google-api-python-client 2.115.0__py2.py3-none-any.whl → 2.117.0__py2.py3-none-any.whl

googleapiclient/discovery_cache/documents/cloudasset.v1.json

@@ -763,7 +763,7 @@
 ]
 },
 "analyzeOrgPolicyGovernedAssets": {
-"description": "Analyzes organization policies governed assets (Google Cloud resources or policies) under a scope. This RPC supports custom constraints and the following 10 canned constraints: * storage.uniformBucketLevelAccess * iam.disableServiceAccountKeyCreation * iam.allowedPolicyMemberDomains * compute.vmExternalIpAccess * appengine.enforceServiceAccountActAsCheck * gcp.resourceLocations * compute.trustedImageProjects * compute.skipDefaultNetworkCreation * compute.requireOsLogin * compute.disableNestedVirtualization This RPC only returns either resources of types [supported by search APIs](https://cloud.google.com/asset-inventory/docs/supported-asset-types) or IAM policies.",
+"description": "Analyzes organization policies governed assets (Google Cloud resources or policies) under a scope. This RPC supports custom constraints and the following canned constraints: * constraints/ainotebooks.accessMode * constraints/ainotebooks.disableFileDownloads * constraints/ainotebooks.disableRootAccess * constraints/ainotebooks.disableTerminal * constraints/ainotebooks.environmentOptions * constraints/ainotebooks.requireAutoUpgradeSchedule * constraints/ainotebooks.restrictVpcNetworks * constraints/compute.disableGuestAttributesAccess * constraints/compute.disableInstanceDataAccessApis * constraints/compute.disableNestedVirtualization * constraints/compute.disableSerialPortAccess * constraints/compute.disableSerialPortLogging * constraints/compute.disableVpcExternalIpv6 * constraints/compute.requireOsLogin * constraints/compute.requireShieldedVm * constraints/compute.restrictLoadBalancerCreationForTypes * constraints/compute.restrictProtocolForwardingCreationForTypes * constraints/compute.restrictXpnProjectLienRemoval * constraints/compute.setNewProjectDefaultToZonalDNSOnly * constraints/compute.skipDefaultNetworkCreation * constraints/compute.trustedImageProjects * constraints/compute.vmCanIpForward * constraints/compute.vmExternalIpAccess * constraints/gcp.detailedAuditLoggingMode * constraints/gcp.resourceLocations * constraints/iam.allowedPolicyMemberDomains * constraints/iam.automaticIamGrantsForDefaultServiceAccounts * constraints/iam.disableServiceAccountCreation * constraints/iam.disableServiceAccountKeyCreation * constraints/iam.disableServiceAccountKeyUpload * constraints/iam.restrictCrossProjectServiceAccountLienRemoval * constraints/iam.serviceAccountKeyExpiryHours * constraints/resourcemanager.accessBoundaries * constraints/resourcemanager.allowedExportDestinations * constraints/sql.restrictAuthorizedNetworks * constraints/sql.restrictNoncompliantDiagnosticDataAccess * constraints/sql.restrictNoncompliantResourceCreation * constraints/sql.restrictPublicIp * constraints/storage.publicAccessPrevention * constraints/storage.restrictAuthTypes * constraints/storage.uniformBucketLevelAccess This RPC only returns either resources of types [supported by search APIs](https://cloud.google.com/asset-inventory/docs/supported-asset-types) or IAM policies.",
 "flatPath": "v1/{v1Id}/{v1Id1}:analyzeOrgPolicyGovernedAssets",
 "httpMethod": "GET",
 "id": "cloudasset.analyzeOrgPolicyGovernedAssets",
@@ -1095,7 +1095,7 @@
 }
 }
 },
-"revision": "20240112",
+"revision": "20240130",
 "rootUrl": "https://cloudasset.googleapis.com/",
 "schemas": {
 "AccessSelector": {
@@ -1508,7 +1508,7 @@
 "type": "array"
 },
 "role": {
-"description": "Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.",
+"description": "Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`. For an overview of the IAM roles and permissions, see the [IAM documentation](https://cloud.google.com/iam/docs/roles-overview). For a list of the available pre-defined roles, see [here](https://cloud.google.com/iam/docs/understanding-roles).",
 "type": "string"
 }
 },
@@ -1886,6 +1886,10 @@
 "description": "The IAM policies governed by the organization policies of the AnalyzeOrgPolicyGovernedAssetsRequest.constraint.",
 "id": "GoogleCloudAssetV1AnalyzeOrgPolicyGovernedAssetsResponseGovernedIamPolicy",
 "properties": {
+"assetType": {
+"description": "The asset type of the AnalyzeOrgPolicyGovernedAssetsResponse.GovernedIamPolicy.attached_resource. Example: `cloudresourcemanager.googleapis.com/Project` See [Cloud Asset Inventory Supported Asset Types](https://cloud.google.com/asset-inventory/docs/supported-asset-types) for all supported asset types.",
+"type": "string"
+},
 "attachedResource": {
 "description": "The full resource name of the resource on which this IAM policy is set. Example: `//compute.googleapis.com/projects/my_project_123/zones/zone1/instances/instance1`. See [Cloud Asset Inventory Resource Name Format](https://cloud.google.com/asset-inventory/docs/resource-name-format) for more information.",
 "type": "string"
@@ -1916,6 +1920,17 @@
 "description": "The Google Cloud resources governed by the organization policies of the AnalyzeOrgPolicyGovernedAssetsRequest.constraint.",
 "id": "GoogleCloudAssetV1AnalyzeOrgPolicyGovernedAssetsResponseGovernedResource",
 "properties": {
+"assetType": {
+"description": "The asset type of the AnalyzeOrgPolicyGovernedAssetsResponse.GovernedResource.full_resource_name Example: `cloudresourcemanager.googleapis.com/Project` See [Cloud Asset Inventory Supported Asset Types](https://cloud.google.com/asset-inventory/docs/supported-asset-types) for all supported asset types.",
+"type": "string"
+},
