google-api-python-client 2.192.0__py3-none-any.whl → 2.194.0__py3-none-any.whl

googleapiclient/discovery_cache/documents/healthcare.v1.json

@@ -139,7 +139,7 @@
 ]
 },
 "list": {
-"description": "Lists information about the supported locations for this service. This method can be called in two ways: * **List all public locations:** Use the path `GET /v1/locations`. * **List project-visible locations:** Use the path `GET /v1/projects/{project_id}/locations`. This may include public locations as well as private or other locations specifically visible to the project.",
+"description": "Lists information about the supported locations for this service. This method lists locations based on the resource scope provided in the [ListLocationsRequest.name] field: * **Global locations**: If `name` is empty, the method lists the public locations available to all projects. * **Project-specific locations**: If `name` follows the format `projects/{project}`, the method lists locations visible to that specific project. This includes public, private, or other project-specific locations enabled for the project. For gRPC and client library implementations, the resource name is passed as the `name` field. For direct service calls, the resource name is incorporated into the request path based on the specific service implementation and version.",
 "flatPath": "v1/projects/{projectsId}/locations",
 "httpMethod": "GET",
 "id": "healthcare.projects.locations.list",
@@ -5171,7 +5171,7 @@
 }
 }
 },
-"revision": "20260128",
+"revision": "20260331",
 "rootUrl": "https://healthcare.googleapis.com/",
 "schemas": {
 "AccessDeterminationLogConfig": {

googleapiclient/discovery_cache/documents/healthcare.v1beta1.json

@@ -139,7 +139,7 @@
 ]
 },
 "list": {
-"description": "Lists information about the supported locations for this service. This method can be called in two ways: * **List all public locations:** Use the path `GET /v1/locations`. * **List project-visible locations:** Use the path `GET /v1/projects/{project_id}/locations`. This may include public locations as well as private or other locations specifically visible to the project.",
+"description": "Lists information about the supported locations for this service. This method lists locations based on the resource scope provided in the [ListLocationsRequest.name] field: * **Global locations**: If `name` is empty, the method lists the public locations available to all projects. * **Project-specific locations**: If `name` follows the format `projects/{project}`, the method lists locations visible to that specific project. This includes public, private, or other project-specific locations enabled for the project. For gRPC and client library implementations, the resource name is passed as the `name` field. For direct service calls, the resource name is incorporated into the request path based on the specific service implementation and version.",
 "flatPath": "v1beta1/projects/{projectsId}/locations",
 "httpMethod": "GET",
 "id": "healthcare.projects.locations.list",
@@ -5718,7 +5718,7 @@
 }
 }
 },
-"revision": "20260128",
+"revision": "20260331",
 "rootUrl": "https://healthcare.googleapis.com/",
 "schemas": {
 "AccessDeterminationLogConfig": {

googleapiclient/discovery_cache/documents/hypercomputecluster.v1.json

@@ -135,7 +135,7 @@
 ]
 },
 "list": {
-"description": "Lists information about the supported locations for this service. This method can be called in two ways: * **List all public locations:** Use the path `GET /v1/locations`. * **List project-visible locations:** Use the path `GET /v1/projects/{project_id}/locations`. This may include public locations as well as private or other locations specifically visible to the project.",
+"description": "Lists information about the supported locations for this service. This method lists locations based on the resource scope provided in the [ListLocationsRequest.name] field: * **Global locations**: If `name` is empty, the method lists the public locations available to all projects. * **Project-specific locations**: If `name` follows the format `projects/{project}`, the method lists locations visible to that specific project. This includes public, private, or other project-specific locations enabled for the project. For gRPC and client library implementations, the resource name is passed as the `name` field. For direct service calls, the resource name is incorporated into the request path based on the specific service implementation and version.",
 "flatPath": "v1/projects/{projectsId}/locations",
 "httpMethod": "GET",
 "id": "hypercomputecluster.projects.locations.list",
@@ -498,7 +498,7 @@
 }
 }
 },
-"revision": "20260204",
+"revision": "20260325",
 "rootUrl": "https://hypercomputecluster.googleapis.com/",
 "schemas": {
 "BootDisk": {
@@ -559,7 +559,7 @@
 "type": "string"
 },
 "description": {
-"description": "Optional. User-provided description of the cluster.",
+"description": "Optional. User-provided description of the cluster. Maximum of 2048 characters.",
 "type": "string"
 },
 "labels": {

