strongdm 16.23.0 → 17.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7bfc6e9bd179083adfa309955d59b57bef8c640b3296878d331e559941af0927
-  data.tar.gz: 7790cb0c6849e806e3e35bbf9d8389006ba3dd35b36e5db6429c8c97d5a0b58d
+  metadata.gz: 2d31839bb30afbd3f98f50f996081ebc54d38530164b073ec544cab3c99a1e33
+  data.tar.gz: 679cd37356cacd458423ce821f8b99293d50f02cdc324e0e8df90b9c587de157
 SHA512:
-  metadata.gz: c3c34e049e47751ff536ab3214f275256da6efe15fd3d90fc71aa6f7647a7ab9546d482377c25d98b36fb34fbccb6c69384dcfa3496720d80db9b4e6902be616
-  data.tar.gz: c29fc348a1391831339bb28b5b4b867b6912f8414b4e59d474766e1b64f7a16192c205762d00672b7849bb07e8c99fd500cee081d5895f95da10eeb86565e63e
+  metadata.gz: 14fd39fe726c2234c06ffce35fe17c3ebe4044fb967618992a5866114b9b374e968a833b4ff821abc0c7e983d711b767ba6f3e70df37efe25ea6ff4e6b5a6fc0
+  data.tar.gz: c2835171eb83ee64ae0ff55795a58307921f951561d99ed24d4d5ea624030f11bc7fdcf7058892e9bd8fbc4405a32d5e894b57b8326df00adee4fa45e249aa0f

data/.git/ORIG_HEAD

@@ -1 +1 @@
-2456c1a3fc46dbb812b191edc270f83c00e2d94b
+5f7f719a5c803d95cebb885aebb5dc5161e14c00

data/.git/logs/HEAD

@@ -1,3 +1,3 @@
-0000000000000000000000000000000000000000 2456c1a3fc46dbb812b191edc270f83c00e2d94b root <root@a57b140a42d0.(none)> 1774424300 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
-2456c1a3fc46dbb812b191edc270f83c00e2d94b 2456c1a3fc46dbb812b191edc270f83c00e2d94b root <root@a57b140a42d0.(none)> 1774424300 +0000	checkout: moving from master to master
-2456c1a3fc46dbb812b191edc270f83c00e2d94b ac72c45893602af2c60a5b76196cf853552c2470 root <root@a57b140a42d0.(none)> 1774424300 +0000	merge origin/development: Fast-forward
+0000000000000000000000000000000000000000 5f7f719a5c803d95cebb885aebb5dc5161e14c00 root <root@bdc9df8d7743.(none)> 1776760949 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
+5f7f719a5c803d95cebb885aebb5dc5161e14c00 5f7f719a5c803d95cebb885aebb5dc5161e14c00 root <root@bdc9df8d7743.(none)> 1776760949 +0000	checkout: moving from master to master
+5f7f719a5c803d95cebb885aebb5dc5161e14c00 80d8f6f6e484a8fd5ec273cad249e9d7a9767d48 root <root@bdc9df8d7743.(none)> 1776760949 +0000	merge origin/development: Fast-forward

data/.git/logs/refs/heads/master

@@ -1,2 +1,2 @@
-0000000000000000000000000000000000000000 2456c1a3fc46dbb812b191edc270f83c00e2d94b root <root@a57b140a42d0.(none)> 1774424300 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
-2456c1a3fc46dbb812b191edc270f83c00e2d94b ac72c45893602af2c60a5b76196cf853552c2470 root <root@a57b140a42d0.(none)> 1774424300 +0000	merge origin/development: Fast-forward
+0000000000000000000000000000000000000000 5f7f719a5c803d95cebb885aebb5dc5161e14c00 root <root@bdc9df8d7743.(none)> 1776760949 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
+5f7f719a5c803d95cebb885aebb5dc5161e14c00 80d8f6f6e484a8fd5ec273cad249e9d7a9767d48 root <root@bdc9df8d7743.(none)> 1776760949 +0000	merge origin/development: Fast-forward

data/.git/logs/refs/remotes/origin/HEAD

@@ -1 +1 @@
-0000000000000000000000000000000000000000 2456c1a3fc46dbb812b191edc270f83c00e2d94b root <root@a57b140a42d0.(none)> 1774424300 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
+0000000000000000000000000000000000000000 5f7f719a5c803d95cebb885aebb5dc5161e14c00 root <root@bdc9df8d7743.(none)> 1776760949 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git