+"effectiveTags": {
+"description": "The effective tags on this resource.",
+"items": {
+"$ref": "EffectiveTagDetails"
+},
+"type": "array"
+},
 "folders": {
 "description": "The folder(s) that this resource belongs to, in the format of folders/{FOLDER_NUMBER}. This field is available when the resource belongs (directly or cascadingly) to one or more folders.",
 "items": {
@@ -2117,10 +2132,28 @@
 "$ref": "AnalyzerOrgPolicy",
 "description": "The consolidated organization policy for the analyzed resource. The consolidated organization policy is computed by merging and evaluating AnalyzeOrgPolicyGovernedContainersResponse.GovernedContainer.policy_bundle. The evaluation will respect the organization policy [hierarchy rules](https://cloud.google.com/resource-manager/docs/organization-policy/understanding-hierarchy)."
 },
+"effectiveTags": {
+"description": "The effective tags on this resource.",
+"items": {
+"$ref": "EffectiveTagDetails"
+},
+"type": "array"
+},
+"folders": {
+"description": "The folder(s) that this resource belongs to, in the format of folders/{FOLDER_NUMBER}. This field is available when the resource belongs (directly or cascadingly) to one or more folders.",
+"items": {
+"type": "string"
+},
+"type": "array"
+},
 "fullResourceName": {
 "description": "The [full resource name] (https://cloud.google.com/asset-inventory/docs/resource-name-format) of an organization/folder/project resource.",
 "type": "string"
 },
+"organization": {
+"description": "The organization that this resource belongs to, in the format of organizations/{ORGANIZATION_NUMBER}. This field is available when the resource belongs (directly or cascadingly) to an organization.",
+"type": "string"
+},
 "parent": {
 "description": "The [full resource name] (https://cloud.google.com/asset-inventory/docs/resource-name-format) of the parent of AnalyzeOrgPolicyGovernedContainersResponse.GovernedContainer.full_resource_name.",
 "type": "string"
@@ -2131,6 +2164,10 @@
 "$ref": "AnalyzerOrgPolicy"
 },
 "type": "array"
+},
+"project": {
+"description": "The project that this resource belongs to, in the format of projects/{PROJECT_NUMBER}. This field is available when the resource belongs to a project.",
+"type": "string"
 }
 },
 "type": "object"
@@ -2232,6 +2269,10 @@
 "$ref": "Expr",
 "description": "The evaluating condition for this rule."
 },
+"conditionEvaluation": {
+"$ref": "ConditionEvaluation",
+"description": "The condition evaluation result for this rule. Only populated if it meets all the following criteria: * there is a condition defined for this rule * this rule is within a consolidated_policy * the consolidated_policy is within AnalyzeOrgPolicyGovernedContainersResponse.GovernedContainer or AnalyzeOrgPolicyGovernedAssetsResponse.GovernedResource"
+},
 "denyAll": {
 "description": "Setting this to true means that all values are denied. This field can be set only in Policies for list constraints.",
 "type": "boolean"
@@ -2757,7 +2798,7 @@
 "id": "GoogleIdentityAccesscontextmanagerV1EgressFrom",
 "properties": {
 "identities": {
-"description": "A list of identities that are allowed access through this [EgressPolicy]. Should be in the format of email address. The email address should represent individual user or service account only.",
+"description": "A list of identities that are allowed access through this [EgressPolicy], in the format of `user:{email_id}` or `serviceAccount:{email_id}`.",
 "items": {
 "type": "string"
 },
@@ -2862,7 +2903,7 @@
 "id": "GoogleIdentityAccesscontextmanagerV1IngressFrom",
 "properties": {
 "identities": {
-"description": "A list of identities that are allowed access through this ingress policy. Should be in the format of email address. The email address should represent individual user or service account only.",
+"description": "A list of identities that are allowed access through this ingress policy, in the format of `user:{email_id}` or `serviceAccount:{email_id}`.",
 "items": {
 "type": "string"
 },
@@ -3603,12 +3644,27 @@
 "$ref": "AnalyzerOrgPolicy",
 "description": "The consolidated organization policy for the analyzed resource. The consolidated organization policy is computed by merging and evaluating AnalyzeOrgPoliciesResponse.policy_bundle. The evaluation will respect the organization policy [hierarchy rules](https://cloud.google.com/resource-manager/docs/organization-policy/understanding-hierarchy)."
 },
+"folders": {
+"description": "The folder(s) that this consolidated policy belongs to, in the format of folders/{FOLDER_NUMBER}. This field is available when the consolidated policy belongs (directly or cascadingly) to one or more folders.",
+"items": {
+"type": "string"
+},
+"type": "array"
+},
+"organization": {
+"description": "The organization that this consolidated policy belongs to, in the format of organizations/{ORGANIZATION_NUMBER}. This field is available when the consolidated policy belongs (directly or cascadingly) to an organization.",
+"type": "string"
+},
 "policyBundle": {
 "description": "The ordered list of all organization policies from the AnalyzeOrgPoliciesResponse.OrgPolicyResult.consolidated_policy.attached_resource. to the scope specified in the request. If the constraint is defined with default policy, it will also appear in the list.",
 "items": {
 "$ref": "AnalyzerOrgPolicy"
 },
 "type": "array"
+},
+"project": {
+"description": "The project that this consolidated policy belongs to, in the format of projects/{PROJECT_NUMBER}. This field is available when the consolidated policy belongs to a project.",
+"type": "string"
 }
 },
 "type": "object"

