strongdm 9.3.0 → 9.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 13dfb46d697949a2e590f3ad4e57e4c94f3290d325128dec8b04decbbaa05589
-  data.tar.gz: 48b7602429bbd0bbaa7337c8c498832885bef74e73a27a7d10c1095fee80dfc3
+  metadata.gz: f09fddaca39c923e3977c1d09085b4b42bc11f58d611bade9357dd874386e63c
+  data.tar.gz: b9c02e0f1998e2b6c1216b4afe46c4fb8a3fa9568b52e7f57691a715d92d501f
 SHA512:
-  metadata.gz: c12445d5640879ebbe55d9e01acecf6a29e2c8eb6e2009c743501832c128ceb020af1170484fad20cdeddac5ebe5e0c86be15d40a2857626bdab34265b01c8a8
-  data.tar.gz: 9a9501af7977a2f52b05a3928a27f9013763a6941488379c441f37d72f408f3df54d5ea6fdf0876b12aef1a867c485f508bb410c7d7538fea84af61e9f2e04bd
+  metadata.gz: 651303e820b6c7fa32b010fd5b1bd6c032e071c306ad2149f8bb2719c7a225c83f4b68d542e55a2a634ff57a2b51ab6f303b04074b66405c8cd530b1f8760681
+  data.tar.gz: dbc7ae4c9816f6f990ae837a308d9001d418eac61b43f9935afa5f621ae5f7b6336624683a9d1cea0998d4a15d23ae6331a7dbd3d34959a47050ddcccca8e902

data/.git/ORIG_HEAD

@@ -1 +1 @@
-74fd97d07c0510f0c612ce2611adadbba25e2e91
+9ac734600b0f9a60b184b7add20f826496dd7f92

data/.git/logs/HEAD

@@ -1,3 +1,3 @@
-0000000000000000000000000000000000000000 74fd97d07c0510f0c612ce2611adadbba25e2e91 root <root@4b057fc105fc.(none)> 1718649313 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
-74fd97d07c0510f0c612ce2611adadbba25e2e91 74fd97d07c0510f0c612ce2611adadbba25e2e91 root <root@4b057fc105fc.(none)> 1718649313 +0000	checkout: moving from master to master
-74fd97d07c0510f0c612ce2611adadbba25e2e91 16e9922fbdff7a2ed5cdab2e4b7c2dd997e4d06e root <root@4b057fc105fc.(none)> 1718649313 +0000	merge origin/development: Fast-forward
+0000000000000000000000000000000000000000 9ac734600b0f9a60b184b7add20f826496dd7f92 root <root@544cd7d22df2.(none)> 1718759497 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
+9ac734600b0f9a60b184b7add20f826496dd7f92 9ac734600b0f9a60b184b7add20f826496dd7f92 root <root@544cd7d22df2.(none)> 1718759497 +0000	checkout: moving from master to master
+9ac734600b0f9a60b184b7add20f826496dd7f92 c364531ed10688edbdcf9523489096efd2239cbf root <root@544cd7d22df2.(none)> 1718759497 +0000	merge origin/development: Fast-forward

data/.git/logs/refs/heads/master

@@ -1,2 +1,2 @@
-0000000000000000000000000000000000000000 74fd97d07c0510f0c612ce2611adadbba25e2e91 root <root@4b057fc105fc.(none)> 1718649313 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
-74fd97d07c0510f0c612ce2611adadbba25e2e91 16e9922fbdff7a2ed5cdab2e4b7c2dd997e4d06e root <root@4b057fc105fc.(none)> 1718649313 +0000	merge origin/development: Fast-forward
+0000000000000000000000000000000000000000 9ac734600b0f9a60b184b7add20f826496dd7f92 root <root@544cd7d22df2.(none)> 1718759497 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
+9ac734600b0f9a60b184b7add20f826496dd7f92 c364531ed10688edbdcf9523489096efd2239cbf root <root@544cd7d22df2.(none)> 1718759497 +0000	merge origin/development: Fast-forward

data/.git/logs/refs/remotes/origin/HEAD

@@ -1 +1 @@
-0000000000000000000000000000000000000000 74fd97d07c0510f0c612ce2611adadbba25e2e91 root <root@4b057fc105fc.(none)> 1718649313 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
+0000000000000000000000000000000000000000 9ac734600b0f9a60b184b7add20f826496dd7f92 root <root@544cd7d22df2.(none)> 1718759497 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git

