response.account_grants.each do |plumbing_item|
+            g.yield Plumbing::convert_account_grant_to_porcelain(plumbing_item)
+          end
+          break if plumbing_response.meta.next_cursor == ""
+          req.meta.cursor = plumbing_response.meta.next_cursor
         end
+      }
+      resp
     end
-    # Accounts are users that have access to strongDM.
-    # There are two types of accounts:
-    # 1. **Regular users:** humans who are authenticated through username and password or SSO
-    # 2. **Service users:** machines that are authneticated using a service token
-    class Accounts
-        def initialize(host, insecure, parent)
-            begin
-                if insecure
-                    @stub = V1::Accounts::Stub.new(host, :this_channel_is_insecure)
-                else
-                    cred = GRPC::Core::ChannelCredentials.new()
-                    @stub = V1::Accounts::Stub.new(host, cred)
-                end
-            rescue => exception
-                raise Plumbing::convert_error_to_porcelain(exception)
-            end
-            @parent = parent
+  end
+
+  # Accounts are users that have access to strongDM. There are two types of accounts:
+  # 1. **Users:** humans who are authenticated through username and password or SSO.
+  # 2. **Service Accounts:** machines that are authenticated using a service token.
+  class Accounts
+    def initialize(host, insecure, parent)
+      begin
+        if insecure
+          @stub = V1::Accounts::Stub.new(host, :this_channel_is_insecure)
+        else
+          cred = GRPC::Core::ChannelCredentials.new()
+          @stub = V1::Accounts::Stub.new(host, cred)
         end
-        # Create registers a new Account.
-        def create(
-account \
-,
- deadline:nil)
-            req = V1::AccountCreateRequest.new()
-			
-            req.account = Plumbing::convert_account_to_plumbing(account)
-            tries = 0
-            plumbing_response = nil
-            loop do
-                begin
-                    plumbing_response = @stub.create(req, metadata: @parent.get_metadata('Accounts.Create', req), deadline:deadline)
-                rescue => exception
-                    if (@parent.shouldRetry(tries, exception))
-                        tries++
-                        @parent.jitterSleep(tries)
-                        next
-                    end
-                    raise Plumbing::convert_error_to_porcelain(exception)
-                end
-                break
-            end
+      rescue => exception
+        raise Plumbing::convert_error_to_porcelain(exception)
+      end
+      @parent = parent
+    end
+
+    # Create registers a new Account.
+    def create(
+      account,
+      deadline: nil
+    )
+      req = V1::AccountCreateRequest.new()
 
-			
-            resp = AccountCreateResponse.new()
-            resp.meta = Plumbing::convert_create_response_metadata_to_porcelain(plumbing_response.meta)
-            resp.account = Plumbing::convert_account_to_porcelain(plumbing_response.account)
-            resp.token = (plumbing_response.token)
-            resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
-            resp
+      req.account = Plumbing::convert_account_to_plumbing(account)
+      tries = 0
+      plumbing_response = nil
+      loop do
+        begin
+          plumbing_response = @stub.create(req, metadata: @parent.get_metadata("Accounts.Create", req), deadline: deadline)
+        rescue => exception
+          if (@parent.shouldRetry(tries, exception))
+            tries + +@parent.jitterSleep(tries)
+            next
+          end
+          raise Plumbing::convert_error_to_porcelain(exception)
         end
-        # Get reads one Account by ID.
-        def get(
-id \
-,
- deadline:nil)
-            req = V1::AccountGetRequest.new()
-			
-            req.id = (id)
-            tries = 0
-            plumbing_response = nil
-            loop do
-                begin
-                    plumbing_response = @stub.get(req, metadata: @parent.get_metadata('Accounts.Get', req), deadline:deadline)
-                rescue => exception
-                    if (@parent.shouldRetry(tries, exception))
-                        tries++
-                        @parent.jitterSleep(tries)
-                        next
-                    end
-                    raise Plumbing::convert_error_to_porcelain(exception)
-                end
-                break
-            end
+        break
+      end
+
+      resp = AccountCreateResponse.new()
+      resp.meta = Plumbing::convert_create_response_metadata_to_porcelain(plumbing_response.meta)
+      resp.account = Plumbing::convert_account_to_porcelain(plumbing_response.account)
+      resp.token = (plumbing_response.token)
+      resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
+      resp
+    end
 
-			
-            resp = AccountGetResponse.new()
-            resp.meta = Plumbing::convert_get_response_metadata_to_porcelain(plumbing_response.meta)
-            resp.account = Plumbing::convert_account_to_porcelain(plumbing_response.account)
-            resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
-            resp
+    # Get reads one Account by ID.
+    def get(
+      id,
+      deadline: nil
+    )
+      req = V1::AccountGetRequest.new()
+
+      req.id = (id)
+      tries = 0
+      plumbing_response = nil
+      loop do
+        begin
+          plumbing_response = @stub.get(req, metadata: @parent.get_metadata("Accounts.Get", req), deadline: deadline)
+        rescue => exception
+          if (@parent.shouldRetry(tries, exception))
+            tries + +@parent.jitterSleep(tries)
+            next
+          end
+          raise Plumbing::convert_error_to_porcelain(exception)
         end
-        # Update patches a Account by ID.
-        def update(
-account \
-,
- deadline:nil)
-            req = V1::AccountUpdateRequest.new()
-			
-            req.account = Plumbing::convert_account_to_plumbing(account)
-            tries = 0
-            plumbing_response = nil
-            loop do
-                begin
-                    plumbing_response = @stub.update(req, metadata: @parent.get_metadata('Accounts.Update', req), deadline:deadline)
-                rescue => exception
-                    if (@parent.shouldRetry(tries, exception))
-                        tries++
-                        @parent.jitterSleep(tries)
-                        next
-                    end
-                    raise Plumbing::convert_error_to_porcelain(exception)
-                end
-                break
-            end
+        break
+      end
+
+      resp = AccountGetResponse.new()
+      resp.meta = Plumbing::convert_get_response_metadata_to_porcelain(plumbing_response.meta)
+      resp.account = Plumbing::convert_account_to_porcelain(plumbing_response.account)
+      resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
+      resp
+    end
+
+    # Update patches a Account by ID.
+    def update(
+      account,
+      deadline: nil
+    )
+      req = V1::AccountUpdateRequest.new()
 
-			
-            resp = AccountUpdateResponse.new()
-            resp.meta = Plumbing::convert_update_response_metadata_to_porcelain(plumbing_response.meta)
-            resp.account = Plumbing::convert_account_to_porcelain(plumbing_response.account)
-            resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
-            resp
+      req.account = Plumbing::convert_account_to_plumbing(account)
+      tries = 0
+      plumbing_response = nil
+      loop do
+        begin
+          plumbing_response = @stub.update(req, metadata: @parent.get_metadata("Accounts.Update", req), deadline: deadline)
+        rescue => exception
+          if (@parent.shouldRetry(tries, exception))
+            tries + +@parent.jitterSleep(tries)
+            next
+          end
+          raise Plumbing::convert_error_to_porcelain(exception)
         end
-        # Delete removes a Account by ID.
-        def delete(
-id \
-,
- deadline:nil)
-            req = V1::AccountDeleteRequest.new()
-			
-            req.id = (id)
-            tries = 0
-            plumbing_response = nil
-            loop do
-                begin
-                    plumbing_response = @stub.delete(req, metadata: @parent.get_metadata('Accounts.Delete', req), deadline:deadline)
-                rescue => exception
-                    if (@parent.shouldRetry(tries, exception))
-                        tries++
-                        @parent.jitterSleep(tries)
-                        next
-                    end
-                    raise Plumbing::convert_error_to_porcelain(exception)
-                end
-                break
-            end
+        break
+      end
+
+      resp = AccountUpdateResponse.new()
+      resp.meta = Plumbing::convert_update_response_metadata_to_porcelain(plumbing_response.meta)
+      resp.account = Plumbing::convert_account_to_porcelain(plumbing_response.account)
+      resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
+      resp
+    end
 
