strongdm 1.0.17 → 1.0.18

data/lib/grpc/account_attachments_services_pb.rb

@@ -29,13 +29,13 @@ module V1
       self.service_name = "v1.AccountAttachments"
 
       # Create registers a new AccountAttachment.
-      rpc :Create, ::V1::AccountAttachmentCreateRequest, ::V1::AccountAttachmentCreateResponse
+      rpc :Create, AccountAttachmentCreateRequest, AccountAttachmentCreateResponse
       # Get reads one AccountAttachment by ID.
-      rpc :Get, ::V1::AccountAttachmentGetRequest, ::V1::AccountAttachmentGetResponse
+      rpc :Get, AccountAttachmentGetRequest, AccountAttachmentGetResponse
       # Delete removes a AccountAttachment by ID.
-      rpc :Delete, ::V1::AccountAttachmentDeleteRequest, ::V1::AccountAttachmentDeleteResponse
+      rpc :Delete, AccountAttachmentDeleteRequest, AccountAttachmentDeleteResponse
       # List gets a list of AccountAttachments matching a given set of criteria.
-      rpc :List, ::V1::AccountAttachmentListRequest, ::V1::AccountAttachmentListResponse
+      rpc :List, AccountAttachmentListRequest, AccountAttachmentListResponse
     end
 
     Stub = Service.rpc_stub_class

data/lib/grpc/account_grants_services_pb.rb

@@ -29,13 +29,13 @@ module V1
       self.service_name = "v1.AccountGrants"
 
       # Create registers a new AccountGrant.
-      rpc :Create, ::V1::AccountGrantCreateRequest, ::V1::AccountGrantCreateResponse
+      rpc :Create, AccountGrantCreateRequest, AccountGrantCreateResponse
       # Get reads one AccountGrant by ID.
-      rpc :Get, ::V1::AccountGrantGetRequest, ::V1::AccountGrantGetResponse
+      rpc :Get, AccountGrantGetRequest, AccountGrantGetResponse
       # Delete removes a AccountGrant by ID.
-      rpc :Delete, ::V1::AccountGrantDeleteRequest, ::V1::AccountGrantDeleteResponse
+      rpc :Delete, AccountGrantDeleteRequest, AccountGrantDeleteResponse
       # List gets a list of AccountGrants matching a given set of criteria.
-      rpc :List, ::V1::AccountGrantListRequest, ::V1::AccountGrantListResponse
+      rpc :List, AccountGrantListRequest, AccountGrantListResponse
     end
 
     Stub = Service.rpc_stub_class

data/lib/grpc/accounts_services_pb.rb

@@ -31,15 +31,15 @@ module V1
       self.service_name = "v1.Accounts"
 
       # Create registers a new Account.
-      rpc :Create, ::V1::AccountCreateRequest, ::V1::AccountCreateResponse
+      rpc :Create, AccountCreateRequest, AccountCreateResponse
       # Get reads one Account by ID.
-      rpc :Get, ::V1::AccountGetRequest, ::V1::AccountGetResponse
+      rpc :Get, AccountGetRequest, AccountGetResponse
       # Update patches a Account by ID.
-      rpc :Update, ::V1::AccountUpdateRequest, ::V1::AccountUpdateResponse
+      rpc :Update, AccountUpdateRequest, AccountUpdateResponse
       # Delete removes a Account by ID.
-      rpc :Delete, ::V1::AccountDeleteRequest, ::V1::AccountDeleteResponse
+      rpc :Delete, AccountDeleteRequest, AccountDeleteResponse
       # List gets a list of Accounts matching a given set of criteria.
-      rpc :List, ::V1::AccountListRequest, ::V1::AccountListResponse
+      rpc :List, AccountListRequest, AccountListResponse
     end
 
