google-api-python-client 2.150.0__py2.py3-none-any.whl → 2.152.0__py2.py3-none-any.whl

googleapiclient/discovery_cache/documents/cloudcontrolspartner.v1beta.json

@@ -138,6 +138,64 @@
 "resources": {
 "customers": {
 "methods": {
+"create": {
+"description": "Creates a new customer.",
+"flatPath": "v1beta/organizations/{organizationsId}/locations/{locationsId}/customers",
+"httpMethod": "POST",
+"id": "cloudcontrolspartner.organizations.locations.customers.create",
+"parameterOrder": [
+"parent"
+],
+"parameters": {
+"customerId": {
+"description": "Required. The customer id to use for the customer, which will become the final component of the customer's resource name. The specified value must be a valid Google cloud organization id.",
+"location": "query",
+"type": "string"
+},
+"parent": {
+"description": "Required. Parent resource Format: `organizations/{organization}/locations/{location}`",
+"location": "path",
+"pattern": "^organizations/[^/]+/locations/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1beta/{+parent}/customers",
+"request": {
+"$ref": "Customer"
+},
+"response": {
+"$ref": "Customer"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+},
+"delete": {
+"description": "Delete details of a single customer",
+"flatPath": "v1beta/organizations/{organizationsId}/locations/{locationsId}/customers/{customersId}",
+"httpMethod": "DELETE",
+"id": "cloudcontrolspartner.organizations.locations.customers.delete",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "Required. name of the resource to be deleted format: name=organizations/*/locations/*/customers/*",
+"location": "path",
+"pattern": "^organizations/[^/]+/locations/[^/]+/customers/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1beta/{+name}",
+"response": {
+"$ref": "Empty"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+},
 "get": {
 "description": "Gets details of a single customer",
 "flatPath": "v1beta/organizations/{organizationsId}/locations/{locationsId}/customers/{customersId}",
@@ -208,6 +266,40 @@
 "scopes": [
 "https://www.googleapis.com/auth/cloud-platform"
 ]
+},
+"patch": {
+"description": "Update details of a single customer",
+"flatPath": "v1beta/organizations/{organizationsId}/locations/{locationsId}/customers/{customersId}",
+"httpMethod": "PATCH",
+"id": "cloudcontrolspartner.organizations.locations.customers.patch",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "Identifier. Format: `organizations/{organization}/locations/{location}/customers/{customer}`",
+"location": "path",
+"pattern": "^organizations/[^/]+/locations/[^/]+/customers/[^/]+$",
+"required": true,
+"type": "string"
+},
+"updateMask": {
+"description": "Optional. The list of fields to update",
+"format": "google-fieldmask",
+"location": "query",
+"type": "string"
+}
+},
+"path": "v1beta/{+name}",
+"request": {
+"$ref": "Customer"
+},
+"response": {
+"$ref": "Customer"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
 }
 },
 "resources": {
@@ -484,7 +576,7 @@
 }
 }
 },
-"revision": "20240904",
+"revision": "20241024",
 "rootUrl": "https://cloudcontrolspartner.googleapis.com/",
 "schemas": {
 "AccessApprovalRequest": {
@@ -609,6 +701,11 @@
 "name": {
 "description": "Identifier. Format: `organizations/{organization}/locations/{location}/customers/{customer}`",
 "type": "string"
+},
+"organizationDomain": {
+"description": "Output only. The customer organization domain, extracted from CRM Organization\u2019s display_name field. e.g. \"google.com\"",
+"readOnly": true,
+"type": "string"
 }
 },
 "type": "object"
@@ -758,6 +855,12 @@
 },
 "type": "object"
 },
+"Empty": {
+"description": "A generic empty message that you can re-use to avoid defining duplicated empty messages in your APIs. A typical example is to use it as the request or the response type of an API method. For instance: service Foo { rpc Bar(google.protobuf.Empty) returns (google.protobuf.Empty); }",
+"id": "Empty",
+"properties": {},
+"type": "object"
+},
 "Gcloud": {
 "description": "Remediation instructions to resolve violation via gcloud cli",
 "id": "Gcloud",

