strongdm 16.1.0 → 16.4.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e738e3c023989b02e2d13c2b52c533d6bb1c5de92b65872a7381b906e68e5240
-  data.tar.gz: d9867021864ae5d773c29d302cc08f245067040d841c2f448b3b44ea3f2939e7
+  metadata.gz: b94e42c05f2c8191b449ada5d8971f6bec09cb029db26f46238cc38c4b62e692
+  data.tar.gz: 77beb295aad63d031b4fa9654757652f3883cf3f7ebb92a981b385d81a68613c
 SHA512:
-  metadata.gz: 4726a2832cd71533463fa29015e12cbde163d49abb727e11875765c28cbaf534bdd1c03be04155e0b3ce4719ae263e030e097326ab7d518e41505cf079b780f1
-  data.tar.gz: cb6125d2e6002cd489f20d74a8cfe8a59c2fe279bcc963b7b66aa7c5a214b13332655c05680b204cd1655c5f85900052de96b2726468add540ae2174d6e01db8
+  metadata.gz: f27b58284466f63b7c50575bb8fd147c3d6b7d14f31184d5de47e7f96d9dd2a90f402a1b9917e74b9a5a25c170edd368e831b3fa5566be601c819121f5d52afe
+  data.tar.gz: 515881affe0ded8ad577602430acc14ae3e166ea3b53c49a65b76af3af4fb1938db02ec6cb83b683f5cbdddc41c6b2d66ac32a7cc440d2db866831c94b1ecb5e

data/.git/ORIG_HEAD

@@ -1 +1 @@
-68c6bf260ea0ac7c4c151e0de221aac18fabcd3c
+3f2a99e1a4296cf5b4937d57b901051b9381c209

data/.git/logs/HEAD

@@ -1,3 +1,3 @@
-0000000000000000000000000000000000000000 68c6bf260ea0ac7c4c151e0de221aac18fabcd3c root <root@8a09e98cc7a0.(none)> 1768912319 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
-68c6bf260ea0ac7c4c151e0de221aac18fabcd3c 68c6bf260ea0ac7c4c151e0de221aac18fabcd3c root <root@8a09e98cc7a0.(none)> 1768912319 +0000	checkout: moving from master to master
-68c6bf260ea0ac7c4c151e0de221aac18fabcd3c 38de225069b8053585aeb22f569abdd9d1ffe5dd root <root@8a09e98cc7a0.(none)> 1768912319 +0000	merge origin/development: Fast-forward
+0000000000000000000000000000000000000000 3f2a99e1a4296cf5b4937d57b901051b9381c209 root <root@0dbea8d162d4.(none)> 1770107994 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
+3f2a99e1a4296cf5b4937d57b901051b9381c209 3f2a99e1a4296cf5b4937d57b901051b9381c209 root <root@0dbea8d162d4.(none)> 1770107994 +0000	checkout: moving from master to master
+3f2a99e1a4296cf5b4937d57b901051b9381c209 eb2c5388eb894fce71666148224e02d977c87baa root <root@0dbea8d162d4.(none)> 1770107994 +0000	merge origin/development: Fast-forward

data/.git/logs/refs/heads/master

@@ -1,2 +1,2 @@
-0000000000000000000000000000000000000000 68c6bf260ea0ac7c4c151e0de221aac18fabcd3c root <root@8a09e98cc7a0.(none)> 1768912319 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
-68c6bf260ea0ac7c4c151e0de221aac18fabcd3c 38de225069b8053585aeb22f569abdd9d1ffe5dd root <root@8a09e98cc7a0.(none)> 1768912319 +0000	merge origin/development: Fast-forward
+0000000000000000000000000000000000000000 3f2a99e1a4296cf5b4937d57b901051b9381c209 root <root@0dbea8d162d4.(none)> 1770107994 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
+3f2a99e1a4296cf5b4937d57b901051b9381c209 eb2c5388eb894fce71666148224e02d977c87baa root <root@0dbea8d162d4.(none)> 1770107994 +0000	merge origin/development: Fast-forward

data/.git/logs/refs/remotes/origin/HEAD

@@ -1 +1 @@
-0000000000000000000000000000000000000000 68c6bf260ea0ac7c4c151e0de221aac18fabcd3c root <root@8a09e98cc7a0.(none)> 1768912319 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
+0000000000000000000000000000000000000000 3f2a99e1a4296cf5b4937d57b901051b9381c209 root <root@0dbea8d162d4.(none)> 1770107994 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git

