strongdm 1.0.34 → 2.2.0

data/lib/grpc/resources_services_pb.rb

@@ -20,6 +20,8 @@ require "resources_pb"
 
 module V1
   module Resources
+    # Resources are databases, servers, clusters, websites, or clouds that strongDM
+    # delegates access to.
     class Service
       include ::GRPC::GenericService
 
@@ -33,7 +35,7 @@ module V1
       rpc :Create, ::V1::ResourceCreateRequest, ::V1::ResourceCreateResponse
       # Get reads one Resource by ID.
       rpc :Get, ::V1::ResourceGetRequest, ::V1::ResourceGetResponse
-      # Update patches a Resource by ID.
+      # Update replaces all the fields of a Resource by ID.
       rpc :Update, ::V1::ResourceUpdateRequest, ::V1::ResourceUpdateResponse
       # Delete removes a Resource by ID.
       rpc :Delete, ::V1::ResourceDeleteRequest, ::V1::ResourceDeleteResponse

data/lib/grpc/role_attachments_services_pb.rb

@@ -24,6 +24,8 @@ module V1
     # that make up those composite roles. When a composite role is attached to another
     # role, the permissions granted to members of the composite role are augmented to
     # include the permissions granted to members of the attached role.
+    #
+    # Deprecated: use multi-role via AccountAttachments instead.
     class Service
       include ::GRPC::GenericService
 
@@ -32,12 +34,20 @@ module V1
       self.service_name = "v1.RoleAttachments"
 
       # Create registers a new RoleAttachment.
+      #
+      # Deprecated: use multi-role via AccountAttachments instead.
       rpc :Create, ::V1::RoleAttachmentCreateRequest, ::V1::RoleAttachmentCreateResponse
       # Get reads one RoleAttachment by ID.
+      #
+      # Deprecated: use multi-role via AccountAttachments instead.
       rpc :Get, ::V1::RoleAttachmentGetRequest, ::V1::RoleAttachmentGetResponse
       # Delete removes a RoleAttachment by ID.
+      #
+      # Deprecated: use multi-role via AccountAttachments instead.
       rpc :Delete, ::V1::RoleAttachmentDeleteRequest, ::V1::RoleAttachmentDeleteResponse
       # List gets a list of RoleAttachments matching a given set of criteria.
+      #
+      # Deprecated: use multi-role via AccountAttachments instead.
       rpc :List, ::V1::RoleAttachmentListRequest, ::V1::RoleAttachmentListResponse
     end
 

data/lib/grpc/role_grants_services_pb.rb

@@ -24,6 +24,8 @@ module V1
     # that make up those composite roles. When a composite role is attached to another
     # role, the permissions granted to members of the composite role are augmented to
     # include the permissions granted to members of the attached role.
+    #
+    # Deprecated: use Role access rules instead.
     class Service
       include ::GRPC::GenericService
 
@@ -32,12 +34,20 @@ module V1
       self.service_name = "v1.RoleGrants"
 
       # Create registers a new RoleGrant.
+      #
+      # Deprecated: use Role access rules instead.
       rpc :Create, ::V1::RoleGrantCreateRequest, ::V1::RoleGrantCreateResponse
       # Get reads one RoleGrant by ID.
+      #
+      # Deprecated: use Role access rules instead.
       rpc :Get, ::V1::RoleGrantGetRequest, ::V1::RoleGrantGetResponse
       # Delete removes a RoleGrant by ID.
+      #
+      # Deprecated: use Role access rules instead.
       rpc :Delete, ::V1::RoleGrantDeleteRequest, ::V1::RoleGrantDeleteResponse
       # List gets a list of RoleGrants matching a given set of criteria.
+      #
+      # Deprecated: use Role access rules instead.
       rpc :List, ::V1::RoleGrantListRequest, ::V1::RoleGrantListResponse
     end
 

data/lib/grpc/roles_services_pb.rb

@@ -20,11 +20,9 @@ require "roles_pb"
 
 module V1
   module Roles
-    # Roles are tools for controlling user access to resources. Each Role holds a
-    # list of resources which they grant access to. Composite roles are a special
-    # type of Role which have no resource associations of their own, but instead
-    # grant access to the combined resources associated with a set of child roles.
-    # Each user can be a member of one Role or composite role.
+    # A Role has a list of access rules which determine which Resources the members
+    # of the Role have access to. An Account can be a member of multiple Roles via
+    # AccountAttachments.
     class Service
       include ::GRPC::GenericService
 
@@ -36,7 +34,7 @@ module V1
       rpc :Create, ::V1::RoleCreateRequest, ::V1::RoleCreateResponse
       # Get reads one Role by ID.
       rpc :Get, ::V1::RoleGetRequest, ::V1::RoleGetResponse
-      # Update patches a Role by ID.
+      # Update replaces all the fields of a Role by ID.
       rpc :Update, ::V1::RoleUpdateRequest, ::V1::RoleUpdateResponse
       # Delete removes a Role by ID.
       rpc :Delete, ::V1::RoleDeleteRequest, ::V1::RoleDeleteResponse

data/lib/grpc/secret_store_types_pb.rb

@@ -25,6 +25,8 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       oneof :secret_store do
         optional :aws, :message, 3, "v1.AWSStore"
         optional :azure, :message, 101, "v1.AzureStore"
+        optional :gcp, :message, 201, "v1.GCPStore"
+        optional :vault_app_role, :message, 4, "v1.VaultAppRoleStore"
         optional :vault_tls, :message, 1, "v1.VaultTLSStore"
         optional :vault_token, :message, 2, "v1.VaultTokenStore"
       end
@@ -41,6 +43,19 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :vault_uri, :string, 3
       optional :tags, :message, 32771, "v1.Tags"
     end
+    add_message "v1.GCPStore" do
+      optional :id, :string, 1
+      optional :name, :string, 2
+      optional :projectID, :string, 3
+      optional :tags, :message, 32771, "v1.Tags"
+    end
+    add_message "v1.VaultAppRoleStore" do
+      optional :id, :string, 1
+      optional :name, :string, 2
+      optional :namespace, :string, 5
+      optional :server_address, :string, 3
+      optional :tags, :message, 8, "v1.Tags"
+    end
     add_message "v1.VaultTLSStore" do
       optional :id, :string, 1
       optional :name, :string, 2
@@ -65,6 +80,8 @@ module V1
   SecretStore = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.SecretStore").msgclass
   AWSStore = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AWSStore").msgclass
   AzureStore = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AzureStore").msgclass
+  GCPStore = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.GCPStore").msgclass
+  VaultAppRoleStore = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.VaultAppRoleStore").msgclass
   VaultTLSStore = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.VaultTLSStore").msgclass
   VaultTokenStore = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.VaultTokenStore").msgclass
 end

data/lib/grpc/secret_stores_services_pb.rb

@@ -31,7 +31,7 @@ module V1
       rpc :Create, ::V1::SecretStoreCreateRequest, ::V1::SecretStoreCreateResponse
       # Get reads one SecretStore by ID.
       rpc :Get, ::V1::SecretStoreGetRequest, ::V1::SecretStoreGetResponse
-      # Update patches a SecretStore by ID.
+      # Update replaces all the fields of a SecretStore by ID.
       rpc :Update, ::V1::SecretStoreUpdateRequest, ::V1::SecretStoreUpdateResponse
       # Delete removes a SecretStore by ID.
       rpc :Delete, ::V1::SecretStoreDeleteRequest, ::V1::SecretStoreDeleteResponse