data/.git/packed-refs

@@ -1,6 +1,6 @@
 # pack-refs with: peeled fully-peeled sorted 
-ac72c45893602af2c60a5b76196cf853552c2470 refs/remotes/origin/development
-2456c1a3fc46dbb812b191edc270f83c00e2d94b refs/remotes/origin/master
+80d8f6f6e484a8fd5ec273cad249e9d7a9767d48 refs/remotes/origin/development
+5f7f719a5c803d95cebb885aebb5dc5161e14c00 refs/remotes/origin/master
 2e4fe8087177ddea9b3991ca499f758384839c89 refs/tags/untagged-84fd83a4484c785cce63
 04f604866214fab4d5663b5171a3e596331577bd refs/tags/v0.9.4
 6f9a7b75b345c65fb554884907b7060680c807b7 refs/tags/v0.9.5
@@ -149,6 +149,7 @@ faf9218bcf932aa16115ce5bdad98cf7e1c26e35 refs/tags/v16.17.0
 74344928c432ecaaab2bf22852ce85c7e22147f8 refs/tags/v16.20.0
 c414fe2440a5b8fac52f3c46767d19187f470666 refs/tags/v16.21.0
 2456c1a3fc46dbb812b191edc270f83c00e2d94b refs/tags/v16.22.0
+ac72c45893602af2c60a5b76196cf853552c2470 refs/tags/v16.23.0
 3f2a99e1a4296cf5b4937d57b901051b9381c209 refs/tags/v16.3.0
 eb2c5388eb894fce71666148224e02d977c87baa refs/tags/v16.4.0
 6450bdc10119fb8a00123c4262d6f245a70ed06a refs/tags/v16.5.0
@@ -158,6 +159,7 @@ f1adf906557d59b87f34abb19d7f8aa1c5665f3f refs/tags/v16.8.0
 79056787540d043f97acd07eb2e57c7f4787b761 refs/tags/v16.8.1
 9df32bc2f6c5940ddad262b7a8acb01043a09daa refs/tags/v16.8.2
 198062e97957107a8723fb8fbd714b174bc67b90 refs/tags/v16.9.0
+5f7f719a5c803d95cebb885aebb5dc5161e14c00 refs/tags/v17.0.0
 e0b1ec0134c7015ccb8c14464cc713c20034159e refs/tags/v2.0.0
 62a146d9d56852b2ad14ec5d2796cad158d66e1c refs/tags/v2.1.0
 9de04e628082f4ad0eb9511311479a089d302008 refs/tags/v2.2.0

data/.git/refs/heads/master

@@ -1 +1 @@
-ac72c45893602af2c60a5b76196cf853552c2470
+80d8f6f6e484a8fd5ec273cad249e9d7a9767d48

data/lib/constants.rb

@@ -405,7 +405,10 @@ module SDM
     MANAGED_SECRET_DELETE = "managedsecret:delete"
     MANAGED_SECRET_LIST = "managedsecret:list"
     MANAGED_SECRET_READ = "managedsecret:read"
+    MANAGED_SECRET_RETRIEVE = "managedsecret:retrieve"
+    MANAGED_SECRET_ROTATE = "managedsecret:rotate"
     MANAGED_SECRET_UPDATE = "managedsecret:update"
+    MANAGED_SECRET_VALIDATE = "managedsecret:validate"
     ORG_AUDIT_ACCESS_REQUESTS = "audit:accessrequests"
     ORG_AUDIT_ACCOUNT_GRANTS = "audit:accountgrants"
     ORG_AUDIT_ACTIVITIES = "audit:activities"

