google-api-python-client 2.128.0__py2.py3-none-any.whl → 2.130.0__py2.py3-none-any.whl

googleapiclient/discovery_cache/documents/gkehub.v1alpha.json

@@ -2175,7 +2175,7 @@
 }
 }
 },
-"revision": "20240428",
+"revision": "20240511",
 "rootUrl": "https://gkehub.googleapis.com/",
 "schemas": {
 "AnthosObservabilityFeatureSpec": {
@@ -4864,6 +4864,13 @@
 "nextPageToken": {
 "description": "A token to request the next page of resources from the `ListMembershipBindings` method. The value of an empty string means that there are no more resources to return.",
 "type": "string"
+},
+"unreachable": {
+"description": "List of locations that could not be reached while fetching this list.",
+"items": {
+"type": "string"
+},
+"type": "array"
 }
 },
 "type": "object"
@@ -4882,6 +4889,13 @@
 "$ref": "RBACRoleBinding"
 },
 "type": "array"
+},
+"unreachable": {
+"description": "List of locations that could not be reached while fetching this list.",
+"items": {
+"type": "string"
+},
+"type": "array"
 }
 },
 "type": "object"
@@ -6380,12 +6394,14 @@
 "enum": [
 "MODE_UNSPECIFIED",
 "DISABLED",
-"BASIC"
+"BASIC",
+"ENTERPRISE"
 ],
 "enumDescriptions": [
 "Default value not specified.",
 "Disables Security Posture features on the cluster.",
-"Applies Security Posture features on the cluster."
+"Applies Security Posture features on the cluster.",
+"Applies the Security Posture off cluster Enterprise level features."
 ],
 "type": "string"
 },

googleapiclient/discovery_cache/documents/gkehub.v1beta.json

@@ -2101,7 +2101,7 @@
 }
 }
 },
-"revision": "20240428",
+"revision": "20240511",
 "rootUrl": "https://gkehub.googleapis.com/",
 "schemas": {
 "AnthosObservabilityFeatureSpec": {
@@ -4620,6 +4620,13 @@
 "nextPageToken": {
 "description": "A token to request the next page of resources from the `ListMembershipBindings` method. The value of an empty string means that there are no more resources to return.",
 "type": "string"
+},
+"unreachable": {
+"description": "List of locations that could not be reached while fetching this list.",
+"items": {
+"type": "string"
+},
+"type": "array"
 }
 },
 "type": "object"
@@ -4638,6 +4645,13 @@
 "$ref": "RBACRoleBinding"
 },
 "type": "array"
+},
+"unreachable": {
+"description": "List of locations that could not be reached while fetching this list.",
+"items": {
+"type": "string"
+},
+"type": "array"
 }
 },
 "type": "object"
@@ -6080,12 +6094,14 @@
 "enum": [
 "MODE_UNSPECIFIED",
 "DISABLED",
-"BASIC"
+"BASIC",
+"ENTERPRISE"
 ],
 "enumDescriptions": [
 "Default value not specified.",
 "Disables Security Posture features on the cluster.",
-"Applies Security Posture features on the cluster."
+"Applies Security Posture features on the cluster.",
+"Applies the Security Posture off cluster Enterprise level features."
 ],
 "type": "string"
 },

googleapiclient/discovery_cache/documents/gkehub.v1beta1.json

@@ -712,7 +712,7 @@
 }
 }
 },
-"revision": "20240428",
+"revision": "20240511",
 "rootUrl": "https://gkehub.googleapis.com/",
 "schemas": {
 "ApplianceCluster": {

googleapiclient/discovery_cache/documents/gkehub.v2alpha.json

@@ -280,7 +280,7 @@
 }
 }
 },
-"revision": "20240428",
+"revision": "20240511",
 "rootUrl": "https://gkehub.googleapis.com/",
 "schemas": {
 "CancelOperationRequest": {

