@alis-build/common-es 1.0.3

package/google/iam/admin/v1/iam_connect.js

@@ -0,0 +1,534 @@
+// Copyright 2022 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+// @generated by protoc-gen-connect-es v1.7.0 with parameter "target=js+dts"
+// @generated from file google/iam/admin/v1/iam.proto (package google.iam.admin.v1, syntax proto3)
+/* eslint-disable */
+// @ts-nocheck
+
+import { CreateRoleRequest, CreateServiceAccountKeyRequest, CreateServiceAccountRequest, DeleteRoleRequest, DeleteServiceAccountKeyRequest, DeleteServiceAccountRequest, DisableServiceAccountKeyRequest, DisableServiceAccountRequest, EnableServiceAccountKeyRequest, EnableServiceAccountRequest, GetRoleRequest, GetServiceAccountKeyRequest, GetServiceAccountRequest, LintPolicyRequest, LintPolicyResponse, ListRolesRequest, ListRolesResponse, ListServiceAccountKeysRequest, ListServiceAccountKeysResponse, ListServiceAccountsRequest, ListServiceAccountsResponse, PatchServiceAccountRequest, QueryAuditableServicesRequest, QueryAuditableServicesResponse, QueryGrantableRolesRequest, QueryGrantableRolesResponse, QueryTestablePermissionsRequest, QueryTestablePermissionsResponse, Role, ServiceAccount, ServiceAccountKey, SignBlobRequest, SignBlobResponse, SignJwtRequest, SignJwtResponse, UndeleteRoleRequest, UndeleteServiceAccountRequest, UndeleteServiceAccountResponse, UpdateRoleRequest, UploadServiceAccountKeyRequest } from "./iam_pb.js";
+import { MethodKind } from "@bufbuild/protobuf";
+import { Empty } from "../../../protobuf/empty_pb.js";
+import { GetIamPolicyRequest, SetIamPolicyRequest, TestIamPermissionsRequest, TestIamPermissionsResponse } from "../../v1/iam_policy_pb.js";
+import { Policy } from "../../v1/policy_pb.js";
+
+/**
+ * Creates and manages Identity and Access Management (IAM) resources.
+ *
+ * You can use this service to work with all of the following resources:
+ *
+ * * **Service accounts**, which identify an application or a virtual machine
+ *   (VM) instance rather than a person
+ * * **Service account keys**, which service accounts use to authenticate with
+ *   Google APIs
+ * * **IAM policies for service accounts**, which specify the roles that a
+ *   principal has for the service account
+ * * **IAM custom roles**, which help you limit the number of permissions that
+ *   you grant to principals
+ *
+ * In addition, you can use this service to complete the following tasks, among
+ * others:
+ *
+ * * Test whether a service account can use specific permissions
+ * * Check which roles you can grant for a specific resource
+ * * Lint, or validate, condition expressions in an IAM policy
+ *
+ * When you read data from the IAM API, each read is eventually consistent. In
+ * other words, if you write data with the IAM API, then immediately read that
+ * data, the read operation might return an older version of the data. To deal
+ * with this behavior, your application can retry the request with truncated
+ * exponential backoff.
+ *
+ * In contrast, writing data to the IAM API is sequentially consistent. In other
+ * words, write operations are always processed in the order in which they were
+ * received.
+ *
+ * @generated from service google.iam.admin.v1.IAM
+ */
+export const IAM = {
+  typeName: "google.iam.admin.v1.IAM",
+  methods: {
+    /**
+     * Lists every [ServiceAccount][google.iam.admin.v1.ServiceAccount] that belongs to a specific project.
+     *
+     * @generated from rpc google.iam.admin.v1.IAM.ListServiceAccounts
+     */
+    listServiceAccounts: {
+      name: "ListServiceAccounts",
+      I: ListServiceAccountsRequest,
+      O: ListServiceAccountsResponse,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * Gets a [ServiceAccount][google.iam.admin.v1.ServiceAccount].
