@maxim_mazurok/gapi.client.cloudasset-v1p1beta1 0.0.20230421 → 0.0.20230429
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/index.d.ts +341 -171
- package/package.json +1 -1
- package/tests.ts +1 -1
package/index.d.ts
CHANGED
|
@@ -9,7 +9,7 @@
|
|
|
9
9
|
// This file was generated by https://github.com/Maxim-Mazurok/google-api-typings-generator. Please do not edit it manually.
|
|
10
10
|
// In case of any problems please post issue to https://github.com/Maxim-Mazurok/google-api-typings-generator
|
|
11
11
|
// Generated from: https://cloudasset.googleapis.com/$discovery/rest?version=v1p1beta1
|
|
12
|
-
// Revision:
|
|
12
|
+
// Revision: 20230429
|
|
13
13
|
|
|
14
14
|
/// <reference types="gapi.client" />
|
|
15
15
|
|
|
@@ -24,25 +24,30 @@ declare namespace gapi.client {
|
|
|
24
24
|
namespace cloudasset {
|
|
25
25
|
interface AnalyzeIamPolicyLongrunningMetadata {
|
|
26
26
|
/** Output only. The time the operation was created. */
|
|
27
|
-
createTime?:
|
|
27
|
+
createTime?:
|
|
28
|
+
string;
|
|
28
29
|
}
|
|
29
30
|
// tslint:disable-next-line:no-empty-interface
|
|
30
31
|
interface AnalyzeIamPolicyLongrunningResponse {
|
|
31
32
|
}
|
|
32
33
|
interface AuditConfig {
|
|
33
34
|
/** The configuration for logging of each type of permission. */
|
|
34
|
-
auditLogConfigs?:
|
|
35
|
+
auditLogConfigs?:
|
|
36
|
+
AuditLogConfig[];
|
|
35
37
|
/**
|
|
36
38
|
* Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all
|
|
37
39
|
* services.
|
|
38
40
|
*/
|
|
39
|
-
service?:
|
|
41
|
+
service?:
|
|
42
|
+
string;
|
|
40
43
|
}
|
|
41
44
|
interface AuditLogConfig {
|
|
42
45
|
/** Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members. */
|
|
43
|
-
exemptedMembers?:
|
|
46
|
+
exemptedMembers?:
|
|
47
|
+
string[];
|
|
44
48
|
/** The log type that this config enables. */
|
|
45
|
-
logType?:
|
|
49
|
+
logType?:
|
|
50
|
+
string;
|
|
46
51
|
}
|
|
47
52
|
interface Binding {
|
|
48
53
|
/**
|
|
@@ -50,7 +55,8 @@ declare namespace gapi.client {
|
|
|
50
55
|
* then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which
|
|
51
56
|
* resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
|
|
52
57
|
*/
|
|
53
|
-
condition?:
|
|
58
|
+
condition?:
|
|
59
|
+
Expr;
|
|
54
60
|
/**
|
|
55
61
|
* Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on
|
|
56
62
|
* the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service
|
|
@@ -67,124 +73,158 @@ declare namespace gapi.client {
|
|
|
67
73
|
* has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group
|
|
68
74
|
* retains the role in the binding.
|
|
69
75
|
*/
|
|
70
|
-
members?:
|
|
76
|
+
members?:
|
|
77
|
+
string[];
|
|
71
78
|
/** Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`. */
|
|
72
|
-
role?:
|
|
79
|
+
role?:
|
|
80
|
+
string;
|
|
73
81
|
}
|
|
74
82
|
interface Explanation {
|
|
75
83
|
/**
|
|
76
84
|
* The map from roles to their included permission matching the permission query (e.g. containing `policy.role.permissions:`). Example role string: "roles/compute.instanceAdmin". The
|
|
77
85
|
* roles can also be found in the returned `policy` bindings. Note that the map is populated only if requesting with a permission query.
|
|
78
86
|
*/
|
|
79
|
-
matchedPermissions?:
|
|
87
|
+
matchedPermissions?:
|
|
88
|
+
{ [P in string]: Permissions };
|
|
80
89
|
}
|
|
81
90
|
interface Expr {
|
|
82
91
|
/** Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI. */
|
|
83
|
-
description?:
|
|
92
|
+
description?:
|
|
93
|
+
string;
|
|
84
94
|
/** Textual representation of an expression in Common Expression Language syntax. */
|
|
85
|
-
expression?:
|
|
95
|
+
expression?:
|
|
96
|
+
string;
|
|
86
97
|
/** Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file. */
|
|
87
|
-
location?:
|
|
98
|
+
location?:
|
|
99
|
+
string;
|
|
88
100
|
/** Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression. */
|
|
89
|
-
title?:
|
|
101
|
+
title?:
|
|
102
|
+
string;
|
|
90
103
|
}
|
|
91
104
|
interface GoogleCloudAssetV1p7beta1Asset {
|
|
92
105
|
/** Please also refer to the [access level user guide](https://cloud.google.com/access-context-manager/docs/overview#access-levels). */
|
|
93
|
-
accessLevel?:
|
|
106
|
+
accessLevel?:
|
|
107
|
+
GoogleIdentityAccesscontextmanagerV1AccessLevel;
|
|
94
108
|
/** Please also refer to the [access policy user guide](https://cloud.google.com/access-context-manager/docs/overview#access-policies). */
|
|
95
|
-
accessPolicy?:
|
|
109
|
+
accessPolicy?:
|
|
110
|
+
GoogleIdentityAccesscontextmanagerV1AccessPolicy;
|
|
96
111
|
/**
|
|
97
112
|
* The ancestry path of an asset in Google Cloud [resource hierarchy](https://cloud.google.com/resource-manager/docs/cloud-platform-resource-hierarchy), represented as a list of
|
|
98
113
|
* relative resource names. An ancestry path starts with the closest ancestor in the hierarchy and ends at root. If the asset is a project, folder, or organization, the ancestry path
|
|
99
114
|
* starts from the asset itself. Example: `["projects/123456789", "folders/5432", "organizations/1234"]`
|
|
100
115
|
*/
|
|
101
|
-
ancestors?:
|
|
116
|
+
ancestors?:
|
|
117
|
+
string[];
|
|
102
118
|
/** The type of the asset. Example: `compute.googleapis.com/Disk` See [Supported asset types](https://cloud.google.com/asset-inventory/docs/supported-asset-types) for more information. */
|
|
103
|
-
assetType?:
|
|
119
|
+
assetType?:
|
|
120
|
+
string;
|
|
104
121
|
/**
|
|
105
122
|
* A representation of the IAM policy set on a Google Cloud resource. There can be a maximum of one IAM policy set on any given resource. In addition, IAM policies inherit their
|
|
106
123
|
* granted access scope from any policies set on parent resources in the resource hierarchy. Therefore, the effectively policy is the union of both the policy set on this resource and
|
|
107
124
|
* each policy set on all of the resource's ancestry resource levels in the hierarchy. See [this topic](https://cloud.google.com/iam/help/allow-policies/inheritance) for more
|
|
108
125
|
* information.
|
|
109
126
|
*/
|
|
110
|
-
iamPolicy?:
|
|
127
|
+
iamPolicy?:
|
|
128
|
+
Policy;
|
|
111
129
|
/**
|
|
112
130
|
* The full name of the asset. Example: `//compute.googleapis.com/projects/my_project_123/zones/zone1/instances/instance1` See [Resource
|
|
113
131
|
* names](https://cloud.google.com/apis/design/resource_names#full_resource_name) for more information.
|
|
114
132
|
*/
|
|
115
|
-
name?:
|
|
133
|
+
name?:
|
|
134
|
+
string;
|
|
116
135
|
/**
|
|
117
136
|
* A representation of an [organization policy](https://cloud.google.com/resource-manager/docs/organization-policy/overview#organization_policy). There can be more than one
|
|
118
137
|
* organization policy with different constraints set on a given resource.