-			
-            resp = AccountDeleteResponse.new()
-            resp.meta = Plumbing::convert_delete_response_metadata_to_porcelain(plumbing_response.meta)
-            resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
-            resp
+    # Delete removes a Account by ID.
+    def delete(
+      id,
+      deadline: nil
+    )
+      req = V1::AccountDeleteRequest.new()
+
+      req.id = (id)
+      tries = 0
+      plumbing_response = nil
+      loop do
+        begin
+          plumbing_response = @stub.delete(req, metadata: @parent.get_metadata("Accounts.Delete", req), deadline: deadline)
+        rescue => exception
+          if (@parent.shouldRetry(tries, exception))
+            tries + +@parent.jitterSleep(tries)
+            next
+          end
+          raise Plumbing::convert_error_to_porcelain(exception)
         end
-        # List gets a list of Accounts matching a given set of criteria.
-        def list(
-filter \
-,
-*args,
- deadline:nil)
-            req = V1::AccountListRequest.new()
-            req.meta = V1::ListRequestMetadata.new()
-            page_size_option = @parent._test_options['PageSize']
-            if page_size_option.is_a? Integer
-                req.meta.limit = page_size_option
+        break
+      end
+
+      resp = AccountDeleteResponse.new()
+      resp.meta = Plumbing::convert_delete_response_metadata_to_porcelain(plumbing_response.meta)
+      resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
+      resp
+    end
+
+    # List gets a list of Accounts matching a given set of criteria.
+    def list(
+      filter,
+      *args,
+      deadline: nil
+    )
+      req = V1::AccountListRequest.new()
+      req.meta = V1::ListRequestMetadata.new()
+      page_size_option = @parent._test_options["PageSize"]
+      if page_size_option.is_a? Integer
+        req.meta.limit = page_size_option
+      end
+
+      req.filter = Plumbing::quote_filter_args(filter, *args)
+      resp = Enumerator::Generator.new { |g|
+        tries = 0
+        loop do
+          begin
+            plumbing_response = @stub.list(req, metadata: @parent.get_metadata("Accounts.List", req), deadline: deadline)
+          rescue => exception
+            if (@parent.shouldRetry(tries, exception))
+              tries + +@parent.jitterSleep(tries)
+              next
             end
-			
-            req.filter = Plumbing::quote_filter_args(filter, *args)
-            resp = Enumerator::Generator.new { |g|
-                tries = 0
-                loop do
-                    begin
-                        plumbing_response = @stub.list(req, metadata: @parent.get_metadata('Accounts.List', req), deadline:deadline)
-                    rescue => exception
-                        if (@parent.shouldRetry(tries, exception))
-                            tries++
-                            @parent.jitterSleep(tries)
-                            next
-                        end
-                        raise Plumbing::convert_error_to_porcelain(exception)
-                    end
-                    tries = 0
-                    plumbing_response.accounts.each do |plumbing_item|
-                        g.yield Plumbing::convert_account_to_porcelain(plumbing_item)
-                    end
-                    break if plumbing_response.meta.next_cursor == ""
-                    req.meta.cursor = plumbing_response.meta.next_cursor
-                end
-            }
-            resp
+            raise Plumbing::convert_error_to_porcelain(exception)
+          end
+          tries = 0
+          plumbing_response.accounts.each do |plumbing_item|
+            g.yield Plumbing::convert_account_to_porcelain(plumbing_item)
+          end
+          break if plumbing_response.meta.next_cursor == ""
+          req.meta.cursor = plumbing_response.meta.next_cursor
         end
+      }
+      resp
     end
-    # Nodes make up the strongDM network, and allow your users to connect securely to your resources.
-    # There are two types of nodes:
-    # 1. **Relay:** creates connectivity to your datasources, while maintaining the egress-only nature of your firewall
-    # 1. **Gateways:** a relay that also listens for connections from strongDM clients
-    class Nodes
-        def initialize(host, insecure, parent)
-            begin
-                if insecure
-                    @stub = V1::Nodes::Stub.new(host, :this_channel_is_insecure)
-                else
-                    cred = GRPC::Core::ChannelCredentials.new()
-                    @stub = V1::Nodes::Stub.new(host, cred)
-                end
-            rescue => exception
-                raise Plumbing::convert_error_to_porcelain(exception)
-            end
-            @parent = parent
+  end
+
+  # ControlPanel contains all administrative controls.
+  class ControlPanel
+    def initialize(host, insecure, parent)
+      begin
+        if insecure
+          @stub = V1::ControlPanel::Stub.new(host, :this_channel_is_insecure)
+        else
+          cred = GRPC::Core::ChannelCredentials.new()
+          @stub = V1::ControlPanel::Stub.new(host, cred)
         end
-        # Create registers a new Node.
-        def create(
-node \
-,
- deadline:nil)
-            req = V1::NodeCreateRequest.new()
-			
-            req.node = Plumbing::convert_node_to_plumbing(node)
-            tries = 0
-            plumbing_response = nil
-            loop do
-                begin
-                    plumbing_response = @stub.create(req, metadata: @parent.get_metadata('Nodes.Create', req), deadline:deadline)
-                rescue => exception
-                    if (@parent.shouldRetry(tries, exception))
-                        tries++
-                        @parent.jitterSleep(tries)
-                        next
-                    end
-                    raise Plumbing::convert_error_to_porcelain(exception)
-                end
-                break
-            end
+      rescue => exception
+        raise Plumbing::convert_error_to_porcelain(exception)
+      end
+      @parent = parent
+    end
 
-			
-            resp = NodeCreateResponse.new()
-            resp.meta = Plumbing::convert_create_response_metadata_to_porcelain(plumbing_response.meta)
-            resp.node = Plumbing::convert_node_to_porcelain(plumbing_response.node)
-            resp.token = (plumbing_response.token)
-            resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
-            resp
+    # GetSSHCAPublicKey retrieves the SSH CA public key.
+    def get_sshca_public_key(
+      deadline: nil
+    )
+      req = V1::ControlPanelGetSSHCAPublicKeyRequest.new()
+
+      tries = 0
+      plumbing_response = nil
+      loop do
+        begin
+          plumbing_response = @stub.get_sshca_public_key(req, metadata: @parent.get_metadata("ControlPanel.GetSSHCAPublicKey", req), deadline: deadline)
+        rescue => exception
+          if (@parent.shouldRetry(tries, exception))
+            tries + +@parent.jitterSleep(tries)
+            next
+          end
+          raise Plumbing::convert_error_to_porcelain(exception)
         end
-        # Get reads one Node by ID.
-        def get(
-id \
-,
- deadline:nil)
-            req = V1::NodeGetRequest.new()
-			
-            req.id = (id)
-            tries = 0
-            plumbing_response = nil
-            loop do
-                begin
-                    plumbing_response = @stub.get(req, metadata: @parent.get_metadata('Nodes.Get', req), deadline:deadline)
-                rescue => exception
-                    if (@parent.shouldRetry(tries, exception))
-                        tries++
-                        @parent.jitterSleep(tries)
-                        next
-                    end
-                    raise Plumbing::convert_error_to_porcelain(exception)
-                end
-                break
-            end
+        break
+      end
+
+      resp = ControlPanelGetSSHCAPublicKeyResponse.new()
+      resp.meta = Plumbing::convert_get_response_metadata_to_porcelain(plumbing_response.meta)
+      resp.public_key = (plumbing_response.public_key)
+      resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
+      resp
+    end
+  end
 
-			
-            resp = NodeGetResponse.new()
-            resp.meta = Plumbing::convert_get_response_metadata_to_porcelain(plumbing_response.meta)
-            resp.node = Plumbing::convert_node_to_porcelain(plumbing_response.node)
-            resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
-            resp
+  # Nodes make up the strongDM network, and allow your users to connect securely to your resources. There are two types of nodes:
+  # - **Gateways** are the entry points into network. They listen for connection from the strongDM client, and provide access to databases and servers.
+  # - **Relays** are used to extend the strongDM network into segmented subnets. They provide access to databases and servers but do not listen for incoming connections.
+  class Nodes
+    def initialize(host, insecure, parent)
+      begin
+        if insecure
+          @stub = V1::Nodes::Stub.new(host, :this_channel_is_insecure)
+        else
+          cred = GRPC::Core::ChannelCredentials.new()
+          @stub = V1::Nodes::Stub.new(host, cred)
         end
-        # Update patches a Node by ID.
-        def update(
-node \
-,
- deadline:nil)
-            req = V1::NodeUpdateRequest.new()
-			
-            req.node = Plumbing::convert_node_to_plumbing(node)
-            tries = 0
-            plumbing_response = nil
-            loop do
-                begin
-                    plumbing_response = @stub.update(req, metadata: @parent.get_metadata('Nodes.Update', req), deadline:deadline)
-                rescue => exception
-                    if (@parent.shouldRetry(tries, exception))
-                        tries++
-                        @parent.jitterSleep(tries)
-                        next
-                    end
-                    raise Plumbing::convert_error_to_porcelain(exception)
-                end
-                break
-            end
+      rescue => exception
+        raise Plumbing::convert_error_to_porcelain(exception)
+      end
+      @parent = parent
+    end
 