data/.git/packed-refs

@@ -1,6 +1,6 @@
 # pack-refs with: peeled fully-peeled sorted 
-16e9922fbdff7a2ed5cdab2e4b7c2dd997e4d06e refs/remotes/origin/development
-74fd97d07c0510f0c612ce2611adadbba25e2e91 refs/remotes/origin/master
+c364531ed10688edbdcf9523489096efd2239cbf refs/remotes/origin/development
+9ac734600b0f9a60b184b7add20f826496dd7f92 refs/remotes/origin/master
 2e4fe8087177ddea9b3991ca499f758384839c89 refs/tags/untagged-84fd83a4484c785cce63
 04f604866214fab4d5663b5171a3e596331577bd refs/tags/v0.9.4
 6f9a7b75b345c65fb554884907b7060680c807b7 refs/tags/v0.9.5
@@ -111,3 +111,5 @@ f34575bc142eabf113dbbc5b40b3a16e0c026355 refs/tags/v7.1.0
 510e35b667dd3c214950f99d2bd6cd24c41655ae refs/tags/v9.0.0
 0271f35ba50e29ded8bbc919bcd180b8f5428fe6 refs/tags/v9.1.0
 74fd97d07c0510f0c612ce2611adadbba25e2e91 refs/tags/v9.2.0
+16e9922fbdff7a2ed5cdab2e4b7c2dd997e4d06e refs/tags/v9.3.0
+9ac734600b0f9a60b184b7add20f826496dd7f92 refs/tags/v9.4.0

data/.git/refs/heads/master

@@ -1 +1 @@
-16e9922fbdff7a2ed5cdab2e4b7c2dd997e4d06e
+c364531ed10688edbdcf9523489096efd2239cbf

data/lib/constants.rb

@@ -447,8 +447,8 @@ module SDM
     SSH_PORT_FORWARD = "ssh-portForward"
   end
 
-  # Providers responsible for device posture enforcement
-  module DevicePostureProvider
+  # Providers responsible for device trust enforcement
+  module DeviceTrustProvider
     NONE = ""
     SENTINEL_ONE = "sentinelone"
     CROWD_STRIKE = "crowdstrike"

data/lib/grpc/drivers_pb.rb

@@ -122,6 +122,8 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :certificate_authority, :string, 3
       optional :client_certificate, :string, 5
       optional :client_key, :string, 7
+      optional :discovery_enabled, :bool, 17
+      optional :discovery_username, :string, 18
       optional :healthcheck_namespace, :string, 9
       optional :hostname, :string, 1
       optional :identity_alias_healthcheck_username, :string, 11
@@ -154,6 +156,8 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :egress_filter, :string, 32773
       optional :bind_interface, :string, 32774
       optional :subdomain, :string, 32775
+      optional :discovery_enabled, :bool, 11
+      optional :discovery_username, :string, 12
       optional :healthcheck_namespace, :string, 4
       optional :hostname, :string, 1
       optional :identity_alias_healthcheck_username, :string, 6
@@ -259,6 +263,8 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :access_key, :string, 2
       optional :certificate_authority, :string, 4
       optional :cluster_name, :string, 7
+      optional :discovery_enabled, :bool, 16
+      optional :discovery_username, :string, 17
       optional :endpoint, :string, 1
       optional :healthcheck_namespace, :string, 9
       optional :identity_alias_healthcheck_username, :string, 12
@@ -280,6 +286,8 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :subdomain, :string, 32775
       optional :certificate_authority, :string, 2
       optional :cluster_name, :string, 5
+      optional :discovery_enabled, :bool, 16
+      optional :discovery_username, :string, 17
       optional :endpoint, :string, 1
       optional :healthcheck_namespace, :string, 8
       optional :identity_alias_healthcheck_username, :string, 10
@@ -746,6 +754,8 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :bind_interface, :string, 32774
       optional :subdomain, :string, 32775
       optional :certificate_authority, :string, 2
+      optional :discovery_enabled, :bool, 15
+      optional :discovery_username, :string, 16
       optional :endpoint, :string, 1
       optional :healthcheck_namespace, :string, 6
       optional :identity_alias_healthcheck_username, :string, 8
@@ -845,6 +855,8 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :certificate_authority, :string, 3
       optional :client_certificate, :string, 5
       optional :client_key, :string, 7
+      optional :discovery_enabled, :bool, 17
+      optional :discovery_username, :string, 18
       optional :healthcheck_namespace, :string, 9
       optional :hostname, :string, 1
       optional :identity_alias_healthcheck_username, :string, 11
@@ -877,6 +889,8 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :egress_filter, :string, 32773
       optional :bind_interface, :string, 32774
       optional :subdomain, :string, 32775
+      optional :discovery_enabled, :bool, 11
+      optional :discovery_username, :string, 12
       optional :healthcheck_namespace, :string, 4
       optional :hostname, :string, 1
       optional :identity_alias_healthcheck_username, :string, 6

data/lib/grpc/organization_history_pb.rb

@@ -17,8 +17,8 @@
 
 require "google/protobuf"
 
