strongdm 16.22.0 → 17.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a2819aca6886bb6801c1fa0a01c4031c768d1f504038e5088d464c4606397aee
-  data.tar.gz: 1f7a579c8c038966441f6bc57ffd4878d878bc846ef086fe0e9363bb4478d386
+  metadata.gz: 1772f0266b5e5048b02174a11ff504d9a92461c86f754c926bcb7d1f05eb102d
+  data.tar.gz: 8a6888ea06961b5b01665ef11f3e03579af8c01481d8026e88ff078d7ea3334f
 SHA512:
-  metadata.gz: 1209a6fd7351c10a99079dde1486b90bc4a422ebe60a6069b6c554051571822b495b641acbf1b540c26874ae179ba088f15c8a3516734d5af8cc281a57ecb04f
-  data.tar.gz: b1cff76c33d77043479e8d094041432725198051724a84623352ac7cbda01b0bf78e913c53a574b38e0b2c0d0e6232c6a11f70c6a1dae3ba22abe7eb021c191c
+  metadata.gz: 66a0c3060d36905296b7c24266f2e83c9850d35d4a2d7b1e2ed29254140ceeae9ed1c7608b9b6bf696ce86f42f5919b897ed9d40abd0c8bce9432530acdfa085
+  data.tar.gz: bf71cc50ef7938d41a00a23b08f44e90c1e6dd2e4863751fcb2cdfcfb888434dec7cbf6eed250bea80c2540c9c8de151a8c4da28c32c7792465e125d8cb93298

data/.git/ORIG_HEAD

@@ -1 +1 @@
-c414fe2440a5b8fac52f3c46767d19187f470666
+ac72c45893602af2c60a5b76196cf853552c2470

data/.git/logs/HEAD

@@ -1,3 +1,3 @@
-0000000000000000000000000000000000000000 c414fe2440a5b8fac52f3c46767d19187f470666 root <root@fa61e61be56c.(none)> 1774273149 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
-c414fe2440a5b8fac52f3c46767d19187f470666 c414fe2440a5b8fac52f3c46767d19187f470666 root <root@fa61e61be56c.(none)> 1774273149 +0000	checkout: moving from master to master
-c414fe2440a5b8fac52f3c46767d19187f470666 2456c1a3fc46dbb812b191edc270f83c00e2d94b root <root@fa61e61be56c.(none)> 1774273149 +0000	merge origin/development: Fast-forward
+0000000000000000000000000000000000000000 ac72c45893602af2c60a5b76196cf853552c2470 root <root@8efc6f76ae9e.(none)> 1776424041 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
+ac72c45893602af2c60a5b76196cf853552c2470 ac72c45893602af2c60a5b76196cf853552c2470 root <root@8efc6f76ae9e.(none)> 1776424041 +0000	checkout: moving from master to master
+ac72c45893602af2c60a5b76196cf853552c2470 5f7f719a5c803d95cebb885aebb5dc5161e14c00 root <root@8efc6f76ae9e.(none)> 1776424041 +0000	merge origin/development: Fast-forward

data/.git/logs/refs/heads/master

@@ -1,2 +1,2 @@
-0000000000000000000000000000000000000000 c414fe2440a5b8fac52f3c46767d19187f470666 root <root@fa61e61be56c.(none)> 1774273149 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
-c414fe2440a5b8fac52f3c46767d19187f470666 2456c1a3fc46dbb812b191edc270f83c00e2d94b root <root@fa61e61be56c.(none)> 1774273149 +0000	merge origin/development: Fast-forward
+0000000000000000000000000000000000000000 ac72c45893602af2c60a5b76196cf853552c2470 root <root@8efc6f76ae9e.(none)> 1776424041 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
+ac72c45893602af2c60a5b76196cf853552c2470 5f7f719a5c803d95cebb885aebb5dc5161e14c00 root <root@8efc6f76ae9e.(none)> 1776424041 +0000	merge origin/development: Fast-forward

data/.git/logs/refs/remotes/origin/HEAD

@@ -1 +1 @@
-0000000000000000000000000000000000000000 c414fe2440a5b8fac52f3c46767d19187f470666 root <root@fa61e61be56c.(none)> 1774273149 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
+0000000000000000000000000000000000000000 ac72c45893602af2c60a5b76196cf853552c2470 root <root@8efc6f76ae9e.(none)> 1776424041 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git