|
|
119
138
|
*/
|
|
120
|
-
orgPolicy?:
|
|
139
|
+
orgPolicy?:
|
|
140
|
+
GoogleCloudOrgpolicyV1Policy[];
|
|
121
141
|
/** The related assets of the asset of one relationship type. One asset only represents one type of relationship. */
|
|
122
|
-
relatedAssets?:
|
|
142
|
+
relatedAssets?:
|
|
143
|
+
GoogleCloudAssetV1p7beta1RelatedAssets;
|
|
123
144
|
/** A representation of the resource. */
|
|
124
|
-
resource?:
|
|
145
|
+
resource?:
|
|
146
|
+
GoogleCloudAssetV1p7beta1Resource;
|
|
125
147
|
/** Please also refer to the [service perimeter user guide](https://cloud.google.com/vpc-service-controls/docs/overview). */
|
|
126
|
-
servicePerimeter?:
|
|
148
|
+
servicePerimeter?:
|
|
149
|
+
GoogleIdentityAccesscontextmanagerV1ServicePerimeter;
|
|
127
150
|
/** The last update timestamp of an asset. update_time is updated when create/update/delete operation is performed. */
|
|
128
|
-
updateTime?:
|
|
151
|
+
updateTime?:
|
|
152
|
+
string;
|
|
129
153
|
}
|
|
130
154
|
interface GoogleCloudAssetV1p7beta1RelatedAsset {
|
|
131
155
|
/**
|
|
132
156
|
* The ancestors of an asset in Google Cloud [resource hierarchy](https://cloud.google.com/resource-manager/docs/cloud-platform-resource-hierarchy), represented as a list of relative
|
|
133
157
|
* resource names. An ancestry path starts with the closest ancestor in the hierarchy and ends at root. Example: `["projects/123456789", "folders/5432", "organizations/1234"]`
|
|
134
158
|
*/
|
|
135
|
-
ancestors?:
|
|
159
|
+
ancestors?:
|
|
160
|
+
string[];
|
|
136
161
|
/**
|
|
137
162
|
* The full name of the asset. Example: `//compute.googleapis.com/projects/my_project_123/zones/zone1/instances/instance1` See [Resource
|
|
138
163
|
* names](https://cloud.google.com/apis/design/resource_names#full_resource_name) for more information.
|
|
139
164
|
*/
|
|
140
|
-
asset?:
|
|
165
|
+
asset?:
|
|
166
|
+
string;
|
|
141
167
|
/** The type of the asset. Example: `compute.googleapis.com/Disk` See [Supported asset types](https://cloud.google.com/asset-inventory/docs/supported-asset-types) for more information. */
|
|
142
|
-
assetType?:
|
|
168
|
+
assetType?:
|
|
169
|
+
string;
|
|
143
170
|
}
|
|
144
171
|
interface GoogleCloudAssetV1p7beta1RelatedAssets {
|
|
145
172
|
/** The peer resources of the relationship. */
|
|
146
|
-
assets?:
|
|
173
|
+
assets?:
|
|
174
|
+
GoogleCloudAssetV1p7beta1RelatedAsset[];
|
|
147
175
|
/** The detailed relation attributes. */
|
|
148
|
-
relationshipAttributes?:
|
|
176
|
+
relationshipAttributes?:
|
|
177
|
+
GoogleCloudAssetV1p7beta1RelationshipAttributes;
|
|
149
178
|
}
|
|
150
179
|
interface GoogleCloudAssetV1p7beta1RelationshipAttributes {
|
|
151
180
|
/** The detail of the relationship, e.g. `contains`, `attaches` */
|
|
152
|
-
action?:
|
|
181
|
+
action?:
|
|
182
|
+
string;
|
|
153
183
|
/** The source asset type. Example: `compute.googleapis.com/Instance` */
|
|
154
|
-
sourceResourceType?:
|
|
184
|
+
sourceResourceType?:
|
|
185
|
+
string;
|
|
155
186
|
/** The target asset type. Example: `compute.googleapis.com/Disk` */
|
|
156
|
-
targetResourceType?:
|
|
187
|
+
targetResourceType?:
|
|
188
|
+
string;
|
|
157
189
|
/** The unique identifier of the relationship type. Example: `INSTANCE_TO_INSTANCEGROUP` */
|
|
158
|
-
type?:
|
|
190
|
+
type?:
|
|
191
|
+
string;
|
|
159
192
|
}
|
|
160
193
|
interface GoogleCloudAssetV1p7beta1Resource {
|
|
161
194
|
/** The content of the resource, in which some sensitive fields are removed and may not be present. */
|
|
162
|
-
data?:
|
|
195
|
+
data?:
|
|
196
|
+
{ [P in string]: any };
|
|
163
197
|
/**
|
|
164
198
|
* The URL of the discovery document containing the resource's JSON schema. Example: `https://www.googleapis.com/discovery/v1/apis/compute/v1/rest` This value is unspecified for
|
|
165
199
|
* resources that do not have an API based on a discovery document, such as Cloud Bigtable.
|
|
166
200
|
*/
|
|
167
|
-
discoveryDocumentUri?:
|
|
201
|
+
discoveryDocumentUri?:
|
|
202
|
+
string;
|
|
168
203
|
/**
|
|
169
204
|
* The JSON schema name listed in the discovery document. Example: `Project` This value is unspecified for resources that do not have an API based on a discovery document, such as
|
|
170
205
|
* Cloud Bigtable.
|
|
171
206
|
*/
|
|
172
|
-
discoveryName?:
|
|
207
|
+
discoveryName?:
|
|
208
|
+
string;
|
|
173
209
|
/** The location of the resource in Google Cloud, such as its zone and region. For more information, see https://cloud.google.com/about/locations/. */
|
|
174
|
-
location?:
|
|
210
|
+
location?:
|
|
211
|
+
string;
|
|
175
212
|
/**
|
|
176
213
|
* The full name of the immediate parent of this resource. See [Resource Names](https://cloud.google.com/apis/design/resource_names#full_resource_name) for more information. For Google
|
|
177
214
|
* Cloud assets, this value is the parent resource defined in the [IAM policy hierarchy](https://cloud.google.com/iam/docs/overview#policy_hierarchy). Example:
|
|
178
215
|
* `//cloudresourcemanager.googleapis.com/projects/my_project_123` For third-party assets, this field may be set differently.
|
|
179
216
|
*/
|
|
180
|
-
parent?:
|
|
217
|
+
parent?:
|
|
218
|
+
string;
|
|
181
219
|
/**
|
|
182
220
|
* The REST URL for accessing the resource. An HTTP `GET` request using this URL returns the resource itself. Example:
|
|
183
221
|
* `https://cloudresourcemanager.googleapis.com/v1/projects/my-project-123` This value is unspecified for resources without a REST API.
|
|
184
222
|
*/
|
|
185
|
-
resourceUrl?:
|
|
223
|
+
resourceUrl?:
|
|
224
|
+
string;
|
|
186
225
|
/** The API version. Example: `v1` */
|
|
187
|
-
version?:
|
|
226
|
+
version?:
|
|
227
|
+
string;
|
|
188
228
|
}
|
|
189
229
|
interface GoogleCloudOrgpolicyV1BooleanPolicy {
|
|
190
230
|
/**
|
|
@@ -199,15 +239,19 @@ declare namespace gapi.client {
|
|
|
199
239
|
* enforced. Example 3 (RestoreDefault): `organizations/foo` has a `Policy` with: {enforced: true} `projects/bar` has a `Policy` with: {RestoreDefault: {}} The constraint at
|
|
200
240
|
* `organizations/foo` is enforced. The constraint at `projects/bar` is not enforced, because `constraint_default` for the `Constraint` is `ALLOW`.