googleapiclient/discovery_cache/documents/cloudasset.v1beta1.json

@@ -411,7 +411,7 @@
 }
 }
 },
-"revision": "20240112",
+"revision": "20240130",
 "rootUrl": "https://cloudasset.googleapis.com/",
 "schemas": {
 "AnalyzeIamPolicyLongrunningMetadata": {
@@ -553,7 +553,7 @@
 "type": "array"
 },
 "role": {
-"description": "Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.",
+"description": "Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`. For an overview of the IAM roles and permissions, see the [IAM documentation](https://cloud.google.com/iam/docs/roles-overview). For a list of the available pre-defined roles, see [here](https://cloud.google.com/iam/docs/understanding-roles).",
 "type": "string"
 }
 },
@@ -1123,7 +1123,7 @@
 "id": "GoogleIdentityAccesscontextmanagerV1EgressFrom",
 "properties": {
 "identities": {
-"description": "A list of identities that are allowed access through this [EgressPolicy]. Should be in the format of email address. The email address should represent individual user or service account only.",
+"description": "A list of identities that are allowed access through this [EgressPolicy], in the format of `user:{email_id}` or `serviceAccount:{email_id}`.",
 "items": {
 "type": "string"
 },
@@ -1228,7 +1228,7 @@
 "id": "GoogleIdentityAccesscontextmanagerV1IngressFrom",
 "properties": {
 "identities": {
-"description": "A list of identities that are allowed access through this ingress policy. Should be in the format of email address. The email address should represent individual user or service account only.",
+"description": "A list of identities that are allowed access through this ingress policy, in the format of `user:{email_id}` or `serviceAccount:{email_id}`.",
 "items": {
 "type": "string"
 },

