strongdm 3.9.0 → 3.11.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 86a8357bf019f835f2205d750fd911fecc1ab7df0a2f44f51e00f2e814a4593f
-  data.tar.gz: 3f2bec142d40f6ebd1923043094a324ca55d0efc939f850aa46197cb142baa8d
+  metadata.gz: 05d015d4f19aaf6ab38e9215d9f4012099b40c9749b58051ee3c907833eaeef5
+  data.tar.gz: a750ed1f27766b71aa28f38eb781fe9d7d8af82897443d1b04c0d9f3a2e64891
 SHA512:
-  metadata.gz: 152b41187b3b89f90a6d059fe009bb278b71fe6fad96502341bc8ecd42096c1706e6cd54d5b6c2f574bf1848e752340a23b967233676d81d261508ae832a5ebb
-  data.tar.gz: 20820ef6a06f97aef35dda453dbd784171cfc764d5e2a6b00f741971e57da52486179509fe92845e86fb2910b844fe2b0f1d022531e833ef756f25c6c9442e18
+  metadata.gz: 82d005454840630dfc91a4e5f890f92a1471285fae855a263f7d2974252a10f8ebb11ff609126ce7832c65cbf93d3c32815ace8dd07a8eed29805001f27d0fa3
+  data.tar.gz: 83cf7a434781fe5e190ecd30bad6b302a9942123f4d1d799f168fa018beff24110bff89d061ec8813d81326e5b0e096c3bb5b1d47ead74dc73a0c124d2bee925

data/.git/ORIG_HEAD

@@ -1 +1 @@
-07687e72efc8785eb9de64ef2d27056c6f9e3413
+fb276eee8a0b2cc1415c25962410309b645373ed

data/.git/logs/HEAD

@@ -1,3 +1,3 @@
-0000000000000000000000000000000000000000 07687e72efc8785eb9de64ef2d27056c6f9e3413 root <root@c8bf43e8bd19.(none)> 1679529693 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
-07687e72efc8785eb9de64ef2d27056c6f9e3413 07687e72efc8785eb9de64ef2d27056c6f9e3413 root <root@c8bf43e8bd19.(none)> 1679529693 +0000	checkout: moving from master to master
-07687e72efc8785eb9de64ef2d27056c6f9e3413 996c2591e6d895f404e977133bda196e723e1dd9 root <root@c8bf43e8bd19.(none)> 1679529693 +0000	merge origin/development: Fast-forward
+0000000000000000000000000000000000000000 fb276eee8a0b2cc1415c25962410309b645373ed root <root@8ff708ee8c17.(none)> 1681499499 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
+fb276eee8a0b2cc1415c25962410309b645373ed fb276eee8a0b2cc1415c25962410309b645373ed root <root@8ff708ee8c17.(none)> 1681499499 +0000	checkout: moving from master to master
+fb276eee8a0b2cc1415c25962410309b645373ed a77792a22449d0029bebb3f66fc23f63e54a8e90 root <root@8ff708ee8c17.(none)> 1681499499 +0000	merge origin/development: Fast-forward

data/.git/logs/refs/heads/master

@@ -1,2 +1,2 @@
-0000000000000000000000000000000000000000 07687e72efc8785eb9de64ef2d27056c6f9e3413 root <root@c8bf43e8bd19.(none)> 1679529693 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
-07687e72efc8785eb9de64ef2d27056c6f9e3413 996c2591e6d895f404e977133bda196e723e1dd9 root <root@c8bf43e8bd19.(none)> 1679529693 +0000	merge origin/development: Fast-forward
+0000000000000000000000000000000000000000 fb276eee8a0b2cc1415c25962410309b645373ed root <root@8ff708ee8c17.(none)> 1681499499 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
+fb276eee8a0b2cc1415c25962410309b645373ed a77792a22449d0029bebb3f66fc23f63e54a8e90 root <root@8ff708ee8c17.(none)> 1681499499 +0000	merge origin/development: Fast-forward

data/.git/logs/refs/remotes/origin/HEAD

@@ -1 +1 @@
-0000000000000000000000000000000000000000 07687e72efc8785eb9de64ef2d27056c6f9e3413 root <root@c8bf43e8bd19.(none)> 1679529693 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
+0000000000000000000000000000000000000000 fb276eee8a0b2cc1415c25962410309b645373ed root <root@8ff708ee8c17.(none)> 1681499499 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git

data/.git/packed-refs

@@ -1,6 +1,6 @@
 # pack-refs with: peeled fully-peeled sorted 
-996c2591e6d895f404e977133bda196e723e1dd9 refs/remotes/origin/development
-07687e72efc8785eb9de64ef2d27056c6f9e3413 refs/remotes/origin/master
+a77792a22449d0029bebb3f66fc23f63e54a8e90 refs/remotes/origin/development
+fb276eee8a0b2cc1415c25962410309b645373ed refs/remotes/origin/master
 2e4fe8087177ddea9b3991ca499f758384839c89 refs/tags/untagged-84fd83a4484c785cce63
 04f604866214fab4d5663b5171a3e596331577bd refs/tags/v0.9.4
 6f9a7b75b345c65fb554884907b7060680c807b7 refs/tags/v0.9.5
@@ -42,6 +42,7 @@ ee164dbda02c66cd898f0357884c58f822b486dc refs/tags/v2.6.0
 be1460e0ed022801549a84a12897334b7064f1a7 refs/tags/v2.6.3
 ebc33c297839fbbcfa70f855e599630c0a6c880c refs/tags/v2.6.4
 0fbd2ab317197f8aff986524b40fb96d7aa05547 refs/tags/v3.0.0
+fb276eee8a0b2cc1415c25962410309b645373ed refs/tags/v3.10.0
 40d185ce8d4f4375411706886f6fbbaa5493bef6 refs/tags/v3.2.0
 dd6a8a74ad5675831f42e3a820208e96f7361f80 refs/tags/v3.2.1
 09ee1a3be370a7b5e21709a7857d0f189f23da8b refs/tags/v3.2.2
@@ -58,3 +59,4 @@ ed61eaceb77e62a0c1a0bb8d36fc0bda7b242af4 refs/tags/v3.5.5
 ffd4706f2b64466550868d42ee2a5a4b88b3a372 refs/tags/v3.6.1
 10a9195bd9e91e5d6047500b92d08df567d60f78 refs/tags/v3.7.0
 07687e72efc8785eb9de64ef2d27056c6f9e3413 refs/tags/v3.8.0
+996c2591e6d895f404e977133bda196e723e1dd9 refs/tags/v3.9.0