+     *
+     * @generated from rpc google.iam.admin.v1.IAM.GetServiceAccount
+     */
+    getServiceAccount: {
+      name: "GetServiceAccount",
+      I: GetServiceAccountRequest,
+      O: ServiceAccount,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * Creates a [ServiceAccount][google.iam.admin.v1.ServiceAccount].
+     *
+     * @generated from rpc google.iam.admin.v1.IAM.CreateServiceAccount
+     */
+    createServiceAccount: {
+      name: "CreateServiceAccount",
+      I: CreateServiceAccountRequest,
+      O: ServiceAccount,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * **Note:** We are in the process of deprecating this method. Use
+     * [PatchServiceAccount][google.iam.admin.v1.IAM.PatchServiceAccount] instead.
+     *
+     * Updates a [ServiceAccount][google.iam.admin.v1.ServiceAccount].
+     *
+     * You can update only the `display_name` field.
+     *
+     * @generated from rpc google.iam.admin.v1.IAM.UpdateServiceAccount
+     */
+    updateServiceAccount: {
+      name: "UpdateServiceAccount",
+      I: ServiceAccount,
+      O: ServiceAccount,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * Patches a [ServiceAccount][google.iam.admin.v1.ServiceAccount].
+     *
+     * @generated from rpc google.iam.admin.v1.IAM.PatchServiceAccount
+     */
+    patchServiceAccount: {
+      name: "PatchServiceAccount",
+      I: PatchServiceAccountRequest,
+      O: ServiceAccount,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * Deletes a [ServiceAccount][google.iam.admin.v1.ServiceAccount].
+     *
+     * **Warning:** After you delete a service account, you might not be able to
+     * undelete it. If you know that you need to re-enable the service account in
+     * the future, use [DisableServiceAccount][google.iam.admin.v1.IAM.DisableServiceAccount] instead.
+     *
+     * If you delete a service account, IAM permanently removes the service
+     * account 30 days later. Google Cloud cannot recover the service account
+     * after it is permanently removed, even if you file a support request.
+     *
+     * To help avoid unplanned outages, we recommend that you disable the service
+     * account before you delete it. Use [DisableServiceAccount][google.iam.admin.v1.IAM.DisableServiceAccount] to disable the
+     * service account, then wait at least 24 hours and watch for unintended
+     * consequences. If there are no unintended consequences, you can delete the
+     * service account.
+     *
+     * @generated from rpc google.iam.admin.v1.IAM.DeleteServiceAccount
+     */
+    deleteServiceAccount: {
+      name: "DeleteServiceAccount",
+      I: DeleteServiceAccountRequest,
+      O: Empty,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * Restores a deleted [ServiceAccount][google.iam.admin.v1.ServiceAccount].
+     *
+     * **Important:** It is not always possible to restore a deleted service
+     * account. Use this method only as a last resort.
+     *
+     * After you delete a service account, IAM permanently removes the service
+     * account 30 days later. There is no way to restore a deleted service account
+     * that has been permanently removed.
+     *
+     * @generated from rpc google.iam.admin.v1.IAM.UndeleteServiceAccount
+     */
+    undeleteServiceAccount: {
+      name: "UndeleteServiceAccount",
+      I: UndeleteServiceAccountRequest,
+      O: UndeleteServiceAccountResponse,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * Enables a [ServiceAccount][google.iam.admin.v1.ServiceAccount] that was disabled by
+     * [DisableServiceAccount][google.iam.admin.v1.IAM.DisableServiceAccount].
+     *
+     * If the service account is already enabled, then this method has no effect.
+     *
+     * If the service account was disabled by other means—for example, if Google
+     * disabled the service account because it was compromised—you cannot use this
+     * method to enable the service account.
+     *
+     * @generated from rpc google.iam.admin.v1.IAM.EnableServiceAccount
+     */
+    enableServiceAccount: {
+      name: "EnableServiceAccount",
+      I: EnableServiceAccountRequest,
+      O: Empty,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * Disables a [ServiceAccount][google.iam.admin.v1.ServiceAccount] immediately.
+     *
+     * If an application uses the service account to authenticate, that
+     * application can no longer call Google APIs or access Google Cloud
+     * resources. Existing access tokens for the service account are rejected, and
+     * requests for new access tokens will fail.
