@maxim_mazurok/gapi.client.iam-v1 0.1.20250912 → 0.1.20250919
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/index.d.ts +8 -8
- package/package.json +1 -1
package/index.d.ts
CHANGED
|
@@ -9,7 +9,7 @@
|
|
|
9
9
|
// This file was generated by https://github.com/Maxim-Mazurok/google-api-typings-generator. Please do not edit it manually.
|
|
10
10
|
// In case of any problems please post issue to https://github.com/Maxim-Mazurok/google-api-typings-generator
|
|
11
11
|
// Generated from: https://iam.googleapis.com/$discovery/rest?version=v1
|
|
12
|
-
// Revision:
|
|
12
|
+
// Revision: 20250919
|
|
13
13
|
|
|
14
14
|
/// <reference types="gapi.client" />
|
|
15
15
|
|
|
@@ -648,11 +648,11 @@ declare namespace gapi.client {
|
|
|
648
648
|
interface WorkforcePool {
|
|
649
649
|
/** Optional. Configure access restrictions on the workforce pool users. This is an optional field. If specified web sign-in can be restricted to given set of services or programmatic sign-in can be disabled for pool users. */
|
|
650
650
|
accessRestrictions?: AccessRestrictions;
|
|
651
|
-
/** Optional. A
|
|
651
|
+
/** Optional. A description of the pool. Cannot exceed 256 characters. */
|
|
652
652
|
description?: string;
|
|
653
653
|
/** Optional. Disables the workforce pool. You cannot use a disabled pool to exchange tokens, or use existing tokens to access resources. If the pool is re-enabled, existing tokens grant access again. */
|
|
654
654
|
disabled?: boolean;
|
|
655
|
-
/** Optional. A
|
|
655
|
+
/** Optional. A display name for the pool. Cannot exceed 32 characters. */
|
|
656
656
|
displayName?: string;
|
|
657
657
|
/** Output only. Time after which the workforce pool will be permanently purged and cannot be recovered. */
|
|
658
658
|
expireTime?: string;
|
|
@@ -670,13 +670,13 @@ declare namespace gapi.client {
|
|
|
670
670
|
attributeCondition?: string;
|
|
671
671
|
/** Required. Maps attributes from the authentication credentials issued by an external identity provider to Google Cloud attributes, such as `subject` and `segment`. Each key must be a string specifying the Google Cloud IAM attribute to map to. The following keys are supported: * `google.subject`: The principal IAM is authenticating. You can reference this value in IAM bindings. This is also the subject that appears in Cloud Logging logs. This is a required field and the mapped subject cannot exceed 127 bytes. * `google.groups`: Groups the authenticating user belongs to. You can grant groups access to resources using an IAM `principalSet` binding; access applies to all members of the group. * `google.display_name`: The name of the authenticated user. This is an optional field and the mapped display name cannot exceed 100 bytes. If not set, `google.subject` will be displayed instead. This attribute cannot be referenced in IAM bindings. * `google.profile_photo`: The URL that specifies the authenticated user's thumbnail photo. This is an optional field. When set, the image will be visible as the user's profile picture. If not set, a generic user icon will be displayed instead. This attribute cannot be referenced in IAM bindings. * `google.posix_username`: The Linux username used by OS Login. This is an optional field and the mapped POSIX username cannot exceed 32 characters, The key must match the regex "^a-zA-Z0-9._{0,31}$". This attribute cannot be referenced in IAM bindings. You can also provide custom attributes by specifying `attribute.{custom_attribute}`, where {custom_attribute} is the name of the custom attribute to be mapped. You can define a maximum of 50 custom attributes. The maximum length of a mapped attribute key is 100 characters, and the key may only contain the characters [a-z0-9_]. You can reference these attributes in IAM policies to define fine-grained access for a workforce pool to Google Cloud resources. For example: * `google.subject`: `principal://iam.googleapis.com/locations/global/workforcePools/{pool}/subject/{value}` * `google.groups`: `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool}/group/{value}` * `attribute.{custom_attribute}`: `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool}/attribute.{custom_attribute}/{value}` Each value must be a [Common Expression Language] (https://opensource.google/projects/cel) function that maps an identity provider credential to the normalized attribute specified by the corresponding map key. You can use the `assertion` keyword in the expression to access a JSON representation of the authentication credential issued by the provider. The maximum length of an attribute mapping expression is 2048 characters. When evaluated, the total size of all mapped attributes must not exceed 4KB. For OIDC providers, you must supply a custom mapping that includes the `google.subject` attribute. For example, the following maps the `sub` claim of the incoming credential to the `subject` attribute on a Google token: ``` {"google.subject": "assertion.sub"} ``` */
|
|
672
672
|
attributeMapping?: {[P in string]: string};
|
|
673
|
-
/** Optional. A
|
|
673
|
+
/** Optional. A description of the provider. Cannot exceed 256 characters. */
|
|
674
674
|
description?: string;
|
|
675
675
|
/** Optional. If true, populates additional debug information in Cloud Audit Logs for this provider. Logged attribute mappings and values can be found in `sts.googleapis.com` data access logs. Default value is false. */
|
|
676
676
|
detailedAuditLogging?: boolean;
|
|
677
677
|
/** Optional. Disables the workforce pool provider. You cannot use a disabled provider to exchange tokens. However, existing tokens still grant access. */
|
|
678
678
|
disabled?: boolean;
|
|
679
|
-
/** Optional. A
|
|
679
|
+
/** Optional. A display name for the provider. Cannot exceed 32 characters. */
|
|
680
680
|
displayName?: string;
|
|
681
681
|
/** Output only. Time after which the workforce identity pool provider will be permanently purged and cannot be recovered. */
|
|
682
682
|
expireTime?: string;
|
|
@@ -710,9 +710,9 @@ declare namespace gapi.client {
|
|
|
710
710
|
baseUri?: string;
|
|
711
711
|
/** Optional. Maps BYOID claims to SCIM claims. */
|
|
712
712
|
claimMapping?: {[P in string]: string};
|
|
713
|
-
/** Optional. The
|
|
713
|
+
/** Optional. The description of the scim tenant. Cannot exceed 256 characters. */
|
|
714
714
|
description?: string;
|
|
715
|
-
/** Optional. The
|
|
715
|
+
/** Optional. The display name of the scim tenant. Cannot exceed 32 characters. */
|
|
716
716
|
displayName?: string;
|
|
717
717
|
/** Identifier. The resource name of the SCIM Tenant. Format: `locations/{location}/workforcePools/{workforce_pool}/providers/ {workforce_pool_provider}/scimTenants/{scim_tenant}` */
|
|
718
718
|
name?: string;
|
|
@@ -722,7 +722,7 @@ declare namespace gapi.client {
|
|
|
722
722
|
state?: string;
|
|
723
723
|
}
|
|
724
724
|
interface WorkforcePoolProviderScimToken {
|
|
725
|
-
/** Optional. The
|
|
725
|
+
/** Optional. The display name of the scim token. Cannot exceed 32 characters. */
|
|
726
726
|
displayName?: string;
|
|
727
727
|
/** Identifier. The resource name of the SCIM Token. Format: `locations/{location}/workforcePools/{workforce_pool}/providers/ {workforce_pool_provider}/scimTenants/{scim_tenant}/tokens/{token}` */
|
|
728
728
|
name?: string;
|