data/.git/refs/heads/master

@@ -1 +1 @@
-996c2591e6d895f404e977133bda196e723e1dd9
+a77792a22449d0029bebb3f66fc23f63e54a8e90

data/lib/constants.rb

@@ -90,6 +90,7 @@ module SDM
   module MFAProvider
     NONE = ""
     DUO = "duo"
+    TOTP = "totp"
   end
 
   # Activity Entities, all entity types that can be part of an activity.
@@ -105,6 +106,7 @@ module SDM
     REMOTE_IDENTITY = "remote_identity"
     ACCESS_REQUEST = "access_request"
     WORKFLOW = "workflow"
+    NODE = "node"
   end
 
   # Activity Verbs, describe which kind of activity has taken place.
@@ -238,6 +240,8 @@ module SDM
     ACCESS_REQUEST_TO_RESOURCE_CANCELED = "access request to resource canceled"
     ACCESS_REQUEST_TO_RESOURCE_DENIED = "access request to resource denied"
     ACCESS_REQUEST_TO_RESOURCE_TIMED_OUT = "access request to resource timed out"
+    WORKFLOW_ADDED = "access workflow added"
+    WORKFLOW_DELETED = "access workflow deleted"
     WORKFLOW_RESOURCE_ASSIGNED = "resource assigned to workflow"
     WORKFLOW_RESOURCE_UNASSIGNED = "resource unassigned from workflow"
     WORKFLOW_RESOURCE_MULTIPLE_ASSIGNED = "multiple resources assigned to workflow"
@@ -245,7 +249,10 @@ module SDM
     WORKFLOW_NOTIFICATION_OPTION_ADDED = "workflow notification type added"
     WORKFLOW_NOTIFICATION_OPTION_REMOVED = "workflow notification type removed"
     WORKFLOW_NOTIFICATION_OPTIONS_UPDATED = "workflow notification settings updated"
+    WORKFLOW_NAME_UPDATED = "workflow name updated"
+    WORKFLOW_DESCRIPTION_UPDATED = "workflow description updated"
     ORG_VNM_SUBNET_UPDATED = "organization VNM subnet updated"
+    ORG_VNM_RESOURCES_ALLOCATED = "organization resources allocated within VNM subnet"
     DEPRECATED_ORG_ACTIVATE_DEVICE_APPROVAL = "activate device approval"
     DEPRECATED_ORG_DEACTIVATE_DEVICE_APPROVAL = "deactivate device approval"
     EMULATION_MIGRATION_COMPLETED = "emulation migration completed"

data/lib/grpc/account_resources_history_pb.rb

@@ -0,0 +1,48 @@
+# Copyright 2020 StrongDM Inc
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# Generated by the protocol buffer compiler.  DO NOT EDIT!
+# source: account_resources_history.proto
+
+require "google/protobuf"
+
+require "google/protobuf/timestamp_pb"
+require "account_resources_pb"
+require "options_pb"
+require "spec_pb"
+Google::Protobuf::DescriptorPool.generated_pool.build do
+  add_file("account_resources_history.proto", :syntax => :proto3) do
+    add_message "v1.AccountResourceHistoryListRequest" do
+      optional :meta, :message, 1, "v1.ListRequestMetadata"
+      optional :filter, :string, 2
+    end
+    add_message "v1.AccountResourceHistoryListResponse" do
+      optional :meta, :message, 1, "v1.ListResponseMetadata"
+      repeated :history, :message, 2, "v1.AccountResourceHistory"
+      optional :rate_limit, :message, 3, "v1.RateLimitMetadata"
+    end
+    add_message "v1.AccountResourceHistory" do
+      optional :activity_id, :string, 1
+      optional :timestamp, :message, 2, "google.protobuf.Timestamp"
+      optional :account_resource, :message, 3, "v1.AccountResource"
+      optional :deleted_at, :message, 4, "google.protobuf.Timestamp"
+    end
+  end
+end
+
+module V1
+  AccountResourceHistoryListRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AccountResourceHistoryListRequest").msgclass
+  AccountResourceHistoryListResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AccountResourceHistoryListResponse").msgclass
+  AccountResourceHistory = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AccountResourceHistory").msgclass
+end

data/lib/grpc/account_resources_history_services_pb.rb

@@ -0,0 +1,37 @@
+# Copyright 2020 StrongDM Inc
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# Generated by the protocol buffer compiler.  DO NOT EDIT!
+# Source: account_resources_history.proto for package 'v1'
+
+require "grpc"
+require "account_resources_history_pb"
+
+module V1
+  module AccountResourcesHistory
+    # AccountResourcesHistory records all changes to the state of a AccountResource.
+    class Service
+      include GRPC::GenericService
+
+      self.marshal_class_method = :encode
+      self.unmarshal_class_method = :decode
+      self.service_name = "v1.AccountResourcesHistory"
+
+      # List gets a list of AccountResourceHistory records matching a given set of criteria.
+      rpc :List, V1::AccountResourceHistoryListRequest, V1::AccountResourceHistoryListResponse
+    end
+
+    Stub = Service.rpc_stub_class
+  end
+end