googleapiclient/discovery_cache/documents/gmailpostmastertools.v1.json

@@ -265,7 +265,7 @@
 }
 }
 },
-"revision": "20240505",
+"revision": "20240519",
 "rootUrl": "https://gmailpostmastertools.googleapis.com/",
 "schemas": {
 "DeliveryError": {

googleapiclient/discovery_cache/documents/gmailpostmastertools.v1beta1.json

@@ -265,7 +265,7 @@
 }
 }
 },
-"revision": "20240505",
+"revision": "20240519",
 "rootUrl": "https://gmailpostmastertools.googleapis.com/",
 "schemas": {
 "DeliveryError": {

googleapiclient/discovery_cache/documents/groupsmigration.v1.json

@@ -146,7 +146,7 @@
 }
 }
 },
-"revision": "20240502",
+"revision": "20240513",
 "rootUrl": "https://groupsmigration.googleapis.com/",
 "schemas": {
 "Groups": {

googleapiclient/discovery_cache/documents/healthcare.v1.json

@@ -4554,7 +4554,7 @@
 }
 }
 },
-"revision": "20240427",
+"revision": "20240508",
 "rootUrl": "https://healthcare.googleapis.com/",
 "schemas": {
 "ActivateConsentRequest": {
@@ -7190,8 +7190,8 @@
 ],
 "enumDescriptions": [
 "No schema type specified. This type is unsupported.",
-"Analytics schema defined by the FHIR community. See https://github.com/FHIR/sql-on-fhir/blob/master/sql-on-fhir.md. BigQuery only allows a maximum of 10,000 columns per table. Due to this limitation, the server will not generate schemas for fields of type `Resource`, which can hold any resource type. The affected fields are `Parameters.parameter.resource`, `Bundle.entry.resource`, and `Bundle.entry.response.outcome`. Analytics schema does not gracefully handle extensions with one or more occurrences, anaytics schema also does not handle contained resource.",
-"Analytics V2, similar to schema defined by the FHIR community, with added support for extensions with one or more occurrences and contained resources in stringified JSON. Analytics V2 uses more space in the destination table than Analytics V1. It is generally recommended to use Analytics V2 over Analytics."
+"Analytics schema defined by the FHIR community. See https://github.com/FHIR/sql-on-fhir/blob/master/sql-on-fhir.md. BigQuery only allows a maximum of 10,000 columns per table. Due to this limitation, the server will not generate schemas for fields of type `Resource`, which can hold any resource type. The affected fields are `Parameters.parameter.resource`, `Bundle.entry.resource`, and `Bundle.entry.response.outcome`. Analytics schema does not gracefully handle extensions with one or more occurrences, anaytics schema also does not handle contained resource. Additionally, extensions with a URL ending in \"/{existing_resource_field_name}\" may cause undefined behavior.",
+"Analytics V2, similar to schema defined by the FHIR community, with added support for extensions with one or more occurrences and contained resources in stringified JSON. Extensions with a URL ending in \"/{existing_resource_field_name}\" will cause conflict and prevent the resource from being sent to BigQuery. Analytics V2 uses more space in the destination table than Analytics V1. It is generally recommended to use Analytics V2 over Analytics."
 ],
 "type": "string"
 }

