google-cloud-privilegedaccessmanager 0.1.8__tar.gz → 0.2.0__tar.gz
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- {google_cloud_privilegedaccessmanager-0.1.8/google_cloud_privilegedaccessmanager.egg-info → google_cloud_privilegedaccessmanager-0.2.0}/PKG-INFO +5 -2
- {google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/README.rst +1 -1
- {google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/google/cloud/privilegedaccessmanager/gapic_version.py +1 -1
- {google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/google/cloud/privilegedaccessmanager_v1/gapic_version.py +1 -1
- {google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/google/cloud/privilegedaccessmanager_v1/services/privileged_access_manager/async_client.py +28 -28
- {google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/google/cloud/privilegedaccessmanager_v1/services/privileged_access_manager/client.py +28 -28
- {google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/google/cloud/privilegedaccessmanager_v1/services/privileged_access_manager/transports/base.py +3 -2
- {google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/google/cloud/privilegedaccessmanager_v1/services/privileged_access_manager/transports/grpc.py +28 -27
- {google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/google/cloud/privilegedaccessmanager_v1/services/privileged_access_manager/transports/grpc_asyncio.py +28 -27
- {google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/google/cloud/privilegedaccessmanager_v1/services/privileged_access_manager/transports/rest.py +17 -17
- {google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/google/cloud/privilegedaccessmanager_v1/types/privilegedaccessmanager.py +37 -17
- {google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0/google_cloud_privilegedaccessmanager.egg-info}/PKG-INFO +5 -2
- {google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/google_cloud_privilegedaccessmanager.egg-info/requires.txt +4 -0
- {google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/setup.py +3 -0
- {google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/tests/unit/gapic/privilegedaccessmanager_v1/test_privileged_access_manager.py +2 -0
- {google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/LICENSE +0 -0
- {google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/MANIFEST.in +0 -0
- {google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/google/cloud/privilegedaccessmanager/__init__.py +0 -0
- {google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/google/cloud/privilegedaccessmanager/py.typed +0 -0
- {google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/google/cloud/privilegedaccessmanager_v1/__init__.py +0 -0
- {google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/google/cloud/privilegedaccessmanager_v1/gapic_metadata.json +0 -0
- {google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/google/cloud/privilegedaccessmanager_v1/py.typed +0 -0
- {google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/google/cloud/privilegedaccessmanager_v1/services/__init__.py +0 -0
- {google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/google/cloud/privilegedaccessmanager_v1/services/privileged_access_manager/__init__.py +0 -0
- {google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/google/cloud/privilegedaccessmanager_v1/services/privileged_access_manager/pagers.py +0 -0
- {google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/google/cloud/privilegedaccessmanager_v1/services/privileged_access_manager/transports/__init__.py +0 -0
- {google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/google/cloud/privilegedaccessmanager_v1/services/privileged_access_manager/transports/rest_base.py +0 -0
- {google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/google/cloud/privilegedaccessmanager_v1/types/__init__.py +0 -0
- {google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/google_cloud_privilegedaccessmanager.egg-info/SOURCES.txt +0 -0
- {google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/google_cloud_privilegedaccessmanager.egg-info/dependency_links.txt +0 -0
- {google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/google_cloud_privilegedaccessmanager.egg-info/not-zip-safe +0 -0
- {google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/google_cloud_privilegedaccessmanager.egg-info/top_level.txt +0 -0
- {google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/setup.cfg +0 -0
- {google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/tests/__init__.py +0 -0
- {google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/tests/unit/__init__.py +0 -0
- {google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/tests/unit/gapic/__init__.py +0 -0
- {google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/tests/unit/gapic/privilegedaccessmanager_v1/__init__.py +0 -0
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
Metadata-Version: 2.4
|
|
2
2
|
Name: google-cloud-privilegedaccessmanager
|
|
3
|
-
Version: 0.
|
|
3
|
+
Version: 0.2.0
|
|
4
4
|
Summary: Google Cloud Privilegedaccessmanager API client library
|
|
5
5
|
Home-page: https://github.com/googleapis/google-cloud-python/tree/main/packages/google-cloud-privilegedaccessmanager
|
|
6
6
|
Author: Google LLC
|
|
@@ -19,12 +19,15 @@ Classifier: Programming Language :: Python :: 3.10
|
|
|
19
19
|
Classifier: Programming Language :: Python :: 3.11
|
|
20
20
|
Classifier: Programming Language :: Python :: 3.12
|
|
21
21
|
Classifier: Programming Language :: Python :: 3.13
|
|
22
|
+
Classifier: Programming Language :: Python :: 3.14
|
|
22
23
|
Classifier: Operating System :: OS Independent
|
|
23
24
|
Classifier: Topic :: Internet
|
|
24
25
|
Requires-Python: >=3.7
|
|
25
26
|
License-File: LICENSE
|
|
26
27
|
Requires-Dist: google-api-core[grpc]!=2.0.*,!=2.1.*,!=2.10.*,!=2.2.*,!=2.3.*,!=2.4.*,!=2.5.*,!=2.6.*,!=2.7.*,!=2.8.*,!=2.9.*,<3.0.0,>=1.34.1
|
|
27
28
|
Requires-Dist: google-auth!=2.24.0,!=2.25.0,<3.0.0,>=2.14.1
|
|
29
|
+
Requires-Dist: grpcio<2.0.0,>=1.33.2
|
|
30
|
+
Requires-Dist: grpcio<2.0.0,>=1.75.1; python_version >= "3.14"
|
|
28
31
|
Requires-Dist: proto-plus<2.0.0,>=1.22.3
|
|
29
32
|
Requires-Dist: proto-plus<2.0.0,>=1.25.0; python_version >= "3.13"
|
|
30
33
|
Requires-Dist: protobuf!=4.21.0,!=4.21.1,!=4.21.2,!=4.21.3,!=4.21.4,!=4.21.5,<7.0.0,>=3.20.2
|
|
@@ -103,7 +106,7 @@ Supported Python Versions
|
|
|
103
106
|
Our client libraries are compatible with all current `active`_ and `maintenance`_ versions of
|
|
104
107
|
Python.