googleapiclient/discovery_cache/documents/cloudasset.v1p1beta1.json

@@ -207,7 +207,7 @@
 }
 }
 },
-"revision": "20240112",
+"revision": "20240130",
 "rootUrl": "https://cloudasset.googleapis.com/",
 "schemas": {
 "AnalyzeIamPolicyLongrunningMetadata": {
@@ -293,7 +293,7 @@
 "type": "array"
 },
 "role": {
-"description": "Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.",
+"description": "Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`. For an overview of the IAM roles and permissions, see the [IAM documentation](https://cloud.google.com/iam/docs/roles-overview). For a list of the available pre-defined roles, see [here](https://cloud.google.com/iam/docs/understanding-roles).",
 "type": "string"
 }
 },
@@ -825,7 +825,7 @@
 "id": "GoogleIdentityAccesscontextmanagerV1EgressFrom",
 "properties": {
 "identities": {
-"description": "A list of identities that are allowed access through this [EgressPolicy]. Should be in the format of email address. The email address should represent individual user or service account only.",
+"description": "A list of identities that are allowed access through this [EgressPolicy], in the format of `user:{email_id}` or `serviceAccount:{email_id}`.",
 "items": {
 "type": "string"
 },
@@ -930,7 +930,7 @@
 "id": "GoogleIdentityAccesscontextmanagerV1IngressFrom",
 "properties": {
 "identities": {
-"description": "A list of identities that are allowed access through this ingress policy. Should be in the format of email address. The email address should represent individual user or service account only.",
+"description": "A list of identities that are allowed access through this ingress policy, in the format of `user:{email_id}` or `serviceAccount:{email_id}`.",
 "items": {
 "type": "string"
 },

googleapiclient/discovery_cache/documents/cloudasset.v1p5beta1.json

@@ -177,7 +177,7 @@
 }
 }
 },
-"revision": "20240112",
+"revision": "20240130",
 "rootUrl": "https://cloudasset.googleapis.com/",
 "schemas": {
 "AnalyzeIamPolicyLongrunningMetadata": {
@@ -312,7 +312,7 @@
 "type": "array"
 },
 "role": {
-"description": "Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.",
+"description": "Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`. For an overview of the IAM roles and permissions, see the [IAM documentation](https://cloud.google.com/iam/docs/roles-overview). For a list of the available pre-defined roles, see [here](https://cloud.google.com/iam/docs/understanding-roles).",
 "type": "string"
 }
 },
@@ -830,7 +830,7 @@
 "id": "GoogleIdentityAccesscontextmanagerV1EgressFrom",
 "properties": {
 "identities": {
-"description": "A list of identities that are allowed access through this [EgressPolicy]. Should be in the format of email address. The email address should represent individual user or service account only.",
+"description": "A list of identities that are allowed access through this [EgressPolicy], in the format of `user:{email_id}` or `serviceAccount:{email_id}`.",
 "items": {
 "type": "string"
 },
@@ -935,7 +935,7 @@
 "id": "GoogleIdentityAccesscontextmanagerV1IngressFrom",
 "properties": {
 "identities": {
-"description": "A list of identities that are allowed access through this ingress policy. Should be in the format of email address. The email address should represent individual user or service account only.",
+"description": "A list of identities that are allowed access through this ingress policy, in the format of `user:{email_id}` or `serviceAccount:{email_id}`.",
 "items": {
 "type": "string"
 },

googleapiclient/discovery_cache/documents/cloudasset.v1p7beta1.json

@@ -167,7 +167,7 @@
 }
 }
 },
-"revision": "20240112",
+"revision": "20240130",
 "rootUrl": "https://cloudasset.googleapis.com/",
 "schemas": {
 "AnalyzeIamPolicyLongrunningMetadata": {
@@ -253,7 +253,7 @@
 "type": "array"
 },
 "role": {
-"description": "Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.",
+"description": "Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`. For an overview of the IAM roles and permissions, see the [IAM documentation](https://cloud.google.com/iam/docs/roles-overview). For a list of the available pre-defined roles, see [here](https://cloud.google.com/iam/docs/understanding-roles).",
 "type": "string"
 }
 },
@@ -899,7 +899,7 @@
 "id": "GoogleIdentityAccesscontextmanagerV1EgressFrom",
 "properties": {
 "identities": {
-"description": "A list of identities that are allowed access through this [EgressPolicy]. Should be in the format of email address. The email address should represent individual user or service account only.",
+"description": "A list of identities that are allowed access through this [EgressPolicy], in the format of `user:{email_id}` or `serviceAccount:{email_id}`.",
 "items": {
 "type": "string"
 },
@@ -1004,7 +1004,7 @@
 "id": "GoogleIdentityAccesscontextmanagerV1IngressFrom",
 "properties": {
 "identities": {
-"description": "A list of identities that are allowed access through this ingress policy. Should be in the format of email address. The email address should represent individual user or service account only.",
+"description": "A list of identities that are allowed access through this ingress policy, in the format of `user:{email_id}` or `serviceAccount:{email_id}`.",
 "items": {
 "type": "string"
 },