googleapiclient/discovery_cache/documents/healthcare.v1beta1.json

@@ -3739,6 +3739,35 @@
 "https://www.googleapis.com/auth/cloud-platform"
 ]
 },
+"exportHistory": {
+"description": "Export resources including historical versions from the FHIR store to the specified destination. The exported resource, along with previous versions, will be exported in one or more FHIR history bundles. This method returns an Operation that can be used to track the status of the export by calling GetOperation. Immediate fatal errors appear in the error field, errors are also logged to Cloud Logging (see [Viewing error logs in Cloud Logging](https://cloud.google.com/healthcare/docs/how-tos/logging)). Otherwise, when the operation finishes, a detailed response of type ExportResourcesResponse is returned in the response field. The metadata field type for this operation is OperationMetadata.",
+"flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/datasets/{datasetsId}/fhirStores/{fhirStoresId}:exportHistory",
+"httpMethod": "POST",
+"id": "healthcare.projects.locations.datasets.fhirStores.exportHistory",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "Required. The name of the FHIR store to export resource from, in the format `projects/{project_id}/locations/{location_id}/datasets/{dataset_id}/fhirStores/{fhir_store_id}`.",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+/datasets/[^/]+/fhirStores/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1beta1/{+name}:exportHistory",
+"request": {
+"$ref": "ExportResourcesHistoryRequest"
+},
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-healthcare",
+"https://www.googleapis.com/auth/cloud-platform"
+]
+},
 "get": {
 "description": "Gets the configuration of the specified FHIR store.",
 "flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/datasets/{datasetsId}/fhirStores/{fhirStoresId}",
@@ -3852,6 +3881,35 @@
 "https://www.googleapis.com/auth/cloud-platform"
 ]
 },
+"importHistory": {
+"description": "Import resource historical versions from Cloud Storage source to destination fhir store. The exported resource, along with previous versions, will be exported in one or more FHIR history bundles. This method returns an Operation that can be used to track the status of the export by calling GetOperation. Immediate fatal errors appear in the error field, errors are also logged to Cloud Logging (see [Viewing error logs in Cloud Logging](https://cloud.google.com/healthcare/docs/how-tos/logging)). Otherwise, when the operation finishes, a detailed response of type ImportResourcesResponse is returned in the response field. The metadata field type for this operation is OperationMetadata.",
+"flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/datasets/{datasetsId}/fhirStores/{fhirStoresId}:importHistory",
+"httpMethod": "POST",
+"id": "healthcare.projects.locations.datasets.fhirStores.importHistory",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "Required. The name of the FHIR store to import FHIR resources to, in the format of `projects/{project_id}/locations/{location_id}/datasets/{dataset_id}/fhirStores/{fhir_store_id}`.",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+/datasets/[^/]+/fhirStores/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1beta1/{+name}:importHistory",
+"request": {
+"$ref": "ImportResourcesHistoryRequest"
+},
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-healthcare",
+"https://www.googleapis.com/auth/cloud-platform"
+]
+},
 "list": {
 "description": "Lists the FHIR stores in the given dataset.",
 "flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/datasets/{datasetsId}/fhirStores",
@@ -5614,7 +5672,7 @@
 }
 }
 },
-"revision": "20240427",
+"revision": "20240508",
 "rootUrl": "https://healthcare.googleapis.com/",
 "schemas": {
 "AccessDeterminationLogConfig": {
@@ -7379,6 +7437,34 @@
 "properties": {},
 "type": "object"
 },
+"ExportResourcesHistoryRequest": {
+"description": "Request to export the history of resources.",
+"id": "ExportResourcesHistoryRequest",
+"properties": {
+"_since": {
+"description": "If provided, only resources versions updated after this time are exported. The time uses the format YYYY-MM-DDThh:mm:ss.sss+zz:zz. For example, `2015-02-07T13:28:17.239+02:00` or `2017-01-01T00:00:00Z`. The time must be specified to the second and include a time zone.",
+"type": "string"
+},
+"_type": {
+"description": "String of comma-delimited FHIR resource types. If provided, only resources of the specified resource type(s) are exported.",
+"type": "string"
+},
+"bigqueryDestination": {
+"$ref": "GoogleCloudHealthcareV1beta1FhirBigQueryDestination",
+"description": "The BigQuery output destination. The Cloud Healthcare Service Agent requires two IAM roles on the BigQuery location: `roles/bigquery.dataEditor` and `roles/bigquery.jobUser`. The output is one BigQuery table per resource type. Unlike when setting `BigQueryDestination` for `StreamConfig`, `ExportResources` does not create BigQuery views."
+},
+"gcsDestination": {
+"$ref": "GoogleCloudHealthcareV1beta1FhirGcsDestination",