data/lib/grpc/authorization_policies_pb.rb

@@ -74,63 +74,63 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :id, :string, 1
       optional :name, :string, 2
       optional :description, :string, 3
-      repeated :items, :message, 4, "v1.AuthorizationPolicyItem"
+      repeated :rules, :message, 4, "v1.AuthorizationPolicyRule"
       optional :state, :enum, 5, "v1.AuthorizationPolicyState"
     end
-    add_message "v1.AuthorizationPolicyItem" do
+    add_message "v1.AuthorizationPolicyRule" do
       oneof :kind do
-        optional :principal_all, :message, 1, "v1.AuthorizationPolicyItemPrincipalAll"
-        optional :principal_by_ids, :message, 2, "v1.AuthorizationPolicyItemPrincipalByIds"
-        optional :resources_all, :message, 3, "v1.AuthorizationPolicyItemResourcesAll"
-        optional :resource_by_ids, :message, 4, "v1.AuthorizationPolicyItemResourceByIds"
-        optional :resource_by_type_and_tags, :message, 5, "v1.AuthorizationPolicyItemResourceByTypeAndTags"
-        optional :resource_by_type_tags_and_kubernetes_groups, :message, 6, "v1.AuthorizationPolicyItemResourceByTypeTagsAndKubernetesGroups"
-        optional :resource_by_okta_with_groups, :message, 7, "v1.AuthorizationPolicyItemResourceByOktaWithGroups"
-        optional :resource_by_entra_with_groups, :message, 8, "v1.AuthorizationPolicyItemResourceByEntraWithGroups"
-        optional :condition_mfa, :message, 9, "v1.AuthorizationPolicyItemConditionMFA"
-        optional :condition_device_trust, :message, 10, "v1.AuthorizationPolicyItemConditionDeviceTrust"
-        optional :condition_location, :message, 11, "v1.AuthorizationPolicyItemConditionLocation"
-        optional :condition_ip, :message, 12, "v1.AuthorizationPolicyItemConditionIP"
-        optional :condition_time, :message, 13, "v1.AuthorizationPolicyItemConditionTime"
-        optional :condition_approval_flow, :message, 14, "v1.AuthorizationPolicyItemConditionApprovalFlow"
+        optional :principal_all, :message, 1, "v1.AuthorizationPolicyRulePrincipalAll"
+        optional :principal_by_ids, :message, 2, "v1.AuthorizationPolicyRulePrincipalByIds"
+        optional :resources_all, :message, 3, "v1.AuthorizationPolicyRuleResourcesAll"
+        optional :resource_by_ids, :message, 4, "v1.AuthorizationPolicyRuleResourceByIds"
+        optional :resource_by_type_and_tags, :message, 5, "v1.AuthorizationPolicyRuleResourceByTypeAndTags"
+        optional :resource_by_type_tags_and_kubernetes_groups, :message, 6, "v1.AuthorizationPolicyRuleResourceByTypeTagsAndKubernetesGroups"
+        optional :resource_by_okta_with_groups, :message, 7, "v1.AuthorizationPolicyRuleResourceByOktaWithGroups"
+        optional :resource_by_entra_with_groups, :message, 8, "v1.AuthorizationPolicyRuleResourceByEntraWithGroups"
+        optional :condition_mfa, :message, 9, "v1.AuthorizationPolicyRuleConditionMFA"
+        optional :condition_device_trust, :message, 10, "v1.AuthorizationPolicyRuleConditionDeviceTrust"
+        optional :condition_location, :message, 11, "v1.AuthorizationPolicyRuleConditionLocation"
+        optional :condition_ip, :message, 12, "v1.AuthorizationPolicyRuleConditionIP"
+        optional :condition_time, :message, 13, "v1.AuthorizationPolicyRuleConditionTime"
+        optional :condition_approval_flow, :message, 14, "v1.AuthorizationPolicyRuleConditionApprovalFlow"
       end
     end
-    add_message "v1.AuthorizationPolicyItemPrincipalAll" do
+    add_message "v1.AuthorizationPolicyRulePrincipalAll" do
     end
-    add_message "v1.AuthorizationPolicyItemPrincipalByIds" do
+    add_message "v1.AuthorizationPolicyRulePrincipalByIds" do
       repeated :ids, :string, 1
     end
-    add_message "v1.AuthorizationPolicyItemResourcesAll" do
+    add_message "v1.AuthorizationPolicyRuleResourcesAll" do
     end
-    add_message "v1.AuthorizationPolicyItemResourceByIds" do
+    add_message "v1.AuthorizationPolicyRuleResourceByIds" do
       repeated :ids, :string, 1
     end
-    add_message "v1.AuthorizationPolicyItemResourceByTypeAndTags" do
+    add_message "v1.AuthorizationPolicyRuleResourceByTypeAndTags" do
       optional :type, :enum, 1, "v1.ResourceType"
       repeated :tags, :message, 2, "v1.Tag"
     end
-    add_message "v1.AuthorizationPolicyItemResourceByTypeTagsAndKubernetesGroups" do