googleapiclient/discovery_cache/documents/clouddeploy.v1.json

@@ -2289,7 +2289,7 @@
 }
 }
 },
-"revision": "20241002",
+"revision": "20241029",
 "rootUrl": "https://clouddeploy.googleapis.com/",
 "schemas": {
 "AbandonReleaseRequest": {
@@ -2442,6 +2442,27 @@
 "properties": {},
 "type": "object"
 },
+"AssociatedEntities": {
+"description": "Information about entities associated with a `Target`.",
+"id": "AssociatedEntities",
+"properties": {
+"anthosClusters": {
+"description": "Optional. Information specifying Anthos clusters as associated entities.",
+"items": {
+"$ref": "AnthosCluster"
+},
+"type": "array"
+},
+"gkeClusters": {
+"description": "Optional. Information specifying GKE clusters as associated entities.",
+"items": {
+"$ref": "GkeCluster"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
 "AuditConfig": {
 "description": "Specifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs. If there are AuditConfigs for both `allServices` and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted. Example Policy with multiple AuditConfigs: { \"audit_configs\": [ { \"service\": \"allServices\", \"audit_log_configs\": [ { \"log_type\": \"DATA_READ\", \"exempted_members\": [ \"user:jose@example.com\" ] }, { \"log_type\": \"DATA_WRITE\" }, { \"log_type\": \"ADMIN_READ\" } ] }, { \"service\": \"sampleservice.googleapis.com\", \"audit_log_configs\": [ { \"log_type\": \"DATA_READ\" }, { \"log_type\": \"DATA_WRITE\", \"exempted_members\": [ \"user:aliya@example.com\" ] } ] } ] } For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts `jose@example.com` from DATA_READ logging, and `aliya@example.com` from DATA_WRITE logging.",
 "id": "AuditConfig",
@@ -2673,6 +2694,10 @@ true
 "repairRolloutRule": {
 "$ref": "RepairRolloutRule",
 "description": "Optional. The `RepairRolloutRule` will automatically repair a failed rollout."
+},
+"timedPromoteReleaseRule": {
+"$ref": "TimedPromoteReleaseRule",
+"description": "Optional. The `TimedPromoteReleaseRule` will automatically promote a release from the current target(s) to the specified target(s) on a configured schedule."
 }
 },
 "type": "object"
@@ -2684,6 +2709,10 @@ true
 "targetsPresentCondition": {
 "$ref": "TargetsPresentCondition",
 "description": "Optional. Details around targets enumerated in the rule."
+},
+"timedPromoteReleaseCondition": {
+"$ref": "TimedPromoteReleaseCondition",
+"description": "Optional. TimedPromoteReleaseCondition contains rule conditions specific to a an Automation with a timed promote release rule defined."
 }
 },
 "type": "object"
@@ -2783,10 +2812,15 @@ true
 "type": "string"
 },
 "targetId": {
-"description": "Output only. The ID of the target that represents the promotion stage that initiates the `AutomationRun`. The value of this field is the last segment of a target name.",
+"description": "Output only. The ID of the source target that initiates the `AutomationRun`. The value of this field is the last segment of a target name.",
 "readOnly": true,
 "type": "string"
 },
+"timedPromoteReleaseOperation": {
+"$ref": "TimedPromoteReleaseOperation",
+"description": "Output only. Promotes a release to a specified 'Target' as defined in a Timed Promote Release rule.",
+"readOnly": true
+},
 "updateTime": {
 "description": "Output only. Time at which the automationRun was updated.",
 "format": "google-datetime",
@@ -3989,6 +4023,10 @@ true
 "description": "Optional. The label to use when selecting Pods for the Deployment and Service resources. This label must already be present in both resources.",
 "type": "string"
 },
+"routeDestinations": {
+"$ref": "RouteDestinations",
+"description": "Optional. Route destinations allow configuring the Gateway API HTTPRoute to be deployed to additional clusters. This option is available for multi-cluster service mesh set ups that require the route to exist in the clusters that call the service. If unspecified, the HTTPRoute will only be deployed to the Target cluster."
+},
 "routeUpdateWaitTime": {
 "description": "Optional. The time to wait for route updates to propagate. The maximum configurable time is 3 hours, in seconds format. If unspecified, there is no wait time.",
 "format": "google-duration",
@@ -6308,6 +6346,24 @@ true
 },
 "type": "object"
 },
+"RouteDestinations": {
+"description": "Information about route destinations for the Gateway API service mesh.",
+"id": "RouteDestinations",
+"properties": {
+"destinationIds": {
+"description": "Required. The clusters where the Gateway API HTTPRoute resource will be deployed to. Valid entries include the associated entities IDs configured in the Target resource and \"@self\" to include the Target cluster.",
+"items": {
+"type": "string"
+},
+"type": "array"
+},
+"propagateService": {