data/.git/packed-refs

@@ -1,6 +1,6 @@
 # pack-refs with: peeled fully-peeled sorted 
-38de225069b8053585aeb22f569abdd9d1ffe5dd refs/remotes/origin/development
-68c6bf260ea0ac7c4c151e0de221aac18fabcd3c refs/remotes/origin/master
+eb2c5388eb894fce71666148224e02d977c87baa refs/remotes/origin/development
+3f2a99e1a4296cf5b4937d57b901051b9381c209 refs/remotes/origin/master
 2e4fe8087177ddea9b3991ca499f758384839c89 refs/tags/untagged-84fd83a4484c785cce63
 04f604866214fab4d5663b5171a3e596331577bd refs/tags/v0.9.4
 6f9a7b75b345c65fb554884907b7060680c807b7 refs/tags/v0.9.5
@@ -139,6 +139,8 @@ c3b0eeef356ddf0cf408d1305fd766791121803f refs/tags/v15.46.0
 160edd2c226d40be717f67133e89665771a76b2c refs/tags/v15.8.0
 7f7219aef993abd973ae52458c083efd445d67e7 refs/tags/v15.9.0
 68c6bf260ea0ac7c4c151e0de221aac18fabcd3c refs/tags/v16.0.0
+38de225069b8053585aeb22f569abdd9d1ffe5dd refs/tags/v16.1.0
+3f2a99e1a4296cf5b4937d57b901051b9381c209 refs/tags/v16.3.0
 e0b1ec0134c7015ccb8c14464cc713c20034159e refs/tags/v2.0.0
 62a146d9d56852b2ad14ec5d2796cad158d66e1c refs/tags/v2.1.0
 9de04e628082f4ad0eb9511311479a089d302008 refs/tags/v2.2.0

data/.git/refs/heads/master

@@ -1 +1 @@
-38de225069b8053585aeb22f569abdd9d1ffe5dd
+eb2c5388eb894fce71666148224e02d977c87baa

data/lib/grpc/accounts_pb.rb

@@ -97,6 +97,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :manager_id, :string, 14
       optional :resolved_manager_id, :string, 15
       optional :created_at, :message, 16, "google.protobuf.Timestamp"
+      optional :employee_number, :string, 17
     end
     add_message "v1.Service" do
       optional :id, :string, 1

data/lib/grpc/custom_headers_pb.rb

@@ -0,0 +1,38 @@
+# Copyright 2020 StrongDM Inc
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# Generated by the protocol buffer compiler.  DO NOT EDIT!
+# source: custom_headers.proto
+
+require "google/protobuf"
+
+require "options_pb"
+
+Google::Protobuf::DescriptorPool.generated_pool.build do
+  add_file("custom_headers.proto", :syntax => :proto3) do
+    add_message "v1.CustomHeaders" do
+      repeated :custom_headers, :message, 1, "v1.CustomHeader"
+    end
+    add_message "v1.CustomHeader" do
+      optional :name, :string, 1
+      optional :value, :string, 2
+      optional :secret, :bool, 3
+    end
+  end
+end
+
+module V1
+  CustomHeaders = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.CustomHeaders").msgclass
+  CustomHeader = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.CustomHeader").msgclass
+end

data/lib/grpc/drivers_pb.rb

@@ -19,6 +19,7 @@ require "google/protobuf"
 
 require "options_pb"
 require "tags_pb"
+require "custom_headers_pb"
 
 Google::Protobuf::DescriptorPool.generated_pool.build do
   add_file("drivers.proto", :syntax => :proto3) do
@@ -94,6 +95,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
         optional :kubernetes_service_account_user_impersonation, :message, 808, "v1.KubernetesServiceAccountUserImpersonation"
         optional :kubernetes_user_impersonation, :message, 812, "v1.KubernetesUserImpersonation"
         optional :mcp, :message, 4700, "v1.MCP"
+        optional :mcpdcr, :message, 4701, "v1.MCPDCR"
         optional :mtls_mysql, :message, 1106, "v1.MTLSMysql"
         optional :mtls_postgres, :message, 1306, "v1.MTLSPostgres"
         optional :maria, :message, 1103, "v1.Maria"
@@ -1220,6 +1222,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :bind_interface, :string, 32774
       optional :proxy_cluster_id, :string, 32776
       optional :auth_header, :string, 3
+      optional :custom_headers, :message, 13, "v1.CustomHeaders"
       optional :default_path, :string, 5
       optional :headers_blacklist, :string, 4
       optional :healthcheck_path, :string, 2
@@ -1237,6 +1240,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :egress_filter, :string, 32773
       optional :bind_interface, :string, 32774
       optional :proxy_cluster_id, :string, 32776
+      optional :custom_headers, :message, 13, "v1.CustomHeaders"
       optional :default_path, :string, 6
       optional :headers_blacklist, :string, 5
       optional :healthcheck_path, :string, 2
@@ -1256,6 +1260,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :egress_filter, :string, 32773
       optional :bind_interface, :string, 32774
       optional :proxy_cluster_id, :string, 32776
+      optional :custom_headers, :message, 13, "v1.CustomHeaders"
       optional :default_path, :string, 4
       optional :headers_blacklist, :string, 3
       optional :healthcheck_path, :string, 2
@@ -1390,13 +1395,27 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :subdomain, :string, 32775
       optional :hostname, :string, 1
       optional :oauth_auth_endpoint, :string, 8
-      optional :oauth_register_endpoint, :string, 10
       optional :oauth_token_endpoint, :string, 9
       optional :password, :string, 2
-      optional :port, :int32, 5
       optional :port_override, :int32, 4
       optional :username, :string, 6
     end
+    add_message "v1.MCPDCR" do
+      optional :id, :string, 32768
+      optional :name, :string, 32769
+      optional :healthy, :bool, 32770
+      optional :tags, :message, 32771, "v1.Tags"
+      optional :secret_store_id, :string, 32772
+      optional :egress_filter, :string, 32773
+      optional :bind_interface, :string, 32774
+      optional :proxy_cluster_id, :string, 32776
+      optional :subdomain, :string, 32775
+      optional :hostname, :string, 1
+      optional :oauth_auth_endpoint, :string, 8
+      optional :oauth_register_endpoint, :string, 10
+      optional :oauth_token_endpoint, :string, 9
+      optional :port_override, :int32, 4
+    end
     add_message "v1.MTLSMysql" do
       optional :id, :string, 32768
       optional :name, :string, 32769
@@ -1647,7 +1666,9 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :bind_interface, :string, 32774
       optional :proxy_cluster_id, :string, 32776
       optional :subdomain, :string, 32775
+      optional :discovery_enabled, :bool, 6
       optional :domain, :string, 1
+      optional :group_names, :string, 7
       optional :identity_set_id, :string, 3
       optional :privilege_levels, :string, 2
     end
@@ -1734,6 +1755,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :proxy_cluster_id, :string, 32776
       optional :subdomain, :string, 32775
       optional :downgrade_nla_connections, :bool, 6
+      optional :enable_ephemeral_accounts, :bool, 13
       optional :hostname, :string, 1
       optional :identity_alias_healthcheck_username, :string, 12
       optional :identity_set_id, :string, 11
@@ -2258,6 +2280,7 @@ module V1
   KubernetesServiceAccountUserImpersonation = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.KubernetesServiceAccountUserImpersonation").msgclass
   KubernetesUserImpersonation = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.KubernetesUserImpersonation").msgclass
   MCP = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.MCP").msgclass
+  MCPDCR = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.MCPDCR").msgclass
   MTLSMysql = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.MTLSMysql").msgclass
   MTLSPostgres = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.MTLSPostgres").msgclass
   Maria = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.Maria").msgclass

