strongdm 11.1.0 → 11.4.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d70b29d849fdc661aadcb64d420575985750b357b25288b12efaad1795d043fb
-  data.tar.gz: b20940f982484ca33120e5115749a70ccdaa8f0b3efcb22bdcf34d7b1012bf76
+  metadata.gz: d90b984d1157ab35defdd4dbb9b6006a5bdd1a22adb4fa16869699c38a507c8f
+  data.tar.gz: ddec0ac1ff738de2cc266a614ac96e34d382868a94cfdac9676eb7185916416c
 SHA512:
-  metadata.gz: '05283fd04c6cff175ebf116d6f2e6d959d54a3758e60c2f00442c11e89f4462ae613cb66984901a83e21be3bbacd25984212ce447d5827ce7d5fb41663eb41bb'
-  data.tar.gz: 6b23dd77c57954c34ae02a7295338f358c15b73a07fec6c00c681af26c24840f26e79541e91c26c6e2fd3e921f8ad027d9ebe58e45c2f12d54e4cea9e42d1f62
+  metadata.gz: 01367514ea292955d9ce41b4a0b16e9d526eea6834d221dba93af9731fb2426043d59362dc5e42754a662652c51a40a5f9fe8cc5e296bb9936b2bd5fc4afa814
+  data.tar.gz: 5c6e5d7f2169f9f7864a64c8937d3f3b57cf6f52f51568ebab86b68ac43ec48e40933996b0ddede0b35e06de7d5dec7388aade8bb9a23a5c2dd1ef0e22b42260

data/.git/ORIG_HEAD

@@ -1 +1 @@
-3a2a67e03f5b2f1bbcc8d2fa9dffcba764d76196
+9103d7d0e3104e99edb3d9a188d231ae0ce3947f

data/.git/logs/HEAD

@@ -1,3 +1,3 @@
-0000000000000000000000000000000000000000 3a2a67e03f5b2f1bbcc8d2fa9dffcba764d76196 root <root@45cacd354dc7.(none)> 1721234743 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
-3a2a67e03f5b2f1bbcc8d2fa9dffcba764d76196 3a2a67e03f5b2f1bbcc8d2fa9dffcba764d76196 root <root@45cacd354dc7.(none)> 1721234743 +0000	checkout: moving from master to master
-3a2a67e03f5b2f1bbcc8d2fa9dffcba764d76196 be8c2d87c98f8febe52ace473a9d3382d59d8ad2 root <root@45cacd354dc7.(none)> 1721234743 +0000	merge origin/development: Fast-forward
+0000000000000000000000000000000000000000 9103d7d0e3104e99edb3d9a188d231ae0ce3947f root <root@fb3a0a4de249.(none)> 1722964449 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
+9103d7d0e3104e99edb3d9a188d231ae0ce3947f 9103d7d0e3104e99edb3d9a188d231ae0ce3947f root <root@fb3a0a4de249.(none)> 1722964449 +0000	checkout: moving from master to master
+9103d7d0e3104e99edb3d9a188d231ae0ce3947f 8c7312bf4266bdfeff959667faba7f8ef1e58f27 root <root@fb3a0a4de249.(none)> 1722964449 +0000	merge origin/development: Fast-forward

data/.git/logs/refs/heads/master

@@ -1,2 +1,2 @@
-0000000000000000000000000000000000000000 3a2a67e03f5b2f1bbcc8d2fa9dffcba764d76196 root <root@45cacd354dc7.(none)> 1721234743 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
-3a2a67e03f5b2f1bbcc8d2fa9dffcba764d76196 be8c2d87c98f8febe52ace473a9d3382d59d8ad2 root <root@45cacd354dc7.(none)> 1721234743 +0000	merge origin/development: Fast-forward
+0000000000000000000000000000000000000000 9103d7d0e3104e99edb3d9a188d231ae0ce3947f root <root@fb3a0a4de249.(none)> 1722964449 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
+9103d7d0e3104e99edb3d9a188d231ae0ce3947f 8c7312bf4266bdfeff959667faba7f8ef1e58f27 root <root@fb3a0a4de249.(none)> 1722964449 +0000	merge origin/development: Fast-forward