+    add_message "v1.AuthorizationPolicyRuleResourceByTypeTagsAndKubernetesGroups" do
       optional :type, :enum, 1, "v1.ResourceType"
       repeated :tags, :message, 2, "v1.Tag"
       repeated :kubernetes_groups, :string, 3
     end
-    add_message "v1.AuthorizationPolicyItemResourceByOktaWithGroups" do
+    add_message "v1.AuthorizationPolicyRuleResourceByOktaWithGroups" do
       optional :resource_id, :string, 1
       repeated :groups, :string, 2
     end
-    add_message "v1.AuthorizationPolicyItemResourceByEntraWithGroups" do
+    add_message "v1.AuthorizationPolicyRuleResourceByEntraWithGroups" do
       optional :resource_id, :string, 1
       repeated :groups, :string, 2
     end
-    add_message "v1.AuthorizationPolicyItemConditionMFA" do
+    add_message "v1.AuthorizationPolicyRuleConditionMFA" do
       optional :reason, :string, 1
       optional :cache_timeout_seconds, :int32, 2
     end
-    add_message "v1.AuthorizationPolicyItemConditionDeviceTrust" do
+    add_message "v1.AuthorizationPolicyRuleConditionDeviceTrust" do
       optional :operator, :enum, 1, "v1.AuthorizationPolicyDeviceTrustOperator"
       optional :level, :enum, 2, "v1.AuthorizationPolicyDeviceTrustLevel"
     end
-    add_message "v1.AuthorizationPolicyItemConditionLocation" do
+    add_message "v1.AuthorizationPolicyRuleConditionLocation" do
       repeated :rules, :message, 1, "v1.AuthorizationPolicyLocationRule"
     end
     add_message "v1.AuthorizationPolicyLocationRule" do
@@ -152,7 +152,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :operator, :enum, 1, "v1.LocationOperator"
       repeated :subdivisions, :string, 2
     end
-    add_message "v1.AuthorizationPolicyItemConditionIP" do
+    add_message "v1.AuthorizationPolicyRuleConditionIP" do
       repeated :rules, :message, 1, "v1.AuthorizationPolicyIPRule"
     end
     add_message "v1.AuthorizationPolicyIPRule" do
@@ -160,7 +160,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :network, :enum, 2, "v1.AuthorizationPolicyIPNetwork"
       optional :cidr, :string, 3
     end
-    add_message "v1.AuthorizationPolicyItemConditionTime" do
+    add_message "v1.AuthorizationPolicyRuleConditionTime" do
       repeated :rules, :message, 1, "v1.AuthorizationPolicyTimeRule"
     end
     add_message "v1.AuthorizationPolicyTimeRule" do
@@ -202,7 +202,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
     add_message "v1.AuthorizationPolicyTimeRuleDaysOfMonth" do
       repeated :days, :int32, 1
     end
-    add_message "v1.AuthorizationPolicyItemConditionApprovalFlow" do
+    add_message "v1.AuthorizationPolicyRuleConditionApprovalFlow" do
       optional :approval_flow_id, :string, 1
     end
     add_enum "v1.AuthorizationPolicyState" do
@@ -269,25 +269,25 @@ module V1
   AuthorizationPolicyListRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyListRequest").msgclass
   AuthorizationPolicyListResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyListResponse").msgclass
   AuthorizationPolicy = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicy").msgclass
-  AuthorizationPolicyItem = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyItem").msgclass
-  AuthorizationPolicyItemPrincipalAll = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyItemPrincipalAll").msgclass
-  AuthorizationPolicyItemPrincipalByIds = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyItemPrincipalByIds").msgclass
-  AuthorizationPolicyItemResourcesAll = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyItemResourcesAll").msgclass
-  AuthorizationPolicyItemResourceByIds = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyItemResourceByIds").msgclass
-  AuthorizationPolicyItemResourceByTypeAndTags = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyItemResourceByTypeAndTags").msgclass
-  AuthorizationPolicyItemResourceByTypeTagsAndKubernetesGroups = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyItemResourceByTypeTagsAndKubernetesGroups").msgclass
-  AuthorizationPolicyItemResourceByOktaWithGroups = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyItemResourceByOktaWithGroups").msgclass
-  AuthorizationPolicyItemResourceByEntraWithGroups = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyItemResourceByEntraWithGroups").msgclass
-  AuthorizationPolicyItemConditionMFA = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyItemConditionMFA").msgclass
