From 7a67f90662d3b5149169eb790b31faa0c4164361 Mon Sep 17 00:00:00 2001 From: Yoshi Automation Bot Date: Thu, 18 Jan 2024 08:12:19 +0000 Subject: [PATCH] feat(all): auto-regenerate discovery clients --- androidpublisher/v3/androidpublisher-api.json | 4 +- androidpublisher/v3/androidpublisher-gen.go | 3 +- bigtableadmin/v2/bigtableadmin-api.json | 4 +- bigtableadmin/v2/bigtableadmin-gen.go | 7 +- calendar/v3/calendar-api.json | 38 +++++++-- calendar/v3/calendar-gen.go | 84 ++++++++++++------- .../v1/cloudresourcemanager-api.json | 4 +- .../v1/cloudresourcemanager-gen.go | 40 +++++++-- .../v1beta1/cloudresourcemanager-api.json | 4 +- .../v1beta1/cloudresourcemanager-gen.go | 40 +++++++-- .../v2/cloudresourcemanager-api.json | 4 +- .../v2/cloudresourcemanager-gen.go | 40 +++++++-- .../v2beta1/cloudresourcemanager-api.json | 4 +- .../v2beta1/cloudresourcemanager-gen.go | 40 +++++++-- .../v3/cloudresourcemanager-api.json | 4 +- .../v3/cloudresourcemanager-gen.go | 40 +++++++-- .../v1/contactcenterinsights-api.json | 10 +-- .../v1/contactcenterinsights-gen.go | 28 +++---- content/v2.1/content-api.json | 4 +- content/v2.1/content-gen.go | 8 ++ dataflow/v1b3/dataflow-api.json | 53 ++++++++++-- dataflow/v1b3/dataflow-gen.go | 48 ++++++++++- securitycenter/v1/securitycenter-api.json | 46 ++++++++-- securitycenter/v1/securitycenter-gen.go | 66 +++++++++++++-- .../v1beta1/securitycenter-api.json | 46 ++++++++-- securitycenter/v1beta1/securitycenter-gen.go | 66 +++++++++++++-- .../v1beta2/securitycenter-api.json | 46 ++++++++-- securitycenter/v1beta2/securitycenter-gen.go | 66 +++++++++++++-- 28 files changed, 693 insertions(+), 154 deletions(-) diff --git a/androidpublisher/v3/androidpublisher-api.json b/androidpublisher/v3/androidpublisher-api.json index 7ea16b59c47..729566d99cf 100644 --- a/androidpublisher/v3/androidpublisher-api.json +++ b/androidpublisher/v3/androidpublisher-api.json @@ -4695,7 +4695,7 @@ } } }, - "revision": "20240114", + "revision": "20240117", "rootUrl": "https://androidpublisher.googleapis.com/", "schemas": { "Abi": { @@ -8039,7 +8039,7 @@ "properties": { "proratedRefund": { "$ref": "RevocationContextProratedRefund", - "description": "Optional. Used when users should be refunded a prorated amount they paid for their subscription based on the amount of time remaining in a subscription. Not supported for subscriptions with multiple items." + "description": "Optional. Used when users should be refunded a prorated amount they paid for their subscription based on the amount of time remaining in a subscription." } }, "type": "object" diff --git a/androidpublisher/v3/androidpublisher-gen.go b/androidpublisher/v3/androidpublisher-gen.go index 6fe41b2c601..e20c0e06c56 100644 --- a/androidpublisher/v3/androidpublisher-gen.go +++ b/androidpublisher/v3/androidpublisher-gen.go @@ -6528,8 +6528,7 @@ func (s *ReviewsReplyResponse) MarshalJSON() ([]byte, error) { type RevocationContext struct { // ProratedRefund: Optional. Used when users should be refunded a // prorated amount they paid for their subscription based on the amount - // of time remaining in a subscription. Not supported for subscriptions - // with multiple items. + // of time remaining in a subscription. ProratedRefund *RevocationContextProratedRefund `json:"proratedRefund,omitempty"` // ForceSendFields is a list of field names (e.g. "ProratedRefund") to diff --git a/bigtableadmin/v2/bigtableadmin-api.json b/bigtableadmin/v2/bigtableadmin-api.json index c04b1fdd151..5348b033920 100644 --- a/bigtableadmin/v2/bigtableadmin-api.json +++ b/bigtableadmin/v2/bigtableadmin-api.json @@ -1407,7 +1407,7 @@ ] }, "dropRowRange": { - "description": "Permanently drop/delete a row range from a specified table. The request can specify whether to delete all rows in a table, or only those that match a particular prefix.", + "description": "Permanently drop/delete a row range from a specified table. The request can specify whether to delete all rows in a table, or only those that match a particular prefix. Note that row key prefixes used here are treated as service data. For more information about how service data is handled, see the [Google Cloud Privacy Notice](https://cloud.google.com/terms/cloud-privacy-notice).", "flatPath": "v2/projects/{projectsId}/instances/{instancesId}/tables/{tablesId}:dropRowRange", "httpMethod": "POST", "id": "bigtableadmin.projects.instances.tables.dropRowRange", @@ -1875,7 +1875,7 @@ } } }, - "revision": "20231212", + "revision": "20240110", "rootUrl": "https://bigtableadmin.googleapis.com/", "schemas": { "AppProfile": { diff --git a/bigtableadmin/v2/bigtableadmin-gen.go b/bigtableadmin/v2/bigtableadmin-gen.go index 17e288ffbee..6b4596813b3 100644 --- a/bigtableadmin/v2/bigtableadmin-gen.go +++ b/bigtableadmin/v2/bigtableadmin-gen.go @@ -9456,7 +9456,10 @@ type ProjectsInstancesTablesDropRowRangeCall struct { // DropRowRange: Permanently drop/delete a row range from a specified // table. The request can specify whether to delete all rows in a table, -// or only those that match a particular prefix. +// or only those that match a particular prefix. Note that row key +// prefixes used here are treated as service data. For more information +// about how service data is handled, see the Google Cloud Privacy +// Notice (https://cloud.google.com/terms/cloud-privacy-notice). // // - name: The unique name of the table on which to drop a range of // rows. Values are of the form @@ -9559,7 +9562,7 @@ func (c *ProjectsInstancesTablesDropRowRangeCall) Do(opts ...googleapi.CallOptio } return ret, nil // { - // "description": "Permanently drop/delete a row range from a specified table. The request can specify whether to delete all rows in a table, or only those that match a particular prefix.", + // "description": "Permanently drop/delete a row range from a specified table. The request can specify whether to delete all rows in a table, or only those that match a particular prefix. Note that row key prefixes used here are treated as service data. For more information about how service data is handled, see the [Google Cloud Privacy Notice](https://cloud.google.com/terms/cloud-privacy-notice).", // "flatPath": "v2/projects/{projectsId}/instances/{instancesId}/tables/{tablesId}:dropRowRange", // "httpMethod": "POST", // "id": "bigtableadmin.projects.instances.tables.dropRowRange", diff --git a/calendar/v3/calendar-api.json b/calendar/v3/calendar-api.json index 1a4c3702605..b1141ef3490 100644 --- a/calendar/v3/calendar-api.json +++ b/calendar/v3/calendar-api.json @@ -1077,7 +1077,7 @@ ], "parameters": { "alwaysIncludeEmail": { - "description": "Deprecated and ignored. A value will always be returned in the email field for the organizer, creator and attendees, even if no real email address is available (i.e. a generated, non-working value will be provided).", + "description": "Deprecated and ignored.", "location": "query", "type": "boolean" }, @@ -1088,7 +1088,19 @@ "type": "string" }, "eventTypes": { - "description": "Event types to return. Optional. Possible values are: \n- \"default\" \n- \"focusTime\" \n- \"outOfOffice\" \n- \"workingLocation\"This parameter can be repeated multiple times to return events of different types. The default is [\"default\", \"focusTime\", \"outOfOffice\"].", + "description": "Event types to return. Optional. This parameter can be repeated multiple times to return events of different types. The default is [\"default\", \"focusTime\", \"outOfOffice\"].", + "enum": [ + "default", + "focusTime", + "outOfOffice", + "workingLocation" + ], + "enumDescriptions": [ + "Regular events.", + "Focus time events.", + "Out of office events.", + "Working location events." + ], "location": "query", "repeated": true, "type": "string" @@ -1138,7 +1150,7 @@ "type": "string" }, "q": { - "description": "Free text search terms to find events that match these terms in the following fields:\n\n- summary \n- description \n- location \n- attendee's displayName \n- attendee's email \n- workingLocationProperties.officeLocation.buildingId \n- workingLocationProperties.officeLocation.deskId \n- workingLocationProperties.officeLocation.label \n- workingLocationProperties.customLocation.label \nThese search terms also match predefined keywords against all display title translations of working location, out-of-office, and focus-time events. For example, searching for \"Office\" or \"Bureau\" returns working location events of type officeLocation, whereas searching for \"Out of office\" or \"Abwesend\" returns out-of-office events. Optional.", + "description": "Free text search terms to find events that match these terms in the following fields:\n\n- summary \n- description \n- location \n- attendee's displayName \n- attendee's email \n- organizer's displayName \n- organizer's email \n- workingLocationProperties.officeLocation.buildingId \n- workingLocationProperties.officeLocation.deskId \n- workingLocationProperties.officeLocation.label \n- workingLocationProperties.customLocation.label \nThese search terms also match predefined keywords against all display title translations of working location, out-of-office, and focus-time events. For example, searching for \"Office\" or \"Bureau\" returns working location events of type officeLocation, whereas searching for \"Out of office\" or \"Abwesend\" returns out-of-office events. Optional.", "location": "query", "type": "string" }, @@ -1480,7 +1492,7 @@ ], "parameters": { "alwaysIncludeEmail": { - "description": "Deprecated and ignored. A value will always be returned in the email field for the organizer, creator and attendees, even if no real email address is available (i.e. a generated, non-working value will be provided).", + "description": "Deprecated and ignored.", "location": "query", "type": "boolean" }, @@ -1491,7 +1503,19 @@ "type": "string" }, "eventTypes": { - "description": "Event types to return. Optional. Possible values are: \n- \"default\" \n- \"focusTime\" \n- \"outOfOffice\" \n- \"workingLocation\"This parameter can be repeated multiple times to return events of different types. The default is [\"default\", \"focusTime\", \"outOfOffice\"].", + "description": "Event types to return. Optional. This parameter can be repeated multiple times to return events of different types. The default is [\"default\", \"focusTime\", \"outOfOffice\"].", + "enum": [ + "default", + "focusTime", + "outOfOffice", + "workingLocation" + ], + "enumDescriptions": [ + "Regular events.", + "Focus time events.", + "Out of office events.", + "Working location events." + ], "location": "query", "repeated": true, "type": "string" @@ -1541,7 +1565,7 @@ "type": "string" }, "q": { - "description": "Free text search terms to find events that match these terms in the following fields:\n\n- summary \n- description \n- location \n- attendee's displayName \n- attendee's email \n- workingLocationProperties.officeLocation.buildingId \n- workingLocationProperties.officeLocation.deskId \n- workingLocationProperties.officeLocation.label \n- workingLocationProperties.customLocation.label \nThese search terms also match predefined keywords against all display title translations of working location, out-of-office, and focus-time events. For example, searching for \"Office\" or \"Bureau\" returns working location events of type officeLocation, whereas searching for \"Out of office\" or \"Abwesend\" returns out-of-office events. Optional.", + "description": "Free text search terms to find events that match these terms in the following fields:\n\n- summary \n- description \n- location \n- attendee's displayName \n- attendee's email \n- organizer's displayName \n- organizer's email \n- workingLocationProperties.officeLocation.buildingId \n- workingLocationProperties.officeLocation.deskId \n- workingLocationProperties.officeLocation.label \n- workingLocationProperties.customLocation.label \nThese search terms also match predefined keywords against all display title translations of working location, out-of-office, and focus-time events. For example, searching for \"Office\" or \"Bureau\" returns working location events of type officeLocation, whereas searching for \"Out of office\" or \"Abwesend\" returns out-of-office events. Optional.", "location": "query", "type": "string" }, @@ -1735,7 +1759,7 @@ } } }, - "revision": "20231215", + "revision": "20240111", "rootUrl": "https://www.googleapis.com/", "schemas": { "Acl": { diff --git a/calendar/v3/calendar-gen.go b/calendar/v3/calendar-gen.go index d42c90aedfc..58270d75c54 100644 --- a/calendar/v3/calendar-gen.go +++ b/calendar/v3/calendar-gen.go @@ -7176,23 +7176,23 @@ func (r *EventsService) List(calendarId string) *EventsListCall { } // AlwaysIncludeEmail sets the optional parameter "alwaysIncludeEmail": -// Deprecated and ignored. A value will always be returned in the email -// field for the organizer, creator and attendees, even if no real email -// address is available (i.e. a generated, non-working value will be -// provided). +// Deprecated and ignored. func (c *EventsListCall) AlwaysIncludeEmail(alwaysIncludeEmail bool) *EventsListCall { c.urlParams_.Set("alwaysIncludeEmail", fmt.Sprint(alwaysIncludeEmail)) return c } // EventTypes sets the optional parameter "eventTypes": Event types to -// return. Possible values are: -// - "default" -// - "focusTime" -// - "outOfOffice" -// - "workingLocation"This parameter can be repeated multiple times to -// return events of different types. The default is ["default", -// "focusTime", "outOfOffice"]. +// return. This parameter can be repeated multiple times to return +// events of different types. The default is ["default", "focusTime", +// "outOfOffice"]. +// +// Possible values: +// +// "default" - Regular events. +// "focusTime" - Focus time events. +// "outOfOffice" - Out of office events. +// "workingLocation" - Working location events. func (c *EventsListCall) EventTypes(eventTypes ...string) *EventsListCall { c.urlParams_.SetMulti("eventTypes", append([]string{}, eventTypes...)) return c @@ -7269,6 +7269,8 @@ func (c *EventsListCall) PrivateExtendedProperty(privateExtendedProperty ...stri // - location // - attendee's displayName // - attendee's email +// - organizer's displayName +// - organizer's email // - workingLocationProperties.officeLocation.buildingId // - workingLocationProperties.officeLocation.deskId // - workingLocationProperties.officeLocation.label @@ -7498,7 +7500,7 @@ func (c *EventsListCall) Do(opts ...googleapi.CallOption) (*Events, error) { // ], // "parameters": { // "alwaysIncludeEmail": { - // "description": "Deprecated and ignored. A value will always be returned in the email field for the organizer, creator and attendees, even if no real email address is available (i.e. a generated, non-working value will be provided).", + // "description": "Deprecated and ignored.", // "location": "query", // "type": "boolean" // }, @@ -7509,7 +7511,19 @@ func (c *EventsListCall) Do(opts ...googleapi.CallOption) (*Events, error) { // "type": "string" // }, // "eventTypes": { - // "description": "Event types to return. Optional. Possible values are: \n- \"default\" \n- \"focusTime\" \n- \"outOfOffice\" \n- \"workingLocation\"This parameter can be repeated multiple times to return events of different types. The default is [\"default\", \"focusTime\", \"outOfOffice\"].", + // "description": "Event types to return. Optional. This parameter can be repeated multiple times to return events of different types. The default is [\"default\", \"focusTime\", \"outOfOffice\"].", + // "enum": [ + // "default", + // "focusTime", + // "outOfOffice", + // "workingLocation" + // ], + // "enumDescriptions": [ + // "Regular events.", + // "Focus time events.", + // "Out of office events.", + // "Working location events." + // ], // "location": "query", // "repeated": true, // "type": "string" @@ -7559,7 +7573,7 @@ func (c *EventsListCall) Do(opts ...googleapi.CallOption) (*Events, error) { // "type": "string" // }, // "q": { - // "description": "Free text search terms to find events that match these terms in the following fields:\n\n- summary \n- description \n- location \n- attendee's displayName \n- attendee's email \n- workingLocationProperties.officeLocation.buildingId \n- workingLocationProperties.officeLocation.deskId \n- workingLocationProperties.officeLocation.label \n- workingLocationProperties.customLocation.label \nThese search terms also match predefined keywords against all display title translations of working location, out-of-office, and focus-time events. For example, searching for \"Office\" or \"Bureau\" returns working location events of type officeLocation, whereas searching for \"Out of office\" or \"Abwesend\" returns out-of-office events. Optional.", + // "description": "Free text search terms to find events that match these terms in the following fields:\n\n- summary \n- description \n- location \n- attendee's displayName \n- attendee's email \n- organizer's displayName \n- organizer's email \n- workingLocationProperties.officeLocation.buildingId \n- workingLocationProperties.officeLocation.deskId \n- workingLocationProperties.officeLocation.label \n- workingLocationProperties.customLocation.label \nThese search terms also match predefined keywords against all display title translations of working location, out-of-office, and focus-time events. For example, searching for \"Office\" or \"Bureau\" returns working location events of type officeLocation, whereas searching for \"Out of office\" or \"Abwesend\" returns out-of-office events. Optional.", // "location": "query", // "type": "string" // }, @@ -8609,23 +8623,23 @@ func (r *EventsService) Watch(calendarId string, channel *Channel) *EventsWatchC } // AlwaysIncludeEmail sets the optional parameter "alwaysIncludeEmail": -// Deprecated and ignored. A value will always be returned in the email -// field for the organizer, creator and attendees, even if no real email -// address is available (i.e. a generated, non-working value will be -// provided). +// Deprecated and ignored. func (c *EventsWatchCall) AlwaysIncludeEmail(alwaysIncludeEmail bool) *EventsWatchCall { c.urlParams_.Set("alwaysIncludeEmail", fmt.Sprint(alwaysIncludeEmail)) return c } // EventTypes sets the optional parameter "eventTypes": Event types to -// return. Possible values are: -// - "default" -// - "focusTime" -// - "outOfOffice" -// - "workingLocation"This parameter can be repeated multiple times to -// return events of different types. The default is ["default", -// "focusTime", "outOfOffice"]. +// return. This parameter can be repeated multiple times to return +// events of different types. The default is ["default", "focusTime", +// "outOfOffice"]. +// +// Possible values: +// +// "default" - Regular events. +// "focusTime" - Focus time events. +// "outOfOffice" - Out of office events. +// "workingLocation" - Working location events. func (c *EventsWatchCall) EventTypes(eventTypes ...string) *EventsWatchCall { c.urlParams_.SetMulti("eventTypes", append([]string{}, eventTypes...)) return c @@ -8702,6 +8716,8 @@ func (c *EventsWatchCall) PrivateExtendedProperty(privateExtendedProperty ...str // - location // - attendee's displayName // - attendee's email +// - organizer's displayName +// - organizer's email // - workingLocationProperties.officeLocation.buildingId // - workingLocationProperties.officeLocation.deskId // - workingLocationProperties.officeLocation.label @@ -8923,7 +8939,7 @@ func (c *EventsWatchCall) Do(opts ...googleapi.CallOption) (*Channel, error) { // ], // "parameters": { // "alwaysIncludeEmail": { - // "description": "Deprecated and ignored. A value will always be returned in the email field for the organizer, creator and attendees, even if no real email address is available (i.e. a generated, non-working value will be provided).", + // "description": "Deprecated and ignored.", // "location": "query", // "type": "boolean" // }, @@ -8934,7 +8950,19 @@ func (c *EventsWatchCall) Do(opts ...googleapi.CallOption) (*Channel, error) { // "type": "string" // }, // "eventTypes": { - // "description": "Event types to return. Optional. Possible values are: \n- \"default\" \n- \"focusTime\" \n- \"outOfOffice\" \n- \"workingLocation\"This parameter can be repeated multiple times to return events of different types. The default is [\"default\", \"focusTime\", \"outOfOffice\"].", + // "description": "Event types to return. Optional. This parameter can be repeated multiple times to return events of different types. The default is [\"default\", \"focusTime\", \"outOfOffice\"].", + // "enum": [ + // "default", + // "focusTime", + // "outOfOffice", + // "workingLocation" + // ], + // "enumDescriptions": [ + // "Regular events.", + // "Focus time events.", + // "Out of office events.", + // "Working location events." + // ], // "location": "query", // "repeated": true, // "type": "string" @@ -8984,7 +9012,7 @@ func (c *EventsWatchCall) Do(opts ...googleapi.CallOption) (*Channel, error) { // "type": "string" // }, // "q": { - // "description": "Free text search terms to find events that match these terms in the following fields:\n\n- summary \n- description \n- location \n- attendee's displayName \n- attendee's email \n- workingLocationProperties.officeLocation.buildingId \n- workingLocationProperties.officeLocation.deskId \n- workingLocationProperties.officeLocation.label \n- workingLocationProperties.customLocation.label \nThese search terms also match predefined keywords against all display title translations of working location, out-of-office, and focus-time events. For example, searching for \"Office\" or \"Bureau\" returns working location events of type officeLocation, whereas searching for \"Out of office\" or \"Abwesend\" returns out-of-office