googleapiclient/discovery_cache/documents/iam.v1.json

@@ -1215,34 +1215,6 @@
 "scopes": [
 "https://www.googleapis.com/auth/cloud-platform"
 ]
-},
-"undelete": {
-"description": "Gemini Enterprise only. Undeletes a WorkforcePoolProviderScimToken,that was deleted fewer than 30 days ago.",
-"flatPath": "v1/locations/{locationsId}/workforcePools/{workforcePoolsId}/providers/{providersId}/scimTenants/{scimTenantsId}/tokens/{tokensId}:undelete",
-"httpMethod": "POST",
-"id": "iam.locations.workforcePools.providers.scimTenants.tokens.undelete",
-"parameterOrder": [
-"name"
-],
-"parameters": {
-"name": {
-"description": "Required. Gemini Enterprise only. The name of the SCIM token to undelete. Format: `locations/{location}/workforcePools/{workforce_pool}/providers/{provider}/scimTenants/{scim_tenant}/tokens/{token}`",
-"location": "path",
-"pattern": "^locations/[^/]+/workforcePools/[^/]+/providers/[^/]+/scimTenants/[^/]+/tokens/[^/]+$",
-"required": true,
-"type": "string"
-}
-},
-"path": "v1/{+name}:undelete",
-"request": {
-"$ref": "UndeleteWorkforcePoolProviderScimTokenRequest"
-},
-"response": {
-"$ref": "WorkforcePoolProviderScimToken"
-},
-"scopes": [
-"https://www.googleapis.com/auth/cloud-platform"
-]
 }
 }
 }
@@ -1916,6 +1888,34 @@
 },
 "workloadIdentityPools": {
 "methods": {
+"addAttestationRule": {
+"description": "Add an AttestationRule on a WorkloadIdentityPoolManagedIdentity. The total attestation rules after addition must not exceed 50.",
+"flatPath": "v1/projects/{projectsId}/locations/{locationsId}/workloadIdentityPools/{workloadIdentityPoolsId}:addAttestationRule",
+"httpMethod": "POST",
+"id": "iam.projects.locations.workloadIdentityPools.addAttestationRule",
+"parameterOrder": [
+"resource"
+],
+"parameters": {
+"resource": {
+"description": "Required. The resource name of the managed identity or namespace resource to add an attestation rule to.",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+/workloadIdentityPools/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1/{+resource}:addAttestationRule",
+"request": {
+"$ref": "AddAttestationRuleRequest"
+},
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+},
 "create": {
 "description": "Creates a new WorkloadIdentityPool. You cannot reuse the name of a deleted pool until 30 days after deletion.",
 "flatPath": "v1/projects/{projectsId}/locations/{locationsId}/workloadIdentityPools",
@@ -2068,6 +2068,47 @@
 "https://www.googleapis.com/auth/cloud-platform"
 ]
 },
+"listAttestationRules": {
+"description": "List all AttestationRule on a WorkloadIdentityPoolManagedIdentity.",
+"flatPath": "v1/projects/{projectsId}/locations/{locationsId}/workloadIdentityPools/{workloadIdentityPoolsId}:listAttestationRules",
+"httpMethod": "GET",
+"id": "iam.projects.locations.workloadIdentityPools.listAttestationRules",
+"parameterOrder": [
+"resource"
+],
+"parameters": {
+"filter": {
+"description": "Optional. A query filter. Supports the following function: * `container_ids()`: Returns only the AttestationRules under the specific container ids. The function expects a comma-delimited list with only project numbers and must use the format `projects/`. For example: `container_ids(projects/, projects/,...)`.",
+"location": "query",
+"type": "string"
+},
+"pageSize": {
+"description": "Optional. The maximum number of AttestationRules to return. If unspecified, at most 50 AttestationRules are returned. The maximum value is 100; values above 100 are truncated to 100.",
+"format": "int32",
+"location": "query",
+"type": "integer"
+},
+"pageToken": {