+"description": "The Cloud Storage output destination. The Healthcare Service Agent account requires the `roles/storage.objectAdmin` role on the Cloud Storage location. The exported outputs are organized by FHIR resource types. The server creates one or more objects per resource type depending on the volume of the resources exported. When there is only one object per resource type, the object name is in the form of `{operation_id})_history_{resource_type}`. When there are multiple objects for a given resource type, the object names are in the form of `{operation_id}_history_{resource_type}-{index}-of-{total}`. Each object contains newline delimited JSON, and each line is a FHIR history bundle containing the history for a single resource."
+},
+"maxResourceVersions": {
+"description": "If provided and non-zero, places a limit on the number of resource versions that are returned for a given resource. For example, if the limit is `100` and a resource has over 100 versions, only the 100 most recent versions will be returned. Must be positive.",
+"format": "int64",
+"type": "string"
+}
+},
+"type": "object"
+},
 "ExportResourcesRequest": {
 "description": "Request to export resources.",
 "id": "ExportResourcesRequest",
@@ -8433,6 +8519,40 @@
 "properties": {},
 "type": "object"
 },
+"ImportResourcesHistoryRequest": {
+"description": "Request to import the history of resources.",
+"id": "ImportResourcesHistoryRequest",
+"properties": {
+"contentStructure": {
+"description": "The content structure in the source location. If not specified, the server treats the input source files as BUNDLE.",
+"enum": [
+"CONTENT_STRUCTURE_UNSPECIFIED",
+"BUNDLE",
+"RESOURCE",
+"BUNDLE_PRETTY",
+"RESOURCE_PRETTY"
+],
+"enumDescriptions": [
+"If the content structure is not specified, the default value `BUNDLE` is used.",
+"The source file contains one or more lines of newline-delimited JSON (ndjson). Each line is a bundle that contains one or more resources.",
+"The source file contains one or more lines of newline-delimited JSON (ndjson). Each line is a single resource.",
+"The entire file is one JSON bundle. The JSON can span multiple lines.",
+"The entire file is one JSON resource. The JSON can span multiple lines."
+],
+"type": "string"
+},
+"gcsSource": {
+"$ref": "GoogleCloudHealthcareV1beta1FhirGcsSource",
+"description": "Cloud Storage source data location and import configuration. The Cloud Healthcare Service Agent requires the `roles/storage.objectAdmin` Cloud IAM roles on the Cloud Storage location. The Healthcare Service Agent Each Cloud Storage object should be a text file that contains the format specified in ContentStructure."
+},
+"maxErrorCount": {
+"description": "The maximum number of errors before the server cancels the operation. If not specified or set to 0, defaults to 100. -1 means no maximum, the server tries to process all input. Since the server executes the operation in parallel, it might not stop the operation after exactly this number of errors occur.",
+"format": "int64",
+"type": "string"
+}
+},
+"type": "object"
+},
 "ImportResourcesRequest": {
 "description": "Request to import resources.",
 "id": "ImportResourcesRequest",
@@ -9466,8 +9586,8 @@
 "enumDescriptions": [
 "No schema type specified. This type is unsupported.",
 "A data-driven schema generated from the fields present in the FHIR data being exported, with no additional simplification. This type cannot be used for streaming to BigQuery.",
-"Analytics schema defined by the FHIR community. See https://github.com/FHIR/sql-on-fhir/blob/master/sql-on-fhir.md. BigQuery only allows a maximum of 10,000 columns per table. Due to this limitation, the server will not generate schemas for fields of type `Resource`, which can hold any resource type. The affected fields are `Parameters.parameter.resource`, `Bundle.entry.resource`, and `Bundle.entry.response.outcome`. Analytics schema does not gracefully handle extensions with one or more occurrences, anaytics schema also does not handle contained resource.",
-"Analytics V2, similar to schema defined by the FHIR community, with added support for extensions with one or more occurrences and contained resources in stringified JSON. Analytics V2 uses more space in the destination table than Analytics V1. It is generally recommended to use Analytics V2 over Analytics."
+"Analytics schema defined by the FHIR community. See https://github.com/FHIR/sql-on-fhir/blob/master/sql-on-fhir.md. BigQuery only allows a maximum of 10,000 columns per table. Due to this limitation, the server will not generate schemas for fields of type `Resource`, which can hold any resource type. The affected fields are `Parameters.parameter.resource`, `Bundle.entry.resource`, and `Bundle.entry.response.outcome`. Analytics schema does not gracefully handle extensions with one or more occurrences, anaytics schema also does not handle contained resource. Additionally, extensions with a URL ending in \"/{existing_resource_field_name}\" may cause undefined behavior.",
+"Analytics V2, similar to schema defined by the FHIR community, with added support for extensions with one or more occurrences and contained resources in stringified JSON. Extensions with a URL ending in \"/{existing_resource_field_name}\" will cause conflict and prevent the resource from being sent to BigQuery. Analytics V2 uses more space in the destination table than Analytics V1. It is generally recommended to use Analytics V2 over Analytics."
 ],
 "type": "string"
 }

