@maxim_mazurok/gapi.client.cloudasset-v1p7beta1 0.0.20230421 → 0.0.20230429
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/index.d.ts +359 -180
- package/package.json +1 -1
- package/tests.ts +1 -1
package/index.d.ts
CHANGED
|
@@ -9,7 +9,7 @@
|
|
|
9
9
|
// This file was generated by https://github.com/Maxim-Mazurok/google-api-typings-generator. Please do not edit it manually.
|
|
10
10
|
// In case of any problems please post issue to https://github.com/Maxim-Mazurok/google-api-typings-generator
|
|
11
11
|
// Generated from: https://cloudasset.googleapis.com/$discovery/rest?version=v1p7beta1
|
|
12
|
-
// Revision:
|
|
12
|
+
// Revision: 20230429
|
|
13
13
|
|
|
14
14
|
/// <reference types="gapi.client" />
|
|
15
15
|
|
|
@@ -24,25 +24,30 @@ declare namespace gapi.client {
|
|
|
24
24
|
namespace cloudasset {
|
|
25
25
|
interface AnalyzeIamPolicyLongrunningMetadata {
|
|
26
26
|
/** Output only. The time the operation was created. */
|
|
27
|
-
createTime?:
|
|
27
|
+
createTime?:
|
|
28
|
+
string;
|
|
28
29
|
}
|
|
29
30
|
// tslint:disable-next-line:no-empty-interface
|
|
30
31
|
interface AnalyzeIamPolicyLongrunningResponse {
|
|
31
32
|
}
|
|
32
33
|
interface AuditConfig {
|
|
33
34
|
/** The configuration for logging of each type of permission. */
|
|
34
|
-
auditLogConfigs?:
|
|
35
|
+
auditLogConfigs?:
|
|
36
|
+
AuditLogConfig[];
|
|
35
37
|
/**
|
|
36
38
|
* Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all
|
|
37
39
|
* services.
|
|
38
40
|
*/
|
|
39
|
-
service?:
|
|
41
|
+
service?:
|
|
42
|
+
string;
|
|
40
43
|
}
|
|
41
44
|
interface AuditLogConfig {
|
|
42
45
|
/** Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members. */
|
|
43
|
-
exemptedMembers?:
|
|
46
|
+
exemptedMembers?:
|
|
47
|
+
string[];
|
|
44
48
|
/** The log type that this config enables. */
|
|
45
|
-
logType?:
|
|
49
|
+
logType?:
|
|
50
|
+
string;
|
|
46
51
|
}
|
|
47
52
|
interface Binding {
|
|
48
53
|
/**
|
|
@@ -50,7 +55,8 @@ declare namespace gapi.client {
|
|
|
50
55
|
* then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which
|
|
51
56
|
* resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
|
|
52
57
|
*/
|
|
53
|
-
condition?:
|
|
58
|
+
condition?:
|
|
59
|
+
Expr;
|
|
54
60
|
/**
|
|
55
61
|
* Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on
|
|
56
62
|
* the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service
|
|
@@ -67,70 +73,89 @@ declare namespace gapi.client {
|
|
|
67
73
|
* has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group
|
|
68
74
|
* retains the role in the binding.
|
|
69
75
|
*/
|
|
70
|
-
members?:
|
|
76
|
+
members?:
|
|
77
|
+
string[];
|
|
71
78
|
/** Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`. */
|
|
72
|
-
role?:
|
|
79
|
+
role?:
|
|
80
|
+
string;
|
|
73
81
|
}
|
|
74
82
|
interface Expr {
|
|
75
83
|
/** Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI. */
|
|
76
|
-
description?:
|
|
84
|
+
description?:
|
|
85
|
+
string;
|
|
77
86
|
/** Textual representation of an expression in Common Expression Language syntax. */
|
|
78
|
-
expression?:
|
|
87
|
+
expression?:
|
|
88
|
+
string;
|
|
79
89
|
/** Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file. */
|
|
80
|
-
location?:
|
|
90
|
+
location?:
|
|
91
|
+
string;
|
|
81
92
|
/** Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression. */
|
|
82
|
-
title?:
|
|
93
|
+
title?:
|
|
94
|
+
string;
|
|
83
95
|
}
|
|
84
96
|
interface GoogleCloudAssetV1p7beta1Asset {
|
|
85
97
|
/** Please also refer to the [access level user guide](https://cloud.google.com/access-context-manager/docs/overview#access-levels). */
|
|
86
|
-
accessLevel?:
|
|
98
|
+
accessLevel?:
|
|
99
|
+
GoogleIdentityAccesscontextmanagerV1AccessLevel;
|
|
87
100
|
/** Please also refer to the [access policy user guide](https://cloud.google.com/access-context-manager/docs/overview#access-policies). */
|
|
88
|
-
accessPolicy?:
|
|
101
|
+
accessPolicy?:
|
|
102
|
+
GoogleIdentityAccesscontextmanagerV1AccessPolicy;
|
|
89
103
|
/**
|
|
90
104
|
* The ancestry path of an asset in Google Cloud [resource hierarchy](https://cloud.google.com/resource-manager/docs/cloud-platform-resource-hierarchy), represented as a list of
|
|
91
105
|
* relative resource names. An ancestry path starts with the closest ancestor in the hierarchy and ends at root. If the asset is a project, folder, or organization, the ancestry path
|
|
92
106
|
* starts from the asset itself. Example: `["projects/123456789", "folders/5432", "organizations/1234"]`
|
|
93
107
|
*/
|
|
94
|
-
ancestors?:
|
|
108
|
+
ancestors?:
|
|
109
|
+
string[];
|
|
95
110
|
/** The type of the asset. Example: `compute.googleapis.com/Disk` See [Supported asset types](https://cloud.google.com/asset-inventory/docs/supported-asset-types) for more information. */
|
|
96
|
-
assetType?:
|
|
111
|
+
assetType?:
|
|
112
|
+
string;
|
|
97
113
|
/**
|
|
98
114
|
* A representation of the IAM policy set on a Google Cloud resource. There can be a maximum of one IAM policy set on any given resource. In addition, IAM policies inherit their
|
|
99
115
|
* granted access scope from any policies set on parent resources in the resource hierarchy. Therefore, the effectively policy is the union of both the policy set on this resource and
|
|
100
116
|
* each policy set on all of the resource's ancestry resource levels in the hierarchy. See [this topic](https://cloud.google.com/iam/help/allow-policies/inheritance) for more
|
|
101
117
|
* information.
|
|
102
118
|
*/
|
|
103
|
-
iamPolicy?:
|
|
119
|
+
iamPolicy?:
|
|
120
|
+
Policy;
|
|
104
121
|
/**
|
|
105
122
|
* The full name of the asset. Example: `//compute.googleapis.com/projects/my_project_123/zones/zone1/instances/instance1` See [Resource
|
|
106
123
|
* names](https://cloud.google.com/apis/design/resource_names#full_resource_name) for more information.
|
|
107
124
|
*/
|
|
108
|
-
name?:
|
|
125
|
+
name?:
|
|
126
|
+
string;
|
|
109
127
|
/**
|
|
110
128
|
* A representation of an [organization policy](https://cloud.google.com/resource-manager/docs/organization-policy/overview#organization_policy). There can be more than one
|
|
111
129
|
* organization policy with different constraints set on a given resource.
|
|
112
130
|
*/
|
|
113
|
-
orgPolicy?:
|
|
131
|
+
orgPolicy?:
|
|
132
|
+
GoogleCloudOrgpolicyV1Policy[];
|
|
114
133
|
/** The related assets of the asset of one relationship type. One asset only represents one type of relationship. */
|
|
115
|
-
relatedAssets?:
|
|
134
|
+
relatedAssets?:
|
|
135
|
+
GoogleCloudAssetV1p7beta1RelatedAssets;
|
|
116
136
|
/** A representation of the resource. */
|
|
117
|
-
resource?:
|
|
137
|
+
resource?:
|
|
138
|
+
GoogleCloudAssetV1p7beta1Resource;
|
|
118
139
|
/** Please also refer to the [service perimeter user guide](https://cloud.google.com/vpc-service-controls/docs/overview). */
|
|
119
|
-
servicePerimeter?:
|
|
140
|
+
servicePerimeter?:
|
|
141
|
+
GoogleIdentityAccesscontextmanagerV1ServicePerimeter;
|
|
120
142
|
/** The last update timestamp of an asset. update_time is updated when create/update/delete operation is performed. */
|
|
121
|
-
updateTime?:
|
|
143
|
+
updateTime?:
|
|
144
|
+
string;
|
|
122
145
|
}
|
|
123
146
|
interface GoogleCloudAssetV1p7beta1BigQueryDestination {
|
|
124
147
|
/**
|
|
125
148
|
* Required. The BigQuery dataset in format "projects/projectId/datasets/datasetId", to which the snapshot result should be exported. If this dataset does not exist, the export call
|
|
126
149
|
* returns an INVALID_ARGUMENT error.