-			
-            resp = NodeUpdateResponse.new()
-            resp.meta = Plumbing::convert_update_response_metadata_to_porcelain(plumbing_response.meta)
-            resp.node = Plumbing::convert_node_to_porcelain(plumbing_response.node)
-            resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
-            resp
+    # Create registers a new Node.
+    def create(
+      node,
+      deadline: nil
+    )
+      req = V1::NodeCreateRequest.new()
+
+      req.node = Plumbing::convert_node_to_plumbing(node)
+      tries = 0
+      plumbing_response = nil
+      loop do
+        begin
+          plumbing_response = @stub.create(req, metadata: @parent.get_metadata("Nodes.Create", req), deadline: deadline)
+        rescue => exception
+          if (@parent.shouldRetry(tries, exception))
+            tries + +@parent.jitterSleep(tries)
+            next
+          end
+          raise Plumbing::convert_error_to_porcelain(exception)
         end
-        # Delete removes a Node by ID.
-        def delete(
-id \
-,
- deadline:nil)
-            req = V1::NodeDeleteRequest.new()
-			
-            req.id = (id)
-            tries = 0
-            plumbing_response = nil
-            loop do
-                begin
-                    plumbing_response = @stub.delete(req, metadata: @parent.get_metadata('Nodes.Delete', req), deadline:deadline)
-                rescue => exception
-                    if (@parent.shouldRetry(tries, exception))
-                        tries++
-                        @parent.jitterSleep(tries)
-                        next
-                    end
-                    raise Plumbing::convert_error_to_porcelain(exception)
-                end
-                break
-            end
+        break
+      end
+
+      resp = NodeCreateResponse.new()
+      resp.meta = Plumbing::convert_create_response_metadata_to_porcelain(plumbing_response.meta)
+      resp.node = Plumbing::convert_node_to_porcelain(plumbing_response.node)
+      resp.token = (plumbing_response.token)
+      resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
+      resp
+    end
+
+    # Get reads one Node by ID.
+    def get(
+      id,
+      deadline: nil
+    )
+      req = V1::NodeGetRequest.new()
 
-			
-            resp = NodeDeleteResponse.new()
-            resp.meta = Plumbing::convert_delete_response_metadata_to_porcelain(plumbing_response.meta)
-            resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
-            resp
+      req.id = (id)
+      tries = 0
+      plumbing_response = nil
+      loop do
+        begin
+          plumbing_response = @stub.get(req, metadata: @parent.get_metadata("Nodes.Get", req), deadline: deadline)
+        rescue => exception
+          if (@parent.shouldRetry(tries, exception))
+            tries + +@parent.jitterSleep(tries)
+            next
+          end
+          raise Plumbing::convert_error_to_porcelain(exception)
         end
-        # List gets a list of Nodes matching a given set of criteria.
-        def list(
-filter \
-,
-*args,
- deadline:nil)
-            req = V1::NodeListRequest.new()
-            req.meta = V1::ListRequestMetadata.new()
-            page_size_option = @parent._test_options['PageSize']
-            if page_size_option.is_a? Integer
-                req.meta.limit = page_size_option
-            end
-			
-            req.filter = Plumbing::quote_filter_args(filter, *args)
-            resp = Enumerator::Generator.new { |g|
-                tries = 0
-                loop do
-                    begin
-                        plumbing_response = @stub.list(req, metadata: @parent.get_metadata('Nodes.List', req), deadline:deadline)
-                    rescue => exception
-                        if (@parent.shouldRetry(tries, exception))
-                            tries++
-                            @parent.jitterSleep(tries)
-                            next
-                        end
-                        raise Plumbing::convert_error_to_porcelain(exception)
-                    end
-                    tries = 0
-                    plumbing_response.nodes.each do |plumbing_item|
-                        g.yield Plumbing::convert_node_to_porcelain(plumbing_item)
-                    end
-                    break if plumbing_response.meta.next_cursor == ""
-                    req.meta.cursor = plumbing_response.meta.next_cursor
-                end
-            }
-            resp
+        break
+      end
+
+      resp = NodeGetResponse.new()
+      resp.meta = Plumbing::convert_get_response_metadata_to_porcelain(plumbing_response.meta)
+      resp.node = Plumbing::convert_node_to_porcelain(plumbing_response.node)
+      resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
+      resp
+    end
+
+    # Update patches a Node by ID.
+    def update(
+      node,
+      deadline: nil
+    )
+      req = V1::NodeUpdateRequest.new()
+
+      req.node = Plumbing::convert_node_to_plumbing(node)
+      tries = 0
+      plumbing_response = nil
+      loop do
+        begin
+          plumbing_response = @stub.update(req, metadata: @parent.get_metadata("Nodes.Update", req), deadline: deadline)
+        rescue => exception
+          if (@parent.shouldRetry(tries, exception))
+            tries + +@parent.jitterSleep(tries)
+            next
+          end
+          raise Plumbing::convert_error_to_porcelain(exception)
         end
+        break
+      end
+
+      resp = NodeUpdateResponse.new()
+      resp.meta = Plumbing::convert_update_response_metadata_to_porcelain(plumbing_response.meta)
+      resp.node = Plumbing::convert_node_to_porcelain(plumbing_response.node)
+      resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
+      resp
     end
 
-    class Resources
-        def initialize(host, insecure, parent)
-            begin
-                if insecure
-                    @stub = V1::Resources::Stub.new(host, :this_channel_is_insecure)
-                else
-                    cred = GRPC::Core::ChannelCredentials.new()
-                    @stub = V1::Resources::Stub.new(host, cred)
-                end
-            rescue => exception
-                raise Plumbing::convert_error_to_porcelain(exception)
-            end
-            @parent = parent
+    # Delete removes a Node by ID.
+    def delete(
+      id,
+      deadline: nil
+    )
+      req = V1::NodeDeleteRequest.new()
+
+      req.id = (id)
+      tries = 0
+      plumbing_response = nil
+      loop do
+        begin
+          plumbing_response = @stub.delete(req, metadata: @parent.get_metadata("Nodes.Delete", req), deadline: deadline)
+        rescue => exception
+          if (@parent.shouldRetry(tries, exception))
+            tries + +@parent.jitterSleep(tries)
+            next
+          end
+          raise Plumbing::convert_error_to_porcelain(exception)
         end
-        # Create registers a new Resource.
-        def create(
-resource \
-,
- deadline:nil)
-            req = V1::ResourceCreateRequest.new()
-			
-            req.resource = Plumbing::convert_resource_to_plumbing(resource)
-            tries = 0
-            plumbing_response = nil
-            loop do
-                begin
-                    plumbing_response = @stub.create(req, metadata: @parent.get_metadata('Resources.Create', req), deadline:deadline)
-                rescue => exception
-                    if (@parent.shouldRetry(tries, exception))
-                        tries++
-                        @parent.jitterSleep(tries)
-                        next
-                    end
-                    raise Plumbing::convert_error_to_porcelain(exception)
-                end
-                break
+        break
+      end
+
+      resp = NodeDeleteResponse.new()
+      resp.meta = Plumbing::convert_delete_response_metadata_to_porcelain(plumbing_response.meta)
+      resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
+      resp
+    end
+
+    # List gets a list of Nodes matching a given set of criteria.
+    def list(
+      filter,
+      *args,
+      deadline: nil
+    )
+      req = V1::NodeListRequest.new()
+      req.meta = V1::ListRequestMetadata.new()
+      page_size_option = @parent._test_options["PageSize"]
+      if page_size_option.is_a? Integer
+        req.meta.limit = page_size_option
+      end
+
+      req.filter = Plumbing::quote_filter_args(filter, *args)
+      resp = Enumerator::Generator.new { |g|
+        tries = 0
+        loop do
+          begin
+            plumbing_response = @stub.list(req, metadata: @parent.get_metadata("Nodes.List", req), deadline: deadline)
+          rescue => exception
+            if (@parent.shouldRetry(tries, exception))
+              tries + +@parent.jitterSleep(tries)
+              next
             end
+            raise Plumbing::convert_error_to_porcelain(exception)
+          end
+          tries = 0
+          plumbing_response.nodes.each do |plumbing_item|
+            g.yield Plumbing::convert_node_to_porcelain(plumbing_item)
+          end
+          break if plumbing_response.meta.next_cursor == ""
+          req.meta.cursor = plumbing_response.meta.next_cursor
+        end
+      }
+      resp
+    end
+  end
 
-			
-            resp = ResourceCreateResponse.new()
-            resp.meta = Plumbing::convert_create_response_metadata_to_porcelain(plumbing_response.meta)
-            resp.resource = Plumbing::convert_resource_to_porcelain(plumbing_response.resource)
-            resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
-            resp
+  class Resources
+    def initialize(host, insecure, parent)
+      begin
+        if insecure
+          @stub = V1::Resources::Stub.new(host, :this_channel_is_insecure)
+        else
+          cred = GRPC::Core::ChannelCredentials.new()
+          @stub = V1::Resources::Stub.new(host, cred)
         end
-        # Get reads one Resource by ID.
-        def get(
-id \
-,
- deadline:nil)
-            req = V1::ResourceGetRequest.new()
-			
-            req.id = (id)
-            tries = 0
-            plumbing_response = nil
-            loop do
-                begin
-                    plumbing_response = @stub.get(req, metadata: @parent.get_metadata('Resources.Get', req), deadline:deadline)
-                rescue => exception
-                    if (@parent.shouldRetry(tries, exception))
-                        tries++
-                        @parent.jitterSleep(tries)
-                        next
-                    end
-                    raise Plumbing::convert_error_to_porcelain(exception)
-                end
-                break
-            end
+      rescue => exception
+        raise Plumbing::convert_error_to_porcelain(exception)
+      end
+      @parent = parent
+    end
+
+    # Create registers a new Resource.
+    def create(
+      resource,
+      deadline: nil
+    )
+      req = V1::ResourceCreateRequest.new()
 
