google-api-python-client 2.147.0__py2.py3-none-any.whl → 2.149.0__py2.py3-none-any.whl

googleapiclient/discovery_cache/documents/clouddeploy.v1.json

@@ -1159,6 +1159,12 @@
 "parent"
 ],
 "parameters": {
+"overrideDeployPolicy": {
+"description": "Optional. Deploy policies to override. Format is `projects/{project}/locations/{location}/deployPolicies/{deployPolicy}`.",
+"location": "query",
+"repeated": true,
+"type": "string"
+},
 "parent": {
 "description": "Required. The parent collection in which the `Release` is created. The format is `projects/{project_id}/locations/{location_name}/deliveryPipelines/{pipeline_name}`.",
 "location": "path",
@@ -1361,6 +1367,12 @@
 "parent"
 ],
 "parameters": {
+"overrideDeployPolicy": {
+"description": "Optional. Deploy policies to override. Format is `projects/{project}/locations/{location}/deployPolicies/{deployPolicy}`.",
+"location": "query",
+"repeated": true,
+"type": "string"
+},
 "parent": {
 "description": "Required. The parent collection in which the `Rollout` must be created. The format is `projects/{project_id}/locations/{location_name}/deliveryPipelines/{pipeline_name}/releases/{release_name}`.",
 "location": "path",
@@ -1638,6 +1650,218 @@
 }
 }
 },
+"deployPolicies": {
+"methods": {
+"create": {
+"description": "Creates a new DeployPolicy in a given project and location.",
+"flatPath": "v1/projects/{projectsId}/locations/{locationsId}/deployPolicies",
+"httpMethod": "POST",
+"id": "clouddeploy.projects.locations.deployPolicies.create",
+"parameterOrder": [
+"parent"
+],
+"parameters": {
+"deployPolicyId": {
+"description": "Required. ID of the `DeployPolicy`.",
+"location": "query",
+"type": "string"
+},
+"parent": {
+"description": "Required. The parent collection in which the `DeployPolicy` must be created. The format is `projects/{project_id}/locations/{location_name}`.",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+$",
+"required": true,
+"type": "string"
+},
+"requestId": {
+"description": "Optional. A request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server knows to ignore the request if it has already been completed. The server guarantees that for at least 60 minutes after the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported (00000000-0000-0000-0000-000000000000).",
+"location": "query",
+"type": "string"
+},
+"validateOnly": {
+"description": "Optional. If set to true, the request is validated and the user is provided with an expected result, but no actual change is made.",
+"location": "query",
+"type": "boolean"
+}
+},
+"path": "v1/{+parent}/deployPolicies",
+"request": {
+"$ref": "DeployPolicy"
+},
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+},
+"delete": {
+"description": "Deletes a single DeployPolicy.",
+"flatPath": "v1/projects/{projectsId}/locations/{locationsId}/deployPolicies/{deployPoliciesId}",
+"httpMethod": "DELETE",
+"id": "clouddeploy.projects.locations.deployPolicies.delete",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"allowMissing": {
+"description": "Optional. If set to true, then deleting an already deleted or non-existing `DeployPolicy` will succeed.",
+"location": "query",
+"type": "boolean"
+},
+"etag": {
+"description": "Optional. This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.",
+"location": "query",
+"type": "string"
+},
+"name": {
+"description": "Required. The name of the `DeployPolicy` to delete. The format is `projects/{project_id}/locations/{location_name}/deployPolicies/{deploy_policy_name}`.",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+/deployPolicies/[^/]+$",
+"required": true,
+"type": "string"
+},
+"requestId": {
+"description": "Optional. A request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server knows to ignore the request if it has already been completed. The server guarantees that for at least 60 minutes after the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported (00000000-0000-0000-0000-000000000000).",
+"location": "query",
+"type": "string"
+},
+"validateOnly": {
+"description": "Optional. If set, validate the request and preview the review, but do not actually post it.",
+"location": "query",
+"type": "boolean"
+}
+},
+"path": "v1/{+name}",
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+},
+"get": {
+"description": "Gets details of a single DeployPolicy.",
+"flatPath": "v1/projects/{projectsId}/locations/{locationsId}/deployPolicies/{deployPoliciesId}",
+"httpMethod": "GET",
+"id": "clouddeploy.projects.locations.deployPolicies.get",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "Required. Name of the `DeployPolicy`. Format must be `projects/{project_id}/locations/{location_name}/deployPolicies/{deploy_policy_name}`.",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+/deployPolicies/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1/{+name}",
+"response": {
+"$ref": "DeployPolicy"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+},
+"list": {
+"description": "Lists DeployPolicies in a given project and location.",
+"flatPath": "v1/projects/{projectsId}/locations/{locationsId}/deployPolicies",
+"httpMethod": "GET",
+"id": "clouddeploy.projects.locations.deployPolicies.list",
+"parameterOrder": [
+"parent"
+],
+"parameters": {
+"filter": {
+"description": "Filter deploy policies to be returned. See https://google.aip.dev/160 for more details. All fields can be used in the filter.",
+"location": "query",
+"type": "string"
+},
+"orderBy": {
+"description": "Field to sort by. See https://google.aip.dev/132#ordering for more details.",