data/lib/grpc/plumbing.rb

@@ -24,6 +24,7 @@ require_relative "./tags_pb"
 require_relative "./access_requests_pb"
 require_relative "./access_request_events_history_pb"
 require_relative "./access_requests_history_pb"
+require_relative "./custom_headers_pb"
 require_relative "./drivers_pb"
 require_relative "./account_attachments_pb"
 require_relative "./account_attachments_history_pb"
@@ -6062,6 +6063,78 @@ module SDM
       end
       items
     end
+    def self.convert_custom_header_to_porcelain(plumbing)
+      if plumbing == nil
+        return nil
+      end
+      porcelain = CustomHeader.new()
+      porcelain.name = (plumbing.name)
+      porcelain.secret = (plumbing.secret)
+      porcelain.value = (plumbing.value)
+      porcelain
+    end
+
+    def self.convert_custom_header_to_plumbing(porcelain)
+      if porcelain == nil
+        return nil
+      end
+      plumbing = V1::CustomHeader.new()
+      plumbing.name = (porcelain.name)
+      plumbing.secret = (porcelain.secret)
+      plumbing.value = (porcelain.value)
+      plumbing
+    end
+    def self.convert_repeated_custom_header_to_plumbing(porcelains)
+      items = Array.new
+      porcelains.each do |porcelain|
+        plumbing = convert_custom_header_to_plumbing(porcelain)
+        items.append(plumbing)
+      end
+      items
+    end
+
+    def self.convert_repeated_custom_header_to_porcelain(plumbings)
+      items = Array.new
+      plumbings.each do |plumbing|
+        porcelain = convert_custom_header_to_porcelain(plumbing)
+        items.append(porcelain)
+      end
+      items
+    end
+    def self.convert_custom_headers_to_porcelain(plumbing)
+      if plumbing == nil
+        return nil
+      end
+      porcelain = CustomHeaders.new()
+      porcelain.custom_headers = convert_repeated_custom_header_to_porcelain(plumbing.custom_headers)
+      porcelain
+    end
+
+    def self.convert_custom_headers_to_plumbing(porcelain)
+      if porcelain == nil
+        return nil
+      end
+      plumbing = V1::CustomHeaders.new()
+      plumbing.custom_headers += convert_repeated_custom_header_to_plumbing(porcelain.custom_headers)
+      plumbing
+    end
+    def self.convert_repeated_custom_headers_to_plumbing(porcelains)
+      items = Array.new
+      porcelains.each do |porcelain|
+        plumbing = convert_custom_headers_to_plumbing(porcelain)
+        items.append(plumbing)
+      end
+      items
+    end
+
+    def self.convert_repeated_custom_headers_to_porcelain(plumbings)
+      items = Array.new
+      plumbings.each do |plumbing|
+        porcelain = convert_custom_headers_to_porcelain(plumbing)
+        items.append(porcelain)
+      end
+      items
+    end
     def self.convert_cyberark_conjur_store_to_porcelain(plumbing)
       if plumbing == nil
         return nil
@@ -8747,6 +8820,7 @@ module SDM
       porcelain = HTTPAuth.new()
       porcelain.auth_header = (plumbing.auth_header)
       porcelain.bind_interface = (plumbing.bind_interface)
+      porcelain.custom_headers = convert_custom_headers_to_porcelain(plumbing.custom_headers)
       porcelain.default_path = (plumbing.default_path)
       porcelain.egress_filter = (plumbing.egress_filter)
       porcelain.headers_blacklist = (plumbing.headers_blacklist)
@@ -8771,6 +8845,7 @@ module SDM
       plumbing = V1::HTTPAuth.new()
       plumbing.auth_header = (porcelain.auth_header)
       plumbing.bind_interface = (porcelain.bind_interface)
+      plumbing.custom_headers = convert_custom_headers_to_plumbing(porcelain.custom_headers)
       plumbing.default_path = (porcelain.default_path)
       plumbing.egress_filter = (porcelain.egress_filter)
       plumbing.headers_blacklist = (porcelain.headers_blacklist)
@@ -8810,6 +8885,7 @@ module SDM
       end
       porcelain = HTTPBasicAuth.new()
       porcelain.bind_interface = (plumbing.bind_interface)
+      porcelain.custom_headers = convert_custom_headers_to_porcelain(plumbing.custom_headers)