data/.git/packed-refs

@@ -1,6 +1,6 @@
 # pack-refs with: peeled fully-peeled sorted 
-2456c1a3fc46dbb812b191edc270f83c00e2d94b refs/remotes/origin/development
-c414fe2440a5b8fac52f3c46767d19187f470666 refs/remotes/origin/master
+5f7f719a5c803d95cebb885aebb5dc5161e14c00 refs/remotes/origin/development
+ac72c45893602af2c60a5b76196cf853552c2470 refs/remotes/origin/master
 2e4fe8087177ddea9b3991ca499f758384839c89 refs/tags/untagged-84fd83a4484c785cce63
 04f604866214fab4d5663b5171a3e596331577bd refs/tags/v0.9.4
 6f9a7b75b345c65fb554884907b7060680c807b7 refs/tags/v0.9.5
@@ -148,6 +148,8 @@ c3b0eeef356ddf0cf408d1305fd766791121803f refs/tags/v15.46.0
 faf9218bcf932aa16115ce5bdad98cf7e1c26e35 refs/tags/v16.17.0
 74344928c432ecaaab2bf22852ce85c7e22147f8 refs/tags/v16.20.0
 c414fe2440a5b8fac52f3c46767d19187f470666 refs/tags/v16.21.0
+2456c1a3fc46dbb812b191edc270f83c00e2d94b refs/tags/v16.22.0
+ac72c45893602af2c60a5b76196cf853552c2470 refs/tags/v16.23.0
 3f2a99e1a4296cf5b4937d57b901051b9381c209 refs/tags/v16.3.0
 eb2c5388eb894fce71666148224e02d977c87baa refs/tags/v16.4.0
 6450bdc10119fb8a00123c4262d6f245a70ed06a refs/tags/v16.5.0

data/.git/refs/heads/master

@@ -1 +1 @@
-2456c1a3fc46dbb812b191edc270f83c00e2d94b
+5f7f719a5c803d95cebb885aebb5dc5161e14c00

data/lib/constants.rb

@@ -335,6 +335,11 @@ module SDM
     RESOURCE_UNLOCKED = "user unlocked a resource"
     RESOURCE_FORCE_UNLOCKED = "admin force-unlocked a resource"
     RESOURCE_LOCK_REJECTED = "user lock rejected for a resource"
+    MANAGED_SECRET_LOCKED = "user locked a secret"
+    MANAGED_SECRET_UNLOCKED = "user unlocked a secret"
+    MANAGED_SECRET_FORCE_UNLOCKED = "admin force-unlocked a secret"
+    MANAGED_SECRET_LOCK_EXTENDED = "user extended a secret lock"
+    MANAGED_SECRET_LOCK_REJECTED = "user lock rejected for a secret"
     CONCURRENT_AUTHENTICATION_REVOKED_PER_ORG_SETTING = "concurrent authentications revoked per organization settings"
     PEERING_GROUP_TOGGLED = "peering group toggled"
     PEERING_GROUP_CREATED = "peering group created"
@@ -400,7 +405,10 @@ module SDM
     MANAGED_SECRET_DELETE = "managedsecret:delete"
     MANAGED_SECRET_LIST = "managedsecret:list"
     MANAGED_SECRET_READ = "managedsecret:read"
+    MANAGED_SECRET_RETRIEVE = "managedsecret:retrieve"
+    MANAGED_SECRET_ROTATE = "managedsecret:rotate"
     MANAGED_SECRET_UPDATE = "managedsecret:update"
+    MANAGED_SECRET_VALIDATE = "managedsecret:validate"
     ORG_AUDIT_ACCESS_REQUESTS = "audit:accessrequests"
     ORG_AUDIT_ACCOUNT_GRANTS = "audit:accountgrants"
     ORG_AUDIT_ACTIVITIES = "audit:activities"