+"location": "query",
+"type": "string"
+},
+"pageSize": {
+"description": "The maximum number of deploy policies to return. The service may return fewer than this value. If unspecified, at most 50 deploy policies will be returned. The maximum value is 1000; values above 1000 will be set to 1000.",
+"format": "int32",
+"location": "query",
+"type": "integer"
+},
+"pageToken": {
+"description": "A page token, received from a previous `ListDeployPolicies` call. Provide this to retrieve the subsequent page. When paginating, all other provided parameters match the call that provided the page token.",
+"location": "query",
+"type": "string"
+},
+"parent": {
+"description": "Required. The parent, which owns this collection of deploy policies. Format must be `projects/{project_id}/locations/{location_name}`.",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1/{+parent}/deployPolicies",
+"response": {
+"$ref": "ListDeployPoliciesResponse"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+},
+"patch": {
+"description": "Updates the parameters of a single DeployPolicy.",
+"flatPath": "v1/projects/{projectsId}/locations/{locationsId}/deployPolicies/{deployPoliciesId}",
+"httpMethod": "PATCH",
+"id": "clouddeploy.projects.locations.deployPolicies.patch",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"allowMissing": {
+"description": "Optional. If set to true, updating a `DeployPolicy` that does not exist will result in the creation of a new `DeployPolicy`.",
+"location": "query",
+"type": "boolean"
+},
+"name": {
+"description": "Output only. Name of the `DeployPolicy`. Format is `projects/{project}/locations/{location}/deployPolicies/{deployPolicy}`. The `deployPolicy` component must match `[a-z]([a-z0-9-]{0,61}[a-z0-9])?`",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+/deployPolicies/[^/]+$",
+"required": true,
+"type": "string"
+},
+"requestId": {
+"description": "Optional. A request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server knows to ignore the request if it has already been completed. The server guarantees that for at least 60 minutes after the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported (00000000-0000-0000-0000-000000000000).",
+"location": "query",
+"type": "string"
+},
+"updateMask": {
+"description": "Required. Field mask is used to specify the fields to be overwritten by the update in the `DeployPolicy` resource. The fields specified in the update_mask are relative to the resource, not the full request. A field will be overwritten if it's in the mask. If the user doesn't provide a mask then all fields are overwritten.",
+"format": "google-fieldmask",
+"location": "query",
+"type": "string"
+},
+"validateOnly": {
+"description": "Optional. If set to true, the request is validated and the user is provided with an expected result, but no actual change is made.",
+"location": "query",
+"type": "boolean"
+}
+},
+"path": "v1/{+name}",
+"request": {
+"$ref": "DeployPolicy"
+},
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+}
+}
+},
 "operations": {
 "methods": {
 "cancel": {
@@ -2065,7 +2289,7 @@
 }
 }
 },
-"revision": "20240809",
+"revision": "20240929",
 "rootUrl": "https://clouddeploy.googleapis.com/",
 "schemas": {
 "AbandonReleaseRequest": {
@@ -2135,6 +2359,13 @@
 "description": "The request object used by `AdvanceRollout`.",
 "id": "AdvanceRolloutRequest",
 "properties": {
+"overrideDeployPolicy": {
+"description": "Optional. Deploy policies to override. Format is `projects/{project}/locations/{location}/deployPolicies/{deployPolicy}`.",
+"items": {
+"type": "string"
+},
+"type": "array"
+},
 "phaseId": {
 "description": "Required. The phase ID to advance the `Rollout` to.",
 "type": "string"
@@ -2194,6 +2425,13 @@
 "approved": {
 "description": "Required. True = approve; false = reject",
 "type": "boolean"
+},
+"overrideDeployPolicy": {
+"description": "Optional. Deploy policies to override. Format is `projects/{project}/locations/{location}/deployPolicies/{deployPolicy}`.",
+"items": {
+"type": "string"
+},
+"type": "array"
 }
 },
 "type": "object"
@@ -2348,6 +2586,7 @@
 "TYPE_RESTRICTION_VIOLATED",
 "TYPE_RESOURCE_DELETED",
 "TYPE_ROLLOUT_UPDATE",
+"TYPE_DEPLOY_POLICY_EVALUATION",
 "TYPE_RENDER_STATUES_CHANGE"
 ],
 "enumDeprecated": [
@@ -2358,6 +2597,7 @@ false,
 false,
 false,
 false,
+false,
 true
 ],
 "enumDescriptions": [
@@ -2368,6 +2608,7 @@ true
 "Restriction check failed.",
 "Resource deleted.",
 "Rollout updated.",
+"Deploy Policy evaluation.",
 "Deprecated: This field is never used. Use release_render log type instead."
 ],
 "type": "string"
@@ -2488,6 +2729,11 @@ true
 "readOnly": true,
 "type": "string"
 },
+"policyViolation": {
+"$ref": "PolicyViolation",
+"description": "Output only. Contains information about what policies prevented the `AutomationRun` from proceeding.",
+"readOnly": true
+},
 "promoteReleaseOperation": {
 "$ref": "PromoteReleaseOperation",
 "description": "Output only. Promotes a release to a specified 'Target'.",
@@ -2594,6 +2840,7 @@ true
 "TYPE_RESTRICTION_VIOLATED",
 "TYPE_RESOURCE_DELETED",
 "TYPE_ROLLOUT_UPDATE",
+"TYPE_DEPLOY_POLICY_EVALUATION",
 "TYPE_RENDER_STATUES_CHANGE"
 ],
 "enumDeprecated": [
@@ -2604,6 +2851,7 @@ false,
 false,
 false,
 false,
+false,
 true
 ],
 "enumDescriptions": [
@@ -2614,6 +2862,7 @@ true
 "Restriction check failed.",
 "Resource deleted.",
 "Rollout updated.",
+"Deploy Policy evaluation.",
 "Deprecated: This field is never used. Use release_render log type instead."
