strongdm 3.16.0 → 3.18.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e0f3b1a50649e61fe97ebc70f9ed3044d3d041565479cfabcfd0015ee773c739
-  data.tar.gz: 4e08077b68b48ff21c2d44077342aa9a5f6ac9f1672c2ff47151ec0bfa9b24eb
+  metadata.gz: 8b966417999f917f548d43b50133607ab79cb603f20a2b23fb76c1342b1fbfd7
+  data.tar.gz: 284fb54a2e0afa33ed2138be0fc8a6e794b8b19fa1c3c12812baa51c50b8847c
 SHA512:
-  metadata.gz: 5d65294bae92744c9aad29f619b423e3339047b3d404299358749f68bf913fb3103d004e09e09c49499cea2483be0a2503f711164406d7e60b9a67edc45a4efc
-  data.tar.gz: 282e2cedd248a69709093bc8d036e09985dfcdb30f3c1f50645c372a0f300ed0001dffe096b9c4b2185f6627bc9b7698e3bbe883ab09bca53502162936782ad1
+  metadata.gz: 5fe73fce198f106fffee8b15f563af6346fdaaf10cb3ed5a60faa04c720bac54f0e5a322f1c4eeee330cb309be6945bad7941e1205fbcda37738fb79f711b4d3
+  data.tar.gz: adbc374f191a40274c50b4b57dc8fa7f2f9804c33990ad39d3f6fd542898a219e1c7dcba5b14281e9e7de938e465cda898badf6aff39e34ad533edc7019695a3

data/.git/ORIG_HEAD

@@ -1 +1 @@
-6e8ee132772d2663157a4263aa15ddffeac7486f
+7e8c95f92b7ab35d93eec71a3e6b378bbe4e8d36

data/.git/logs/HEAD

@@ -1,3 +1,3 @@
-0000000000000000000000000000000000000000 6e8ee132772d2663157a4263aa15ddffeac7486f root <root@6f7a2746669b.(none)> 1686580773 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
-6e8ee132772d2663157a4263aa15ddffeac7486f 6e8ee132772d2663157a4263aa15ddffeac7486f root <root@6f7a2746669b.(none)> 1686580773 +0000	checkout: moving from master to master
-6e8ee132772d2663157a4263aa15ddffeac7486f a469b2d58875fd54ce9a67154bd8feaa73588449 root <root@6f7a2746669b.(none)> 1686580773 +0000	merge origin/development: Fast-forward
+0000000000000000000000000000000000000000 7e8c95f92b7ab35d93eec71a3e6b378bbe4e8d36 root <root@59bedabef593.(none)> 1688742042 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
+7e8c95f92b7ab35d93eec71a3e6b378bbe4e8d36 7e8c95f92b7ab35d93eec71a3e6b378bbe4e8d36 root <root@59bedabef593.(none)> 1688742042 +0000	checkout: moving from master to master
+7e8c95f92b7ab35d93eec71a3e6b378bbe4e8d36 0d2955c2c2f11a0bd128d6b6a45b5d0c741b9789 root <root@59bedabef593.(none)> 1688742042 +0000	merge origin/development: Fast-forward

data/.git/logs/refs/heads/master

@@ -1,2 +1,2 @@
-0000000000000000000000000000000000000000 6e8ee132772d2663157a4263aa15ddffeac7486f root <root@6f7a2746669b.(none)> 1686580773 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
-6e8ee132772d2663157a4263aa15ddffeac7486f a469b2d58875fd54ce9a67154bd8feaa73588449 root <root@6f7a2746669b.(none)> 1686580773 +0000	merge origin/development: Fast-forward
+0000000000000000000000000000000000000000 7e8c95f92b7ab35d93eec71a3e6b378bbe4e8d36 root <root@59bedabef593.(none)> 1688742042 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
+7e8c95f92b7ab35d93eec71a3e6b378bbe4e8d36 0d2955c2c2f11a0bd128d6b6a45b5d0c741b9789 root <root@59bedabef593.(none)> 1688742042 +0000	merge origin/development: Fast-forward

data/.git/logs/refs/remotes/origin/HEAD

@@ -1 +1 @@
-0000000000000000000000000000000000000000 6e8ee132772d2663157a4263aa15ddffeac7486f root <root@6f7a2746669b.(none)> 1686580773 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
+0000000000000000000000000000000000000000 7e8c95f92b7ab35d93eec71a3e6b378bbe4e8d36 root <root@59bedabef593.(none)> 1688742042 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git