|
|
201
241
|
*/
|
|
202
|
-
enforced?:
|
|
242
|
+
enforced?:
|
|
243
|
+
boolean;
|
|
203
244
|
}
|
|
204
245
|
interface GoogleCloudOrgpolicyV1ListPolicy {
|
|
205
246
|
/** List of values allowed at this resource. Can only be set if `all_values` is set to `ALL_VALUES_UNSPECIFIED`. */
|
|
206
|
-
allowedValues?:
|
|
247
|
+
allowedValues?:
|
|
248
|
+
string[];
|
|
207
249
|
/** The policy all_values state. */
|
|
208
|
-
allValues?:
|
|
250
|
+
allValues?:
|
|
251
|
+
string;
|
|
209
252
|
/** List of values denied at this resource. Can only be set if `all_values` is set to `ALL_VALUES_UNSPECIFIED`. */
|
|
210
|
-
deniedValues?:
|
|
253
|
+
deniedValues?:
|
|
254
|
+
string[];
|
|
211
255
|
/**
|
|
212
256
|
* Determines the inheritance behavior for this `Policy`. By default, a `ListPolicy` set at a resource supersedes any `Policy` set anywhere up the resource hierarchy. However, if
|
|
213
257
|
* `inherit_from_parent` is set to `true`, then the values from the effective `Policy` of the parent resource are inherited, meaning the values set in this `Policy` are added to the
|
|
@@ -234,68 +278,85 @@ declare namespace gapi.client {
|
|
|
234
278
|
* `Policy` with: {allowed_values: "under:projects/P3"} {denied_values: "under:folders/F2"} The accepted values at `organizations/foo` are `organizations/O1`, `folders/F1`,
|
|
235
279
|
* `folders/F2`, `projects/P1`, `projects/P2`, `projects/P3`. The accepted values at `projects/bar` are `organizations/O1`, `folders/F1`, `projects/P1`.
|
|
236
280
|
*/
|
|
237
|
-
inheritFromParent?:
|
|
281
|
+
inheritFromParent?:
|
|
282
|
+
boolean;
|
|
238
283
|
/**
|
|
239
284
|
* Optional. The Google Cloud Console will try to default to a configuration that matches the value specified in this `Policy`. If `suggested_value` is not set, it will inherit the
|
|
240
285
|
* value specified higher in the hierarchy, unless `inherit_from_parent` is `false`.
|
|
241
286
|
*/
|
|
242
|
-
suggestedValue?:
|
|
287
|
+
suggestedValue?:
|
|
288
|
+
string;
|
|
243
289
|
}
|
|
244
290
|
interface GoogleCloudOrgpolicyV1Policy {
|
|
245
291
|
/** For boolean `Constraints`, whether to enforce the `Constraint` or not. */
|
|
246
|
-
booleanPolicy?:
|
|
292
|
+
booleanPolicy?:
|
|
293
|
+
GoogleCloudOrgpolicyV1BooleanPolicy;
|
|
247
294
|
/**
|
|
248
295
|
* The name of the `Constraint` the `Policy` is configuring, for example, `constraints/serviceuser.services`. A [list of available
|
|
249
296
|
* constraints](/resource-manager/docs/organization-policy/org-policy-constraints) is available. Immutable after creation.
|
|
250
297
|
*/
|
|
251
|
-
constraint?:
|
|
298
|
+
constraint?:
|
|
299
|
+
string;
|
|
252
300
|
/**
|
|
253
301
|
* An opaque tag indicating the current version of the `Policy`, used for concurrency control. When the `Policy` is returned from either a `GetPolicy` or a `ListOrgPolicy` request,
|
|
254
302
|
* this `etag` indicates the version of the current `Policy` to use when executing a read-modify-write loop. When the `Policy` is returned from a `GetEffectivePolicy` request, the
|
|
255
303
|
* `etag` will be unset. When the `Policy` is used in a `SetOrgPolicy` method, use the `etag` value that was returned from a `GetOrgPolicy` request as part of a read-modify-write loop
|
|
256
304
|
* for concurrency control. Not setting the `etag`in a `SetOrgPolicy` request will result in an unconditional write of the `Policy`.
|
|
257
305
|
*/
|
|
258
|
-
etag?:
|
|
306
|
+
etag?:
|
|
307
|
+
string;
|
|
259
308
|
/** List of values either allowed or disallowed. */
|
|
260
|
-
listPolicy?:
|
|
309
|
+
listPolicy?:
|
|
310
|
+
GoogleCloudOrgpolicyV1ListPolicy;
|
|
261
311
|
/** Restores the default behavior of the constraint; independent of `Constraint` type. */
|
|
262
|
-
restoreDefault?:
|
|
312
|
+
restoreDefault?:
|
|
313
|
+
any;
|
|
263
314
|
/**
|
|
264
315
|
* The time stamp the `Policy` was previously updated. This is set by the server, not specified by the caller, and represents the last time a call to `SetOrgPolicy` was made for that
|
|
265
316
|
* `Policy`. Any value set by the client will be ignored.
|
|
266
317
|
*/
|
|
267
|
-
updateTime?:
|
|
318
|
+
updateTime?:
|
|
319
|
+
string;
|
|
268
320
|
/** Version of the `Policy`. Default version is 0; */
|
|
269
|
-
version?:
|
|
321
|
+
version?:
|
|
322
|
+
number;
|
|
270
323
|
}
|
|
271
324
|
// tslint:disable-next-line:no-empty-interface
|
|
272
325
|
interface GoogleCloudOrgpolicyV1RestoreDefault {
|
|
273
326
|
}
|
|
274
327
|
interface GoogleIdentityAccesscontextmanagerV1AccessLevel {
|
|
275
328
|
/** A `BasicLevel` composed of `Conditions`. */
|
|
276
|
-
basic?:
|
|
329
|
+
basic?:
|
|
330
|
+
GoogleIdentityAccesscontextmanagerV1BasicLevel;
|
|
277
331
|
/** A `CustomLevel` written in the Common Expression Language. */
|
|
278
|
-
custom?:
|
|
332
|
+
custom?:
|
|
333
|
+
GoogleIdentityAccesscontextmanagerV1CustomLevel;
|
|
279
334
|
/** Description of the `AccessLevel` and its use. Does not affect behavior. */
|
|
280
|
-
description?:
|
|
335
|
+
description?:
|
|
336
|
+
string;
|
|
281
337
|
/**
|
|
282
338
|
* Resource name for the `AccessLevel`. Format: `accessPolicies/{access_policy}/accessLevels/{access_level}`. The `access_level` component must begin with a letter, followed by
|
|
283
339
|
* alphanumeric characters or `_`. Its maximum length is 50 characters. After you create an `AccessLevel`, you cannot change its `name`.
|
|
284
340
|
*/
|
|
285
|
-
name?:
|
|
341
|
+
name?:
|
|
342
|
+
string;
|
|
286
343
|
/** Human readable title. Must be unique within the Policy. */
|
|
287
|
-
title?:
|
|
344
|
+
title?:
|
|
345
|
+
string;
|
|
288
346
|
}
|
|
289
347
|
interface GoogleIdentityAccesscontextmanagerV1AccessPolicy {
|
|
290
348
|
/**
|
|
291
349
|
* Output only. An opaque identifier for the current version of the `AccessPolicy`. This will always be a strongly validated etag, meaning that two Access Polices will be identical if
|
|
292
350
|
* and only if their etags are identical. Clients should not expect this to be in any specific format.