 ],
 "type": "string"
@@ -2725,7 +2974,15 @@ true
 "CancelRolloutRequest": {
 "description": "The request object used by `CancelRollout`.",
 "id": "CancelRolloutRequest",
-"properties": {},
+"properties": {
+"overrideDeployPolicy": {
+"description": "Optional. Deploy policies to override. Format is `projects/{project}/locations/{location}/deployPolicies/{deployPolicy}`.",
+"items": {
+"type": "string"
+},
+"type": "array"
+}
+},
 "type": "object"
 },
 "CancelRolloutResponse": {
@@ -3046,6 +3303,7 @@ true
 "TYPE_RESTRICTION_VIOLATED",
 "TYPE_RESOURCE_DELETED",
 "TYPE_ROLLOUT_UPDATE",
+"TYPE_DEPLOY_POLICY_EVALUATION",
 "TYPE_RENDER_STATUES_CHANGE"
 ],
 "enumDeprecated": [
@@ -3056,6 +3314,7 @@ false,
 false,
 false,
 false,
+false,
 true
 ],
 "enumDescriptions": [
@@ -3066,6 +3325,7 @@ true
 "Restriction check failed.",
 "Resource deleted.",
 "Rollout updated.",
+"Deploy Policy evaluation.",
 "Deprecated: This field is never used. Use release_render log type instead."
 ],
 "type": "string"
@@ -3173,6 +3433,24 @@ true
 },
 "type": "object"
 },
+"DeliveryPipelineAttribute": {
+"description": "Contains criteria for selecting DeliveryPipelines.",
+"id": "DeliveryPipelineAttribute",
+"properties": {
+"id": {
+"description": "ID of the `DeliveryPipeline`. The value of this field could be one of the following: * The last segment of a pipeline name * \"*\", all delivery pipelines in a location",
+"type": "string"
+},
+"labels": {
+"additionalProperties": {
+"type": "string"
+},
+"description": "DeliveryPipeline labels.",
+"type": "object"
+}
+},
+"type": "object"
+},
 "DeliveryPipelineNotificationEvent": {
 "description": "Payload proto for \"clouddeploy.googleapis.com/deliverypipeline_notification\" Platform Log event that describes the failure to send delivery pipeline status change Pub/Sub notification.",
 "id": "DeliveryPipelineNotificationEvent",
@@ -3199,6 +3477,7 @@ true
 "TYPE_RESTRICTION_VIOLATED",
 "TYPE_RESOURCE_DELETED",
 "TYPE_ROLLOUT_UPDATE",
+"TYPE_DEPLOY_POLICY_EVALUATION",
 "TYPE_RENDER_STATUES_CHANGE"
 ],
 "enumDeprecated": [
@@ -3209,6 +3488,7 @@ false,
 false,
 false,
 false,
+false,
 true
 ],
 "enumDescriptions": [
@@ -3219,6 +3499,7 @@ true
 "Restriction check failed.",
 "Resource deleted.",
 "Rollout updated.",
+"Deploy Policy evaluation.",
 "Deprecated: This field is never used. Use release_render log type instead."
 ],
 "type": "string"
@@ -3322,25 +3603,186 @@ true
 "readOnly": true
 }
 },
-"type": "object"
+"type": "object"
+},
+"DeployParameters": {
+"description": "DeployParameters contains deploy parameters information.",
+"id": "DeployParameters",
+"properties": {
+"matchTargetLabels": {
+"additionalProperties": {
+"type": "string"
+},
+"description": "Optional. Deploy parameters are applied to targets with match labels. If unspecified, deploy parameters are applied to all targets (including child targets of a multi-target).",
+"type": "object"
+},
+"values": {
+"additionalProperties": {
+"type": "string"
+},
+"description": "Required. Values are deploy parameters in key-value pairs.",
+"type": "object"
+}
+},
+"type": "object"
+},
+"DeployPolicy": {
+"description": "A `DeployPolicy` resource in the Cloud Deploy API. A `DeployPolicy` inhibits manual or automation-driven actions within a Delivery Pipeline or Target.",
+"id": "DeployPolicy",
+"properties": {
+"annotations": {
+"additionalProperties": {
+"type": "string"
+},
+"description": "User annotations. These attributes can only be set and used by the user, and not by Cloud Deploy. Annotations must meet the following constraints: * Annotations are key/value pairs. * Valid annotation keys have two segments: an optional prefix and name, separated by a slash (`/`). * The name segment is required and must be 63 characters or less, beginning and ending with an alphanumeric character (`[a-z0-9A-Z]`) with dashes (`-`), underscores (`_`), dots (`.`), and alphanumerics between. * The prefix is optional. If specified, the prefix must be a DNS subdomain: a series of DNS labels separated by dots(`.`), not longer than 253 characters in total, followed by a slash (`/`). See https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/#syntax-and-character-set for more details.",
+"type": "object"
+},
+"createTime": {
+"description": "Output only. Time at which the deploy policy was created.",
+"format": "google-datetime",
+"readOnly": true,
+"type": "string"
+},
+"description": {
+"description": "Description of the `DeployPolicy`. Max length is 255 characters.",
+"type": "string"
+},
+"etag": {
+"description": "The weak etag of the `Automation` resource. This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.",
+"type": "string"
+},
+"labels": {
+"additionalProperties": {
+"type": "string"
+},