       porcelain.default_path = (plumbing.default_path)
       porcelain.egress_filter = (plumbing.egress_filter)
       porcelain.headers_blacklist = (plumbing.headers_blacklist)
@@ -8835,6 +8911,7 @@ module SDM
       end
       plumbing = V1::HTTPBasicAuth.new()
       plumbing.bind_interface = (porcelain.bind_interface)
+      plumbing.custom_headers = convert_custom_headers_to_plumbing(porcelain.custom_headers)
       plumbing.default_path = (porcelain.default_path)
       plumbing.egress_filter = (porcelain.egress_filter)
       plumbing.headers_blacklist = (porcelain.headers_blacklist)
@@ -8876,6 +8953,7 @@ module SDM
       end
       porcelain = HTTPNoAuth.new()
       porcelain.bind_interface = (plumbing.bind_interface)
+      porcelain.custom_headers = convert_custom_headers_to_porcelain(plumbing.custom_headers)
       porcelain.default_path = (plumbing.default_path)
       porcelain.egress_filter = (plumbing.egress_filter)
       porcelain.headers_blacklist = (plumbing.headers_blacklist)
@@ -8899,6 +8977,7 @@ module SDM
       end
       plumbing = V1::HTTPNoAuth.new()
       plumbing.bind_interface = (porcelain.bind_interface)
+      plumbing.custom_headers = convert_custom_headers_to_plumbing(porcelain.custom_headers)
       plumbing.default_path = (porcelain.default_path)
       plumbing.egress_filter = (porcelain.egress_filter)
       plumbing.headers_blacklist = (porcelain.headers_blacklist)
@@ -10224,10 +10303,8 @@ module SDM
       porcelain.id = (plumbing.id)
       porcelain.name = (plumbing.name)
       porcelain.oauth_auth_endpoint = (plumbing.oauth_auth_endpoint)
-      porcelain.oauth_register_endpoint = (plumbing.oauth_register_endpoint)
       porcelain.oauth_token_endpoint = (plumbing.oauth_token_endpoint)
       porcelain.password = (plumbing.password)
-      porcelain.port = (plumbing.port)
       porcelain.port_override = (plumbing.port_override)
       porcelain.proxy_cluster_id = (plumbing.proxy_cluster_id)
       porcelain.secret_store_id = (plumbing.secret_store_id)
@@ -10249,10 +10326,8 @@ module SDM
       plumbing.id = (porcelain.id)
       plumbing.name = (porcelain.name)
       plumbing.oauth_auth_endpoint = (porcelain.oauth_auth_endpoint)
-      plumbing.oauth_register_endpoint = (porcelain.oauth_register_endpoint)
       plumbing.oauth_token_endpoint = (porcelain.oauth_token_endpoint)
       plumbing.password = (porcelain.password)
-      plumbing.port = (porcelain.port)
       plumbing.port_override = (porcelain.port_override)
       plumbing.proxy_cluster_id = (porcelain.proxy_cluster_id)
       plumbing.secret_store_id = (porcelain.secret_store_id)
@@ -10278,6 +10353,66 @@ module SDM
       end
       items
     end
+    def self.convert_mcpdcr_to_porcelain(plumbing)
+      if plumbing == nil
+        return nil
+      end
+      porcelain = MCPDCR.new()
+      porcelain.bind_interface = (plumbing.bind_interface)
+      porcelain.egress_filter = (plumbing.egress_filter)
+      porcelain.healthy = (plumbing.healthy)
+      porcelain.hostname = (plumbing.hostname)
+      porcelain.id = (plumbing.id)
+      porcelain.name = (plumbing.name)
+      porcelain.oauth_auth_endpoint = (plumbing.oauth_auth_endpoint)
+      porcelain.oauth_register_endpoint = (plumbing.oauth_register_endpoint)
+      porcelain.oauth_token_endpoint = (plumbing.oauth_token_endpoint)
+      porcelain.port_override = (plumbing.port_override)
+      porcelain.proxy_cluster_id = (plumbing.proxy_cluster_id)
+      porcelain.secret_store_id = (plumbing.secret_store_id)
+      porcelain.subdomain = (plumbing.subdomain)
+      porcelain.tags = convert_tags_to_porcelain(plumbing.tags)
+      porcelain
+    end
+
+    def self.convert_mcpdcr_to_plumbing(porcelain)
+      if porcelain == nil
+        return nil
+      end
+      plumbing = V1::MCPDCR.new()
+      plumbing.bind_interface = (porcelain.bind_interface)