|
|
105
108
|
|
|
106
|
-
Python >= 3.7
|
|
109
|
+
Python >= 3.7, including 3.14
|
|
107
110
|
|
|
108
111
|
.. _active: https://devguide.python.org/devcycle/#in-development-main-branch
|
|
109
112
|
.. _maintenance: https://devguide.python.org/devcycle/#maintenance-branches
|
{google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/README.rst
RENAMED
|
@@ -61,7 +61,7 @@ Supported Python Versions
|
|
|
61
61
|
Our client libraries are compatible with all current `active`_ and `maintenance`_ versions of
|
|
62
62
|
Python.
|
|
63
63
|
|
|
64
|
-
Python >= 3.7
|
|
64
|
+
Python >= 3.7, including 3.14
|
|
65
65
|
|
|
66
66
|
.. _active: https://devguide.python.org/devcycle/#in-development-main-branch
|
|
67
67
|
.. _maintenance: https://devguide.python.org/devcycle/#maintenance-branches
|
|
@@ -28,6 +28,7 @@ from typing import (
|
|
|
28
28
|
Type,
|
|
29
29
|
Union,
|
|
30
30
|
)
|
|
31
|
+
import uuid
|
|
31
32
|
|
|
32
33
|
from google.api_core import exceptions as core_exceptions
|
|
33
34
|
from google.api_core import gapic_v1
|
|
@@ -77,24 +78,23 @@ class PrivilegedAccessManagerAsyncClient:
|
|
|
77
78
|
|
|
78
79
|
It defines the following resource model:
|
|
79
80
|
|
|
80
|
-
-
|
|
81
|
-
|
|
81
|
+
- A collection of ``Entitlement`` resources. An entitlement allows
|
|
82
|
+
configuring (among other things):
|
|
82
83
|
|
|
83
|
-
|
|
84
|
-
|
|
85
|
-
|
|
86
|
-
|
|
87
|
-
|
|
88
|
-
access is granted.
|
|
84
|
+
- Some kind of privileged access that users can request.
|
|
85
|
+
- A set of users called *requesters* who can request this access.
|
|
86
|
+
- A maximum duration for which the access can be requested.
|
|
87
|
+
- An optional approval workflow which must be satisfied before
|
|
88
|
+
access is granted.
|
|
89
89
|
|
|
90
|
-
-
|
|
91
|
-
|
|
92
|
-
|
|
90
|
+
- A collection of ``Grant`` resources. A grant is a request by a
|
|
91
|
+
requester to get the privileged access specified in an entitlement
|
|
92
|
+
for some duration.
|
|
93
93
|
|
|
94
|
-
|
|
95
|
-
|
|
96
|
-
|
|
97
|
-
|
|
94
|
+
After the approval workflow as specified in the entitlement is
|
|
95
|
+
satisfied, the specified access is given to the requester. The
|
|
96
|
+
access is automatically taken back after the requested duration is
|
|
97
|
+
over.
|
|
98
98
|
"""
|
|
99
99
|
|
|
100
100
|
_client: PrivilegedAccessManagerClient
|
|
@@ -822,9 +822,9 @@ class PrivilegedAccessManagerAsyncClient:
|
|
|
822
822
|
Required. Name of the parent resource for the
|
|
823
823
|
entitlement. Possible formats:
|
|
824
824
|
|
|
825
|
-
-
|
|
826
|
-
-
|
|
827
|
-
-
|
|
825
|
+
- ``organizations/{organization-number}/locations/{region}``
|
|
826
|
+
- ``folders/{folder-number}/locations/{region}``
|
|
827
|
+
- ``projects/{project-id|project-number}/locations/{region}``
|
|
828
828
|
|
|
829
829
|
This corresponds to the ``parent`` field
|
|
830
830
|
on the ``request`` instance; if ``request`` is provided, this
|
|
@@ -1075,15 +1075,15 @@ class PrivilegedAccessManagerAsyncClient:
|
|
|
1075
1075
|
|
|
1076
1076
|
The following fields are not supported for updates:
|
|
1077
1077
|
|
|
1078
|
-
-
|
|
1079
|
-
-
|
|
1080
|
-
-
|
|
1081
|
-
-
|
|
1082
|
-
-
|
|
1083
|
-
|
|
1084
|
-
-
|
|
1085
|
-
-
|
|
1086
|
-
|
|
1078
|
+
- All immutable fields
|
|
1079
|
+
- Entitlement name
|
|
1080
|
+
- Resource name
|
|
1081
|
+
- Resource type
|
|
1082
|
+
- Adding an approval workflow in an entitlement which previously
|
|
1083
|
+
had no approval workflow.
|
|
1084
|
+
- Deleting the approval workflow from an entitlement.
|
|
1085
|
+
- Adding or deleting a step in the approval workflow (only one
|
|
1086
|
+
step is supported)
|
|
1087
1087
|
|
|
1088
1088
|
Note that updates are allowed on the list of approvers in an
|
|
1089
1089
|
approval workflow step.