googleapiclient/discovery_cache/documents/cloudbilling.v1.json

@@ -751,7 +751,7 @@
 }
 }
 },
-"revision": "20240112",
+"revision": "20240126",
 "rootUrl": "https://cloudbilling.googleapis.com/",
 "schemas": {
 "AggregationInfo": {
@@ -886,7 +886,7 @@
 "type": "array"
 },
 "role": {
-"description": "Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.",
+"description": "Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`. For an overview of the IAM roles and permissions, see the [IAM documentation](https://cloud.google.com/iam/docs/roles-overview). For a list of the available pre-defined roles, see [here](https://cloud.google.com/iam/docs/understanding-roles).",
 "type": "string"
 }
 },

googleapiclient/discovery_cache/documents/cloudbilling.v1beta.json

@@ -758,7 +758,7 @@
 }
 }
 },
-"revision": "20240112",
+"revision": "20240126",
 "rootUrl": "https://cloudbilling.googleapis.com/",
 "schemas": {
 "CacheFillRegions": {

googleapiclient/discovery_cache/documents/cloudbuild.v1.json

@@ -2319,7 +2319,7 @@
 }
 }
 },
-"revision": "20240111",
+"revision": "20240130",
 "rootUrl": "https://cloudbuild.googleapis.com/",
 "schemas": {
 "ApprovalConfig": {