-require "google/protobuf/duration_pb"
 require "google/protobuf/timestamp_pb"
+require "google/protobuf/duration_pb"
 require "options_pb"
 require "spec_pb"
 
@@ -64,6 +64,9 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :saml_metadata_url, :string, 23
       optional :kind, :string, 24
       optional :id, :string, 25
+      optional :loopback_subnet, :string, 26
+      optional :device_trust_enabled, :bool, 27
+      optional :device_trust_provider, :string, 28
     end
   end
 end

data/lib/grpc/plumbing.rb

@@ -178,6 +178,8 @@ module SDM
       porcelain.certificate_authority = (plumbing.certificate_authority)
       porcelain.client_certificate = (plumbing.client_certificate)
       porcelain.client_key = (plumbing.client_key)
+      porcelain.discovery_enabled = (plumbing.discovery_enabled)
+      porcelain.discovery_username = (plumbing.discovery_username)
       porcelain.egress_filter = (plumbing.egress_filter)
       porcelain.healthcheck_namespace = (plumbing.healthcheck_namespace)
       porcelain.healthy = (plumbing.healthy)
@@ -203,6 +205,8 @@ module SDM
       plumbing.certificate_authority = (porcelain.certificate_authority)
       plumbing.client_certificate = (porcelain.client_certificate)
       plumbing.client_key = (porcelain.client_key)
+      plumbing.discovery_enabled = (porcelain.discovery_enabled)
+      plumbing.discovery_username = (porcelain.discovery_username)
       plumbing.egress_filter = (porcelain.egress_filter)
       plumbing.healthcheck_namespace = (porcelain.healthcheck_namespace)
       plumbing.healthy = (porcelain.healthy)
@@ -301,6 +305,8 @@ module SDM
       end
       porcelain = AKSServiceAccount.new()
       porcelain.bind_interface = (plumbing.bind_interface)
+      porcelain.discovery_enabled = (plumbing.discovery_enabled)
+      porcelain.discovery_username = (plumbing.discovery_username)
       porcelain.egress_filter = (plumbing.egress_filter)
       porcelain.healthcheck_namespace = (plumbing.healthcheck_namespace)
       porcelain.healthy = (plumbing.healthy)
@@ -324,6 +330,8 @@ module SDM
       end
       plumbing = V1::AKSServiceAccount.new()
       plumbing.bind_interface = (porcelain.bind_interface)
+      plumbing.discovery_enabled = (porcelain.discovery_enabled)
+      plumbing.discovery_username = (porcelain.discovery_username)
       plumbing.egress_filter = (porcelain.egress_filter)
       plumbing.healthcheck_namespace = (porcelain.healthcheck_namespace)
       plumbing.healthy = (porcelain.healthy)
@@ -2013,6 +2021,8 @@ module SDM
       porcelain.bind_interface = (plumbing.bind_interface)
       porcelain.certificate_authority = (plumbing.certificate_authority)
       porcelain.cluster_name = (plumbing.cluster_name)
+      porcelain.discovery_enabled = (plumbing.discovery_enabled)
+      porcelain.discovery_username = (plumbing.discovery_username)
       porcelain.egress_filter = (plumbing.egress_filter)
       porcelain.endpoint = (plumbing.endpoint)
       porcelain.healthcheck_namespace = (plumbing.healthcheck_namespace)
@@ -2041,6 +2051,8 @@ module SDM
       plumbing.bind_interface = (porcelain.bind_interface)
       plumbing.certificate_authority = (porcelain.certificate_authority)
       plumbing.cluster_name = (porcelain.cluster_name)
+      plumbing.discovery_enabled = (porcelain.discovery_enabled)
+      plumbing.discovery_username = (porcelain.discovery_username)
       plumbing.egress_filter = (porcelain.egress_filter)
       plumbing.endpoint = (porcelain.endpoint)
       plumbing.healthcheck_namespace = (porcelain.healthcheck_namespace)
@@ -2084,6 +2096,8 @@ module SDM
       porcelain.bind_interface = (plumbing.bind_interface)
       porcelain.certificate_authority = (plumbing.certificate_authority)
       porcelain.cluster_name = (plumbing.cluster_name)
+      porcelain.discovery_enabled = (plumbing.discovery_enabled)
+      porcelain.discovery_username = (plumbing.discovery_username)
       porcelain.egress_filter = (plumbing.egress_filter)
       porcelain.endpoint = (plumbing.endpoint)
       porcelain.healthcheck_namespace = (plumbing.healthcheck_namespace)
@@ -2110,6 +2124,8 @@ module SDM
       plumbing.bind_interface = (porcelain.bind_interface)
       plumbing.certificate_authority = (porcelain.certificate_authority)
       plumbing.cluster_name = (porcelain.cluster_name)
+      plumbing.discovery_enabled = (porcelain.discovery_enabled)