     Stub = Service.rpc_stub_class

data/lib/grpc/control_panel_pb.rb

@@ -29,10 +29,21 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :public_key, :string, 2
       optional :rate_limit, :message, 3, "v1.RateLimitMetadata"
     end
+    add_message "v1.ControlPanelVerifyJWTRequest" do
+      optional :meta, :message, 1, "v1.GetRequestMetadata"
+      optional :token, :string, 2
+    end
+    add_message "v1.ControlPanelVerifyJWTResponse" do
+      optional :meta, :message, 1, "v1.GetResponseMetadata"
+      optional :valid, :bool, 2
+      optional :rate_limit, :message, 3, "v1.RateLimitMetadata"
+    end
   end
 end
 
 module V1
   ControlPanelGetSSHCAPublicKeyRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.ControlPanelGetSSHCAPublicKeyRequest").msgclass
   ControlPanelGetSSHCAPublicKeyResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.ControlPanelGetSSHCAPublicKeyResponse").msgclass
+  ControlPanelVerifyJWTRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.ControlPanelVerifyJWTRequest").msgclass
+  ControlPanelVerifyJWTResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.ControlPanelVerifyJWTResponse").msgclass
 end

data/lib/grpc/control_panel_services_pb.rb

@@ -29,7 +29,9 @@ module V1
       self.service_name = "v1.ControlPanel"
 
       # GetSSHCAPublicKey retrieves the SSH CA public key.
-      rpc :GetSSHCAPublicKey, ::V1::ControlPanelGetSSHCAPublicKeyRequest, ::V1::ControlPanelGetSSHCAPublicKeyResponse
+      rpc :GetSSHCAPublicKey, ControlPanelGetSSHCAPublicKeyRequest, ControlPanelGetSSHCAPublicKeyResponse
+      # VerifyJWT reports whether the given JWT token (x-sdm-token) is valid.
+      rpc :VerifyJWT, ControlPanelVerifyJWTRequest, ControlPanelVerifyJWTResponse
     end
 
     Stub = Service.rpc_stub_class

data/lib/grpc/nodes_services_pb.rb

@@ -31,15 +31,15 @@ module V1
       self.service_name = "v1.Nodes"
 
       # Create registers a new Node.
-      rpc :Create, ::V1::NodeCreateRequest, ::V1::NodeCreateResponse
+      rpc :Create, NodeCreateRequest, NodeCreateResponse
       # Get reads one Node by ID.
-      rpc :Get, ::V1::NodeGetRequest, ::V1::NodeGetResponse
+      rpc :Get, NodeGetRequest, NodeGetResponse
       # Update patches a Node by ID.
-      rpc :Update, ::V1::NodeUpdateRequest, ::V1::NodeUpdateResponse
+      rpc :Update, NodeUpdateRequest, NodeUpdateResponse
       # Delete removes a Node by ID.
-      rpc :Delete, ::V1::NodeDeleteRequest, ::V1::NodeDeleteResponse
+      rpc :Delete, NodeDeleteRequest, NodeDeleteResponse
       # List gets a list of Nodes matching a given set of criteria.
-      rpc :List, ::V1::NodeListRequest, ::V1::NodeListResponse
+      rpc :List, NodeListRequest, NodeListResponse
     end
 
     Stub = Service.rpc_stub_class

data/lib/grpc/options_pb.rb

@@ -23,6 +23,9 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :method, :string, 1941300
       optional :url, :string, 1941301
     end
+    add_message "v1.FileOptions" do
+      optional :private_sdk, :bool, 1941700
+    end
     add_message "v1.FieldOptions" do
       optional :name, :string, 1941300
       optional :sql_nullable, :bool, 1941301
@@ -31,7 +34,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :required, :bool, 1941304
       optional :id_type, :string, 1941305
       optional :sdk_only, :bool, 1941306
-      optional :computed, :bool, 1941307
+      optional :terraform_computed, :string, 1941307
       optional :force_new, :bool, 1941308
       optional :write_only, :bool, 1941309
       optional :sensitive, :bool, 1941310
@@ -80,6 +83,7 @@ end
 
 module V1
   MethodOptions = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.MethodOptions").msgclass
+  FileOptions = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.FileOptions").msgclass
   FieldOptions = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.FieldOptions").msgclass
   MessageOptions = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.MessageOptions").msgclass
   CustomPorcelainMessageOptions = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.CustomPorcelainMessageOptions").msgclass