|
|
293
351
|
*/
|
|
294
|
-
etag?:
|
|
352
|
+
etag?:
|
|
353
|
+
string;
|
|
295
354
|
/** Output only. Resource name of the `AccessPolicy`. Format: `accessPolicies/{access_policy}` */
|
|
296
|
-
name?:
|
|
355
|
+
name?:
|
|
356
|
+
string;
|
|
297
357
|
/** Required. The parent of this `AccessPolicy` in the Cloud Resource Hierarchy. Currently immutable once created. Format: `organizations/{organization_id}` */
|
|
298
|
-
parent?:
|
|
358
|
+
parent?:
|
|
359
|
+
string;
|
|
299
360
|
/**
|
|
300
361
|
* The scopes of a policy define which resources an ACM policy can restrict, and where ACM resources can be referenced. For example, a policy with scopes=["folders/123"] has the
|
|
301
362
|
* following behavior: - vpcsc perimeters can only restrict projects within folders/123 - access levels can only be referenced by resources within folders/123. If empty, there are no
|
|
@@ -303,90 +364,113 @@ declare namespace gapi.client {
|
|
|
303
364
|
* (attempting to create a second policy which includes "folders/123" will result in an error). Currently, scopes cannot be modified after a policy is created. Currently, policies can
|
|
304
365
|
* only have a single scope. Format: list of `folders/{folder_number}` or `projects/{project_number}`
|
|
305
366
|
*/
|
|
306
|
-
scopes?:
|
|
367
|
+
scopes?:
|
|
368
|
+
string[];
|
|
307
369
|
/** Required. Human readable title. Does not affect behavior. */
|
|
308
|
-
title?:
|
|
370
|
+
title?:
|
|
371
|
+
string;
|
|
309
372
|
}
|
|
310
373
|
interface GoogleIdentityAccesscontextmanagerV1ApiOperation {
|
|
311
374
|
/**
|
|
312
375
|
* API methods or permissions to allow. Method or permission must belong to the service specified by `service_name` field. A single MethodSelector entry with `*` specified for the
|
|
313
376
|
* `method` field will allow all methods AND permissions for the service specified in `service_name`.
|
|
314
377
|
*/
|
|
315
|
-
methodSelectors?:
|
|
378
|
+
methodSelectors?:
|
|
379
|
+
GoogleIdentityAccesscontextmanagerV1MethodSelector[];
|
|
316
380
|
/**
|
|
317
381
|
* The name of the API whose methods or permissions the IngressPolicy or EgressPolicy want to allow. A single ApiOperation with `service_name` field set to `*` will allow all methods
|
|
318
382
|
* AND permissions for all services.
|
|
319
383
|
*/
|
|
320
|
-
serviceName?:
|
|
384
|
+
serviceName?:
|
|
385
|
+
string;
|
|
321
386
|
}
|
|
322
387
|
interface GoogleIdentityAccesscontextmanagerV1BasicLevel {
|
|
323
388
|
/**
|
|
324
389
|
* How the `conditions` list should be combined to determine if a request is granted this `AccessLevel`. If AND is used, each `Condition` in `conditions` must be satisfied for the
|
|
325
390
|
* `AccessLevel` to be applied. If OR is used, at least one `Condition` in `conditions` must be satisfied for the `AccessLevel` to be applied. Default behavior is AND.
|
|
326
391
|
*/
|
|
327
|
-
combiningFunction?:
|
|
392
|
+
combiningFunction?:
|
|
393
|
+
string;
|
|
328
394
|
/** Required. A list of requirements for the `AccessLevel` to be granted. */
|
|
329
|
-
conditions?:
|
|
395
|
+
conditions?:
|
|
396
|
+
GoogleIdentityAccesscontextmanagerV1Condition[];
|
|
330
397
|
}
|
|
331
398
|
interface GoogleIdentityAccesscontextmanagerV1Condition {
|
|
332
399
|
/** Device specific restrictions, all restrictions must hold for the Condition to be true. If not specified, all devices are allowed. */
|
|
333
|
-
devicePolicy?:
|
|
400
|
+
devicePolicy?:
|
|
401
|
+
GoogleIdentityAccesscontextmanagerV1DevicePolicy;
|
|
334
402
|
/**
|
|
335
403
|
* CIDR block IP subnetwork specification. May be IPv4 or IPv6. Note that for a CIDR IP address block, the specified IP address portion must be properly truncated (i.e. all the host
|
|
336
404
|
* bits must be zero) or the input is considered malformed. For example, "192.0.2.0/24" is accepted but "192.0.2.1/24" is not. Similarly, for IPv6, "2001:db8::/32" is accepted whereas
|
|
337
405
|
* "2001:db8::1/32" is not. The originating IP of a request must be in one of the listed subnets in order for this Condition to be true. If empty, all IP addresses are allowed.
|
|
338
406
|
*/
|
|
339
|
-
ipSubnetworks?:
|
|
407
|
+
ipSubnetworks?:
|
|
408
|
+
string[];
|
|
340
409
|
/**
|
|
341
410
|
* The request must be made by one of the provided user or service accounts. Groups are not supported. Syntax: `user:{emailid}` `serviceAccount:{emailid}` If not specified, a request
|
|
342
411
|
* may come from any user.
|
|
343
412
|
*/
|
|
344
|
-
members?:
|
|
413
|
+
members?:
|
|
414
|
+
string[];
|
|
345
415
|
/**
|
|
346
416
|
* Whether to negate the Condition. If true, the Condition becomes a NAND over its non-empty fields, each field must be false for the Condition overall to be satisfied. Defaults to
|
|
347
417
|
* false.
|
|
348
418
|
*/
|
|
349
|
-
negate?:
|
|
419
|
+
negate?:
|
|
420
|
+
boolean;
|
|
350
421
|
/** The request must originate from one of the provided countries/regions. Must be valid ISO 3166-1 alpha-2 codes. */
|
|
351
|
-
regions?:
|
|
422
|
+
regions?:
|
|
423
|
+
string[];
|
|
352
424
|
/**
|
|
353
425
|
* A list of other access levels defined in the same `Policy`, referenced by resource name. Referencing an `AccessLevel` which does not exist is an error. All access levels listed must
|
|
354
426
|
* be granted for the Condition to be true. Example: "`accessPolicies/MY_POLICY/accessLevels/LEVEL_NAME"`
|
|
355
427
|
*/
|
|
356
|
-
requiredAccessLevels?:
|
|
428
|
+
requiredAccessLevels?:
|
|
429
|
+
string[];
|
|
357
430
|
}
|
|
358
431
|
interface GoogleIdentityAccesscontextmanagerV1CustomLevel {
|
|
359
432
|
/** Required. A Cloud CEL expression evaluating to a boolean. */
|
|
360
|
-
expr?:
|
|
433
|
+
expr?:
|
|
434
|
+
Expr;
|
|
361
435
|
}
|
|
362
436
|
interface GoogleIdentityAccesscontextmanagerV1DevicePolicy {
|
|
363
437
|
/** Allowed device management levels, an empty list allows all management levels. */
|
|
364
|
-
allowedDeviceManagementLevels?:
|
|
438
|
+
allowedDeviceManagementLevels?:
|
|
439
|
+
string[];
|
|
365
440
|
/** Allowed encryptions statuses, an empty list allows all statuses. */
|
|
366
|
-
allowedEncryptionStatuses?:
|
|
441
|
+
allowedEncryptionStatuses?:
|
|
442
|
+
string[];
|
|
367
443
|
/** Allowed OS versions, an empty list allows all types and all versions. */
|
|
368
|
-
osConstraints?:
|
|
444
|
+
osConstraints?:
|
|
445
|
+
GoogleIdentityAccesscontextmanagerV1OsConstraint[];
|
|
369
446
|
/** Whether the device needs to be approved by the customer admin. */
|
|
370
|
-
requireAdminApproval?:
|
|
447
|
+
requireAdminApproval?:
|
|
448
|
+
boolean;
|
|
371
449
|
/** Whether the device needs to be corp owned. */
|
|
372
|
-
requireCorpOwned?:
|
|
450
|
+
requireCorpOwned?:
|
|
451
|
+
boolean;
|
|
373
452
|
/** Whether or not screenlock is required for the DevicePolicy to be true. Defaults to `false`. */
|
|
374
|
-
requireScreenlock?:
|
|
453
|
+
requireScreenlock?:
|
|
454
|
+
boolean;
|
|
375
455
|
}
|
|
376
456
|
interface GoogleIdentityAccesscontextmanagerV1EgressFrom {
|
|
377
457
|
/**
|
|
378
458
|
* A list of identities that are allowed access through this [EgressPolicy]. Should be in the format of email address. The email address should represent individual user or service
|
|
379
459
|
* account only.