+      plumbing.discovery_username = (porcelain.discovery_username)
       plumbing.egress_filter = (porcelain.egress_filter)
       plumbing.endpoint = (porcelain.endpoint)
       plumbing.healthcheck_namespace = (porcelain.healthcheck_namespace)
@@ -5061,6 +5077,8 @@ module SDM
       porcelain = GoogleGKE.new()
       porcelain.bind_interface = (plumbing.bind_interface)
       porcelain.certificate_authority = (plumbing.certificate_authority)
+      porcelain.discovery_enabled = (plumbing.discovery_enabled)
+      porcelain.discovery_username = (plumbing.discovery_username)
       porcelain.egress_filter = (plumbing.egress_filter)
       porcelain.endpoint = (plumbing.endpoint)
       porcelain.healthcheck_namespace = (plumbing.healthcheck_namespace)
@@ -5084,6 +5102,8 @@ module SDM
       plumbing = V1::GoogleGKE.new()
       plumbing.bind_interface = (porcelain.bind_interface)
       plumbing.certificate_authority = (porcelain.certificate_authority)
+      plumbing.discovery_enabled = (porcelain.discovery_enabled)
+      plumbing.discovery_username = (porcelain.discovery_username)
       plumbing.egress_filter = (porcelain.egress_filter)
       plumbing.endpoint = (porcelain.endpoint)
       plumbing.healthcheck_namespace = (porcelain.healthcheck_namespace)
@@ -5993,6 +6013,8 @@ module SDM
       porcelain.certificate_authority = (plumbing.certificate_authority)
       porcelain.client_certificate = (plumbing.client_certificate)
       porcelain.client_key = (plumbing.client_key)
+      porcelain.discovery_enabled = (plumbing.discovery_enabled)
+      porcelain.discovery_username = (plumbing.discovery_username)
       porcelain.egress_filter = (plumbing.egress_filter)
       porcelain.healthcheck_namespace = (plumbing.healthcheck_namespace)
       porcelain.healthy = (plumbing.healthy)
@@ -6018,6 +6040,8 @@ module SDM
       plumbing.certificate_authority = (porcelain.certificate_authority)
       plumbing.client_certificate = (porcelain.client_certificate)
       plumbing.client_key = (porcelain.client_key)
+      plumbing.discovery_enabled = (porcelain.discovery_enabled)
+      plumbing.discovery_username = (porcelain.discovery_username)
       plumbing.egress_filter = (porcelain.egress_filter)
       plumbing.healthcheck_namespace = (porcelain.healthcheck_namespace)
       plumbing.healthy = (porcelain.healthy)
@@ -6116,6 +6140,8 @@ module SDM
       end
       porcelain = KubernetesServiceAccount.new()
       porcelain.bind_interface = (plumbing.bind_interface)
+      porcelain.discovery_enabled = (plumbing.discovery_enabled)
+      porcelain.discovery_username = (plumbing.discovery_username)
       porcelain.egress_filter = (plumbing.egress_filter)
       porcelain.healthcheck_namespace = (plumbing.healthcheck_namespace)
       porcelain.healthy = (plumbing.healthy)
@@ -6139,6 +6165,8 @@ module SDM
       end
       plumbing = V1::KubernetesServiceAccount.new()
       plumbing.bind_interface = (porcelain.bind_interface)
+      plumbing.discovery_enabled = (porcelain.discovery_enabled)
+      plumbing.discovery_username = (porcelain.discovery_username)
       plumbing.egress_filter = (porcelain.egress_filter)
       plumbing.healthcheck_namespace = (porcelain.healthcheck_namespace)
       plumbing.healthy = (porcelain.healthy)
@@ -7456,6 +7484,8 @@ module SDM
       porcelain = Organization.new()
       porcelain.auth_provider = (plumbing.auth_provider)
       porcelain.created_at = convert_timestamp_to_porcelain(plumbing.created_at)
+      porcelain.device_trust_enabled = (plumbing.device_trust_enabled)
+      porcelain.device_trust_provider = (plumbing.device_trust_provider)
       porcelain.idle_timeout = convert_duration_to_porcelain(plumbing.idle_timeout)
       porcelain.idle_timeout_enabled = (plumbing.idle_timeout_enabled)
       porcelain.kind = (plumbing.kind)
@@ -7488,6 +7518,8 @@ module SDM
       plumbing = V1::Organization.new()
       plumbing.auth_provider = (porcelain.auth_provider)
       plumbing.created_at = convert_timestamp_to_plumbing(porcelain.created_at)
+      plumbing.device_trust_enabled = (porcelain.device_trust_enabled)
+      plumbing.device_trust_provider = (porcelain.device_trust_provider)
       plumbing.idle_timeout = convert_duration_to_plumbing(porcelain.idle_timeout)
       plumbing.idle_timeout_enabled = (porcelain.idle_timeout_enabled)
       plumbing.kind = (porcelain.kind)