data/lib/grpc/drivers_pb.rb

@@ -33,6 +33,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
         optional :aws_console_static_key_pair, :message, 3001, "v1.AWSConsoleStaticKeyPair"
         optional :amazon_eks, :message, 802, "v1.AmazonEKS"
         optional :amazon_eks_instance_profile, :message, 809, "v1.AmazonEKSInstanceProfile"
+        optional :amazon_eks_instance_profile_user_impersonation, :message, 813, "v1.AmazonEKSInstanceProfileUserImpersonation"
         optional :amazon_eks_user_impersonation, :message, 818, "v1.AmazonEKSUserImpersonation"
         optional :amazon_es, :message, 600, "v1.AmazonES"
         optional :amazon_mqamqp_091, :message, 2501, "v1.AmazonMQAMQP091"
@@ -99,6 +100,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
         optional :sybase, :message, 2000, "v1.Sybase"
         optional :sybase_iq, :message, 2001, "v1.SybaseIQ"
         optional :teradata, :message, 2100, "v1.Teradata"
+        optional :trino, :message, 1401, "v1.Trino"
       end
     end
     add_message "v1.AKS" do
@@ -276,6 +278,25 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :role_arn, :string, 6
       optional :role_external_id, :string, 7
     end
+    add_message "v1.AmazonEKSInstanceProfileUserImpersonation" do
+      optional :id, :string, 32768
+      optional :name, :string, 32769
+      optional :healthy, :bool, 32770
+      optional :tags, :message, 32771, "v1.Tags"
+      optional :secret_store_id, :string, 32772
+      optional :egress_filter, :string, 32773
+      optional :bind_interface, :string, 32774
+      optional :subdomain, :string, 32775
+      optional :certificate_authority, :string, 2
+      optional :cluster_name, :string, 5
+      optional :endpoint, :string, 1
+      optional :healthcheck_namespace, :string, 8
+      optional :region, :string, 4
+      optional :remote_identity_group_id, :string, 9
+      optional :remote_identity_healthcheck_username, :string, 10
+      optional :role_arn, :string, 6
+      optional :role_external_id, :string, 7
+    end
     add_message "v1.AmazonEKSUserImpersonation" do
       optional :id, :string, 32768
       optional :name, :string, 32769
@@ -1348,6 +1369,22 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :port_override, :int32, 4
       optional :username, :string, 2
     end
+    add_message "v1.Trino" do
+      optional :id, :string, 32768
+      optional :name, :string, 32769
+      optional :healthy, :bool, 32770
+      optional :tags, :message, 32771, "v1.Tags"
+      optional :secret_store_id, :string, 32772
+      optional :egress_filter, :string, 32773
+      optional :bind_interface, :string, 32774
+      optional :subdomain, :string, 32775
+      optional :database, :string, 3
+      optional :hostname, :string, 1
+      optional :password, :string, 2
+      optional :port, :int32, 5
+      optional :port_override, :int32, 4
+      optional :username, :string, 6
+    end
   end
 end
 
@@ -1363,6 +1400,7 @@ module V1
   AWSConsoleStaticKeyPair = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AWSConsoleStaticKeyPair").msgclass
   AmazonEKS = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AmazonEKS").msgclass
   AmazonEKSInstanceProfile = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AmazonEKSInstanceProfile").msgclass
+  AmazonEKSInstanceProfileUserImpersonation = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AmazonEKSInstanceProfileUserImpersonation").msgclass
   AmazonEKSUserImpersonation = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AmazonEKSUserImpersonation").msgclass
   AmazonES = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AmazonES").msgclass
   AmazonMQAMQP091 = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AmazonMQAMQP091").msgclass
@@ -1429,4 +1467,5 @@ module V1
   Sybase = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.Sybase").msgclass
   SybaseIQ = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.SybaseIQ").msgclass
   Teradata = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.Teradata").msgclass
+  Trino = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.Trino").msgclass
 end