data/.git/logs/refs/remotes/origin/HEAD

@@ -1 +1 @@
-0000000000000000000000000000000000000000 3a2a67e03f5b2f1bbcc8d2fa9dffcba764d76196 root <root@45cacd354dc7.(none)> 1721234743 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
+0000000000000000000000000000000000000000 9103d7d0e3104e99edb3d9a188d231ae0ce3947f root <root@fb3a0a4de249.(none)> 1722964449 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git

data/.git/packed-refs

@@ -1,6 +1,6 @@
 # pack-refs with: peeled fully-peeled sorted 
-be8c2d87c98f8febe52ace473a9d3382d59d8ad2 refs/remotes/origin/development
-3a2a67e03f5b2f1bbcc8d2fa9dffcba764d76196 refs/remotes/origin/master
+8c7312bf4266bdfeff959667faba7f8ef1e58f27 refs/remotes/origin/development
+9103d7d0e3104e99edb3d9a188d231ae0ce3947f refs/remotes/origin/master
 2e4fe8087177ddea9b3991ca499f758384839c89 refs/tags/untagged-84fd83a4484c785cce63
 04f604866214fab4d5663b5171a3e596331577bd refs/tags/v0.9.4
 6f9a7b75b345c65fb554884907b7060680c807b7 refs/tags/v0.9.5
@@ -34,6 +34,8 @@ f05d3be5bc992d5a37ba13bc4ce092056769d9c8 refs/tags/v1.0.4
 d035aa3acb4c3a0935121bc00bfbb0a9e999d410 refs/tags/v1.0.7
 5b01475679f3312831a0fa1009e7cf90889effa8 refs/tags/v1.0.8
 3a2a67e03f5b2f1bbcc8d2fa9dffcba764d76196 refs/tags/v11.0.0
+be8c2d87c98f8febe52ace473a9d3382d59d8ad2 refs/tags/v11.1.0
+9103d7d0e3104e99edb3d9a188d231ae0ce3947f refs/tags/v11.3.0
 e0b1ec0134c7015ccb8c14464cc713c20034159e refs/tags/v2.0.0
 62a146d9d56852b2ad14ec5d2796cad158d66e1c refs/tags/v2.1.0
 9de04e628082f4ad0eb9511311479a089d302008 refs/tags/v2.2.0

data/.git/refs/heads/master

@@ -1 +1 @@
-be8c2d87c98f8febe52ace473a9d3382d59d8ad2
+8c7312bf4266bdfeff959667faba7f8ef1e58f27

data/lib/constants.rb

@@ -342,6 +342,7 @@ module SDM
     ORG_AUDIT_WORKFLOWS = "audit:workflows"
     ORG_AUDIT_APPROVAL_FLOWS = "audit:approvalflows"
     ORG_AUDIT_ACCESS_REQUESTS = "audit:accessrequests"
+    ORG_AUDIT_POLICIES = "audit:policies"
     WORKFLOW_LIST = "workflow:list"
     WORKFLOW_EDIT = "workflow:edit"
     ACCESS_REQUEST_EDIT = "accessrequest:edit"
@@ -453,5 +454,6 @@ module SDM
     SENTINEL_ONE = "sentinelone"
     CROWD_STRIKE = "crowdstrike"
     MICROSOFT_DEFENDER = "microsoftdefender"
+    DUO = "duo"
   end
 end