+     *
+     * To re-enable the service account, use [EnableServiceAccount][google.iam.admin.v1.IAM.EnableServiceAccount]. After you
+     * re-enable the service account, its existing access tokens will be accepted,
+     * and you can request new access tokens.
+     *
+     * To help avoid unplanned outages, we recommend that you disable the service
+     * account before you delete it. Use this method to disable the service
+     * account, then wait at least 24 hours and watch for unintended consequences.
+     * If there are no unintended consequences, you can delete the service account
+     * with [DeleteServiceAccount][google.iam.admin.v1.IAM.DeleteServiceAccount].
+     *
+     * @generated from rpc google.iam.admin.v1.IAM.DisableServiceAccount
+     */
+    disableServiceAccount: {
+      name: "DisableServiceAccount",
+      I: DisableServiceAccountRequest,
+      O: Empty,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * Lists every [ServiceAccountKey][google.iam.admin.v1.ServiceAccountKey] for a service account.
+     *
+     * @generated from rpc google.iam.admin.v1.IAM.ListServiceAccountKeys
+     */
+    listServiceAccountKeys: {
+      name: "ListServiceAccountKeys",
+      I: ListServiceAccountKeysRequest,
+      O: ListServiceAccountKeysResponse,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * Gets a [ServiceAccountKey][google.iam.admin.v1.ServiceAccountKey].
+     *
+     * @generated from rpc google.iam.admin.v1.IAM.GetServiceAccountKey
+     */
+    getServiceAccountKey: {
+      name: "GetServiceAccountKey",
+      I: GetServiceAccountKeyRequest,
+      O: ServiceAccountKey,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * Creates a [ServiceAccountKey][google.iam.admin.v1.ServiceAccountKey].
+     *
+     * @generated from rpc google.iam.admin.v1.IAM.CreateServiceAccountKey
+     */
+    createServiceAccountKey: {
+      name: "CreateServiceAccountKey",
+      I: CreateServiceAccountKeyRequest,
+      O: ServiceAccountKey,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * Uploads the public key portion of a key pair that you manage, and
+     * associates the public key with a [ServiceAccount][google.iam.admin.v1.ServiceAccount].
+     *
+     * After you upload the public key, you can use the private key from the key
+     * pair as a service account key.
+     *
+     * @generated from rpc google.iam.admin.v1.IAM.UploadServiceAccountKey
+     */
+    uploadServiceAccountKey: {
+      name: "UploadServiceAccountKey",
+      I: UploadServiceAccountKeyRequest,
+      O: ServiceAccountKey,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * Deletes a [ServiceAccountKey][google.iam.admin.v1.ServiceAccountKey]. Deleting a service account key does not
+     * revoke short-lived credentials that have been issued based on the service
+     * account key.
+     *
+     * @generated from rpc google.iam.admin.v1.IAM.DeleteServiceAccountKey
+     */
+    deleteServiceAccountKey: {
+      name: "DeleteServiceAccountKey",
+      I: DeleteServiceAccountKeyRequest,
+      O: Empty,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * Disable a [ServiceAccountKey][google.iam.admin.v1.ServiceAccountKey]. A disabled service account key can be
+     * re-enabled with [EnableServiceAccountKey][google.iam.admin.v1.IAM.EnableServiceAccountKey].
+     *
+     * @generated from rpc google.iam.admin.v1.IAM.DisableServiceAccountKey
+     */
+    disableServiceAccountKey: {
+      name: "DisableServiceAccountKey",
+      I: DisableServiceAccountKeyRequest,
+      O: Empty,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * Enable a [ServiceAccountKey][google.iam.admin.v1.ServiceAccountKey].
+     *
+     * @generated from rpc google.iam.admin.v1.IAM.EnableServiceAccountKey
+     */
+    enableServiceAccountKey: {
+      name: "EnableServiceAccountKey",
+      I: EnableServiceAccountKeyRequest,
+      O: Empty,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * **Note:** This method is deprecated. Use the
+     * [`signBlob`](https://cloud.google.com/iam/help/rest-credentials/v1/projects.serviceAccounts/signBlob)
+     * method in the IAM Service Account Credentials API instead. If you currently
+     * use this method, see the [migration
+     * guide](https://cloud.google.com/iam/help/credentials/migrate-api) for
+     * instructions.
