strongdm 1.0.16 → 1.0.17

data/lib/grpc/drivers_pb.rb

@@ -85,6 +85,8 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :output, :string, 3
       optional :port_override, :int32, 4
       optional :region, :string, 5
+      optional :role_arn, :string, 6
+      optional :role_external_id, :string, 7
     end
     add_message "v1.AWS" do
       optional :id, :string, 32768
@@ -96,6 +98,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :secret_access_key, :string, 2
       optional :healthcheck_region, :string, 4
       optional :role_arn, :string, 5
+      optional :role_external_id, :string, 6
     end
     add_message "v1.BigQuery" do
       optional :id, :string, 32768
@@ -171,6 +174,8 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :region, :string, 3
       optional :endpoint, :string, 4
       optional :port_override, :int32, 5
+      optional :role_arn, :string, 6
+      optional :role_external_id, :string, 7
     end
     add_message "v1.AmazonES" do
       optional :id, :string, 32768
@@ -183,6 +188,8 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :endpoint, :string, 3
       optional :access_key, :string, 4
       optional :port_override, :int32, 5
+      optional :role_arn, :string, 6
+      optional :role_external_id, :string, 7
     end
     add_message "v1.Elastic" do
       optional :id, :string, 32768
@@ -285,6 +292,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :region, :string, 6
       optional :cluster_name, :string, 7
       optional :role_arn, :string, 8
+      optional :role_external_id, :string, 10
       optional :healthcheck_namespace, :string, 9
     end
     add_message "v1.GoogleGKE" do

data/lib/grpc/plumbing.rb

@@ -262,6 +262,42 @@ module SDM
       end
       items
     end
+    def self.convert_tag_to_porcelain(plumbing)
+      if plumbing == nil
+        return nil
+      end
+      porcelain = Tag.new()
+      porcelain.name = (plumbing.name)
+      porcelain.value = (plumbing.value)
+      porcelain
+    end
+
+    def self.convert_tag_to_plumbing(porcelain)
+      if porcelain == nil
+        return nil
+      end
+      plumbing = V1::Tag.new()
+      plumbing.name = (porcelain.name) unless porcelain.name == nil
+      plumbing.value = (porcelain.value) unless porcelain.value == nil
+      plumbing
+    end
+    def self.convert_repeated_tag_to_plumbing(porcelains)
+      items = Array.new
+      porcelains.each do |porcelain|
+        plumbing = convert_tag_to_plumbing(porcelain)
+        items.append(plumbing)
+      end
+      items
+    end
+
+    def self.convert_repeated_tag_to_porcelain(plumbings)
+      items = Array.new
+      plumbings.each do |plumbing|
+        porcelain = convert_tag_to_porcelain(plumbing)
+        items.append(porcelain)
+      end
+      items
+    end
     def self.convert_account_attachment_create_response_to_porcelain(plumbing)
       if plumbing == nil
         return nil
@@ -1221,6 +1257,8 @@ module SDM
       porcelain.output = (plumbing.output)
       porcelain.port_override = (plumbing.port_override)
       porcelain.region = (plumbing.region)
+      porcelain.role_arn = (plumbing.role_arn)
+      porcelain.role_external_id = (plumbing.role_external_id)
       porcelain
     end
 
@@ -1239,6 +1277,8 @@ module SDM
       plumbing.output = (porcelain.output) unless porcelain.output == nil
       plumbing.port_override = (porcelain.port_override) unless porcelain.port_override == nil
       plumbing.region = (porcelain.region) unless porcelain.region == nil
+      plumbing.role_arn = (porcelain.role_arn) unless porcelain.role_arn == nil
+      plumbing.role_external_id = (porcelain.role_external_id) unless porcelain.role_external_id == nil
       plumbing
     end
     def self.convert_repeated_athena_to_plumbing(porcelains)
@@ -1272,6 +1312,7 @@ module SDM
       porcelain.secret_access_key = (plumbing.secret_access_key)
       porcelain.healthcheck_region = (plumbing.healthcheck_region)
       porcelain.role_arn = (plumbing.role_arn)
+      porcelain.role_external_id = (plumbing.role_external_id)
       porcelain
     end
 