-  AuthorizationPolicyItemConditionDeviceTrust = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyItemConditionDeviceTrust").msgclass
-  AuthorizationPolicyItemConditionLocation = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyItemConditionLocation").msgclass
+  AuthorizationPolicyRule = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyRule").msgclass
+  AuthorizationPolicyRulePrincipalAll = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyRulePrincipalAll").msgclass
+  AuthorizationPolicyRulePrincipalByIds = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyRulePrincipalByIds").msgclass
+  AuthorizationPolicyRuleResourcesAll = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyRuleResourcesAll").msgclass
+  AuthorizationPolicyRuleResourceByIds = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyRuleResourceByIds").msgclass
+  AuthorizationPolicyRuleResourceByTypeAndTags = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyRuleResourceByTypeAndTags").msgclass
+  AuthorizationPolicyRuleResourceByTypeTagsAndKubernetesGroups = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyRuleResourceByTypeTagsAndKubernetesGroups").msgclass
+  AuthorizationPolicyRuleResourceByOktaWithGroups = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyRuleResourceByOktaWithGroups").msgclass
+  AuthorizationPolicyRuleResourceByEntraWithGroups = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyRuleResourceByEntraWithGroups").msgclass
+  AuthorizationPolicyRuleConditionMFA = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyRuleConditionMFA").msgclass
+  AuthorizationPolicyRuleConditionDeviceTrust = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyRuleConditionDeviceTrust").msgclass
+  AuthorizationPolicyRuleConditionLocation = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyRuleConditionLocation").msgclass
   AuthorizationPolicyLocationRule = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyLocationRule").msgclass
   AuthorizationPolicyContinentRule = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyContinentRule").msgclass
   AuthorizationPolicyCountryRule = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyCountryRule").msgclass
   AuthorizationPolicySubdivisionRule = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicySubdivisionRule").msgclass
-  AuthorizationPolicyItemConditionIP = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyItemConditionIP").msgclass
+  AuthorizationPolicyRuleConditionIP = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyRuleConditionIP").msgclass
   AuthorizationPolicyIPRule = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyIPRule").msgclass
-  AuthorizationPolicyItemConditionTime = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyItemConditionTime").msgclass
+  AuthorizationPolicyRuleConditionTime = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyRuleConditionTime").msgclass
   AuthorizationPolicyTimeRule = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyTimeRule").msgclass
   AuthorizationPolicyTimeRuleDayOfWeek = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyTimeRuleDayOfWeek").msgclass
   LegacyAuthorizationPolicyTimeRuleTimeOfDay = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.LegacyAuthorizationPolicyTimeRuleTimeOfDay").msgclass
@@ -295,7 +295,7 @@ module V1
   AuthorizationPolicyTimeRuleTimeOfDay = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyTimeRuleTimeOfDay").msgclass
   AuthorizationPolicyTimeRuleMonth = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyTimeRuleMonth").msgclass
   AuthorizationPolicyTimeRuleDaysOfMonth = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyTimeRuleDaysOfMonth").msgclass
-  AuthorizationPolicyItemConditionApprovalFlow = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyItemConditionApprovalFlow").msgclass
+  AuthorizationPolicyRuleConditionApprovalFlow = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyRuleConditionApprovalFlow").msgclass
   AuthorizationPolicyState = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyState").enummodule
   AuthorizationPolicyDeviceTrustOperator = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyDeviceTrustOperator").enummodule
   AuthorizationPolicyDeviceTrustLevel = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AuthorizationPolicyDeviceTrustLevel").enummodule