-			
-            resp = ResourceGetResponse.new()
-            resp.meta = Plumbing::convert_get_response_metadata_to_porcelain(plumbing_response.meta)
-            resp.resource = Plumbing::convert_resource_to_porcelain(plumbing_response.resource)
-            resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
-            resp
+      req.resource = Plumbing::convert_resource_to_plumbing(resource)
+      tries = 0
+      plumbing_response = nil
+      loop do
+        begin
+          plumbing_response = @stub.create(req, metadata: @parent.get_metadata("Resources.Create", req), deadline: deadline)
+        rescue => exception
+          if (@parent.shouldRetry(tries, exception))
+            tries + +@parent.jitterSleep(tries)
+            next
+          end
+          raise Plumbing::convert_error_to_porcelain(exception)
         end
-        # Update patches a Resource by ID.
-        def update(
-resource \
-,
- deadline:nil)
-            req = V1::ResourceUpdateRequest.new()
-			
-            req.resource = Plumbing::convert_resource_to_plumbing(resource)
-            tries = 0
-            plumbing_response = nil
-            loop do
-                begin
-                    plumbing_response = @stub.update(req, metadata: @parent.get_metadata('Resources.Update', req), deadline:deadline)
-                rescue => exception
-                    if (@parent.shouldRetry(tries, exception))
-                        tries++
-                        @parent.jitterSleep(tries)
-                        next
-                    end
-                    raise Plumbing::convert_error_to_porcelain(exception)
-                end
-                break
-            end
+        break
+      end
 
-			
-            resp = ResourceUpdateResponse.new()
-            resp.meta = Plumbing::convert_update_response_metadata_to_porcelain(plumbing_response.meta)
-            resp.resource = Plumbing::convert_resource_to_porcelain(plumbing_response.resource)
-            resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
-            resp
+      resp = ResourceCreateResponse.new()
+      resp.meta = Plumbing::convert_create_response_metadata_to_porcelain(plumbing_response.meta)
+      resp.resource = Plumbing::convert_resource_to_porcelain(plumbing_response.resource)
+      resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
+      resp
+    end
+
+    # Get reads one Resource by ID.
+    def get(
+      id,
+      deadline: nil
+    )
+      req = V1::ResourceGetRequest.new()
+
+      req.id = (id)
+      tries = 0
+      plumbing_response = nil
+      loop do
+        begin
+          plumbing_response = @stub.get(req, metadata: @parent.get_metadata("Resources.Get", req), deadline: deadline)
+        rescue => exception
+          if (@parent.shouldRetry(tries, exception))
+            tries + +@parent.jitterSleep(tries)
+            next
+          end
+          raise Plumbing::convert_error_to_porcelain(exception)
         end
-        # Delete removes a Resource by ID.
-        def delete(
-id \
-,
- deadline:nil)
-            req = V1::ResourceDeleteRequest.new()
-			
-            req.id = (id)
-            tries = 0
-            plumbing_response = nil
-            loop do
-                begin
-                    plumbing_response = @stub.delete(req, metadata: @parent.get_metadata('Resources.Delete', req), deadline:deadline)
-                rescue => exception
-                    if (@parent.shouldRetry(tries, exception))
-                        tries++
-                        @parent.jitterSleep(tries)
-                        next
-                    end
-                    raise Plumbing::convert_error_to_porcelain(exception)
-                end
-                break
-            end
+        break
+      end
+
+      resp = ResourceGetResponse.new()
+      resp.meta = Plumbing::convert_get_response_metadata_to_porcelain(plumbing_response.meta)
+      resp.resource = Plumbing::convert_resource_to_porcelain(plumbing_response.resource)
+      resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
+      resp
+    end
+
+    # Update patches a Resource by ID.
+    def update(
+      resource,
+      deadline: nil
+    )
+      req = V1::ResourceUpdateRequest.new()
 
-			
-            resp = ResourceDeleteResponse.new()
-            resp.meta = Plumbing::convert_delete_response_metadata_to_porcelain(plumbing_response.meta)
-            resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
-            resp
+      req.resource = Plumbing::convert_resource_to_plumbing(resource)
+      tries = 0
+      plumbing_response = nil
+      loop do
+        begin
+          plumbing_response = @stub.update(req, metadata: @parent.get_metadata("Resources.Update", req), deadline: deadline)
+        rescue => exception
+          if (@parent.shouldRetry(tries, exception))
+            tries + +@parent.jitterSleep(tries)
+            next
+          end
+          raise Plumbing::convert_error_to_porcelain(exception)
         end
-        # List gets a list of Resources matching a given set of criteria.
-        def list(
-filter \
-,
-*args,
- deadline:nil)
-            req = V1::ResourceListRequest.new()
-            req.meta = V1::ListRequestMetadata.new()
-            page_size_option = @parent._test_options['PageSize']
-            if page_size_option.is_a? Integer
-                req.meta.limit = page_size_option
-            end
-			
-            req.filter = Plumbing::quote_filter_args(filter, *args)
-            resp = Enumerator::Generator.new { |g|
-                tries = 0
-                loop do
-                    begin
-                        plumbing_response = @stub.list(req, metadata: @parent.get_metadata('Resources.List', req), deadline:deadline)
-                    rescue => exception
-                        if (@parent.shouldRetry(tries, exception))
-                            tries++
-                            @parent.jitterSleep(tries)
-                            next
-                        end
-                        raise Plumbing::convert_error_to_porcelain(exception)
-                    end
-                    tries = 0
-                    plumbing_response.resources.each do |plumbing_item|
-                        g.yield Plumbing::convert_resource_to_porcelain(plumbing_item)
-                    end
-                    break if plumbing_response.meta.next_cursor == ""
-                    req.meta.cursor = plumbing_response.meta.next_cursor
-                end
-            }
-            resp
+        break
+      end
+
+      resp = ResourceUpdateResponse.new()
+      resp.meta = Plumbing::convert_update_response_metadata_to_porcelain(plumbing_response.meta)
+      resp.resource = Plumbing::convert_resource_to_porcelain(plumbing_response.resource)
+      resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
+      resp
+    end
+
+    # Delete removes a Resource by ID.
+    def delete(
+      id,
+      deadline: nil
+    )
+      req = V1::ResourceDeleteRequest.new()
+
+      req.id = (id)
+      tries = 0
+      plumbing_response = nil
+      loop do
+        begin
+          plumbing_response = @stub.delete(req, metadata: @parent.get_metadata("Resources.Delete", req), deadline: deadline)
+        rescue => exception
+          if (@parent.shouldRetry(tries, exception))
+            tries + +@parent.jitterSleep(tries)
+            next
+          end
+          raise Plumbing::convert_error_to_porcelain(exception)
         end
+        break
+      end
+
+      resp = ResourceDeleteResponse.new()
+      resp.meta = Plumbing::convert_delete_response_metadata_to_porcelain(plumbing_response.meta)
+      resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
+      resp
     end
-    # RoleAttachments represent relationships between composite roles and the roles
-    # that make up those composite roles. When a composite role is attached to another
-    # role, the permissions granted to members of the composite role are augmented to
-    # include the permissions granted to members of the attached role.
-    class RoleAttachments
-        def initialize(host, insecure, parent)
-            begin
-                if insecure
-                    @stub = V1::RoleAttachments::Stub.new(host, :this_channel_is_insecure)
-                else
-                    cred = GRPC::Core::ChannelCredentials.new()
-                    @stub = V1::RoleAttachments::Stub.new(host, cred)
-                end
-            rescue => exception
-                raise Plumbing::convert_error_to_porcelain(exception)
+
+    # List gets a list of Resources matching a given set of criteria.
+    def list(
+      filter,
+      *args,
+      deadline: nil
+    )
+      req = V1::ResourceListRequest.new()
+      req.meta = V1::ListRequestMetadata.new()
+      page_size_option = @parent._test_options["PageSize"]
+      if page_size_option.is_a? Integer
+        req.meta.limit = page_size_option
+      end
+
+      req.filter = Plumbing::quote_filter_args(filter, *args)
+      resp = Enumerator::Generator.new { |g|
+        tries = 0
+        loop do
+          begin
+            plumbing_response = @stub.list(req, metadata: @parent.get_metadata("Resources.List", req), deadline: deadline)
+          rescue => exception
+            if (@parent.shouldRetry(tries, exception))
+              tries + +@parent.jitterSleep(tries)
+              next
             end
-            @parent = parent
+            raise Plumbing::convert_error_to_porcelain(exception)
+          end
+          tries = 0
+          plumbing_response.resources.each do |plumbing_item|
+            g.yield Plumbing::convert_resource_to_porcelain(plumbing_item)
+          end
+          break if plumbing_response.meta.next_cursor == ""
+          req.meta.cursor = plumbing_response.meta.next_cursor
         end
-        # Create registers a new RoleAttachment.
-        def create(
-role_attachment \
-,
- deadline:nil)
-            req = V1::RoleAttachmentCreateRequest.new()
-			
-            req.role_attachment = Plumbing::convert_role_attachment_to_plumbing(role_attachment)
-            tries = 0
-            plumbing_response = nil
-            loop do
-                begin
-                    plumbing_response = @stub.create(req, metadata: @parent.get_metadata('RoleAttachments.Create', req), deadline:deadline)
-                rescue => exception
-                    if (@parent.shouldRetry(tries, exception))
-                        tries++
-                        @parent.jitterSleep(tries)
-                        next
-                    end
-                    raise Plumbing::convert_error_to_porcelain(exception)
-                end
-                break
-            end
+      }
+      resp
+    end
+  end
 