data/lib/grpc/plumbing.rb

@@ -25,7 +25,6 @@ require_relative "./account_attachments_pb"
 require_relative "./account_grants_pb"
 require_relative "./accounts_pb"
 require_relative "./control_panel_pb"
-require_relative "./demo_provisioning_requests_pb"
 require_relative "./drivers_pb"
 require_relative "./nodes_pb"
 require_relative "./resources_pb"
@@ -918,6 +917,44 @@ module SDM
       end
       items
     end
+    def self.convert_control_panel_verify_jwt_response_to_porcelain(plumbing)
+      if plumbing == nil
+        return nil
+      end
+      porcelain = ControlPanelVerifyJWTResponse.new()
+      porcelain.meta = convert_get_response_metadata_to_porcelain(plumbing.meta)
+      porcelain.valid = (plumbing.valid)
+      porcelain.rate_limit = convert_rate_limit_metadata_to_porcelain(plumbing.rate_limit)
+      porcelain
+    end
+
+    def self.convert_control_panel_verify_jwt_response_to_plumbing(porcelain)
+      if porcelain == nil
+        return nil
+      end
+      plumbing = V1::ControlPanelVerifyJWTResponse.new()
+      plumbing.meta = convert_get_response_metadata_to_plumbing(porcelain.meta) unless porcelain.meta == nil
+      plumbing.valid = (porcelain.valid) unless porcelain.valid == nil
+      plumbing.rate_limit = convert_rate_limit_metadata_to_plumbing(porcelain.rate_limit) unless porcelain.rate_limit == nil
+      plumbing
+    end
+    def self.convert_repeated_control_panel_verify_jwt_response_to_plumbing(porcelains)
+      items = Array.new
+      porcelains.each do |porcelain|
+        plumbing = convert_control_panel_verify_jwt_response_to_plumbing(porcelain)
+        items.append(plumbing)
+      end
+      items
+    end
+
+    def self.convert_repeated_control_panel_verify_jwt_response_to_porcelain(plumbings)
+      items = Array.new
+      plumbings.each do |plumbing|
+        porcelain = convert_control_panel_verify_jwt_response_to_porcelain(plumbing)
+        items.append(porcelain)
+      end
+      items
+    end
     def self.convert_resource_to_plumbing(porcelain)
       if porcelain == nil
         return nil

data/lib/grpc/resources_services_pb.rb

@@ -28,17 +28,17 @@ module V1
       self.service_name = "v1.Resources"
 
       # EnumerateTags gets a list of the filter matching tags.
-      rpc :EnumerateTags, ::V1::EnumerateTagsRequest, ::V1::EnumerateTagsResponse
+      rpc :EnumerateTags, EnumerateTagsRequest, EnumerateTagsResponse
       # Create registers a new Resource.
-      rpc :Create, ::V1::ResourceCreateRequest, ::V1::ResourceCreateResponse
+      rpc :Create, ResourceCreateRequest, ResourceCreateResponse
       # Get reads one Resource by ID.
-      rpc :Get, ::V1::ResourceGetRequest, ::V1::ResourceGetResponse
+      rpc :Get, ResourceGetRequest, ResourceGetResponse
       # Update patches a Resource by ID.
-      rpc :Update, ::V1::ResourceUpdateRequest, ::V1::ResourceUpdateResponse
+      rpc :Update, ResourceUpdateRequest, ResourceUpdateResponse
       # Delete removes a Resource by ID.
-      rpc :Delete, ::V1::ResourceDeleteRequest, ::V1::ResourceDeleteResponse
+      rpc :Delete, ResourceDeleteRequest, ResourceDeleteResponse
       # List gets a list of Resources matching a given set of criteria.
-      rpc :List, ::V1::ResourceListRequest, ::V1::ResourceListResponse
+      rpc :List, ResourceListRequest, ResourceListResponse
     end
 
     Stub = Service.rpc_stub_class

data/lib/grpc/role_attachments_services_pb.rb

@@ -32,13 +32,13 @@ module V1
       self.service_name = "v1.RoleAttachments"
 
       # Create registers a new RoleAttachment.
-      rpc :Create, ::V1::RoleAttachmentCreateRequest, ::V1::RoleAttachmentCreateResponse
+      rpc :Create, RoleAttachmentCreateRequest, RoleAttachmentCreateResponse
       # Get reads one RoleAttachment by ID.
-      rpc :Get, ::V1::RoleAttachmentGetRequest, ::V1::RoleAttachmentGetResponse
+      rpc :Get, RoleAttachmentGetRequest, RoleAttachmentGetResponse
       # Delete removes a RoleAttachment by ID.
-      rpc :Delete, ::V1::RoleAttachmentDeleteRequest, ::V1::RoleAttachmentDeleteResponse
+      rpc :Delete, RoleAttachmentDeleteRequest, RoleAttachmentDeleteResponse
       # List gets a list of RoleAttachments matching a given set of criteria.
-      rpc :List, ::V1::RoleAttachmentListRequest, ::V1::RoleAttachmentListResponse
+      rpc :List, RoleAttachmentListRequest, RoleAttachmentListResponse
     end
 