|
|
@@ -1138,7 +1138,7 @@ class PrivilegedAccessManagerAsyncClient:
|
|
|
1138
1138
|
fields specified in the update_mask are relative to the
|
|
1139
1139
|
resource and not to the request. (e.g.
|
|
1140
1140
|
``MaxRequestDuration``; *not*
|
|
1141
|
-
``entitlement.MaxRequestDuration``) A value of '
|
|
1141
|
+
``entitlement.MaxRequestDuration``) A value of '\*' for
|
|
1142
1142
|
this field refers to full replacement of the resource.
|
|
1143
1143
|
|
|
1144
1144
|
This corresponds to the ``update_mask`` field
|
|
@@ -32,6 +32,7 @@ from typing import (
|
|
|
32
32
|
Union,
|
|
33
33
|
cast,
|
|
34
34
|
)
|
|
35
|
+
import uuid
|
|
35
36
|
import warnings
|
|
36
37
|
|
|
37
38
|
from google.api_core import client_options as client_options_lib
|
|
@@ -123,24 +124,23 @@ class PrivilegedAccessManagerClient(metaclass=PrivilegedAccessManagerClientMeta)
|
|
|
123
124
|
|
|
124
125
|
It defines the following resource model:
|
|
125
126
|
|
|
126
|
-
-
|
|
127
|
-
|
|
127
|
+
- A collection of ``Entitlement`` resources. An entitlement allows
|
|
128
|
+
configuring (among other things):
|
|
128
129
|
|
|
129
|
-
|
|
130
|
-
|
|
131
|
-
|
|
132
|
-
|
|
133
|
-
|
|
134
|
-
access is granted.
|
|
130
|
+
- Some kind of privileged access that users can request.
|
|
131
|
+
- A set of users called *requesters* who can request this access.
|
|
132
|
+
- A maximum duration for which the access can be requested.
|
|
133
|
+
- An optional approval workflow which must be satisfied before
|
|
134
|
+
access is granted.
|
|
135
135
|
|
|
136
|
-
-
|
|
137
|
-
|
|
138
|
-
|
|
136
|
+
- A collection of ``Grant`` resources. A grant is a request by a
|
|
137
|
+
requester to get the privileged access specified in an entitlement
|
|
138
|
+
for some duration.
|
|
139
139
|
|
|
140
|
-
|
|
141
|
-
|
|
142
|
-
|
|
143
|
-
|
|
140
|
+
After the approval workflow as specified in the entitlement is
|
|
141
|
+
satisfied, the specified access is given to the requester. The
|
|
142
|
+
access is automatically taken back after the requested duration is
|
|
143
|
+
over.
|
|
144
144
|
"""
|
|
145
145
|
|
|
146
146
|
@staticmethod
|
|
@@ -1256,9 +1256,9 @@ class PrivilegedAccessManagerClient(metaclass=PrivilegedAccessManagerClientMeta)
|
|
|
1256
1256
|
Required. Name of the parent resource for the
|
|
1257
1257
|
entitlement. Possible formats:
|
|
1258
1258
|
|
|
1259
|
-
-
|
|
1260
|
-
-
|
|
1261
|
-
-
|
|
1259
|
+
- ``organizations/{organization-number}/locations/{region}``
|
|
1260
|
+
- ``folders/{folder-number}/locations/{region}``
|
|
1261
|
+
- ``projects/{project-id|project-number}/locations/{region}``
|
|
1262
1262
|
|
|
1263
1263
|
This corresponds to the ``parent`` field
|
|
1264
1264
|
on the ``request`` instance; if ``request`` is provided, this
|
|
@@ -1503,15 +1503,15 @@ class PrivilegedAccessManagerClient(metaclass=PrivilegedAccessManagerClientMeta)
|
|
|
1503
1503
|
|
|
1504
1504
|
The following fields are not supported for updates:
|
|
1505
1505
|
|
|
1506
|
-
-
|
|
1507
|
-
-
|
|
1508
|
-
-
|
|
1509
|
-
-
|
|
1510
|
-
-
|
|
1511
|
-
|
|
1512
|
-
-
|
|
1513
|
-
-
|
|
1514
|
-
|
|
1506
|
+
- All immutable fields
|
|
1507
|
+
- Entitlement name
|
|
1508
|
+
- Resource name
|
|
1509
|
+
- Resource type
|
|
1510
|
+
- Adding an approval workflow in an entitlement which previously
|
|
1511
|
+
had no approval workflow.
|
|
1512
|
+
- Deleting the approval workflow from an entitlement.
|
|
1513
|
+
- Adding or deleting a step in the approval workflow (only one
|
|
1514
|
+
step is supported)
|
|
1515
1515
|
|
|
1516
1516
|
Note that updates are allowed on the list of approvers in an
|
|
1517
1517
|
approval workflow step.
|
|
@@ -1566,7 +1566,7 @@ class PrivilegedAccessManagerClient(metaclass=PrivilegedAccessManagerClientMeta)
|
|
|
1566
1566
|
fields specified in the update_mask are relative to the
|
|
1567
1567
|
resource and not to the request. (e.g.
|
|
1568
1568
|
``MaxRequestDuration``; *not*
|
|
1569
|
-
``entitlement.MaxRequestDuration``) A value of '
|
|
1569
|
+
``entitlement.MaxRequestDuration``) A value of '\*' for
|
|
1570
1570
|
this field refers to full replacement of the resource.
|
|
1571
1571
|
|
|
1572
1572
|
This corresponds to the ``update_mask`` field
|
|
@@ -68,9 +68,10 @@ class PrivilegedAccessManagerTransport(abc.ABC):
|
|
|
68
68
|
credentials identify the application to the service; if none
|
|
69
69
|
are specified, the client will attempt to ascertain the
|
|
70
70
|
credentials from the environment.