data/lib/grpc/drivers_pb.rb

@@ -120,6 +120,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :egress_filter, :string, 32773
       optional :bind_interface, :string, 32774
       optional :subdomain, :string, 32775
+      optional :allow_resource_role_bypass, :bool, 19
       optional :certificate_authority, :string, 3
       optional :client_certificate, :string, 5
       optional :client_key, :string, 7
@@ -157,6 +158,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :egress_filter, :string, 32773
       optional :bind_interface, :string, 32774
       optional :subdomain, :string, 32775
+      optional :allow_resource_role_bypass, :bool, 13
       optional :discovery_enabled, :bool, 11
       optional :discovery_username, :string, 12
       optional :healthcheck_namespace, :string, 4
@@ -262,6 +264,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :bind_interface, :string, 32774
       optional :subdomain, :string, 32775
       optional :access_key, :string, 2
+      optional :allow_resource_role_bypass, :bool, 18
       optional :certificate_authority, :string, 4
       optional :cluster_name, :string, 7
       optional :discovery_enabled, :bool, 16
@@ -285,6 +288,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :egress_filter, :string, 32773
       optional :bind_interface, :string, 32774
       optional :subdomain, :string, 32775
+      optional :allow_resource_role_bypass, :bool, 18
       optional :certificate_authority, :string, 2
       optional :cluster_name, :string, 5
       optional :discovery_enabled, :bool, 16
@@ -754,6 +758,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :egress_filter, :string, 32773
       optional :bind_interface, :string, 32774
       optional :subdomain, :string, 32775
+      optional :allow_resource_role_bypass, :bool, 17
       optional :certificate_authority, :string, 2
       optional :discovery_enabled, :bool, 15
       optional :discovery_username, :string, 16
@@ -853,6 +858,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :egress_filter, :string, 32773
       optional :bind_interface, :string, 32774
       optional :subdomain, :string, 32775
+      optional :allow_resource_role_bypass, :bool, 19
       optional :certificate_authority, :string, 3
       optional :client_certificate, :string, 5
       optional :client_key, :string, 7
@@ -890,6 +896,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :egress_filter, :string, 32773
       optional :bind_interface, :string, 32774
       optional :subdomain, :string, 32775
+      optional :allow_resource_role_bypass, :bool, 13
       optional :discovery_enabled, :bool, 11
       optional :discovery_username, :string, 12
       optional :healthcheck_namespace, :string, 4

data/lib/grpc/options_pb.rb

@@ -30,6 +30,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       repeated :targets, :string, 1941401
       optional :disable_snapshot_vertical, :bool, 1941403
       optional :skip_cli_generation, :bool, 1941404
+      optional :json_gateway_register_with_constructor, :bool, 1941405
     end
     add_message "v1.MethodOptions" do
       optional :method, :string, 1941300