|
|
380
460
|
*/
|
|
381
|
-
identities?:
|
|
461
|
+
identities?:
|
|
462
|
+
string[];
|
|
382
463
|
/** Specifies the type of identities that are allowed access to outside the perimeter. If left unspecified, then members of `identities` field will be allowed access. */
|
|
383
|
-
identityType?:
|
|
464
|
+
identityType?:
|
|
465
|
+
string;
|
|
384
466
|
}
|
|
385
467
|
interface GoogleIdentityAccesscontextmanagerV1EgressPolicy {
|
|
386
468
|
/** Defines conditions on the source of a request causing this EgressPolicy to apply. */
|
|
387
|
-
egressFrom?:
|
|
469
|
+
egressFrom?:
|
|
470
|
+
GoogleIdentityAccesscontextmanagerV1EgressFrom;
|
|
388
471
|
/** Defines the conditions on the ApiOperation and destination resources that cause this EgressPolicy to apply. */
|
|
389
|
-
egressTo?:
|
|
472
|
+
egressTo?:
|
|
473
|
+
GoogleIdentityAccesscontextmanagerV1EgressTo;
|
|
390
474
|
}
|
|
391
475
|
interface GoogleIdentityAccesscontextmanagerV1EgressTo {
|
|
392
476
|
/**
|
|
@@ -394,31 +478,39 @@ declare namespace gapi.client {
|
|
|
394
478
|
* the supported format is azure://myaccount.blob.core.windows.net/CONTAINER_NAME. A request matches if it contains an external resource in this list (Example: s3://bucket/path).
|
|
395
479
|
* Currently '*' is not allowed.
|
|
396
480
|
*/
|
|
397
|
-
externalResources?:
|
|
481
|
+
externalResources?:
|
|
482
|
+
string[];
|
|
398
483
|
/** A list of ApiOperations allowed to be performed by the sources specified in the corresponding EgressFrom. A request matches if it uses an operation/service in this list. */
|
|
399
|
-
operations?:
|
|
484
|
+
operations?:
|
|
485
|
+
GoogleIdentityAccesscontextmanagerV1ApiOperation[];
|
|
400
486
|
/**
|
|
401
487
|
* A list of resources, currently only projects in the form `projects/`, that are allowed to be accessed by sources defined in the corresponding EgressFrom. A request matches if it
|
|
402
488
|
* contains a resource in this list. If `*` is specified for `resources`, then this EgressTo rule will authorize access to all resources outside the perimeter.
|
|
403
489
|
*/
|
|
404
|
-
resources?:
|
|
490
|
+
resources?:
|
|
491
|
+
string[];
|
|
405
492
|
}
|
|
406
493
|
interface GoogleIdentityAccesscontextmanagerV1IngressFrom {
|
|
407
494
|
/**
|
|
408
495
|
* A list of identities that are allowed access through this ingress policy. Should be in the format of email address. The email address should represent individual user or service
|
|
409
496
|
* account only.
|
|
410
497
|
*/
|
|
411
|
-
identities?:
|
|
498
|
+
identities?:
|
|
499
|
+
string[];
|
|
412
500
|
/** Specifies the type of identities that are allowed access from outside the perimeter. If left unspecified, then members of `identities` field will be allowed access. */
|
|
413
|
-
identityType?:
|
|
501
|
+
identityType?:
|
|
502
|
+
string;
|
|
414
503
|
/** Sources that this IngressPolicy authorizes access from. */
|
|
415
|
-
sources?:
|
|
504
|
+
sources?:
|
|
505
|
+
GoogleIdentityAccesscontextmanagerV1IngressSource[];
|
|
416
506
|
}
|
|
417
507
|
interface GoogleIdentityAccesscontextmanagerV1IngressPolicy {
|
|
418
508
|
/** Defines the conditions on the source of a request causing this IngressPolicy to apply. */
|
|
419
|
-
ingressFrom?:
|
|
509
|
+
ingressFrom?:
|
|
510
|
+
GoogleIdentityAccesscontextmanagerV1IngressFrom;
|
|
420
511
|
/** Defines the conditions on the ApiOperation and request destination that cause this IngressPolicy to apply. */
|
|
421
|
-
ingressTo?:
|
|
512
|
+
ingressTo?:
|
|
513
|
+
GoogleIdentityAccesscontextmanagerV1IngressTo;
|
|
422
514
|
}
|
|
423
515
|
interface GoogleIdentityAccesscontextmanagerV1IngressSource {
|
|
424
516
|
/**
|
|
@@ -427,72 +519,88 @@ declare namespace gapi.client {
|
|
|
427
519
|
* calls with request origins within the perimeter. Example: `accessPolicies/MY_POLICY/accessLevels/MY_LEVEL`. If a single `*` is specified for `access_level`, then all IngressSources
|
|
428
520
|
* will be allowed.
|
|
429
521
|
*/
|
|
430
|
-
accessLevel?:
|
|
522
|
+
accessLevel?:
|
|
523
|
+
string;
|
|
431
524
|
/**
|
|
432
525
|
* A Google Cloud resource that is allowed to ingress the perimeter. Requests from these resources will be allowed to access perimeter data. Currently only projects and VPCs are
|
|
433
526
|
* allowed. Project format: `projects/{project_number}` VPC network format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`. The project may be in any Google
|
|
434
527
|
* Cloud organization, not just the organization that the perimeter is defined in. `*` is not allowed, the case of allowing all Google Cloud resources only is not supported.
|
|
435
528
|
*/
|
|
436
|
-
resource?:
|
|
529
|
+
resource?:
|
|
530
|
+
string;
|
|
437
531
|
}
|
|
438
532
|
interface GoogleIdentityAccesscontextmanagerV1IngressTo {
|
|
439
533
|
/** A list of ApiOperations allowed to be performed by the sources specified in corresponding IngressFrom in this ServicePerimeter. */
|
|
440
|
-
operations?:
|
|
534
|
+
operations?:
|
|
535
|
+
GoogleIdentityAccesscontextmanagerV1ApiOperation[];
|
|
441
536
|
/**
|
|
442
537
|
* A list of resources, currently only projects in the form `projects/`, protected by this ServicePerimeter that are allowed to be accessed by sources defined in the corresponding
|
|
443
538
|
* IngressFrom. If a single `*` is specified, then access to all resources inside the perimeter are allowed.
|
|
444
539
|
*/
|
|
445
|
-
resources?:
|
|
540
|
+
resources?:
|
|
541
|
+
string[];
|
|
446
542
|
}
|
|
447
543
|
interface GoogleIdentityAccesscontextmanagerV1MethodSelector {
|
|
448
544
|
/**
|
|
449
545
|
* Value for `method` should be a valid method name for the corresponding `service_name` in ApiOperation. If `*` used as value for `method`, then ALL methods and permissions are
|
|
450
546
|
* allowed.
|
|
451
547
|
*/
|
|
452
|
-
method?:
|
|
548
|
+
method?:
|
|
549
|
+
string;
|
|
453
550
|
/** Value for `permission` should be a valid Cloud IAM permission for the corresponding `service_name` in ApiOperation. */
|
|
454
|
-
permission?:
|
|
551
|
+
permission?:
|
|
552
|
+
string;
|
|
455
553
|
}
|
|
456
554
|
interface GoogleIdentityAccesscontextmanagerV1OsConstraint {
|
|
457
555
|
/** The minimum allowed OS version. If not set, any version of this OS satisfies the constraint. Format: `"major.minor.patch"`. Examples: `"10.5.301"`, `"9.2.1"`. */
|
|
458
|
-
minimumVersion?:
|
|
556
|
+
minimumVersion?:
|
|
557
|
+
string;
|
|
459
558
|
/** Required. The allowed OS type. */
|
|
460
|
-
osType?:
|
|
559
|
+
osType?:
|
|
560
|
+
string;
|
|
461
561
|
/**
|
|
462
562
|
* Only allows requests from devices with a verified Chrome OS. Verifications includes requirements that the device is enterprise-managed, conformant to domain policies, and the caller
|
|
463
563
|
* has permission to call the API targeted by the request.