     Stub = Service.rpc_stub_class

data/lib/grpc/role_grants_services_pb.rb

@@ -32,13 +32,13 @@ module V1
       self.service_name = "v1.RoleGrants"
 
       # Create registers a new RoleGrant.
-      rpc :Create, ::V1::RoleGrantCreateRequest, ::V1::RoleGrantCreateResponse
+      rpc :Create, RoleGrantCreateRequest, RoleGrantCreateResponse
       # Get reads one RoleGrant by ID.
-      rpc :Get, ::V1::RoleGrantGetRequest, ::V1::RoleGrantGetResponse
+      rpc :Get, RoleGrantGetRequest, RoleGrantGetResponse
       # Delete removes a RoleGrant by ID.
-      rpc :Delete, ::V1::RoleGrantDeleteRequest, ::V1::RoleGrantDeleteResponse
+      rpc :Delete, RoleGrantDeleteRequest, RoleGrantDeleteResponse
       # List gets a list of RoleGrants matching a given set of criteria.
-      rpc :List, ::V1::RoleGrantListRequest, ::V1::RoleGrantListResponse
+      rpc :List, RoleGrantListRequest, RoleGrantListResponse
     end
 
     Stub = Service.rpc_stub_class

data/lib/grpc/roles_services_pb.rb

@@ -33,15 +33,15 @@ module V1
       self.service_name = "v1.Roles"
 
       # Create registers a new Role.
-      rpc :Create, ::V1::RoleCreateRequest, ::V1::RoleCreateResponse
+      rpc :Create, RoleCreateRequest, RoleCreateResponse
       # Get reads one Role by ID.
-      rpc :Get, ::V1::RoleGetRequest, ::V1::RoleGetResponse
+      rpc :Get, RoleGetRequest, RoleGetResponse
       # Update patches a Role by ID.
-      rpc :Update, ::V1::RoleUpdateRequest, ::V1::RoleUpdateResponse
+      rpc :Update, RoleUpdateRequest, RoleUpdateResponse
       # Delete removes a Role by ID.
-      rpc :Delete, ::V1::RoleDeleteRequest, ::V1::RoleDeleteResponse
+      rpc :Delete, RoleDeleteRequest, RoleDeleteResponse
       # List gets a list of Roles matching a given set of criteria.
-      rpc :List, ::V1::RoleListRequest, ::V1::RoleListResponse
+      rpc :List, RoleListRequest, RoleListResponse
     end
 
     Stub = Service.rpc_stub_class

data/lib/grpc/secret_stores_services_pb.rb

@@ -28,15 +28,15 @@ module V1
       self.unmarshal_class_method = :decode
       self.service_name = "v1.SecretStores"
 
-      rpc :Create, ::V1::SecretStoreCreateRequest, ::V1::SecretStoreCreateResponse
+      rpc :Create, SecretStoreCreateRequest, SecretStoreCreateResponse
       # Get reads one SecretStore by ID.
-      rpc :Get, ::V1::SecretStoreGetRequest, ::V1::SecretStoreGetResponse
+      rpc :Get, SecretStoreGetRequest, SecretStoreGetResponse
       # Update patches a SecretStore by ID.
-      rpc :Update, ::V1::SecretStoreUpdateRequest, ::V1::SecretStoreUpdateResponse
+      rpc :Update, SecretStoreUpdateRequest, SecretStoreUpdateResponse
       # Delete removes a SecretStore by ID.
-      rpc :Delete, ::V1::SecretStoreDeleteRequest, ::V1::SecretStoreDeleteResponse
+      rpc :Delete, SecretStoreDeleteRequest, SecretStoreDeleteResponse
       # List gets a list of SecretStores matching a given set of criteria.
-      rpc :List, ::V1::SecretStoreListRequest, ::V1::SecretStoreListResponse
+      rpc :List, SecretStoreListRequest, SecretStoreListResponse
     end
 