data/lib/grpc/authorization_policies_pb.rb

@@ -74,63 +74,63 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :id, :string, 1
       optional :name, :string, 2
       optional :description, :string, 3
-      repeated :items, :message, 4, "v1.AuthorizationPolicyItem"
+      repeated :rules, :message, 4, "v1.AuthorizationPolicyRule"
       optional :state, :enum, 5, "v1.AuthorizationPolicyState"
     end
-    add_message "v1.AuthorizationPolicyItem" do
+    add_message "v1.AuthorizationPolicyRule" do
       oneof :kind do
-        optional :principal_all, :message, 1, "v1.AuthorizationPolicyItemPrincipalAll"
-        optional :principal_by_ids, :message, 2, "v1.AuthorizationPolicyItemPrincipalByIds"
-        optional :resources_all, :message, 3, "v1.AuthorizationPolicyItemResourcesAll"
-        optional :resource_by_ids, :message, 4, "v1.AuthorizationPolicyItemResourceByIds"
-        optional :resource_by_type_and_tags, :message, 5, "v1.AuthorizationPolicyItemResourceByTypeAndTags"
-        optional :resource_by_type_tags_and_kubernetes_groups, :message, 6, "v1.AuthorizationPolicyItemResourceByTypeTagsAndKubernetesGroups"
-        optional :resource_by_okta_with_groups, :message, 7, "v1.AuthorizationPolicyItemResourceByOktaWithGroups"
-        optional :resource_by_entra_with_groups, :message, 8, "v1.AuthorizationPolicyItemResourceByEntraWithGroups"
-        optional :condition_mfa, :message, 9, "v1.AuthorizationPolicyItemConditionMFA"
-        optional :condition_device_trust, :message, 10, "v1.AuthorizationPolicyItemConditionDeviceTrust"
-        optional :condition_location, :message, 11, "v1.AuthorizationPolicyItemConditionLocation"
-        optional :condition_ip, :message, 12, "v1.AuthorizationPolicyItemConditionIP"
-        optional :condition_time, :message, 13, "v1.AuthorizationPolicyItemConditionTime"
-        optional :condition_approval_flow, :message, 14, "v1.AuthorizationPolicyItemConditionApprovalFlow"
+        optional :principal_all, :message, 1, "v1.AuthorizationPolicyRulePrincipalAll"
+        optional :principal_by_ids, :message, 2, "v1.AuthorizationPolicyRulePrincipalByIds"
+        optional :resources_all, :message, 3, "v1.AuthorizationPolicyRuleResourcesAll"
+        optional :resource_by_ids, :message, 4, "v1.AuthorizationPolicyRuleResourceByIds"
+        optional :resource_by_type_and_tags, :message, 5, "v1.AuthorizationPolicyRuleResourceByTypeAndTags"
+        optional :resource_by_type_tags_and_kubernetes_groups, :message, 6, "v1.AuthorizationPolicyRuleResourceByTypeTagsAndKubernetesGroups"
+        optional :resource_by_okta_with_groups, :message, 7, "v1.AuthorizationPolicyRuleResourceByOktaWithGroups"
+        optional :resource_by_entra_with_groups, :message, 8, "v1.AuthorizationPolicyRuleResourceByEntraWithGroups"
+        optional :condition_mfa, :message, 9, "v1.AuthorizationPolicyRuleConditionMFA"
+        optional :condition_device_trust, :message, 10, "v1.AuthorizationPolicyRuleConditionDeviceTrust"
+        optional :condition_location, :message, 11, "v1.AuthorizationPolicyRuleConditionLocation"
+        optional :condition_ip, :message, 12, "v1.AuthorizationPolicyRuleConditionIP"
+        optional :condition_time, :message, 13, "v1.AuthorizationPolicyRuleConditionTime"
+        optional :condition_approval_flow, :message, 14, "v1.AuthorizationPolicyRuleConditionApprovalFlow"
       end
     end
-    add_message "v1.AuthorizationPolicyItemPrincipalAll" do
+    add_message "v1.AuthorizationPolicyRulePrincipalAll" do
     end
-    add_message "v1.AuthorizationPolicyItemPrincipalByIds" do
+    add_message "v1.AuthorizationPolicyRulePrincipalByIds" do
       repeated :ids, :string, 1
     end
-    add_message "v1.AuthorizationPolicyItemResourcesAll" do
+    add_message "v1.AuthorizationPolicyRuleResourcesAll" do
     end
-    add_message "v1.AuthorizationPolicyItemResourceByIds" do
+    add_message "v1.AuthorizationPolicyRuleResourceByIds" do
       repeated :ids, :string, 1
     end
-    add_message "v1.AuthorizationPolicyItemResourceByTypeAndTags" do
+    add_message "v1.AuthorizationPolicyRuleResourceByTypeAndTags" do
       optional :type, :enum, 1, "v1.ResourceType"
       repeated :tags, :message, 2, "v1.Tag"
     end
-    add_message "v1.AuthorizationPolicyItemResourceByTypeTagsAndKubernetesGroups" do