data/lib/models/porcelain.rb

@@ -25,6 +25,11 @@ module SDM
     attr_accessor :client_certificate
     # The key to authenticate TLS connections with.
     attr_accessor :client_key
+    # If true, configures discovery of a cluster to be run from a node.
+    attr_accessor :discovery_enabled
+    # If a cluster is configured for user impersonation, this is the user to impersonate when
+    # running discovery.
+    attr_accessor :discovery_username
     # A filter applied to the routing logic to pin datasource to nodes.
     attr_accessor :egress_filter
     # The path used to check the health of your connection.  Defaults to `default`.
@@ -57,6 +62,8 @@ module SDM
       certificate_authority: nil,
       client_certificate: nil,
       client_key: nil,
+      discovery_enabled: nil,
+      discovery_username: nil,
       egress_filter: nil,
       healthcheck_namespace: nil,
       healthy: nil,
@@ -75,6 +82,8 @@ module SDM
       @certificate_authority = certificate_authority == nil ? "" : certificate_authority
       @client_certificate = client_certificate == nil ? "" : client_certificate
       @client_key = client_key == nil ? "" : client_key
+      @discovery_enabled = discovery_enabled == nil ? false : discovery_enabled
+      @discovery_username = discovery_username == nil ? "" : discovery_username
       @egress_filter = egress_filter == nil ? "" : egress_filter
       @healthcheck_namespace = healthcheck_namespace == nil ? "" : healthcheck_namespace
       @healthy = healthy == nil ? false : healthy
@@ -173,6 +182,11 @@ module SDM
   class AKSServiceAccount
     # The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
     attr_accessor :bind_interface
+    # If true, configures discovery of a cluster to be run from a node.
+    attr_accessor :discovery_enabled
+    # If a cluster is configured for user impersonation, this is the user to impersonate when
+    # running discovery.
+    attr_accessor :discovery_username
     # A filter applied to the routing logic to pin datasource to nodes.
     attr_accessor :egress_filter
     # The path used to check the health of your connection.  Defaults to `default`.
@@ -204,6 +218,8 @@ module SDM
 
     def initialize(
       bind_interface: nil,
+      discovery_enabled: nil,
+      discovery_username: nil,
       egress_filter: nil,
       healthcheck_namespace: nil,
       healthy: nil,
@@ -220,6 +236,8 @@ module SDM
       token: nil
     )
       @bind_interface = bind_interface == nil ? "" : bind_interface
+      @discovery_enabled = discovery_enabled == nil ? false : discovery_enabled
+      @discovery_username = discovery_username == nil ? "" : discovery_username
       @egress_filter = egress_filter == nil ? "" : egress_filter
       @healthcheck_namespace = healthcheck_namespace == nil ? "" : healthcheck_namespace
       @healthy = healthy == nil ? false : healthy
@@ -1365,8 +1383,7 @@ module SDM
     # The most recent time at which the permission was granted. If a permission was
     # granted, revoked, and granted again, this will reflect the later time.
     attr_accessor :granted_at
-    # The value of this permission, split into vertical and action e.g.
-    # 'secretstore:List', 'role:update'
+    # The value of this permission, split into vertical and action, one of the Permission constants.
     attr_accessor :permission
     # The scope of this permission. A global scope means this action can be taken
     # on any entity; otherwise the action can only be taken on or in the scope of
@@ -1567,7 +1584,7 @@ module SDM
     # The User Agent present when this request was executed. Generally a client type and version
     # like strongdm-cli/55.66.77
     attr_accessor :user_agent
-    # The kind of activity which has taken place.
+    # The kind of activity which has taken place, one of the ActivityVerb constants.
     attr_accessor :verb
 