|
|
71
|
-
credentials_file (Optional[str]): A file with credentials that can
|
|
71
|
+
credentials_file (Optional[str]): Deprecated. A file with credentials that can
|
|
72
72
|
be loaded with :func:`google.auth.load_credentials_from_file`.
|
|
73
|
-
This argument is mutually exclusive with credentials.
|
|
73
|
+
This argument is mutually exclusive with credentials. This argument will be
|
|
74
|
+
removed in the next major version of this library.
|
|
74
75
|
scopes (Optional[Sequence[str]]): A list of scopes.
|
|
75
76
|
quota_project_id (Optional[str]): An optional project to use for billing
|
|
76
77
|
and quota.
|
|
@@ -117,24 +117,23 @@ class PrivilegedAccessManagerGrpcTransport(PrivilegedAccessManagerTransport):
|
|
|
117
117
|
|
|
118
118
|
It defines the following resource model:
|
|
119
119
|
|
|
120
|
-
-
|
|
121
|
-
|
|
120
|
+
- A collection of ``Entitlement`` resources. An entitlement allows
|
|
121
|
+
configuring (among other things):
|
|
122
122
|
|
|
123
|
-
|
|
124
|
-
|
|
125
|
-
|
|
126
|
-
|
|
127
|
-
|
|
128
|
-
access is granted.
|
|
123
|
+
- Some kind of privileged access that users can request.
|
|
124
|
+
- A set of users called *requesters* who can request this access.
|
|
125
|
+
- A maximum duration for which the access can be requested.
|
|
126
|
+
- An optional approval workflow which must be satisfied before
|
|
127
|
+
access is granted.
|
|
129
128
|
|
|
130
|
-
-
|
|
131
|
-
|
|
132
|
-
|
|
129
|
+
- A collection of ``Grant`` resources. A grant is a request by a
|
|
130
|
+
requester to get the privileged access specified in an entitlement
|
|
131
|
+
for some duration.
|
|
133
132
|
|
|
134
|
-
|
|
135
|
-
|
|
136
|
-
|
|
137
|
-
|
|
133
|
+
After the approval workflow as specified in the entitlement is
|
|
134
|
+
satisfied, the specified access is given to the requester. The
|
|
135
|
+
access is automatically taken back after the requested duration is
|
|
136
|
+
over.
|
|
138
137
|
|
|
139
138
|
This class defines the same methods as the primary client, so the
|
|
140
139
|
primary client can load the underlying transport implementation
|
|
@@ -174,9 +173,10 @@ class PrivilegedAccessManagerGrpcTransport(PrivilegedAccessManagerTransport):
|
|
|
174
173
|
are specified, the client will attempt to ascertain the
|
|
175
174
|
credentials from the environment.
|
|
176
175
|
This argument is ignored if a ``channel`` instance is provided.
|
|
177
|
-
credentials_file (Optional[str]): A file with credentials that can
|
|
176
|
+
credentials_file (Optional[str]): Deprecated. A file with credentials that can
|
|
178
177
|
be loaded with :func:`google.auth.load_credentials_from_file`.
|
|
179
178
|
This argument is ignored if a ``channel`` instance is provided.
|
|
179
|
+
This argument will be removed in the next major version of this library.
|
|
180
180
|
scopes (Optional(Sequence[str])): A list of scopes. This argument is
|
|
181
181
|
ignored if a ``channel`` instance is provided.
|
|
182
182
|
channel (Optional[Union[grpc.Channel, Callable[..., grpc.Channel]]]):
|
|
@@ -310,9 +310,10 @@ class PrivilegedAccessManagerGrpcTransport(PrivilegedAccessManagerTransport):
|
|
|
310
310
|
credentials identify this application to the service. If
|
|
311
311
|
none are specified, the client will attempt to ascertain
|
|
312
312
|
the credentials from the environment.
|
|
313
|
-
credentials_file (Optional[str]): A file with credentials that can
|
|
313
|
+
credentials_file (Optional[str]): Deprecated. A file with credentials that can
|
|
314
314
|
be loaded with :func:`google.auth.load_credentials_from_file`.
|
|
315
|
-
This argument is mutually exclusive with credentials.
|
|
315
|
+
This argument is mutually exclusive with credentials. This argument will be
|
|
316
|
+
removed in the next major version of this library.
|
|
316
317
|
scopes (Optional[Sequence[str]]): A optional list of scopes needed for this
|
|
317
318
|
service. These are only used when credentials are not specified and
|
|
318
319
|
are passed to :func:`google.auth.default`.
|
|
@@ -557,15 +558,15 @@ class PrivilegedAccessManagerGrpcTransport(PrivilegedAccessManagerTransport):
|
|
|
557
558
|
|
|
558
559
|
The following fields are not supported for updates:
|
|
559
560
|
|
|
560
|
-
-
|
|
561
|
-
-
|
|
562
|
-
-
|
|
563
|
-
-
|
|
564
|
-
-
|
|
565
|
-
|
|
566
|
-
-
|
|
567
|
-
-
|
|
568
|
-
|
|
561
|
+
- All immutable fields
|
|
562
|
+
- Entitlement name
|
|
563
|
+
- Resource name
|
|
564
|
+
- Resource type
|
|
565
|
+
- Adding an approval workflow in an entitlement which previously
|
|
566
|
+
had no approval workflow.
|
|
567
|
+
- Deleting the approval workflow from an entitlement.