+"description": "Optional. Whether to propagate the Kubernetes Service to the route destination clusters. The Service will always be deployed to the Target cluster even if the HTTPRoute is not. This option may be used to facilitiate successful DNS lookup in the route destination clusters. Can only be set to true if destinations are specified.",
+"type": "boolean"
+}
+},
+"type": "object"
+},
 "RuntimeConfig": {
 "description": "RuntimeConfig contains the runtime specific configurations for a deployment strategy.",
 "id": "RuntimeConfig",
@@ -6622,6 +6678,13 @@ true
 "$ref": "AnthosCluster",
 "description": "Optional. Information specifying an Anthos Cluster."
 },
+"associatedEntities": {
+"additionalProperties": {
+"$ref": "AssociatedEntities"
+},
+"description": "Optional. Map of entity IDs to their associated entities. Associated entities allows specifying places other than the deployment target for specific features. For example, the Gateway API canary can be configured to deploy the HTTPRoute to a different cluster(s) than the deployment cluster using associated entities. An entity ID must consist of lower-case letters, numbers, and hyphens, start with a letter and end with a letter or a number, and have a max length of 63 characters. In other words, it must match the following regex: `^[a-z]([a-z0-9-]{0,61}[a-z0-9])?$`.",
+"type": "object"
+},
 "createTime": {
 "description": "Output only. Time at which the `Target` was created.",
 "format": "google-datetime",
@@ -6864,6 +6927,21 @@ true
 },
 "type": "object"
 },
+"Targets": {
+"description": "The targets involved in a single timed promotion.",
+"id": "Targets",
+"properties": {
+"destinationTargetId": {
+"description": "Optional. The destination target ID.",
+"type": "string"
+},
+"sourceTargetId": {
+"description": "Optional. The source target ID.",
+"type": "string"
+}
+},
+"type": "object"
+},
 "TargetsPresentCondition": {
 "description": "`TargetsPresentCondition` contains information on any Targets referenced in the Delivery Pipeline that do not actually exist.",
 "id": "TargetsPresentCondition",
@@ -7002,6 +7080,81 @@ true
 },
 "type": "object"
 },
+"TimedPromoteReleaseCondition": {
+"description": "`TimedPromoteReleaseCondition` contains conditions specific to an Automation with a Timed Promote Release rule defined.",
+"id": "TimedPromoteReleaseCondition",
+"properties": {
+"nextPromotionTime": {
+"description": "Output only. When the next scheduled promotion(s) will occur.",
+"format": "google-datetime",
+"readOnly": true,
+"type": "string"
+},
+"targetsList": {
+"description": "Output only. A list of targets involved in the upcoming timed promotion(s).",
+"items": {
+"$ref": "Targets"
+},
+"readOnly": true,
+"type": "array"
+}
+},
+"type": "object"
+},
+"TimedPromoteReleaseOperation": {
+"description": "Contains the information of an automated timed promote-release operation.",
+"id": "TimedPromoteReleaseOperation",
+"properties": {
+"phase": {
+"description": "Output only. The starting phase of the rollout created by this operation.",
+"readOnly": true,
+"type": "string"
+},
+"release": {
+"description": "Output only. The name of the release to be promoted.",
+"readOnly": true,
+"type": "string"
+},
+"targetId": {
+"description": "Output only. The ID of the target that represents the promotion stage to which the release will be promoted. The value of this field is the last segment of a target name.",
+"readOnly": true,
+"type": "string"
+}
+},
+"type": "object"
+},
+"TimedPromoteReleaseRule": {
+"description": "The `TimedPromoteReleaseRule` will automatically promote a release from the current target(s) to the specified target(s) on a configured schedule.",
+"id": "TimedPromoteReleaseRule",
+"properties": {
+"condition": {
+"$ref": "AutomationRuleCondition",
+"description": "Output only. Information around the state of the Automation rule.",
+"readOnly": true
+},
+"destinationPhase": {
+"description": "Optional. The starting phase of the rollout created by this rule. Default to the first phase.",
+"type": "string"
+},
+"destinationTargetId": {
+"description": "Optional. The ID of the stage in the pipeline to which this `Release` is deploying. If unspecified, default it to the next stage in the promotion flow. The value of this field could be one of the following: * The last segment of a target name * \"@next\", the next target in the promotion sequence",
+"type": "string"
+},
+"id": {
+"description": "Required. ID of the rule. This ID must be unique in the `Automation` resource to which this rule belongs. The format is `[a-z]([a-z0-9-]{0,61}[a-z0-9])?`.",
+"type": "string"
+},
+"schedule": {
+"description": "Required. Schedule in crontab format. e.g. \"0 9 * * 1\" for every Monday at 9am.",
+"type": "string"
+},
+"timeZone": {
+"description": "Required. The time zone in IANA format [IANA Time Zone Database](https://www.iana.org/time-zones) (e.g. America/New_York).",
+"type": "string"
+}
+},
+"type": "object"
+},
 "VerifyJob": {
 "description": "A verify Job.",
 "id": "VerifyJob",