data/lib/grpc/plumbing.rb

@@ -26,6 +26,7 @@ require_relative "./account_grants_pb"
 require_relative "./account_grants_history_pb"
 require_relative "./account_permissions_pb"
 require_relative "./account_resources_pb"
+require_relative "./account_resources_history_pb"
 require_relative "./tags_pb"
 require_relative "./accounts_pb"
 require_relative "./accounts_history_pb"
@@ -1343,6 +1344,46 @@ module SDM
       end
       items
     end
+    def self.convert_account_resource_history_to_porcelain(plumbing)
+      if plumbing == nil
+        return nil
+      end
+      porcelain = AccountResourceHistory.new()
+      porcelain.account_resource = convert_account_resource_to_porcelain(plumbing.account_resource)
+      porcelain.activity_id = (plumbing.activity_id)
+      porcelain.deleted_at = convert_timestamp_to_porcelain(plumbing.deleted_at)
+      porcelain.timestamp = convert_timestamp_to_porcelain(plumbing.timestamp)
+      porcelain
+    end
+
+    def self.convert_account_resource_history_to_plumbing(porcelain)
+      if porcelain == nil
+        return nil
+      end
+      plumbing = V1::AccountResourceHistory.new()
+      plumbing.account_resource = convert_account_resource_to_plumbing(porcelain.account_resource)
+      plumbing.activity_id = (porcelain.activity_id)
+      plumbing.deleted_at = convert_timestamp_to_plumbing(porcelain.deleted_at)
+      plumbing.timestamp = convert_timestamp_to_plumbing(porcelain.timestamp)
+      plumbing
+    end
+    def self.convert_repeated_account_resource_history_to_plumbing(porcelains)
+      items = Array.new
+      porcelains.each do |porcelain|
+        plumbing = convert_account_resource_history_to_plumbing(porcelain)
+        items.append(plumbing)
+      end
+      items
+    end
+
+    def self.convert_repeated_account_resource_history_to_porcelain(plumbings)
+      items = Array.new
+      plumbings.each do |plumbing|
+        porcelain = convert_account_resource_history_to_porcelain(plumbing)
+        items.append(porcelain)
+      end
+      items
+    end
     def self.convert_account_update_response_to_porcelain(plumbing)
       if plumbing == nil
         return nil
@@ -1685,6 +1726,72 @@ module SDM
       end
       items
     end
+    def self.convert_amazon_eks_instance_profile_user_impersonation_to_porcelain(plumbing)
+      if plumbing == nil
+        return nil
+      end
+      porcelain = AmazonEKSInstanceProfileUserImpersonation.new()
+      porcelain.bind_interface = (plumbing.bind_interface)
+      porcelain.certificate_authority = (plumbing.certificate_authority)
+      porcelain.cluster_name = (plumbing.cluster_name)
+      porcelain.egress_filter = (plumbing.egress_filter)
+      porcelain.endpoint = (plumbing.endpoint)
+      porcelain.healthcheck_namespace = (plumbing.healthcheck_namespace)
+      porcelain.healthy = (plumbing.healthy)
+      porcelain.id = (plumbing.id)
+      porcelain.name = (plumbing.name)
+      porcelain.region = (plumbing.region)
+      porcelain.remote_identity_group_id = (plumbing.remote_identity_group_id)
+      porcelain.remote_identity_healthcheck_username = (plumbing.remote_identity_healthcheck_username)
+      porcelain.role_arn = (plumbing.role_arn)
+      porcelain.role_external_id = (plumbing.role_external_id)
+      porcelain.secret_store_id = (plumbing.secret_store_id)
+      porcelain.subdomain = (plumbing.subdomain)
+      porcelain.tags = convert_tags_to_porcelain(plumbing.tags)
+      porcelain
+    end
+
+    def self.convert_amazon_eks_instance_profile_user_impersonation_to_plumbing(porcelain)
+      if porcelain == nil
+        return nil
+      end
+      plumbing = V1::AmazonEKSInstanceProfileUserImpersonation.new()
+      plumbing.bind_interface = (porcelain.bind_interface)
+      plumbing.certificate_authority = (porcelain.certificate_authority)
+      plumbing.cluster_name = (porcelain.cluster_name)
+      plumbing.egress_filter = (porcelain.egress_filter)
+      plumbing.endpoint = (porcelain.endpoint)
+      plumbing.healthcheck_namespace = (porcelain.healthcheck_namespace)
+      plumbing.healthy = (porcelain.healthy)
+      plumbing.id = (porcelain.id)
+      plumbing.name = (porcelain.name)
+      plumbing.region = (porcelain.region)
+      plumbing.remote_identity_group_id = (porcelain.remote_identity_group_id)
+      plumbing.remote_identity_healthcheck_username = (porcelain.remote_identity_healthcheck_username)
+      plumbing.role_arn = (porcelain.role_arn)
+      plumbing.role_external_id = (porcelain.role_external_id)
+      plumbing.secret_store_id = (porcelain.secret_store_id)
+      plumbing.subdomain = (porcelain.subdomain)
+      plumbing.tags = convert_tags_to_plumbing(porcelain.tags)
+      plumbing
+    end
+    def self.convert_repeated_amazon_eks_instance_profile_user_impersonation_to_plumbing(porcelains)
+      items = Array.new
+      porcelains.each do |porcelain|
+        plumbing = convert_amazon_eks_instance_profile_user_impersonation_to_plumbing(porcelain)
+        items.append(plumbing)
+      end
+      items
+    end
+
+    def self.convert_repeated_amazon_eks_instance_profile_user_impersonation_to_porcelain(plumbings)
+      items = Array.new
+      plumbings.each do |plumbing|
+        porcelain = convert_amazon_eks_instance_profile_user_impersonation_to_porcelain(plumbing)
+        items.append(porcelain)
+      end
+      items
+    end
     def self.convert_amazon_eks_user_impersonation_to_porcelain(plumbing)
       if plumbing == nil
         return nil
@@ -5606,6 +5713,7 @@ module SDM
       porcelain.account_id = (plumbing.account_id)
       porcelain.account_last_name = (plumbing.account_last_name)
       porcelain.account_tags = convert_tags_to_porcelain(plumbing.account_tags)
+      porcelain.completed_at = convert_timestamp_to_porcelain(plumbing.completed_at)
       porcelain.duration = convert_duration_to_porcelain(plumbing.duration)
       porcelain.egress_node_id = (plumbing.egress_node_id)
       porcelain.encrypted = (plumbing.encrypted)
@@ -5635,6 +5743,7 @@ module SDM
       plumbing.account_id = (porcelain.account_id)
       plumbing.account_last_name = (porcelain.account_last_name)
       plumbing.account_tags = convert_tags_to_plumbing(porcelain.account_tags)
+      plumbing.completed_at = convert_timestamp_to_plumbing(porcelain.completed_at)
       plumbing.duration = convert_duration_to_plumbing(porcelain.duration)
       plumbing.egress_node_id = (porcelain.egress_node_id)
       plumbing.encrypted = (porcelain.encrypted)
@@ -6496,6 +6605,9 @@ module SDM
       if porcelain.instance_of? AmazonEKSInstanceProfile
         plumbing.amazon_eks_instance_profile = convert_amazon_eks_instance_profile_to_plumbing(porcelain)
       end
+      if porcelain.instance_of? AmazonEKSInstanceProfileUserImpersonation
+        plumbing.amazon_eks_instance_profile_user_impersonation = convert_amazon_eks_instance_profile_user_impersonation_to_plumbing(porcelain)
+      end
       if porcelain.instance_of? AmazonEKSUserImpersonation
         plumbing.amazon_eks_user_impersonation = convert_amazon_eks_user_impersonation_to_plumbing(porcelain)
       end
@@ -6703,6 +6815,9 @@ module SDM
       if porcelain.instance_of? Teradata
         plumbing.teradata = convert_teradata_to_plumbing(porcelain)
       end
+      if porcelain.instance_of? Trino
+        plumbing.trino = convert_trino_to_plumbing(porcelain)
+      end
       plumbing
     end
 