@@ -1289,6 +1330,7 @@ module SDM
       plumbing.secret_access_key = (porcelain.secret_access_key) unless porcelain.secret_access_key == nil
       plumbing.healthcheck_region = (porcelain.healthcheck_region) unless porcelain.healthcheck_region == nil
       plumbing.role_arn = (porcelain.role_arn) unless porcelain.role_arn == nil
+      plumbing.role_external_id = (porcelain.role_external_id) unless porcelain.role_external_id == nil
       plumbing
     end
     def self.convert_repeated_aws_to_plumbing(porcelains)
@@ -1589,6 +1631,8 @@ module SDM
       porcelain.region = (plumbing.region)
       porcelain.endpoint = (plumbing.endpoint)
       porcelain.port_override = (plumbing.port_override)
+      porcelain.role_arn = (plumbing.role_arn)
+      porcelain.role_external_id = (plumbing.role_external_id)
       porcelain
     end
 
@@ -1607,6 +1651,8 @@ module SDM
       plumbing.region = (porcelain.region) unless porcelain.region == nil
       plumbing.endpoint = (porcelain.endpoint) unless porcelain.endpoint == nil
       plumbing.port_override = (porcelain.port_override) unless porcelain.port_override == nil
+      plumbing.role_arn = (porcelain.role_arn) unless porcelain.role_arn == nil
+      plumbing.role_external_id = (porcelain.role_external_id) unless porcelain.role_external_id == nil
       plumbing
     end
     def self.convert_repeated_dynamo_db_to_plumbing(porcelains)
@@ -1641,6 +1687,8 @@ module SDM
       porcelain.endpoint = (plumbing.endpoint)
       porcelain.access_key = (plumbing.access_key)
       porcelain.port_override = (plumbing.port_override)
+      porcelain.role_arn = (plumbing.role_arn)
+      porcelain.role_external_id = (plumbing.role_external_id)
       porcelain
     end
 
@@ -1659,6 +1707,8 @@ module SDM
       plumbing.endpoint = (porcelain.endpoint) unless porcelain.endpoint == nil
       plumbing.access_key = (porcelain.access_key) unless porcelain.access_key == nil
       plumbing.port_override = (porcelain.port_override) unless porcelain.port_override == nil
+      plumbing.role_arn = (porcelain.role_arn) unless porcelain.role_arn == nil
+      plumbing.role_external_id = (porcelain.role_external_id) unless porcelain.role_external_id == nil
       plumbing
     end
     def self.convert_repeated_amazon_es_to_plumbing(porcelains)
@@ -2067,6 +2117,7 @@ module SDM
       porcelain.region = (plumbing.region)
       porcelain.cluster_name = (plumbing.cluster_name)
       porcelain.role_arn = (plumbing.role_arn)
+      porcelain.role_external_id = (plumbing.role_external_id)
       porcelain.healthcheck_namespace = (plumbing.healthcheck_namespace)
       porcelain
     end
@@ -2088,6 +2139,7 @@ module SDM
       plumbing.region = (porcelain.region) unless porcelain.region == nil
       plumbing.cluster_name = (porcelain.cluster_name) unless porcelain.cluster_name == nil
       plumbing.role_arn = (porcelain.role_arn) unless porcelain.role_arn == nil
+      plumbing.role_external_id = (porcelain.role_external_id) unless porcelain.role_external_id == nil
       plumbing.healthcheck_namespace = (porcelain.healthcheck_namespace) unless porcelain.healthcheck_namespace == nil
       plumbing
     end

data/lib/grpc/resources_pb.rb

@@ -20,6 +20,7 @@ require "google/protobuf"
 require "options_pb"
 require "spec_pb"
 require "drivers_pb"
+require "tags_pb"
 Google::Protobuf::DescriptorPool.generated_pool.build do
   add_file("resources.proto", :syntax => :proto3) do
     add_message "v1.ResourceCreateRequest" do
@@ -67,6 +68,15 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       repeated :resources, :message, 2, "v1.Resource"
       optional :rate_limit, :message, 3, "v1.RateLimitMetadata"
     end
+    add_message "v1.EnumerateTagsRequest" do
+      optional :meta, :message, 1, "v1.ListRequestMetadata"
+      optional :filter, :string, 2
+    end
+    add_message "v1.EnumerateTagsResponse" do
+      optional :meta, :message, 1, "v1.ListResponseMetadata"
+      repeated :matches, :message, 2, "v1.Tag"
+      optional :rate_limit, :message, 3, "v1.RateLimitMetadata"
+    end
   end
 end
 