|
|
568
|
+
- Adding or deleting a step in the approval workflow (only one
|
|
569
|
+
step is supported)
|
|
569
570
|
|
|
570
571
|
Note that updates are allowed on the list of approvers in an
|
|
571
572
|
approval workflow step.
|
|
@@ -123,24 +123,23 @@ class PrivilegedAccessManagerGrpcAsyncIOTransport(PrivilegedAccessManagerTranspo
|
|
|
123
123
|
|
|
124
124
|
It defines the following resource model:
|
|
125
125
|
|
|
126
|
-
-
|
|
127
|
-
|
|
126
|
+
- A collection of ``Entitlement`` resources. An entitlement allows
|
|
127
|
+
configuring (among other things):
|
|
128
128
|
|
|
129
|
-
|
|
130
|
-
|
|
131
|
-
|
|
132
|
-
|
|
133
|
-
|
|
134
|
-
access is granted.
|
|
129
|
+
- Some kind of privileged access that users can request.
|
|
130
|
+
- A set of users called *requesters* who can request this access.
|
|
131
|
+
- A maximum duration for which the access can be requested.
|
|
132
|
+
- An optional approval workflow which must be satisfied before
|
|
133
|
+
access is granted.
|
|
135
134
|
|
|
136
|
-
-
|
|
137
|
-
|
|
138
|
-
|
|
135
|
+
- A collection of ``Grant`` resources. A grant is a request by a
|
|
136
|
+
requester to get the privileged access specified in an entitlement
|
|
137
|
+
for some duration.
|
|
139
138
|
|
|
140
|
-
|
|
141
|
-
|
|
142
|
-
|
|
143
|
-
|
|
139
|
+
After the approval workflow as specified in the entitlement is
|
|
140
|
+
satisfied, the specified access is given to the requester. The
|
|
141
|
+
access is automatically taken back after the requested duration is
|
|
142
|
+
over.
|
|
144
143
|
|
|
145
144
|
This class defines the same methods as the primary client, so the
|
|
146
145
|
primary client can load the underlying transport implementation
|
|
@@ -171,8 +170,9 @@ class PrivilegedAccessManagerGrpcAsyncIOTransport(PrivilegedAccessManagerTranspo
|
|
|
171
170
|
credentials identify this application to the service. If
|
|
172
171
|
none are specified, the client will attempt to ascertain
|
|
173
172
|
the credentials from the environment.
|
|
174
|
-
credentials_file (Optional[str]): A file with credentials that can
|
|
175
|
-
be loaded with :func:`google.auth.load_credentials_from_file`.
|
|
173
|
+
credentials_file (Optional[str]): Deprecated. A file with credentials that can
|
|
174
|
+
be loaded with :func:`google.auth.load_credentials_from_file`. This argument will be
|
|
175
|
+
removed in the next major version of this library.
|
|
176
176
|
scopes (Optional[Sequence[str]]): A optional list of scopes needed for this
|
|
177
177
|
service. These are only used when credentials are not specified and
|
|
178
178
|
are passed to :func:`google.auth.default`.
|
|
@@ -223,9 +223,10 @@ class PrivilegedAccessManagerGrpcAsyncIOTransport(PrivilegedAccessManagerTranspo
|
|
|
223
223
|
are specified, the client will attempt to ascertain the
|
|
224
224
|
credentials from the environment.
|
|
225
225
|
This argument is ignored if a ``channel`` instance is provided.
|
|
226
|
-
credentials_file (Optional[str]): A file with credentials that can
|
|
226
|
+
credentials_file (Optional[str]): Deprecated. A file with credentials that can
|
|
227
227
|
be loaded with :func:`google.auth.load_credentials_from_file`.
|
|
228
228
|
This argument is ignored if a ``channel`` instance is provided.
|
|
229
|
+
This argument will be removed in the next major version of this library.
|
|
229
230
|
scopes (Optional[Sequence[str]]): A optional list of scopes needed for this
|
|
230
231
|
service. These are only used when credentials are not specified and
|
|
231
232
|
are passed to :func:`google.auth.default`.
|
|
@@ -568,15 +569,15 @@ class PrivilegedAccessManagerGrpcAsyncIOTransport(PrivilegedAccessManagerTranspo
|
|
|
568
569
|
|
|
569
570
|
The following fields are not supported for updates:
|
|
570
571
|
|
|
571
|
-
-
|
|
572
|
-
-
|
|
573
|
-
-
|
|
574
|
-
-
|
|
575
|
-
-
|
|
576
|
-
|
|
577
|
-
-
|
|
578
|
-
-
|
|
579
|
-
|
|
572
|
+
- All immutable fields
|
|
573
|
+
- Entitlement name
|
|
574
|
+
- Resource name
|
|
575
|
+
- Resource type
|
|
576
|
+
- Adding an approval workflow in an entitlement which previously
|
|
577
|
+
had no approval workflow.
|
|
578
|
+
- Deleting the approval workflow from an entitlement.
|
|
579
|
+
- Adding or deleting a step in the approval workflow (only one
|
|
580
|
+
step is supported)
|
|
580
581
|
|
|
581
582
|
Note that updates are allowed on the list of approvers in an
|
|
582
583
|
approval workflow step.
|
|
@@ -1033,24 +1033,23 @@ class PrivilegedAccessManagerRestTransport(_BasePrivilegedAccessManagerRestTrans
|
|
|
1033
1033
|
|
|
1034
1034
|
It defines the following resource model:
|
|
1035
1035
|
|
|
1036
|
-
-
|
|
1037
|
-
|
|
1036
|
+
- A collection of ``Entitlement`` resources. An entitlement allows
|
|
1037
|
+
configuring (among other things):
|
|
1038
1038
|
|
|
1039
|
-
|
|
1040
|
-
|
|
1041
|
-
|
|
1042
|
-
|
|
1043
|
-
|
|
1044
|
-
access is granted.