@@ -6731,6 +6846,9 @@ module SDM
       if plumbing.amazon_eks_instance_profile != nil
         return convert_amazon_eks_instance_profile_to_porcelain(plumbing.amazon_eks_instance_profile)
       end
+      if plumbing.amazon_eks_instance_profile_user_impersonation != nil
+        return convert_amazon_eks_instance_profile_user_impersonation_to_porcelain(plumbing.amazon_eks_instance_profile_user_impersonation)
+      end
       if plumbing.amazon_eks_user_impersonation != nil
         return convert_amazon_eks_user_impersonation_to_porcelain(plumbing.amazon_eks_user_impersonation)
       end
@@ -6938,6 +7056,9 @@ module SDM
       if plumbing.teradata != nil
         return convert_teradata_to_porcelain(plumbing.teradata)
       end
+      if plumbing.trino != nil
+        return convert_trino_to_porcelain(plumbing.trino)
+      end
       raise UnknownError.new("unknown polymorphic type, please upgrade your SDK")
     end
     def self.convert_repeated_resource_to_plumbing(porcelains)
@@ -8418,6 +8539,66 @@ module SDM
       end
       items
     end
+    def self.convert_trino_to_porcelain(plumbing)
+      if plumbing == nil
+        return nil
+      end
+      porcelain = Trino.new()
+      porcelain.bind_interface = (plumbing.bind_interface)
+      porcelain.database = (plumbing.database)
+      porcelain.egress_filter = (plumbing.egress_filter)
+      porcelain.healthy = (plumbing.healthy)
+      porcelain.hostname = (plumbing.hostname)
+      porcelain.id = (plumbing.id)
+      porcelain.name = (plumbing.name)
+      porcelain.password = (plumbing.password)
+      porcelain.port = (plumbing.port)
+      porcelain.port_override = (plumbing.port_override)
+      porcelain.secret_store_id = (plumbing.secret_store_id)
+      porcelain.subdomain = (plumbing.subdomain)
+      porcelain.tags = convert_tags_to_porcelain(plumbing.tags)
+      porcelain.username = (plumbing.username)
+      porcelain
+    end
+
+    def self.convert_trino_to_plumbing(porcelain)
+      if porcelain == nil
+        return nil
+      end
+      plumbing = V1::Trino.new()
+      plumbing.bind_interface = (porcelain.bind_interface)
+      plumbing.database = (porcelain.database)
+      plumbing.egress_filter = (porcelain.egress_filter)
+      plumbing.healthy = (porcelain.healthy)
+      plumbing.hostname = (porcelain.hostname)
+      plumbing.id = (porcelain.id)
+      plumbing.name = (porcelain.name)
+      plumbing.password = (porcelain.password)
+      plumbing.port = (porcelain.port)
+      plumbing.port_override = (porcelain.port_override)
+      plumbing.secret_store_id = (porcelain.secret_store_id)
+      plumbing.subdomain = (porcelain.subdomain)
+      plumbing.tags = convert_tags_to_plumbing(porcelain.tags)
+      plumbing.username = (porcelain.username)
+      plumbing
+    end
+    def self.convert_repeated_trino_to_plumbing(porcelains)
+      items = Array.new
+      porcelains.each do |porcelain|
+        plumbing = convert_trino_to_plumbing(porcelain)
+        items.append(plumbing)
+      end
+      items
+    end
+
+    def self.convert_repeated_trino_to_porcelain(plumbings)
+      items = Array.new
+      plumbings.each do |plumbing|
+        porcelain = convert_trino_to_porcelain(plumbing)
+        items.append(porcelain)
+      end
+      items
+    end
     def self.convert_update_response_metadata_to_porcelain(plumbing)
       if plumbing == nil
         return nil

data/lib/grpc/queries_pb.rb

@@ -56,6 +56,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :account_email, :string, 20
       optional :account_tags, :message, 21, "v1.Tags"
       optional :query_key_id, :string, 22
+      optional :completed_at, :message, 23, "google.protobuf.Timestamp"
     end
   end
 end

data/lib/grpc/queries_services_pb.rb

@@ -20,7 +20,7 @@ require "queries_pb"
 
 module V1
   module Queries
-    # A Query is a record of a single client request to a resource, such as an SQL query.
+    # A Query is a record of a single client request to a resource, such as a SQL query.
     # Long-running SSH, RDP, or Kubernetes interactive sessions also count as queries.
     # The Queries service is read-only.
     class Service