-			
-            resp = RoleAttachmentCreateResponse.new()
-            resp.meta = Plumbing::convert_create_response_metadata_to_porcelain(plumbing_response.meta)
-            resp.role_attachment = Plumbing::convert_role_attachment_to_porcelain(plumbing_response.role_attachment)
-            resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
-            resp
+  # RoleAttachments represent relationships between composite roles and the roles
+  # that make up those composite roles. When a composite role is attached to another
+  # role, the permissions granted to members of the composite role are augmented to
+  # include the permissions granted to members of the attached role.
+  class RoleAttachments
+    def initialize(host, insecure, parent)
+      begin
+        if insecure
+          @stub = V1::RoleAttachments::Stub.new(host, :this_channel_is_insecure)
+        else
+          cred = GRPC::Core::ChannelCredentials.new()
+          @stub = V1::RoleAttachments::Stub.new(host, cred)
         end
-        # Get reads one RoleAttachment by ID.
-        def get(
-id \
-,
- deadline:nil)
-            req = V1::RoleAttachmentGetRequest.new()
-			
-            req.id = (id)
-            tries = 0
-            plumbing_response = nil
-            loop do
-                begin
-                    plumbing_response = @stub.get(req, metadata: @parent.get_metadata('RoleAttachments.Get', req), deadline:deadline)
-                rescue => exception
-                    if (@parent.shouldRetry(tries, exception))
-                        tries++
-                        @parent.jitterSleep(tries)
-                        next
-                    end
-                    raise Plumbing::convert_error_to_porcelain(exception)
-                end
-                break
-            end
+      rescue => exception
+        raise Plumbing::convert_error_to_porcelain(exception)
+      end
+      @parent = parent
+    end
+
+    # Create registers a new RoleAttachment.
+    def create(
+      role_attachment,
+      deadline: nil
+    )
+      req = V1::RoleAttachmentCreateRequest.new()
 
-			
-            resp = RoleAttachmentGetResponse.new()
-            resp.meta = Plumbing::convert_get_response_metadata_to_porcelain(plumbing_response.meta)
-            resp.role_attachment = Plumbing::convert_role_attachment_to_porcelain(plumbing_response.role_attachment)
-            resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
-            resp
+      req.role_attachment = Plumbing::convert_role_attachment_to_plumbing(role_attachment)
+      tries = 0
+      plumbing_response = nil
+      loop do
+        begin
+          plumbing_response = @stub.create(req, metadata: @parent.get_metadata("RoleAttachments.Create", req), deadline: deadline)
+        rescue => exception
+          if (@parent.shouldRetry(tries, exception))
+            tries + +@parent.jitterSleep(tries)
+            next
+          end
+          raise Plumbing::convert_error_to_porcelain(exception)
         end
-        # Delete removes a RoleAttachment by ID.
-        def delete(
-id \
-,
- deadline:nil)
-            req = V1::RoleAttachmentDeleteRequest.new()
-			
-            req.id = (id)
-            tries = 0
-            plumbing_response = nil
-            loop do
-                begin
-                    plumbing_response = @stub.delete(req, metadata: @parent.get_metadata('RoleAttachments.Delete', req), deadline:deadline)
-                rescue => exception
-                    if (@parent.shouldRetry(tries, exception))
-                        tries++
-                        @parent.jitterSleep(tries)
-                        next
-                    end
-                    raise Plumbing::convert_error_to_porcelain(exception)
-                end
-                break
-            end
+        break
+      end
+
+      resp = RoleAttachmentCreateResponse.new()
+      resp.meta = Plumbing::convert_create_response_metadata_to_porcelain(plumbing_response.meta)
+      resp.role_attachment = Plumbing::convert_role_attachment_to_porcelain(plumbing_response.role_attachment)
+      resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
+      resp
+    end
 
-			
-            resp = RoleAttachmentDeleteResponse.new()
-            resp.meta = Plumbing::convert_delete_response_metadata_to_porcelain(plumbing_response.meta)
-            resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
-            resp
+    # Get reads one RoleAttachment by ID.
+    def get(
+      id,
+      deadline: nil
+    )
+      req = V1::RoleAttachmentGetRequest.new()
+
+      req.id = (id)
+      tries = 0
+      plumbing_response = nil
+      loop do
+        begin
+          plumbing_response = @stub.get(req, metadata: @parent.get_metadata("RoleAttachments.Get", req), deadline: deadline)
+        rescue => exception
+          if (@parent.shouldRetry(tries, exception))
+            tries + +@parent.jitterSleep(tries)
+            next
+          end
+          raise Plumbing::convert_error_to_porcelain(exception)
         end
-        # List gets a list of RoleAttachments matching a given set of criteria.
-        def list(
-filter \
-,
-*args,
- deadline:nil)
-            req = V1::RoleAttachmentListRequest.new()
-            req.meta = V1::ListRequestMetadata.new()
-            page_size_option = @parent._test_options['PageSize']
-            if page_size_option.is_a? Integer
-                req.meta.limit = page_size_option
-            end
-			
-            req.filter = Plumbing::quote_filter_args(filter, *args)
-            resp = Enumerator::Generator.new { |g|
-                tries = 0
-                loop do
-                    begin
-                        plumbing_response = @stub.list(req, metadata: @parent.get_metadata('RoleAttachments.List', req), deadline:deadline)
-                    rescue => exception
-                        if (@parent.shouldRetry(tries, exception))
-                            tries++
-                            @parent.jitterSleep(tries)
-                            next
-                        end
-                        raise Plumbing::convert_error_to_porcelain(exception)
-                    end
-                    tries = 0
-                    plumbing_response.role_attachments.each do |plumbing_item|
-                        g.yield Plumbing::convert_role_attachment_to_porcelain(plumbing_item)
-                    end
-                    break if plumbing_response.meta.next_cursor == ""
-                    req.meta.cursor = plumbing_response.meta.next_cursor
-                end
-            }
-            resp
+        break
+      end
+
+      resp = RoleAttachmentGetResponse.new()
+      resp.meta = Plumbing::convert_get_response_metadata_to_porcelain(plumbing_response.meta)
+      resp.role_attachment = Plumbing::convert_role_attachment_to_porcelain(plumbing_response.role_attachment)
+      resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
+      resp
+    end
+
+    # Delete removes a RoleAttachment by ID.
+    def delete(
+      id,
+      deadline: nil
+    )
+      req = V1::RoleAttachmentDeleteRequest.new()
+
+      req.id = (id)
+      tries = 0
+      plumbing_response = nil
+      loop do
+        begin
+          plumbing_response = @stub.delete(req, metadata: @parent.get_metadata("RoleAttachments.Delete", req), deadline: deadline)
+        rescue => exception
+          if (@parent.shouldRetry(tries, exception))
+            tries + +@parent.jitterSleep(tries)
+            next
+          end
+          raise Plumbing::convert_error_to_porcelain(exception)
         end
+        break
+      end
+
+      resp = RoleAttachmentDeleteResponse.new()
+      resp.meta = Plumbing::convert_delete_response_metadata_to_porcelain(plumbing_response.meta)
+      resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
+      resp
     end
-    # RoleGrants represent relationships between composite roles and the roles
-    # that make up those composite roles. When a composite role is attached to another
-    # role, the permissions granted to members of the composite role are augmented to
-    # include the permissions granted to members of the attached role.
-    class RoleGrants
-        def initialize(host, insecure, parent)
-            begin
-                if insecure
-                    @stub = V1::RoleGrants::Stub.new(host, :this_channel_is_insecure)
-                else
-                    cred = GRPC::Core::ChannelCredentials.new()
-                    @stub = V1::RoleGrants::Stub.new(host, cred)
-                end
-            rescue => exception
-                raise Plumbing::convert_error_to_porcelain(exception)
+
+    # List gets a list of RoleAttachments matching a given set of criteria.
+    def list(
+      filter,
+      *args,
+      deadline: nil
+    )
+      req = V1::RoleAttachmentListRequest.new()
+      req.meta = V1::ListRequestMetadata.new()
+      page_size_option = @parent._test_options["PageSize"]
+      if page_size_option.is_a? Integer
+        req.meta.limit = page_size_option
+      end
+
+      req.filter = Plumbing::quote_filter_args(filter, *args)
+      resp = Enumerator::Generator.new { |g|
+        tries = 0
+        loop do
+          begin
+            plumbing_response = @stub.list(req, metadata: @parent.get_metadata("RoleAttachments.List", req), deadline: deadline)
+          rescue => exception
+            if (@parent.shouldRetry(tries, exception))
+              tries + +@parent.jitterSleep(tries)
+              next
             end
-            @parent = parent
+            raise Plumbing::convert_error_to_porcelain(exception)
+          end
+          tries = 0
+          plumbing_response.role_attachments.each do |plumbing_item|
+            g.yield Plumbing::convert_role_attachment_to_porcelain(plumbing_item)
+          end
+          break if plumbing_response.meta.next_cursor == ""
+          req.meta.cursor = plumbing_response.meta.next_cursor
         end
-        # Create registers a new RoleGrant.
-        def create(
-role_grant \
-,
- deadline:nil)
-            req = V1::RoleGrantCreateRequest.new()
-			
-            req.role_grant = Plumbing::convert_role_grant_to_plumbing(role_grant)
-            tries = 0
-            plumbing_response = nil
-            loop do
-                begin
-                    plumbing_response = @stub.create(req, metadata: @parent.get_metadata('RoleGrants.Create', req), deadline:deadline)
-                rescue => exception
-                    if (@parent.shouldRetry(tries, exception))
-                        tries++
-                        @parent.jitterSleep(tries)
-                        next
-                    end
-                    raise Plumbing::convert_error_to_porcelain(exception)
-                end
-                break
-            end
+      }
+      resp
+    end
+  end
 