+"description": "Labels are attributes that can be set and used by both the user and by Cloud Deploy. Labels must meet the following constraints: * Keys and values can contain only lowercase letters, numeric characters, underscores, and dashes. * All characters must use UTF-8 encoding, and international characters are allowed. * Keys must start with a lowercase letter or international character. * Each resource is limited to a maximum of 64 labels. Both keys and values are additionally constrained to be <= 128 bytes.",
+"type": "object"
+},
+"name": {
+"description": "Output only. Name of the `DeployPolicy`. Format is `projects/{project}/locations/{location}/deployPolicies/{deployPolicy}`. The `deployPolicy` component must match `[a-z]([a-z0-9-]{0,61}[a-z0-9])?`",
+"readOnly": true,
+"type": "string"
+},
+"rules": {
+"description": "Required. Rules to apply. At least one rule must be present.",
+"items": {
+"$ref": "PolicyRule"
+},
+"type": "array"
+},
+"selectors": {
+"description": "Required. Selected resources to which the policy will be applied. At least one selector is required. If one selector matches the resource the policy applies. For example, if there are two selectors and the action being attempted matches one of them, the policy will apply to that action.",
+"items": {
+"$ref": "DeployPolicyResourceSelector"
+},
+"type": "array"
+},
+"suspended": {
+"description": "When suspended, the policy will not prevent actions from occurring, even if the action violates the policy.",
+"type": "boolean"
+},
+"uid": {
+"description": "Output only. Unique identifier of the `DeployPolicy`.",
+"readOnly": true,
+"type": "string"
+},
+"updateTime": {
+"description": "Output only. Most recent time at which the deploy policy was updated.",
+"format": "google-datetime",
+"readOnly": true,
+"type": "string"
+}
+},
+"type": "object"
+},
+"DeployPolicyEvaluationEvent": {
+"description": "Payload proto for \"clouddeploy.googleapis.com/deploypolicy_evaluation\" Platform Log event that describes the deploy policy evaluation event.",
+"id": "DeployPolicyEvaluationEvent",
+"properties": {
+"allowed": {
+"description": "Whether the request is allowed. Allowed is set as true if: (1) the request complies with the policy; or (2) the request doesn't comply with the policy but the policy was overridden; or (3) the request doesn't comply with the policy but the policy was suspended",
+"type": "boolean"
+},
+"deliveryPipeline": {
+"description": "The name of the `Delivery Pipeline`.",
+"type": "string"
+},
+"deployPolicy": {
+"description": "The name of the `DeployPolicy`.",
+"type": "string"
+},
+"deployPolicyUid": {
+"description": "Unique identifier of the `DeployPolicy`.",
+"type": "string"
+},
+"invoker": {
+"description": "What invoked the action (e.g. a user or automation).",
+"enum": [
+"INVOKER_UNSPECIFIED",
+"USER",
+"DEPLOY_AUTOMATION"
+],
+"enumDescriptions": [
+"Unspecified.",
+"The action is user-driven. For example, creating a rollout manually via a gcloud create command.",
+"Automated action by Cloud Deploy."
+],
+"type": "string"
+},
+"message": {
+"description": "Debug message for when a deploy policy event occurs.",
+"type": "string"
+},
+"overrides": {
+"description": "Things that could have overridden the policy verdict. Overrides together with verdict decide whether the request is allowed.",
+"items": {
+"enum": [
+"POLICY_VERDICT_OVERRIDE_UNSPECIFIED",
+"POLICY_OVERRIDDEN",
+"POLICY_SUSPENDED"
+],
+"enumDescriptions": [
+"This should never happen.",
+"The policy was overridden.",
+"The policy was suspended."
+],
+"type": "string"
+},
+"type": "array"
+},
+"pipelineUid": {
+"description": "Unique identifier of the `Delivery Pipeline`.",
+"type": "string"
+},
+"rule": {
+"description": "Rule id.",
+"type": "string"
 },
-"DeployParameters": {
-"description": "DeployParameters contains deploy parameters information.",
-"id": "DeployParameters",
-"properties": {
-"matchTargetLabels": {
-"additionalProperties": {
+"ruleType": {
+"description": "Rule type (e.g. Restrict Rollouts).",
 "type": "string"
 },
-"description": "Optional. Deploy parameters are applied to targets with match labels. If unspecified, deploy parameters are applied to all targets (including child targets of a multi-target).",
-"type": "object"
+"target": {
+"description": "The name of the `Target`. This is an optional field, as a `Target` may not always be applicable to a policy.",
+"type": "string"
 },
-"values": {
-"additionalProperties": {
+"targetUid": {
+"description": "Unique identifier of the `Target`. This is an optional field, as a `Target` may not always be applicable to a policy.",
 "type": "string"
 },
-"description": "Required. Values are deploy parameters in key-value pairs.",
-"type": "object"
+"verdict": {
+"description": "The policy verdict of the request.",
+"enum": [
+"POLICY_VERDICT_UNSPECIFIED",
+"ALLOWED_BY_POLICY",
+"DENIED_BY_POLICY"
+],
+"enumDescriptions": [
+"This should never happen.",
+"Allowed by policy. This enum value is not currently used but may be used in the future. Currently logs are only generated when a request is denied by policy.",
+"Denied by policy."