data/lib/grpc/plumbing.rb

@@ -53,6 +53,8 @@ require_relative "./peering_group_nodes_pb"
 require_relative "./peering_group_peers_pb"
 require_relative "./peering_group_resources_pb"
 require_relative "./peering_groups_pb"
+require_relative "./policies_pb"
+require_relative "./policies_history_pb"
 require_relative "./queries_pb"
 require_relative "./remote_identities_pb"
 require_relative "./remote_identities_history_pb"
@@ -174,6 +176,7 @@ module SDM
         return nil
       end
       porcelain = AKS.new()
+      porcelain.allow_resource_role_bypass = (plumbing.allow_resource_role_bypass)
       porcelain.bind_interface = (plumbing.bind_interface)
       porcelain.certificate_authority = (plumbing.certificate_authority)
       porcelain.client_certificate = (plumbing.client_certificate)
@@ -201,6 +204,7 @@ module SDM
         return nil
       end
       plumbing = V1::AKS.new()
+      plumbing.allow_resource_role_bypass = (porcelain.allow_resource_role_bypass)
       plumbing.bind_interface = (porcelain.bind_interface)
       plumbing.certificate_authority = (porcelain.certificate_authority)
       plumbing.client_certificate = (porcelain.client_certificate)
@@ -304,6 +308,7 @@ module SDM
         return nil
       end
       porcelain = AKSServiceAccount.new()
+      porcelain.allow_resource_role_bypass = (plumbing.allow_resource_role_bypass)
       porcelain.bind_interface = (plumbing.bind_interface)
       porcelain.discovery_enabled = (plumbing.discovery_enabled)
       porcelain.discovery_username = (plumbing.discovery_username)
@@ -329,6 +334,7 @@ module SDM
         return nil
       end
       plumbing = V1::AKSServiceAccount.new()
+      plumbing.allow_resource_role_bypass = (porcelain.allow_resource_role_bypass)
       plumbing.bind_interface = (porcelain.bind_interface)
       plumbing.discovery_enabled = (porcelain.discovery_enabled)
       plumbing.discovery_username = (porcelain.discovery_username)
@@ -2018,6 +2024,7 @@ module SDM
       end
       porcelain = AmazonEKS.new()
       porcelain.access_key = (plumbing.access_key)
+      porcelain.allow_resource_role_bypass = (plumbing.allow_resource_role_bypass)
       porcelain.bind_interface = (plumbing.bind_interface)
       porcelain.certificate_authority = (plumbing.certificate_authority)
       porcelain.cluster_name = (plumbing.cluster_name)
@@ -2048,6 +2055,7 @@ module SDM
       end
       plumbing = V1::AmazonEKS.new()
       plumbing.access_key = (porcelain.access_key)
+      plumbing.allow_resource_role_bypass = (porcelain.allow_resource_role_bypass)
       plumbing.bind_interface = (porcelain.bind_interface)
       plumbing.certificate_authority = (porcelain.certificate_authority)
       plumbing.cluster_name = (porcelain.cluster_name)
@@ -2093,6 +2101,7 @@ module SDM
         return nil
       end
       porcelain = AmazonEKSInstanceProfile.new()
+      porcelain.allow_resource_role_bypass = (plumbing.allow_resource_role_bypass)
       porcelain.bind_interface = (plumbing.bind_interface)
       porcelain.certificate_authority = (plumbing.certificate_authority)
       porcelain.cluster_name = (plumbing.cluster_name)
@@ -2121,6 +2130,7 @@ module SDM
         return nil
       end
       plumbing = V1::AmazonEKSInstanceProfile.new()
+      plumbing.allow_resource_role_bypass = (porcelain.allow_resource_role_bypass)
       plumbing.bind_interface = (porcelain.bind_interface)
       plumbing.certificate_authority = (porcelain.certificate_authority)
       plumbing.cluster_name = (porcelain.cluster_name)
@@ -5075,6 +5085,7 @@ module SDM
         return nil
       end
       porcelain = GoogleGKE.new()
+      porcelain.allow_resource_role_bypass = (plumbing.allow_resource_role_bypass)
       porcelain.bind_interface = (plumbing.bind_interface)
       porcelain.certificate_authority = (plumbing.certificate_authority)
       porcelain.discovery_enabled = (plumbing.discovery_enabled)
@@ -5100,6 +5111,7 @@ module SDM
         return nil
       end
       plumbing = V1::GoogleGKE.new()
+      plumbing.allow_resource_role_bypass = (porcelain.allow_resource_role_bypass)
       plumbing.bind_interface = (porcelain.bind_interface)
       plumbing.certificate_authority = (porcelain.certificate_authority)
       plumbing.discovery_enabled = (porcelain.discovery_enabled)
@@ -6009,6 +6021,7 @@ module SDM
         return nil
       end
       porcelain = Kubernetes.new()
+      porcelain.allow_resource_role_bypass = (plumbing.allow_resource_role_bypass)
       porcelain.bind_interface = (plumbing.bind_interface)
       porcelain.certificate_authority = (plumbing.certificate_authority)
       porcelain.client_certificate = (plumbing.client_certificate)
@@ -6036,6 +6049,7 @@ module SDM
         return nil
       end
       plumbing = V1::Kubernetes.new()
+      plumbing.allow_resource_role_bypass = (porcelain.allow_resource_role_bypass)
       plumbing.bind_interface = (porcelain.bind_interface)
       plumbing.certificate_authority = (porcelain.certificate_authority)