-			
-            resp = RoleGrantCreateResponse.new()
-            resp.meta = Plumbing::convert_create_response_metadata_to_porcelain(plumbing_response.meta)
-            resp.role_grant = Plumbing::convert_role_grant_to_porcelain(plumbing_response.role_grant)
-            resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
-            resp
+  # RoleGrants represent relationships between composite roles and the roles
+  # that make up those composite roles. When a composite role is attached to another
+  # role, the permissions granted to members of the composite role are augmented to
+  # include the permissions granted to members of the attached role.
+  class RoleGrants
+    def initialize(host, insecure, parent)
+      begin
+        if insecure
+          @stub = V1::RoleGrants::Stub.new(host, :this_channel_is_insecure)
+        else
+          cred = GRPC::Core::ChannelCredentials.new()
+          @stub = V1::RoleGrants::Stub.new(host, cred)
         end
-        # Get reads one RoleGrant by ID.
-        def get(
-id \
-,
- deadline:nil)
-            req = V1::RoleGrantGetRequest.new()
-			
-            req.id = (id)
-            tries = 0
-            plumbing_response = nil
-            loop do
-                begin
-                    plumbing_response = @stub.get(req, metadata: @parent.get_metadata('RoleGrants.Get', req), deadline:deadline)
-                rescue => exception
-                    if (@parent.shouldRetry(tries, exception))
-                        tries++
-                        @parent.jitterSleep(tries)
-                        next
-                    end
-                    raise Plumbing::convert_error_to_porcelain(exception)
-                end
-                break
-            end
+      rescue => exception
+        raise Plumbing::convert_error_to_porcelain(exception)
+      end
+      @parent = parent
+    end
+
+    # Create registers a new RoleGrant.
+    def create(
+      role_grant,
+      deadline: nil
+    )
+      req = V1::RoleGrantCreateRequest.new()
 
-			
-            resp = RoleGrantGetResponse.new()
-            resp.meta = Plumbing::convert_get_response_metadata_to_porcelain(plumbing_response.meta)
-            resp.role_grant = Plumbing::convert_role_grant_to_porcelain(plumbing_response.role_grant)
-            resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
-            resp
+      req.role_grant = Plumbing::convert_role_grant_to_plumbing(role_grant)
+      tries = 0
+      plumbing_response = nil
+      loop do
+        begin
+          plumbing_response = @stub.create(req, metadata: @parent.get_metadata("RoleGrants.Create", req), deadline: deadline)
+        rescue => exception
+          if (@parent.shouldRetry(tries, exception))
+            tries + +@parent.jitterSleep(tries)
+            next
+          end
+          raise Plumbing::convert_error_to_porcelain(exception)
         end
-        # Delete removes a RoleGrant by ID.
-        def delete(
-id \
-,
- deadline:nil)
-            req = V1::RoleGrantDeleteRequest.new()
-			
-            req.id = (id)
-            tries = 0
-            plumbing_response = nil
-            loop do
-                begin
-                    plumbing_response = @stub.delete(req, metadata: @parent.get_metadata('RoleGrants.Delete', req), deadline:deadline)
-                rescue => exception
-                    if (@parent.shouldRetry(tries, exception))
-                        tries++
-                        @parent.jitterSleep(tries)
-                        next
-                    end
-                    raise Plumbing::convert_error_to_porcelain(exception)
-                end
-                break
-            end
+        break
+      end
+
+      resp = RoleGrantCreateResponse.new()
+      resp.meta = Plumbing::convert_create_response_metadata_to_porcelain(plumbing_response.meta)
+      resp.role_grant = Plumbing::convert_role_grant_to_porcelain(plumbing_response.role_grant)
+      resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
+      resp
+    end
 
-			
-            resp = RoleGrantDeleteResponse.new()
-            resp.meta = Plumbing::convert_delete_response_metadata_to_porcelain(plumbing_response.meta)
-            resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
-            resp
+    # Get reads one RoleGrant by ID.
+    def get(
+      id,
+      deadline: nil
+    )
+      req = V1::RoleGrantGetRequest.new()
+
+      req.id = (id)
+      tries = 0
+      plumbing_response = nil
+      loop do
+        begin
+          plumbing_response = @stub.get(req, metadata: @parent.get_metadata("RoleGrants.Get", req), deadline: deadline)
+        rescue => exception
+          if (@parent.shouldRetry(tries, exception))
+            tries + +@parent.jitterSleep(tries)
+            next
+          end
+          raise Plumbing::convert_error_to_porcelain(exception)
         end
-        # List gets a list of RoleGrants matching a given set of criteria.
-        def list(
-filter \
-,
-*args,
- deadline:nil)
-            req = V1::RoleGrantListRequest.new()
-            req.meta = V1::ListRequestMetadata.new()
-            page_size_option = @parent._test_options['PageSize']
-            if page_size_option.is_a? Integer
-                req.meta.limit = page_size_option
-            end
-			
-            req.filter = Plumbing::quote_filter_args(filter, *args)
-            resp = Enumerator::Generator.new { |g|
-                tries = 0
-                loop do
-                    begin
-                        plumbing_response = @stub.list(req, metadata: @parent.get_metadata('RoleGrants.List', req), deadline:deadline)
-                    rescue => exception
-                        if (@parent.shouldRetry(tries, exception))
-                            tries++
-                            @parent.jitterSleep(tries)
-                            next
-                        end
-                        raise Plumbing::convert_error_to_porcelain(exception)
-                    end
-                    tries = 0
-                    plumbing_response.role_grants.each do |plumbing_item|
-                        g.yield Plumbing::convert_role_grant_to_porcelain(plumbing_item)
-                    end
-                    break if plumbing_response.meta.next_cursor == ""
-                    req.meta.cursor = plumbing_response.meta.next_cursor
-                end
-            }
-            resp
+        break
+      end
+
+      resp = RoleGrantGetResponse.new()
+      resp.meta = Plumbing::convert_get_response_metadata_to_porcelain(plumbing_response.meta)
+      resp.role_grant = Plumbing::convert_role_grant_to_porcelain(plumbing_response.role_grant)
+      resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
+      resp
+    end
+
+    # Delete removes a RoleGrant by ID.
+    def delete(
+      id,
+      deadline: nil
+    )
+      req = V1::RoleGrantDeleteRequest.new()
+
+      req.id = (id)
+      tries = 0
+      plumbing_response = nil
+      loop do
+        begin
+          plumbing_response = @stub.delete(req, metadata: @parent.get_metadata("RoleGrants.Delete", req), deadline: deadline)
+        rescue => exception
+          if (@parent.shouldRetry(tries, exception))
+            tries + +@parent.jitterSleep(tries)
+            next
+          end
+          raise Plumbing::convert_error_to_porcelain(exception)
         end
+        break
+      end
+
+      resp = RoleGrantDeleteResponse.new()
+      resp.meta = Plumbing::convert_delete_response_metadata_to_porcelain(plumbing_response.meta)
+      resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
+      resp
     end
-    # Roles are tools for controlling user access to resources. Each Role holds a
-    # list of resources which they grant access to. Composite roles are a special
-    # type of Role which have no resource associations of their own, but instead
-    # grant access to the combined resources associated with a set of child roles.
-    # Each user can be a member of one Role or composite role.
-    class Roles
-        def initialize(host, insecure, parent)
-            begin
-                if insecure
-                    @stub = V1::Roles::Stub.new(host, :this_channel_is_insecure)
-                else
-                    cred = GRPC::Core::ChannelCredentials.new()
-                    @stub = V1::Roles::Stub.new(host, cred)
-                end
-            rescue => exception
-                raise Plumbing::convert_error_to_porcelain(exception)
+
+    # List gets a list of RoleGrants matching a given set of criteria.
+    def list(
+      filter,
+      *args,
+      deadline: nil
+    )
+      req = V1::RoleGrantListRequest.new()
+      req.meta = V1::ListRequestMetadata.new()
+      page_size_option = @parent._test_options["PageSize"]
+      if page_size_option.is_a? Integer
+        req.meta.limit = page_size_option
+      end
+
+      req.filter = Plumbing::quote_filter_args(filter, *args)
+      resp = Enumerator::Generator.new { |g|
+        tries = 0
+        loop do
+          begin
+            plumbing_response = @stub.list(req, metadata: @parent.get_metadata("RoleGrants.List", req), deadline: deadline)
+          rescue => exception
+            if (@parent.shouldRetry(tries, exception))
+              tries + +@parent.jitterSleep(tries)
+              next
             end
-            @parent = parent
+            raise Plumbing::convert_error_to_porcelain(exception)
+          end
+          tries = 0
+          plumbing_response.role_grants.each do |plumbing_item|
+            g.yield Plumbing::convert_role_grant_to_porcelain(plumbing_item)
+          end
+          break if plumbing_response.meta.next_cursor == ""
+          req.meta.cursor = plumbing_response.meta.next_cursor
         end
-        # Create registers a new Role.
-        def create(
-role \
-,
- deadline:nil)
-            req = V1::RoleCreateRequest.new()
-			
-            req.role = Plumbing::convert_role_to_plumbing(role)
-            tries = 0
-            plumbing_response = nil
-            loop do
-                begin
-                    plumbing_response = @stub.create(req, metadata: @parent.get_metadata('Roles.Create', req), deadline:deadline)
-                rescue => exception
-                    if (@parent.shouldRetry(tries, exception))
-                        tries++
-                        @parent.jitterSleep(tries)
-                        next
-                    end
-                    raise Plumbing::convert_error_to_porcelain(exception)
-                end
-                break
-            end
+      }
+      resp
+    end
+  end
 