|
|
127
150
|
*/
|
|
128
|
-
dataset?:
|
|
151
|
+
dataset?:
|
|
152
|
+
string;
|
|
129
153
|
/**
|
|
130
154
|
* If the destination table already exists and this flag is `TRUE`, the table will be overwritten by the contents of assets snapshot. If the flag is `FALSE` or unset and the
|
|
131
155
|
* destination table already exists, the export call returns an INVALID_ARGUMEMT error.
|
|
132
156
|
*/
|
|
133
|
-
force?:
|
|
157
|
+
force?:
|
|
158
|
+
boolean;
|
|
134
159
|
/**
|
|
135
160
|
* [partition_spec] determines whether to export to partitioned table(s) and how to partition the data. If [partition_spec] is unset or [partition_spec.partition_key] is unset or
|
|
136
161
|
* `PARTITION_KEY_UNSPECIFIED`, the snapshot results will be exported to non-partitioned table(s). [force] will decide whether to overwrite existing table(s). If [partition_spec] is
|
|
@@ -139,7 +164,8 @@ declare namespace gapi.client {
|
|
|
139
164
|
* [force] is `TRUE`, the corresponding partition will be overwritten by the snapshot results (data in different partitions will remain intact); if [force] is unset or `FALSE`, it will
|
|
140
165
|
* append the data. An error will be returned if the schema update or data appension fails.
|
|
141
166
|
*/
|
|
142
|
-
partitionSpec?:
|
|
167
|
+
partitionSpec?:
|
|
168
|
+
GoogleCloudAssetV1p7beta1PartitionSpec;
|
|
143
169
|
/**
|
|
144
170
|
* If this flag is `TRUE`, the snapshot results will be written to one or multiple tables, each of which contains results of one asset type. The [force] and [partition_spec] fields
|
|
145
171
|
* will apply to each of them. Field [table] will be concatenated with "_" and the asset type names (see https://cloud.google.com/asset-inventory/docs/supported-asset-types for
|
|
@@ -152,9 +178,11 @@ declare namespace gapi.client {
|
|
|
152
178
|
* table_type_A succeeds when exporting to table_type_B fails during one export call, the results in table_type_A will persist and there will not be partial results persisting in a
|
|
153
179
|
* table.
|
|
154
180
|
*/
|
|
155
|
-
separateTablesPerAssetType?:
|
|
181
|
+
separateTablesPerAssetType?:
|
|
182
|
+
boolean;
|
|
156
183
|
/** Required. The BigQuery table to which the snapshot result should be written. If this table does not exist, a new table with the given name will be created. */
|
|
157
|
-
table?:
|
|
184
|
+
table?:
|
|
185
|
+
string;
|
|
158
186
|
}
|
|
159
187
|
interface GoogleCloudAssetV1p7beta1ExportAssetsRequest {
|
|
160
188
|
/**
|
|
@@ -164,106 +192,132 @@ declare namespace gapi.client {
|
|
|
164
192
|
* supported asset type, an INVALID_ARGUMENT error will be returned. If specified, only matching assets will be returned, otherwise, it will snapshot all asset types. See [Introduction
|
|
165
193
|
* to Cloud Asset Inventory](https://cloud.google.com/asset-inventory/docs/overview) for all supported asset types.
|
|
166
194
|
*/
|
|
167
|
-
assetTypes?:
|
|
195
|
+
assetTypes?:
|
|
196
|
+
string[];
|
|
168
197
|
/** Asset content type. If not specified, no content but the asset name will be returned. */
|
|
169
|
-
contentType?:
|
|
198
|
+
contentType?:
|
|
199
|
+
string;
|
|
170
200
|
/** Required. Output configuration indicating where the results will be output to. */
|
|
171
|
-
outputConfig?:
|
|
201
|
+
outputConfig?:
|
|
202
|
+
GoogleCloudAssetV1p7beta1OutputConfig;
|
|
172
203
|
/**
|
|
173
204
|
* Timestamp to take an asset snapshot. This can only be set to a timestamp between the current time and the current time minus 35 days (inclusive). If not specified, the current time
|
|
174
205
|
* will be used. Due to delays in resource data collection and indexing, there is a volatile window during which running the same query may get different results.
|
|
175
206
|
*/
|
|
176
|
-
readTime?:
|
|
207
|
+
readTime?:
|
|
208
|
+
string;
|
|
177
209
|
/**
|
|
178
210
|
* A list of relationship types to export, for example: `INSTANCE_TO_INSTANCEGROUP`. This field should only be specified if content_type=RELATIONSHIP. If specified, it will snapshot
|
|
179
211
|
* [asset_types]' specified relationships, or give errors if any relationship_types' supported types are not in [asset_types]. If not specified, it will snapshot all [asset_types]'
|
|
180
212
|
* supported relationships. An unspecified [asset_types] field means all supported asset_types. See [Introduction to Cloud Asset
|
|
181
213
|
* Inventory](https://cloud.google.com/asset-inventory/docs/overview) for all supported asset types and relationship types.
|
|
182
214
|
*/
|
|
183
|
-
relationshipTypes?:
|
|
215
|
+
relationshipTypes?:
|
|
216
|
+
string[];
|
|
184
217
|
}
|
|
185
218
|
interface GoogleCloudAssetV1p7beta1GcsDestination {
|
|
186
219
|
/**
|
|
187
220
|
* The URI of the Cloud Storage object. It's the same URI that is used by gsutil. Example: "gs://bucket_name/object_name". See [Viewing and Editing Object
|
|
188
221
|
* Metadata](https://cloud.google.com/storage/docs/viewing-editing-metadata) for more information.
|
|
189
222
|
*/
|
|
190
|
-
uri?:
|
|
223
|
+
uri?:
|
|
224
|
+
string;
|
|
191
225
|
/**
|
|
192
226
|
* The URI prefix of all generated Cloud Storage objects. Example: "gs://bucket_name/object_name_prefix". Each object URI is in format:
|
|
193
227
|
* "gs://bucket_name/object_name_prefix/{ASSET_TYPE}/{SHARD_NUMBER} and only contains assets for that type. starts from 0. Example:
|
|
194
228
|
* "gs://bucket_name/object_name_prefix/compute.googleapis.com/Disk/0" is the first shard of output objects containing all compute.googleapis.com/Disk assets. An INVALID_ARGUMENT error
|
|
195
229
|
* will be returned if file with the same name "gs://bucket_name/object_name_prefix" already exists.
|
|
196
230
|
*/
|
|
197
|
-
uriPrefix?:
|
|
231
|
+
uriPrefix?:
|
|
232
|
+
string;
|
|
198
233
|
}
|
|
199
234
|
interface GoogleCloudAssetV1p7beta1OutputConfig {
|
|
200
235
|
/** Destination on BigQuery. The output table stores the fields in asset proto as columns in BigQuery. */
|
|
201
|
-
bigqueryDestination?:
|
|
236
|
+
bigqueryDestination?:
|
|
237
|
+
GoogleCloudAssetV1p7beta1BigQueryDestination;
|
|
202
238
|
/** Destination on Cloud Storage. */
|
|
203
|
-
gcsDestination?:
|
|
239
|
+
gcsDestination?:
|
|
240
|
+
GoogleCloudAssetV1p7beta1GcsDestination;
|
|
204
241
|
}
|
|
205
242
|
interface GoogleCloudAssetV1p7beta1PartitionSpec {
|
|
206
243
|
/** The partition key for BigQuery partitioned table. */
|
|
207
|
-
partitionKey?:
|
|
244
|
+
partitionKey?:
|
|
245
|
+
string;
|
|
208
246
|
}
|
|
209
247
|
interface GoogleCloudAssetV1p7beta1RelatedAsset {
|
|
210
248
|
/**
|
|
211
249
|
* The ancestors of an asset in Google Cloud [resource hierarchy](https://cloud.google.com/resource-manager/docs/cloud-platform-resource-hierarchy), represented as a list of relative
|
|
212
250
|
* resource names. An ancestry path starts with the closest ancestor in the hierarchy and ends at root. Example: `["projects/123456789", "folders/5432", "organizations/1234"]`
|
|
213
251
|
*/
|
|
214
|
-
ancestors?:
|
|
252
|
+
ancestors?:
|
|
253
|
+
string[];
|
|
215
254
|
/**
|
|
216
255
|
* The full name of the asset. Example: `//compute.googleapis.com/projects/my_project_123/zones/zone1/instances/instance1` See [Resource
|
|
217
256
|
* names](https://cloud.google.com/apis/design/resource_names#full_resource_name) for more information.