+],
+"type": "string"
 }
 },
 "type": "object"
@@ -3371,6 +3813,7 @@ true
 "TYPE_RESTRICTION_VIOLATED",
 "TYPE_RESOURCE_DELETED",
 "TYPE_ROLLOUT_UPDATE",
+"TYPE_DEPLOY_POLICY_EVALUATION",
 "TYPE_RENDER_STATUES_CHANGE"
 ],
 "enumDeprecated": [
@@ -3381,6 +3824,7 @@ false,
 false,
 false,
 false,
+false,
 true
 ],
 "enumDescriptions": [
@@ -3391,6 +3835,7 @@ true
 "Restriction check failed.",
 "Resource deleted.",
 "Rollout updated.",
+"Deploy Policy evaluation.",
 "Deprecated: This field is never used. Use release_render log type instead."
 ],
 "type": "string"
@@ -3398,6 +3843,21 @@ true
 },
 "type": "object"
 },
+"DeployPolicyResourceSelector": {
+"description": "Contains information on the resources to select for a deploy policy. Attributes provided must all match the resource in order for policy restrictions to apply. For example, if delivery pipelines attributes given are an id \"prod\" and labels \"foo: bar\", a delivery pipeline resource must match both that id and have that label in order to be subject to the policy.",
+"id": "DeployPolicyResourceSelector",
+"properties": {
+"deliveryPipeline": {
+"$ref": "DeliveryPipelineAttribute",
+"description": "Optional. Contains attributes about a delivery pipeline."
+},
+"target": {
+"$ref": "TargetAttribute",
+"description": "Optional. Contains attributes about a target."
+}
+},
+"type": "object"
+},
 "DeploymentJobs": {
 "description": "Deployment job composition.",
 "id": "DeploymentJobs",
@@ -3573,6 +4033,13 @@ true
 "description": "Required. The job ID for the Job to ignore.",
 "type": "string"
 },
+"overrideDeployPolicy": {
+"description": "Optional. Deploy policies to override. Format is `projects/{project}/locations/{location}/deployPolicies/{deployPolicy}`.",
+"items": {
+"type": "string"
+},
+"type": "array"
+},
 "phaseId": {
 "description": "Required. The phase ID the Job to ignore belongs to.",
 "type": "string"
@@ -3811,6 +4278,7 @@ true
 "TYPE_RESTRICTION_VIOLATED",
 "TYPE_RESOURCE_DELETED",
 "TYPE_ROLLOUT_UPDATE",
+"TYPE_DEPLOY_POLICY_EVALUATION",
 "TYPE_RENDER_STATUES_CHANGE"
 ],
 "enumDeprecated": [
@@ -3821,6 +4289,7 @@ false,
 false,
 false,
 false,
+false,
 true
 ],
 "enumDescriptions": [
@@ -3831,6 +4300,7 @@ true
 "Restriction check failed.",
 "Resource deleted.",
 "Rollout updated.",
+"Deploy Policy evaluation.",
 "Deprecated: This field is never used. Use release_render log type instead."
 ],
 "type": "string"
@@ -3953,6 +4423,31 @@ true
 },
 "type": "object"
 },
+"ListDeployPoliciesResponse": {
+"description": "The response object from `ListDeployPolicies`.",
+"id": "ListDeployPoliciesResponse",
+"properties": {
+"deployPolicies": {
+"description": "The `DeployPolicy` objects.",
+"items": {
+"$ref": "DeployPolicy"
+},
+"type": "array"
+},
+"nextPageToken": {
+"description": "A token, which can be sent as `page_token` to retrieve the next page. If this field is omitted, there are no subsequent pages.",
+"type": "string"
+},
+"unreachable": {
+"description": "Locations that could not be reached.",
+"items": {
+"type": "string"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
 "ListJobRunsResponse": {
 "description": "ListJobRunsResponse is the response object returned by `ListJobRuns`.",
 "id": "ListJobRunsResponse",
@@ -4159,6 +4654,29 @@ true
 },
 "type": "object"
 },
+"OneTimeWindow": {
+"description": "One-time window within which actions are restricted. For example, blocking actions over New Year's Eve from December 31st at 5pm to January 1st at 9am.",
+"id": "OneTimeWindow",
+"properties": {
+"endDate": {
+"$ref": "Date",
+"description": "Required. End date."
+},
+"endTime": {
+"$ref": "TimeOfDay",
+"description": "Required. End time (exclusive). You may use 24:00 for the end of the day."
+},
+"startDate": {
+"$ref": "Date",
+"description": "Required. Start date."
+},
+"startTime": {
+"$ref": "TimeOfDay",
+"description": "Required. Start time (inclusive). Use 00:00 for the beginning of the day."
+}
+},
+"type": "object"
+},
 "Operation": {
 "description": "This resource represents a long-running operation that is the result of a network API call.",
 "id": "Operation",
@@ -4411,6 +4929,50 @@ true
 },
 "type": "object"
 },
+"PolicyRule": {
+"description": "Deploy Policy rule.",
+"id": "PolicyRule",
+"properties": {
+"rolloutRestriction": {
+"$ref": "RolloutRestriction",
+"description": "Rollout restrictions."