-			
-            resp = RoleCreateResponse.new()
-            resp.meta = Plumbing::convert_create_response_metadata_to_porcelain(plumbing_response.meta)
-            resp.role = Plumbing::convert_role_to_porcelain(plumbing_response.role)
-            resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
-            resp
+  # Roles are tools for controlling user access to resources. Each Role holds a
+  # list of resources which they grant access to. Composite roles are a special
+  # type of Role which have no resource associations of their own, but instead
+  # grant access to the combined resources associated with a set of child roles.
+  # Each user can be a member of one Role or composite role.
+  class Roles
+    def initialize(host, insecure, parent)
+      begin
+        if insecure
+          @stub = V1::Roles::Stub.new(host, :this_channel_is_insecure)
+        else
+          cred = GRPC::Core::ChannelCredentials.new()
+          @stub = V1::Roles::Stub.new(host, cred)
         end
-        # Get reads one Role by ID.
-        def get(
-id \
-,
- deadline:nil)
-            req = V1::RoleGetRequest.new()
-			
-            req.id = (id)
-            tries = 0
-            plumbing_response = nil
-            loop do
-                begin
-                    plumbing_response = @stub.get(req, metadata: @parent.get_metadata('Roles.Get', req), deadline:deadline)
-                rescue => exception
-                    if (@parent.shouldRetry(tries, exception))
-                        tries++
-                        @parent.jitterSleep(tries)
-                        next
-                    end
-                    raise Plumbing::convert_error_to_porcelain(exception)
-                end
-                break
-            end
+      rescue => exception
+        raise Plumbing::convert_error_to_porcelain(exception)
+      end
+      @parent = parent
+    end
+
+    # Create registers a new Role.
+    def create(
+      role,
+      deadline: nil
+    )
+      req = V1::RoleCreateRequest.new()
 
-			
-            resp = RoleGetResponse.new()
-            resp.meta = Plumbing::convert_get_response_metadata_to_porcelain(plumbing_response.meta)
-            resp.role = Plumbing::convert_role_to_porcelain(plumbing_response.role)
-            resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
-            resp
+      req.role = Plumbing::convert_role_to_plumbing(role)
+      tries = 0
+      plumbing_response = nil
+      loop do
+        begin
+          plumbing_response = @stub.create(req, metadata: @parent.get_metadata("Roles.Create", req), deadline: deadline)
+        rescue => exception
+          if (@parent.shouldRetry(tries, exception))
+            tries + +@parent.jitterSleep(tries)
+            next
+          end
+          raise Plumbing::convert_error_to_porcelain(exception)
         end
-        # Update patches a Role by ID.
-        def update(
-role \
-,
- deadline:nil)
-            req = V1::RoleUpdateRequest.new()
-			
-            req.role = Plumbing::convert_role_to_plumbing(role)
-            tries = 0
-            plumbing_response = nil
-            loop do
-                begin
-                    plumbing_response = @stub.update(req, metadata: @parent.get_metadata('Roles.Update', req), deadline:deadline)
-                rescue => exception
-                    if (@parent.shouldRetry(tries, exception))
-                        tries++
-                        @parent.jitterSleep(tries)
-                        next
-                    end
-                    raise Plumbing::convert_error_to_porcelain(exception)
-                end
-                break
-            end
+        break
+      end
+
+      resp = RoleCreateResponse.new()
+      resp.meta = Plumbing::convert_create_response_metadata_to_porcelain(plumbing_response.meta)
+      resp.role = Plumbing::convert_role_to_porcelain(plumbing_response.role)
+      resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
+      resp
+    end
+
+    # Get reads one Role by ID.
+    def get(
+      id,
+      deadline: nil
+    )
+      req = V1::RoleGetRequest.new()
+
+      req.id = (id)
+      tries = 0
+      plumbing_response = nil
+      loop do
+        begin
+          plumbing_response = @stub.get(req, metadata: @parent.get_metadata("Roles.Get", req), deadline: deadline)
+        rescue => exception
+          if (@parent.shouldRetry(tries, exception))
+            tries + +@parent.jitterSleep(tries)
+            next
+          end
+          raise Plumbing::convert_error_to_porcelain(exception)
+        end
+        break
+      end
+
+      resp = RoleGetResponse.new()
+      resp.meta = Plumbing::convert_get_response_metadata_to_porcelain(plumbing_response.meta)
+      resp.role = Plumbing::convert_role_to_porcelain(plumbing_response.role)
+      resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
+      resp
+    end
+
+    # Update patches a Role by ID.
+    def update(
+      role,
+      deadline: nil
+    )
+      req = V1::RoleUpdateRequest.new()
 
-			
-            resp = RoleUpdateResponse.new()
-            resp.meta = Plumbing::convert_update_response_metadata_to_porcelain(plumbing_response.meta)
-            resp.role = Plumbing::convert_role_to_porcelain(plumbing_response.role)
-            resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
-            resp
+      req.role = Plumbing::convert_role_to_plumbing(role)
+      tries = 0
+      plumbing_response = nil
+      loop do
+        begin
+          plumbing_response = @stub.update(req, metadata: @parent.get_metadata("Roles.Update", req), deadline: deadline)
+        rescue => exception
+          if (@parent.shouldRetry(tries, exception))
+            tries + +@parent.jitterSleep(tries)
+            next
+          end
+          raise Plumbing::convert_error_to_porcelain(exception)
         end
-        # Delete removes a Role by ID.
-        def delete(
-id \
-,
- deadline:nil)
-            req = V1::RoleDeleteRequest.new()
-			
-            req.id = (id)
-            tries = 0
-            plumbing_response = nil
-            loop do
-                begin
-                    plumbing_response = @stub.delete(req, metadata: @parent.get_metadata('Roles.Delete', req), deadline:deadline)
-                rescue => exception
-                    if (@parent.shouldRetry(tries, exception))
-                        tries++
-                        @parent.jitterSleep(tries)
-                        next
-                    end
-                    raise Plumbing::convert_error_to_porcelain(exception)
-                end
-                break
+        break
+      end
+
+      resp = RoleUpdateResponse.new()
+      resp.meta = Plumbing::convert_update_response_metadata_to_porcelain(plumbing_response.meta)
+      resp.role = Plumbing::convert_role_to_porcelain(plumbing_response.role)
+      resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
+      resp
+    end
+
+    # Delete removes a Role by ID.
+    def delete(
+      id,
+      deadline: nil
+    )
+      req = V1::RoleDeleteRequest.new()
+
+      req.id = (id)
+      tries = 0
+      plumbing_response = nil
+      loop do
+        begin
+          plumbing_response = @stub.delete(req, metadata: @parent.get_metadata("Roles.Delete", req), deadline: deadline)
+        rescue => exception
+          if (@parent.shouldRetry(tries, exception))
+            tries + +@parent.jitterSleep(tries)
+            next
+          end
+          raise Plumbing::convert_error_to_porcelain(exception)
+        end
+        break
+      end
+
+      resp = RoleDeleteResponse.new()
+      resp.meta = Plumbing::convert_delete_response_metadata_to_porcelain(plumbing_response.meta)
+      resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
+      resp
+    end
+
+    # List gets a list of Roles matching a given set of criteria.
+    def list(
+      filter,
+      *args,
+      deadline: nil
+    )
+      req = V1::RoleListRequest.new()
+      req.meta = V1::ListRequestMetadata.new()
+      page_size_option = @parent._test_options["PageSize"]
+      if page_size_option.is_a? Integer
+        req.meta.limit = page_size_option
+      end
+
+      req.filter = Plumbing::quote_filter_args(filter, *args)
+      resp = Enumerator::Generator.new { |g|
+        tries = 0
+        loop do
+          begin
+            plumbing_response = @stub.list(req, metadata: @parent.get_metadata("Roles.List", req), deadline: deadline)
+          rescue => exception
+            if (@parent.shouldRetry(tries, exception))
+              tries + +@parent.jitterSleep(tries)
+              next
             end
+            raise Plumbing::convert_error_to_porcelain(exception)
+          end
+          tries = 0
+          plumbing_response.roles.each do |plumbing_item|
+            g.yield Plumbing::convert_role_to_porcelain(plumbing_item)
+          end
+          break if plumbing_response.meta.next_cursor == ""
+          req.meta.cursor = plumbing_response.meta.next_cursor
+        end
+      }
+      resp
+    end
+  end
 