events. Optional.", + // "description": "Free text search terms to find events that match these terms in the following fields:\n\n- summary \n- description \n- location \n- attendee's displayName \n- attendee's email \n- organizer's displayName \n- organizer's email \n- workingLocationProperties.officeLocation.buildingId \n- workingLocationProperties.officeLocation.deskId \n- workingLocationProperties.officeLocation.label \n- workingLocationProperties.customLocation.label \nThese search terms also match predefined keywords against all display title translations of working location, out-of-office, and focus-time events. For example, searching for \"Office\" or \"Bureau\" returns working location events of type officeLocation, whereas searching for \"Out of office\" or \"Abwesend\" returns out-of-office events. Optional.", // "location": "query", // "type": "string" // }, diff --git a/cloudresourcemanager/v1/cloudresourcemanager-api.json b/cloudresourcemanager/v1/cloudresourcemanager-api.json index b4b4c615dda..7dd2b85fe52 100644 --- a/cloudresourcemanager/v1/cloudresourcemanager-api.json +++ b/cloudresourcemanager/v1/cloudresourcemanager-api.json @@ -1171,7 +1171,7 @@ } } }, - "revision": "20231022", + "revision": "20240109", "rootUrl": "https://cloudresourcemanager.googleapis.com/", "schemas": { "Ancestor": { @@ -1242,7 +1242,7 @@ "description": "The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies)." }, "members": { - "description": "Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.", + "description": "Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `principal://iam.googleapis.com/locations/global/workforcePools/{pool_id}/subject/{subject_attribute_value}`: A single identity in a workforce identity pool. * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/group/{group_id}`: All workforce identities in a group. * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/attribute.{attribute_name}/{attribute_value}`: All workforce identities with a specific attribute value. * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/*`: All identities in a workforce identity pool. * `principal://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/subject/{subject_attribute_value}`: A single identity in a workload identity pool. * `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/group/{group_id}`: A workload identity pool group. * `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/attribute.{attribute_name}/{attribute_value}`: All identities in a workload identity pool with a certain attribute. * `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/*`: All identities in a workload identity pool. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding. * `deleted:principal://iam.googleapis.com/locations/global/workforcePools/{pool_id}/subject/{subject_attribute_value}`: Deleted single identity in a workforce identity pool. For example, `deleted:principal://iam.googleapis.com/locations/global/workforcePools/my-pool-id/subject/my-subject-attribute-value`.", "items": { "type": "string" }, diff --git a/cloudresourcemanager/v1/cloudresourcemanager-gen.go b/cloudresourcemanager/v1/cloudresourcemanager-gen.go index 52d7f0ef88a..6495a544a45 100644 --- a/cloudresourcemanager/v1/cloudresourcemanager-gen.go +++ b/cloudresourcemanager/v1/cloudresourcemanager-gen.go @@ -379,11 +379,34 @@ type Binding struct { // For example, `admins@example.com`. * `domain:{domain}`: The G Suite // domain (primary) that represents all the users of that domain. For // example, `google.com` or `example.com`. * - // `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus - // unique identifier) representing a user that has been recently - // deleted. For example, `alice@example.com?uid=123456789012345678901`. - // If the user is recovered, this value reverts to `user:{emailid}` and - // the recovered user retains the role in the binding. * + // `principal://iam.googleapis.com/locations/global/workforcePools/{pool_ + // id}/subject/{subject_attribute_value}`: A single identity in a + // workforce identity pool. * + // `principalSet://iam.googleapis.com/locations/global/workforcePools/{po + // ol_id}/group/{group_id}`: All workforce identities in a group. * + // `principalSet://iam.googleapis.com/locations/global/workforcePools/{po + // ol_id}/attribute.{attribute_name}/{attribute_value}`: All workforce + // identities with a specific attribute value. * + // `principalSet://iam.googleapis.com/locations/global/workforcePools/{po + // ol_id}/*`: All identities in a workforce identity pool. * + // `principal://iam.googleapis.com/projects/{project_number}/locations/gl + // obal/workloadIdentityPools/{pool_id}/subject/{subject_attribute_value} + // `: A single identity in a workload identity pool. * + // `principalSet://iam.googleapis.com/projects/{project_number}/locations + // /global/workloadIdentityPools/{pool_id}/group/{group_id}`: A workload + // identity pool group. * + // `principalSet://iam.googleapis.com/projects/{project_number}/locations + // /global/workloadIdentityPools/{pool_id}/attribute.{attribute_name}/{at + // tribute_value}`: All identities in a workload identity pool with a + // certain attribute. * + // `principalSet://iam.googleapis.com/projects/{project_number}/locations + // /global/workloadIdentityPools/{pool_id}/*`: All identities in a + // workload identity pool. * `deleted:user:{emailid}?uid={uniqueid}`: An + // email address (plus unique identifier) representing a user that has + // been recently deleted. For example, + // `alice@example.com?uid=123456789012345678901`. If the user is + // recovered, this value reverts to `user:{emailid}` and the recovered + // user retains the role in the binding. * // `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address // (plus unique identifier) representing a service account that has been // recently deleted. For example, @@ -395,7 +418,12 @@ type Binding struct { // that has been recently deleted. For example, // `admins@example.com?uid=123456789012345678901`. If the group is // recovered, this value reverts to `group:{emailid}` and the recovered - // group retains the role in the binding. + // group retains the role in the binding. * + // `deleted:principal://iam.googleapis.com/locations/global/workforcePool + // s/{pool_id}/subject/{subject_attribute_value}`: Deleted single + // identity in a workforce identity pool. For example, + // `deleted:principal://iam.googleapis.com/locations/global/workforcePool + // s/my-pool-id/subject/my-subject-attribute-value`. Members []string `json:"members,omitempty"` // Role: Role that is assigned to the list of `members`, or principals. diff --git a/cloudresourcemanager/v1beta1/cloudresourcemanager-api.json b/cloudresourcemanager/v1beta1/cloudresourcemanager-api.json index b69d7fd95df..08a1e5a56c8 100644 --- a/cloudresourcemanager/v1beta1/cloudresourcemanager-api.json +++ b/cloudresourcemanager/v1beta1/cloudresourcemanager-api.json @@ -568,7 +568,7 @@ } } }, - "revision": "20231022", + "revision": "20240109", "rootUrl": "https://cloudresourcemanager.googleapis.com/", "schemas": { "Ancestor": { @@ -639,7 +639,7 @@ "description": "The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies)." }, "members": { - "description": "Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.", + "description": "Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `principal://iam.googleapis.com/locations/global/workforcePools/{pool_id}/subject/{subject_attribute_value}`: A single identity in a workforce identity pool. * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/group/{group_id}`: All workforce identities in a group. * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/attribute.{attribute_name}/{attribute_value}`: All workforce identities with a specific attribute value. * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/*`: All identities in a workforce identity pool. * `principal://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/subject/{subject_attribute_value}`: A single identity in a workload identity pool. * `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/group/{group_id}`: A workload identity pool group. * `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/attribute.{attribute_name}/{attribute_value}`: All identities in a workload identity pool with a certain attribute. * `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/*`: All identities in a workload identity pool. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding. * `deleted:principal://iam.googleapis.com/locations/global/workforcePools/{pool_id}/subject/{subject_attribute_value}`: Deleted single identity in a workforce identity pool. For example, `deleted:principal://iam.googleapis.com/locations/global/workforcePools/my-pool-id/subject/my-subject-attribute-value`.", "items": { "type": "string" }, diff --git a/cloudresourcemanager/v1beta1/cloudresourcemanager-gen.go b/cloudresourcemanager/v1beta1/cloudresourcemanager-gen.go index f45c28d52c0..3b7a82f802f 100644 --- a/cloudresourcemanager/v1beta1/cloudresourcemanager-gen.go +++ b/cloudresourcemanager/v1beta1/cloudresourcemanager-gen.go @@ -343,11 +343,34 @@ type Binding struct { // For example, `admins@example.com`. * `domain:{domain}`: The G Suite // domain (primary) that represents all the users of that domain. For // example, `google.com` or `example.com`. * - // `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus - // unique identifier) representing a user that has been recently - // deleted. For example, `alice@example.com?uid=123456789012345678901`. - // If the user is recovered, this value reverts to `user:{emailid}` and - // the recovered user retains the role in the binding. * + // `principal://iam.googleapis.com/locations/global/workforcePools/{pool_ + // id}/subject/{subject_attribute_value}`: A single identity in a + // workforce identity pool. * + // `principalSet://iam.googleapis.com/locations/global/workforcePools/{po + // ol_id}/group/{group_id}`: All workforce identities in a group. * + // `principalSet://iam.googleapis.com/locations/global/workforcePools/{po + // ol_id}/attribute.{attribute_name}/{attribute_value}`: All workforce + // identities with a specific attribute value. * + // `principalSet://iam.googleapis.com/locations/global/workforcePools/{po + // ol_id}/*`: All identities in a workforce identity pool. * + // `principal://iam.googleapis.com/projects/{project_number}/locations/gl + // obal/workloadIdentityPools/{pool_id}/subject/{subject_attribute_value} + // `: A single identity in a workload identity pool. * + // `principalSet://iam.googleapis.com/projects/{project_number}/locations + // /global/workloadIdentityPools/{pool_id}/group/{group_id}`: A workload + // identity pool group. * + // `principalSet://iam.googleapis.com/projects/{project_number}/locations + // /global/workloadIdentityPools/{pool_id}/attribute.