googleapiclient/discovery_cache/documents/cloudfunctions.v2.json

@@ -716,7 +716,7 @@
 }
 }
 },
-"revision": "20240905",
+"revision": "20241024",
 "rootUrl": "https://cloudfunctions.googleapis.com/",
 "schemas": {
 "AbortFunctionUpgradeRequest": {
@@ -2058,7 +2058,7 @@
 "type": "object"
 },
 "UpgradeInfo": {
-"description": "Information related to: * A function's eligibility for 1st Gen to 2nd Gen migration * Current state of migration for function undergoing migration.",
+"description": "Information related to: * A function's eligibility for 1st Gen to 2nd Gen migration and 2nd Gen to CRf detach. * Current state of migration for function undergoing migration/detach.",
 "id": "UpgradeInfo",
 "properties": {
 "buildConfig": {
@@ -2085,7 +2085,8 @@
 "REDIRECT_FUNCTION_UPGRADE_TRAFFIC_SUCCESSFUL",
 "REDIRECT_FUNCTION_UPGRADE_TRAFFIC_ERROR",
 "ROLLBACK_FUNCTION_UPGRADE_TRAFFIC_ERROR",
-"COMMIT_FUNCTION_UPGRADE_ERROR"
+"COMMIT_FUNCTION_UPGRADE_ERROR",
+"DETACH_IN_PROGRESS"
 ],
 "enumDescriptions": [
 "Unspecified state. Most functions are in this upgrade state.",
@@ -2097,7 +2098,8 @@
 "RedirectFunctionUpgradeTraffic API was successful and traffic is served by 2nd Gen function stack.",
 "RedirectFunctionUpgradeTraffic API was un-successful.",
 "RollbackFunctionUpgradeTraffic API was un-successful.",
-"CommitFunctionUpgrade API was un-successful."
+"CommitFunctionUpgrade API was un-successful.",
+"Function is requested to be detached from 2nd Gen to CRf."
 ],
 "type": "string"
 }