+     *
+     * Signs a blob using the system-managed private key for a [ServiceAccount][google.iam.admin.v1.ServiceAccount].
+     *
+     * @generated from rpc google.iam.admin.v1.IAM.SignBlob
+     * @deprecated
+     */
+    signBlob: {
+      name: "SignBlob",
+      I: SignBlobRequest,
+      O: SignBlobResponse,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * **Note:** This method is deprecated. Use the
+     * [`signJwt`](https://cloud.google.com/iam/help/rest-credentials/v1/projects.serviceAccounts/signJwt)
+     * method in the IAM Service Account Credentials API instead. If you currently
+     * use this method, see the [migration
+     * guide](https://cloud.google.com/iam/help/credentials/migrate-api) for
+     * instructions.
+     *
+     * Signs a JSON Web Token (JWT) using the system-managed private key for a
+     * [ServiceAccount][google.iam.admin.v1.ServiceAccount].
+     *
+     * @generated from rpc google.iam.admin.v1.IAM.SignJwt
+     * @deprecated
+     */
+    signJwt: {
+      name: "SignJwt",
+      I: SignJwtRequest,
+      O: SignJwtResponse,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * Gets the IAM policy that is attached to a [ServiceAccount][google.iam.admin.v1.ServiceAccount]. This IAM
+     * policy specifies which principals have access to the service account.
+     *
+     * This method does not tell you whether the service account has been granted
+     * any roles on other resources. To check whether a service account has role
+     * grants on a resource, use the `getIamPolicy` method for that resource. For
+     * example, to view the role grants for a project, call the Resource Manager
+     * API's
+     * [`projects.getIamPolicy`](https://cloud.google.com/resource-manager/reference/rest/v1/projects/getIamPolicy)
+     * method.
+     *
+     * @generated from rpc google.iam.admin.v1.IAM.GetIamPolicy
+     */
+    getIamPolicy: {
+      name: "GetIamPolicy",
+      I: GetIamPolicyRequest,
+      O: Policy,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * Sets the IAM policy that is attached to a [ServiceAccount][google.iam.admin.v1.ServiceAccount].
+     *
+     * Use this method to grant or revoke access to the service account. For
+     * example, you could grant a principal the ability to impersonate the service
+     * account.
+     *
+     * This method does not enable the service account to access other resources.
+     * To grant roles to a service account on a resource, follow these steps:
+     *
+     * 1. Call the resource's `getIamPolicy` method to get its current IAM policy.
+     * 2. Edit the policy so that it binds the service account to an IAM role for
+     * the resource.
+     * 3. Call the resource's `setIamPolicy` method to update its IAM policy.
+     *
+     * For detailed instructions, see
+     * [Manage access to project, folders, and
+     * organizations](https://cloud.google.com/iam/help/service-accounts/granting-access-to-service-accounts)
+     * or [Manage access to other
+     * resources](https://cloud.google.com/iam/help/access/manage-other-resources).
+     *
+     * @generated from rpc google.iam.admin.v1.IAM.SetIamPolicy
+     */
+    setIamPolicy: {
+      name: "SetIamPolicy",
+      I: SetIamPolicyRequest,
+      O: Policy,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * Tests whether the caller has the specified permissions on a
+     * [ServiceAccount][google.iam.admin.v1.ServiceAccount].
+     *
+     * @generated from rpc google.iam.admin.v1.IAM.TestIamPermissions
+     */
+    testIamPermissions: {
+      name: "TestIamPermissions",
+      I: TestIamPermissionsRequest,
+      O: TestIamPermissionsResponse,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * Lists roles that can be granted on a Google Cloud resource. A role is
+     * grantable if the IAM policy for the resource can contain bindings to the
+     * role.