|
|
218
257
|
*/
|
|
219
|
-
asset?:
|
|
258
|
+
asset?:
|
|
259
|
+
string;
|
|
220
260
|
/** The type of the asset. Example: `compute.googleapis.com/Disk` See [Supported asset types](https://cloud.google.com/asset-inventory/docs/supported-asset-types) for more information. */
|
|
221
|
-
assetType?:
|
|
261
|
+
assetType?:
|
|
262
|
+
string;
|
|
222
263
|
}
|
|
223
264
|
interface GoogleCloudAssetV1p7beta1RelatedAssets {
|
|
224
265
|
/** The peer resources of the relationship. */
|
|
225
|
-
assets?:
|
|
266
|
+
assets?:
|
|
267
|
+
GoogleCloudAssetV1p7beta1RelatedAsset[];
|
|
226
268
|
/** The detailed relation attributes. */
|
|
227
|
-
relationshipAttributes?:
|
|
269
|
+
relationshipAttributes?:
|
|
270
|
+
GoogleCloudAssetV1p7beta1RelationshipAttributes;
|
|
228
271
|
}
|
|
229
272
|
interface GoogleCloudAssetV1p7beta1RelationshipAttributes {
|
|
230
273
|
/** The detail of the relationship, e.g. `contains`, `attaches` */
|
|
231
|
-
action?:
|
|
274
|
+
action?:
|
|
275
|
+
string;
|
|
232
276
|
/** The source asset type. Example: `compute.googleapis.com/Instance` */
|
|
233
|
-
sourceResourceType?:
|
|
277
|
+
sourceResourceType?:
|
|
278
|
+
string;
|
|
234
279
|
/** The target asset type. Example: `compute.googleapis.com/Disk` */
|
|
235
|
-
targetResourceType?:
|
|
280
|
+
targetResourceType?:
|
|
281
|
+
string;
|
|
236
282
|
/** The unique identifier of the relationship type. Example: `INSTANCE_TO_INSTANCEGROUP` */
|
|
237
|
-
type?:
|
|
283
|
+
type?:
|
|
284
|
+
string;
|
|
238
285
|
}
|
|
239
286
|
interface GoogleCloudAssetV1p7beta1Resource {
|
|
240
287
|
/** The content of the resource, in which some sensitive fields are removed and may not be present. */
|
|
241
|
-
data?:
|
|
288
|
+
data?:
|
|
289
|
+
{ [P in string]: any };
|
|
242
290
|
/**
|
|
243
291
|
* The URL of the discovery document containing the resource's JSON schema. Example: `https://www.googleapis.com/discovery/v1/apis/compute/v1/rest` This value is unspecified for
|
|
244
292
|
* resources that do not have an API based on a discovery document, such as Cloud Bigtable.
|
|
245
293
|
*/
|
|
246
|
-
discoveryDocumentUri?:
|
|
294
|
+
discoveryDocumentUri?:
|
|
295
|
+
string;
|
|
247
296
|
/**
|
|
248
297
|
* The JSON schema name listed in the discovery document. Example: `Project` This value is unspecified for resources that do not have an API based on a discovery document, such as
|
|
249
298
|
* Cloud Bigtable.
|
|
250
299
|
*/
|
|
251
|
-
discoveryName?:
|
|
300
|
+
discoveryName?:
|
|
301
|
+
string;
|
|
252
302
|
/** The location of the resource in Google Cloud, such as its zone and region. For more information, see https://cloud.google.com/about/locations/. */
|
|
253
|
-
location?:
|
|
303
|
+
location?:
|
|
304
|
+
string;
|
|
254
305
|
/**
|
|
255
306
|
* The full name of the immediate parent of this resource. See [Resource Names](https://cloud.google.com/apis/design/resource_names#full_resource_name) for more information. For Google
|
|
256
307
|
* Cloud assets, this value is the parent resource defined in the [IAM policy hierarchy](https://cloud.google.com/iam/docs/overview#policy_hierarchy). Example:
|
|
257
308
|
* `//cloudresourcemanager.googleapis.com/projects/my_project_123` For third-party assets, this field may be set differently.
|
|
258
309
|
*/
|
|
259
|
-
parent?:
|
|
310
|
+
parent?:
|
|
311
|
+
string;
|
|
260
312
|
/**
|
|
261
313
|
* The REST URL for accessing the resource. An HTTP `GET` request using this URL returns the resource itself. Example:
|
|
262
314
|
* `https://cloudresourcemanager.googleapis.com/v1/projects/my-project-123` This value is unspecified for resources without a REST API.
|
|
263
315
|
*/
|
|
264
|
-
resourceUrl?:
|
|
316
|
+
resourceUrl?:
|
|
317
|
+
string;
|
|
265
318
|
/** The API version. Example: `v1` */
|
|
266
|
-
version?:
|
|
319
|
+
version?:
|
|
320
|
+
string;
|
|
267
321
|
}
|
|
268
322
|
interface GoogleCloudOrgpolicyV1BooleanPolicy {
|
|
269
323
|
/**
|
|
@@ -278,15 +332,19 @@ declare namespace gapi.client {
|
|
|
278
332
|
* enforced. Example 3 (RestoreDefault): `organizations/foo` has a `Policy` with: {enforced: true} `projects/bar` has a `Policy` with: {RestoreDefault: {}} The constraint at
|
|
279
333
|
* `organizations/foo` is enforced. The constraint at `projects/bar` is not enforced, because `constraint_default` for the `Constraint` is `ALLOW`.
|
|
280
334
|
*/
|
|
281
|
-
enforced?:
|
|
335
|
+
enforced?:
|
|
336
|
+
boolean;
|
|
282
337
|
}
|
|
283
338
|
interface GoogleCloudOrgpolicyV1ListPolicy {
|
|
284
339
|
/** List of values allowed at this resource. Can only be set if `all_values` is set to `ALL_VALUES_UNSPECIFIED`. */
|
|
285
|
-
allowedValues?:
|
|
340
|
+
allowedValues?:
|
|
341
|
+
string[];
|
|
286
342
|
/** The policy all_values state. */
|
|
287
|
-
allValues?:
|
|
343
|
+
allValues?:
|
|
344
|
+
string;
|
|
288
345
|
/** List of values denied at this resource. Can only be set if `all_values` is set to `ALL_VALUES_UNSPECIFIED`. */
|
|
289
|
-
deniedValues?:
|
|
346
|
+
deniedValues?:
|
|
347
|
+
string[];
|
|
290
348
|
/**
|
|
291
349
|
* Determines the inheritance behavior for this `Policy`. By default, a `ListPolicy` set at a resource supersedes any `Policy` set anywhere up the resource hierarchy. However, if
|
|
292
350
|
* `inherit_from_parent` is set to `true`, then the values from the effective `Policy` of the parent resource are inherited, meaning the values set in this `Policy` are added to the
|
|
@@ -313,68 +371,85 @@ declare namespace gapi.client {
|
|
|
313
371
|
* `Policy` with: {allowed_values: "under:projects/P3"} {denied_values: "under:folders/F2"} The accepted values at `organizations/foo` are `organizations/O1`, `folders/F1`,
|
|
314
372
|
* `folders/F2`, `projects/P1`, `projects/P2`, `projects/P3`. The accepted values at `projects/bar` are `organizations/O1`, `folders/F1`, `projects/P1`.
|
|
315
373
|
*/
|
|
316
|
-
inheritFromParent?:
|
|
374
|
+
inheritFromParent?:
|
|
375
|
+
boolean;
|
|
317
376
|
/**
|
|
318
377
|
* Optional. The Google Cloud Console will try to default to a configuration that matches the value specified in this `Policy`. If `suggested_value` is not set, it will inherit the
|
|
319
378
|
* value specified higher in the hierarchy, unless `inherit_from_parent` is `false`.