|
|
464
564
|
*/
|
|
465
|
-
requireVerifiedChromeOs?:
|
|
565
|
+
requireVerifiedChromeOs?:
|
|
566
|
+
boolean;
|
|
466
567
|
}
|
|
467
568
|
interface GoogleIdentityAccesscontextmanagerV1ServicePerimeter {
|
|
468
569
|
/** Description of the `ServicePerimeter` and its use. Does not affect behavior. */
|
|
469
|
-
description?:
|
|
570
|
+
description?:
|
|
571
|
+
string;
|
|
470
572
|
/**
|
|
471
573
|
* Resource name for the `ServicePerimeter`. Format: `accessPolicies/{access_policy}/servicePerimeters/{service_perimeter}`. The `service_perimeter` component must begin with a letter,
|
|
472
574
|
* followed by alphanumeric characters or `_`. After you create a `ServicePerimeter`, you cannot change its `name`.
|
|
473
575
|
*/
|
|
474
|
-
name?:
|
|
576
|
+
name?:
|
|
577
|
+
string;
|
|
475
578
|
/**
|
|
476
579
|
* Perimeter type indicator. A single project or VPC network is allowed to be a member of single regular perimeter, but multiple service perimeter bridges. A project cannot be a
|
|
477
580
|
* included in a perimeter bridge without being included in regular perimeter. For perimeter bridges, the restricted service list as well as access level lists must be empty.
|
|
478
581
|
*/
|
|
479
|
-
perimeterType?:
|
|
582
|
+
perimeterType?:
|
|
583
|
+
string;
|
|
480
584
|
/**
|
|
481
585
|
* Proposed (or dry run) ServicePerimeter configuration. This configuration allows to specify and test ServicePerimeter configuration without enforcing actual access restrictions. Only
|
|
482
586
|
* allowed to be set when the "use_explicit_dry_run_spec" flag is set.
|
|
483
587
|
*/
|
|
484
|
-
spec?:
|
|
588
|
+
spec?:
|
|
589
|
+
GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig;
|
|
485
590
|
/** Current ServicePerimeter configuration. Specifies sets of resources, restricted services and access levels that determine perimeter content and boundaries. */
|
|
486
|
-
status?:
|
|
591
|
+
status?:
|
|
592
|
+
GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig;
|
|
487
593
|
/** Human readable title. Must be unique within the Policy. */
|
|
488
|
-
title?:
|
|
594
|
+
title?:
|
|
595
|
+
string;
|
|
489
596
|
/**
|
|
490
597
|
* Use explicit dry run spec flag. Ordinarily, a dry-run spec implicitly exists for all Service Perimeters, and that spec is identical to the status for those Service Perimeters. When
|
|
491
598
|
* this flag is set, it inhibits the generation of the implicit spec, thereby allowing the user to explicitly provide a configuration ("spec") to use in a dry-run version of the
|
|
492
599
|
* Service Perimeter. This allows the user to test changes to the enforced config ("status") without actually enforcing them. This testing is done through analyzing the differences
|
|
493
600
|
* between currently enforced and suggested restrictions. use_explicit_dry_run_spec must bet set to True if any of the fields in the spec are set to non-default values.
|
|
494
601
|
*/
|
|
495
|
-
useExplicitDryRunSpec?:
|
|
602
|
+
useExplicitDryRunSpec?:
|
|
603
|
+
boolean;
|
|
496
604
|
}
|
|
497
605
|
interface GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig {
|
|
498
606
|
/**
|
|
@@ -500,70 +608,85 @@ declare namespace gapi.client {
|
|
|
500
608
|
* `ServicePerimeter`. Referencing a nonexistent `AccessLevel` is a syntax error. If no `AccessLevel` names are listed, resources within the perimeter can only be accessed via Google
|
|
501
609
|
* Cloud calls with request origins within the perimeter. Example: `"accessPolicies/MY_POLICY/accessLevels/MY_LEVEL"`. For Service Perimeter Bridge, must be empty.
|
|
502
610
|
*/
|
|
503
|
-
accessLevels?:
|
|
611
|
+
accessLevels?:
|
|
612
|
+
string[];
|
|
504
613
|
/**
|
|
505
614
|
* List of EgressPolicies to apply to the perimeter. A perimeter may have multiple EgressPolicies, each of which is evaluated separately. Access is granted if any EgressPolicy grants
|
|
506
615
|
* it. Must be empty for a perimeter bridge.
|
|
507
616
|
*/
|
|
508
|
-
egressPolicies?:
|
|
617
|
+
egressPolicies?:
|
|
618
|
+
GoogleIdentityAccesscontextmanagerV1EgressPolicy[];
|
|
509
619
|
/**
|
|
510
620
|
* List of IngressPolicies to apply to the perimeter. A perimeter may have multiple IngressPolicies, each of which is evaluated separately. Access is granted if any Ingress Policy
|
|
511
621
|
* grants it. Must be empty for a perimeter bridge.
|
|
512
622
|
*/
|
|
513
|
-
ingressPolicies?:
|
|
623
|
+
ingressPolicies?:
|
|
624
|
+
GoogleIdentityAccesscontextmanagerV1IngressPolicy[];
|
|
514
625
|
/**
|
|
515
626
|
* A list of Google Cloud resources that are inside of the service perimeter. Currently only projects and VPCs are allowed. Project format: `projects/{project_number}` VPC network
|
|
516
627
|
* format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`.
|
|
517
628
|
*/
|
|
518
|
-
resources?:
|
|
629
|
+
resources?:
|
|
630
|
+
string[];
|
|
519
631
|
/**
|
|
520
632
|
* Google Cloud services that are subject to the Service Perimeter restrictions. For example, if `storage.googleapis.com` is specified, access to the storage buckets inside the
|
|
521
633
|
* perimeter must meet the perimeter's access restrictions.
|
|
522
634
|
*/
|
|
523
|
-
restrictedServices?:
|
|
635
|
+
restrictedServices?:
|
|
636
|
+
string[];
|
|
524
637
|
/** Configuration for APIs allowed within Perimeter. */
|
|
525
|
-
vpcAccessibleServices?:
|
|
638
|
+
vpcAccessibleServices?:
|
|
639
|
+
GoogleIdentityAccesscontextmanagerV1VpcAccessibleServices;
|
|
526
640
|
}
|
|
527
641
|
interface GoogleIdentityAccesscontextmanagerV1VpcAccessibleServices {
|
|
528
642
|
/**
|
|
529
643
|
* The list of APIs usable within the Service Perimeter. Must be empty unless 'enable_restriction' is True. You can specify a list of individual services, as well as include the
|
|
530
644
|
* 'RESTRICTED-SERVICES' value, which automatically includes all of the services protected by the perimeter.
|
|
531
645
|
*/
|
|
532
|
-
allowedServices?:
|
|
646
|
+
allowedServices?:
|
|
647
|
+
string[];
|
|
533
648
|
/** Whether to restrict API calls within the Service Perimeter to the list of APIs specified in 'allowed_services'. */
|
|
534
|
-
enableRestriction?:
|
|
649
|
+
enableRestriction?:
|
|
650
|
+
boolean;
|
|
535
651
|
}
|
|
536
652
|
interface IamPolicySearchResult {
|
|
537
653
|
/** Explanation about the IAM policy search result. It contains additional information that explains why the search result matches the query. */
|
|
538
|
-
explanation?:
|
|
654
|
+
explanation?:
|
|
655
|
+
Explanation;
|
|
539
656
|
/**
|
|
540
657
|
* The IAM policy attached to the specified resource. Note that the original IAM policy can contain multiple bindings. This only contains the bindings that match the given query. For
|
|
541
658
|
* queries that don't contain a constraint on policies (e.g. an empty query), this contains all the bindings.