googleapiclient/discovery_cache/documents/cloudfunctions.v2alpha.json

@@ -716,7 +716,7 @@
 }
 }
 },
-"revision": "20240905",
+"revision": "20241024",
 "rootUrl": "https://cloudfunctions.googleapis.com/",
 "schemas": {
 "AbortFunctionUpgradeRequest": {
@@ -2058,7 +2058,7 @@
 "type": "object"
 },
 "UpgradeInfo": {
-"description": "Information related to: * A function's eligibility for 1st Gen to 2nd Gen migration * Current state of migration for function undergoing migration.",
+"description": "Information related to: * A function's eligibility for 1st Gen to 2nd Gen migration and 2nd Gen to CRf detach. * Current state of migration for function undergoing migration/detach.",
 "id": "UpgradeInfo",
 "properties": {
 "buildConfig": {
@@ -2085,7 +2085,8 @@
 "REDIRECT_FUNCTION_UPGRADE_TRAFFIC_SUCCESSFUL",
 "REDIRECT_FUNCTION_UPGRADE_TRAFFIC_ERROR",
 "ROLLBACK_FUNCTION_UPGRADE_TRAFFIC_ERROR",
-"COMMIT_FUNCTION_UPGRADE_ERROR"
+"COMMIT_FUNCTION_UPGRADE_ERROR",
+"DETACH_IN_PROGRESS"
 ],
 "enumDescriptions": [
 "Unspecified state. Most functions are in this upgrade state.",
@@ -2097,7 +2098,8 @@
 "RedirectFunctionUpgradeTraffic API was successful and traffic is served by 2nd Gen function stack.",
 "RedirectFunctionUpgradeTraffic API was un-successful.",
 "RollbackFunctionUpgradeTraffic API was un-successful.",
-"CommitFunctionUpgrade API was un-successful."
+"CommitFunctionUpgrade API was un-successful.",
+"Function is requested to be detached from 2nd Gen to CRf."
 ],
 "type": "string"
 }

googleapiclient/discovery_cache/documents/cloudfunctions.v2beta.json

@@ -716,7 +716,7 @@
 }
 }
 },
-"revision": "20240905",
+"revision": "20241024",
 "rootUrl": "https://cloudfunctions.googleapis.com/",
 "schemas": {
 "AbortFunctionUpgradeRequest": {
@@ -2058,7 +2058,7 @@
 "type": "object"
 },
 "UpgradeInfo": {
-"description": "Information related to: * A function's eligibility for 1st Gen to 2nd Gen migration * Current state of migration for function undergoing migration.",
+"description": "Information related to: * A function's eligibility for 1st Gen to 2nd Gen migration and 2nd Gen to CRf detach. * Current state of migration for function undergoing migration/detach.",
 "id": "UpgradeInfo",
 "properties": {
 "buildConfig": {
@@ -2085,7 +2085,8 @@
 "REDIRECT_FUNCTION_UPGRADE_TRAFFIC_SUCCESSFUL",
 "REDIRECT_FUNCTION_UPGRADE_TRAFFIC_ERROR",
 "ROLLBACK_FUNCTION_UPGRADE_TRAFFIC_ERROR",
-"COMMIT_FUNCTION_UPGRADE_ERROR"
+"COMMIT_FUNCTION_UPGRADE_ERROR",
+"DETACH_IN_PROGRESS"
 ],
 "enumDescriptions": [
 "Unspecified state. Most functions are in this upgrade state.",
@@ -2097,7 +2098,8 @@
 "RedirectFunctionUpgradeTraffic API was successful and traffic is served by 2nd Gen function stack.",
 "RedirectFunctionUpgradeTraffic API was un-successful.",
 "RollbackFunctionUpgradeTraffic API was un-successful.",
-"CommitFunctionUpgrade API was un-successful."
+"CommitFunctionUpgrade API was un-successful.",
+"Function is requested to be detached from 2nd Gen to CRf."
 ],
 "type": "string"
 }