+}
+},
+"type": "object"
+},
+"PolicyViolation": {
+"description": "Returned from an action if one or more policies were violated, and therefore the action was prevented. Contains information about what policies were violated and why.",
+"id": "PolicyViolation",
+"properties": {
+"policyViolationDetails": {
+"description": "Policy violation details.",
+"items": {
+"$ref": "PolicyViolationDetails"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
+"PolicyViolationDetails": {
+"description": "Policy violation details.",
+"id": "PolicyViolationDetails",
+"properties": {
+"failureMessage": {
+"description": "User readable message about why the request violated a policy. This is not intended for machine parsing.",
+"type": "string"
+},
+"policy": {
+"description": "Name of the policy that was violated. Policy resource will be in the format of `projects/{project}/locations/{location}/policies/{policy}`.",
+"type": "string"
+},
+"ruleId": {
+"description": "Id of the rule that triggered the policy violation.",
+"type": "string"
+}
+},
+"type": "object"
+},
 "Postdeploy": {
 "description": "Postdeploy contains the postdeploy job configuration information.",
 "id": "Postdeploy",
@@ -4808,6 +5370,7 @@ true
 "TYPE_RESTRICTION_VIOLATED",
 "TYPE_RESOURCE_DELETED",
 "TYPE_ROLLOUT_UPDATE",
+"TYPE_DEPLOY_POLICY_EVALUATION",
 "TYPE_RENDER_STATUES_CHANGE"
 ],
 "enumDeprecated": [
@@ -4818,6 +5381,7 @@ false,
 false,
 false,
 false,
+false,
 true
 ],
 "enumDescriptions": [
@@ -4828,6 +5392,7 @@ true
 "Restriction check failed.",
 "Resource deleted.",
 "Rollout updated.",
+"Deploy Policy evaluation.",
 "Deprecated: This field is never used. Use release_render log type instead."
 ],
 "type": "string"
@@ -4888,6 +5453,7 @@ true
 "TYPE_RESTRICTION_VIOLATED",
 "TYPE_RESOURCE_DELETED",
 "TYPE_ROLLOUT_UPDATE",
+"TYPE_DEPLOY_POLICY_EVALUATION",
 "TYPE_RENDER_STATUES_CHANGE"
 ],
 "enumDeprecated": [
@@ -4898,6 +5464,7 @@ false,
 false,
 false,
 false,
+false,
 true
 ],
 "enumDescriptions": [
@@ -4908,6 +5475,7 @@ true
 "Restriction check failed.",
 "Resource deleted.",
 "Rollout updated.",
+"Deploy Policy evaluation.",
 "Deprecated: This field is never used. Use release_render log type instead."
 ],
 "type": "string"
@@ -4949,10 +5517,31 @@ true
 },
 "type": "object"
 },
+"RepairPhaseConfig": {
+"description": "Configuration of the repair phase.",
+"id": "RepairPhaseConfig",
+"properties": {
+"retry": {
+"$ref": "Retry",
+"description": "Optional. Retries a failed job."
+},
+"rollback": {
+"$ref": "Rollback",
+"description": "Optional. Rolls back a `Rollout`."
+}
+},
+"type": "object"
+},
 "RepairRolloutOperation": {
 "description": "Contains the information for an automated `repair rollout` operation.",
 "id": "RepairRolloutOperation",
 "properties": {
+"currentRepairPhaseIndex": {
+"description": "Output only. The index of the current repair action in the repair sequence.",
+"format": "int64",
+"readOnly": true,
+"type": "string"
+},
 "jobId": {
 "description": "Output only. The job ID for the Job to repair.",
 "readOnly": true,
@@ -4998,6 +5587,51 @@ true
 "type": "string"
 },
 "type": "array"
+},
+"phases": {
+"description": "Optional. Phases within which jobs are subject to automatic repair actions on failure. Proceeds only after phase name matched any one in the list, or for all phases if unspecified. This value must consist of lower-case letters, numbers, and hyphens, start with a letter and end with a letter or a number, and have a max length of 63 characters. In other words, it must match the following regex: `^[a-z]([a-z0-9-]{0,61}[a-z0-9])?$`.",
+"items": {
+"type": "string"
+},
+"type": "array"
+},
+"repairPhases": {
+"description": "Required. Defines the types of automatic repair phases for failed jobs.",
+"items": {
+"$ref": "RepairPhaseConfig"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
+"Retry": {
+"description": "Retries the failed job.",
+"id": "Retry",
+"properties": {
+"attempts": {
+"description": "Required. Total number of retries. Retry is skipped if set to 0; The minimum value is 1, and the maximum value is 10.",
+"format": "int64",
+"type": "string"
+},
+"backoffMode": {
+"description": "Optional. The pattern of how wait time will be increased. Default is linear. Backoff mode will be ignored if `wait` is 0.",
+"enum": [
+"BACKOFF_MODE_UNSPECIFIED",
+"BACKOFF_MODE_LINEAR",
+"BACKOFF_MODE_EXPONENTIAL"
+],
+"enumDescriptions": [
+"No WaitMode is specified.",
+"Increases the wait time linearly.",
+"Increases the wait time exponentially."