{attribute_name}/{at + // tribute_value}`: All identities in a workload identity pool with a + // certain attribute. * + // `principalSet://iam.googleapis.com/projects/{project_number}/locations + // /global/workloadIdentityPools/{pool_id}/*`: All identities in a + // workload identity pool. * `deleted:user:{emailid}?uid={uniqueid}`: An + // email address (plus unique identifier) representing a user that has + // been recently deleted. For example, + // `alice@example.com?uid=123456789012345678901`. If the user is + // recovered, this value reverts to `user:{emailid}` and the recovered + // user retains the role in the binding. * // `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address // (plus unique identifier) representing a service account that has been // recently deleted. For example, @@ -359,7 +382,12 @@ type Binding struct { // that has been recently deleted. For example, // `admins@example.com?uid=123456789012345678901`. If the group is // recovered, this value reverts to `group:{emailid}` and the recovered - // group retains the role in the binding. + // group retains the role in the binding. * + // `deleted:principal://iam.googleapis.com/locations/global/workforcePool + // s/{pool_id}/subject/{subject_attribute_value}`: Deleted single + // identity in a workforce identity pool. For example, + // `deleted:principal://iam.googleapis.com/locations/global/workforcePool + // s/my-pool-id/subject/my-subject-attribute-value`. Members []string `json:"members,omitempty"` // Role: Role that is assigned to the list of `members`, or principals. diff --git a/cloudresourcemanager/v2/cloudresourcemanager-api.json b/cloudresourcemanager/v2/cloudresourcemanager-api.json index 4f6bc40da36..b699c26f6ec 100644 --- a/cloudresourcemanager/v2/cloudresourcemanager-api.json +++ b/cloudresourcemanager/v2/cloudresourcemanager-api.json @@ -450,7 +450,7 @@ } } }, - "revision": "20230806", + "revision": "20240109", "rootUrl": "https://cloudresourcemanager.googleapis.com/", "schemas": { "AuditConfig": { @@ -510,7 +510,7 @@ "description": "The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies)." }, "members": { - "description": "Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.", + "description": "Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `principal://iam.googleapis.com/locations/global/workforcePools/{pool_id}/subject/{subject_attribute_value}`: A single identity in a workforce identity pool. * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/group/{group_id}`: All workforce identities in a group. * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/attribute.{attribute_name}/{attribute_value}`: All workforce identities with a specific attribute value. * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/*`: All identities in a workforce identity pool. * `principal://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/subject/{subject_attribute_value}`: A single identity in a workload identity pool. * `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/group/{group_id}`: A workload identity pool group. * `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/attribute.{attribute_name}/{attribute_value}`: All identities in a workload identity pool with a certain attribute. * `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/*`: All identities in a workload identity pool. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding. * `deleted:principal://iam.googleapis.com/locations/global/workforcePools/{pool_id}/subject/{subject_attribute_value}`: Deleted single identity in a workforce identity pool. For example, `deleted:principal://iam.googleapis.com/locations/global/workforcePools/my-pool-id/subject/my-subject-attribute-value`.", "items": { "type": "string" }, diff --git a/cloudresourcemanager/v2/cloudresourcemanager-gen.go b/cloudresourcemanager/v2/cloudresourcemanager-gen.go index 109bd09649d..51dafc24bc6 100644 --- a/cloudresourcemanager/v2/cloudresourcemanager-gen.go +++ b/cloudresourcemanager/v2/cloudresourcemanager-gen.go @@ -315,11 +315,34 @@ type Binding struct { // For example, `admins@example.com`. * `domain:{domain}`: The G Suite // domain (primary) that represents all the users of that domain. For // example, `google.com` or `example.com`. * - // `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus - // unique identifier) representing a user that has been recently - // deleted. For example, `alice@example.com?uid=123456789012345678901`. - // If the user is recovered, this value reverts to `user:{emailid}` and - // the recovered user retains the role in the binding. * + // `principal://iam.googleapis.com/locations/global/workforcePools/{pool_ + // id}/subject/{subject_attribute_value}`: A single identity in a + // workforce identity pool. * + // `principalSet://iam.googleapis.com/locations/global/workforcePools/{po + // ol_id}/group/{group_id}`: All workforce identities in a group. * + // `principalSet://iam.googleapis.com/locations/global/workforcePools/{po + // ol_id}/attribute.{attribute_name}/{attribute_value}`: All workforce + // identities with a specific attribute value. * + // `principalSet://iam.googleapis.com/locations/global/workforcePools/{po + // ol_id}/*`: All identities in a workforce identity pool. * + // `principal://iam.googleapis.com/projects/{project_number}/locations/gl + // obal/workloadIdentityPools/{pool_id}/subject/{subject_attribute_value} + // `: A single identity in a workload identity pool. * + // `principalSet://iam.googleapis.com/projects/{project_number}/locations + // /global/workloadIdentityPools/{pool_id}/group/{group_id}`: A workload + // identity pool group. * + // `principalSet://iam.googleapis.com/projects/{project_number}/locations + // /global/workloadIdentityPools/{pool_id}/attribute.{attribute_name}/{at + // tribute_value}`: All identities in a workload identity pool with a + // certain attribute. * + // `principalSet://iam.googleapis.com/projects/{project_number}/locations + // /global/workloadIdentityPools/{pool_id}/*`: All identities in a + // workload identity pool. * `deleted:user:{emailid}?uid={uniqueid}`: An + // email address (plus unique identifier) representing a user that has + // been recently deleted. For example, + // `alice@example.com?uid=123456789012345678901`. If the user is + // recovered, this value reverts to `user:{emailid}` and the recovered + // user retains the role in the binding. * // `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address // (plus unique identifier) representing a service account that has been // recently deleted. For example, @@ -331,7 +354,12 @@ type Binding struct { // that has been recently deleted. For example, // `admins@example.com?uid=123456789012345678901`. If the group is // recovered, this value reverts to `group:{emailid}` and the recovered - // group retains the role in the binding. + // group retains the role in the binding. * + // `deleted:principal://iam.googleapis.com/locations/global/workforcePool + // s/{pool_id}/subject/{subject_attribute_value}`: Deleted single + // identity in a workforce identity pool. For example, + // `deleted:principal://iam.googleapis.com/locations/global/workforcePool + // s/my-pool-id/subject/my-subject-attribute-value`. Members []string `json:"members,omitempty"` // Role: Role that is assigned to the list of `members`, or principals. diff --git a/cloudresourcemanager/v2beta1/cloudresourcemanager-api.json b/cloudresourcemanager/v2beta1/cloudresourcemanager-api.json index b335bc9571c..8184603285b 100644 --- a/cloudresourcemanager/v2beta1/cloudresourcemanager-api.json +++ b/cloudresourcemanager/v2beta1/cloudresourcemanager-api.json @@ -450,7 +450,7 @@ } } }, - "revision": "20230806", + "revision": "20240109", "rootUrl": "https://cloudresourcemanager.googleapis.com/", "schemas": { "AuditConfig": { @@ -510,7 +510,7 @@ "description": "The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies)." }, "members": { - "description": "Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.", + "description": "Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `principal://iam.googleapis.com/locations/global/workforcePools/{pool_id}/subject/{subject_attribute_value}`: A single identity in a workforce identity pool. * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/group/{group_id}`: All workforce identities in a group. * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/attribute.{attribute_name}/{attribute_value}`: All workforce identities with a specific attribute value. * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/*`: All identities in a workforce identity pool. * `principal://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/subject/{subject_attribute_value}`: A single identity in a workload identity pool. * `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/group/{group_id}`: A workload identity pool group. * `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/attribute.{attribute_name}/{attribute_value}`: All identities in a workload identity pool with a certain attribute. * `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/*`: All identities in a workload identity pool. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding. * `deleted:principal://iam.googleapis.com/locations/global/workforcePools/{pool_id}/subject/{subject_attribute_value}`: Deleted single identity in a workforce identity pool. For example, `deleted:principal://iam.googleapis.com/locations/global/workforcePools/my-pool-id/subject/my-subject-attribute-value`.", "items": { "type": "string" }, diff --git a/cloudresourcemanager/v2beta1/cloudresourcemanager-gen.go b/cloudresourcemanager/v2beta1/cloudresourcemanager-gen.go index 934770c4ba8..71db549d5f6 100644 --- a/cloudresourcemanager/v2beta1/cloudresourcemanager-gen.go +++ b/cloudresourcemanager/v2beta1/cloudresourcemanager-gen.go @@ -315,11 +315,34 @@ type Binding struct { // For example, `admins@example.com`. * `domain:{domain}`: The G Suite // domain (primary) that represents all the users of that domain. For // example, `google.com` or `example.com`. * - // `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus - // unique identifier) representing a user that has been recently - // deleted. For example, `alice@example.com?uid=123456789012345678901`. - // If the user is recovered, this value reverts to `user:{emailid}` and - // the recovered user retains the role in the binding. * + // `principal://iam.googleapis.com/locations/global/workforcePools/{pool_ + // id}/subject/{subject_attribute_value}`: A single identity in a + // workforce identity pool. * + // `principalSet://iam.googleapis.com/locations/global/workforcePools/{po + // ol_id}/group/{group_id}`: All workforce identities in a group. * + // `principalSet://iam.googleapis.com/locations/global/workforcePools/{po + // ol_id}/attribute.