|
|
320
379
|
*/
|
|
321
|
-
suggestedValue?:
|
|
380
|
+
suggestedValue?:
|
|
381
|
+
string;
|
|
322
382
|
}
|
|
323
383
|
interface GoogleCloudOrgpolicyV1Policy {
|
|
324
384
|
/** For boolean `Constraints`, whether to enforce the `Constraint` or not. */
|
|
325
|
-
booleanPolicy?:
|
|
385
|
+
booleanPolicy?:
|
|
386
|
+
GoogleCloudOrgpolicyV1BooleanPolicy;
|
|
326
387
|
/**
|
|
327
388
|
* The name of the `Constraint` the `Policy` is configuring, for example, `constraints/serviceuser.services`. A [list of available
|
|
328
389
|
* constraints](/resource-manager/docs/organization-policy/org-policy-constraints) is available. Immutable after creation.
|
|
329
390
|
*/
|
|
330
|
-
constraint?:
|
|
391
|
+
constraint?:
|
|
392
|
+
string;
|
|
331
393
|
/**
|
|
332
394
|
* An opaque tag indicating the current version of the `Policy`, used for concurrency control. When the `Policy` is returned from either a `GetPolicy` or a `ListOrgPolicy` request,
|
|
333
395
|
* this `etag` indicates the version of the current `Policy` to use when executing a read-modify-write loop. When the `Policy` is returned from a `GetEffectivePolicy` request, the
|
|
334
396
|
* `etag` will be unset. When the `Policy` is used in a `SetOrgPolicy` method, use the `etag` value that was returned from a `GetOrgPolicy` request as part of a read-modify-write loop
|
|
335
397
|
* for concurrency control. Not setting the `etag`in a `SetOrgPolicy` request will result in an unconditional write of the `Policy`.
|
|
336
398
|
*/
|
|
337
|
-
etag?:
|
|
399
|
+
etag?:
|
|
400
|
+
string;
|
|
338
401
|
/** List of values either allowed or disallowed. */
|
|
339
|
-
listPolicy?:
|
|
402
|
+
listPolicy?:
|
|
403
|
+
GoogleCloudOrgpolicyV1ListPolicy;
|
|
340
404
|
/** Restores the default behavior of the constraint; independent of `Constraint` type. */
|
|
341
|
-
restoreDefault?:
|
|
405
|
+
restoreDefault?:
|
|
406
|
+
any;
|
|
342
407
|
/**
|
|
343
408
|
* The time stamp the `Policy` was previously updated. This is set by the server, not specified by the caller, and represents the last time a call to `SetOrgPolicy` was made for that
|
|
344
409
|
* `Policy`. Any value set by the client will be ignored.
|
|
345
410
|
*/
|
|
346
|
-
updateTime?:
|
|
411
|
+
updateTime?:
|
|
412
|
+
string;
|
|
347
413
|
/** Version of the `Policy`. Default version is 0; */
|
|
348
|
-
version?:
|
|
414
|
+
version?:
|
|
415
|
+
number;
|
|
349
416
|
}
|
|
350
417
|
// tslint:disable-next-line:no-empty-interface
|
|
351
418
|
interface GoogleCloudOrgpolicyV1RestoreDefault {
|
|
352
419
|
}
|
|
353
420
|
interface GoogleIdentityAccesscontextmanagerV1AccessLevel {
|
|
354
421
|
/** A `BasicLevel` composed of `Conditions`. */
|
|
355
|
-
basic?:
|
|
422
|
+
basic?:
|
|
423
|
+
GoogleIdentityAccesscontextmanagerV1BasicLevel;
|
|
356
424
|
/** A `CustomLevel` written in the Common Expression Language. */
|
|
357
|
-
custom?:
|
|
425
|
+
custom?:
|
|
426
|
+
GoogleIdentityAccesscontextmanagerV1CustomLevel;
|
|
358
427
|
/** Description of the `AccessLevel` and its use. Does not affect behavior. */
|
|
359
|
-
description?:
|
|
428
|
+
description?:
|
|
429
|
+
string;
|
|
360
430
|
/**
|
|
361
431
|
* Resource name for the `AccessLevel`. Format: `accessPolicies/{access_policy}/accessLevels/{access_level}`. The `access_level` component must begin with a letter, followed by
|
|
362
432
|
* alphanumeric characters or `_`. Its maximum length is 50 characters. After you create an `AccessLevel`, you cannot change its `name`.
|
|
363
433
|
*/
|
|
364
|
-
name?:
|
|
434
|
+
name?:
|
|
435
|
+
string;
|
|
365
436
|
/** Human readable title. Must be unique within the Policy. */
|
|
366
|
-
title?:
|
|
437
|
+
title?:
|
|
438
|
+
string;
|
|
367
439
|
}
|
|
368
440
|
interface GoogleIdentityAccesscontextmanagerV1AccessPolicy {
|
|
369
441
|
/**
|
|
370
442
|
* Output only. An opaque identifier for the current version of the `AccessPolicy`. This will always be a strongly validated etag, meaning that two Access Polices will be identical if
|
|
371
443
|
* and only if their etags are identical. Clients should not expect this to be in any specific format.
|
|
372
444
|
*/
|
|
373
|
-
etag?:
|
|
445
|
+
etag?:
|
|
446
|
+
string;
|
|
374
447
|
/** Output only. Resource name of the `AccessPolicy`. Format: `accessPolicies/{access_policy}` */
|
|
375
|
-
name?:
|
|
448
|
+
name?:
|
|
449
|
+
string;
|
|
376
450
|
/** Required. The parent of this `AccessPolicy` in the Cloud Resource Hierarchy. Currently immutable once created. Format: `organizations/{organization_id}` */
|
|
377
|
-
parent?:
|
|
451
|
+
parent?:
|
|
452
|
+
string;
|
|
378
453
|
/**
|
|
379
454
|
* The scopes of a policy define which resources an ACM policy can restrict, and where ACM resources can be referenced. For example, a policy with scopes=["folders/123"] has the
|
|
380
455
|
* following behavior: - vpcsc perimeters can only restrict projects within folders/123 - access levels can only be referenced by resources within folders/123. If empty, there are no
|
|
@@ -382,90 +457,113 @@ declare namespace gapi.client {
|
|
|
382
457
|
* (attempting to create a second policy which includes "folders/123" will result in an error). Currently, scopes cannot be modified after a policy is created. Currently, policies can
|
|
383
458
|
* only have a single scope. Format: list of `folders/{folder_number}` or `projects/{project_number}`
|
|
384
459
|
*/
|
|
385
|
-
scopes?:
|
|
460
|
+
scopes?:
|
|
461
|
+
string[];
|
|
386
462
|
/** Required. Human readable title. Does not affect behavior. */
|
|
387
|
-
title?:
|
|
463
|
+
title?:
|
|
464
|
+
string;
|
|
388
465
|
}
|
|
389
466
|
interface GoogleIdentityAccesscontextmanagerV1ApiOperation {
|
|
390
467
|
/**
|
|
391
468
|
* API methods or permissions to allow. Method or permission must belong to the service specified by `service_name` field. A single MethodSelector entry with `*` specified for the
|
|
392
469
|
* `method` field will allow all methods AND permissions for the service specified in `service_name`.
|
|
393
470
|
*/
|
|
394
|
-
methodSelectors?:
|
|
471
|
+
methodSelectors?:
|
|
472
|
+
GoogleIdentityAccesscontextmanagerV1MethodSelector[];
|
|
395
473
|
/**
|
|
396
474
|
* The name of the API whose methods or permissions the IngressPolicy or EgressPolicy want to allow. A single ApiOperation with `service_name` field set to `*` will allow all methods
|
|
397
475
|
* AND permissions for all services.
|
|
398
476
|
*/
|
|
399
|
-
serviceName?:
|
|
477
|
+
serviceName?:
|
|
478
|
+
string;
|
|
400
479
|
}
|
|
401
480
|
interface GoogleIdentityAccesscontextmanagerV1BasicLevel {
|
|
402
481
|
/**
|
|
403
482
|
* How the `conditions` list should be combined to determine if a request is granted this `AccessLevel`. If AND is used, each `Condition` in `conditions` must be satisfied for the
|
|
404
483
|
* `AccessLevel` to be applied. If OR is used, at least one `Condition` in `conditions` must be satisfied for the `AccessLevel` to be applied. Default behavior is AND.