data/.git/packed-refs

@@ -1,6 +1,6 @@
 # pack-refs with: peeled fully-peeled sorted 
-a469b2d58875fd54ce9a67154bd8feaa73588449 refs/remotes/origin/development
-6e8ee132772d2663157a4263aa15ddffeac7486f refs/remotes/origin/master
+0d2955c2c2f11a0bd128d6b6a45b5d0c741b9789 refs/remotes/origin/development
+7e8c95f92b7ab35d93eec71a3e6b378bbe4e8d36 refs/remotes/origin/master
 2e4fe8087177ddea9b3991ca499f758384839c89 refs/tags/untagged-84fd83a4484c785cce63
 04f604866214fab4d5663b5171a3e596331577bd refs/tags/v0.9.4
 6f9a7b75b345c65fb554884907b7060680c807b7 refs/tags/v0.9.5
@@ -49,6 +49,8 @@ f880c51210aa33186d71d9b463ddbd587ef3e4fd refs/tags/v3.12.0
 8192d0d63f6b0357b343ee32a9e436bcaad28ebe refs/tags/v3.14.0
 6cd69f8e98657b0aa1c55786add9519085361ef2 refs/tags/v3.14.2
 6e8ee132772d2663157a4263aa15ddffeac7486f refs/tags/v3.15.0
+a469b2d58875fd54ce9a67154bd8feaa73588449 refs/tags/v3.16.0
+7e8c95f92b7ab35d93eec71a3e6b378bbe4e8d36 refs/tags/v3.17.0
 40d185ce8d4f4375411706886f6fbbaa5493bef6 refs/tags/v3.2.0
 dd6a8a74ad5675831f42e3a820208e96f7361f80 refs/tags/v3.2.1
 09ee1a3be370a7b5e21709a7857d0f189f23da8b refs/tags/v3.2.2

data/.git/refs/heads/master

@@ -1 +1 @@
-a469b2d58875fd54ce9a67154bd8feaa73588449
+0d2955c2c2f11a0bd128d6b6a45b5d0c741b9789

data/lib/constants.rb

@@ -255,6 +255,9 @@ module SDM
     WORKFLOW_DESCRIPTION_UPDATED = "workflow description updated"
     WORKFLOW_AUTO_GRANT_UPDATED = "workflow auto grant updated"
     WORKFLOW_REQUIRES_REASON_UPDATED = "workflow requires reason updated"
+    WORKFLOW_ACCESS_RULES_UPDATED = "workflow access rules updated"
+    WORKFLOW_ACCESS_RULES_DELETED = "workflow access rules deleted"
+    WORKFLOW_ACCESS_RULES_CREATED = "workflow access rules created"
     ORG_VNM_SUBNET_UPDATED = "organization VNM subnet updated"
     ORG_VNM_RESOURCES_ALLOCATED = "organization resources allocated within VNM subnet"
     DEPRECATED_ORG_ACTIVATE_DEVICE_APPROVAL = "activate device approval"
@@ -265,6 +268,9 @@ module SDM
     TOTP_ENROLLMENT_ADDED = "user enrolled a totp device"
     TOTP_ENROLLMENT_DELETED = "user reset their totp enrollment"
     SUSPENDED_USER_ENROLL_ATTEMPT_FROM_THE_UI = "attempt to enroll by a suspended user from the Admin UI"
+    RESOURCE_LOCKED = "user locked a resource"
+    RESOURCE_UNLOCKED = "user unlocked a resource"
+    RESOURCE_FORCE_UNLOCKED = "admin force-unlocked a resource"
   end
 