data/lib/models/porcelain.rb

@@ -1143,6 +1143,41 @@ module SDM
     end
   end
 
+  # AccountResourceHistory records the state of a AccountResource at a given point in time,
+  # where every change (create or delete) to a AccountResource produces an
+  # AccountResourceHistory record.
+  class AccountResourceHistory
+    # The complete AccountResource state at this time.
+    attr_accessor :account_resource
+    # The unique identifier of the Activity that produced this change to the AccountResource.
+    # May be empty for some system-initiated updates.
+    attr_accessor :activity_id
+    # If this AccountResource was deleted, the time it was deleted.
+    attr_accessor :deleted_at
+    # The time at which the AccountResource state was recorded.
+    attr_accessor :timestamp
+
+    def initialize(
+      account_resource: nil,
+      activity_id: nil,
+      deleted_at: nil,
+      timestamp: nil
+    )
+      @account_resource = account_resource == nil ? nil : account_resource
+      @activity_id = activity_id == nil ? "" : activity_id
+      @deleted_at = deleted_at == nil ? nil : deleted_at
+      @timestamp = timestamp == nil ? nil : timestamp
+    end
+
+    def to_json(options = {})
+      hash = {}
+      self.instance_variables.each do |var|
+        hash[var.id2name.delete_prefix("@")] = self.instance_variable_get var
+      end
+      hash.to_json
+    end
+  end
+
   # AccountUpdateResponse returns the fields of a Account after it has been updated by
   # a AccountUpdateRequest.
   class AccountUpdateResponse
@@ -1492,6 +1527,89 @@ module SDM
     end
   end
 
+  class AmazonEKSInstanceProfileUserImpersonation
+    # Bind interface
+    attr_accessor :bind_interface
+
+    attr_accessor :certificate_authority
+
+    attr_accessor :cluster_name
+    # A filter applied to the routing logic to pin datasource to nodes.
+    attr_accessor :egress_filter
+
+    attr_accessor :endpoint
+    # The path used to check the health of your connection.  Defaults to `default`.
+    attr_accessor :healthcheck_namespace
+    # True if the datasource is reachable and the credentials are valid.
+    attr_accessor :healthy
+    # Unique identifier of the Resource.
+    attr_accessor :id
+    # Unique human-readable name of the Resource.
+    attr_accessor :name
+
+    attr_accessor :region
+
+    attr_accessor :remote_identity_group_id
+
+    attr_accessor :remote_identity_healthcheck_username
+
+    attr_accessor :role_arn
+
+    attr_accessor :role_external_id
+    # ID of the secret store containing credentials for this resource, if any.
+    attr_accessor :secret_store_id
+    # Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
+    attr_accessor :subdomain
+    # Tags is a map of key, value pairs.
+    attr_accessor :tags
+
+    def initialize(
+      bind_interface: nil,
+      certificate_authority: nil,
+      cluster_name: nil,
+      egress_filter: nil,
+      endpoint: nil,
+      healthcheck_namespace: nil,
+      healthy: nil,
+      id: nil,
+      name: nil,
+      region: nil,
+      remote_identity_group_id: nil,
+      remote_identity_healthcheck_username: nil,
+      role_arn: nil,
+      role_external_id: nil,
+      secret_store_id: nil,
+      subdomain: nil,
+      tags: nil
+    )
+      @bind_interface = bind_interface == nil ? "" : bind_interface
+      @certificate_authority = certificate_authority == nil ? "" : certificate_authority
+      @cluster_name = cluster_name == nil ? "" : cluster_name
+      @egress_filter = egress_filter == nil ? "" : egress_filter
+      @endpoint = endpoint == nil ? "" : endpoint
+      @healthcheck_namespace = healthcheck_namespace == nil ? "" : healthcheck_namespace
+      @healthy = healthy == nil ? false : healthy
+      @id = id == nil ? "" : id
+      @name = name == nil ? "" : name
+      @region = region == nil ? "" : region
+      @remote_identity_group_id = remote_identity_group_id == nil ? "" : remote_identity_group_id
+      @remote_identity_healthcheck_username = remote_identity_healthcheck_username == nil ? "" : remote_identity_healthcheck_username
+      @role_arn = role_arn == nil ? "" : role_arn
+      @role_external_id = role_external_id == nil ? "" : role_external_id
+      @secret_store_id = secret_store_id == nil ? "" : secret_store_id
+      @subdomain = subdomain == nil ? "" : subdomain
+      @tags = tags == nil ? SDM::_porcelain_zero_value_tags() : tags
+    end
+
+    def to_json(options = {})
+      hash = {}
+      self.instance_variables.each do |var|
+        hash[var.id2name.delete_prefix("@")] = self.instance_variable_get var
+      end
+      hash.to_json
+    end
+  end
+
   class AmazonEKSUserImpersonation
     attr_accessor :access_key
     # Bind interface
@@ -2047,7 +2165,6 @@ module SDM
     end
   end
 
-  # AzureMysql is currently unstable, and its API may change, or it may be removed, without a major version bump.
   class AzureMysql
     # Bind interface
     attr_accessor :bind_interface
@@ -5807,7 +5924,11 @@ module SDM
     end
   end
 
-  # A Query is a record of a single client request to a resource, such as an SQL query.
+  # A Query is a record of a single client request to a resource, such as a SQL query.
+  # Longer-running queries including long-running SSH commands and SSH, RDP, or Kubernetes
+  # interactive sessions will return two Query records with the same identifier, one record
+  # at the start of the query and a second record upon the completion of the query with
+  # additional detail.
   class Query
     # The email of the account performing this query, at the time the query was executed.
     # If the account email is later changed, that change will not be reflected via this field.
@@ -5823,6 +5944,9 @@ module SDM
     # The tags of the account accessed, at the time the query was executed. If the account
     # tags are later changed, that change will not be reflected via this field.
     attr_accessor :account_tags
+    # The time at which the Query was completed.
+    # Empty if this record indicates the start of a long-running query.
+    attr_accessor :completed_at
     # The duration of the Query.
     attr_accessor :duration
     # The unique ID of the node through which the Resource was accessed.
@@ -5858,7 +5982,7 @@ module SDM
     attr_accessor :resource_tags
     # The specific type of Resource against which the Query was performed, e.g. "ssh" or "postgres".
     attr_accessor :resource_type
-    # The time at which the Query was performed.
+    # The time at which the Query was started.
     attr_accessor :timestamp
 