|
|
1039
|
+
- Some kind of privileged access that users can request.
|
|
1040
|
+
- A set of users called *requesters* who can request this access.
|
|
1041
|
+
- A maximum duration for which the access can be requested.
|
|
1042
|
+
- An optional approval workflow which must be satisfied before
|
|
1043
|
+
access is granted.
|
|
1045
1044
|
|
|
1046
|
-
-
|
|
1047
|
-
|
|
1048
|
-
|
|
1045
|
+
- A collection of ``Grant`` resources. A grant is a request by a
|
|
1046
|
+
requester to get the privileged access specified in an entitlement
|
|
1047
|
+
for some duration.
|
|
1049
1048
|
|
|
1050
|
-
|
|
1051
|
-
|
|
1052
|
-
|
|
1053
|
-
|
|
1049
|
+
After the approval workflow as specified in the entitlement is
|
|
1050
|
+
satisfied, the specified access is given to the requester. The
|
|
1051
|
+
access is automatically taken back after the requested duration is
|
|
1052
|
+
over.
|
|
1054
1053
|
|
|
1055
1054
|
This class defines the same methods as the primary client, so the
|
|
1056
1055
|
primary client can load the underlying transport implementation
|
|
@@ -1085,9 +1084,10 @@ class PrivilegedAccessManagerRestTransport(_BasePrivilegedAccessManagerRestTrans
|
|
|
1085
1084
|
are specified, the client will attempt to ascertain the
|
|
1086
1085
|
credentials from the environment.
|
|
1087
1086
|
|
|
1088
|
-
credentials_file (Optional[str]): A file with credentials that can
|
|
1087
|
+
credentials_file (Optional[str]): Deprecated. A file with credentials that can
|
|
1089
1088
|
be loaded with :func:`google.auth.load_credentials_from_file`.
|
|
1090
|
-
This argument is ignored if ``channel`` is provided.
|
|
1089
|
+
This argument is ignored if ``channel`` is provided. This argument will be
|
|
1090
|
+
removed in the next major version of this library.
|
|
1091
1091
|
scopes (Optional(Sequence[str])): A list of scopes. This argument is
|
|
1092
1092
|
ignored if ``channel`` is provided.
|
|
1093
1093
|
client_cert_source_for_mtls (Callable[[], Tuple[bytes, bytes]]): Client
|
|
@@ -66,9 +66,9 @@ class CheckOnboardingStatusRequest(proto.Message):
|
|
|
66
66
|
should be checked. Should be in one of the following
|
|
67
67
|
formats:
|
|
68
68
|
|
|
69
|
-
-
|
|
70
|
-
-
|
|
71
|
-
-
|
|
69
|
+
- ``projects/{project-number|project-id}/locations/{region}``
|
|
70
|
+
- ``folders/{folder-number}/locations/{region}``
|
|
71
|
+
- ``organizations/{organization-number}/locations/{region}``
|
|
72
72
|
"""
|
|
73
73
|
|
|
74
74
|
parent: str = proto.Field(
|
|
@@ -151,9 +151,9 @@ class Entitlement(proto.Message):
|
|
|
151
151
|
name (str):
|
|
152
152
|
Identifier. Name of the entitlement. Possible formats:
|
|
153
153
|
|
|
154
|
-
-
|
|
155
|
-
-
|
|
156
|
-
-
|
|
154
|
+
- ``organizations/{organization-number}/locations/{region}/entitlements/{entitlement-id}``
|
|
155
|
+
- ``folders/{folder-number}/locations/{region}/entitlements/{entitlement-id}``
|
|
156
|
+
- ``projects/{project-id|project-number}/locations/{region}/entitlements/{entitlement-id}``
|
|
157
157
|
create_time (google.protobuf.timestamp_pb2.Timestamp):
|
|
158
158
|
Output only. Create time stamp.
|
|
159
159
|
update_time (google.protobuf.timestamp_pb2.Timestamp):
|
|
@@ -406,10 +406,10 @@ class ManualApprovals(proto.Message):
|
|
|
406
406
|
|
|
407
407
|
This can be used to create approval workflows such as:
|
|
408
408
|
|
|
409
|
-
-
|
|
410
|
-
-
|
|
411
|
-
-
|
|
412
|
-
|
|
409
|
+
- Require an approval from any user in a group G.
|
|
410
|
+
- Require an approval from any k number of users from a Group G.
|
|
411
|
+
- Require an approval from any user in a group G and then from a
|
|
412
|
+
user U.
|
|
413
413
|
|
|
414
414
|
A single user might be part of the ``approvers`` ACL for multiple
|
|
415
415
|
steps in this workflow, but they can only approve once and that
|
|
@@ -740,9 +740,9 @@ class CreateEntitlementRequest(proto.Message):
|
|
|
740
740
|
Required. Name of the parent resource for the entitlement.
|
|
741
741
|
Possible formats:
|
|
742
742
|
|
|
743
|
-
-
|
|
744
|
-
-
|
|
745
|
-
-
|
|
743
|
+
- ``organizations/{organization-number}/locations/{region}``
|
|
744
|
+
- ``folders/{folder-number}/locations/{region}``
|
|
745
|
+
- ``projects/{project-id|project-number}/locations/{region}``
|
|
746
746
|
entitlement_id (str):
|
|
747
747
|
Required. The ID to use for this entitlement. This becomes
|
|
748
748
|
the last part of the resource name.
