google-api-python-client 2.168.0__py3-none-any.whl → 2.170.0__py3-none-any.whl

googleapiclient/discovery_cache/documents/iam.v2beta.json

@@ -293,7 +293,7 @@
 }
 }
 },
-"revision": "20250213",
+"revision": "20250502",
 "rootUrl": "https://iam.googleapis.com/",
 "schemas": {
 "CloudControl2SharedOperationsReconciliationOperationMetadata": {
@@ -483,7 +483,7 @@ false
 "type": "array"
 },
 "deniedPrincipals": {
-"description": "The identities that are prevented from using one or more permissions on Google Cloud resources. This field can contain the following values: * `principal://goog/subject/{email_id}`: A specific Google Account. Includes Gmail, Cloud Identity, and Google Workspace user accounts. For example, `principal://goog/subject/alice@example.com`. * `principal://iam.googleapis.com/projects/-/serviceAccounts/{service_account_id}`: A Google Cloud service account. For example, `principal://iam.googleapis.com/projects/-/serviceAccounts/my-service-account@iam.gserviceaccount.com`. * `principalSet://goog/group/{group_id}`: A Google group. For example, `principalSet://goog/group/admins@example.com`. * `principalSet://goog/public:all`: A special identifier that represents any principal that is on the internet, even if they do not have a Google Account or are not logged in. * `principalSet://goog/cloudIdentityCustomerId/{customer_id}`: All of the principals associated with the specified Google Workspace or Cloud Identity customer ID. For example, `principalSet://goog/cloudIdentityCustomerId/C01Abc35`. * `principal://iam.googleapis.com/locations/global/workforcePools/{pool_id}/subject/{subject_attribute_value}`: A single identity in a workforce identity pool. * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/group/{group_id}`: All workforce identities in a group. * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/attribute.{attribute_name}/{attribute_value}`: All workforce identities with a specific attribute value. * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/*`: All identities in a workforce identity pool. * `principal://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/subject/{subject_attribute_value}`: A single identity in a workload identity pool. * `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/group/{group_id}`: A workload identity pool group. * `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/attribute.{attribute_name}/{attribute_value}`: All identities in a workload identity pool with a certain attribute. * `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/*`: All identities in a workload identity pool. * `principalSet://cloudresourcemanager.googleapis.com/[projects|folders|organizations]/{project_number|folder_number|org_number}/type/ServiceAccount`: All service accounts grouped under a resource (project, folder, or organization). * `principalSet://cloudresourcemanager.googleapis.com/[projects|folders|organizations]/{project_number|folder_number|org_number}/type/ServiceAgent`: All service agents grouped under a resource (project, folder, or organization). * `deleted:principal://goog/subject/{email_id}?uid={uid}`: A specific Google Account that was deleted recently. For example, `deleted:principal://goog/subject/alice@example.com?uid=1234567890`. If the Google Account is recovered, this identifier reverts to the standard identifier for a Google Account. * `deleted:principalSet://goog/group/{group_id}?uid={uid}`: A Google group that was deleted recently. For example, `deleted:principalSet://goog/group/admins@example.com?uid=1234567890`. If the Google group is restored, this identifier reverts to the standard identifier for a Google group. * `deleted:principal://iam.googleapis.com/projects/-/serviceAccounts/{service_account_id}?uid={uid}`: A Google Cloud service account that was deleted recently. For example, `deleted:principal://iam.googleapis.com/projects/-/serviceAccounts/my-service-account@iam.gserviceaccount.com?uid=1234567890`. If the service account is undeleted, this identifier reverts to the standard identifier for a service account. * `deleted:principal://iam.googleapis.com/locations/global/workforcePools/{pool_id}/subject/{subject_attribute_value}`: Deleted single identity in a workforce identity pool. For example, `deleted:principal://iam.googleapis.com/locations/global/workforcePools/my-pool-id/subject/my-subject-attribute-value`.",