+"description": "Optional. A page token, received from a previous `ListWorkloadIdentityPoolProviderKeys` call. Provide this to retrieve the subsequent page.",
+"location": "query",
+"type": "string"
+},
+"resource": {
+"description": "Required. The resource name of the managed identity or namespace resource to list attestation rules of.",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+/workloadIdentityPools/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1/{+resource}:listAttestationRules",
+"response": {
+"$ref": "ListAttestationRulesResponse"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+},
 "patch": {
 "description": "Updates an existing WorkloadIdentityPool.",
 "flatPath": "v1/projects/{projectsId}/locations/{locationsId}/workloadIdentityPools/{workloadIdentityPoolsId}",
@@ -2102,6 +2143,62 @@
 "https://www.googleapis.com/auth/cloud-platform"
 ]
 },
+"removeAttestationRule": {
+"description": "Remove an AttestationRule on a WorkloadIdentityPoolManagedIdentity.",
+"flatPath": "v1/projects/{projectsId}/locations/{locationsId}/workloadIdentityPools/{workloadIdentityPoolsId}:removeAttestationRule",
+"httpMethod": "POST",
+"id": "iam.projects.locations.workloadIdentityPools.removeAttestationRule",
+"parameterOrder": [
+"resource"
+],
+"parameters": {
+"resource": {
+"description": "Required. The resource name of the managed identity or namespace resource to remove an attestation rule from.",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+/workloadIdentityPools/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1/{+resource}:removeAttestationRule",
+"request": {
+"$ref": "RemoveAttestationRuleRequest"
+},
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+},
+"setAttestationRules": {
+"description": "Set all AttestationRule on a WorkloadIdentityPoolManagedIdentity. A maximum of 50 AttestationRules can be set.",
+"flatPath": "v1/projects/{projectsId}/locations/{locationsId}/workloadIdentityPools/{workloadIdentityPoolsId}:setAttestationRules",
+"httpMethod": "POST",
+"id": "iam.projects.locations.workloadIdentityPools.setAttestationRules",
+"parameterOrder": [
+"resource"
+],
+"parameters": {
+"resource": {
+"description": "Required. The resource name of the managed identity or namespace resource to add an attestation rule to.",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+/workloadIdentityPools/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1/{+resource}:setAttestationRules",
+"request": {
+"$ref": "SetAttestationRulesRequest"
+},
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+},
 "setIamPolicy": {
 "description": "Sets the IAM policies on a WorkloadIdentityPool",
 "flatPath": "v1/projects/{projectsId}/locations/{locationsId}/workloadIdentityPools/{workloadIdentityPoolsId}:setIamPolicy",
@@ -4160,7 +4257,7 @@
 }
 }
 },
-"revision": "20260213",
+"revision": "20260320",
 "rootUrl": "https://iam.googleapis.com/",
 "schemas": {
 "AccessRestrictions": {
@@ -4546,12 +4643,14 @@
 "enum": [
 "ATTRIBUTES_TYPE_UNSPECIFIED",
 "AZURE_AD_GROUPS_MAIL",
-"AZURE_AD_GROUPS_ID"
+"AZURE_AD_GROUPS_ID",
+"AZURE_AD_GROUPS_DISPLAY_NAME"
 ],
 "enumDescriptions": [
 "No AttributesType specified.",
 "Used to get the user's group claims from the Microsoft Entra ID identity provider using the configuration provided in ExtraAttributesOAuth2Client. The `mail` property of the `microsoft.graph.group` object is used for claim mapping. See https://learn.microsoft.com/en-us/graph/api/resources/group?view=graph-rest-1.0#properties for more details on `microsoft.graph.group` properties. The group mail addresses of the user's groups that are returned from Microsoft Entra ID can be mapped by using the following attributes: * OIDC: `assertion.groups` * SAML: `assertion.attributes.groups`",