googleapiclient/discovery_cache/documents/iam.v1.json

@@ -3216,7 +3216,7 @@
 }
 }
 },
-"revision": "20240418",
+"revision": "20240514",
 "rootUrl": "https://iam.googleapis.com/",
 "schemas": {
 "AccessRestrictions": {
@@ -4705,7 +4705,7 @@ false
 "type": "string"
 },
 "disableReason": {
-"description": "optional. If the key is disabled, it may have a DisableReason describing why it was disabled.",
+"description": "Output only. optional. If the key is disabled, it may have a DisableReason describing why it was disabled.",
 "enum": [
 "SERVICE_ACCOUNT_KEY_DISABLE_REASON_UNSPECIFIED",
 "SERVICE_ACCOUNT_KEY_DISABLE_REASON_USER_INITIATED",
@@ -4718,6 +4718,7 @@ false
 "Google detected this Service Account external key's private key data as exposed, typically in a public repository on GitHub or similar.",
 "This service account external key was detected as compromised and used by an attacker."
 ],
+"readOnly": true,
 "type": "string"
 },
 "disabled": {
@@ -4725,10 +4726,11 @@ false
 "type": "boolean"
 },
 "extendedStatus": {
-"description": "Extended Status provides permanent information about a service account key. For example, if this key was detected as exposed or compromised, that information will remain for the lifetime of the key in the extended_status.",
+"description": "Output only. Extended Status provides permanent information about a service account key. For example, if this key was detected as exposed or compromised, that information will remain for the lifetime of the key in the extended_status.",
 "items": {
 "$ref": "ExtendedStatus"
 },
+"readOnly": true,
 "type": "array"
 },
 "keyAlgorithm": {

googleapiclient/discovery_cache/documents/iam.v2.json

@@ -293,7 +293,7 @@
 }
 }
 },
-"revision": "20240418",
+"revision": "20240514",
 "rootUrl": "https://iam.googleapis.com/",
 "schemas": {
 "CloudControl2SharedOperationsReconciliationOperationMetadata": {

googleapiclient/discovery_cache/documents/iam.v2beta.json

@@ -293,7 +293,7 @@
 }
 }
 },
-"revision": "20240418",
+"revision": "20240514",
 "rootUrl": "https://iam.googleapis.com/",
 "schemas": {
 "CloudControl2SharedOperationsReconciliationOperationMetadata": {

googleapiclient/discovery_cache/documents/iamcredentials.v1.json

@@ -226,7 +226,7 @@
 }
 }
 },
-"revision": "20240425",
+"revision": "20240508",
 "rootUrl": "https://iamcredentials.googleapis.com/",
 "schemas": {
 "GenerateAccessTokenRequest": {