-			
-            resp = RoleDeleteResponse.new()
-            resp.meta = Plumbing::convert_delete_response_metadata_to_porcelain(plumbing_response.meta)
-            resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
-            resp
+  # SecretStores are servers where resource secrets (passwords, keys) are stored.
+  class SecretStores
+    def initialize(host, insecure, parent)
+      begin
+        if insecure
+          @stub = V1::SecretStores::Stub.new(host, :this_channel_is_insecure)
+        else
+          cred = GRPC::Core::ChannelCredentials.new()
+          @stub = V1::SecretStores::Stub.new(host, cred)
         end
-        # List gets a list of Roles matching a given set of criteria.
-        def list(
-filter \
-,
-*args,
- deadline:nil)
-            req = V1::RoleListRequest.new()
-            req.meta = V1::ListRequestMetadata.new()
-            page_size_option = @parent._test_options['PageSize']
-            if page_size_option.is_a? Integer
-                req.meta.limit = page_size_option
+      rescue => exception
+        raise Plumbing::convert_error_to_porcelain(exception)
+      end
+      @parent = parent
+    end
+
+    def create(
+      secret_store,
+      deadline: nil
+    )
+      req = V1::SecretStoreCreateRequest.new()
+
+      req.secret_store = Plumbing::convert_secret_store_to_plumbing(secret_store)
+      tries = 0
+      plumbing_response = nil
+      loop do
+        begin
+          plumbing_response = @stub.create(req, metadata: @parent.get_metadata("SecretStores.Create", req), deadline: deadline)
+        rescue => exception
+          if (@parent.shouldRetry(tries, exception))
+            tries + +@parent.jitterSleep(tries)
+            next
+          end
+          raise Plumbing::convert_error_to_porcelain(exception)
+        end
+        break
+      end
+
+      resp = SecretStoreCreateResponse.new()
+      resp.meta = Plumbing::convert_create_response_metadata_to_porcelain(plumbing_response.meta)
+      resp.secret_store = Plumbing::convert_secret_store_to_porcelain(plumbing_response.secret_store)
+      resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
+      resp
+    end
+
+    # Get reads one SecretStore by ID.
+    def get(
+      id,
+      deadline: nil
+    )
+      req = V1::SecretStoreGetRequest.new()
+
+      req.id = (id)
+      tries = 0
+      plumbing_response = nil
+      loop do
+        begin
+          plumbing_response = @stub.get(req, metadata: @parent.get_metadata("SecretStores.Get", req), deadline: deadline)
+        rescue => exception
+          if (@parent.shouldRetry(tries, exception))
+            tries + +@parent.jitterSleep(tries)
+            next
+          end
+          raise Plumbing::convert_error_to_porcelain(exception)
+        end
+        break
+      end
+
+      resp = SecretStoreGetResponse.new()
+      resp.meta = Plumbing::convert_get_response_metadata_to_porcelain(plumbing_response.meta)
+      resp.secret_store = Plumbing::convert_secret_store_to_porcelain(plumbing_response.secret_store)
+      resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
+      resp
+    end
+
+    # Update patches a SecretStore by ID.
+    def update(
+      secret_store,
+      deadline: nil
+    )
+      req = V1::SecretStoreUpdateRequest.new()
+
+      req.secret_store = Plumbing::convert_secret_store_to_plumbing(secret_store)
+      tries = 0
+      plumbing_response = nil
+      loop do
+        begin
+          plumbing_response = @stub.update(req, metadata: @parent.get_metadata("SecretStores.Update", req), deadline: deadline)
+        rescue => exception
+          if (@parent.shouldRetry(tries, exception))
+            tries + +@parent.jitterSleep(tries)
+            next
+          end
+          raise Plumbing::convert_error_to_porcelain(exception)
+        end
+        break
+      end
+
+      resp = SecretStoreUpdateResponse.new()
+      resp.meta = Plumbing::convert_update_response_metadata_to_porcelain(plumbing_response.meta)
+      resp.secret_store = Plumbing::convert_secret_store_to_porcelain(plumbing_response.secret_store)
+      resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
+      resp
+    end
+
+    # Delete removes a SecretStore by ID.
+    def delete(
+      id,
+      deadline: nil
+    )
+      req = V1::SecretStoreDeleteRequest.new()
+
+      req.id = (id)
+      tries = 0
+      plumbing_response = nil
+      loop do
+        begin
+          plumbing_response = @stub.delete(req, metadata: @parent.get_metadata("SecretStores.Delete", req), deadline: deadline)
+        rescue => exception
+          if (@parent.shouldRetry(tries, exception))
+            tries + +@parent.jitterSleep(tries)
+            next
+          end
+          raise Plumbing::convert_error_to_porcelain(exception)
+        end
+        break
+      end
+
+      resp = SecretStoreDeleteResponse.new()
+      resp.meta = Plumbing::convert_delete_response_metadata_to_porcelain(plumbing_response.meta)
+      resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
+      resp
+    end
+
+    # List gets a list of SecretStores matching a given set of criteria.
+    def list(
+      filter,
+      *args,
+      deadline: nil
+    )
+      req = V1::SecretStoreListRequest.new()
+      req.meta = V1::ListRequestMetadata.new()
+      page_size_option = @parent._test_options["PageSize"]
+      if page_size_option.is_a? Integer
+        req.meta.limit = page_size_option
+      end
+
+      req.filter = Plumbing::quote_filter_args(filter, *args)
+      resp = Enumerator::Generator.new { |g|
+        tries = 0
+        loop do
+          begin
+            plumbing_response = @stub.list(req, metadata: @parent.get_metadata("SecretStores.List", req), deadline: deadline)
+          rescue => exception
+            if (@parent.shouldRetry(tries, exception))
+              tries + +@parent.jitterSleep(tries)
+              next
             end
-			
-            req.filter = Plumbing::quote_filter_args(filter, *args)
-            resp = Enumerator::Generator.new { |g|
-                tries = 0
-                loop do
-                    begin
-                        plumbing_response = @stub.list(req, metadata: @parent.get_metadata('Roles.List', req), deadline:deadline)
-                    rescue => exception
-                        if (@parent.shouldRetry(tries, exception))
-                            tries++
-                            @parent.jitterSleep(tries)
-                            next
-                        end
-                        raise Plumbing::convert_error_to_porcelain(exception)
-                    end
-                    tries = 0
-                    plumbing_response.roles.each do |plumbing_item|
-                        g.yield Plumbing::convert_role_to_porcelain(plumbing_item)
-                    end
-                    break if plumbing_response.meta.next_cursor == ""
-                    req.meta.cursor = plumbing_response.meta.next_cursor
-                end
-            }
-            resp
+            raise Plumbing::convert_error_to_porcelain(exception)
+          end
+          tries = 0
+          plumbing_response.secret_stores.each do |plumbing_item|
+            g.yield Plumbing::convert_secret_store_to_porcelain(plumbing_item)
+          end
+          break if plumbing_response.meta.next_cursor == ""
+          req.meta.cursor = plumbing_response.meta.next_cursor
         end
+      }
+      resp
     end
+  end
 end