googleapiclient/discovery_cache/documents/cloudbuild.v2.json

@@ -844,7 +844,7 @@
 }
 }
 },
-"revision": "20240111",
+"revision": "20240130",
 "rootUrl": "https://cloudbuild.googleapis.com/",
 "schemas": {
 "AuditConfig": {
@@ -939,7 +939,7 @@
 "type": "array"
 },
 "role": {
-"description": "Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.",
+"description": "Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`. For an overview of the IAM roles and permissions, see the [IAM documentation](https://cloud.google.com/iam/docs/roles-overview). For a list of the available pre-defined roles, see [here](https://cloud.google.com/iam/docs/understanding-roles).",
 "type": "string"
 }
 },
@@ -1867,6 +1867,14 @@
 "readOnly": true,
 "type": "string"
 },
+"gcbParams": {
+"additionalProperties": {
+"type": "string"
+},
+"description": "Output only. GCB default params.",
+"readOnly": true,
+"type": "object"
+},
 "name": {
 "description": "Output only. The `PipelineRun` name with format `projects/{project}/locations/{location}/pipelineRuns/{pipeline_run}`",
 "readOnly": true,
@@ -1899,11 +1907,19 @@
 "$ref": "PipelineSpec",
 "description": "PipelineSpec defines the desired state of Pipeline."
 },
+"provenance": {
+"$ref": "Provenance",
+"description": "Optional. Provenance configuration."
+},
 "resolvedPipelineSpec": {
 "$ref": "PipelineSpec",
 "description": "Output only. The exact PipelineSpec used to instantiate the run.",
 "readOnly": true
 },
+"security": {
+"$ref": "Security",
+"description": "Optional. Security configuration."
+},
 "serviceAccount": {
 "description": "Service account used in the Pipeline.",
 "type": "string"
@@ -1937,6 +1953,10 @@
 "readOnly": true,
 "type": "string"
 },
+"worker": {
+"$ref": "Worker",
+"description": "Optional. Worker configuration."
+},
 "workerPool": {
 "description": "Output only. The WorkerPool used to run this PipelineRun.",
 "readOnly": true,
@@ -2139,6 +2159,57 @@
 },
 "type": "object"
 },
+"Provenance": {
+"description": "Provenance configuration.",
+"id": "Provenance",
+"properties": {
+"enabled": {
+"description": "Optional. Provenance push mode.",
+"enum": [
+"ENABLED_UNSPECIFIED",
+"REQUIRED",
+"OPTIMISTIC",
+"DISABLED"
+],
+"enumDescriptions": [
+"Default to disabled (before AA regionalization), optimistic after",
+"Provenance failures would fail the run",
+"GCB will attempt to push to artifact analaysis and build state would not be impacted by the push failures.",
+"Disable the provenance push entirely."
+],
+"type": "string"
+},
+"region": {
+"description": "Optional. Provenance region.",
+"enum": [
+"REGION_UNSPECIFIED",
+"GLOBAL"
+],
+"enumDescriptions": [
+"The PipelineRun/TaskRun/Workflow will be rejected. Update this comment to push to the same region as the run in Artifact Analysis when it's regionalized.",
+"Push provenance to Artifact Analysis in global region."
+],
+"type": "string"
+},
+"storage": {
+"description": "Optional. Where provenance is stored.",
+"enum": [
+"STORAGE_UNSPECIFIED",
+"PREFER_ARTIFACT_PROJECT",
+"ARTIFACT_PROJECT_ONLY",
+"BUILD_PROJECT_ONLY"
+],
+"enumDescriptions": [
+"Default PREFER_ARTIFACT_PROJECT.",
+"GCB will attempt to push provenance to the artifact project. If it is not available, fallback to build project.",
+"Only push to artifact project.",
+"Only push to build project."
+],
+"type": "string"
+}
+},
+"type": "object"
+},
 "Repository": {
 "description": "A repository associated to a parent connection.",
 "id": "Repository",
@@ -2242,6 +2313,31 @@
 },
 "type": "object"
 },
+"Security": {
+"description": "Security configuration.",
+"id": "Security",
+"properties": {
+"privilegeMode": {
+"description": "Optional. Privilege mode.",
+"enum": [
+"PRIVILEGE_MODE_UNSPECIFIED",
+"PRIVILEGED",
+"UNPRIVILEGED"
+],
+"enumDescriptions": [
+"Default to PRIVILEGED.",
+"Privileged mode.",
+"Unprivileged mode."
+],
+"type": "string"
+},
+"serviceAccount": {
+"description": "IAM service account whose credentials will be used at runtime.",
+"type": "string"
+}
+},
+"type": "object"
+},
 "SecurityContext": {
 "description": "Security options the container should be run with.",
 "id": "SecurityContext",
@@ -2777,6 +2873,17 @@
 },
 "type": "object"
 },
+"Worker": {
+"description": "Configuration for the worker.",
+"id": "Worker",
+"properties": {
+"machineType": {
+"description": "Optional. Machine type of a worker, default is \"e2-standard-2\".",
+"type": "string"
+}
+},
+"type": "object"
+},
 "WorkspaceBinding": {
 "description": "WorkspaceBinding maps a workspace to a Volume. PipelineRef can be used to refer to a specific instance of a Pipeline.",
 "id": "WorkspaceBinding",

googleapiclient/discovery_cache/documents/cloudchannel.v1.json

@@ -2183,7 +2183,7 @@
 }
 }
 },
-"revision": "20240110",
+"revision": "20240204",
 "rootUrl": "https://cloudchannel.googleapis.com/",
 "schemas": {
 "GoogleCloudChannelV1ActivateEntitlementRequest": {