data/lib/grpc/drivers_pb.rb

@@ -1419,6 +1419,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :subdomain, :string, 32775
       optional :hostname, :string, 1
       optional :port_override, :int32, 4
+      optional :url, :string, 9
     end
     add_message "v1.MCPGatewayOAuth" do
       optional :id, :string, 32768
@@ -1436,6 +1437,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :oauth_token_endpoint, :string, 9
       optional :password, :string, 2
       optional :port_override, :int32, 4
+      optional :url, :string, 12
       optional :username, :string, 6
     end
     add_message "v1.MCPGatewayOAuthDCR" do
@@ -1454,6 +1456,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :oauth_scopes, :string, 12
       optional :oauth_token_endpoint, :string, 9
       optional :port_override, :int32, 4
+      optional :url, :string, 13
     end
     add_message "v1.MCPGatewayPAT" do
       optional :id, :string, 32768
@@ -1468,6 +1471,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :hostname, :string, 1
       optional :password, :string, 2
       optional :port_override, :int32, 4
+      optional :url, :string, 9
     end
     add_message "v1.MTLSMysql" do
       optional :id, :string, 32768
@@ -2033,6 +2037,8 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :allow_deprecated_encryption, :bool, 12
       optional :database, :string, 4
       optional :hostname, :string, 1
+      optional :identity_alias_healthcheck_username, :string, 14
+      optional :identity_set_id, :string, 13
       optional :keytab, :string, 3
       optional :krb_config, :string, 9
       optional :override_database, :bool, 8

data/lib/grpc/plumbing.rb

@@ -11124,6 +11124,7 @@ module SDM
       porcelain.secret_store_id = (plumbing.secret_store_id)
       porcelain.subdomain = (plumbing.subdomain)
       porcelain.tags = convert_tags_to_porcelain(plumbing.tags)
+      porcelain.url = (plumbing.url)
       porcelain
     end
 
@@ -11143,6 +11144,7 @@ module SDM
       plumbing.secret_store_id = (porcelain.secret_store_id)
       plumbing.subdomain = (porcelain.subdomain)
       plumbing.tags = convert_tags_to_plumbing(porcelain.tags)
+      plumbing.url = (porcelain.url)
       plumbing
     end
     def self.convert_repeated_mcp_gateway_no_auth_to_plumbing(porcelains)
@@ -11182,6 +11184,7 @@ module SDM
       porcelain.secret_store_id = (plumbing.secret_store_id)
       porcelain.subdomain = (plumbing.subdomain)
       porcelain.tags = convert_tags_to_porcelain(plumbing.tags)
+      porcelain.url = (plumbing.url)
       porcelain.username = (plumbing.username)
       porcelain
     end
@@ -11206,6 +11209,7 @@ module SDM
       plumbing.secret_store_id = (porcelain.secret_store_id)
       plumbing.subdomain = (porcelain.subdomain)
       plumbing.tags = convert_tags_to_plumbing(porcelain.tags)
+      plumbing.url = (porcelain.url)
       plumbing.username = (porcelain.username)
       plumbing
     end
@@ -11246,6 +11250,7 @@ module SDM
       porcelain.secret_store_id = (plumbing.secret_store_id)
       porcelain.subdomain = (plumbing.subdomain)
       porcelain.tags = convert_tags_to_porcelain(plumbing.tags)
+      porcelain.url = (plumbing.url)
       porcelain
     end
 
@@ -11269,6 +11274,7 @@ module SDM
       plumbing.secret_store_id = (porcelain.secret_store_id)
       plumbing.subdomain = (porcelain.subdomain)
       plumbing.tags = convert_tags_to_plumbing(porcelain.tags)
+      plumbing.url = (porcelain.url)
       plumbing
     end
     def self.convert_repeated_mcp_gateway_o_auth_dcr_to_plumbing(porcelains)
@@ -11305,6 +11311,7 @@ module SDM
       porcelain.secret_store_id = (plumbing.secret_store_id)
       porcelain.subdomain = (plumbing.subdomain)
       porcelain.tags = convert_tags_to_porcelain(plumbing.tags)
+      porcelain.url = (plumbing.url)
       porcelain
     end
 