     def initialize(
@@ -5867,6 +5991,7 @@ module SDM
       account_id: nil,
       account_last_name: nil,
       account_tags: nil,
+      completed_at: nil,
       duration: nil,
       egress_node_id: nil,
       encrypted: nil,
@@ -5889,6 +6014,7 @@ module SDM
       @account_id = account_id == nil ? "" : account_id
       @account_last_name = account_last_name == nil ? "" : account_last_name
       @account_tags = account_tags == nil ? SDM::_porcelain_zero_value_tags() : account_tags
+      @completed_at = completed_at == nil ? nil : completed_at
       @duration = duration == nil ? nil : duration
       @egress_node_id = egress_node_id == nil ? "" : egress_node_id
       @encrypted = encrypted == nil ? false : encrypted
@@ -7972,6 +8098,78 @@ module SDM
     end
   end
 
+  # Trino is currently unstable, and its API may change, or it may be removed, without a major version bump.
+  class Trino
+    # Bind interface
+    attr_accessor :bind_interface
+
+    attr_accessor :database
+    # A filter applied to the routing logic to pin datasource to nodes.
+    attr_accessor :egress_filter
+    # True if the datasource is reachable and the credentials are valid.
+    attr_accessor :healthy
+
+    attr_accessor :hostname
+    # Unique identifier of the Resource.
+    attr_accessor :id
+    # Unique human-readable name of the Resource.
+    attr_accessor :name
+
+    attr_accessor :password
+
+    attr_accessor :port
+
+    attr_accessor :port_override
+    # ID of the secret store containing credentials for this resource, if any.
+    attr_accessor :secret_store_id
+    # Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
+    attr_accessor :subdomain
+    # Tags is a map of key, value pairs.
+    attr_accessor :tags
+
+    attr_accessor :username
+
+    def initialize(
+      bind_interface: nil,
+      database: nil,
+      egress_filter: nil,
+      healthy: nil,
+      hostname: nil,
+      id: nil,
+      name: nil,
+      password: nil,
+      port: nil,
+      port_override: nil,
+      secret_store_id: nil,
+      subdomain: nil,
+      tags: nil,
+      username: nil
+    )
+      @bind_interface = bind_interface == nil ? "" : bind_interface
+      @database = database == nil ? "" : database
+      @egress_filter = egress_filter == nil ? "" : egress_filter
+      @healthy = healthy == nil ? false : healthy
+      @hostname = hostname == nil ? "" : hostname
+      @id = id == nil ? "" : id
+      @name = name == nil ? "" : name
+      @password = password == nil ? "" : password
+      @port = port == nil ? 0 : port
+      @port_override = port_override == nil ? 0 : port_override
+      @secret_store_id = secret_store_id == nil ? "" : secret_store_id
+      @subdomain = subdomain == nil ? "" : subdomain
+      @tags = tags == nil ? SDM::_porcelain_zero_value_tags() : tags
+      @username = username == nil ? "" : username
+    end
+
+    def to_json(options = {})
+      hash = {}
+      self.instance_variables.each do |var|
+        hash[var.id2name.delete_prefix("@")] = self.instance_variable_get var
+      end
+      hash.to_json
+    end
+  end
+
   # UpdateResponseMetadata is reserved for future use.
   class UpdateResponseMetadata
     def initialize()

data/lib/strongdm.rb

@@ -29,7 +29,7 @@ module SDM #:nodoc:
     DEFAULT_BASE_RETRY_DELAY = 0.0030 # 30 ms
     DEFAULT_MAX_RETRY_DELAY = 300 # 300 seconds
     API_VERSION = "2021-08-23"
-    USER_AGENT = "strongdm-sdk-ruby/3.9.0"
+    USER_AGENT = "strongdm-sdk-ruby/3.11.0"
     private_constant :DEFAULT_MAX_RETRIES, :DEFAULT_BASE_RETRY_DELAY, :DEFAULT_MAX_RETRY_DELAY, :API_VERSION, :USER_AGENT
 
     # Creates a new strongDM API client.
@@ -60,6 +60,7 @@ module SDM #:nodoc:
       @account_grants_history = AccountGrantsHistory.new(@channel, self)
       @account_permissions = AccountPermissions.new(@channel, self)
       @account_resources = AccountResources.new(@channel, self)
+      @account_resources_history = AccountResourcesHistory.new(@channel, self)
       @accounts = Accounts.new(@channel, self)
       @accounts_history = AccountsHistory.new(@channel, self)
       @activities = Activities.new(@channel, self)
@@ -197,6 +198,10 @@ module SDM #:nodoc:
     #
     # See {AccountResources}.
     attr_reader :account_resources
+    # AccountResourcesHistory records all changes to the state of a AccountResource.
+    #
+    # See {AccountResourcesHistory}.
+    attr_reader :account_resources_history
     # Accounts are users that have access to strongDM. There are two types of accounts:
     # 1. **Users:** humans who are authenticated through username and password or SSO.
     # 2. **Service Accounts:** machines that are authenticated using a service token.
@@ -231,7 +236,7 @@ module SDM #:nodoc:
     #
     # See {OrganizationHistory}.
     attr_reader :organization_history
-    # A Query is a record of a single client request to a resource, such as an SQL query.
+    # A Query is a record of a single client request to a resource, such as a SQL query.
     # Long-running SSH, RDP, or Kubernetes interactive sessions also count as queries.
     # The Queries service is read-only.
     #
@@ -311,6 +316,7 @@ module SDM #:nodoc:
       @account_grants_history = AccountGrantsHistory.new(@channel, self)
       @account_permissions = AccountPermissions.new(@channel, self)
       @account_resources = AccountResources.new(@channel, self)
+      @account_resources_history = AccountResourcesHistory.new(@channel, self)
       @accounts = Accounts.new(@channel, self)
       @accounts_history = AccountsHistory.new(@channel, self)
       @activities = Activities.new(@channel, self)