|
|
@@ -859,7 +859,7 @@ class UpdateEntitlementRequest(proto.Message):
|
|
|
859
859
|
contain the entire list of values. The fields specified in
|
|
860
860
|
the update_mask are relative to the resource and not to the
|
|
861
861
|
request. (e.g. ``MaxRequestDuration``; *not*
|
|
862
|
-
``entitlement.MaxRequestDuration``) A value of '
|
|
862
|
+
``entitlement.MaxRequestDuration``) A value of '\*' for this
|
|
863
863
|
field refers to full replacement of the resource.
|
|
864
864
|
"""
|
|
865
865
|
|
|
@@ -883,9 +883,9 @@ class Grant(proto.Message):
|
|
|
883
883
|
name (str):
|
|
884
884
|
Identifier. Name of this grant. Possible formats:
|
|
885
885
|
|
|
886
|
-
-
|
|
887
|
-
-
|
|
888
|
-
-
|
|
886
|
+
- ``organizations/{organization-number}/locations/{region}/entitlements/{entitlement-id}/grants/{grant-id}``
|
|
887
|
+
- ``folders/{folder-number}/locations/{region}/entitlements/{entitlement-id}/grants/{grant-id}``
|
|
888
|
+
- ``projects/{project-id|project-number}/locations/{region}/entitlements/{entitlement-id}/grants/{grant-id}``
|
|
889
889
|
|
|
890
890
|
The last segment of this name (``{grant-id}``) is
|
|
891
891
|
autogenerated.
|
|
@@ -967,6 +967,11 @@ class Grant(proto.Message):
|
|
|
967
967
|
ENDED (11):
|
|
968
968
|
System took back access as the requested
|
|
969
969
|
duration was over. This is a terminal state.
|
|
970
|
+
WITHDRAWING (12):
|
|
971
|
+
Access is being withdrawn.
|
|
972
|
+
WITHDRAWN (13):
|
|
973
|
+
Grant was withdrawn by the grant owner. This
|
|
974
|
+
is a terminal state.
|
|
970
975
|
"""
|
|
971
976
|
STATE_UNSPECIFIED = 0
|
|
972
977
|
APPROVAL_AWAITED = 1
|
|
@@ -979,6 +984,8 @@ class Grant(proto.Message):
|
|
|
979
984
|
REVOKING = 9
|
|
980
985
|
REVOKED = 10
|
|
981
986
|
ENDED = 11
|
|
987
|
+
WITHDRAWING = 12
|
|
988
|
+
WITHDRAWN = 13
|
|
982
989
|
|
|
983
990
|
class Timeline(proto.Message):
|
|
984
991
|
r"""Timeline of a grant describing what happened to it and when.
|
|
@@ -1046,6 +1053,10 @@ class Grant(proto.Message):
|
|
|
1046
1053
|
The policy bindings made by grant have been
|
|
1047
1054
|
modified outside of PAM.
|
|
1048
1055
|
|
|
1056
|
+
This field is a member of `oneof`_ ``event``.
|
|
1057
|
+
withdrawn (google.cloud.privilegedaccessmanager_v1.types.Grant.Timeline.Event.Withdrawn):
|
|
1058
|
+
The grant was withdrawn.
|
|
1059
|
+
|
|
1049
1060
|
This field is a member of `oneof`_ ``event``.
|
|
1050
1061
|
event_time (google.protobuf.timestamp_pb2.Timestamp):
|
|
1051
1062
|
Output only. The time (as recorded at server)
|
|
@@ -1131,6 +1142,9 @@ class Grant(proto.Message):
|
|
|
1131
1142
|
number=2,
|
|
1132
1143
|
)
|
|
1133
1144
|
|
|
1145
|
+
class Withdrawn(proto.Message):
|
|
1146
|
+
r"""An event representing that the grant was withdrawn."""
|
|
1147
|
+
|
|
1134
1148
|
class Scheduled(proto.Message):
|
|
1135
1149
|
r"""An event representing that the grant has been scheduled to be
|
|
1136
1150
|
activated later.
|
|
@@ -1242,6 +1256,12 @@ class Grant(proto.Message):
|
|
|
1242
1256
|
message="Grant.Timeline.Event.ExternallyModified",
|
|
1243
1257
|
)
|
|
1244
1258
|
)
|
|
1259
|
+
withdrawn: "Grant.Timeline.Event.Withdrawn" = proto.Field(
|
|
1260
|
+
proto.MESSAGE,
|
|
1261
|
+
number=13,
|
|
1262
|
+
oneof="event",
|
|
1263
|
+
message="Grant.Timeline.Event.Withdrawn",
|
|
1264
|
+
)
|
|
1245
1265
|
event_time: timestamp_pb2.Timestamp = proto.Field(
|
|
1246
1266
|
proto.MESSAGE,
|
|
1247
1267
|
number=1,
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
Metadata-Version: 2.4
|
|
2
2
|
Name: google-cloud-privilegedaccessmanager
|
|
3
|
-
Version: 0.