@@ -11325,6 +11332,7 @@ module SDM
       plumbing.secret_store_id = (porcelain.secret_store_id)
       plumbing.subdomain = (porcelain.subdomain)
       plumbing.tags = convert_tags_to_plumbing(porcelain.tags)
+      plumbing.url = (porcelain.url)
       plumbing
     end
     def self.convert_repeated_mcp_gateway_pat_to_plumbing(porcelains)
@@ -17944,6 +17952,8 @@ module SDM
       porcelain.healthy = (plumbing.healthy)
       porcelain.hostname = (plumbing.hostname)
       porcelain.id = (plumbing.id)
+      porcelain.identity_alias_healthcheck_username = (plumbing.identity_alias_healthcheck_username)
+      porcelain.identity_set_id = (plumbing.identity_set_id)
       porcelain.keytab = (plumbing.keytab)
       porcelain.krb_config = (plumbing.krb_config)
       porcelain.name = (plumbing.name)
@@ -17973,6 +17983,8 @@ module SDM
       plumbing.healthy = (porcelain.healthy)
       plumbing.hostname = (porcelain.hostname)
       plumbing.id = (porcelain.id)
+      plumbing.identity_alias_healthcheck_username = (porcelain.identity_alias_healthcheck_username)
+      plumbing.identity_set_id = (porcelain.identity_set_id)
       plumbing.keytab = (porcelain.keytab)
       plumbing.krb_config = (porcelain.krb_config)
       plumbing.name = (porcelain.name)

data/lib/models/porcelain.rb

@@ -10374,6 +10374,8 @@ module SDM
     attr_accessor :subdomain
     # Tags is a map of key, value pairs.
     attr_accessor :tags
+    # The URL to dial to initiate a connection from the egress node to this resource.
+    attr_accessor :url
 
     def initialize(
       bind_interface: nil,
@@ -10386,7 +10388,8 @@ module SDM
       proxy_cluster_id: nil,
       secret_store_id: nil,
       subdomain: nil,
-      tags: nil
+      tags: nil,
+      url: nil
     )
       @bind_interface = bind_interface == nil ? "" : bind_interface
       @egress_filter = egress_filter == nil ? "" : egress_filter
@@ -10399,6 +10402,7 @@ module SDM
       @secret_store_id = secret_store_id == nil ? "" : secret_store_id
       @subdomain = subdomain == nil ? "" : subdomain
       @tags = tags == nil ? SDM::_porcelain_zero_value_tags() : tags
+      @url = url == nil ? "" : url
     end
 
     def to_json(options = {})
@@ -10441,6 +10445,8 @@ module SDM
     attr_accessor :subdomain
     # Tags is a map of key, value pairs.
     attr_accessor :tags
+    # The URL to dial to initiate a connection from the egress node to this resource.
+    attr_accessor :url
     # OAuth App Client ID
     attr_accessor :username
 
@@ -10460,6 +10466,7 @@ module SDM
       secret_store_id: nil,
       subdomain: nil,
       tags: nil,
+      url: nil,
       username: nil
     )
       @bind_interface = bind_interface == nil ? "" : bind_interface
@@ -10477,6 +10484,7 @@ module SDM
       @secret_store_id = secret_store_id == nil ? "" : secret_store_id
       @subdomain = subdomain == nil ? "" : subdomain
       @tags = tags == nil ? SDM::_porcelain_zero_value_tags() : tags
+      @url = url == nil ? "" : url
       @username = username == nil ? "" : username
     end
 
@@ -10521,6 +10529,8 @@ module SDM
     attr_accessor :subdomain
     # Tags is a map of key, value pairs.
     attr_accessor :tags
+    # The URL to dial to initiate a connection from the egress node to this resource.
+    attr_accessor :url
 
     def initialize(
       bind_interface: nil,
@@ -10537,7 +10547,8 @@ module SDM
       proxy_cluster_id: nil,
       secret_store_id: nil,
       subdomain: nil,
-      tags: nil
+      tags: nil,
+      url: nil
     )
       @bind_interface = bind_interface == nil ? "" : bind_interface
       @egress_filter = egress_filter == nil ? "" : egress_filter
@@ -10554,6 +10565,7 @@ module SDM
       @secret_store_id = secret_store_id == nil ? "" : secret_store_id
       @subdomain = subdomain == nil ? "" : subdomain
       @tags = tags == nil ? SDM::_porcelain_zero_value_tags() : tags
+      @url = url == nil ? "" : url
     end
 
     def to_json(options = {})
@@ -10590,6 +10602,8 @@ module SDM
     attr_accessor :subdomain
     # Tags is a map of key, value pairs.
     attr_accessor :tags
+    # The URL to dial to initiate a connection from the egress node to this resource.
+    attr_accessor :url
 