       plumbing.client_certificate = (porcelain.client_certificate)
@@ -6139,6 +6153,7 @@ module SDM
         return nil
       end
       porcelain = KubernetesServiceAccount.new()
+      porcelain.allow_resource_role_bypass = (plumbing.allow_resource_role_bypass)
       porcelain.bind_interface = (plumbing.bind_interface)
       porcelain.discovery_enabled = (plumbing.discovery_enabled)
       porcelain.discovery_username = (plumbing.discovery_username)
@@ -6164,6 +6179,7 @@ module SDM
         return nil
       end
       plumbing = V1::KubernetesServiceAccount.new()
+      plumbing.allow_resource_role_bypass = (porcelain.allow_resource_role_bypass)
       plumbing.bind_interface = (porcelain.bind_interface)
       plumbing.discovery_enabled = (porcelain.discovery_enabled)
       plumbing.discovery_username = (porcelain.discovery_username)
@@ -8197,6 +8213,264 @@ module SDM
       end
       items
     end
+    def self.convert_policy_to_porcelain(plumbing)
+      if plumbing == nil
+        return nil
+      end
+      porcelain = Policy.new()
+      porcelain.description = (plumbing.description)
+      porcelain.id = (plumbing.id)
+      porcelain.name = (plumbing.name)
+      porcelain.policy = (plumbing.policy)
+      porcelain
+    end
+
+    def self.convert_policy_to_plumbing(porcelain)
+      if porcelain == nil
+        return nil
+      end
+      plumbing = V1::Policy.new()
+      plumbing.description = (porcelain.description)
+      plumbing.id = (porcelain.id)
+      plumbing.name = (porcelain.name)
+      plumbing.policy = (porcelain.policy)
+      plumbing
+    end
+    def self.convert_repeated_policy_to_plumbing(porcelains)
+      items = Array.new
+      porcelains.each do |porcelain|
+        plumbing = convert_policy_to_plumbing(porcelain)
+        items.append(plumbing)
+      end
+      items
+    end
+
+    def self.convert_repeated_policy_to_porcelain(plumbings)
+      items = Array.new
+      plumbings.each do |plumbing|
+        porcelain = convert_policy_to_porcelain(plumbing)
+        items.append(porcelain)
+      end
+      items
+    end
+    def self.convert_policy_create_response_to_porcelain(plumbing)
+      if plumbing == nil
+        return nil
+      end
+      porcelain = PolicyCreateResponse.new()
+      porcelain.policy = convert_policy_to_porcelain(plumbing.policy)
+      porcelain.rate_limit = convert_rate_limit_metadata_to_porcelain(plumbing.rate_limit)
+      porcelain
+    end
+
+    def self.convert_policy_create_response_to_plumbing(porcelain)
+      if porcelain == nil
+        return nil
+      end
+      plumbing = V1::PolicyCreateResponse.new()
+      plumbing.policy = convert_policy_to_plumbing(porcelain.policy)
+      plumbing.rate_limit = convert_rate_limit_metadata_to_plumbing(porcelain.rate_limit)
+      plumbing
+    end
+    def self.convert_repeated_policy_create_response_to_plumbing(porcelains)
+      items = Array.new
+      porcelains.each do |porcelain|
+        plumbing = convert_policy_create_response_to_plumbing(porcelain)
+        items.append(plumbing)
+      end
+      items
+    end
+
+    def self.convert_repeated_policy_create_response_to_porcelain(plumbings)
+      items = Array.new
+      plumbings.each do |plumbing|
+        porcelain = convert_policy_create_response_to_porcelain(plumbing)
+        items.append(porcelain)
+      end
+      items
+    end
+    def self.convert_policy_delete_response_to_porcelain(plumbing)
+      if plumbing == nil
+        return nil
+      end
+      porcelain = PolicyDeleteResponse.new()
+      porcelain.rate_limit = convert_rate_limit_metadata_to_porcelain(plumbing.rate_limit)
+      porcelain
+    end
+
+    def self.convert_policy_delete_response_to_plumbing(porcelain)
+      if porcelain == nil
+        return nil
+      end
+      plumbing = V1::PolicyDeleteResponse.new()
+      plumbing.rate_limit = convert_rate_limit_metadata_to_plumbing(porcelain.rate_limit)
+      plumbing
+    end
+    def self.convert_repeated_policy_delete_response_to_plumbing(porcelains)
+      items = Array.new
+      porcelains.each do |porcelain|
+        plumbing = convert_policy_delete_response_to_plumbing(porcelain)
+        items.append(plumbing)
+      end
+      items
+    end
+
+    def self.convert_repeated_policy_delete_response_to_porcelain(plumbings)
+      items = Array.new
+      plumbings.each do |plumbing|
+        porcelain = convert_policy_delete_response_to_porcelain(plumbing)
+        items.append(porcelain)
+      end
+      items
+    end
+    def self.convert_policy_get_response_to_porcelain(plumbing)
+      if plumbing == nil
+        return nil
+      end
+      porcelain = PolicyGetResponse.new()
+      porcelain.meta = convert_get_response_metadata_to_porcelain(plumbing.meta)
+      porcelain.policy = convert_policy_to_porcelain(plumbing.policy)
+      porcelain.rate_limit = convert_rate_limit_metadata_to_porcelain(plumbing.rate_limit)
+      porcelain