     def initialize(
@@ -1643,7 +1660,7 @@ module SDM
     attr_accessor :id
     # A display name representing the affected entity.
     attr_accessor :name
-    # The type of entity affected, one of the Activity Entities constants.
+    # The type of entity affected, one of the ActivityEntityType constants.
     attr_accessor :type
 
     def initialize(
@@ -1706,6 +1723,11 @@ module SDM
     attr_accessor :certificate_authority
     # The name of the cluster to connect to.
     attr_accessor :cluster_name
+    # If true, configures discovery of a cluster to be run from a node.
+    attr_accessor :discovery_enabled
+    # If a cluster is configured for user impersonation, this is the user to impersonate when
+    # running discovery.
+    attr_accessor :discovery_username
     # A filter applied to the routing logic to pin datasource to nodes.
     attr_accessor :egress_filter
     # The endpoint to dial.
@@ -1744,6 +1766,8 @@ module SDM
       bind_interface: nil,
       certificate_authority: nil,
       cluster_name: nil,
+      discovery_enabled: nil,
+      discovery_username: nil,
       egress_filter: nil,
       endpoint: nil,
       healthcheck_namespace: nil,
@@ -1765,6 +1789,8 @@ module SDM
       @bind_interface = bind_interface == nil ? "" : bind_interface
       @certificate_authority = certificate_authority == nil ? "" : certificate_authority
       @cluster_name = cluster_name == nil ? "" : cluster_name
+      @discovery_enabled = discovery_enabled == nil ? false : discovery_enabled
+      @discovery_username = discovery_username == nil ? "" : discovery_username
       @egress_filter = egress_filter == nil ? "" : egress_filter
       @endpoint = endpoint == nil ? "" : endpoint
       @healthcheck_namespace = healthcheck_namespace == nil ? "" : healthcheck_namespace
@@ -1799,6 +1825,11 @@ module SDM
     attr_accessor :certificate_authority
     # The name of the cluster to connect to.
     attr_accessor :cluster_name
+    # If true, configures discovery of a cluster to be run from a node.
+    attr_accessor :discovery_enabled
+    # If a cluster is configured for user impersonation, this is the user to impersonate when
+    # running discovery.
+    attr_accessor :discovery_username
     # A filter applied to the routing logic to pin datasource to nodes.
     attr_accessor :egress_filter
     # The endpoint to dial.
@@ -1834,6 +1865,8 @@ module SDM
       bind_interface: nil,
       certificate_authority: nil,
       cluster_name: nil,
+      discovery_enabled: nil,
+      discovery_username: nil,
       egress_filter: nil,
       endpoint: nil,
       healthcheck_namespace: nil,
@@ -1853,6 +1886,8 @@ module SDM
       @bind_interface = bind_interface == nil ? "" : bind_interface
       @certificate_authority = certificate_authority == nil ? "" : certificate_authority
       @cluster_name = cluster_name == nil ? "" : cluster_name
+      @discovery_enabled = discovery_enabled == nil ? false : discovery_enabled
+      @discovery_username = discovery_username == nil ? "" : discovery_username
       @egress_filter = egress_filter == nil ? "" : egress_filter
       @endpoint = endpoint == nil ? "" : endpoint
       @healthcheck_namespace = healthcheck_namespace == nil ? "" : healthcheck_namespace
@@ -4820,6 +4855,11 @@ module SDM
     attr_accessor :bind_interface
     # The CA to authenticate TLS connections with.
     attr_accessor :certificate_authority
+    # If true, configures discovery of a cluster to be run from a node.
+    attr_accessor :discovery_enabled
+    # If a cluster is configured for user impersonation, this is the user to impersonate when
+    # running discovery.
+    attr_accessor :discovery_username
     # A filter applied to the routing logic to pin datasource to nodes.
     attr_accessor :egress_filter
     # The endpoint to dial.
@@ -4850,6 +4890,8 @@ module SDM
     def initialize(
       bind_interface: nil,
       certificate_authority: nil,
+      discovery_enabled: nil,
+      discovery_username: nil,
       egress_filter: nil,
       endpoint: nil,
       healthcheck_namespace: nil,
@@ -4866,6 +4908,8 @@ module SDM
     )
       @bind_interface = bind_interface == nil ? "" : bind_interface
       @certificate_authority = certificate_authority == nil ? "" : certificate_authority
+      @discovery_enabled = discovery_enabled == nil ? false : discovery_enabled
+      @discovery_username = discovery_username == nil ? "" : discovery_username
       @egress_filter = egress_filter == nil ? "" : egress_filter
       @endpoint = endpoint == nil ? "" : endpoint
       @healthcheck_namespace = healthcheck_namespace == nil ? "" : healthcheck_namespace
@@ -5738,6 +5782,11 @@ module SDM
     attr_accessor :client_certificate
     # The key to authenticate TLS connections with.
     attr_accessor :client_key
+    # If true, configures discovery of a cluster to be run from a node.
+    attr_accessor :discovery_enabled
+    # If a cluster is configured for user impersonation, this is the user to impersonate when
+    # running discovery.
+    attr_accessor :discovery_username
     # A filter applied to the routing logic to pin datasource to nodes.
     attr_accessor :egress_filter
     # The path used to check the health of your connection.  Defaults to `default`.
@@ -5770,6 +5819,8 @@ module SDM
       certificate_authority: nil,
       client_certificate: nil,
       client_key: nil,
+      discovery_enabled: nil,
+      discovery_username: nil,
       egress_filter: nil,
       healthcheck_namespace: nil,
       healthy: nil,
@@ -5788,6 +5839,8 @@ module SDM
       @certificate_authority = certificate_authority == nil ? "" : certificate_authority
       @client_certificate = client_certificate == nil ? "" : client_certificate
       @client_key = client_key == nil ? "" : client_key
+      @discovery_enabled = discovery_enabled == nil ? false : discovery_enabled
+      @discovery_username = discovery_username == nil ? "" : discovery_username
       @egress_filter = egress_filter == nil ? "" : egress_filter
       @healthcheck_namespace = healthcheck_namespace == nil ? "" : healthcheck_namespace
       @healthy = healthy == nil ? false : healthy
@@ -5886,6 +5939,11 @@ module SDM
   class KubernetesServiceAccount
     # The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
     attr_accessor :bind_interface
+    # If true, configures discovery of a cluster to be run from a node.
+    attr_accessor :discovery_enabled
+    # If a cluster is configured for user impersonation, this is the user to impersonate when
+    # running discovery.
+    attr_accessor :discovery_username
     # A filter applied to the routing logic to pin datasource to nodes.
     attr_accessor :egress_filter
     # The path used to check the health of your connection.  Defaults to `default`.
@@ -5917,6 +5975,8 @@ module SDM
 