+    add_message "v1.AuthorizationPolicyRuleResourceByTypeTagsAndKubernetesGroups" do
       optional :type, :enum, 1, "v1.ResourceType"
       repeated :tags, :message, 2, "v1.Tag"
       repeated :kubernetes_groups, :string, 3
     end
-    add_message "v1.AuthorizationPolicyItemResourceByOktaWithGroups" do
+    add_message "v1.AuthorizationPolicyRuleResourceByOktaWithGroups" do
       optional :resource_id, :string, 1
       repeated :groups, :string, 2
     end
-    add_message "v1.AuthorizationPolicyItemResourceByEntraWithGroups" do
+    add_message "v1.AuthorizationPolicyRuleResourceByEntraWithGroups" do
       optional :resource_id, :string, 1
       repeated :groups, :string, 2
     end
-    add_message "v1.AuthorizationPolicyItemConditionMFA" do
+    add_message "v1.AuthorizationPolicyRuleConditionMFA" do
       optional :reason, :string, 1
       optional :cache_timeout_seconds, :int32, 2
     end
-    add_message "v1.AuthorizationPolicyItemConditionDeviceTrust" do
+    add_message "v1.AuthorizationPolicyRuleConditionDeviceTrust" do
       optional :operator, :enum, 1, "v1.AuthorizationPolicyDeviceTrustOperator"
       optional :level, :enum, 2, "v1.AuthorizationPolicyDeviceTrustLevel"
     end
-    add_message "v1.AuthorizationPolicyItemConditionLocation" do
+    add_message "v1.AuthorizationPolicyRuleConditionLocation" do
       repeated :rules, :message, 1, "v1.AuthorizationPolicyLocationRule"
     end
     add_message "v1.AuthorizationPolicyLocationRule" do
@@ -152,7 +152,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :operator, :enum, 1, "v1.LocationOperator"
       repeated :subdivisions, :string, 2
     end
-    add_message "v1.AuthorizationPolicyItemConditionIP" do
+    add_message "v1.AuthorizationPolicyRuleConditionIP" do
       repeated :rules, :message, 1, "v1.AuthorizationPolicyIPRule"
     end
     add_message "v1.AuthorizationPolicyIPRule" do
@@ -160,7 +160,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :network, :enum, 2, "v1.AuthorizationPolicyIPNetwork"
       optional :cidr, :string, 3
     end
-    add_message "v1.AuthorizationPolicyItemConditionTime" do
+    add_message "v1.AuthorizationPolicyRuleConditionTime" do
       repeated :rules, :message, 1, "v1.AuthorizationPolicyTimeRule"
     end
     add_message "v1.AuthorizationPolicyTimeRule" do
@@ -202,7 +202,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
     add_message "v1.AuthorizationPolicyTimeRuleDaysOfMonth" do
       repeated :days, :int32, 1
     end
-    add_message "v1.AuthorizationPolicyItemConditionApprovalFlow" do
+    add_message "v1.AuthorizationPolicyRuleConditionApprovalFlow" do
       optional :approval_flow_id, :string, 1
     end
     add_enum "v1.AuthorizationPolicyState" do
@@ -269,25 +269,25 @@ module V1
   AuthorizationPolicyListRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyListRequest").msgclass
   AuthorizationPolicyListResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyListResponse").msgclass
   AuthorizationPolicy = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicy").msgclass
-  AuthorizationPolicyItem = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyItem").msgclass
-  AuthorizationPolicyItemPrincipalAll = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyItemPrincipalAll").msgclass
-  AuthorizationPolicyItemPrincipalByIds = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyItemPrincipalByIds").msgclass
-  AuthorizationPolicyItemResourcesAll = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyItemResourcesAll").msgclass
-  AuthorizationPolicyItemResourceByIds = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyItemResourceByIds").msgclass
-  AuthorizationPolicyItemResourceByTypeAndTags = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyItemResourceByTypeAndTags").msgclass
-  AuthorizationPolicyItemResourceByTypeTagsAndKubernetesGroups = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyItemResourceByTypeTagsAndKubernetesGroups").msgclass
-  AuthorizationPolicyItemResourceByOktaWithGroups = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyItemResourceByOktaWithGroups").msgclass
-  AuthorizationPolicyItemResourceByEntraWithGroups = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyItemResourceByEntraWithGroups").msgclass
-  AuthorizationPolicyItemConditionMFA = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyItemConditionMFA").msgclass