   # Permissions, all permissions that may be granted to an account.
@@ -423,4 +429,11 @@ module SDM
     K_8_S_APPLY = "k8s-apply"
     SSH_PORT_FORWARD = "ssh-portForward"
   end
+
+  # Providers responsible for device posture enforcement
+  module DevicePostureProvider
+    NONE = ""
+    SENTINEL_ONE = "sentinelone"
+    CROWD_STRIKE = "crowdstrike"
+  end
 end

data/lib/grpc/activities_pb.rb

@@ -48,6 +48,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       repeated :entities, :message, 5, "v1.ActivityEntity"
       optional :ip_address, :string, 6
       optional :actor, :message, 7, "v1.ActivityActor"
+      optional :user_agent, :string, 8
     end
     add_message "v1.ActivityEntity" do
       optional :id, :string, 1

data/lib/grpc/drivers_pb.rb

@@ -44,6 +44,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
         optional :azure_certificate, :message, 2801, "v1.AzureCertificate"
         optional :azure_mysql, :message, 1107, "v1.AzureMysql"
         optional :azure_postgres, :message, 1307, "v1.AzurePostgres"
+        optional :azure_postgres_managed_identity, :message, 1308, "v1.AzurePostgresManagedIdentity"
         optional :big_query, :message, 200, "v1.BigQuery"
         optional :cassandra, :message, 300, "v1.Cassandra"
         optional :citus, :message, 1305, "v1.Citus"
@@ -472,6 +473,24 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :port_override, :int32, 5
       optional :username, :string, 2
     end
+    add_message "v1.AzurePostgresManagedIdentity" do
+      optional :id, :string, 32768
+      optional :name, :string, 32769
+      optional :healthy, :bool, 32770
+      optional :tags, :message, 32771, "v1.Tags"
+      optional :secret_store_id, :string, 32772
+      optional :egress_filter, :string, 32773
+      optional :bind_interface, :string, 32774
+      optional :subdomain, :string, 32775
+      optional :database, :string, 4
+      optional :hostname, :string, 1
+      optional :override_database, :bool, 7
+      optional :password, :string, 3
+      optional :port, :int32, 6
+      optional :port_override, :int32, 5
+      optional :use_azure_single_server_usernames, :bool, 10
+      optional :username, :string, 2
+    end
     add_message "v1.BigQuery" do
       optional :id, :string, 32768
       optional :name, :string, 32769
@@ -1168,6 +1187,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :subdomain, :string, 32775
       optional :downgrade_nla_connections, :bool, 6
       optional :hostname, :string, 1
+      optional :lock_required, :bool, 10
       optional :password, :string, 3
       optional :port, :int32, 5
       optional :port_override, :int32, 4
@@ -1481,6 +1501,7 @@ module V1
   AzureCertificate = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AzureCertificate").msgclass
   AzureMysql = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AzureMysql").msgclass
   AzurePostgres = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AzurePostgres").msgclass
+  AzurePostgresManagedIdentity = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AzurePostgresManagedIdentity").msgclass
   BigQuery = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.BigQuery").msgclass
   Cassandra = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.Cassandra").msgclass
   Citus = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.Citus").msgclass

data/lib/grpc/nodes_pb.rb

@@ -83,6 +83,9 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :device, :string, 6
       optional :location, :string, 7
       optional :version, :string, 8
+      optional :uuid, :string, 9
+      optional :connects_to, :string, 10
+      repeated :maintenance_windows, :message, 11, "v1.NodeMaintenanceWindow"
     end
     add_message "v1.Gateway" do
       optional :id, :string, 1
@@ -95,6 +98,13 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :device, :string, 8
       optional :location, :string, 9
       optional :version, :string, 10
+      optional :uuid, :string, 11
+      optional :connects_to, :string, 12
+      repeated :maintenance_windows, :message, 13, "v1.NodeMaintenanceWindow"
+    end
+    add_message "v1.NodeMaintenanceWindow" do
+      optional :cron_schedule, :string, 1
+      optional :require_idleness, :bool, 2
     end
   end
 end
@@ -113,4 +123,5 @@ module V1
   Node = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.Node").msgclass
   Relay = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.Relay").msgclass
   Gateway = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.Gateway").msgclass
+  NodeMaintenanceWindow = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.NodeMaintenanceWindow").msgclass
 end