googleapiclient/discovery_cache/documents/cloudidentity.v1.json

@@ -1990,7 +1990,7 @@
 }
 }
 },
-"revision": "20240924",
+"revision": "20241010",
 "rootUrl": "https://cloudidentity.googleapis.com/",
 "schemas": {
 "AddIdpCredentialOperationMetadata": {

googleapiclient/discovery_cache/documents/cloudidentity.v1beta1.json

@@ -2013,9 +2013,64 @@
 }
 }
 }
+},
+"policies": {
+"methods": {
+"get": {
+"description": "Get a Policy",
+"flatPath": "v1beta1/policies/{policiesId}",
+"httpMethod": "GET",
+"id": "cloudidentity.policies.get",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "Required. The name of the policy to retrieve. Format: \"policies/{policy}\".",
+"location": "path",
+"pattern": "^policies/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1beta1/{+name}",
+"response": {
+"$ref": "Policy"
 }
 },
-"revision": "20241001",
+"list": {
+"description": "List Policies",
+"flatPath": "v1beta1/policies",
+"httpMethod": "GET",
+"id": "cloudidentity.policies.list",
+"parameterOrder": [],
+"parameters": {
+"filter": {
+"description": "Optional. A CEL expression for filtering the results. Policies can be filtered by application with this expression: setting.name = 'settings/gmail.*' Policies can be filtered by setting type with this expression: setting.name = '*.service_status' A maximum of one of the above setting.name clauses can be used. Policies can be filtered by customer with this expression: customer = \"customers/{customer}\" Where `customer` is the `id` from the [Admin SDK `Customer` resource](https://developers.google.com/admin-sdk/directory/reference/rest/v1/customers). You may use `customers/my_customer` to specify your own organization. When no customer is mentioned it will be default to customers/my_customer. A maximum of one customer clause can be used. The above clauses can only be combined together in a single filter expression with the AND operator.",
+"location": "query",
+"type": "string"
+},
+"pageSize": {
+"description": "Optional. The maximum number of results to return. The service may return fewer than this value. If omitted (or defaulted to zero) the server will default to 50. The maximum allowed value is 100, though requests with page_size greater than that will be interpreted as 100.",
+"format": "int32",
+"location": "query",
+"type": "integer"
+},
+"pageToken": {
+"description": "Optional. The pagination token received from a prior call to PoliciesService.ListPolicies to retrieve the next page of results. When paginating, all other parameters provided to `ListPoliciesRequest` must match the call that provided the page token.",
+"location": "query",
+"type": "string"
+}
+},
+"path": "v1beta1/policies",
+"response": {
+"$ref": "ListPoliciesResponse"
+}
+}
+}
+}
+},
+"revision": "20241021",
 "rootUrl": "https://cloudidentity.googleapis.com/",
 "schemas": {
 "AddIdpCredentialOperationMetadata": {
@@ -4379,6 +4434,24 @@
 },
 "type": "object"
 },
+"ListPoliciesResponse": {
+"description": "The response message for PoliciesService.ListPolicies.",
+"id": "ListPoliciesResponse",
+"properties": {
+"nextPageToken": {
+"description": "The pagination token to retrieve the next page of results. If this field is empty, there are no subsequent pages.",
+"type": "string"
+},
+"policies": {
+"description": "The results",
+"items": {
+"$ref": "Policy"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
 "ListUserInvitationsResponse": {
 "description": "Response message for UserInvitation listing request.",
 "id": "ListUserInvitationsResponse",
@@ -4805,6 +4878,70 @@
 },
 "type": "object"
 },
+"Policy": {
+"description": "A Policy resource binds an instance of a single Setting with the scope of a PolicyQuery. The Setting instance will be applied to all entities that satisfy the query.",
+"id": "Policy",