     def initialize(
       bind_interface: nil,
+      discovery_enabled: nil,
+      discovery_username: nil,
       egress_filter: nil,
       healthcheck_namespace: nil,
       healthy: nil,
@@ -5933,6 +5993,8 @@ module SDM
       token: nil
     )
       @bind_interface = bind_interface == nil ? "" : bind_interface
+      @discovery_enabled = discovery_enabled == nil ? false : discovery_enabled
+      @discovery_username = discovery_username == nil ? "" : discovery_username
       @egress_filter = egress_filter == nil ? "" : egress_filter
       @healthcheck_namespace = healthcheck_namespace == nil ? "" : healthcheck_namespace
       @healthy = healthy == nil ? false : healthy
@@ -7372,23 +7434,27 @@ module SDM
   end
 
   class Organization
-    # The Organization's authentication provider.
+    # The Organization's authentication provider, one of the AuthProvider constants.
     attr_accessor :auth_provider
     # The time at which the Organization was created.
     attr_accessor :created_at
+    # Indicates if the Organization has device trust enabled.
+    attr_accessor :device_trust_enabled
+    # The Organization's device trust provider, one of the DeviceTrustProvider constants.
+    attr_accessor :device_trust_provider
     # The Organization's idle timeout, if enabled.
     attr_accessor :idle_timeout
     # Indicates if the Organization has idle timeouts enabled.
     attr_accessor :idle_timeout_enabled
-    # The Organization's type.
+    # The Organization's type, one of the OrgKind constants.
     attr_accessor :kind
-    # The Organization's local log encryption encoder.
+    # The Organization's local log encryption encoder, one of the LogLocalEncoder constants.
     attr_accessor :log_local_encoder
-    # The Organization's local log format.
+    # The Organization's local log format, one of the LogLocalFormat constants.
     attr_accessor :log_local_format
-    # The Organization's local log storage.
+    # The Organization's local log storage, one of the LogLocalStorage constants.
     attr_accessor :log_local_storage
-    # The Organization's remote log encryption encoder.
+    # The Organization's remote log encryption encoder, one of the LogRemoteEncoder constants.
     attr_accessor :log_remote_encoder
     # The Organization's socket path for Socket local log storage.
     attr_accessor :log_socket_path
@@ -7396,7 +7462,7 @@ module SDM
     attr_accessor :log_tcp_address
     # Indicates if the Organization has multi-factor authentication enabled.
     attr_accessor :mfa_enabled
-    # The Organization's multi-factor authentication provider, if enabled.
+    # The Organization's multi-factor authentication provider, one of the MFAProvider constants.
     attr_accessor :mfa_provider
     # The Organization's name.
     attr_accessor :name
@@ -7404,7 +7470,7 @@ module SDM
     attr_accessor :require_secret_store
     # The Organization's URL for SAML metadata.
     attr_accessor :saml_metadata_url
-    # The Organization's SCIM provider.
+    # The Organization's SCIM provider, one of the SCIMProvider constants.
     attr_accessor :scim_provider
     # The Organization's label for sensitive resources.
     attr_accessor :sensitive_label
@@ -7424,6 +7490,8 @@ module SDM
     def initialize(
       auth_provider: nil,