+      plumbing.egress_filter = (porcelain.egress_filter)
+      plumbing.healthy = (porcelain.healthy)
+      plumbing.hostname = (porcelain.hostname)
+      plumbing.id = (porcelain.id)
+      plumbing.name = (porcelain.name)
+      plumbing.oauth_auth_endpoint = (porcelain.oauth_auth_endpoint)
+      plumbing.oauth_register_endpoint = (porcelain.oauth_register_endpoint)
+      plumbing.oauth_token_endpoint = (porcelain.oauth_token_endpoint)
+      plumbing.port_override = (porcelain.port_override)
+      plumbing.proxy_cluster_id = (porcelain.proxy_cluster_id)
+      plumbing.secret_store_id = (porcelain.secret_store_id)
+      plumbing.subdomain = (porcelain.subdomain)
+      plumbing.tags = convert_tags_to_plumbing(porcelain.tags)
+      plumbing
+    end
+    def self.convert_repeated_mcpdcr_to_plumbing(porcelains)
+      items = Array.new
+      porcelains.each do |porcelain|
+        plumbing = convert_mcpdcr_to_plumbing(porcelain)
+        items.append(plumbing)
+      end
+      items
+    end
+
+    def self.convert_repeated_mcpdcr_to_porcelain(plumbings)
+      items = Array.new
+      plumbings.each do |plumbing|
+        porcelain = convert_mcpdcr_to_porcelain(plumbing)
+        items.append(porcelain)
+      end
+      items
+    end
     def self.convert_mtls_mysql_to_porcelain(plumbing)
       if plumbing == nil
         return nil
@@ -12357,8 +12492,10 @@ module SDM
       end
       porcelain = OktaGroups.new()
       porcelain.bind_interface = (plumbing.bind_interface)
+      porcelain.discovery_enabled = (plumbing.discovery_enabled)
       porcelain.domain = (plumbing.domain)
       porcelain.egress_filter = (plumbing.egress_filter)
+      porcelain.group_names = (plumbing.group_names)
       porcelain.healthy = (plumbing.healthy)
       porcelain.id = (plumbing.id)
       porcelain.identity_set_id = (plumbing.identity_set_id)
@@ -12377,8 +12514,10 @@ module SDM
       end
       plumbing = V1::OktaGroups.new()
       plumbing.bind_interface = (porcelain.bind_interface)
+      plumbing.discovery_enabled = (porcelain.discovery_enabled)
       plumbing.domain = (porcelain.domain)
       plumbing.egress_filter = (porcelain.egress_filter)
+      plumbing.group_names = (porcelain.group_names)
       plumbing.healthy = (porcelain.healthy)
       plumbing.id = (porcelain.id)
       plumbing.identity_set_id = (porcelain.identity_set_id)
@@ -15479,6 +15618,9 @@ module SDM
       if porcelain.instance_of? MCP
         plumbing.mcp = convert_mcp_to_plumbing(porcelain)
       end
+      if porcelain.instance_of? MCPDCR
+        plumbing.mcpdcr = convert_mcpdcr_to_plumbing(porcelain)
+      end
       if porcelain.instance_of? Memcached
         plumbing.memcached = convert_memcached_to_plumbing(porcelain)
       end
@@ -15825,6 +15967,9 @@ module SDM
       if plumbing.mcp != nil
         return convert_mcp_to_porcelain(plumbing.mcp)
       end
+      if plumbing.mcpdcr != nil
+        return convert_mcpdcr_to_porcelain(plumbing.mcpdcr)
+      end
       if plumbing.memcached != nil
         return convert_memcached_to_porcelain(plumbing.memcached)
       end
@@ -18796,6 +18941,7 @@ module SDM
       porcelain.scim = (plumbing.SCIM)
       porcelain.created_at = convert_timestamp_to_porcelain(plumbing.created_at)
       porcelain.email = (plumbing.email)
+      porcelain.employee_number = (plumbing.employee_number)
       porcelain.external_id = (plumbing.external_id)
       porcelain.first_name = (plumbing.first_name)
       porcelain.id = (plumbing.id)
@@ -18818,6 +18964,7 @@ module SDM
       plumbing.SCIM = (porcelain.scim)
       plumbing.created_at = convert_timestamp_to_plumbing(porcelain.created_at)
       plumbing.email = (porcelain.email)
+      plumbing.employee_number = (porcelain.employee_number)
       plumbing.external_id = (porcelain.external_id)
       plumbing.first_name = (porcelain.first_name)
       plumbing.id = (porcelain.id)