+"description": " The identities that are prevented from using one or more permissions on Google Cloud resources. This field can contain the following values: * `principal://goog/subject/{email_id}`: A specific Google Account. Includes Gmail, Cloud Identity, and Google Workspace user accounts. For example, `principal://goog/subject/alice@example.com`. * `principal://iam.googleapis.com/projects/-/serviceAccounts/{service_account_id}`: A Google Cloud service account. For example, `principal://iam.googleapis.com/projects/-/serviceAccounts/my-service-account@iam.gserviceaccount.com`. * `principalSet://goog/group/{group_id}`: A Google group. For example, `principalSet://goog/group/admins@example.com`. * `principalSet://goog/public:all`: A special identifier that represents any principal that is on the internet, even if they do not have a Google Account or are not logged in. * `principalSet://goog/cloudIdentityCustomerId/{customer_id}`: All of the principals associated with the specified Google Workspace or Cloud Identity customer ID. For example, `principalSet://goog/cloudIdentityCustomerId/C01Abc35`. * `principal://iam.googleapis.com/locations/global/workforcePools/{pool_id}/subject/{subject_attribute_value}`: A single identity in a workforce identity pool. * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/group/{group_id}`: All workforce identities in a group. * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/attribute.{attribute_name}/{attribute_value}`: All workforce identities with a specific attribute value. * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/*`: All identities in a workforce identity pool. * `principal://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/subject/{subject_attribute_value}`: A single identity in a workload identity pool. * `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/group/{group_id}`: A workload identity pool group. * `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/attribute.{attribute_name}/{attribute_value}`: All identities in a workload identity pool with a certain attribute. * `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/*`: All identities in a workload identity pool. * `principalSet://cloudresourcemanager.googleapis.com/[projects|folders|organizations]/{project_number|folder_number|org_number}/type/ServiceAccount`: All service accounts grouped under a resource (project, folder, or organization). * `principalSet://cloudresourcemanager.googleapis.com/[projects|folders|organizations]/{project_number|folder_number|org_number}/type/ServiceAgent`: All service agents grouped under a resource (project, folder, or organization). * `deleted:principal://goog/subject/{email_id}?uid={uid}`: A specific Google Account that was deleted recently. For example, `deleted:principal://goog/subject/alice@example.com?uid=1234567890`. If the Google Account is recovered, this identifier reverts to the standard identifier for a Google Account. * `deleted:principalSet://goog/group/{group_id}?uid={uid}`: A Google group that was deleted recently. For example, `deleted:principalSet://goog/group/admins@example.com?uid=1234567890`. If the Google group is restored, this identifier reverts to the standard identifier for a Google group. * `deleted:principal://iam.googleapis.com/projects/-/serviceAccounts/{service_account_id}?uid={uid}`: A Google Cloud service account that was deleted recently. For example, `deleted:principal://iam.googleapis.com/projects/-/serviceAccounts/my-service-account@iam.gserviceaccount.com?uid=1234567890`. If the service account is undeleted, this identifier reverts to the standard identifier for a service account. * `deleted:principal://iam.googleapis.com/locations/global/workforcePools/{pool_id}/subject/{subject_attribute_value}`: Deleted single identity in a workforce identity pool. For example, `deleted:principal://iam.googleapis.com/locations/global/workforcePools/my-pool-id/subject/my-subject-attribute-value`.",
 "items": {
 "type": "string"
 },

googleapiclient/discovery_cache/documents/iamcredentials.v1.json

@@ -15,6 +15,13 @@
 "description": "Creates short-lived credentials for impersonating IAM service accounts. Disabling this API also disables the IAM API (iam.googleapis.com). However, enabling this API doesn't enable the IAM API. ",
 "discoveryVersion": "v1",
 "documentationLink": "https://cloud.google.com/iam/docs/creating-short-lived-service-account-credentials",
+"endpoints": [
+{
+"description": "Regional Endpoint",
+"endpointUrl": "https://iamcredentials.us-east7.rep.googleapis.com/",