@@ -81,4 +91,6 @@ module V1
   ResourceDeleteResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.ResourceDeleteResponse").msgclass
   ResourceListRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.ResourceListRequest").msgclass
   ResourceListResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.ResourceListResponse").msgclass
+  EnumerateTagsRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.EnumerateTagsRequest").msgclass
+  EnumerateTagsResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.EnumerateTagsResponse").msgclass
 end

data/lib/grpc/resources_services_pb.rb

@@ -27,6 +27,8 @@ module V1
       self.unmarshal_class_method = :decode
       self.service_name = "v1.Resources"
 
+      # EnumerateTags gets a list of the filter matching tags.
+      rpc :EnumerateTags, ::V1::EnumerateTagsRequest, ::V1::EnumerateTagsResponse
       # Create registers a new Resource.
       rpc :Create, ::V1::ResourceCreateRequest, ::V1::ResourceCreateResponse
       # Get reads one Resource by ID.

data/lib/grpc/spec_pb.rb

@@ -69,6 +69,10 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :reset_at, :message, 3, "google.protobuf.Timestamp"
       optional :bucket, :string, 4
     end
+    add_message "v1.GenericRequestMetadata" do
+    end
+    add_message "v1.GenericResponseMetadata" do
+    end
   end
 end
 
@@ -91,4 +95,6 @@ module V1
   ListRequestMetadata = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.ListRequestMetadata").msgclass
   ListResponseMetadata = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.ListResponseMetadata").msgclass
   RateLimitMetadata = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.RateLimitMetadata").msgclass
+  GenericRequestMetadata = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.GenericRequestMetadata").msgclass
+  GenericResponseMetadata = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.GenericResponseMetadata").msgclass
 end

data/lib/grpc/tags_pb.rb

@@ -27,10 +27,15 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :name, :string, 1
       optional :value, :string, 2
     end
+    add_message "v1.Tag" do
+      optional :name, :string, 1
+      optional :value, :string, 2
+    end
   end
 end
 
 module V1
   Tags = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.Tags").msgclass
   Tags::Pair = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.Tags.Pair").msgclass
+  Tag = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.Tag").msgclass
 end

data/lib/models/porcelain.rb

@@ -115,6 +115,32 @@ module SDM
     end
   end
 
+  class Tag
+    attr_accessor :name
+
+    attr_accessor :value
+
+    def initialize(
+      name: nil,
+      value: nil
+    )
+      if name != nil
+        @name = name
+      end
+      if value != nil
+        @value = value
+      end
+    end
+
+    def to_json(options = {})
+      hash = {}
+      self.instance_variables.each do |var|
+        hash[var.id2name.delete_prefix("@")] = self.instance_variable_get var
+      end
+      hash.to_json
+    end
+  end
+
   # AccountAttachmentCreateResponse reports how the AccountAttachments were created in the system.
   class AccountAttachmentCreateResponse
     # Reserved for future use.
@@ -679,6 +705,10 @@ module SDM
 
     attr_accessor :region
 
+    attr_accessor :role_arn
+
+    attr_accessor :role_external_id
+
     def initialize(
       id: nil,
       name: nil,
@@ -689,7 +719,9 @@ module SDM
       secret_access_key: nil,
       output: nil,
       port_override: nil,
-      region: nil
+      region: nil,
+      role_arn: nil,
+      role_external_id: nil
     )
       if id != nil
         @id = id
@@ -721,6 +753,12 @@ module SDM
       if region != nil
         @region = region
       end
+      if role_arn != nil
+        @role_arn = role_arn
+      end
+      if role_external_id != nil
+        @role_external_id = role_external_id
+      end
     end
 
     def to_json(options = {})
@@ -752,6 +790,8 @@ module SDM
 
     attr_accessor :role_arn
 
+    attr_accessor :role_external_id
+
     def initialize(
       id: nil,
       name: nil,
@@ -761,7 +801,8 @@ module SDM
       access_key: nil,
       secret_access_key: nil,
       healthcheck_region: nil,
-      role_arn: nil
+      role_arn: nil,
+      role_external_id: nil
     )
       if id != nil
         @id = id
@@ -790,6 +831,9 @@ module SDM
       if role_arn != nil
         @role_arn = role_arn
       end
+      if role_external_id != nil
+        @role_external_id = role_external_id
+      end
     end
 