-  AuthorizationPolicyItemConditionDeviceTrust = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyItemConditionDeviceTrust").msgclass
-  AuthorizationPolicyItemConditionLocation = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyItemConditionLocation").msgclass
+  AuthorizationPolicyRule = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyRule").msgclass
+  AuthorizationPolicyRulePrincipalAll = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyRulePrincipalAll").msgclass
+  AuthorizationPolicyRulePrincipalByIds = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyRulePrincipalByIds").msgclass
+  AuthorizationPolicyRuleResourcesAll = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyRuleResourcesAll").msgclass
+  AuthorizationPolicyRuleResourceByIds = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyRuleResourceByIds").msgclass
+  AuthorizationPolicyRuleResourceByTypeAndTags = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyRuleResourceByTypeAndTags").msgclass
+  AuthorizationPolicyRuleResourceByTypeTagsAndKubernetesGroups = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyRuleResourceByTypeTagsAndKubernetesGroups").msgclass
+  AuthorizationPolicyRuleResourceByOktaWithGroups = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyRuleResourceByOktaWithGroups").msgclass
+  AuthorizationPolicyRuleResourceByEntraWithGroups = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyRuleResourceByEntraWithGroups").msgclass
+  AuthorizationPolicyRuleConditionMFA = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyRuleConditionMFA").msgclass
+  AuthorizationPolicyRuleConditionDeviceTrust = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyRuleConditionDeviceTrust").msgclass
+  AuthorizationPolicyRuleConditionLocation = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyRuleConditionLocation").msgclass
   AuthorizationPolicyLocationRule = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyLocationRule").msgclass
   AuthorizationPolicyContinentRule = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyContinentRule").msgclass
   AuthorizationPolicyCountryRule = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyCountryRule").msgclass
   AuthorizationPolicySubdivisionRule = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicySubdivisionRule").msgclass
-  AuthorizationPolicyItemConditionIP = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyItemConditionIP").msgclass
+  AuthorizationPolicyRuleConditionIP = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyRuleConditionIP").msgclass
   AuthorizationPolicyIPRule = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyIPRule").msgclass
-  AuthorizationPolicyItemConditionTime = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyItemConditionTime").msgclass
+  AuthorizationPolicyRuleConditionTime = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyRuleConditionTime").msgclass
   AuthorizationPolicyTimeRule = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyTimeRule").msgclass
   AuthorizationPolicyTimeRuleDayOfWeek = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyTimeRuleDayOfWeek").msgclass
   LegacyAuthorizationPolicyTimeRuleTimeOfDay = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.LegacyAuthorizationPolicyTimeRuleTimeOfDay").msgclass
@@ -295,7 +295,7 @@ module V1
   AuthorizationPolicyTimeRuleTimeOfDay = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyTimeRuleTimeOfDay").msgclass
   AuthorizationPolicyTimeRuleMonth = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyTimeRuleMonth").msgclass
   AuthorizationPolicyTimeRuleDaysOfMonth = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyTimeRuleDaysOfMonth").msgclass
-  AuthorizationPolicyItemConditionApprovalFlow = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyItemConditionApprovalFlow").msgclass
+  AuthorizationPolicyRuleConditionApprovalFlow = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyRuleConditionApprovalFlow").msgclass
   AuthorizationPolicyState = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyState").enummodule
   AuthorizationPolicyDeviceTrustOperator = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyDeviceTrustOperator").enummodule
   AuthorizationPolicyDeviceTrustLevel = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyDeviceTrustLevel").enummodule