-"Used to get the user's group claims from the Microsoft Entra ID identity provider using the configuration provided in ExtraAttributesOAuth2Client. The `id` property of the `microsoft.graph.group` object is used for claim mapping. See https://learn.microsoft.com/en-us/graph/api/resources/group?view=graph-rest-1.0#properties for more details on `microsoft.graph.group` properties. The group IDs of the user's groups that are returned from Microsoft Entra ID can be mapped by using the following attributes: * OIDC: `assertion.groups` * SAML: `assertion.attributes.groups`"
+"Used to get the user's group claims from the Microsoft Entra ID identity provider using the configuration provided in ExtraAttributesOAuth2Client. The `id` property of the `microsoft.graph.group` object is used for claim mapping. See https://learn.microsoft.com/en-us/graph/api/resources/group?view=graph-rest-1.0#properties for more details on `microsoft.graph.group` properties. The group IDs of the user's groups that are returned from Microsoft Entra ID can be mapped by using the following attributes: * OIDC: `assertion.groups` * SAML: `assertion.attributes.groups`",
+"Used to get the user's group claims from the Microsoft Entra ID identity provider using the configuration provided in ExtraAttributesOAuth2Client. The `displayName` property of the `microsoft.graph.group` object is used for claim mapping. See https://learn.microsoft.com/en-us/graph/api/resources/group?view=graph-rest-1.0#properties for more details on `microsoft.graph.group` properties. The display names of the user's groups that are returned from Microsoft Entra ID can be mapped by using the following attributes: * OIDC: `assertion.groups` * SAML: `assertion.attributes.groups`"
 ],
 "type": "string"
 },
@@ -4732,6 +4831,10 @@
 "description": "Optional. Rotation window percentage, the percentage of remaining lifetime after which certificate rotation is initiated. Must be between 50 and 80. If no value is specified, rotation window percentage is defaulted to 50.",
 "format": "int32",
 "type": "integer"
+},
+"useDefaultSharedCa": {
+"description": "Optional. If set to true, the trust domain will utilize the GCP-provisioned default CA. A default CA in the same region as the workload will be selected to issue the certificate. Enabling this will clear any existing `ca_pools` configuration to provision the certificates. NOTE: This field is mutually exclusive with `ca_pools`. If this flag is enabled, certificates will be automatically provisioned from the default shared CAs. This flag should not be set if you want to use your own CA pools to provision the certificates.",
+"type": "boolean"
 }
 },
 "type": "object"
@@ -6122,6 +6225,10 @@ false
 "$ref": "TrustAnchor"
 },
 "type": "array"
+},
+"trustDefaultSharedCa": {
+"description": "Optional. If set to True, the trust bundle will include the private ca managed identity regional root public certificates. Important: `trust_default_shared_ca` is only supported for managed identity trust domain resource.",
+"type": "boolean"
 }
 },
 "type": "object"
@@ -6178,12 +6285,6 @@ false
 "properties": {},
 "type": "object"
 },
-"UndeleteWorkforcePoolProviderScimTokenRequest": {
-"description": "Gemini Enterprise only. Request message for UndeleteWorkforcePoolProviderScimToken.",
-"id": "UndeleteWorkforcePoolProviderScimTokenRequest",
-"properties": {},
-"type": "object"
-},
 "UndeleteWorkforcePoolRequest": {
 "description": "Request message for UndeleteWorkforcePool.",
 "id": "UndeleteWorkforcePoolRequest",