+    end
+
+    def self.convert_policy_get_response_to_plumbing(porcelain)
+      if porcelain == nil
+        return nil
+      end
+      plumbing = V1::PolicyGetResponse.new()
+      plumbing.meta = convert_get_response_metadata_to_plumbing(porcelain.meta)
+      plumbing.policy = convert_policy_to_plumbing(porcelain.policy)
+      plumbing.rate_limit = convert_rate_limit_metadata_to_plumbing(porcelain.rate_limit)
+      plumbing
+    end
+    def self.convert_repeated_policy_get_response_to_plumbing(porcelains)
+      items = Array.new
+      porcelains.each do |porcelain|
+        plumbing = convert_policy_get_response_to_plumbing(porcelain)
+        items.append(plumbing)
+      end
+      items
+    end
+
+    def self.convert_repeated_policy_get_response_to_porcelain(plumbings)
+      items = Array.new
+      plumbings.each do |plumbing|
+        porcelain = convert_policy_get_response_to_porcelain(plumbing)
+        items.append(porcelain)
+      end
+      items
+    end
+    def self.convert_policy_history_to_porcelain(plumbing)
+      if plumbing == nil
+        return nil
+      end
+      porcelain = PolicyHistory.new()
+      porcelain.activity_id = (plumbing.activity_id)
+      porcelain.deleted_at = convert_timestamp_to_porcelain(plumbing.deleted_at)
+      porcelain.policy = convert_policy_to_porcelain(plumbing.policy)
+      porcelain.timestamp = convert_timestamp_to_porcelain(plumbing.timestamp)
+      porcelain
+    end
+
+    def self.convert_policy_history_to_plumbing(porcelain)
+      if porcelain == nil
+        return nil
+      end
+      plumbing = V1::PolicyHistory.new()
+      plumbing.activity_id = (porcelain.activity_id)
+      plumbing.deleted_at = convert_timestamp_to_plumbing(porcelain.deleted_at)
+      plumbing.policy = convert_policy_to_plumbing(porcelain.policy)
+      plumbing.timestamp = convert_timestamp_to_plumbing(porcelain.timestamp)
+      plumbing
+    end
+    def self.convert_repeated_policy_history_to_plumbing(porcelains)
+      items = Array.new
+      porcelains.each do |porcelain|
+        plumbing = convert_policy_history_to_plumbing(porcelain)
+        items.append(plumbing)
+      end
+      items
+    end
+
+    def self.convert_repeated_policy_history_to_porcelain(plumbings)
+      items = Array.new
+      plumbings.each do |plumbing|
+        porcelain = convert_policy_history_to_porcelain(plumbing)
+        items.append(porcelain)
+      end
+      items
+    end
+    def self.convert_policy_list_response_to_porcelain(plumbing)
+      if plumbing == nil
+        return nil
+      end
+      porcelain = PolicyListResponse.new()
+      porcelain.rate_limit = convert_rate_limit_metadata_to_porcelain(plumbing.rate_limit)
+      porcelain
+    end
+
+    def self.convert_policy_list_response_to_plumbing(porcelain)
+      if porcelain == nil
+        return nil
+      end
+      plumbing = V1::PolicyListResponse.new()
+      plumbing.rate_limit = convert_rate_limit_metadata_to_plumbing(porcelain.rate_limit)
+      plumbing
+    end
+    def self.convert_repeated_policy_list_response_to_plumbing(porcelains)
+      items = Array.new
+      porcelains.each do |porcelain|
+        plumbing = convert_policy_list_response_to_plumbing(porcelain)
+        items.append(plumbing)
+      end
+      items
+    end
+
+    def self.convert_repeated_policy_list_response_to_porcelain(plumbings)
+      items = Array.new
+      plumbings.each do |plumbing|
+        porcelain = convert_policy_list_response_to_porcelain(plumbing)
+        items.append(porcelain)
+      end
+      items
+    end
+    def self.convert_policy_update_response_to_porcelain(plumbing)
+      if plumbing == nil
+        return nil
+      end
+      porcelain = PolicyUpdateResponse.new()
+      porcelain.policy = convert_policy_to_porcelain(plumbing.policy)
+      porcelain.rate_limit = convert_rate_limit_metadata_to_porcelain(plumbing.rate_limit)
+      porcelain
+    end
+
+    def self.convert_policy_update_response_to_plumbing(porcelain)
+      if porcelain == nil
+        return nil
+      end
+      plumbing = V1::PolicyUpdateResponse.new()
+      plumbing.policy = convert_policy_to_plumbing(porcelain.policy)
+      plumbing.rate_limit = convert_rate_limit_metadata_to_plumbing(porcelain.rate_limit)
+      plumbing
+    end
+    def self.convert_repeated_policy_update_response_to_plumbing(porcelains)
+      items = Array.new
+      porcelains.each do |porcelain|
+        plumbing = convert_policy_update_response_to_plumbing(porcelain)
+        items.append(plumbing)
+      end
+      items
+    end
+
+    def self.convert_repeated_policy_update_response_to_porcelain(plumbings)
+      items = Array.new
+      plumbings.each do |plumbing|
+        porcelain = convert_policy_update_response_to_porcelain(plumbing)
+        items.append(porcelain)
+      end
+      items
+    end
     def self.convert_postgres_to_porcelain(plumbing)
       if plumbing == nil
         return nil