data/lib/grpc/drivers_pb.rb

@@ -1419,6 +1419,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :subdomain, :string, 32775
       optional :hostname, :string, 1
       optional :port_override, :int32, 4
+      optional :url, :string, 9
     end
     add_message "v1.MCPGatewayOAuth" do
       optional :id, :string, 32768
@@ -1436,6 +1437,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :oauth_token_endpoint, :string, 9
       optional :password, :string, 2
       optional :port_override, :int32, 4
+      optional :url, :string, 12
       optional :username, :string, 6
     end
     add_message "v1.MCPGatewayOAuthDCR" do
@@ -1454,6 +1456,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :oauth_scopes, :string, 12
       optional :oauth_token_endpoint, :string, 9
       optional :port_override, :int32, 4
+      optional :url, :string, 13
     end
     add_message "v1.MCPGatewayPAT" do
       optional :id, :string, 32768
@@ -1468,6 +1471,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :hostname, :string, 1
       optional :password, :string, 2
       optional :port_override, :int32, 4
+      optional :url, :string, 9
     end
     add_message "v1.MTLSMysql" do
       optional :id, :string, 32768

data/lib/grpc/managed_secrets_pb.rb

@@ -126,6 +126,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :last_rotated_at, :message, 8, "google.protobuf.Timestamp"
       optional :expires_at, :message, 9, "google.protobuf.Timestamp"
       optional :config, :string, 10
+      optional :lock_required, :bool, 11
     end
     add_message "v1.ManagedSecretPolicy" do
       optional :rotation_policy, :message, 1, "v1.ManagedSecretRotationPolicy"

data/lib/grpc/plumbing.rb

@@ -11124,6 +11124,7 @@ module SDM
       porcelain.secret_store_id = (plumbing.secret_store_id)
       porcelain.subdomain = (plumbing.subdomain)
       porcelain.tags = convert_tags_to_porcelain(plumbing.tags)
+      porcelain.url = (plumbing.url)
       porcelain
     end
 
@@ -11143,6 +11144,7 @@ module SDM
       plumbing.secret_store_id = (porcelain.secret_store_id)
       plumbing.subdomain = (porcelain.subdomain)
       plumbing.tags = convert_tags_to_plumbing(porcelain.tags)
+      plumbing.url = (porcelain.url)
       plumbing
     end
     def self.convert_repeated_mcp_gateway_no_auth_to_plumbing(porcelains)
@@ -11182,6 +11184,7 @@ module SDM
       porcelain.secret_store_id = (plumbing.secret_store_id)
       porcelain.subdomain = (plumbing.subdomain)
       porcelain.tags = convert_tags_to_porcelain(plumbing.tags)
+      porcelain.url = (plumbing.url)
       porcelain.username = (plumbing.username)
       porcelain
     end
@@ -11206,6 +11209,7 @@ module SDM
       plumbing.secret_store_id = (porcelain.secret_store_id)
       plumbing.subdomain = (porcelain.subdomain)
       plumbing.tags = convert_tags_to_plumbing(porcelain.tags)
+      plumbing.url = (porcelain.url)
       plumbing.username = (porcelain.username)
       plumbing
     end
@@ -11246,6 +11250,7 @@ module SDM
       porcelain.secret_store_id = (plumbing.secret_store_id)
       porcelain.subdomain = (plumbing.subdomain)
       porcelain.tags = convert_tags_to_porcelain(plumbing.tags)
+      porcelain.url = (plumbing.url)
       porcelain
     end
 
@@ -11269,6 +11274,7 @@ module SDM
       plumbing.secret_store_id = (porcelain.secret_store_id)
       plumbing.subdomain = (porcelain.subdomain)
       plumbing.tags = convert_tags_to_plumbing(porcelain.tags)
+      plumbing.url = (porcelain.url)
       plumbing
     end
     def self.convert_repeated_mcp_gateway_o_auth_dcr_to_plumbing(porcelains)
@@ -11305,6 +11311,7 @@ module SDM
       porcelain.secret_store_id = (plumbing.secret_store_id)
       porcelain.subdomain = (plumbing.subdomain)
       porcelain.tags = convert_tags_to_porcelain(plumbing.tags)
+      porcelain.url = (plumbing.url)
       porcelain
     end
 