+],
+"type": "string"
+},
+"wait": {
+"description": "Optional. How long to wait for the first retry. Default is 0, and the maximum value is 14d.",
+"format": "google-duration",
+"type": "string"
 }
 },
 "type": "object"
@@ -5057,6 +5691,13 @@ true
 "description": "Required. The job ID for the Job to retry.",
 "type": "string"
 },
+"overrideDeployPolicy": {
+"description": "Optional. Deploy policies to override. Format is `projects/{project}/locations/{location}/deployPolicies/{deployPolicy}`.",
+"items": {
+"type": "string"
+},
+"type": "array"
+},
 "phaseId": {
 "description": "Required. The phase ID the Job to retry belongs to.",
 "type": "string"
@@ -5106,6 +5747,21 @@ true
 },
 "type": "object"
 },
+"Rollback": {
+"description": "Rolls back a `Rollout`.",
+"id": "Rollback",
+"properties": {
+"destinationPhase": {
+"description": "Optional. The starting phase ID for the `Rollout`. If unspecified, the `Rollout` will start in the stable phase.",
+"type": "string"
+},
+"disableRollbackIfRolloutPending": {
+"description": "Optional. If pending rollout exists on the target, the rollback operation will be aborted.",
+"type": "boolean"
+}
+},
+"type": "object"
+},
 "RollbackAttempt": {
 "description": "RollbackAttempt represents an action of rolling back a Cloud Deploy 'Target'.",
 "id": "RollbackAttempt",
@@ -5115,6 +5771,11 @@ true
 "readOnly": true,
 "type": "string"
 },
+"disableRollbackIfRolloutPending": {
+"description": "Output only. If active rollout exists on the target, abort this rollback.",
+"readOnly": true,
+"type": "boolean"
+},
 "rolloutId": {
 "description": "Output only. ID of the rollback `Rollout` to create.",
 "readOnly": true,
@@ -5170,6 +5831,13 @@ true
 "description": "The request object for `RollbackTarget`.",
 "id": "RollbackTargetRequest",
 "properties": {
+"overrideDeployPolicy": {
+"description": "Optional. Deploy policies to override. Format is `projects/{project}/locations/{location}/deployPolicies/{deploy_policy}`.",
+"items": {
+"type": "string"
+},
+"type": "array"
+},
 "releaseId": {
 "description": "Optional. ID of the `Release` to roll back to. If this isn't specified, the previous successful `Rollout` to the specified target will be used to determine the `Release`.",
 "type": "string"
@@ -5212,6 +5880,11 @@ true
 "description": "A `Rollout` resource in the Cloud Deploy API. A `Rollout` contains information around a specific deployment to a `Target`.",
 "id": "Rollout",
 "properties": {
+"activeRepairAutomationRun": {
+"description": "Output only. The AutomationRun actively repairing the rollout.",
+"readOnly": true,
+"type": "string"
+},
 "annotations": {
 "additionalProperties": {
 "type": "string"
@@ -5440,6 +6113,7 @@ true
 "TYPE_RESTRICTION_VIOLATED",
 "TYPE_RESOURCE_DELETED",
 "TYPE_ROLLOUT_UPDATE",
+"TYPE_DEPLOY_POLICY_EVALUATION",
 "TYPE_RENDER_STATUES_CHANGE"
 ],
 "enumDeprecated": [
@@ -5450,6 +6124,7 @@ false,
 false,
 false,
 false,
+false,
 true
 ],
 "enumDescriptions": [
@@ -5460,6 +6135,7 @@ true
 "Restriction check failed.",
 "Resource deleted.",
 "Rollout updated.",
+"Deploy Policy evaluation.",
 "Deprecated: This field is never used. Use release_render log type instead."
 ],
 "type": "string"
@@ -5467,6 +6143,67 @@ true
 },
 "type": "object"
 },
+"RolloutRestriction": {
+"description": "Rollout restrictions.",
+"id": "RolloutRestriction",
+"properties": {
+"actions": {
+"description": "Optional. Rollout actions to be restricted as part of the policy. If left empty, all actions will be restricted.",
+"items": {
+"enum": [
+"ROLLOUT_ACTIONS_UNSPECIFIED",
+"ADVANCE",
+"APPROVE",
+"CANCEL",
+"CREATE",
+"IGNORE_JOB",
+"RETRY_JOB",
+"ROLLBACK",
+"TERMINATE_JOBRUN"
+],
+"enumDescriptions": [
+"Unspecified.",
+"Advance the rollout to the next phase.",
+"Approve the rollout.",
+"Cancel the rollout.",
+"Create a rollout.",
+"Ignore a job result on the rollout.",
+"Retry a job for a rollout.",
+"Rollback a rollout.",
+"Terminate a jobrun."
+],
+"type": "string"
+},
+"type": "array"
+},
+"id": {
+"description": "Required. Restriction rule ID. Required and must be unique within a DeployPolicy. The format is `[a-z]([a-z0-9-]{0,61}[a-z0-9])?`.",
+"type": "string"
+},
+"invokers": {
+"description": "Optional. What invoked the action. If left empty, all invoker types will be restricted.",
+"items": {
+"enum": [
+"INVOKER_UNSPECIFIED",
+"USER",
+"DEPLOY_AUTOMATION"
+],
+"enumDescriptions": [
+"Unspecified.",
+"The action is user-driven. For example, creating a rollout manually via a gcloud create command.",
+"Automated action by Cloud Deploy."
+],
+"type": "string"
+},
+"type": "array"
+},
+"timeWindows": {
+"$ref": "TimeWindows",
+"description": "Required. Time window within which actions are restricted."
+}
+},
+"type": "object"
+},
 "RolloutUpdateEvent": {
 "description": "Payload proto for \"clouddeploy.googleapis.com/rollout_update\" Platform Log event that describes the rollout update event.",
 "id": "RolloutUpdateEvent",
@@ -5541,6 +6278,7 @@ true
 "TYPE_RESTRICTION_VIOLATED",
 "TYPE_RESOURCE_DELETED",
 "TYPE_ROLLOUT_UPDATE",
+"TYPE_DEPLOY_POLICY_EVALUATION",
 "TYPE_RENDER_STATUES_CHANGE"
 ],
 "enumDeprecated": [
@@ -5551,6 +6289,7 @@ false,
 false,
 false,
 false,
+false,
 true
 ],
 "enumDescriptions": [
@@ -5561,6 +6300,7 @@ true
 "Restriction check failed.",
 "Resource deleted.",
 "Rollout updated.",
+"Deploy Policy evaluation.",
 "Deprecated: This field is never used. Use release_render log type instead."