+"location": "us-east7"
+}
+],
 "fullyEncodeReservedExpansion": true,
 "icons": {
 "x16": "http://www.google.com/images/icons/product/search-16.gif",
@@ -105,8 +112,68 @@
 },
 "protocol": "rest",
 "resources": {
+"locations": {
+"resources": {
+"workforcePools": {
+"methods": {
+"getAllowedLocations": {
+"description": "Returns the trust boundary info for a given workforce pool.",
+"flatPath": "v1/locations/{locationsId}/workforcePools/{workforcePoolsId}/allowedLocations",
+"httpMethod": "GET",
+"id": "iamcredentials.locations.workforcePools.getAllowedLocations",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "Required. Resource name of workforce pool.",
+"location": "path",
+"pattern": "^locations/[^/]+/workforcePools/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1/{+name}/allowedLocations",
+"response": {
+"$ref": "WorkforcePoolAllowedLocations"
+}
+}
+}
+}
+}
+},
 "projects": {
 "resources": {
+"locations": {
+"resources": {
+"workloadIdentityPools": {
+"methods": {
+"getAllowedLocations": {
+"description": "Returns the trust boundary info for a given workload identity pool.",
+"flatPath": "v1/projects/{projectsId}/locations/{locationsId}/workloadIdentityPools/{workloadIdentityPoolsId}/allowedLocations",
+"httpMethod": "GET",
+"id": "iamcredentials.projects.locations.workloadIdentityPools.getAllowedLocations",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "Required. Resource name of workload identity pool.",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+/workloadIdentityPools/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1/{+name}/allowedLocations",
+"response": {
+"$ref": "WorkloadIdentityPoolAllowedLocations"
+}
+}
+}
+}
+}
+},
 "serviceAccounts": {
 "methods": {
 "generateAccessToken": {
@@ -248,7 +315,7 @@
 }
 }
 },
-"revision": "20241024",
+"revision": "20250417",
 "rootUrl": "https://iamcredentials.googleapis.com/",
 "schemas": {
 "GenerateAccessTokenRequest": {
@@ -308,6 +375,10 @@
 "includeEmail": {
 "description": "Include the service account email in the token. If set to `true`, the token will contain `email` and `email_verified` claims.",
 "type": "boolean"
+},
+"organizationNumberIncluded": {
+"description": "Include the organization number of the service account in the token. If set to `true`, the token will contain a `google.organization_number` claim. The value of the claim will be `null` if the service account isn't associated with an organization.",
+"type": "boolean"
 }
 },
 "type": "object"
@@ -316,7 +387,7 @@
 "id": "GenerateIdTokenResponse",
 "properties": {
 "token": {
-"description": "The OpenId Connect ID token.",
+"description": "The OpenId Connect ID token. The token is a JSON Web Token (JWT) that contains a payload with claims. See the [JSON Web Token spec](https://tools.ietf.org/html/rfc7519) for more information. Here is an example of a decoded JWT payload: ``` { \"iss\": \"https://accounts.google.com\", \"iat\": 1496953245, \"exp\": 1496953245, \"aud\": \"https://www.example.com\", \"sub\": \"107517467455664443765\", \"azp\": \"107517467455664443765\", \"email\": \"my-iam-account@my-project.iam.gserviceaccount.com\", \"email_verified\": true, \"google\": { \"organization_number\": 123456 } } ```",
 "type": "string"
 }
 },
@@ -405,6 +476,46 @@
 }
 },
 "type": "object"
+},
+"WorkforcePoolAllowedLocations": {
+"description": "Represents a list of allowed locations for given workforce pool.",
+"id": "WorkforcePoolAllowedLocations",
+"properties": {
+"encodedLocations": {
+"description": "Output only. The hex encoded bitmap of the trust boundary locations",
+"readOnly": true,
+"type": "string"
+},
+"locations": {
+"description": "Output only. The human readable trust boundary locations. For example, [\"us-central1\", \"europe-west1\"]",
+"items": {
+"type": "string"
+},
+"readOnly": true,
+"type": "array"
+}
+},
+"type": "object"
+},
+"WorkloadIdentityPoolAllowedLocations": {
+"description": "Represents a list of allowed locations for given workload identity pool.",
+"id": "WorkloadIdentityPoolAllowedLocations",
+"properties": {
+"encodedLocations": {
+"description": "Output only. The hex encoded bitmap of the trust boundary locations",
+"readOnly": true,
+"type": "string"
+},
+"locations": {
+"description": "Output only. The human readable trust boundary locations. For example, [\"us-central1\", \"europe-west1\"]",
+"items": {
+"type": "string"
+},
+"readOnly": true,
+"type": "array"
+}
+},
+"type": "object"
 }
 },
 "servicePath": "",