|
|
542
659
|
*/
|
|
543
|
-
policy?:
|
|
660
|
+
policy?:
|
|
661
|
+
Policy;
|
|
544
662
|
/**
|
|
545
663
|
* The project that the associated Google Cloud resource belongs to, in the form of `projects/{project_number}`. If an IAM policy is set on a resource -- such as a Compute Engine
|
|
546
664
|
* instance or a Cloud Storage bucket -- the project field will indicate the project that contains the resource. If an IAM policy is set on a folder or orgnization, the project field
|
|
547
665
|
* will be empty.
|
|
548
666
|
*/
|
|
549
|
-
project?:
|
|
667
|
+
project?:
|
|
668
|
+
string;
|
|
550
669
|
/** The [full resource name](https://cloud.google.com/apis/design/resource_names#full_resource_name) of the resource associated with this IAM policy. */
|
|
551
|
-
resource?:
|
|
670
|
+
resource?:
|
|
671
|
+
string;
|
|
552
672
|
}
|
|
553
673
|
interface Permissions {
|
|
554
674
|
/** A list of permissions. Example permission string: "compute.disk.get". */
|
|
555
|
-
permissions?:
|
|
675
|
+
permissions?:
|
|
676
|
+
string[];
|
|
556
677
|
}
|
|
557
678
|
interface Policy {
|
|
558
679
|
/** Specifies cloud audit logging configuration for this policy. */
|
|
559
|
-
auditConfigs?:
|
|
680
|
+
auditConfigs?:
|
|
681
|
+
AuditConfig[];
|
|
560
682
|
/**
|
|
561
683
|
* Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings`
|
|
562
684
|
* must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a
|
|
563
685
|
* principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another
|
|
564
686
|
* 1,450 principals to the `bindings` in the `Policy`.
|
|
565
687
|
*/
|
|
566
|
-
bindings?:
|
|
688
|
+
bindings?:
|
|
689
|
+
Binding[];
|
|
567
690
|
/**
|
|
568
691
|
* `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make
|
|
569
692
|
* use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems
|
|
@@ -571,7 +694,8 @@ declare namespace gapi.client {
|
|
|
571
694
|
* Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1`
|
|
572
695
|
* policy, and all of the conditions in the version `3` policy are lost.
|
|
573
696
|
*/
|
|
574
|
-
etag?:
|
|
697
|
+
etag?:
|
|
698
|
+
string;
|
|
575
699
|
/**
|
|
576
700
|
* Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings
|
|
577
701
|
* must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a
|
|
@@ -580,51 +704,65 @@ declare namespace gapi.client {
|
|
|
580
704
|
* policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave
|
|
581
705
|
* the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
|
|
582
706
|
*/
|
|
583
|
-
version?:
|
|
707
|
+
version?:
|
|
708
|
+
number;
|
|
584
709
|
}
|
|
585
710
|
interface SearchAllIamPoliciesResponse {
|
|
586
711
|
/** Set if there are more results than those appearing in this response; to get the next set of results, call this method again, using this value as the `page_token`. */
|
|
587
|
-
nextPageToken?:
|
|
712
|
+
nextPageToken?:
|
|
713
|
+
string;
|
|
588
714
|
/** A list of IAM policies that match the search query. Related information such as the associated resource is returned along with the policy. */
|
|
589
|
-
results?:
|
|
715
|
+
results?:
|
|
716
|
+
IamPolicySearchResult[];
|
|
590
717
|
}
|
|
591
718
|
interface SearchAllResourcesResponse {
|
|
592
719
|
/**
|
|
593
720
|
* If there are more results than those appearing in this response, then `next_page_token` is included. To get the next set of results, call this method again using the value of
|
|
594
721
|
* `next_page_token` as `page_token`.
|
|
595
722
|
*/
|
|
596
|
-
nextPageToken?:
|
|
723
|
+
nextPageToken?:
|
|
724
|
+
string;
|
|
597
725
|
/** A list of resource that match the search query. */
|
|
598
|
-
results?:
|
|
726
|
+
results?:
|
|
727
|
+
StandardResourceMetadata[];
|
|
599
728
|
}
|
|
600
729
|
interface StandardResourceMetadata {
|
|
601
730
|
/** Additional searchable attributes of this resource. Informational only. The exact set of attributes is subject to change. For example: project id, DNS name etc. */
|
|
602
|
-
additionalAttributes?:
|
|
731
|
+
additionalAttributes?:
|
|
732
|
+
string[];
|
|
603
733
|
/** The type of this resource. For example: "compute.googleapis.com/Disk". */
|
|
604
|
-
assetType?:
|
|
734
|
+
assetType?:
|
|
735
|
+
string;
|
|
605
736
|
/** One or more paragraphs of text description of this resource. Maximum length could be up to 1M bytes. */
|
|
606
|
-
description?:
|
|
737
|
+
description?:
|
|
738
|
+
string;
|
|
607
739
|
/** The display name of this resource. */
|
|
608
|
-
displayName?:
|
|
740
|
+
displayName?:
|
|
741
|
+
string;
|
|
609
742
|
/**
|
|
610
743
|
* Labels associated with this resource. See [Labelling and grouping Google Cloud
|
|
611
744
|
* resources](https://cloud.google.com/blog/products/gcp/labelling-and-grouping-your-google-cloud-platform-resources) for more information.
|
|
612
745
|
*/
|
|
613
|
-
labels?:
|
|
746
|
+
labels?:
|
|
747
|
+
{ [P in string]: string };
|
|
614
748
|
/** Location can be "global", regional like "us-east1", or zonal like "us-west1-b". */
|
|
615
|
-
location?:
|
|
749
|
+
location?:
|
|
750
|
+
string;
|
|
616
751
|
/**
|
|
617
752
|
* The full resource name. For example: `//compute.googleapis.com/projects/my_project_123/zones/zone1/instances/instance1`. See [Resource
|
|
618
753
|
* Names](https://cloud.google.com/apis/design/resource_names#full_resource_name) for more information.
|
|
619
754
|
*/
|
|
620
|
-
name?:
|
|
755
|
+
name?:
|
|
756
|
+
string;
|
|
621
757
|
/**
|
|
622
758
|
* Network tags associated with this resource. Like labels, network tags are a type of annotations used to group Google Cloud resources. See [Labelling Google Cloud
|
|
623
759
|
* resources](lhttps://cloud.google.com/blog/products/gcp/labelling-and-grouping-your-google-cloud-platform-resources) for more information.
|
|
624
760
|
*/
|
|
625
|
-
networkTags?:
|
|
761
|
+
networkTags?:
|
|
762
|
+
string[];
|
|
626
763
|
/** The project that this resource belongs to, in the form of `projects/{project_number}`. */
|
|
627
|
-
project?:
|
|
764
|
+
project?:
|
|
765
|
+
string;
|
|
628
766
|
}
|
|
629
767
|
interface IamPoliciesResource {
|
|
630
768
|
/**
|
|
@@ -634,44 +772,59 @@ declare namespace gapi.client {
|
|
|
634
772
|
*/
|
|
635
773
|
searchAll(request?: {
|
|
636
774
|
/** V1 error format. */
|
|
637
|
-
"$.xgafv"?:
|
|
775
|
+
"$.xgafv"?:
|
|
776
|
+
string;
|
|
638
777
|
/** OAuth access token. */
|
|
639
|
-
access_token?:
|
|
778
|
+
access_token?:
|
|
779
|
+
string;
|
|
640
780
|
/** Data format for response. */
|
|
641
|
-
alt?:
|
|
781
|
+
alt?:
|
|
782
|
+
string;
|
|
642
783
|
/** JSONP */
|
|
643
|
-
callback?:
|
|
784
|
+
callback?:
|
|
785
|
+
string;
|
|
644
786
|
/** Selector specifying which fields to include in a partial response. */
|
|
645
|
-
fields?:
|
|
787
|
+
fields?:
|
|
788
|
+
string;
|
|
646
789
|
/** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
|
|
647
|
-
key?:
|
|
790
|
+
key?:
|
|
791
|
+
string;
|
|
648
792
|
/** OAuth 2.0 token for the current user. */
|
|
649
|
-
oauth_token?:
|
|
793
|
+
oauth_token?:
|
|
794
|
+
string;
|
|
650
795
|
/**
|
|
651
796
|
* Optional. The page size for search result pagination. Page size is capped at 500 even if a larger value is given. If set to zero, server will pick an appropriate default.