 ],
 "type": "string"
@@ -5991,7 +6731,7 @@ true
 "type": "object"
 },
 "TargetAttribute": {
-"description": "Contains criteria for selecting Targets.",
+"description": "Contains criteria for selecting Targets. This could be used to select targets for a Deploy Policy or for an Automation.",
 "id": "TargetAttribute",
 "properties": {
 "id": {
@@ -6030,6 +6770,7 @@ true
 "TYPE_RESTRICTION_VIOLATED",
 "TYPE_RESOURCE_DELETED",
 "TYPE_ROLLOUT_UPDATE",
+"TYPE_DEPLOY_POLICY_EVALUATION",
 "TYPE_RENDER_STATUES_CHANGE"
 ],
 "enumDeprecated": [
@@ -6040,6 +6781,7 @@ false,
 false,
 false,
 false,
+false,
 true
 ],
 "enumDescriptions": [
@@ -6050,6 +6792,7 @@ true
 "Restriction check failed.",
 "Resource deleted.",
 "Rollout updated.",
+"Deploy Policy evaluation.",
 "Deprecated: This field is never used. Use release_render log type instead."
 ],
 "type": "string"
@@ -6162,7 +6905,15 @@ true
 "TerminateJobRunRequest": {
 "description": "The request object used by `TerminateJobRun`.",
 "id": "TerminateJobRunRequest",
-"properties": {},
+"properties": {
+"overrideDeployPolicy": {
+"description": "Optional. Deploy policies to override. Format is `projects/{project}/locations/{location}/deployPolicies/{deployPolicy}`.",
+"items": {
+"type": "string"
+},
+"type": "array"
+}
+},
 "type": "object"
 },
 "TerminateJobRunResponse": {
@@ -6199,6 +6950,58 @@ true
 },
 "type": "object"
 },
+"TimeOfDay": {
+"description": "Represents a time of day. The date and time zone are either not significant or are specified elsewhere. An API may choose to allow leap seconds. Related types are google.type.Date and `google.protobuf.Timestamp`.",
+"id": "TimeOfDay",
+"properties": {
+"hours": {
+"description": "Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value \"24:00:00\" for scenarios like business closing time.",
+"format": "int32",
+"type": "integer"
+},
+"minutes": {
+"description": "Minutes of hour of day. Must be from 0 to 59.",
+"format": "int32",
+"type": "integer"
+},
+"nanos": {
+"description": "Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.",
+"format": "int32",
+"type": "integer"
+},
+"seconds": {
+"description": "Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds.",
+"format": "int32",
+"type": "integer"
+}
+},
+"type": "object"
+},
+"TimeWindows": {
+"description": "Time windows within which actions are restricted. See the [documentation](https://cloud.google.com/deploy/docs/deploy-policy#dates_times) for more information on how to configure dates/times.",
+"id": "TimeWindows",
+"properties": {
+"oneTimeWindows": {
+"description": "Optional. One-time windows within which actions are restricted.",
+"items": {
+"$ref": "OneTimeWindow"
+},
+"type": "array"
+},
+"timeZone": {
+"description": "Required. The time zone in IANA format [IANA Time Zone Database](https://www.iana.org/time-zones) (e.g. America/New_York).",
+"type": "string"
+},
+"weeklyWindows": {
+"description": "Optional. Recurring weekly windows within which actions are restricted.",
+"items": {
+"$ref": "WeeklyWindow"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
 "VerifyJob": {
 "description": "A verify Job.",
 "id": "VerifyJob",
@@ -6252,6 +7055,48 @@ true
 }
 },
 "type": "object"
+},
+"WeeklyWindow": {
+"description": "Weekly windows. For example, blocking actions every Saturday and Sunday. Another example would be blocking actions every weekday from 5pm to midnight.",
+"id": "WeeklyWindow",
+"properties": {
+"daysOfWeek": {
+"description": "Optional. Days of week. If left empty, all days of the week will be included.",
+"items": {
+"enum": [
+"DAY_OF_WEEK_UNSPECIFIED",
+"MONDAY",
+"TUESDAY",
+"WEDNESDAY",
+"THURSDAY",
+"FRIDAY",
+"SATURDAY",
+"SUNDAY"
+],
+"enumDescriptions": [
+"The day of the week is unspecified.",
+"Monday",
+"Tuesday",
+"Wednesday",
+"Thursday",
+"Friday",
+"Saturday",
+"Sunday"
+],
+"type": "string"
+},
+"type": "array"
+},
+"endTime": {
+"$ref": "TimeOfDay",
+"description": "Optional. End time (exclusive). Use 24:00 to indicate midnight. If you specify end_time you must also specify start_time. If left empty, this will block for the entire day for the days specified in days_of_week."
+},
+"startTime": {
+"$ref": "TimeOfDay",
+"description": "Optional. Start time (inclusive). Use 00:00 for the beginning of the day. If you specify start_time you must also specify end_time. If left empty, this will block for the entire day for the days specified in days_of_week."
+}
+},
+"type": "object"
 }
 },
 "servicePath": "",