googleapiclient/discovery_cache/documents/iap.v1.json

@@ -472,7 +472,7 @@
 ],
 "parameters": {
 "name": {
-"description": "Required. Immutable. Identifier for the TunnelDestGroup. Must be unique within the project and contain only lower case letters (a-z) and dashes (-).",
+"description": "Identifier. Identifier for the TunnelDestGroup. Must be unique within the project and contain only lower case letters (a-z) and dashes (-).",
 "location": "path",
 "pattern": "^projects/[^/]+/iap_tunnel/locations/[^/]+/destGroups/[^/]+$",
 "required": true,
@@ -682,7 +682,7 @@
 }
 }
 },
-"revision": "20240430",
+"revision": "20240513",
 "rootUrl": "https://iap.googleapis.com/",
 "schemas": {
 "AccessDeniedPageSettings": {
@@ -710,15 +710,15 @@
 "properties": {
 "allowedDomainsSettings": {
 "$ref": "AllowedDomainsSettings",
-"description": "Settings to configure and enable allowed domains."
+"description": "Optional. Settings to configure and enable allowed domains."
 },
 "corsSettings": {
 "$ref": "CorsSettings",
-"description": "Configuration to allow cross-origin requests via IAP."
+"description": "Optional. Configuration to allow cross-origin requests via IAP."
 },
 "gcipSettings": {
 "$ref": "GcipSettings",
-"description": "GCIP claims and endpoint configurations for 3p identity providers."
+"description": "Optional. GCIP claims and endpoint configurations for 3p identity providers."
 },
 "identitySources": {
 "description": "Optional. Identity sources that IAP can use to authenticate the end user. Only one identity source can be configured.",
@@ -737,15 +737,15 @@
 },
 "oauthSettings": {
 "$ref": "OAuthSettings",
-"description": "Settings to configure IAP's OAuth behavior."
+"description": "Optional. Settings to configure IAP's OAuth behavior."
 },
 "policyDelegationSettings": {
 "$ref": "PolicyDelegationSettings",
-"description": "Settings to configure Policy delegation for apps hosted in tenant projects. INTERNAL_ONLY."
+"description": "Optional. Settings to configure Policy delegation for apps hosted in tenant projects. INTERNAL_ONLY."
 },
 "reauthSettings": {
 "$ref": "ReauthSettings",
-"description": "Settings to configure reauthentication policies in IAP."
+"description": "Optional. Settings to configure reauthentication policies in IAP."
 },
 "workforceIdentitySettings": {
 "$ref": "WorkforceIdentitySettings",
@@ -759,14 +759,14 @@
 "id": "AllowedDomainsSettings",
 "properties": {
 "domains": {
-"description": "List of trusted domains.",
+"description": "Optional. List of trusted domains.",
 "items": {
 "type": "string"
 },
 "type": "array"
 },
 "enable": {
-"description": "Configuration for customers to opt in for the feature.",
+"description": "Optional. Configuration for customers to opt in for the feature.",
 "type": "boolean"
 }
 },
@@ -778,11 +778,11 @@
 "properties": {
 "accessDeniedPageSettings": {
 "$ref": "AccessDeniedPageSettings",
-"description": "Customization for Access Denied page."
+"description": "Optional. Customization for Access Denied page."
 },
 "attributePropagationSettings": {
 "$ref": "AttributePropagationSettings",
-"description": "Settings to configure attribute propagation."
+"description": "Optional. Settings to configure attribute propagation."
 },
 "cookieDomain": {
 "description": "The Domain value to set for cookies generated by IAP. This value is not validated by the API, but will be ignored at runtime if invalid.",
@@ -790,7 +790,7 @@
 },
 "csmSettings": {
 "$ref": "CsmSettings",
-"description": "Settings to configure IAP's behavior for a service mesh."
+"description": "Optional. Settings to configure IAP's behavior for a service mesh."
 }
 },
 "type": "object"
@@ -800,15 +800,15 @@
 "id": "AttributePropagationSettings",
 "properties": {
 "enable": {