|
|
405
484
|
*/
|
|
406
|
-
combiningFunction?:
|
|
485
|
+
combiningFunction?:
|
|
486
|
+
string;
|
|
407
487
|
/** Required. A list of requirements for the `AccessLevel` to be granted. */
|
|
408
|
-
conditions?:
|
|
488
|
+
conditions?:
|
|
489
|
+
GoogleIdentityAccesscontextmanagerV1Condition[];
|
|
409
490
|
}
|
|
410
491
|
interface GoogleIdentityAccesscontextmanagerV1Condition {
|
|
411
492
|
/** Device specific restrictions, all restrictions must hold for the Condition to be true. If not specified, all devices are allowed. */
|
|
412
|
-
devicePolicy?:
|
|
493
|
+
devicePolicy?:
|
|
494
|
+
GoogleIdentityAccesscontextmanagerV1DevicePolicy;
|
|
413
495
|
/**
|
|
414
496
|
* CIDR block IP subnetwork specification. May be IPv4 or IPv6. Note that for a CIDR IP address block, the specified IP address portion must be properly truncated (i.e. all the host
|
|
415
497
|
* bits must be zero) or the input is considered malformed. For example, "192.0.2.0/24" is accepted but "192.0.2.1/24" is not. Similarly, for IPv6, "2001:db8::/32" is accepted whereas
|
|
416
498
|
* "2001:db8::1/32" is not. The originating IP of a request must be in one of the listed subnets in order for this Condition to be true. If empty, all IP addresses are allowed.
|
|
417
499
|
*/
|
|
418
|
-
ipSubnetworks?:
|
|
500
|
+
ipSubnetworks?:
|
|
501
|
+
string[];
|
|
419
502
|
/**
|
|
420
503
|
* The request must be made by one of the provided user or service accounts. Groups are not supported. Syntax: `user:{emailid}` `serviceAccount:{emailid}` If not specified, a request
|
|
421
504
|
* may come from any user.
|
|
422
505
|
*/
|
|
423
|
-
members?:
|
|
506
|
+
members?:
|
|
507
|
+
string[];
|
|
424
508
|
/**
|
|
425
509
|
* Whether to negate the Condition. If true, the Condition becomes a NAND over its non-empty fields, each field must be false for the Condition overall to be satisfied. Defaults to
|
|
426
510
|
* false.
|
|
427
511
|
*/
|
|
428
|
-
negate?:
|
|
512
|
+
negate?:
|
|
513
|
+
boolean;
|
|
429
514
|
/** The request must originate from one of the provided countries/regions. Must be valid ISO 3166-1 alpha-2 codes. */
|
|
430
|
-
regions?:
|
|
515
|
+
regions?:
|
|
516
|
+
string[];
|
|
431
517
|
/**
|
|
432
518
|
* A list of other access levels defined in the same `Policy`, referenced by resource name. Referencing an `AccessLevel` which does not exist is an error. All access levels listed must
|
|
433
519
|
* be granted for the Condition to be true. Example: "`accessPolicies/MY_POLICY/accessLevels/LEVEL_NAME"`
|
|
434
520
|
*/
|
|
435
|
-
requiredAccessLevels?:
|
|
521
|
+
requiredAccessLevels?:
|
|
522
|
+
string[];
|
|
436
523
|
}
|
|
437
524
|
interface GoogleIdentityAccesscontextmanagerV1CustomLevel {
|
|
438
525
|
/** Required. A Cloud CEL expression evaluating to a boolean. */
|
|
439
|
-
expr?:
|
|
526
|
+
expr?:
|
|
527
|
+
Expr;
|
|
440
528
|
}
|
|
441
529
|
interface GoogleIdentityAccesscontextmanagerV1DevicePolicy {
|
|
442
530
|
/** Allowed device management levels, an empty list allows all management levels. */
|
|
443
|
-
allowedDeviceManagementLevels?:
|
|
531
|
+
allowedDeviceManagementLevels?:
|
|
532
|
+
string[];
|
|
444
533
|
/** Allowed encryptions statuses, an empty list allows all statuses. */
|
|
445
|
-
allowedEncryptionStatuses?:
|
|
534
|
+
allowedEncryptionStatuses?:
|
|
535
|
+
string[];
|
|
446
536
|
/** Allowed OS versions, an empty list allows all types and all versions. */
|
|
447
|
-
osConstraints?:
|
|
537
|
+
osConstraints?:
|
|
538
|
+
GoogleIdentityAccesscontextmanagerV1OsConstraint[];
|
|
448
539
|
/** Whether the device needs to be approved by the customer admin. */
|
|
449
|
-
requireAdminApproval?:
|
|
540
|
+
requireAdminApproval?:
|
|
541
|
+
boolean;
|
|
450
542
|
/** Whether the device needs to be corp owned. */
|
|
451
|
-
requireCorpOwned?:
|
|
543
|
+
requireCorpOwned?:
|
|
544
|
+
boolean;
|
|
452
545
|
/** Whether or not screenlock is required for the DevicePolicy to be true. Defaults to `false`. */
|
|
453
|
-
requireScreenlock?:
|
|
546
|
+
requireScreenlock?:
|
|
547
|
+
boolean;
|
|
454
548
|
}
|
|
455
549
|
interface GoogleIdentityAccesscontextmanagerV1EgressFrom {
|
|
456
550
|
/**
|
|
457
551
|
* A list of identities that are allowed access through this [EgressPolicy]. Should be in the format of email address. The email address should represent individual user or service
|
|
458
552
|
* account only.
|
|
459
553
|
*/
|
|
460
|
-
identities?:
|
|
554
|
+
identities?:
|
|
555
|
+
string[];
|
|
461
556
|
/** Specifies the type of identities that are allowed access to outside the perimeter. If left unspecified, then members of `identities` field will be allowed access. */
|
|
462
|
-
identityType?:
|
|
557
|
+
identityType?:
|
|
558
|
+
string;
|
|
463
559
|
}
|
|
464
560
|
interface GoogleIdentityAccesscontextmanagerV1EgressPolicy {
|
|
465
561
|
/** Defines conditions on the source of a request causing this EgressPolicy to apply. */
|
|
466
|
-
egressFrom?:
|
|
562
|
+
egressFrom?:
|
|
563
|
+
GoogleIdentityAccesscontextmanagerV1EgressFrom;
|
|
467
564
|
/** Defines the conditions on the ApiOperation and destination resources that cause this EgressPolicy to apply. */
|
|
468
|
-
egressTo?:
|
|
565
|
+
egressTo?:
|
|
566
|
+
GoogleIdentityAccesscontextmanagerV1EgressTo;
|
|
469
567
|
}
|
|
470
568
|
interface GoogleIdentityAccesscontextmanagerV1EgressTo {
|
|
471
569
|
/**
|
|
@@ -473,31 +571,39 @@ declare namespace gapi.client {
|
|
|
473
571
|
* the supported format is azure://myaccount.blob.core.windows.net/CONTAINER_NAME. A request matches if it contains an external resource in this list (Example: s3://bucket/path).
|
|
474
572
|
* Currently '*' is not allowed.
|
|
475
573
|
*/
|
|
476
|
-
externalResources?:
|
|
574
|
+
externalResources?:
|
|
575
|
+
string[];
|
|
477
576
|
/** A list of ApiOperations allowed to be performed by the sources specified in the corresponding EgressFrom. A request matches if it uses an operation/service in this list. */
|
|
478
|
-
operations?:
|
|
577
|
+
operations?:
|
|
578
|
+
GoogleIdentityAccesscontextmanagerV1ApiOperation[];
|
|
479
579
|
/**
|
|
480
580
|
* A list of resources, currently only projects in the form `projects/`, that are allowed to be accessed by sources defined in the corresponding EgressFrom. A request matches if it
|
|
481
581
|
* contains a resource in this list. If `*` is specified for `resources`, then this EgressTo rule will authorize access to all resources outside the perimeter.
|
|
482
582
|
*/
|
|
483
|
-
resources?:
|
|
583
|
+
resources?:
|
|
584
|
+
string[];
|
|
484
585
|
}
|
|
485
586
|
interface GoogleIdentityAccesscontextmanagerV1IngressFrom {
|
|
486
587
|
/**
|
|
487
588
|
* A list of identities that are allowed access through this ingress policy. Should be in the format of email address. The email address should represent individual user or service
|
|
488
589
|
* account only.