data/lib/models/porcelain.rb

@@ -5727,6 +5727,54 @@ module SDM
     end
   end
 
+  # CustomHeader describes a single HTTP header
+  class CustomHeader
+    # The name of this header.
+    attr_accessor :name
+    # Headers containing sensitive values must be stored encrypted and redacted from logs.
+    attr_accessor :secret
+    # The value of this header.
+    attr_accessor :value
+
+    def initialize(
+      name: nil,
+      secret: nil,
+      value: nil
+    )
+      @name = name == nil ? "" : name
+      @secret = secret == nil ? false : secret
+      @value = value == nil ? "" : value
+    end
+
+    def to_json(options = {})
+      hash = {}
+      self.instance_variables.each do |var|
+        hash[var.id2name.delete_prefix("@")] = self.instance_variable_get var
+      end
+      hash.to_json
+    end
+  end
+
+  # CustomHeaders holds an array of HTTP headers to be injected into requests by the driver
+  class CustomHeaders
+    # Entries, each describing a single header
+    attr_accessor :custom_headers
+
+    def initialize(
+      custom_headers: nil
+    )
+      @custom_headers = custom_headers == nil ? [] : custom_headers
+    end
+
+    def to_json(options = {})
+      hash = {}
+      self.instance_variables.each do |var|
+        hash[var.id2name.delete_prefix("@")] = self.instance_variable_get var
+      end
+      hash.to_json
+    end
+  end
+
   class CyberarkConjurStore
     # The URL of the Cyberark instance
     attr_accessor :appurl
@@ -8305,6 +8353,8 @@ module SDM
     attr_accessor :auth_header
     # The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation.
     attr_accessor :bind_interface
+    # Additional HTTP headers to include in requests.
+    attr_accessor :custom_headers
     # Automatically redirect to this path upon connecting.
     attr_accessor :default_path
     # A filter applied to the routing logic to pin datasource to nodes.
@@ -8337,6 +8387,7 @@ module SDM
     def initialize(
       auth_header: nil,
       bind_interface: nil,
+      custom_headers: nil,
       default_path: nil,
       egress_filter: nil,
       headers_blacklist: nil,
@@ -8354,6 +8405,7 @@ module SDM
     )
       @auth_header = auth_header == nil ? "" : auth_header
       @bind_interface = bind_interface == nil ? "" : bind_interface
+      @custom_headers = custom_headers == nil ? nil : custom_headers
       @default_path = default_path == nil ? "" : default_path
       @egress_filter = egress_filter == nil ? "" : egress_filter
       @headers_blacklist = headers_blacklist == nil ? "" : headers_blacklist
@@ -8382,6 +8434,8 @@ module SDM
   class HTTPBasicAuth
     # The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation.
     attr_accessor :bind_interface
+    # Additional HTTP headers to include in requests.
+    attr_accessor :custom_headers
     # Automatically redirect to this path upon connecting.
     attr_accessor :default_path
     # A filter applied to the routing logic to pin datasource to nodes.
@@ -8417,6 +8471,7 @@ module SDM
 
     def initialize(
       bind_interface: nil,
+      custom_headers: nil,
       default_path: nil,
       egress_filter: nil,
       headers_blacklist: nil,
@@ -8435,6 +8490,7 @@ module SDM
       username: nil
     )
       @bind_interface = bind_interface == nil ? "" : bind_interface
+      @custom_headers = custom_headers == nil ? nil : custom_headers
       @default_path = default_path == nil ? "" : default_path
       @egress_filter = egress_filter == nil ? "" : egress_filter
       @headers_blacklist = headers_blacklist == nil ? "" : headers_blacklist
@@ -8465,6 +8521,8 @@ module SDM
   class HTTPNoAuth
     # The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation.
     attr_accessor :bind_interface
+    # Additional HTTP headers to include in requests.
+    attr_accessor :custom_headers
     # Automatically redirect to this path upon connecting.
     attr_accessor :default_path
     # A filter applied to the routing logic to pin datasource to nodes.
@@ -8496,6 +8554,7 @@ module SDM
 