+     *
+     * @generated from rpc google.iam.admin.v1.IAM.QueryGrantableRoles
+     */
+    queryGrantableRoles: {
+      name: "QueryGrantableRoles",
+      I: QueryGrantableRolesRequest,
+      O: QueryGrantableRolesResponse,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * Lists every predefined [Role][google.iam.admin.v1.Role] that IAM supports, or every custom role
+     * that is defined for an organization or project.
+     *
+     * @generated from rpc google.iam.admin.v1.IAM.ListRoles
+     */
+    listRoles: {
+      name: "ListRoles",
+      I: ListRolesRequest,
+      O: ListRolesResponse,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * Gets the definition of a [Role][google.iam.admin.v1.Role].
+     *
+     * @generated from rpc google.iam.admin.v1.IAM.GetRole
+     */
+    getRole: {
+      name: "GetRole",
+      I: GetRoleRequest,
+      O: Role,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * Creates a new custom [Role][google.iam.admin.v1.Role].
+     *
+     * @generated from rpc google.iam.admin.v1.IAM.CreateRole
+     */
+    createRole: {
+      name: "CreateRole",
+      I: CreateRoleRequest,
+      O: Role,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * Updates the definition of a custom [Role][google.iam.admin.v1.Role].
+     *
+     * @generated from rpc google.iam.admin.v1.IAM.UpdateRole
+     */
+    updateRole: {
+      name: "UpdateRole",
+      I: UpdateRoleRequest,
+      O: Role,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * Deletes a custom [Role][google.iam.admin.v1.Role].
+     *
+     * When you delete a custom role, the following changes occur immediately:
+     *
+     * * You cannot bind a principal to the custom role in an IAM
+     * [Policy][google.iam.v1.Policy].
+     * * Existing bindings to the custom role are not changed, but they have no
+     * effect.
+     * * By default, the response from [ListRoles][google.iam.admin.v1.IAM.ListRoles] does not include the custom
+     * role.
+     *
+     * You have 7 days to undelete the custom role. After 7 days, the following
+     * changes occur:
+     *
+     * * The custom role is permanently deleted and cannot be recovered.
+     * * If an IAM policy contains a binding to the custom role, the binding is
+     * permanently removed.
+     *
+     * @generated from rpc google.iam.admin.v1.IAM.DeleteRole
+     */
+    deleteRole: {
+      name: "DeleteRole",
+      I: DeleteRoleRequest,
+      O: Role,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * Undeletes a custom [Role][google.iam.admin.v1.Role].
+     *
+     * @generated from rpc google.iam.admin.v1.IAM.UndeleteRole
+     */
+    undeleteRole: {
+      name: "UndeleteRole",
+      I: UndeleteRoleRequest,
+      O: Role,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * Lists every permission that you can test on a resource. A permission is
+     * testable if you can check whether a principal has that permission on the
+     * resource.
+     *
+     * @generated from rpc google.iam.admin.v1.IAM.QueryTestablePermissions
+     */
+    queryTestablePermissions: {
+      name: "QueryTestablePermissions",
+      I: QueryTestablePermissionsRequest,
+      O: QueryTestablePermissionsResponse,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * Returns a list of services that allow you to opt into audit logs that are
+     * not generated by default.
+     *
+     * To learn more about audit logs, see the [Logging
+     * documentation](https://cloud.google.com/logging/docs/audit).
+     *
+     * @generated from rpc google.iam.admin.v1.IAM.QueryAuditableServices
+     */
+    queryAuditableServices: {
+      name: "QueryAuditableServices",
+      I: QueryAuditableServicesRequest,
+      O: QueryAuditableServicesResponse,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * Lints, or validates, an IAM policy. Currently checks the
+     * [google.iam.v1.Binding.condition][google.iam.v1.Binding.condition] field, which contains a condition
+     * expression for a role binding.
+     *
+     * Successful calls to this method always return an HTTP `200 OK` status code,
+     * even if the linter detects an issue in the IAM policy.
+     *
+     * @generated from rpc google.iam.admin.v1.IAM.LintPolicy
+     */
+    lintPolicy: {
+      name: "LintPolicy",
+      I: LintPolicyRequest,
+      O: LintPolicyResponse,
+      kind: MethodKind.Unary,
+    },
+  }
+};