{attribute_name}/{attribute_value}`: All workforce + // identities with a specific attribute value. * + // `principalSet://iam.googleapis.com/locations/global/workforcePools/{po + // ol_id}/*`: All identities in a workforce identity pool. * + // `principal://iam.googleapis.com/projects/{project_number}/locations/gl + // obal/workloadIdentityPools/{pool_id}/subject/{subject_attribute_value} + // `: A single identity in a workload identity pool. * + // `principalSet://iam.googleapis.com/projects/{project_number}/locations + // /global/workloadIdentityPools/{pool_id}/group/{group_id}`: A workload + // identity pool group. * + // `principalSet://iam.googleapis.com/projects/{project_number}/locations + // /global/workloadIdentityPools/{pool_id}/attribute.{attribute_name}/{at + // tribute_value}`: All identities in a workload identity pool with a + // certain attribute. * + // `principalSet://iam.googleapis.com/projects/{project_number}/locations + // /global/workloadIdentityPools/{pool_id}/*`: All identities in a + // workload identity pool. * `deleted:user:{emailid}?uid={uniqueid}`: An + // email address (plus unique identifier) representing a user that has + // been recently deleted. For example, + // `alice@example.com?uid=123456789012345678901`. If the user is + // recovered, this value reverts to `user:{emailid}` and the recovered + // user retains the role in the binding. * // `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address // (plus unique identifier) representing a service account that has been // recently deleted. For example, @@ -331,7 +354,12 @@ type Binding struct { // that has been recently deleted. For example, // `admins@example.com?uid=123456789012345678901`. If the group is // recovered, this value reverts to `group:{emailid}` and the recovered - // group retains the role in the binding. + // group retains the role in the binding. * + // `deleted:principal://iam.googleapis.com/locations/global/workforcePool + // s/{pool_id}/subject/{subject_attribute_value}`: Deleted single + // identity in a workforce identity pool. For example, + // `deleted:principal://iam.googleapis.com/locations/global/workforcePool + // s/my-pool-id/subject/my-subject-attribute-value`. Members []string `json:"members,omitempty"` // Role: Role that is assigned to the list of `members`, or principals. diff --git a/cloudresourcemanager/v3/cloudresourcemanager-api.json b/cloudresourcemanager/v3/cloudresourcemanager-api.json index d19bc7330bd..998f3bd8d59 100644 --- a/cloudresourcemanager/v3/cloudresourcemanager-api.json +++ b/cloudresourcemanager/v3/cloudresourcemanager-api.json @@ -1805,7 +1805,7 @@ } } }, - "revision": "20231022", + "revision": "20240109", "rootUrl": "https://cloudresourcemanager.googleapis.com/", "schemas": { "AuditConfig": { @@ -1865,7 +1865,7 @@ "description": "The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies)." }, "members": { - "description": "Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.", + "description": "Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `principal://iam.googleapis.com/locations/global/workforcePools/{pool_id}/subject/{subject_attribute_value}`: A single identity in a workforce identity pool. * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/group/{group_id}`: All workforce identities in a group. * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/attribute.{attribute_name}/{attribute_value}`: All workforce identities with a specific attribute value. * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/*`: All identities in a workforce identity pool. * `principal://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/subject/{subject_attribute_value}`: A single identity in a workload identity pool. * `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/group/{group_id}`: A workload identity pool group. * `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/attribute.{attribute_name}/{attribute_value}`: All identities in a workload identity pool with a certain attribute. * `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/*`: All identities in a workload identity pool. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding. * `deleted:principal://iam.googleapis.com/locations/global/workforcePools/{pool_id}/subject/{subject_attribute_value}`: Deleted single identity in a workforce identity pool. For example, `deleted:principal://iam.googleapis.com/locations/global/workforcePools/my-pool-id/subject/my-subject-attribute-value`.", "items": { "type": "string" }, diff --git a/cloudresourcemanager/v3/cloudresourcemanager-gen.go b/cloudresourcemanager/v3/cloudresourcemanager-gen.go index 44e9a1d6cdc..9ff6796ea84 100644 --- a/cloudresourcemanager/v3/cloudresourcemanager-gen.go +++ b/cloudresourcemanager/v3/cloudresourcemanager-gen.go @@ -411,11 +411,34 @@ type Binding struct { // For example, `admins@example.com`. * `domain:{domain}`: The G Suite // domain (primary) that represents all the users of that domain. For // example, `google.com` or `example.com`. * - // `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus - // unique identifier) representing a user that has been recently - // deleted. For example, `alice@example.com?uid=123456789012345678901`. - // If the user is recovered, this value reverts to `user:{emailid}` and - // the recovered user retains the role in the binding. * + // `principal://iam.googleapis.com/locations/global/workforcePools/{pool_ + // id}/subject/{subject_attribute_value}`: A single identity in a + // workforce identity pool. * + // `principalSet://iam.googleapis.com/locations/global/workforcePools/{po + // ol_id}/group/{group_id}`: All workforce identities in a group. * + // `principalSet://iam.googleapis.com/locations/global/workforcePools/{po + // ol_id}/attribute.{attribute_name}/{attribute_value}`: All workforce + // identities with a specific attribute value. * + // `principalSet://iam.googleapis.com/locations/global/workforcePools/{po + // ol_id}/*`: All identities in a workforce identity pool. * + // `principal://iam.googleapis.com/projects/{project_number}/locations/gl + // obal/workloadIdentityPools/{pool_id}/subject/{subject_attribute_value} + // `: A single identity in a workload identity pool. * + // `principalSet://iam.googleapis.com/projects/{project_number}/locations + // /global/workloadIdentityPools/{pool_id}/group/{group_id}`: A workload + // identity pool group. * + // `principalSet://iam.googleapis.com/projects/{project_number}/locations + // /global/workloadIdentityPools/{pool_id}/attribute.{attribute_name}/{at + // tribute_value}`: All identities in a workload identity pool with a + // certain attribute. * + // `principalSet://iam.googleapis.com/projects/{project_number}/locations + // /global/workloadIdentityPools/{pool_id}/*`: All identities in a + // workload identity pool. * `deleted:user:{emailid}?uid={uniqueid}`: An + // email address (plus unique identifier) representing a user that has + // been recently deleted. For example, + // `alice@example.com?uid=123456789012345678901`. If the user is + // recovered, this value reverts to `user:{emailid}` and the recovered + // user retains the role in the binding. * // `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address // (plus unique identifier) representing a service account that has been // recently deleted. For example, @@ -427,7 +450,12 @@ type Binding struct { // that has been recently deleted. For example, // `admins@example.com?uid=123456789012345678901`. If the group is // recovered, this value reverts to `group:{emailid}` and the recovered - // group retains the role in the binding. + // group retains the role in the binding. * + // `deleted:principal://iam.googleapis.com/locations/global/workforcePool + // s/{pool_id}/subject/{subject_attribute_value}`: Deleted single + // identity in a workforce identity pool. For example, + // `deleted:principal://iam.googleapis.com/locations/global/workforcePool + // s/my-pool-id/subject/my-subject-attribute-value`. Members []string `json:"members,omitempty"` // Role: Role that is assigned to the list of `members`, or principals. diff --git a/contactcenterinsights/v1/contactcenterinsights-api.json b/contactcenterinsights/v1/contactcenterinsights-api.json index 40f61e3e725..afce2a4cec6 100644 --- a/contactcenterinsights/v1/contactcenterinsights-api.json +++ b/contactcenterinsights/v1/contactcenterinsights-api.json @@ -1412,7 +1412,7 @@ } } }, - "revision": "20240102", + "revision": "20240115", "rootUrl": "https://contactcenterinsights.googleapis.com/", "schemas": { "GoogleCloudContactcenterinsightsV1Analysis": { @@ -2914,7 +2914,7 @@ "id": "GoogleCloudContactcenterinsightsV1IngestConversationsRequestConversationConfig", "properties": { "agentChannel": { - "description": "Optional. For audio conversations, this field indicates which of the channels, 1 or 2, contains the agent. Note that this must be set for audio conversations to be properly displayed and analyzed.", + "description": "Optional. Indicates which of the channels, 1 or 2, contains the agent. Note that this must be set for conversations to be properly displayed and analyzed.", "format": "int32", "type": "integer" }, @@ -2923,7 +2923,7 @@ "type": "string" }, "customerChannel": { - "description": "Optional. For audio conversations, this field indicates which of the channels, 1 or 2, contains the customer. Note that this must be set for audio conversations to be properly displayed and analyzed.", + "description": "Optional. Indicates which of the channels, 1 or 2, contains the agent. Note that this must be set for conversations to be properly displayed and analyzed.", "format": "int32", "type": "integer" } @@ -5255,7 +5255,7 @@ "id": "GoogleCloudContactcenterinsightsV1alpha1IngestConversationsRequestConversationConfig", "properties": { "agentChannel": { - "description": "Optional. For audio conversations, this field indicates which of the channels, 1 or 2, contains the agent. Note that this must be set for audio conversations to be properly displayed and analyzed.", + "description": "Optional. Indicates which of the channels, 1 or 2, contains the agent. Note that this must be set for conversations to be properly displayed and analyzed.", "format": "int32", "type": "integer" }, @@ -5264,7 +5264,7 @@ "type": "string" }, "customerChannel": { - "description": "Optional. For audio conversations, this field indicates which of the channels, 1 or 2, contains the customer. Note that this must be set for audio conversations to be properly displayed and analyzed.", + "description": "Optional. Indicates which of the channels, 1 or 2, contains the agent. Note that this must be set for conversations to be properly displayed and analyzed.", "format": "int32", "type": "integer" } diff --git a/contactcenterinsights/v1/contactcenterinsights-gen.go b/contactcenterinsights/v1/contactcenterinsights-gen.go index cb11bf57690..446bb0797bd 100644 --- a/contactcenterinsights/v1/contactcenterinsights-gen.go +++ b/contactcenterinsights/v1/contactcenterinsights-gen.go @@ -2648,20 +2648,18 @@ func (s *GoogleCloudContactcenterinsightsV1IngestConversationsRequest) MarshalJS // GoogleCloudContactcenterinsightsV1IngestConversationsRequestConversati // onConfig: Configuration that applies to all conversations. type GoogleCloudContactcenterinsightsV1IngestConversationsRequestConversationConfig struct { - // AgentChannel: Optional. For audio conversations, this field indicates - // which of the channels, 1 or 2, contains the agent. Note that this - // must be set for audio conversations to be properly displayed and - // analyzed. + // AgentChannel: Optional. Indicates which of the channels, 1 or 2, + // contains the agent. Note that this must be set for conversations to + // be properly displayed and analyzed. AgentChannel int64 `json:"agentChannel,omitempty"` // AgentId: An opaque, user-specified string representing the human // agent who handled the conversations. AgentId string `json:"agentId,omitempty"` - // CustomerChannel: Optional. For audio conversations, this field - // indicates which of the channels, 1 or 2, contains the customer. Note - // that this must be set for audio conversations to be properly - // displayed and analyzed. + // CustomerChannel: Optional. Indicates which of the channels, 1 or 2, + // contains the agent. Note that this must be set for conversations to + // be properly displayed and analyzed. CustomerChannel int64 `json:"customerChannel,omitempty"` // ForceSendFields is a list of field names (e.g. "AgentChannel") to @@ -6472,20 +6470,18 @@ func (s *GoogleCloudContactcenterinsightsV1alpha1IngestConversationsRequest) Mar // GoogleCloudContactcenterinsightsV1alpha1IngestConversationsRequestConv // ersationConfig: Configuration that applies to all conversations. type GoogleCloudContactcenterinsightsV1alpha1IngestConversationsRequestConversationConfig struct { - // AgentChannel: Optional. For audio conversations, this field indicates - // which of the channels, 1 or 2, contains the agent. Note that this - // must be set for audio conversations to be properly displayed and - // analyzed. + // AgentChannel: Optional. Indicates which of the channels, 1 or 2, + // contains the agent. Note that this must be set for conversations to + // be properly displayed and analyzed. AgentChannel int64 `json:"agentChannel,omitempty"` // AgentId: An opaque, user-specified string representing the human // agent who handled the conversations. AgentId string `json:"agentId,omitempty"` - // CustomerChannel: Optional. For audio conversations, this field - // indicates which of the channels, 1 or 2, contains the customer. Note - // that this must be set for audio conversations to be properly - // displayed and analyzed. + // CustomerChannel: Optional. Indicates which of the channels, 1 or 2, + // contains the agent. Note that this must be set for conversations to + // be properly displayed and analyzed. CustomerChannel int64 `json:"customerChannel,omitempty"` // ForceSendFields is a list of field names (e.g. "AgentChannel") to diff --git a/content/v2.1/content-api.json b/content/v2.1/content-api.json index c3086a31517..848b60210c1 100644 --- a/content/v2.1/content-api.json +++ b/content/v2.1/content-api.json @@ -6315,7 +6315,7 @@ } } }, - "revision": "20240113", + "revision": "20240116", "rootUrl": "https://shoppingcontent.googleapis.com/", "schemas": { "Account": { @@ -13717,7 +13717,7 @@ "type": "string" }, "matchingStatusHint": { - "description": "Output only. The hint of why the matching has failed. This is only set when matching_status=failed. Possible values are: - \"`linked-store-not-found`\": There aren't any Google Business Profile stores available for matching. Connect your Merchant Center account with the Google Business Profile account. Or add a new Google Business Profile store corresponding to the POS store. - \"`store-match-not-found`\": The provided POS store couldn't be matched to any of the connected Google Business Profile stores. Merchant Center account is connected correctly and stores are available on Google Business Profile, but POS store location address does not match with Google Business Profile stores' addresses. Update POS store address or Google Business Profile store address to match correctly. ", + "description": "Output only. The hint of why the matching has failed. This is only set when matching_status=failed. Possible values are: - \"`linked-store-not-found`\": There aren't any Google Business Profile stores available for matching. Connect your Merchant Center account with the Google Business Profile account. Or add a new Google Business Profile store corresponding to the POS store. - \"`store-match-not-found`\": The provided POS store couldn't be matched to any of the connected Google Business Profile stores. Merchant Center account is connected correctly and stores are available on Google Business Profile, but POS store location address does not match with Google Business Profile stores' addresses. Update POS store address or Google Business Profile store address to match correctly. - \"`store-match-unverified`\": The provided POS store couldn't be matched to any of the connected Google Business Profile stores, as the matched Google Business Profile store is unverified. Go through the Google Business Profile verification process to match correctly. - \"`store-match-unavailable`\": The provided POS store couldn't be matched to any of the connected Google Business Profile stores, as the matched Google Business Profile store is in an invalid state. Fix any issues on your Google Business Profile store to match correctly. ", "readOnly": true, "type": "string" }, diff --git a/content/v2.1/content-gen.go b/content/v2.1/content-gen.go index 49f9dd59e97..f896d739ee0 100644 --- a/content/v2.1/content-gen.go +++ b/content/v2.1/content-gen.go @@ -13520,6 +13520,14 @@ type PosStore struct { // Google Business Profile, but POS store location address does not // match with Google Business Profile stores' addresses. Update POS // store address or Google Business Profile store address to match + // correctly. - "store-match-unverified": The provided POS store + // couldn't be matched to any of the connected Google Business Profile + // stores, as the matched Google Business Profile store is unverified. + // Go through the Google Business Profile verification process to match + // correctly. - "store-match-unavailable": The provided POS store + // couldn't be matched to any of the connected Google Business Profile + // stores, as the matched Google Business Profile store is in an invalid + // state. Fix any issues on your Google Business Profile store to match // correctly. MatchingStatusHint string `json:"matchingStatusHint,omitempty"` diff --git a/dataflow/v1b3/dataflow-api.json b/dataflow/v1b3/dataflow-api.json index 489ef495f02..ed461b7b393 100644 --- a/dataflow/v1b3/dataflow-api.json +++ b/dataflow/v1b3/dataflow-api.json @@ -2221,7 +2221,7 @@ } } }, - "revision": "20240107", + "revision": "20240113", "rootUrl": "https://dataflow.googleapis.com/", "schemas": { "ApproximateProgress": { @@ -3577,6 +3577,20 @@ "description": "The Cloud Storage path for staging local files. Must be a valid Cloud Storage URL, beginning with `gs://`.", "type": "string" }, + "streamingMode": { + "description": "Optional. Specifies the Streaming Engine message processing guarantees. Reduces cost and latency but might result in duplicate messages committed to storage. Designed to run simple mapping streaming ETL jobs at the lowest cost. For example, Change Data Capture (CDC) to BigQuery is a canonical use case.", + "enum": [ + "STREAMING_MODE_UNSPECIFIED", + "STREAMING_MODE_EXACTLY_ONCE", + "STREAMING_MODE_AT_LEAST_ONCE" + ], + "enumDescriptions": [ + "Run in the default mode.", + "In this mode, message deduplication is performed against persistent state to make sure each message is processed and committed to storage exactly once.", + "Message deduplication is not performed. Messages might be processed multiple times, and the results are applied multiple times. Note: Setting this value also enables Streaming Engine and Streaming Engine resource-based billing." + ], + "type": "string" + }, "subnetwork": { "description": "Subnetwork to which VMs will be assigned, if desired. You can specify a subnetwork using either a complete URL or an abbreviated path. Expected to be of the form \"https://www.googleapis.com/compute/v1/projects/HOST_PROJECT_ID/regions/REGION/subnetworks/SUBNETWORK\" or \"regions/REGION/subnetworks/SUBNETWORK\". If the subnetwork is located in a Shared VPC network, you must use the complete URL.", "type": "string" @@ -5504,6 +5518,20 @@ "description": "Optional. The email address of the service account to run the job as.", "type": "string" }, + "streamingMode": { + "description": "Optional. Specifies the Streaming Engine message processing guarantees. Reduces cost and latency but might result in duplicate messages committed to storage. Designed to run simple mapping streaming ETL jobs at the lowest cost. For example, Change Data Capture (CDC) to BigQuery is a canonical use case.", + "enum": [ + "STREAMING_MODE_UNSPECIFIED", + "STREAMING_MODE_EXACTLY_ONCE", + "STREAMING_MODE_AT_LEAST_ONCE" + ], + "enumDescriptions": [ + "Run in the default mode.", + "In this mode, message deduplication is performed against persistent state to make sure each message is processed and committed to storage exactly once.", + "Message deduplication is not performed. Messages might be processed multiple times, and the results are applied multiple times. Note: Setting this value also enables Streaming Engine and Streaming Engine resource-based billing." + ], + "type": "string" + }, "subnetwork": { "description": "Optional. Subnetwork to which VMs will be assigned, if desired. You can specify a subnetwork using either a complete URL or an abbreviated path. Expected to be of the form \"https://www.googleapis.com/compute/v1/projects/HOST_PROJECT_ID/regions/REGION/subnetworks/SUBNETWORK\" or \"regions/REGION/subnetworks/SUBNETWORK\". If the subnetwork is located in a Shared VPC network, you must use the complete URL.", "type": "string" @@ -6694,7 +6722,7 @@ "id": "StreamingScalingReport", "properties": { "activeBundleCount": { - "description": "Current acive bundle count.", + "deprecated": true, "format": "int32", "type": "integer" }, @@ -6704,12 +6732,17 @@ "type": "integer" }, "maximumBundleCount": { - "description": "Maximum bundle count limit.", + "description": "Maximum bundle count.", "format": "int32", "type": "integer" }, + "maximumBytes": { + "description": "Maximum bytes.", + "format": "int64", + "type": "string" + }, "maximumBytesCount": { - "description": "Maximum bytes count limit.", + "deprecated": true, "format": "int32", "type": "integer" }, @@ -6718,8 +6751,18 @@ "format": "int32", "type": "integer" }, + "outstandingBundleCount": { + "description": "Current outstanding bundle count.", + "format": "int32", + "type": "integer" + }, + "outstandingBytes": { + "description": "Current outstanding bytes.", + "format": "int64", + "type": "string" + }, "outstandingBytesCount": { - "description": "Current outstanding bytes count.", + "deprecated": true, "format": "int32", "type": "integer" } diff --git a/dataflow/v1b3/dataflow-gen.go b/dataflow/v1b3/dataflow-gen.go index 05df7cae35a..381b8f9f545 100644 --- a/dataflow/v1b3/dataflow-gen.go +++ b/dataflow/v1b3/dataflow-gen.go @@ -2429,6 +2429,23 @@ type FlexTemplateRuntimeEnvironment struct { // be a valid Cloud Storage URL, beginning with `gs://`. StagingLocation string `json:"stagingLocation,omitempty"` + // StreamingMode: Optional. Specifies the Streaming Engine message + // processing guarantees. Reduces cost and latency but might result in + // duplicate messages committed to storage. Designed to run simple + // mapping streaming ETL jobs at the lowest cost. For example, Change + // Data Capture (CDC) to BigQuery is a canonical use case. + // + // Possible values: + // "STREAMING_MODE_UNSPECIFIED" - Run in the default mode. + // "STREAMING_MODE_EXACTLY_ONCE" - In this mode, message deduplication + // is performed against persistent state to make sure each message is + // processed and committed to storage exactly once. + // "STREAMING_MODE_AT_LEAST_ONCE" - Message deduplication is not + // performed. Messages might be processed multiple times, and the + // results are applied multiple times. Note: Setting this value also + // enables Streaming Engine and Streaming Engine resource-based billing. + StreamingMode string `json:"streamingMode,omitempty"` + // Subnetwork: Subnetwork to which VMs will be assigned, if desired. You // can specify a subnetwork using either a complete URL or an // abbreviated path. Expected to be of the form @@ -5595,6 +5612,23 @@ type RuntimeEnvironment struct { // account to run the job as. ServiceAccountEmail string `json:"serviceAccountEmail,omitempty"` + // StreamingMode: Optional. Specifies the Streaming Engine message + // processing guarantees. Reduces cost and latency but might result in + // duplicate messages committed to storage. Designed to run simple + // mapping streaming ETL jobs at the lowest cost. For example, Change + // Data Capture (CDC) to BigQuery is a canonical use case. + // + // Possible values: + // "STREAMING_MODE_UNSPECIFIED" - Run in the default mode. + // "STREAMING_MODE_EXACTLY_ONCE" - In this mode, message deduplication + // is performed against persistent state to make sure each message is + // processed and committed to storage exactly once. + // "STREAMING_MODE_AT_LEAST_ONCE" - Message deduplication is not + // performed. Messages might be processed multiple times, and the + // results are applied multiple times. Note: Setting this value also + // enables Streaming Engine and Streaming Engine resource-based billing. + StreamingMode string `json:"streamingMode,omitempty"` + // Subnetwork: Optional. Subnetwork to which VMs will be assigned, if // desired. You can specify a subnetwork using either a complete URL or // an abbreviated path. Expected to be of the form @@ -7513,22 +7547,28 @@ func (s *StreamingConfigTask) MarshalJSON() ([]byte, error) { // StreamingScalingReport: Contains per-user worker telemetry used in // streaming autoscaling. type StreamingScalingReport struct { - // ActiveBundleCount: Current acive bundle count. ActiveBundleCount int64 `json:"activeBundleCount,omitempty"` // ActiveThreadCount: Current acive thread count. ActiveThreadCount int64 `json:"activeThreadCount,omitempty"` - // MaximumBundleCount: Maximum bundle count limit. + // MaximumBundleCount: Maximum bundle count. MaximumBundleCount int64 `json:"maximumBundleCount,omitempty"` - // MaximumBytesCount: Maximum bytes count limit. + // MaximumBytes: Maximum bytes. + MaximumBytes int64 `json:"maximumBytes,omitempty,string"` + MaximumBytesCount int64 `json:"maximumBytesCount,omitempty"` // MaximumThreadCount: Maximum thread count limit. MaximumThreadCount int64 `json:"maximumThreadCount,omitempty"` - // OutstandingBytesCount: Current outstanding bytes count. + // OutstandingBundleCount: Current outstanding bundle count. + OutstandingBundleCount int64 `json:"outstandingBundleCount,omitempty"` + + // OutstandingBytes: Current outstanding bytes. + OutstandingBytes int64 `json:"outstandingBytes,omitempty,string"` + OutstandingBytesCount int64 `json:"outstandingBytesCount,omitempty"` // ForceSendFields is a list of field names (e.g. "ActiveBundleCount") diff --git a/securitycenter/v1/securitycenter-api.json b/securitycenter/v1/securitycenter-api.json index 902b2dc20c7..6568d1d01b2 100644 --- a/securitycenter/v1/securitycenter-api.json +++ b/securitycenter/v1/securitycenter-api.json @@ -5810,7 +5810,7 @@ } } }, - "revision": "20240101", + "revision": "20240117", "rootUrl": "https://securitycenter.googleapis.com/", "schemas": { "Access": { @@ -6001,7 +6001,7 @@ "id": "AttackExposure", "properties": { "attackExposureResult": { - "description": "The resource name of the attack path simulation result that contains the details regarding this attack exposure score. Example: organizations/123/attackExposureResults/456", + "description": "The resource name of the attack path simulation result that contains the details regarding this attack exposure score. Example: organizations/123/simulations/456/attackExposureResults/789", "type": "string" }, "exposedHighValueResourcesCount": { @@ -9376,6 +9376,25 @@ }, "type": "object" }, + "PolicyDriftDetails": { + "description": "The policy field that violates the deployed posture and its expected and and detected values.", + "id": "PolicyDriftDetails", + "properties": { + "detectedValue": { + "description": "The detected value that violates the deployed posture, for example, `false` or `allowed_values={\"projects/22831892”}`.", + "type": "string" + }, + "expectedValue": { + "description": "The value of this field that was configured in a posture, for example, `true` or `allowed_values={\"projects/29831892”}`.", + "type": "string" + }, + "field": { + "description": "The name of the updated field, for example constraint.implementation.policy_rules[0].enforce", + "type": "string" + } + }, + "type": "object" + }, "Position": { "description": "A position in the uploaded text version of a module.", "id": "Position", @@ -9677,19 +9696,34 @@ "id": "SecurityPosture", "properties": { "changedPolicy": { - "description": "The name of the policy that has been updated, for example, `projects/{project_id}/policies/{constraint_name}`.", + "description": "The name of the updated policy, for example, `projects/{project_id}/policies/{constraint_name}`.", "type": "string" }, "name": { - "description": "Name of the posture, for example, `organizations/{org_id}/locations/{location}/postures/{posture_name}`.", + "description": "Name of the posture, for example, `CIS-Posture`.", + "type": "string" + }, + "policy": { + "description": "The ID of the updated policy, for example, `compute-policy-1`.", + "type": "string" + }, + "policyDriftDetails": { + "description": "The details about a change in an updated policy that violates the deployed posture.", + "items": { + "$ref": "PolicyDriftDetails" + }, + "type": "array" + }, + "policySet": { + "description": "The name of the updated policyset, for example, `cis-policyset`.", "type": "string" }, "postureDeployment": { - "description": "The name of the posture deployment, for example, `projects/{project_id}/posturedeployments/{posture_deployment_id}`.", + "description": "The name of the posture deployment, for example, `organizations/{org_id}/posturedeployments/{posture_deployment_id}`.", "type": "string" }, "postureDeploymentResource": { - "description": "The project, folder, or organization on which the posture is deployed, for example, `projects/{project_id}`.", + "description": "The project, folder, or organization on which the posture is deployed, for example, `projects/{project_number}`.", "type": "string" }, "revisionId": { diff --git a/securitycenter/v1/securitycenter-gen.go b/securitycenter/v1/securitycenter-gen.go index c137c49fd85..a6a9d94421a 100644 --- a/securitycenter/v1/securitycenter-gen.go +++ b/securitycenter/v1/securitycenter-gen.go @@ -1171,7 +1171,8 @@ func (s *AssetDiscoveryConfig) MarshalJSON() ([]byte, error) { type AttackExposure struct { // AttackExposureResult: The resource name of the attack path simulation // result that contains the details regarding this attack exposure - // score. Example: organizations/123/attackExposureResults/456 + // score. Example: + // organizations/123/simulations/456/attackExposureResults/789 AttackExposureResult string `json:"attackExposureResult,omitempty"` // ExposedHighValueResourcesCount: The number of high value resources @@ -6685,6 +6686,45 @@ func (s *Policy) MarshalJSON() ([]byte, error) { return gensupport.MarshalJSON(raw, s.ForceSendFields, s.NullFields) } +// PolicyDriftDetails: The policy field that violates the deployed +// posture and its expected and and detected values. +type PolicyDriftDetails struct { + // DetectedValue: The detected value that violates the deployed posture, + // for example, `false` or `allowed_values={"projects/22831892”}`. + DetectedValue string `json:"detectedValue,omitempty"` + + // ExpectedValue: The value of this field that was configured in a + // posture, for example, `true` or + // `allowed_values={"projects/29831892”}`. + ExpectedValue string `json:"expectedValue,omitempty"` + + // Field: The name of the updated field, for example + // constraint.implementation.policy_rules[0].enforce + Field string `json:"field,omitempty"` + + // ForceSendFields is a list of field names (e.g. "DetectedValue") to + // unconditionally include in API requests. By default, fields with + // empty or default values are omitted from API requests. However, any + // non-pointer, non-interface field appearing in ForceSendFields will be + // sent to the server regardless of whether the field is empty or not. + // This may be used to include empty fields in Patch requests. + ForceSendFields []string `json:"-"` + + // NullFields is a list of field names (e.g. "DetectedValue") to include + // in API requests with the JSON null value. By default, fields with + // empty values are omitted from API requests. However, any field with + // an empty value appearing in NullFields will be sent to the server as + // null. It is an error if a field in this list has a non-empty value. + // This may be used to include null fields in Patch requests. + NullFields []string `json:"-"` +} + +func (s *PolicyDriftDetails) MarshalJSON() ([]byte, error) { + type NoMethod PolicyDriftDetails + raw := NoMethod(*s) + return