     def initialize(
       bind_interface: nil,
+      custom_headers: nil,
       default_path: nil,
       egress_filter: nil,
       headers_blacklist: nil,
@@ -8512,6 +8571,7 @@ module SDM
       url: nil
     )
       @bind_interface = bind_interface == nil ? "" : bind_interface
+      @custom_headers = custom_headers == nil ? nil : custom_headers
       @default_path = default_path == nil ? "" : default_path
       @egress_filter = egress_filter == nil ? "" : egress_filter
       @headers_blacklist = headers_blacklist == nil ? "" : headers_blacklist
@@ -9788,14 +9848,10 @@ module SDM
     attr_accessor :name
     # The OAuth 2.0 authorization endpoint URL.
     attr_accessor :oauth_auth_endpoint
-    # The OAuth 2.0 dynamic client registration endpoint URL.
-    attr_accessor :oauth_register_endpoint
     # The OAuth 2.0 token endpoint URL.
     attr_accessor :oauth_token_endpoint
     # OAuth App Client Secret
     attr_accessor :password
-    # The port to dial to initiate a connection from the egress node to this resource.
-    attr_accessor :port
     # The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1.
     attr_accessor :port_override
     # ID of the proxy cluster for this resource, if any.
@@ -9817,10 +9873,8 @@ module SDM
       id: nil,
       name: nil,
       oauth_auth_endpoint: nil,
-      oauth_register_endpoint: nil,
       oauth_token_endpoint: nil,
       password: nil,
-      port: nil,
       port_override: nil,
       proxy_cluster_id: nil,
       secret_store_id: nil,
@@ -9835,10 +9889,8 @@ module SDM
       @id = id == nil ? "" : id
       @name = name == nil ? "" : name
       @oauth_auth_endpoint = oauth_auth_endpoint == nil ? "" : oauth_auth_endpoint
-      @oauth_register_endpoint = oauth_register_endpoint == nil ? "" : oauth_register_endpoint
       @oauth_token_endpoint = oauth_token_endpoint == nil ? "" : oauth_token_endpoint
       @password = password == nil ? "" : password
-      @port = port == nil ? 0 : port
       @port_override = port_override == nil ? 0 : port_override
       @proxy_cluster_id = proxy_cluster_id == nil ? "" : proxy_cluster_id
       @secret_store_id = secret_store_id == nil ? "" : secret_store_id
@@ -9856,6 +9908,78 @@ module SDM
     end
   end
 
+  # MCPDCR is currently unstable, and its API may change, or it may be removed, without a major version bump.
+  class MCPDCR
+    # The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation.
+    attr_accessor :bind_interface
+    # A filter applied to the routing logic to pin datasource to nodes.
+    attr_accessor :egress_filter
+    # True if the datasource is reachable and the credentials are valid.
+    attr_accessor :healthy
+    # The host to dial to initiate a connection from the egress node to this resource.
+    attr_accessor :hostname
+    # Unique identifier of the Resource.
+    attr_accessor :id
+    # Unique human-readable name of the Resource.
+    attr_accessor :name
+    # The OAuth 2.0 authorization endpoint URL.
+    attr_accessor :oauth_auth_endpoint
+    # The OAuth 2.0 dynamic client registration endpoint URL.
+    attr_accessor :oauth_register_endpoint
+    # The OAuth 2.0 token endpoint URL.
+    attr_accessor :oauth_token_endpoint
+    # The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1.
+    attr_accessor :port_override
+    # ID of the proxy cluster for this resource, if any.
+    attr_accessor :proxy_cluster_id
+    # ID of the secret store containing credentials for this resource, if any.
+    attr_accessor :secret_store_id
+    # DNS subdomain through which this resource may be accessed on clients.  (e.g. "app-prod1" allows the resource to be accessed at "app-prod1.your-org-name.sdm-proxy-domain"). Only applicable to HTTP-based resources or resources using virtual networking mode.
+    attr_accessor :subdomain
+    # Tags is a map of key, value pairs.
+    attr_accessor :tags
+
+    def initialize(
+      bind_interface: nil,
+      egress_filter: nil,
+      healthy: nil,
+      hostname: nil,
+      id: nil,
+      name: nil,
+      oauth_auth_endpoint: nil,
+      oauth_register_endpoint: nil,
+      oauth_token_endpoint: nil,
+      port_override: nil,
+      proxy_cluster_id: nil,
+      secret_store_id: nil,
+      subdomain: nil,
+      tags: nil
+    )
+      @bind_interface = bind_interface == nil ? "" : bind_interface
+      @egress_filter = egress_filter == nil ? "" : egress_filter
+      @healthy = healthy == nil ? false : healthy
+      @hostname = hostname == nil ? "" : hostname
+      @id = id == nil ? "" : id
+      @name = name == nil ? "" : name
+      @oauth_auth_endpoint = oauth_auth_endpoint == nil ? "" : oauth_auth_endpoint
+      @oauth_register_endpoint = oauth_register_endpoint == nil ? "" : oauth_register_endpoint
+      @oauth_token_endpoint = oauth_token_endpoint == nil ? "" : oauth_token_endpoint
+      @port_override = port_override == nil ? 0 : port_override
+      @proxy_cluster_id = proxy_cluster_id == nil ? "" : proxy_cluster_id
+      @secret_store_id = secret_store_id == nil ? "" : secret_store_id
+      @subdomain = subdomain == nil ? "" : subdomain
+      @tags = tags == nil ? SDM::_porcelain_zero_value_tags() : tags
+    end
+
+    def to_json(options = {})
+      hash = {}
+      self.instance_variables.each do |var|
+        hash[var.id2name.delete_prefix("@")] = self.instance_variable_get var
+      end
+      hash.to_json
+    end
+  end
+
   class MTLSMysql
     # The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation.
     attr_accessor :bind_interface
@@ -11803,10 +11927,14 @@ module SDM
   class OktaGroups
     # The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation.
     attr_accessor :bind_interface
+    # If true, configures discovery of the Okta org to be run from a node.
+    attr_accessor :discovery_enabled
     # Represents the Okta Org Client URL
     attr_accessor :domain
     # A filter applied to the routing logic to pin datasource to nodes.
     attr_accessor :egress_filter
+    # comma separated list of group names to filter by. Supports wildcards (*)
+    attr_accessor :group_names
     # True if the datasource is reachable and the credentials are valid.
     attr_accessor :healthy
     # Unique identifier of the Resource.
@@ -11828,8 +11956,10 @@ module SDM
 