@@ -11325,6 +11332,7 @@ module SDM
       plumbing.secret_store_id = (porcelain.secret_store_id)
       plumbing.subdomain = (porcelain.subdomain)
       plumbing.tags = convert_tags_to_plumbing(porcelain.tags)
+      plumbing.url = (porcelain.url)
       plumbing
     end
     def self.convert_repeated_mcp_gateway_pat_to_plumbing(porcelains)
@@ -11499,6 +11507,7 @@ module SDM
       porcelain.expires_at = convert_timestamp_to_porcelain(plumbing.expires_at)
       porcelain.id = (plumbing.id)
       porcelain.last_rotated_at = convert_timestamp_to_porcelain(plumbing.last_rotated_at)
+      porcelain.lock_required = (plumbing.lock_required)
       porcelain.name = (plumbing.name)
       porcelain.policy = convert_managed_secret_policy_to_porcelain(plumbing.policy)
       porcelain.secret_engine_id = (plumbing.secret_engine_id)
@@ -11517,6 +11526,7 @@ module SDM
       plumbing.expires_at = convert_timestamp_to_plumbing(porcelain.expires_at)
       plumbing.id = (porcelain.id)
       plumbing.last_rotated_at = convert_timestamp_to_plumbing(porcelain.last_rotated_at)
+      plumbing.lock_required = (porcelain.lock_required)
       plumbing.name = (porcelain.name)
       plumbing.policy = convert_managed_secret_policy_to_plumbing(porcelain.policy)
       plumbing.secret_engine_id = (porcelain.secret_engine_id)

data/lib/models/porcelain.rb

@@ -10374,6 +10374,8 @@ module SDM
     attr_accessor :subdomain
     # Tags is a map of key, value pairs.
     attr_accessor :tags
+    # The URL to dial to initiate a connection from the egress node to this resource.
+    attr_accessor :url
 
     def initialize(
       bind_interface: nil,
@@ -10386,7 +10388,8 @@ module SDM
       proxy_cluster_id: nil,
       secret_store_id: nil,
       subdomain: nil,
-      tags: nil
+      tags: nil,
+      url: nil
     )
       @bind_interface = bind_interface == nil ? "" : bind_interface
       @egress_filter = egress_filter == nil ? "" : egress_filter
@@ -10399,6 +10402,7 @@ module SDM
       @secret_store_id = secret_store_id == nil ? "" : secret_store_id
       @subdomain = subdomain == nil ? "" : subdomain
       @tags = tags == nil ? SDM::_porcelain_zero_value_tags() : tags
+      @url = url == nil ? "" : url
     end
 
     def to_json(options = {})
@@ -10441,6 +10445,8 @@ module SDM
     attr_accessor :subdomain
     # Tags is a map of key, value pairs.
     attr_accessor :tags
+    # The URL to dial to initiate a connection from the egress node to this resource.
+    attr_accessor :url
     # OAuth App Client ID
     attr_accessor :username
 
@@ -10460,6 +10466,7 @@ module SDM
       secret_store_id: nil,
       subdomain: nil,
       tags: nil,
+      url: nil,
       username: nil
     )
       @bind_interface = bind_interface == nil ? "" : bind_interface
@@ -10477,6 +10484,7 @@ module SDM
       @secret_store_id = secret_store_id == nil ? "" : secret_store_id
       @subdomain = subdomain == nil ? "" : subdomain
       @tags = tags == nil ? SDM::_porcelain_zero_value_tags() : tags
+      @url = url == nil ? "" : url
       @username = username == nil ? "" : username
     end
 
@@ -10521,6 +10529,8 @@ module SDM
     attr_accessor :subdomain
     # Tags is a map of key, value pairs.
     attr_accessor :tags
+    # The URL to dial to initiate a connection from the egress node to this resource.
+    attr_accessor :url
 
     def initialize(
       bind_interface: nil,
@@ -10537,7 +10547,8 @@ module SDM
       proxy_cluster_id: nil,
       secret_store_id: nil,
       subdomain: nil,
-      tags: nil
+      tags: nil,
+      url: nil
     )
       @bind_interface = bind_interface == nil ? "" : bind_interface
       @egress_filter = egress_filter == nil ? "" : egress_filter
@@ -10554,6 +10565,7 @@ module SDM
       @secret_store_id = secret_store_id == nil ? "" : secret_store_id
       @subdomain = subdomain == nil ? "" : subdomain
       @tags = tags == nil ? SDM::_porcelain_zero_value_tags() : tags
+      @url = url == nil ? "" : url
     end
 