data/lib/grpc/plumbing.rb

@@ -1439,6 +1439,7 @@ module SDM
       porcelain.entities = convert_repeated_activity_entity_to_porcelain(plumbing.entities)
       porcelain.id = (plumbing.id)
       porcelain.ip_address = (plumbing.ip_address)
+      porcelain.user_agent = (plumbing.user_agent)
       porcelain.verb = (plumbing.verb)
       porcelain
     end
@@ -1454,6 +1455,7 @@ module SDM
       plumbing.entities += convert_repeated_activity_entity_to_plumbing(porcelain.entities)
       plumbing.id = (porcelain.id)
       plumbing.ip_address = (porcelain.ip_address)
+      plumbing.user_agent = (porcelain.user_agent)
       plumbing.verb = (porcelain.verb)
       plumbing
     end
@@ -2420,6 +2422,70 @@ module SDM
       end
       items
     end
+    def self.convert_azure_postgres_managed_identity_to_porcelain(plumbing)
+      if plumbing == nil
+        return nil
+      end
+      porcelain = AzurePostgresManagedIdentity.new()
+      porcelain.bind_interface = (plumbing.bind_interface)
+      porcelain.database = (plumbing.database)
+      porcelain.egress_filter = (plumbing.egress_filter)
+      porcelain.healthy = (plumbing.healthy)
+      porcelain.hostname = (plumbing.hostname)
+      porcelain.id = (plumbing.id)
+      porcelain.name = (plumbing.name)
+      porcelain.override_database = (plumbing.override_database)
+      porcelain.password = (plumbing.password)
+      porcelain.port = (plumbing.port)
+      porcelain.port_override = (plumbing.port_override)
+      porcelain.secret_store_id = (plumbing.secret_store_id)
+      porcelain.subdomain = (plumbing.subdomain)
+      porcelain.tags = convert_tags_to_porcelain(plumbing.tags)
+      porcelain.use_azure_single_server_usernames = (plumbing.use_azure_single_server_usernames)
+      porcelain.username = (plumbing.username)
+      porcelain
+    end
+
+    def self.convert_azure_postgres_managed_identity_to_plumbing(porcelain)
+      if porcelain == nil
+        return nil
+      end
+      plumbing = V1::AzurePostgresManagedIdentity.new()
+      plumbing.bind_interface = (porcelain.bind_interface)
+      plumbing.database = (porcelain.database)
+      plumbing.egress_filter = (porcelain.egress_filter)
+      plumbing.healthy = (porcelain.healthy)
+      plumbing.hostname = (porcelain.hostname)
+      plumbing.id = (porcelain.id)
+      plumbing.name = (porcelain.name)
+      plumbing.override_database = (porcelain.override_database)
+      plumbing.password = (porcelain.password)
+      plumbing.port = (porcelain.port)
+      plumbing.port_override = (porcelain.port_override)
+      plumbing.secret_store_id = (porcelain.secret_store_id)
+      plumbing.subdomain = (porcelain.subdomain)
+      plumbing.tags = convert_tags_to_plumbing(porcelain.tags)
+      plumbing.use_azure_single_server_usernames = (porcelain.use_azure_single_server_usernames)
+      plumbing.username = (porcelain.username)
+      plumbing
+    end
+    def self.convert_repeated_azure_postgres_managed_identity_to_plumbing(porcelains)
+      items = Array.new
+      porcelains.each do |porcelain|
+        plumbing = convert_azure_postgres_managed_identity_to_plumbing(porcelain)
+        items.append(plumbing)
+      end
+      items
+    end
+
+    def self.convert_repeated_azure_postgres_managed_identity_to_porcelain(plumbings)
+      items = Array.new
+      plumbings.each do |plumbing|
+        porcelain = convert_azure_postgres_managed_identity_to_porcelain(plumbing)
+        items.append(porcelain)
+      end
+      items
+    end
     def self.convert_azure_store_to_porcelain(plumbing)
       if plumbing == nil
         return nil
@@ -3650,11 +3716,13 @@ module SDM
       end
       porcelain = Gateway.new()
       porcelain.bind_address = (plumbing.bind_address)
+      porcelain.connects_to = (plumbing.connects_to)
       porcelain.device = (plumbing.device)
       porcelain.gateway_filter = (plumbing.gateway_filter)
       porcelain.id = (plumbing.id)
       porcelain.listen_address = (plumbing.listen_address)
       porcelain.location = (plumbing.location)
+      porcelain.maintenance_windows = convert_repeated_node_maintenance_window_to_porcelain(plumbing.maintenance_windows)
       porcelain.name = (plumbing.name)
       porcelain.state = (plumbing.state)