-"description": "Whether the provided attribute propagation settings should be evaluated on user requests. If set to true, attributes returned from the expression will be propagated in the set output credentials.",
+"description": "Optional. Whether the provided attribute propagation settings should be evaluated on user requests. If set to true, attributes returned from the expression will be propagated in the set output credentials.",
 "type": "boolean"
 },
 "expression": {
-"description": "Raw string CEL expression. Must return a list of attributes. A maximum of 45 attributes can be selected. Expressions can select different attribute types from `attributes`: `attributes.saml_attributes`, `attributes.iap_attributes`. The following functions are supported: - filter `.filter(, )`: Returns a subset of `` where `` is true for every item. - in ` in `: Returns true if `` contains ``. - selectByName `.selectByName()`: Returns the attribute in `` with the given `` name, otherwise returns empty. - emitAs `.emitAs()`: Sets the `` name field to the given `` for propagation in selected output credentials. - strict `.strict()`: Ignores the `x-goog-iap-attr-` prefix for the provided `` when propagating with the `HEADER` output credential, such as request headers. - append `.append()` OR `.append()`: Appends the provided `` or `` to the end of ``. Example expression: `attributes.saml_attributes.filter(x, x.name in ['test']).append(attributes.iap_attributes.selectByName('exact').emitAs('custom').strict())`",
+"description": "Optional. Raw string CEL expression. Must return a list of attributes. A maximum of 45 attributes can be selected. Expressions can select different attribute types from `attributes`: `attributes.saml_attributes`, `attributes.iap_attributes`. The following functions are supported: - filter `.filter(, )`: Returns a subset of `` where `` is true for every item. - in ` in `: Returns true if `` contains ``. - selectByName `.selectByName()`: Returns the attribute in `` with the given `` name, otherwise returns empty. - emitAs `.emitAs()`: Sets the `` name field to the given `` for propagation in selected output credentials. - strict `.strict()`: Ignores the `x-goog-iap-attr-` prefix for the provided `` when propagating with the `HEADER` output credential, such as request headers. - append `.append()` OR `.append()`: Appends the provided `` or `` to the end of ``. Example expression: `attributes.saml_attributes.filter(x, x.name in ['test']).append(attributes.iap_attributes.selectByName('exact').emitAs('custom').strict())`",
 "type": "string"
 },
 "outputCredentials": {
-"description": "Which output credentials attributes selected by the CEL expression should be propagated in. All attributes will be fully duplicated in each selected output credential.",
+"description": "Optional. Which output credentials attributes selected by the CEL expression should be propagated in. All attributes will be fully duplicated in each selected output credential.",
 "items": {
 "enum": [
 "OUTPUT_CREDENTIALS_UNSPECIFIED",
@@ -936,7 +936,7 @@
 "type": "string"
 },
 "tenantIds": {
-"description": "GCIP tenant ids that are linked to the IAP resource. tenant_ids could be a string beginning with a number character to indicate authenticating with GCIP tenant flow, or in the format of _ to indicate authenticating with GCIP agent flow. If agent flow is used, tenant_ids should only contain one single element, while for tenant flow, tenant_ids can contain multiple elements.",
+"description": "Optional. GCIP tenant ids that are linked to the IAP resource. tenant_ids could be a string beginning with a number character to indicate authenticating with GCIP tenant flow, or in the format of _ to indicate authenticating with GCIP agent flow. If agent flow is used, tenant_ids should only contain one single element, while for tenant flow, tenant_ids can contain multiple elements.",