googleapiclient/discovery_cache/documents/iamcredentials.v1.json

@@ -151,7 +151,7 @@
 ],
 "parameters": {
 "name": {
-"description": "Required. Resource name of workforce pool.",
+"description": "Required. Resource name of workforce pool. Format: `locations/global/workforcePools/{pool_id}`",
 "location": "path",
 "pattern": "^locations/[^/]+/workforcePools/[^/]+$",
 "required": true,
@@ -183,7 +183,7 @@
 ],
 "parameters": {
 "name": {
-"description": "Required. Resource name of workload identity pool.",
+"description": "Required. Resource name of workload identity pool. Format: `projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}`",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+/workloadIdentityPools/[^/]+$",
 "required": true,
@@ -267,7 +267,7 @@
 ],
 "parameters": {
 "name": {
-"description": "Required. Resource name of service account.",
+"description": "Required. Resource name of service account. Format: `projects/-/serviceAccounts/{service_account_email}`",
 "location": "path",
 "pattern": "^projects/[^/]+/serviceAccounts/[^/]+$",
 "required": true,
@@ -340,7 +340,7 @@
 }
 }
 },
-"revision": "20251022",
+"revision": "20260326",
 "rootUrl": "https://iamcredentials.googleapis.com/",
 "schemas": {
 "GenerateAccessTokenRequest": {

googleapiclient/discovery_cache/documents/iap.v1.json

@@ -682,7 +682,7 @@
 }
 }
 },
-"revision": "20260209",
+"revision": "20260317",
 "rootUrl": "https://iap.googleapis.com/",
 "schemas": {
 "AccessDeniedPageSettings": {
@@ -1099,15 +1099,15 @@
 "id": "OAuthSettings",
 "properties": {
 "clientId": {
-"description": "Optional. OAuth 2.0 client ID used in the OAuth flow to generate an access token. If this field is set, you can skip obtaining the OAuth credentials in this step: https://developers.google.com/identity/protocols/OAuth2?hl=en_US#1.-obtain-oauth-2.0-credentials-from-the-google-api-console. However, this could allow for client sharing. The risks of client sharing are outlined here: https://cloud.google.com/iap/docs/sharing-oauth-clients#risks.",
+"description": "Optional. OAuth 2.0 client ID used in the OAuth flow. This allows for client sharing. The risks of client sharing are outlined here: https://cloud.google.com/iap/docs/sharing-oauth-clients#risks.",
 "type": "string"
 },
 "clientSecret": {
-"description": "Optional. Input only. OAuth secret paired with client ID",
+"description": "Optional. Input only. OAuth secret paired with client ID.",
 "type": "string"
 },
 "clientSecretSha256": {
-"description": "Output only. OAuth secret sha256 paired with client ID",
+"description": "Output only. OAuth secret SHA256 paired with client ID.",
 "readOnly": true,
 "type": "string"
 },

googleapiclient/discovery_cache/documents/identitytoolkit.v1.json

@@ -111,7 +111,7 @@
 "accounts": {
 "methods": {
 "createAuthUri": {
-"description": "If an email identifier is specified, checks and returns if any user account is registered with the email. If there is a registered account, fetches all providers associated with the account's email. If the provider ID of an Identity Provider (IdP) is specified, creates an authorization URI for the IdP. The user can be directed to this URI to sign in with the IdP. An [API key](https://cloud.google.com/docs/authentication/api-keys) is required in the request in order to identify the Google Cloud project.",
+"description": "If an email identifier is specified, checks and returns if any user account is registered with the email. If there is a registered account, fetches all providers associated with the account's email. If [email enumeration protection](https://cloud.google.com/identity-platform/docs/admin/email-enumeration-protection) is enabled, this method returns an empty list. If the provider ID of an Identity Provider (IdP) is specified, creates an authorization URI for the IdP. The user can be directed to this URI to sign in with the IdP. An [API key](https://cloud.google.com/docs/authentication/api-keys) is required in the request in order to identify the Google Cloud project.",
 "flatPath": "v1/accounts:createAuthUri",
 "httpMethod": "POST",
 "id": "identitytoolkit.accounts.createAuthUri",
@@ -1239,7 +1239,7 @@
 }
 }
 },
-"revision": "20251024",
+"revision": "20260311",
 "rootUrl": "https://identitytoolkit.googleapis.com/",
 "schemas": {
 "GoogleCloudIdentitytoolkitV1Argon2Parameters": {
@@ -2500,7 +2500,7 @@ true
 "type": "string"
 },
 "safetyNetToken": {
-"description": "Android only. Safety Net has been deprecated. Please use play_integrity_token instead.",
+"description": "Android only. Safety Net has been deprecated. Use play_integrity_token instead.",
 "type": "string"
 },
 "tenantId": {