       porcelain.tags = convert_tags_to_porcelain(plumbing.tags)
@@ -3668,11 +3736,13 @@ module SDM
       end
       plumbing = V1::Gateway.new()
       plumbing.bind_address = (porcelain.bind_address)
+      plumbing.connects_to = (porcelain.connects_to)
       plumbing.device = (porcelain.device)
       plumbing.gateway_filter = (porcelain.gateway_filter)
       plumbing.id = (porcelain.id)
       plumbing.listen_address = (porcelain.listen_address)
       plumbing.location = (porcelain.location)
+      plumbing.maintenance_windows += convert_repeated_node_maintenance_window_to_plumbing(porcelain.maintenance_windows)
       plumbing.name = (porcelain.name)
       plumbing.state = (porcelain.state)
       plumbing.tags = convert_tags_to_plumbing(porcelain.tags)
@@ -5415,6 +5485,42 @@ module SDM
       end
       items
     end
+    def self.convert_node_maintenance_window_to_porcelain(plumbing)
+      if plumbing == nil
+        return nil
+      end
+      porcelain = NodeMaintenanceWindow.new()
+      porcelain.cron_schedule = (plumbing.cron_schedule)
+      porcelain.require_idleness = (plumbing.require_idleness)
+      porcelain
+    end
+
+    def self.convert_node_maintenance_window_to_plumbing(porcelain)
+      if porcelain == nil
+        return nil
+      end
+      plumbing = V1::NodeMaintenanceWindow.new()
+      plumbing.cron_schedule = (porcelain.cron_schedule)
+      plumbing.require_idleness = (porcelain.require_idleness)
+      plumbing
+    end
+    def self.convert_repeated_node_maintenance_window_to_plumbing(porcelains)
+      items = Array.new
+      porcelains.each do |porcelain|
+        plumbing = convert_node_maintenance_window_to_plumbing(porcelain)
+        items.append(plumbing)
+      end
+      items
+    end
+
+    def self.convert_repeated_node_maintenance_window_to_porcelain(plumbings)
+      items = Array.new
+      plumbings.each do |plumbing|
+        porcelain = convert_node_maintenance_window_to_porcelain(plumbing)
+        items.append(porcelain)
+      end
+      items
+    end
     def self.convert_node_update_response_to_porcelain(plumbing)
       if plumbing == nil
         return nil
@@ -6234,10 +6340,12 @@ module SDM
         return nil
       end
       porcelain = Relay.new()
+      porcelain.connects_to = (plumbing.connects_to)
       porcelain.device = (plumbing.device)
       porcelain.gateway_filter = (plumbing.gateway_filter)
       porcelain.id = (plumbing.id)
       porcelain.location = (plumbing.location)
+      porcelain.maintenance_windows = convert_repeated_node_maintenance_window_to_porcelain(plumbing.maintenance_windows)
       porcelain.name = (plumbing.name)
       porcelain.state = (plumbing.state)
       porcelain.tags = convert_tags_to_porcelain(plumbing.tags)
@@ -6250,10 +6358,12 @@ module SDM
         return nil
       end
       plumbing = V1::Relay.new()
+      plumbing.connects_to = (porcelain.connects_to)
       plumbing.device = (porcelain.device)
       plumbing.gateway_filter = (porcelain.gateway_filter)
       plumbing.id = (porcelain.id)
       plumbing.location = (porcelain.location)
+      plumbing.maintenance_windows += convert_repeated_node_maintenance_window_to_plumbing(porcelain.maintenance_windows)
       plumbing.name = (porcelain.name)
       plumbing.state = (porcelain.state)
       plumbing.tags = convert_tags_to_plumbing(porcelain.tags)
@@ -6761,6 +6871,9 @@ module SDM
       if porcelain.instance_of? AzurePostgres
         plumbing.azure_postgres = convert_azure_postgres_to_plumbing(porcelain)
       end
+      if porcelain.instance_of? AzurePostgresManagedIdentity
+        plumbing.azure_postgres_managed_identity = convert_azure_postgres_managed_identity_to_plumbing(porcelain)
+      end
       if porcelain.instance_of? BigQuery
         plumbing.big_query = convert_big_query_to_plumbing(porcelain)
       end
@@ -7008,6 +7121,9 @@ module SDM
       if plumbing.azure_postgres != nil
         return convert_azure_postgres_to_porcelain(plumbing.azure_postgres)
       end
+      if plumbing.azure_postgres_managed_identity != nil
+        return convert_azure_postgres_managed_identity_to_porcelain(plumbing.azure_postgres_managed_identity)
+      end
       if plumbing.big_query != nil
         return convert_big_query_to_porcelain(plumbing.big_query)
       end