     def initialize(
       bind_interface: nil,
@@ -10603,7 +10617,8 @@ module SDM
       proxy_cluster_id: nil,
       secret_store_id: nil,
       subdomain: nil,
-      tags: nil
+      tags: nil,
+      url: nil
     )
       @bind_interface = bind_interface == nil ? "" : bind_interface
       @egress_filter = egress_filter == nil ? "" : egress_filter
@@ -10617,6 +10632,7 @@ module SDM
       @secret_store_id = secret_store_id == nil ? "" : secret_store_id
       @subdomain = subdomain == nil ? "" : subdomain
       @tags = tags == nil ? SDM::_porcelain_zero_value_tags() : tags
+      @url = url == nil ? "" : url
     end
 
     def to_json(options = {})
@@ -16244,6 +16260,10 @@ module SDM
     attr_accessor :hostname
     # Unique identifier of the Resource.
     attr_accessor :id
+    # The username to use for healthchecks, when clients otherwise connect with their own identity alias username.
+    attr_accessor :identity_alias_healthcheck_username
+    # The ID of the identity set to use for identity connections.
+    attr_accessor :identity_set_id
     # The keytab file in base64 format containing an entry with the principal name (username@realm) and key version number with which to authenticate.
     attr_accessor :keytab
     # The Kerberos 5 configuration file (krb5.conf) specifying the Active Directory server (KDC) for the configured realm.
@@ -16281,6 +16301,8 @@ module SDM
       healthy: nil,
       hostname: nil,
       id: nil,
+      identity_alias_healthcheck_username: nil,
+      identity_set_id: nil,
       keytab: nil,
       krb_config: nil,
       name: nil,
@@ -16303,6 +16325,8 @@ module SDM
       @healthy = healthy == nil ? false : healthy
       @hostname = hostname == nil ? "" : hostname
       @id = id == nil ? "" : id
+      @identity_alias_healthcheck_username = identity_alias_healthcheck_username == nil ? "" : identity_alias_healthcheck_username
+      @identity_set_id = identity_set_id == nil ? "" : identity_set_id
       @keytab = keytab == nil ? "" : keytab
       @krb_config = krb_config == nil ? "" : krb_config
       @name = name == nil ? "" : name

data/lib/strongdm.rb

@@ -31,7 +31,7 @@ module SDM #:nodoc:
     DEFAULT_RETRY_FACTOR = 1.6
     DEFAULT_RETRY_JITTER = 0.2
     API_VERSION = "2025-04-14"
-    USER_AGENT = "strongdm-sdk-ruby/16.23.0"
+    USER_AGENT = "strongdm-sdk-ruby/17.1.0"
     private_constant :DEFAULT_BASE_RETRY_DELAY, :DEFAULT_MAX_RETRY_DELAY, :DEFAULT_RETRY_FACTOR, :DEFAULT_RETRY_JITTER, :API_VERSION, :USER_AGENT
 
     # Creates a new strongDM API client.

data/lib/version

@@ -13,5 +13,5 @@
 # limitations under the License.
 #
 module SDM
-  VERSION = "16.23.0"
+  VERSION = "17.1.0"
 end

data/lib/version.rb

@@ -13,5 +13,5 @@
 # limitations under the License.
 #
 module SDM
-  VERSION = "16.23.0"
+  VERSION = "17.1.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: strongdm
 version: !ruby/object:Gem::Version
-  version: 16.23.0
+  version: 17.1.0
 platform: ruby
 authors:
 - strongDM Team
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2026-03-25 00:00:00.000000000 Z
+date: 2026-04-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: grpc
@@ -81,8 +81,8 @@ files:
 - "./.git/logs/HEAD"
 - "./.git/logs/refs/heads/master"
 - "./.git/logs/refs/remotes/origin/HEAD"
-- "./.git/objects/pack/pack-f7e84d4173252b1762d4ce3da38f32a3b0a687ba.idx"
-- "./.git/objects/pack/pack-f7e84d4173252b1762d4ce3da38f32a3b0a687ba.pack"
+- "./.git/objects/pack/pack-8883014742378b7fdf0c34a97562b9df2d80609b.idx"
+- "./.git/objects/pack/pack-8883014742378b7fdf0c34a97562b9df2d80609b.pack"
 - "./.git/packed-refs"
 - "./.git/refs/heads/master"
 - "./.git/refs/remotes/origin/HEAD"