|
|
489
590
|
*/
|
|
490
|
-
identities?:
|
|
591
|
+
identities?:
|
|
592
|
+
string[];
|
|
491
593
|
/** Specifies the type of identities that are allowed access from outside the perimeter. If left unspecified, then members of `identities` field will be allowed access. */
|
|
492
|
-
identityType?:
|
|
594
|
+
identityType?:
|
|
595
|
+
string;
|
|
493
596
|
/** Sources that this IngressPolicy authorizes access from. */
|
|
494
|
-
sources?:
|
|
597
|
+
sources?:
|
|
598
|
+
GoogleIdentityAccesscontextmanagerV1IngressSource[];
|
|
495
599
|
}
|
|
496
600
|
interface GoogleIdentityAccesscontextmanagerV1IngressPolicy {
|
|
497
601
|
/** Defines the conditions on the source of a request causing this IngressPolicy to apply. */
|
|
498
|
-
ingressFrom?:
|
|
602
|
+
ingressFrom?:
|
|
603
|
+
GoogleIdentityAccesscontextmanagerV1IngressFrom;
|
|
499
604
|
/** Defines the conditions on the ApiOperation and request destination that cause this IngressPolicy to apply. */
|
|
500
|
-
ingressTo?:
|
|
605
|
+
ingressTo?:
|
|
606
|
+
GoogleIdentityAccesscontextmanagerV1IngressTo;
|
|
501
607
|
}
|
|
502
608
|
interface GoogleIdentityAccesscontextmanagerV1IngressSource {
|
|
503
609
|
/**
|
|
@@ -506,72 +612,88 @@ declare namespace gapi.client {
|
|
|
506
612
|
* calls with request origins within the perimeter. Example: `accessPolicies/MY_POLICY/accessLevels/MY_LEVEL`. If a single `*` is specified for `access_level`, then all IngressSources
|
|
507
613
|
* will be allowed.
|
|
508
614
|
*/
|
|
509
|
-
accessLevel?:
|
|
615
|
+
accessLevel?:
|
|
616
|
+
string;
|
|
510
617
|
/**
|
|
511
618
|
* A Google Cloud resource that is allowed to ingress the perimeter. Requests from these resources will be allowed to access perimeter data. Currently only projects and VPCs are
|
|
512
619
|
* allowed. Project format: `projects/{project_number}` VPC network format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`. The project may be in any Google
|
|
513
620
|
* Cloud organization, not just the organization that the perimeter is defined in. `*` is not allowed, the case of allowing all Google Cloud resources only is not supported.
|
|
514
621
|
*/
|
|
515
|
-
resource?:
|
|
622
|
+
resource?:
|
|
623
|
+
string;
|
|
516
624
|
}
|
|
517
625
|
interface GoogleIdentityAccesscontextmanagerV1IngressTo {
|
|
518
626
|
/** A list of ApiOperations allowed to be performed by the sources specified in corresponding IngressFrom in this ServicePerimeter. */
|
|
519
|
-
operations?:
|
|
627
|
+
operations?:
|
|
628
|
+
GoogleIdentityAccesscontextmanagerV1ApiOperation[];
|
|
520
629
|
/**
|
|
521
630
|
* A list of resources, currently only projects in the form `projects/`, protected by this ServicePerimeter that are allowed to be accessed by sources defined in the corresponding
|
|
522
631
|
* IngressFrom. If a single `*` is specified, then access to all resources inside the perimeter are allowed.
|
|
523
632
|
*/
|
|
524
|
-
resources?:
|
|
633
|
+
resources?:
|
|
634
|
+
string[];
|
|
525
635
|
}
|
|
526
636
|
interface GoogleIdentityAccesscontextmanagerV1MethodSelector {
|
|
527
637
|
/**
|
|
528
638
|
* Value for `method` should be a valid method name for the corresponding `service_name` in ApiOperation. If `*` used as value for `method`, then ALL methods and permissions are
|
|
529
639
|
* allowed.
|
|
530
640
|
*/
|
|
531
|
-
method?:
|
|
641
|
+
method?:
|
|
642
|
+
string;
|
|
532
643
|
/** Value for `permission` should be a valid Cloud IAM permission for the corresponding `service_name` in ApiOperation. */
|
|
533
|
-
permission?:
|
|
644
|
+
permission?:
|
|
645
|
+
string;
|
|
534
646
|
}
|
|
535
647
|
interface GoogleIdentityAccesscontextmanagerV1OsConstraint {
|
|
536
648
|
/** The minimum allowed OS version. If not set, any version of this OS satisfies the constraint. Format: `"major.minor.patch"`. Examples: `"10.5.301"`, `"9.2.1"`. */
|
|
537
|
-
minimumVersion?:
|
|
649
|
+
minimumVersion?:
|
|
650
|
+
string;
|
|
538
651
|
/** Required. The allowed OS type. */
|
|
539
|
-
osType?:
|
|
652
|
+
osType?:
|
|
653
|
+
string;
|
|
540
654
|
/**
|
|
541
655
|
* Only allows requests from devices with a verified Chrome OS. Verifications includes requirements that the device is enterprise-managed, conformant to domain policies, and the caller
|
|
542
656
|
* has permission to call the API targeted by the request.
|
|
543
657
|
*/
|
|
544
|
-
requireVerifiedChromeOs?:
|
|
658
|
+
requireVerifiedChromeOs?:
|
|
659
|
+
boolean;
|
|
545
660
|
}
|
|
546
661
|
interface GoogleIdentityAccesscontextmanagerV1ServicePerimeter {
|
|
547
662
|
/** Description of the `ServicePerimeter` and its use. Does not affect behavior. */
|
|
548
|
-
description?:
|
|
663
|
+
description?:
|
|
664
|
+
string;
|
|
549
665
|
/**
|
|
550
666
|
* Resource name for the `ServicePerimeter`. Format: `accessPolicies/{access_policy}/servicePerimeters/{service_perimeter}`. The `service_perimeter` component must begin with a letter,
|
|
551
667
|
* followed by alphanumeric characters or `_`. After you create a `ServicePerimeter`, you cannot change its `name`.
|
|
552
668
|
*/
|
|
553
|
-
name?:
|
|
669
|
+
name?:
|
|
670
|
+
string;
|
|
554
671
|
/**
|
|
555
672
|
* Perimeter type indicator. A single project or VPC network is allowed to be a member of single regular perimeter, but multiple service perimeter bridges. A project cannot be a
|
|
556
673
|
* included in a perimeter bridge without being included in regular perimeter. For perimeter bridges, the restricted service list as well as access level lists must be empty.
|
|
557
674
|
*/
|
|
558
|
-
perimeterType?:
|
|
675
|
+
perimeterType?:
|
|
676
|
+
string;
|
|
559
677
|
/**
|
|
560
678
|
* Proposed (or dry run) ServicePerimeter configuration. This configuration allows to specify and test ServicePerimeter configuration without enforcing actual access restrictions. Only
|
|
561
679
|
* allowed to be set when the "use_explicit_dry_run_spec" flag is set.
|
|
562
680
|
*/
|
|
563
|
-
spec?:
|
|
681
|
+
spec?:
|
|
682
|
+
GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig;
|
|
564
683
|
/** Current ServicePerimeter configuration. Specifies sets of resources, restricted services and access levels that determine perimeter content and boundaries. */
|
|
565
|
-
status?:
|
|
684
|
+
status?:
|
|
685
|
+
GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig;
|
|
566
686
|
/** Human readable title. Must be unique within the Policy. */
|
|
567
|
-
title?:
|
|
687
|
+
title?:
|
|
688
|
+
string;
|
|
568
689
|
/**
|
|
569
690
|
* Use explicit dry run spec flag. Ordinarily, a dry-run spec implicitly exists for all Service Perimeters, and that spec is identical to the status for those Service Perimeters. When
|
|
570
691
|
* this flag is set, it inhibits the generation of the implicit spec, thereby allowing the user to explicitly provide a configuration ("spec") to use in a dry-run version of the
|
|
571
692
|
* Service Perimeter. This allows the user to test changes to the enforced config ("status") without actually enforcing them. This testing is done through analyzing the differences
|
|
572
693
|
* between currently enforced and suggested restrictions. use_explicit_dry_run_spec must bet set to True if any of the fields in the spec are set to non-default values.