     def to_json(options = {})
@@ -10590,6 +10602,8 @@ module SDM
     attr_accessor :subdomain
     # Tags is a map of key, value pairs.
     attr_accessor :tags
+    # The URL to dial to initiate a connection from the egress node to this resource.
+    attr_accessor :url
 
     def initialize(
       bind_interface: nil,
@@ -10603,7 +10617,8 @@ module SDM
       proxy_cluster_id: nil,
       secret_store_id: nil,
       subdomain: nil,
-      tags: nil
+      tags: nil,
+      url: nil
     )
       @bind_interface = bind_interface == nil ? "" : bind_interface
       @egress_filter = egress_filter == nil ? "" : egress_filter
@@ -10617,6 +10632,7 @@ module SDM
       @secret_store_id = secret_store_id == nil ? "" : secret_store_id
       @subdomain = subdomain == nil ? "" : subdomain
       @tags = tags == nil ? SDM::_porcelain_zero_value_tags() : tags
+      @url = url == nil ? "" : url
     end
 
     def to_json(options = {})
@@ -10832,6 +10848,8 @@ module SDM
     attr_accessor :id
     # Timestamp of when secret was last rotated
     attr_accessor :last_rotated_at
+    # Whether the secret requires a lock to access
+    attr_accessor :lock_required
     # Unique human-readable name of the Managed Secret.
     attr_accessor :name
     # Password and rotation policy for the secret
@@ -10850,6 +10868,7 @@ module SDM
       expires_at: nil,
       id: nil,
       last_rotated_at: nil,
+      lock_required: nil,
       name: nil,
       policy: nil,
       secret_engine_id: nil,
@@ -10861,6 +10880,7 @@ module SDM
       @expires_at = expires_at == nil ? nil : expires_at
       @id = id == nil ? "" : id
       @last_rotated_at = last_rotated_at == nil ? nil : last_rotated_at
+      @lock_required = lock_required == nil ? false : lock_required
       @name = name == nil ? "" : name
       @policy = policy == nil ? nil : policy
       @secret_engine_id = secret_engine_id == nil ? "" : secret_engine_id

data/lib/strongdm.rb

@@ -31,7 +31,7 @@ module SDM #:nodoc:
     DEFAULT_RETRY_FACTOR = 1.6
     DEFAULT_RETRY_JITTER = 0.2
     API_VERSION = "2025-04-14"
-    USER_AGENT = "strongdm-sdk-ruby/16.22.0"
+    USER_AGENT = "strongdm-sdk-ruby/17.0.0"
     private_constant :DEFAULT_BASE_RETRY_DELAY, :DEFAULT_MAX_RETRY_DELAY, :DEFAULT_RETRY_FACTOR, :DEFAULT_RETRY_JITTER, :API_VERSION, :USER_AGENT
 
     # Creates a new strongDM API client.

data/lib/version

@@ -13,5 +13,5 @@
 # limitations under the License.
 #
 module SDM
-  VERSION = "16.22.0"
+  VERSION = "17.0.0"
 end

data/lib/version.rb

@@ -13,5 +13,5 @@
 # limitations under the License.
 #
 module SDM
-  VERSION = "16.22.0"
+  VERSION = "17.0.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: strongdm
 version: !ruby/object:Gem::Version
-  version: 16.22.0
+  version: 17.0.0
 platform: ruby
 authors:
 - strongDM Team
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2026-03-23 00:00:00.000000000 Z
+date: 2026-04-17 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: grpc
@@ -81,8 +81,8 @@ files:
 - "./.git/logs/HEAD"
 - "./.git/logs/refs/heads/master"
 - "./.git/logs/refs/remotes/origin/HEAD"
-- "./.git/objects/pack/pack-b4df90912917e3986cae2de93d3ca557ab8009dc.idx"
-- "./.git/objects/pack/pack-b4df90912917e3986cae2de93d3ca557ab8009dc.pack"
+- "./.git/objects/pack/pack-2b3a98dd411fb2f220e84b6a7db232844fd9733f.idx"
+- "./.git/objects/pack/pack-2b3a98dd411fb2f220e84b6a7db232844fd9733f.pack"
 - "./.git/packed-refs"
 - "./.git/refs/heads/master"
 - "./.git/refs/remotes/origin/HEAD"