data/lib/grpc/policies_history_pb.rb

@@ -0,0 +1,49 @@
+# Copyright 2020 StrongDM Inc
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# Generated by the protocol buffer compiler.  DO NOT EDIT!
+# source: policies_history.proto
+
+require "google/protobuf"
+
+require "google/protobuf/timestamp_pb"
+require "policies_pb"
+require "options_pb"
+require "spec_pb"
+
+Google::Protobuf::DescriptorPool.generated_pool.build do
+  add_file("policies_history.proto", :syntax => :proto3) do
+    add_message "v1.PoliciesHistoryListRequest" do
+      optional :meta, :message, 1, "v1.ListRequestMetadata"
+      optional :filter, :string, 2
+    end
+    add_message "v1.PoliciesHistoryListResponse" do
+      optional :meta, :message, 1, "v1.ListResponseMetadata"
+      repeated :history, :message, 2, "v1.PolicyHistory"
+      optional :rate_limit, :message, 3, "v1.RateLimitMetadata"
+    end
+    add_message "v1.PolicyHistory" do
+      optional :activity_id, :string, 1
+      optional :timestamp, :message, 2, "google.protobuf.Timestamp"
+      optional :policy, :message, 3, "v1.Policy"
+      optional :deleted_at, :message, 4, "google.protobuf.Timestamp"
+    end
+  end
+end
+
+module V1
+  PoliciesHistoryListRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.PoliciesHistoryListRequest").msgclass
+  PoliciesHistoryListResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.PoliciesHistoryListResponse").msgclass
+  PolicyHistory = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.PolicyHistory").msgclass
+end

data/lib/grpc/policies_history_services_pb.rb

@@ -0,0 +1,37 @@
+# Copyright 2020 StrongDM Inc
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# Generated by the protocol buffer compiler.  DO NOT EDIT!
+# Source: policies_history.proto for package 'v1'
+
+require "grpc"
+require "policies_history_pb"
+
+module V1
+  module PoliciesHistory
+    # PoliciesHistory records all changes to the state of a Policy.
+    class Service
+      include ::GRPC::GenericService
+
+      self.marshal_class_method = :encode
+      self.unmarshal_class_method = :decode
+      self.service_name = "v1.PoliciesHistory"
+
+      # List gets a list of PolicyHistory records matching a given set of criteria.
+      rpc :List, ::V1::PoliciesHistoryListRequest, ::V1::PoliciesHistoryListResponse
+    end
+
+    Stub = Service.rpc_stub_class
+  end
+end