|
|
573
694
|
*/
|
|
574
|
-
useExplicitDryRunSpec?:
|
|
695
|
+
useExplicitDryRunSpec?:
|
|
696
|
+
boolean;
|
|
575
697
|
}
|
|
576
698
|
interface GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig {
|
|
577
699
|
/**
|
|
@@ -579,71 +701,86 @@ declare namespace gapi.client {
|
|
|
579
701
|
* `ServicePerimeter`. Referencing a nonexistent `AccessLevel` is a syntax error. If no `AccessLevel` names are listed, resources within the perimeter can only be accessed via Google
|
|
580
702
|
* Cloud calls with request origins within the perimeter. Example: `"accessPolicies/MY_POLICY/accessLevels/MY_LEVEL"`. For Service Perimeter Bridge, must be empty.
|
|
581
703
|
*/
|
|
582
|
-
accessLevels?:
|
|
704
|
+
accessLevels?:
|
|
705
|
+
string[];
|
|
583
706
|
/**
|
|
584
707
|
* List of EgressPolicies to apply to the perimeter. A perimeter may have multiple EgressPolicies, each of which is evaluated separately. Access is granted if any EgressPolicy grants
|
|
585
708
|
* it. Must be empty for a perimeter bridge.
|
|
586
709
|
*/
|
|
587
|
-
egressPolicies?:
|
|
710
|
+
egressPolicies?:
|
|
711
|
+
GoogleIdentityAccesscontextmanagerV1EgressPolicy[];
|
|
588
712
|
/**
|
|
589
713
|
* List of IngressPolicies to apply to the perimeter. A perimeter may have multiple IngressPolicies, each of which is evaluated separately. Access is granted if any Ingress Policy
|
|
590
714
|
* grants it. Must be empty for a perimeter bridge.
|
|
591
715
|
*/
|
|
592
|
-
ingressPolicies?:
|
|
716
|
+
ingressPolicies?:
|
|
717
|
+
GoogleIdentityAccesscontextmanagerV1IngressPolicy[];
|
|
593
718
|
/**
|
|
594
719
|
* A list of Google Cloud resources that are inside of the service perimeter. Currently only projects and VPCs are allowed. Project format: `projects/{project_number}` VPC network
|
|
595
720
|
* format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`.
|
|
596
721
|
*/
|
|
597
|
-
resources?:
|
|
722
|
+
resources?:
|
|
723
|
+
string[];
|
|
598
724
|
/**
|
|
599
725
|
* Google Cloud services that are subject to the Service Perimeter restrictions. For example, if `storage.googleapis.com` is specified, access to the storage buckets inside the
|
|
600
726
|
* perimeter must meet the perimeter's access restrictions.
|
|
601
727
|
*/
|
|
602
|
-
restrictedServices?:
|
|
728
|
+
restrictedServices?:
|
|
729
|
+
string[];
|
|
603
730
|
/** Configuration for APIs allowed within Perimeter. */
|
|
604
|
-
vpcAccessibleServices?:
|
|
731
|
+
vpcAccessibleServices?:
|
|
732
|
+
GoogleIdentityAccesscontextmanagerV1VpcAccessibleServices;
|
|
605
733
|
}
|
|
606
734
|
interface GoogleIdentityAccesscontextmanagerV1VpcAccessibleServices {
|
|
607
735
|
/**
|
|
608
736
|
* The list of APIs usable within the Service Perimeter. Must be empty unless 'enable_restriction' is True. You can specify a list of individual services, as well as include the
|
|
609
737
|
* 'RESTRICTED-SERVICES' value, which automatically includes all of the services protected by the perimeter.
|
|
610
738
|
*/
|
|
611
|
-
allowedServices?:
|
|
739
|
+
allowedServices?:
|
|
740
|
+
string[];
|
|
612
741
|
/** Whether to restrict API calls within the Service Perimeter to the list of APIs specified in 'allowed_services'. */
|
|
613
|
-
enableRestriction?:
|
|
742
|
+
enableRestriction?:
|
|
743
|
+
boolean;
|
|
614
744
|
}
|
|
615
745
|
interface Operation {
|
|
616
746
|
/** If the value is `false`, it means the operation is still in progress. If `true`, the operation is completed, and either `error` or `response` is available. */
|
|
617
|
-
done?:
|
|
747
|
+
done?:
|
|
748
|
+
boolean;
|
|
618
749
|
/** The error result of the operation in case of failure or cancellation. */
|
|
619
|
-
error?:
|
|
750
|
+
error?:
|
|
751
|
+
Status;
|
|
620
752
|
/**
|
|
621
753
|
* Service-specific metadata associated with the operation. It typically contains progress information and common metadata such as create time. Some services might not provide such
|
|
622
754
|
* metadata. Any method that returns a long-running operation should document the metadata type, if any.
|
|
623
755
|
*/
|
|
624
|
-
metadata?:
|
|
756
|
+
metadata?:
|
|
757
|
+
{ [P in string]: any };
|
|
625
758
|
/**
|
|
626
759
|
* The server-assigned name, which is only unique within the same service that originally returns it. If you use the default HTTP mapping, the `name` should be a resource name ending
|
|
627
760
|
* with `operations/{unique_id}`.
|
|
628
761
|
*/
|
|
629
|
-
name?:
|
|
762
|
+
name?:
|
|
763
|
+
string;
|
|
630
764
|
/**
|
|
631
765
|
* The normal response of the operation in case of success. If the original method returns no data on success, such as `Delete`, the response is `google.protobuf.Empty`. If the
|
|
632
766
|
* original method is standard `Get`/`Create`/`Update`, the response should be the resource. For other methods, the response should have the type `XxxResponse`, where `Xxx` is the
|
|
633
767
|
* original method name. For example, if the original method name is `TakeSnapshot()`, the inferred response type is `TakeSnapshotResponse`.
|
|
634
768
|
*/
|
|
635
|
-
response?:
|
|
769
|
+
response?:
|
|
770
|
+
{ [P in string]: any };
|
|
636
771
|
}
|
|
637
772
|
interface Policy {
|
|
638
773
|
/** Specifies cloud audit logging configuration for this policy. */
|
|
639
|
-
auditConfigs?:
|
|
774
|
+
auditConfigs?:
|
|
775
|
+
AuditConfig[];
|
|
640
776
|
/**
|
|
641
777
|
* Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings`
|
|
642
778
|
* must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a
|
|
643
779
|
* principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another
|
|
644
780
|
* 1,450 principals to the `bindings` in the `Policy`.
|
|
645
781
|
*/
|
|
646
|
-
bindings?:
|
|
782
|
+
bindings?:
|
|
783
|
+
Binding[];
|
|
647
784
|
/**
|
|
648
785
|
* `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make
|
|
649
786
|
* use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems
|
|
@@ -651,7 +788,8 @@ declare namespace gapi.client {
|
|
|
651
788
|
* Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1`
|
|
652
789
|
* policy, and all of the conditions in the version `3` policy are lost.
|
|
653
790
|
*/
|
|
654
|
-
etag?:
|
|
791
|
+
etag?:
|
|
792
|
+
string;
|
|
655
793
|
/**
|
|
656
794
|
* Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings
|
|
657
795
|
* must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a
|
|
@@ -660,46 +798,62 @@ declare namespace gapi.client {
|
|
|
660
798
|
* policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave
|
|
661
799
|
* the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
|
|
662
800
|
*/
|
|
663
|
-
version?:
|
|
801
|
+
version?:
|
|
802
|
+
number;
|
|
664
803
|
}
|
|
665
804
|
interface Status {
|
|
666
805
|
/** The status code, which should be an enum value of google.rpc.Code. */
|
|
667
|
-
code?:
|
|
806
|
+
code?:
|
|
807
|
+
number;
|
|
668
808
|
/** A list of messages that carry the error details. There is a common set of message types for APIs to use. */
|
|
669
|
-
details?:
|
|
809
|
+
details?:
|
|
810
|
+
Array<{ [P in string]: any }>;
|
|
670
811
|
/**
|
|
671
812
|
* A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the
|
|
672
813
|
* client.