googleapiclient/discovery_cache/documents/clouddeploy.v1.json

@@ -317,6 +317,37 @@
 "https://www.googleapis.com/auth/cloud-platform"
 ]
 },
+"getIamPolicy": {
+"description": "Gets the access control policy for a resource. Returns an empty policy if the resource exists and does not have a policy set.",
+"flatPath": "v1/projects/{projectsId}/locations/{locationsId}/customTargetTypes/{customTargetTypesId}:getIamPolicy",
+"httpMethod": "GET",
+"id": "clouddeploy.projects.locations.customTargetTypes.getIamPolicy",
+"parameterOrder": [
+"resource"
+],
+"parameters": {
+"options.requestedPolicyVersion": {
+"description": "Optional. The maximum policy version that will be used to format the policy. Valid values are 0, 1, and 3. Requests specifying an invalid value will be rejected. Requests for policies with any conditional role bindings must specify version 3. Policies with no conditional role bindings may specify any valid value or leave the field unset. The policy in the response might use the policy version that you specified, or it might use a lower policy version. For example, if you specify version 3, but the policy has no conditional role bindings, the response uses version 1. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).",
+"format": "int32",
+"location": "query",
+"type": "integer"
+},
+"resource": {
+"description": "REQUIRED: The resource for which the policy is being requested. See [Resource names](https://cloud.google.com/apis/design/resource_names) for the appropriate value for this field.",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+/customTargetTypes/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1/{+resource}:getIamPolicy",
+"response": {
+"$ref": "Policy"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+},
 "list": {
 "description": "Lists CustomTargetTypes in a given project and location.",
 "flatPath": "v1/projects/{projectsId}/locations/{locationsId}/customTargetTypes",
@@ -411,6 +442,34 @@
 "scopes": [
 "https://www.googleapis.com/auth/cloud-platform"
 ]
+},
+"setIamPolicy": {
+"description": "Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.",
+"flatPath": "v1/projects/{projectsId}/locations/{locationsId}/customTargetTypes/{customTargetTypesId}:setIamPolicy",
+"httpMethod": "POST",
+"id": "clouddeploy.projects.locations.customTargetTypes.setIamPolicy",
+"parameterOrder": [
+"resource"
+],
+"parameters": {
+"resource": {
+"description": "REQUIRED: The resource for which the policy is being specified. See [Resource names](https://cloud.google.com/apis/design/resource_names) for the appropriate value for this field.",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+/customTargetTypes/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1/{+resource}:setIamPolicy",
+"request": {
+"$ref": "SetIamPolicyRequest"
+},
+"response": {
+"$ref": "Policy"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
 }
 }
 },
@@ -2006,7 +2065,7 @@
 }
 }
 },
-"revision": "20240107",
+"revision": "20240117",
 "rootUrl": "https://clouddeploy.googleapis.com/",
 "schemas": {
 "AbandonReleaseRequest": {

googleapiclient/discovery_cache/documents/clouderrorreporting.v1beta1.json

@@ -431,7 +431,7 @@
 }
 }
 },
-"revision": "20240110",
+"revision": "20240117",
 "rootUrl": "https://clouderrorreporting.googleapis.com/",
 "schemas": {
 "DeleteEventsResponse": {

googleapiclient/discovery_cache/documents/cloudfunctions.v1.json

@@ -552,7 +552,7 @@
 }
 }
 },
-"revision": "20240112",
+"revision": "20240118",
 "rootUrl": "https://cloudfunctions.googleapis.com/",
 "schemas": {
 "AuditConfig": {
@@ -625,7 +625,7 @@
 "type": "array"
 },
 "role": {
-"description": "Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.",
+"description": "Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`. For an overview of the IAM roles and permissions, see the [IAM documentation](https://cloud.google.com/iam/docs/roles-overview). For a list of the available pre-defined roles, see [here](https://cloud.google.com/iam/docs/understanding-roles).",
 "type": "string"
 }
 },
@@ -968,7 +968,7 @@
 "id": "GenerateUploadUrlRequest",
 "properties": {
 "kmsKeyName": {
-"description": "Resource name of a KMS crypto key (managed by the user) used to encrypt/decrypt function source code objects in staging Cloud Storage buckets. When you generate an upload url and upload your source code, it gets copied to a staging Cloud Storage bucket in an internal regional project. The source code is then copied to a versioned directory in the sources bucket in the consumer project during the function deployment. It must match the pattern `projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}`. The Google Cloud Functions service account (service-{project_number}@gcf-admin-robot.iam.gserviceaccount.com) must be granted the role 'Cloud KMS CryptoKey Encrypter/Decrypter (roles/cloudkms.cryptoKeyEncrypterDecrypter)' on the Key/KeyRing/Project/Organization (least access preferred). GCF will delegate access to the Google Storage service account in the internal project.",
+"description": "Resource name of a KMS crypto key (managed by the user) used to encrypt/decrypt function source code objects in intermediate Cloud Storage buckets. When you generate an upload url and upload your source code, it gets copied to an intermediate Cloud Storage bucket. The source code is then copied to a versioned directory in the sources bucket in the consumer project during the function deployment. It must match the pattern `projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}`. The Google Cloud Functions service account (service-{project_number}@gcf-admin-robot.iam.gserviceaccount.com) must be granted the role 'Cloud KMS CryptoKey Encrypter/Decrypter (roles/cloudkms.cryptoKeyEncrypterDecrypter)' on the Key/KeyRing/Project/Organization (least access preferred). GCF will delegate access to the Google Storage service account in the internal project.",
 "type": "string"
 }
 },