googleapiclient/discovery_cache/documents/ids.v1.json

@@ -135,7 +135,7 @@
 ]
 },
 "list": {
-"description": "Lists information about the supported locations for this service.",
+"description": "Lists information about the supported locations for this service. This method lists locations based on the resource scope provided in the [ListLocationsRequest.name] field: * **Global locations**: If `name` is empty, the method lists the public locations available to all projects. * **Project-specific locations**: If `name` follows the format `projects/{project}`, the method lists locations visible to that specific project. This includes public, private, or other project-specific locations enabled for the project. For gRPC and client library implementations, the resource name is passed as the `name` field. For direct service calls, the resource name is incorporated into the request path based on the specific service implementation and version.",
 "flatPath": "v1/projects/{projectsId}/locations",
 "httpMethod": "GET",
 "id": "ids.projects.locations.list",
@@ -498,7 +498,7 @@
 }
 }
 },
-"revision": "20251201",
+"revision": "20260330",
 "rootUrl": "https://ids.googleapis.com/",
 "schemas": {
 "CancelOperationRequest": {

googleapiclient/discovery_cache/documents/kmsinventory.v1.json

@@ -306,7 +306,7 @@
 }
 }
 },
-"revision": "20260216",
+"revision": "20260308",
 "rootUrl": "https://kmsinventory.googleapis.com/",
 "schemas": {
 "GoogleCloudKmsInventoryV1ListCryptoKeysResponse": {
@@ -504,7 +504,7 @@
 },
 "keyAccessJustificationsPolicy": {
 "$ref": "GoogleCloudKmsV1KeyAccessJustificationsPolicy",
-"description": "Optional. The policy used for Key Access Justifications Policy Enforcement. If this field is present and this key is enrolled in Key Access Justifications Policy Enforcement, the policy will be evaluated in encrypt, decrypt, and sign operations, and the operation will fail if rejected by the policy. The policy is defined by specifying zero or more allowed justification codes. https://cloud.google.com/assured-workloads/key-access-justifications/docs/justification-codes By default, this field is absent, and all justification codes are allowed."
+"description": "Optional. The policy used for Key Access Justifications Policy Enforcement. If this field is present and this key is enrolled in Key Access Justifications Policy Enforcement, the policy will be evaluated in encrypt, decrypt, and sign operations, and the operation will fail if rejected by the policy. The policy is defined by specifying zero or more allowed justification codes. https://cloud.google.com/assured-workloads/key-access-justifications/docs/justification-codes By default, this field is absent, and all justification codes are allowed. If the `key_access_justifications_policy.allowed_access_reasons` is empty (zero allowed justification code), all encrypt, decrypt, and sign operations will fail."
 },
 "labels": {
 "additionalProperties": {
@@ -937,11 +937,11 @@
 "type": "object"
 },
 "GoogleCloudKmsV1KeyAccessJustificationsPolicy": {
-"description": "A KeyAccessJustificationsPolicy specifies zero or more allowed AccessReason values for encrypt, decrypt, and sign operations on a CryptoKey.",
+"description": "A KeyAccessJustificationsPolicy specifies zero or more allowed AccessReason values for encrypt, decrypt, and sign operations on a CryptoKey or KeyAccessJustificationsPolicyConfig (the default Key Access Justifications policy).",
 "id": "GoogleCloudKmsV1KeyAccessJustificationsPolicy",
 "properties": {
 "allowedAccessReasons": {
-"description": "The list of allowed reasons for access to a CryptoKey. Zero allowed access reasons means all encrypt, decrypt, and sign operations for the CryptoKey associated with this policy will fail.",
+"description": "The list of allowed reasons for access to a CryptoKey. Note that empty allowed_access_reasons has a different meaning depending on where this message appears. If this is under KeyAccessJustificationsPolicyConfig, it means allow-all. If this is under CryptoKey, it means deny-all.",
 "items": {
 "enum": [
 "REASON_UNSPECIFIED",