|
|
673
814
|
*/
|
|
674
|
-
message?:
|
|
815
|
+
message?:
|
|
816
|
+
string;
|
|
675
817
|
}
|
|
676
818
|
interface OperationsResource {
|
|
677
819
|
/** Gets the latest state of a long-running operation. Clients can use this method to poll the operation result at intervals as recommended by the API service. */
|
|
678
820
|
get(request?: {
|
|
679
821
|
/** V1 error format. */
|
|
680
|
-
"$.xgafv"?:
|
|
822
|
+
"$.xgafv"?:
|
|
823
|
+
string;
|
|
681
824
|
/** OAuth access token. */
|
|
682
|
-
access_token?:
|
|
825
|
+
access_token?:
|
|
826
|
+
string;
|
|
683
827
|
/** Data format for response. */
|
|
684
|
-
alt?:
|
|
828
|
+
alt?:
|
|
829
|
+
string;
|
|
685
830
|
/** JSONP */
|
|
686
|
-
callback?:
|
|
831
|
+
callback?:
|
|
832
|
+
string;
|
|
687
833
|
/** Selector specifying which fields to include in a partial response. */
|
|
688
|
-
fields?:
|
|
834
|
+
fields?:
|
|
835
|
+
string;
|
|
689
836
|
/** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
|
|
690
|
-
key?:
|
|
837
|
+
key?:
|
|
838
|
+
string;
|
|
691
839
|
/** The name of the operation resource. */
|
|
692
|
-
name:
|
|
840
|
+
name:
|
|
841
|
+
string;
|
|
693
842
|
/** OAuth 2.0 token for the current user. */
|
|
694
|
-
oauth_token?:
|
|
843
|
+
oauth_token?:
|
|
844
|
+
string;
|
|
695
845
|
/** Returns response with indentations and line breaks. */
|
|
696
|
-
prettyPrint?:
|
|
846
|
+
prettyPrint?:
|
|
847
|
+
boolean;
|
|
697
848
|
/** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
|
|
698
|
-
quotaUser?:
|
|
849
|
+
quotaUser?:
|
|
850
|
+
string;
|
|
699
851
|
/** Upload protocol for media (e.g. "raw", "multipart"). */
|
|
700
|
-
upload_protocol?:
|
|
852
|
+
upload_protocol?:
|
|
853
|
+
string;
|
|
701
854
|
/** Legacy upload protocol for media (e.g. "media", "multipart"). */
|
|
702
|
-
uploadType?:
|
|
855
|
+
uploadType?:
|
|
856
|
+
string;
|
|
703
857
|
}): Request<Operation>;
|
|
704
858
|
}
|
|
705
859
|
interface V1p7beta1Resource {
|
|
@@ -711,63 +865,88 @@ declare namespace gapi.client {
|
|
|
711
865
|
*/
|
|
712
866
|
exportAssets(request: {
|
|
713
867
|
/** V1 error format. */
|
|
714
|
-
"$.xgafv"?:
|
|
868
|
+
"$.xgafv"?:
|
|
869
|
+
string;
|
|
715
870
|
/** OAuth access token. */
|
|
716
|
-
access_token?:
|
|
871
|
+
access_token?:
|
|
872
|
+
string;
|
|
717
873
|
/** Data format for response. */
|
|
718
|
-
alt?:
|
|
874
|
+
alt?:
|
|
875
|
+
string;
|
|
719
876
|
/** JSONP */
|
|
720
|
-
callback?:
|
|
877
|
+
callback?:
|
|
878
|
+
string;
|
|
721
879
|
/** Selector specifying which fields to include in a partial response. */
|
|
722
|
-
fields?:
|
|
880
|
+
fields?:
|
|
881
|
+
string;
|
|
723
882
|
/** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
|
|
724
|
-
key?:
|
|
883
|
+
key?:
|
|
884
|
+
string;
|
|
725
885
|
/** OAuth 2.0 token for the current user. */
|
|
726
|
-
oauth_token?:
|
|
886
|
+
oauth_token?:
|
|
887
|
+
string;
|
|
727
888
|
/**
|
|
728
889
|
* Required. The relative name of the root asset. This can only be an organization number (such as "organizations/123"), a project ID (such as "projects/my-project-id"), or a
|
|
729
890
|
* project number (such as "projects/12345"), or a folder number (such as "folders/123").
|
|
730
891
|
*/
|
|
731
|
-
parent:
|
|
892
|
+
parent:
|
|
893
|
+
string;
|
|
732
894
|
/** Returns response with indentations and line breaks. */
|
|
733
|
-
prettyPrint?:
|
|
895
|
+
prettyPrint?:
|
|
896
|
+
boolean;
|
|
734
897
|
/** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
|
|
735
|
-
quotaUser?:
|
|
898
|
+
quotaUser?:
|
|
899
|
+
string;
|
|
736
900
|
/** Upload protocol for media (e.g. "raw", "multipart"). */
|
|
737
|
-
upload_protocol?:
|
|
901
|
+
upload_protocol?:
|
|
902
|
+
string;
|
|
738
903
|
/** Legacy upload protocol for media (e.g. "media", "multipart"). */
|
|
739
|
-
uploadType?:
|
|
904
|
+
uploadType?:
|
|
905
|
+
string;
|
|
740
906
|
/** Request body */
|
|
741
|
-
resource:
|
|
907
|
+
resource:
|
|
908
|
+
GoogleCloudAssetV1p7beta1ExportAssetsRequest;
|
|
742
909
|
}): Request<Operation>;
|
|
743
910
|
exportAssets(request: {
|
|
744
911
|
/** V1 error format. */
|
|
745
|
-
"$.xgafv"?:
|
|
912
|
+
"$.xgafv"?:
|
|
913
|
+
string;
|
|
746
914
|
/** OAuth access token. */
|
|
747
|
-
access_token?:
|
|
915
|
+
access_token?:
|
|
916
|
+
string;
|
|
748
917
|
/** Data format for response. */
|
|
749
|
-
alt?:
|
|
918
|
+
alt?:
|
|
919
|
+
string;
|
|
750
920
|
/** JSONP */
|
|
751
|
-
callback?:
|
|
921
|
+
callback?:
|
|
922
|
+
string;
|
|
752
923
|
/** Selector specifying which fields to include in a partial response. */
|
|
753
|
-
fields?:
|
|
924
|
+
fields?:
|
|
925
|
+
string;
|
|
754
926
|
/** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
|
|
755
|
-
key?:
|
|
927
|
+
key?:
|
|
928
|
+
string;
|
|
756
929
|
/** OAuth 2.0 token for the current user. */
|
|
757
|
-
oauth_token?:
|
|
930
|
+
oauth_token?:
|
|
931
|
+
string;
|
|
758
932
|
/**
|
|
759
933
|
* Required. The relative name of the root asset. This can only be an organization number (such as "organizations/123"), a project ID (such as "projects/my-project-id"), or a
|
|
760
934
|
* project number (such as "projects/12345"), or a folder number (such as "folders/123").
|
|
761
935
|
*/
|
|
762
|
-
parent:
|
|
936
|
+
parent:
|
|
937
|
+
string;
|
|
763
938
|
/** Returns response with indentations and line breaks. */
|
|
764
|
-
prettyPrint?:
|
|
939
|
+
prettyPrint?:
|
|
940
|
+
boolean;
|
|
765
941
|
/** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
|
|
766
|
-
quotaUser?:
|
|
942
|
+
quotaUser?:
|
|
943
|
+
string;
|
|
767
944
|
/** Upload protocol for media (e.g. "raw", "multipart"). */
|
|
768
|
-
upload_protocol?:
|
|
945
|
+
upload_protocol?:
|
|
946
|
+
string;
|
|
769
947
|
/** Legacy upload protocol for media (e.g. "media", "multipart"). */
|
|
770
|
-
uploadType?:
|
|
948
|
+
uploadType?:
|
|
949
|
+
string;
|
|
771
950
|
},
|
|
772
951
|
body: GoogleCloudAssetV1p7beta1ExportAssetsRequest): Request<Operation>;
|
|
773
952
|
}
|
package/package.json
CHANGED
package/tests.ts
CHANGED
|
@@ -3,7 +3,7 @@
|
|
|
3
3
|
// This file was generated by https://github.com/Maxim-Mazurok/google-api-typings-generator. Please do not edit it manually.
|
|
4
4
|
// In case of any problems please post issue to https://github.com/Maxim-Mazurok/google-api-typings-generator
|
|
5
5
|
|
|
6
|
-
// Revision:
|
|
6
|
+
// Revision: 20230429
|
|
7
7
|
|
|
8
8
|
gapi.load('client', async () => {
|
|
9
9
|
/** now we can use gapi.client */
|