       created_at: nil,
+      device_trust_enabled: nil,
+      device_trust_provider: nil,
       idle_timeout: nil,
       idle_timeout_enabled: nil,
       kind: nil,
@@ -7449,6 +7517,8 @@ module SDM
     )
       @auth_provider = auth_provider == nil ? "" : auth_provider
       @created_at = created_at == nil ? nil : created_at
+      @device_trust_enabled = device_trust_enabled == nil ? false : device_trust_enabled
+      @device_trust_provider = device_trust_provider == nil ? "" : device_trust_provider
       @idle_timeout = idle_timeout == nil ? nil : idle_timeout
       @idle_timeout_enabled = idle_timeout_enabled == nil ? false : idle_timeout_enabled
       @kind = kind == nil ? "" : kind
@@ -8251,7 +8321,7 @@ module SDM
     attr_accessor :request_method
     # The HTTP request URI of a Kubernetes operation.
     attr_accessor :request_uri
-    # The CaptureType of this query capture.
+    # The CaptureType of this query capture, one of the CaptureType constants.
     attr_accessor :type
     # The width of the terminal or window for SSH, Kubernetes, and RDP interactive sessions.
     attr_accessor :width
@@ -8859,9 +8929,7 @@ module SDM
     attr_accessor :maintenance_windows
     # Unique human-readable name of the Relay. Node names must include only letters, numbers, and hyphens (no spaces, underscores, or other special characters). Generated if not provided on create.
     attr_accessor :name
-    # The current state of the relay. One of: "new", "verifying_restart",
-    # "awaiting_restart", "restarting", "started", "stopped", "dead",
-    # "unknown".
+    # The current state of the relay, one of the NodeState constants.
     attr_accessor :state
     # Tags is a map of key, value pairs.
     attr_accessor :tags

data/lib/strongdm.rb

@@ -29,7 +29,7 @@ module SDM #:nodoc:
     DEFAULT_BASE_RETRY_DELAY = 0.0030 # 30 ms
     DEFAULT_MAX_RETRY_DELAY = 300 # 300 seconds
     API_VERSION = "2024-03-28"
-    USER_AGENT = "strongdm-sdk-ruby/9.3.0"
+    USER_AGENT = "strongdm-sdk-ruby/9.5.0"
     private_constant :DEFAULT_MAX_RETRIES, :DEFAULT_BASE_RETRY_DELAY, :DEFAULT_MAX_RETRY_DELAY, :API_VERSION, :USER_AGENT
 
     # Creates a new strongDM API client.

data/lib/version

@@ -13,5 +13,5 @@
 # limitations under the License.
 #
 module SDM
-  VERSION = "9.3.0"
+  VERSION = "9.5.0"
 end

data/lib/version.rb

@@ -13,5 +13,5 @@
 # limitations under the License.
 #
 module SDM
-  VERSION = "9.3.0"
+  VERSION = "9.5.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: strongdm
 version: !ruby/object:Gem::Version
-  version: 9.3.0
+  version: 9.5.0
 platform: ruby
 authors:
 - strongDM Team
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-06-17 00:00:00.000000000 Z
+date: 2024-06-19 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: grpc
@@ -81,8 +81,8 @@ files:
 - "./.git/logs/HEAD"
 - "./.git/logs/refs/heads/master"
 - "./.git/logs/refs/remotes/origin/HEAD"
-- "./.git/objects/pack/pack-22b490cf754d03bb55dd7cdb997e95d4ba69b64a.idx"
-- "./.git/objects/pack/pack-22b490cf754d03bb55dd7cdb997e95d4ba69b64a.pack"
+- "./.git/objects/pack/pack-6337b631778d9e36dcf8451ebddad9bc12e76af5.idx"
+- "./.git/objects/pack/pack-6337b631778d9e36dcf8451ebddad9bc12e76af5.pack"
 - "./.git/packed-refs"
 - "./.git/refs/heads/master"
 - "./.git/refs/remotes/origin/HEAD"