+"properties": {
+"customer": {
+"description": "Immutable. Customer that the Policy belongs to. The value is in the format 'customers/{customerId}'. The `customerId` must begin with \"C\" To find your customer ID in Admin Console see https://support.google.com/a/answer/10070793.",
+"type": "string"
+},
+"name": {
+"description": "Output only. Identifier. The [resource name](https://cloud.google.com/apis/design/resource_names) of the Policy. Format: policies/{policy}.",
+"readOnly": true,
+"type": "string"
+},
+"policyQuery": {
+"$ref": "PolicyQuery",
+"description": "Required. The PolicyQuery the Setting applies to."
+},
+"setting": {
+"$ref": "Setting",
+"description": "Required. The Setting configured by this Policy."
+},
+"type": {
+"description": "Output only. The type of the policy.",
+"enum": [
+"POLICY_TYPE_UNSPECIFIED",
+"SYSTEM",
+"ADMIN"
+],
+"enumDescriptions": [
+"Unspecified policy type.",
+"Policy type denoting the system-configured policies.",
+"Policy type denoting the admin-configurable policies."
+],
+"readOnly": true,
+"type": "string"
+}
+},
+"type": "object"
+},
+"PolicyQuery": {
+"description": "PolicyQuery",
+"id": "PolicyQuery",
+"properties": {
+"group": {
+"description": "Immutable. The group that the query applies to. This field is only set if there is a single value for group that satisfies all clauses of the query. If no group applies, this will be the empty string.",
+"type": "string"
+},
+"orgUnit": {
+"description": "Required. Immutable. Non-empty default. The OrgUnit the query applies to. This field is only set if there is a single value for org_unit that satisfies all clauses of the query.",
+"type": "string"
+},
+"query": {
+"description": "Immutable. The CEL query that defines which entities the Policy applies to (ex. a User entity). For details about CEL see https://opensource.google.com/projects/cel. The OrgUnits the Policy applies to are represented by a clause like so: entity.org_units.exists(org_unit, org_unit.org_unit_id == orgUnitId('{orgUnitId}')) The Group the Policy applies to are represented by a clause like so: entity.groups.exists(group, group.group_id == groupId('{groupId}')) The Licenses the Policy applies to are represented by a clause like so: entity.licenses.exists(license, license in ['/product/{productId}/sku/{skuId}']) The above clauses can be present in any combination, and used in conjunction with the &&, || and ! operators. The org_unit and group fields below are helper fields that contain the corresponding value(s) as the query to make the query easier to use.",
+"type": "string"
+},
+"sortOrder": {
+"description": "Output only. The decimal sort order of this PolicyQuery. The value is relative to all other policies with the same setting type within the whole customer. (there are no duplicates within this set).",
+"format": "double",
+"readOnly": true,
+"type": "number"
+}
+},
+"type": "object"
+},
 "PosixGroup": {
 "description": "POSIX Group definition to represent a group in a POSIX compliant system. Caution: POSIX groups are deprecated. As of September 26, 2024, you can no longer create new POSIX groups. For more information, see https://cloud.google.com/identity/docs/deprecations/posix-groups",
 "id": "PosixGroup",
@@ -5019,6 +5156,25 @@
 "properties": {},
 "type": "object"
 },
+"Setting": {
+"description": "Setting",
+"id": "Setting",
+"properties": {
+"type": {
+"description": "Required. Immutable. The type of the Setting. .",
+"type": "string"
+},
+"value": {
+"additionalProperties": {
+"description": "Properties of the object.",
+"type": "any"
+},
+"description": "Required. The value of the Setting.",
+"type": "object"
+}
+},
+"type": "object"
+},
 "SignInBehavior": {
 "description": "Controls sign-in behavior.",
 "id": "SignInBehavior",