     Stub = Service.rpc_stub_class

data/lib/grpc/spec_pb.rb

@@ -58,6 +58,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :cursor, :string, 1
       optional :page, :int32, 2
       optional :limit, :int32, 3
+      optional :order_by, :string, 4
     end
     add_message "v1.ListResponseMetadata" do
       optional :next_cursor, :string, 1

data/lib/models/porcelain.rb

@@ -683,6 +683,40 @@ module SDM
     end
   end
 
+  # ControlPanelVerifyJWTResponse reports whether x-sdm-token is valid.
+  class ControlPanelVerifyJWTResponse
+    # Reserved for future use.
+    attr_accessor :meta
+    # Reports if the given token is valid.
+    attr_accessor :valid
+    # Rate limit information.
+    attr_accessor :rate_limit
+
+    def initialize(
+      meta: nil,
+      valid: nil,
+      rate_limit: nil
+    )
+      if meta != nil
+        @meta = meta
+      end
+      if valid != nil
+        @valid = valid
+      end
+      if rate_limit != nil
+        @rate_limit = rate_limit
+      end
+    end
+
+    def to_json(options = {})
+      hash = {}
+      self.instance_variables.each do |var|
+        hash[var.id2name.delete_prefix("@")] = self.instance_variable_get var
+      end
+      hash.to_json
+    end
+  end
+
   class Athena
     # Unique identifier of the Resource.
     attr_accessor :id

data/lib/svc.rb

@@ -529,6 +529,36 @@ module SDM
       resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
       resp
     end
+
+    # VerifyJWT reports whether the given JWT token (x-sdm-token) is valid.
+    def verify_jwt(
+      token,
+      deadline: nil
+    )
+      req = V1::ControlPanelVerifyJWTRequest.new()
+
+      req.token = (token)
+      tries = 0
+      plumbing_response = nil
+      loop do
+        begin
+          plumbing_response = @stub.verify_jwt(req, metadata: @parent.get_metadata("ControlPanel.VerifyJWT", req), deadline: deadline)
+        rescue => exception
+          if (@parent.shouldRetry(tries, exception))
+            tries + +@parent.jitterSleep(tries)
+            next
+          end
+          raise Plumbing::convert_error_to_porcelain(exception)
+        end
+        break
+      end
+
+      resp = ControlPanelVerifyJWTResponse.new()
+      resp.meta = Plumbing::convert_get_response_metadata_to_porcelain(plumbing_response.meta)
+      resp.valid = (plumbing_response.valid)
+      resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit)
+      resp
+    end
   end
 
   # Nodes make up the strongDM network, and allow your users to connect securely to your resources. There are two types of nodes:

data/lib/version

@@ -13,5 +13,5 @@
 # limitations under the License.
 #
 module SDM
-  VERSION = "1.0.17"
+  VERSION = "1.0.18"
 end

data/lib/version.rb

@@ -13,5 +13,5 @@
 # limitations under the License.
 #
 module SDM
-  VERSION = "1.0.17"
+  VERSION = "1.0.18"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: strongdm
 version: !ruby/object:Gem::Version
-  version: 1.0.17
+  version: 1.0.18
 platform: ruby
 authors:
 - strongDM Team
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-01-22 00:00:00.000000000 Z
+date: 2021-02-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: grpc
@@ -125,6 +125,7 @@ files:
 - doc/SDM/Cockroach.html
 - doc/SDM/ControlPanel.html
 - doc/SDM/ControlPanelGetSSHCAPublicKeyResponse.html
+- doc/SDM/ControlPanelVerifyJWTResponse.html
 - doc/SDM/CreateResponseMetadata.html
 - doc/SDM/DB2LUW.html
 - doc/SDM/DB2i.html
@@ -230,6 +231,9 @@ files:
 - doc/V1/DemoProvisioningRequests/Service.html
 - doc/V1/Nodes.html
 - doc/V1/Nodes/Service.html
+- doc/V1/PermissionGrants.html
+- doc/V1/PermissionGrants/Service.html
+- doc/V1/Permissions/Service.html
 - doc/V1/Resources.html
 - doc/V1/Resources/Service.html
 - doc/V1/RoleAttachments.html
@@ -306,8 +310,6 @@ files:
 - lib/grpc/accounts_services_pb.rb
 - lib/grpc/control_panel_pb.rb
 - lib/grpc/control_panel_services_pb.rb
-- lib/grpc/demo_provisioning_requests_pb.rb
-- lib/grpc/demo_provisioning_requests_services_pb.rb
 - lib/grpc/drivers_pb.rb
 - lib/grpc/nodes_pb.rb
 - lib/grpc/nodes_services_pb.rb