     def initialize(
       bind_interface: nil,
+      discovery_enabled: nil,
       domain: nil,
       egress_filter: nil,
+      group_names: nil,
       healthy: nil,
       id: nil,
       identity_set_id: nil,
@@ -11841,8 +11971,10 @@ module SDM
       tags: nil
     )
       @bind_interface = bind_interface == nil ? "" : bind_interface
+      @discovery_enabled = discovery_enabled == nil ? false : discovery_enabled
       @domain = domain == nil ? "" : domain
       @egress_filter = egress_filter == nil ? "" : egress_filter
+      @group_names = group_names == nil ? "" : group_names
       @healthy = healthy == nil ? false : healthy
       @id = id == nil ? "" : id
       @identity_set_id = identity_set_id == nil ? "" : identity_set_id
@@ -17097,6 +17229,8 @@ module SDM
     attr_accessor :created_at
     # The User's email address. Must be unique.
     attr_accessor :email
+    # Internal employee ID used to identify the user.
+    attr_accessor :employee_number
     # External ID is an alternative unique ID this user is represented by within an external service.
     attr_accessor :external_id
     # The User's first name.
@@ -17127,6 +17261,7 @@ module SDM
       scim: nil,
       created_at: nil,
       email: nil,
+      employee_number: nil,
       external_id: nil,
       first_name: nil,
       id: nil,
@@ -17142,6 +17277,7 @@ module SDM
       @scim = scim == nil ? "" : scim
       @created_at = created_at == nil ? nil : created_at
       @email = email == nil ? "" : email
+      @employee_number = employee_number == nil ? "" : employee_number
       @external_id = external_id == nil ? "" : external_id
       @first_name = first_name == nil ? "" : first_name
       @id = id == nil ? "" : id

data/lib/strongdm.rb

@@ -31,7 +31,7 @@ module SDM #:nodoc:
     DEFAULT_RETRY_FACTOR = 1.6
     DEFAULT_RETRY_JITTER = 0.2
     API_VERSION = "2025-04-14"
-    USER_AGENT = "strongdm-sdk-ruby/16.1.0"
+    USER_AGENT = "strongdm-sdk-ruby/16.4.0"
     private_constant :DEFAULT_BASE_RETRY_DELAY, :DEFAULT_MAX_RETRY_DELAY, :DEFAULT_RETRY_FACTOR, :DEFAULT_RETRY_JITTER, :API_VERSION, :USER_AGENT
 
     # Creates a new strongDM API client.

data/lib/svc.rb

@@ -6755,6 +6755,7 @@ module SDM #:nodoc:
   # {KubernetesUserImpersonation}
   # {Maria}
   # {MCP}
+  # {MCPDCR}
   # {Memcached}
   # {Memsql}
   # {MongoHost}

data/lib/version

@@ -13,5 +13,5 @@
 # limitations under the License.
 #
 module SDM
-  VERSION = "16.1.0"
+  VERSION = "16.4.0"
 end

data/lib/version.rb

@@ -13,5 +13,5 @@
 # limitations under the License.
 #
 module SDM
-  VERSION = "16.1.0"
+  VERSION = "16.4.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: strongdm
 version: !ruby/object:Gem::Version
-  version: 16.1.0
+  version: 16.4.0
 platform: ruby
 authors:
 - strongDM Team
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2026-01-20 00:00:00.000000000 Z
+date: 2026-02-03 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: grpc
@@ -81,8 +81,8 @@ files:
 - "./.git/logs/HEAD"
 - "./.git/logs/refs/heads/master"
 - "./.git/logs/refs/remotes/origin/HEAD"
-- "./.git/objects/pack/pack-1497941e63a924129eb77eca66ed0433b4fc7717.idx"
-- "./.git/objects/pack/pack-1497941e63a924129eb77eca66ed0433b4fc7717.pack"
+- "./.git/objects/pack/pack-091f4eff5af14631e219ef825252ead79d4eed4b.idx"
+- "./.git/objects/pack/pack-091f4eff5af14631e219ef825252ead79d4eed4b.pack"
 - "./.git/packed-refs"
 - "./.git/refs/heads/master"
 - "./.git/refs/remotes/origin/HEAD"
@@ -136,6 +136,7 @@ files:
 - "./lib/grpc/approval_workflows_services_pb.rb"
 - "./lib/grpc/control_panel_pb.rb"
 - "./lib/grpc/control_panel_services_pb.rb"
+- "./lib/grpc/custom_headers_pb.rb"
 - "./lib/grpc/discovery_connectors_pb.rb"
 - "./lib/grpc/discovery_connectors_services_pb.rb"
 - "./lib/grpc/drivers_pb.rb"