|
|
3
|
+
Version: 0.2.0
|
|
4
4
|
Summary: Google Cloud Privilegedaccessmanager API client library
|
|
5
5
|
Home-page: https://github.com/googleapis/google-cloud-python/tree/main/packages/google-cloud-privilegedaccessmanager
|
|
6
6
|
Author: Google LLC
|
|
@@ -19,12 +19,15 @@ Classifier: Programming Language :: Python :: 3.10
|
|
|
19
19
|
Classifier: Programming Language :: Python :: 3.11
|
|
20
20
|
Classifier: Programming Language :: Python :: 3.12
|
|
21
21
|
Classifier: Programming Language :: Python :: 3.13
|
|
22
|
+
Classifier: Programming Language :: Python :: 3.14
|
|
22
23
|
Classifier: Operating System :: OS Independent
|
|
23
24
|
Classifier: Topic :: Internet
|
|
24
25
|
Requires-Python: >=3.7
|
|
25
26
|
License-File: LICENSE
|
|
26
27
|
Requires-Dist: google-api-core[grpc]!=2.0.*,!=2.1.*,!=2.10.*,!=2.2.*,!=2.3.*,!=2.4.*,!=2.5.*,!=2.6.*,!=2.7.*,!=2.8.*,!=2.9.*,<3.0.0,>=1.34.1
|
|
27
28
|
Requires-Dist: google-auth!=2.24.0,!=2.25.0,<3.0.0,>=2.14.1
|
|
29
|
+
Requires-Dist: grpcio<2.0.0,>=1.33.2
|
|
30
|
+
Requires-Dist: grpcio<2.0.0,>=1.75.1; python_version >= "3.14"
|
|
28
31
|
Requires-Dist: proto-plus<2.0.0,>=1.22.3
|
|
29
32
|
Requires-Dist: proto-plus<2.0.0,>=1.25.0; python_version >= "3.13"
|
|
30
33
|
Requires-Dist: protobuf!=4.21.0,!=4.21.1,!=4.21.2,!=4.21.3,!=4.21.4,!=4.21.5,<7.0.0,>=3.20.2
|
|
@@ -103,7 +106,7 @@ Supported Python Versions
|
|
|
103
106
|
Our client libraries are compatible with all current `active`_ and `maintenance`_ versions of
|
|
104
107
|
Python.
|
|
105
108
|
|
|
106
|
-
Python >= 3.7
|
|
109
|
+
Python >= 3.7, including 3.14
|
|
107
110
|
|
|
108
111
|
.. _active: https://devguide.python.org/devcycle/#in-development-main-branch
|
|
109
112
|
.. _maintenance: https://devguide.python.org/devcycle/#maintenance-branches
|
|
@@ -1,7 +1,11 @@
|
|
|
1
1
|
google-api-core[grpc]!=2.0.*,!=2.1.*,!=2.10.*,!=2.2.*,!=2.3.*,!=2.4.*,!=2.5.*,!=2.6.*,!=2.7.*,!=2.8.*,!=2.9.*,<3.0.0,>=1.34.1
|
|
2
2
|
google-auth!=2.24.0,!=2.25.0,<3.0.0,>=2.14.1
|
|
3
|
+
grpcio<2.0.0,>=1.33.2
|
|
3
4
|
proto-plus<2.0.0,>=1.22.3
|
|
4
5
|
protobuf!=4.21.0,!=4.21.1,!=4.21.2,!=4.21.3,!=4.21.4,!=4.21.5,<7.0.0,>=3.20.2
|
|
5
6
|
|
|
6
7
|
[:python_version >= "3.13"]
|
|
7
8
|
proto-plus<2.0.0,>=1.25.0
|
|
9
|
+
|
|
10
|
+
[:python_version >= "3.14"]
|
|
11
|
+
grpcio<2.0.0,>=1.75.1
|
{google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/setup.py
RENAMED
|
@@ -45,6 +45,8 @@ dependencies = [
|
|
|
45
45
|
# Exclude incompatible versions of `google-auth`
|
|
46
46
|
# See https://github.com/googleapis/google-cloud-python/issues/12364
|
|
47
47
|
"google-auth >= 2.14.1, <3.0.0,!=2.24.0,!=2.25.0",
|
|
48
|
+
"grpcio >= 1.33.2, < 2.0.0",
|
|
49
|
+
"grpcio >= 1.75.1, < 2.0.0; python_version >= '3.14'",
|
|
48
50
|
"proto-plus >= 1.22.3, <2.0.0",
|
|
49
51
|
"proto-plus >= 1.25.0, <2.0.0; python_version >= '3.13'",
|
|
50
52
|
"protobuf>=3.20.2,<7.0.0,!=4.21.0,!=4.21.1,!=4.21.2,!=4.21.3,!=4.21.4,!=4.21.5",
|
|
@@ -86,6 +88,7 @@ setuptools.setup(
|
|
|
86
88
|
"Programming Language :: Python :: 3.11",
|
|
87
89
|
"Programming Language :: Python :: 3.12",
|
|
88
90
|
"Programming Language :: Python :: 3.13",
|
|
91
|
+
"Programming Language :: Python :: 3.14",
|
|
89
92
|
"Operating System :: OS Independent",
|
|
90
93
|
"Topic :: Internet",
|
|
91
94
|
],
|
|
@@ -14,6 +14,7 @@
|
|
|
14
14
|
# limitations under the License.
|
|
15
15
|
#
|
|
16
16
|
import os
|
|
17
|
+
import re
|
|
17
18
|
|
|
18
19
|
# try/except added for compatibility with python < 3.8
|
|
19
20
|
try:
|
|
@@ -11371,6 +11372,7 @@ def test_create_grant_rest_call_success(request_type):
|
|
|
11371
11372
|
"expired": {},
|
|
11372
11373
|
"ended": {},
|
|
11373
11374
|
"externally_modified": {},
|
|
11375
|
+
"withdrawn": {},
|
|
11374
11376
|
"event_time": {},
|
|
11375
11377
|
}
|
|
11376
11378
|
]
|
{google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/LICENSE
RENAMED
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
{google_cloud_privilegedaccessmanager-0.1.8 → google_cloud_privilegedaccessmanager-0.2.0}/setup.cfg
RENAMED
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|