|
|
652
797
|
* Returned results may be fewer than requested. When this happens, there could be more results as long as `next_page_token` is returned.
|
|
653
798
|
*/
|
|
654
|
-
pageSize?:
|
|
799
|
+
pageSize?:
|
|
800
|
+
number;
|
|
655
801
|
/**
|
|
656
802
|
* Optional. If present, retrieve the next batch of results from the preceding call to this method. `page_token` must be the value of `next_page_token` from the previous response.
|
|
657
803
|
* The values of all other method parameters must be identical to those in the previous call.
|
|
658
804
|
*/
|
|
659
|
-
pageToken?:
|
|
805
|
+
pageToken?:
|
|
806
|
+
string;
|
|
660
807
|
/** Returns response with indentations and line breaks. */
|
|
661
|
-
prettyPrint?:
|
|
808
|
+
prettyPrint?:
|
|
809
|
+
boolean;
|
|
662
810
|
/** Optional. The query statement. Examples: * "policy:myuser@mydomain.com" * "policy:(myuser@mydomain.com viewer)" */
|
|
663
|
-
query?:
|
|
811
|
+
query?:
|
|
812
|
+
string;
|
|
664
813
|
/** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
|
|
665
|
-
quotaUser?:
|
|
814
|
+
quotaUser?:
|
|
815
|
+
string;
|
|
666
816
|
/**
|
|
667
817
|
* Required. The relative name of an asset. The search is limited to the resources within the `scope`. The allowed value must be: * Organization number (such as
|
|
668
818
|
* "organizations/123") * Folder number (such as "folders/1234") * Project number (such as "projects/12345") * Project ID (such as "projects/abc")
|
|
669
819
|
*/
|
|
670
|
-
scope:
|
|
820
|
+
scope:
|
|
821
|
+
string;
|
|
671
822
|
/** Upload protocol for media (e.g. "raw", "multipart"). */
|
|
672
|
-
upload_protocol?:
|
|
823
|
+
upload_protocol?:
|
|
824
|
+
string;
|
|
673
825
|
/** Legacy upload protocol for media (e.g. "media", "multipart"). */
|
|
674
|
-
uploadType?:
|
|
826
|
+
uploadType?:
|
|
827
|
+
string;
|
|
675
828
|
}): Request<SearchAllIamPoliciesResponse>;
|
|
676
829
|
}
|
|
677
830
|
interface ResourcesResource {
|
|
@@ -682,51 +835,68 @@ declare namespace gapi.client {
|
|
|
682
835
|
*/
|
|
683
836
|
searchAll(request?: {
|
|
684
837
|
/** V1 error format. */
|
|
685
|
-
"$.xgafv"?:
|
|
838
|
+
"$.xgafv"?:
|
|
839
|
+
string;
|
|
686
840
|
/** OAuth access token. */
|
|
687
|
-
access_token?:
|
|
841
|
+
access_token?:
|
|
842
|
+
string;
|
|
688
843
|
/** Data format for response. */
|
|
689
|
-
alt?:
|
|
844
|
+
alt?:
|
|
845
|
+
string;
|
|
690
846
|
/** Optional. A list of asset types that this request searches for. If empty, it will search all the supported asset types. */
|
|
691
|
-
assetTypes?:
|
|
847
|
+
assetTypes?:
|
|
848
|
+
string | string[];
|
|
692
849
|
/** JSONP */
|
|
693
|
-
callback?:
|
|
850
|
+
callback?:
|
|
851
|
+
string;
|
|
694
852
|
/** Selector specifying which fields to include in a partial response. */
|
|
695
|
-
fields?:
|
|
853
|
+
fields?:
|
|
854
|
+
string;
|
|
696
855
|
/** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
|
|
697
|
-
key?:
|
|
856
|
+
key?:
|
|
857
|
+
string;
|
|
698
858
|
/** OAuth 2.0 token for the current user. */
|
|
699
|
-
oauth_token?:
|
|
859
|
+
oauth_token?:
|
|
860
|
+
string;
|
|
700
861
|
/**
|
|
701
862
|
* Optional. A comma separated list of fields specifying the sorting order of the results. The default order is ascending. Add ` DESC` after the field name to indicate descending
|
|
702
863
|
* order. Redundant space characters are ignored. For example, ` location DESC , name `.
|
|
703
864
|
*/
|
|
704
|
-
orderBy?:
|
|
865
|
+
orderBy?:
|
|
866
|
+
string;
|
|
705
867
|
/**
|
|
706
868
|
* Optional. The page size for search result pagination. Page size is capped at 500 even if a larger value is given. If set to zero, server will pick an appropriate default.
|
|
707
869
|
* Returned results may be fewer than requested. When this happens, there could be more results as long as `next_page_token` is returned.
|
|
708
870
|
*/
|
|
709
|
-
pageSize?:
|
|
871
|
+
pageSize?:
|
|
872
|
+
number;
|
|
710
873
|
/**
|
|
711
874
|
* Optional. If present, then retrieve the next batch of results from the preceding call to this method. `page_token` must be the value of `next_page_token` from the previous
|
|
712
875
|
* response. The values of all other method parameters, must be identical to those in the previous call.
|
|
713
876
|
*/
|
|
714
|
-
pageToken?:
|
|
877
|
+
pageToken?:
|
|
878
|
+
string;
|
|
715
879
|
/** Returns response with indentations and line breaks. */
|
|
716
|
-
prettyPrint?:
|
|
880
|
+
prettyPrint?:
|
|
881
|
+
boolean;
|
|
717
882
|
/** Optional. The query statement. */
|
|
718
|
-
query?:
|
|
883
|
+
query?:
|
|
884
|
+
string;
|
|
719
885
|
/** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
|
|
720
|
-
quotaUser?:
|
|
886
|
+
quotaUser?:
|
|
887
|
+
string;
|
|
721
888
|
/**
|
|
722
889
|
* Required. The relative name of an asset. The search is limited to the resources within the `scope`. The allowed value must be: * Organization number (such as
|
|
723
890
|
* "organizations/123") * Folder number (such as "folders/1234") * Project number (such as "projects/12345") * Project ID (such as "projects/abc")
|
|
724
891
|
*/
|
|
725
|
-
scope:
|
|
892
|
+
scope:
|
|
893
|
+
string;
|
|
726
894
|
/** Upload protocol for media (e.g. "raw", "multipart"). */
|
|
727
|
-
upload_protocol?:
|
|
895
|
+
upload_protocol?:
|
|
896
|
+
string;
|
|
728
897
|
/** Legacy upload protocol for media (e.g. "media", "multipart"). */
|
|
729
|
-
uploadType?:
|
|
898
|
+
uploadType?:
|
|
899
|
+
string;
|
|
730
900
|
}): Request<SearchAllResourcesResponse>;
|
|
731
901
|
}
|
|
732
902
|
|
package/package.json
CHANGED
package/tests.ts
CHANGED
|
@@ -3,7 +3,7 @@
|
|
|
3
3
|
// This file was generated by https://github.com/Maxim-Mazurok/google-api-typings-generator. Please do not edit it manually.
|
|
4
4
|
// In case of any problems please post issue to https://github.com/Maxim-Mazurok/google-api-typings-generator
|
|
5
5
|
|
|
6
|
-
// Revision:
|
|
6
|
+
// Revision: 20230429
|
|
7
7
|
|
|
8
8
|
gapi.load('client', async () => {
|
|
9
9
|
/** now we can use gapi.client */
|