     def to_json(options = {})
@@ -1216,6 +1260,10 @@ module SDM
 
     attr_accessor :port_override
 
+    attr_accessor :role_arn
+
+    attr_accessor :role_external_id
+
     def initialize(
       id: nil,
       name: nil,
@@ -1226,7 +1274,9 @@ module SDM
       secret_access_key: nil,
       region: nil,
       endpoint: nil,
-      port_override: nil
+      port_override: nil,
+      role_arn: nil,
+      role_external_id: nil
     )
       if id != nil
         @id = id
@@ -1258,6 +1308,12 @@ module SDM
       if port_override != nil
         @port_override = port_override
       end
+      if role_arn != nil
+        @role_arn = role_arn
+      end
+      if role_external_id != nil
+        @role_external_id = role_external_id
+      end
     end
 
     def to_json(options = {})
@@ -1291,6 +1347,10 @@ module SDM
 
     attr_accessor :port_override
 
+    attr_accessor :role_arn
+
+    attr_accessor :role_external_id
+
     def initialize(
       id: nil,
       name: nil,
@@ -1301,7 +1361,9 @@ module SDM
       secret_access_key: nil,
       endpoint: nil,
       access_key: nil,
-      port_override: nil
+      port_override: nil,
+      role_arn: nil,
+      role_external_id: nil
     )
       if id != nil
         @id = id
@@ -1333,6 +1395,12 @@ module SDM
       if port_override != nil
         @port_override = port_override
       end
+      if role_arn != nil
+        @role_arn = role_arn
+      end
+      if role_external_id != nil
+        @role_external_id = role_external_id
+      end
     end
 
     def to_json(options = {})
@@ -1919,6 +1987,8 @@ module SDM
 
     attr_accessor :role_arn
 
+    attr_accessor :role_external_id
+
     attr_accessor :healthcheck_namespace
 
     def initialize(
@@ -1934,6 +2004,7 @@ module SDM
       region: nil,
       cluster_name: nil,
       role_arn: nil,
+      role_external_id: nil,
       healthcheck_namespace: nil
     )
       if id != nil
@@ -1972,6 +2043,9 @@ module SDM
       if role_arn != nil
         @role_arn = role_arn
       end
+      if role_external_id != nil
+        @role_external_id = role_external_id
+      end
       if healthcheck_namespace != nil
         @healthcheck_namespace = healthcheck_namespace
       end

data/lib/strongdm.rb

@@ -29,6 +29,9 @@ module SDM
   class Client
     # Creates a new strongDM API client.
     def initialize(api_access_key, api_secret_key, host: "api.strongdm.com:443", insecure: false)
+      raise TypeError, "client access key must be a string" unless api_access_key.kind_of?(String)
+      raise TypeError, "client secret key must be a string" unless api_secret_key.kind_of?(String)
+      raise TypeError, "client host must be a string" unless host.kind_of?(String)
       @api_access_key = api_access_key.strip
       @api_secret_key = Base64.strict_decode64(api_secret_key.strip)
       @max_retries = DEFAULT_MAX_RETRIES

data/lib/svc.rb

@@ -722,6 +722,43 @@ module SDM
       @parent = parent
     end
 
+    # EnumerateTags gets a list of the filter matching tags.
+    def enumerate_tags(
+      filter,
+      *args,
+      deadline: nil
+    )
+      req = V1::EnumerateTagsRequest.new()
+      req.meta = V1::ListRequestMetadata.new()
+      page_size_option = @parent._test_options["PageSize"]
+      if page_size_option.is_a? Integer
+        req.meta.limit = page_size_option
+      end
+
+      req.filter = Plumbing::quote_filter_args(filter, *args)
+      resp = Enumerator::Generator.new { |g|
+        tries = 0
+        loop do
+          begin
+            plumbing_response = @stub.enumerate_tags(req, metadata: @parent.get_metadata("Resources.EnumerateTags", req), deadline: deadline)
+          rescue => exception
+            if (@parent.shouldRetry(tries, exception))
+              tries + +@parent.jitterSleep(tries)
+              next
+            end
+            raise Plumbing::convert_error_to_porcelain(exception)
+          end
+          tries = 0
+          plumbing_response.matches.each do |plumbing_item|
+            g.yield Plumbing::convert_tag_to_porcelain(plumbing_item)
+          end
+          break if plumbing_response.meta.next_cursor == ""
+          req.meta.cursor = plumbing_response.meta.next_cursor
+        end
+      }
+      resp
+    end
+
     # Create registers a new Resource.
     def create(
       resource,