 "items": {
 "type": "string"
 },
@@ -974,11 +974,11 @@
 "properties": {
 "accessSettings": {
 "$ref": "AccessSettings",
-"description": "Top level wrapper for all access related setting in IAP"
+"description": "Optional. Top level wrapper for all access related setting in IAP"
 },
 "applicationSettings": {
 "$ref": "ApplicationSettings",
-"description": "Top level wrapper for all application related settings in IAP"
+"description": "Optional. Top level wrapper for all application related settings in IAP"
 },
 "name": {
 "description": "Required. The resource name of the IAP protected resource.",
@@ -1087,7 +1087,7 @@
 "type": "string"
 },
 "programmaticClients": {
-"description": "List of client ids allowed to use IAP programmatically.",
+"description": "Optional. List of client ids allowed to use IAP programmatically.",
 "items": {
 "type": "string"
 },
@@ -1167,7 +1167,7 @@
 "id": "ReauthSettings",
 "properties": {
 "maxAge": {
-"description": "Reauth session lifetime, how long before a user has to reauthenticate again.",
+"description": "Optional. Reauth session lifetime, how long before a user has to reauthenticate again.",
 "format": "google-duration",
 "type": "string"
 },
@@ -1197,7 +1197,7 @@ false
 "type": "string"
 },
 "policyType": {
-"description": "How IAP determines the effective policy in cases of hierarchical policies. Policies are merged from higher in the hierarchy to lower in the hierarchy.",
+"description": "Optional. How IAP determines the effective policy in cases of hierarchical policies. Policies are merged from higher in the hierarchy to lower in the hierarchy.",
 "enum": [
 "POLICY_TYPE_UNSPECIFIED",
 "MINIMUM",
@@ -1296,28 +1296,28 @@ false
 "id": "TunnelDestGroup",
 "properties": {
 "cidrs": {
-"description": "Unordered list. List of CIDRs that this group applies to.",
+"description": "Optional. Unordered list. List of CIDRs that this group applies to.",
 "items": {
 "type": "string"
 },
 "type": "array"
 },
 "fqdns": {
-"description": "Unordered list. List of FQDNs that this group applies to.",
+"description": "Optional. Unordered list. List of FQDNs that this group applies to.",
 "items": {
 "type": "string"
 },
 "type": "array"
 },
 "name": {
-"description": "Required. Immutable. Identifier for the TunnelDestGroup. Must be unique within the project and contain only lower case letters (a-z) and dashes (-).",
+"description": "Identifier. Identifier for the TunnelDestGroup. Must be unique within the project and contain only lower case letters (a-z) and dashes (-).",
 "type": "string"
 }
 },
 "type": "object"
 },
 "ValidateIapAttributeExpressionResponse": {
-"description": "API requires a return message, but currently all response strings will fit in the status and public message. In the future, this response can hold AST validation info.",
+"description": "IAP Expression Linter endpoint returns empty response body.",
 "id": "ValidateIapAttributeExpressionResponse",
 "properties": {},
 "type": "object"

googleapiclient/discovery_cache/documents/iap.v1beta1.json

@@ -194,7 +194,7 @@
 }
 }
 },
-"revision": "20240430",
+"revision": "20240513",
 "rootUrl": "https://iap.googleapis.com/",
 "schemas": {
 "Binding": {

googleapiclient/discovery_cache/documents/identitytoolkit.v1.json

@@ -1239,7 +1239,7 @@
 }
 }
 },
-"revision": "20240424",
+"revision": "20240508",
 "rootUrl": "https://identitytoolkit.googleapis.com/",
 "schemas": {
 "GoogleCloudIdentitytoolkitV1Argon2Parameters": {

googleapiclient/discovery_cache/documents/identitytoolkit.v2.json

@@ -1655,7 +1655,7 @@
 }
 }
 },
-"revision": "20240424",
+"revision": "20240508",
 "rootUrl": "https://identitytoolkit.googleapis.com/",
 "schemas": {
 "GoogleCloudIdentitytoolkitAdminV2AllowByDefault": {