data/lib/svc.rb

@@ -662,6 +662,62 @@ module SDM #:nodoc:
     end
   end
 
+  # AccountResourcesHistory records all changes to the state of a AccountResource.
+  #
+  # See {AccountResourceHistory}.
+  class AccountResourcesHistory
+    extend Gem::Deprecate
+
+    def initialize(channel, parent)
+      begin
+        @stub = V1::AccountResourcesHistory::Stub.new(nil, nil, channel_override: channel)
+      rescue => exception
+        raise Plumbing::convert_error_to_porcelain(exception)
+      end
+      @parent = parent
+    end
+
+    # List gets a list of AccountResourceHistory records matching a given set of criteria.
+    def list(
+      filter,
+      *args,
+      deadline: nil
+    )
+      req = V1::AccountResourceHistoryListRequest.new()
+      req.meta = V1::ListRequestMetadata.new()
+      page_size_option = @parent._test_options["PageSize"]
+      if page_size_option.is_a? Integer
+        req.meta.limit = page_size_option
+      end
+      if not @parent.snapshot_time.nil?
+        req.meta.snapshot_at = @parent.snapshot_time
+      end
+
+      req.filter = Plumbing::quote_filter_args(filter, *args)
+      resp = Enumerator::Generator.new { |g|
+        tries = 0
+        loop do
+          begin
+            plumbing_response = @stub.list(req, metadata: @parent.get_metadata("AccountResourcesHistory.List", req), deadline: deadline)
+          rescue => exception
+            if (@parent.shouldRetry(tries, exception))
+              tries + +@parent.jitterSleep(tries)
+              next
+            end
+            raise Plumbing::convert_error_to_porcelain(exception)
+          end
+          tries = 0
+          plumbing_response.history.each do |plumbing_item|
+            g.yield Plumbing::convert_account_resource_history_to_porcelain(plumbing_item)
+          end
+          break if plumbing_response.meta.next_cursor == ""
+          req.meta.cursor = plumbing_response.meta.next_cursor
+        end
+      }
+      resp
+    end
+  end
+
   # Accounts are users that have access to strongDM. There are two types of accounts:
   # 1. **Users:** humans who are authenticated through username and password or SSO.
   # 2. **Service Accounts:** machines that are authenticated using a service token.
@@ -1430,7 +1486,7 @@ module SDM #:nodoc:
     end
   end
 
-  # A Query is a record of a single client request to a resource, such as an SQL query.
+  # A Query is a record of a single client request to a resource, such as a SQL query.
   # Long-running SSH, RDP, or Kubernetes interactive sessions also count as queries.
   # The Queries service is read-only.
   #
@@ -2006,6 +2062,7 @@ module SDM #:nodoc:
   # {AKSUserImpersonation}
   # {AmazonEKS}
   # {AmazonEKSInstanceProfile}
+  # {AmazonEKSInstanceProfileUserImpersonation}
   # {AmazonEKSUserImpersonation}
   # {AmazonES}
   # {AmazonMQAMQP091}
@@ -2075,6 +2132,7 @@ module SDM #:nodoc:
   # {Sybase}
   # {SybaseIQ}
   # {Teradata}
+  # {Trino}
   class Resources
     extend Gem::Deprecate
 

data/lib/version

@@ -13,5 +13,5 @@
 # limitations under the License.
 #
 module SDM
-  VERSION = "3.9.0"
+  VERSION = "3.11.0"
 end

data/lib/version.rb

@@ -13,5 +13,5 @@
 # limitations under the License.
 #
 module SDM
-  VERSION = "3.9.0"
+  VERSION = "3.11.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: strongdm
 version: !ruby/object:Gem::Version
-  version: 3.9.0
+  version: 3.11.0
 platform: ruby
 authors:
 - strongDM Team
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-03-23 00:00:00.000000000 Z
+date: 2023-04-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: grpc
@@ -81,8 +81,8 @@ files:
 - "./.git/logs/HEAD"
 - "./.git/logs/refs/heads/master"
 - "./.git/logs/refs/remotes/origin/HEAD"
-- "./.git/objects/pack/pack-f2b15914b2f3a34011acabdc2fa8ca0c4058ef77.idx"
-- "./.git/objects/pack/pack-f2b15914b2f3a34011acabdc2fa8ca0c4058ef77.pack"
+- "./.git/objects/pack/pack-4eb0d24ffce2f2f85af8f38bad16b738c3ff5ae6.idx"
+- "./.git/objects/pack/pack-4eb0d24ffce2f2f85af8f38bad16b738c3ff5ae6.pack"
 - "./.git/packed-refs"
 - "./.git/refs/heads/master"
 - "./.git/refs/remotes/origin/HEAD"
@@ -102,6 +102,8 @@ files:
 - "./lib/grpc/account_grants_services_pb.rb"
 - "./lib/grpc/account_permissions_pb.rb"
 - "./lib/grpc/account_permissions_services_pb.rb"
+- "./lib/grpc/account_resources_history_pb.rb"
+- "./lib/grpc/account_resources_history_services_pb.rb"
 - "./lib/grpc/account_resources_pb.rb"
 - "./lib/grpc/account_resources_services_pb.rb"
 - "./lib/grpc/accounts_history_pb.rb"