gensupport.MarshalJSON(raw, s.ForceSendFields, s.NullFields) +} + // Position: A position in the uploaded text version of a module. type Position struct { ColumnNumber int64 `json:"columnNumber,omitempty"` @@ -7147,20 +7187,32 @@ func (s *SecurityMarks) MarshalJSON() ([]byte, error) { // posture contains one or more policy sets. A policy set is a group of // policies that enforce a set of security rules on Google Cloud. type SecurityPosture struct { - // ChangedPolicy: The name of the policy that has been updated, for - // example, `projects/{project_id}/policies/{constraint_name}`. + // ChangedPolicy: The name of the updated policy, for example, + // `projects/{project_id}/policies/{constraint_name}`. ChangedPolicy string `json:"changedPolicy,omitempty"` - // Name: Name of the posture, for example, - // `organizations/{org_id}/locations/{location}/postures/{posture_name}`. + // Name: Name of the posture, for example, `CIS-Posture`. Name string `json:"name,omitempty"` + // Policy: The ID of the updated policy, for example, + // `compute-policy-1`. + Policy string `json:"policy,omitempty"` + + // PolicyDriftDetails: The details about a change in an updated policy + // that violates the deployed posture. + PolicyDriftDetails []*PolicyDriftDetails `json:"policyDriftDetails,omitempty"` + + // PolicySet: The name of the updated policyset, for example, + // `cis-policyset`. + PolicySet string `json:"policySet,omitempty"` + // PostureDeployment: The name of the posture deployment, for example, - // `projects/{project_id}/posturedeployments/{posture_deployment_id}`. + // `organizations/{org_id}/posturedeployments/{posture_deployment_id}`. PostureDeployment string `json:"postureDeployment,omitempty"` // PostureDeploymentResource: The project, folder, or organization on - // which the posture is deployed, for example, `projects/{project_id}`. + // which the posture is deployed, for example, + // `projects/{project_number}`. PostureDeploymentResource string `json:"postureDeploymentResource,omitempty"` // RevisionId: The version of the posture, for example, `c7cfa2a8`. diff --git a/securitycenter/v1beta1/securitycenter-api.json b/securitycenter/v1beta1/securitycenter-api.json index 4f7cefa388c..ebe5e65d036 100644 --- a/securitycenter/v1beta1/securitycenter-api.json +++ b/securitycenter/v1beta1/securitycenter-api.json @@ -896,7 +896,7 @@ } } }, - "revision": "20240101", + "revision": "20240117", "rootUrl": "https://securitycenter.googleapis.com/", "schemas": { "Access": { @@ -1072,7 +1072,7 @@ "id": "AttackExposure", "properties": { "attackExposureResult": { - "description": "The resource name of the attack path simulation result that contains the details regarding this attack exposure score. Example: organizations/123/attackExposureResults/456", + "description": "The resource name of the attack path simulation result that contains the details regarding this attack exposure score. Example: organizations/123/simulations/456/attackExposureResults/789", "type": "string" }, "exposedHighValueResourcesCount": { @@ -3878,6 +3878,25 @@ }, "type": "object" }, + "PolicyDriftDetails": { + "description": "The policy field that violates the deployed posture and its expected and and detected values.", + "id": "PolicyDriftDetails", + "properties": { + "detectedValue": { + "description": "The detected value that violates the deployed posture, for example, `false` or `allowed_values={\"projects/22831892”}`.", + "type": "string" + }, + "expectedValue": { + "description": "The value of this field that was configured in a posture, for example, `true` or `allowed_values={\"projects/29831892”}`.", + "type": "string" + }, + "field": { + "description": "The name of the updated field, for example constraint.implementation.policy_rules[0].enforce", + "type": "string" + } + }, + "type": "object" + }, "Process": { "description": "Represents an operating system process.", "id": "Process", @@ -4092,19 +4111,34 @@ "id": "SecurityPosture", "properties": { "changedPolicy": { - "description": "The name of the policy that has been updated, for example, `projects/{project_id}/policies/{constraint_name}`.", + "description": "The name of the updated policy, for example, `projects/{project_id}/policies/{constraint_name}`.", "type": "string" }, "name": { - "description": "Name of the posture, for example, `organizations/{org_id}/locations/{location}/postures/{posture_name}`.", + "description": "Name of the posture, for example, `CIS-Posture`.", + "type": "string" + }, + "policy": { + "description": "The ID of the updated policy, for example, `compute-policy-1`.", + "type": "string" + }, + "policyDriftDetails": { + "description": "The details about a change in an updated policy that violates the deployed posture.", + "items": { + "$ref": "PolicyDriftDetails" + }, + "type": "array" + }, + "policySet": { + "description": "The name of the updated policyset, for example, `cis-policyset`.", "type": "string" }, "postureDeployment": { - "description": "The name of the posture deployment, for example, `projects/{project_id}/posturedeployments/{posture_deployment_id}`.", + "description": "The name of the posture deployment, for example, `organizations/{org_id}/posturedeployments/{posture_deployment_id}`.", "type": "string" }, "postureDeploymentResource": { - "description": "The project, folder, or organization on which the posture is deployed, for example, `projects/{project_id}`.", + "description": "The project, folder, or organization on which the posture is deployed, for example, `projects/{project_number}`.", "type": "string" }, "revisionId": { diff --git a/securitycenter/v1beta1/securitycenter-gen.go b/securitycenter/v1beta1/securitycenter-gen.go index 7427bb5fbce..9771454b978 100644 --- a/securitycenter/v1beta1/securitycenter-gen.go +++ b/securitycenter/v1beta1/securitycenter-gen.go @@ -494,7 +494,8 @@ func (s *AssetDiscoveryConfig) MarshalJSON() ([]byte, error) { type AttackExposure struct { // AttackExposureResult: The resource name of the attack path simulation // result that contains the details regarding this attack exposure - // score. Example: organizations/123/attackExposureResults/456 + // score. Example: + // organizations/123/simulations/456/attackExposureResults/789 AttackExposureResult string `json:"attackExposureResult,omitempty"` // ExposedHighValueResourcesCount: The number of high value resources @@ -4874,6 +4875,45 @@ func (s *Policy) MarshalJSON() ([]byte, error) { return gensupport.MarshalJSON(raw, s.ForceSendFields, s.NullFields) } +// PolicyDriftDetails: The policy field that violates the deployed +// posture and its expected and and detected values. +type PolicyDriftDetails struct { + // DetectedValue: The detected value that violates the deployed posture, + // for example, `false` or `allowed_values={"projects/22831892”}`. + DetectedValue string `json:"detectedValue,omitempty"` + + // ExpectedValue: The value of this field that was configured in a + // posture, for example, `true` or + // `allowed_values={"projects/29831892”}`. + ExpectedValue string `json:"expectedValue,omitempty"` + + // Field: The name of the updated field, for example + // constraint.implementation.policy_rules[0].enforce + Field string `json:"field,omitempty"` + + // ForceSendFields is a list of field names (e.g. "DetectedValue") to + // unconditionally include in API requests. By default, fields with + // empty or default values are omitted from API requests. However, any + // non-pointer, non-interface field appearing in ForceSendFields will be + // sent to the server regardless of whether the field is empty or not. + // This may be used to include empty fields in Patch requests. + ForceSendFields []string `json:"-"` + + // NullFields is a list of field names (e.g. "DetectedValue") to include + // in API requests with the JSON null value. By default, fields with + // empty values are omitted from API requests. However, any field with + // an empty value appearing in NullFields will be sent to the server as + // null. It is an error if a field in this list has a non-empty value. + // This may be used to include null fields in Patch requests. + NullFields []string `json:"-"` +} + +func (s *PolicyDriftDetails) MarshalJSON() ([]byte, error) { + type NoMethod PolicyDriftDetails + raw := NoMethod(*s) + return gensupport.MarshalJSON(raw, s.ForceSendFields, s.NullFields) +} + // Process: Represents an operating system process. type Process struct { // Args: Process arguments as JSON encoded strings. @@ -5204,20 +5244,32 @@ func (s *SecurityMarks) MarshalJSON() ([]byte, error) { // posture contains one or more policy sets. A policy set is a group of // policies that enforce a set of security rules on Google Cloud. type SecurityPosture struct { - // ChangedPolicy: The name of the policy that has been updated, for - // example, `projects/{project_id}/policies/{constraint_name}`. + // ChangedPolicy: The name of the updated policy, for example, + // `projects/{project_id}/policies/{constraint_name}`. ChangedPolicy string `json:"changedPolicy,omitempty"` - // Name: Name of the posture, for example, - // `organizations/{org_id}/locations/{location}/postures/{posture_name}`. + // Name: Name of the posture, for example, `CIS-Posture`. Name string `json:"name,omitempty"` + // Policy: The ID of the updated policy, for example, + // `compute-policy-1`. + Policy string `json:"policy,omitempty"` + + // PolicyDriftDetails: The details about a change in an updated policy + // that violates the deployed posture. + PolicyDriftDetails []*PolicyDriftDetails `json:"policyDriftDetails,omitempty"` + + // PolicySet: The name of the updated policyset, for example, + // `cis-policyset`. + PolicySet string `json:"policySet,omitempty"` + // PostureDeployment: The name of the posture deployment, for example, - // `projects/{project_id}/posturedeployments/{posture_deployment_id}`. + // `organizations/{org_id}/posturedeployments/{posture_deployment_id}`. PostureDeployment string `json:"postureDeployment,omitempty"` // PostureDeploymentResource: The project, folder, or organization on - // which the posture is deployed, for example, `projects/{project_id}`. + // which the posture is deployed, for example, + // `projects/{project_number}`. PostureDeploymentResource string `json:"postureDeploymentResource,omitempty"` // RevisionId: The version of the posture, for example, `c7cfa2a8`. diff --git a/securitycenter/v1beta2/securitycenter-api.json b/securitycenter/v1beta2/securitycenter-api.json index f9443e81388..5d418560a1c 100644 --- a/securitycenter/v1beta2/securitycenter-api.json +++ b/securitycenter/v1beta2/securitycenter-api.json @@ -1906,7 +1906,7 @@ } } }, - "revision": "20240101", + "revision": "20240117", "rootUrl": "https://securitycenter.googleapis.com/", "schemas": { "Access": { @@ -2018,7 +2018,7 @@ "id": "AttackExposure", "properties": { "attackExposureResult": { - "description": "The resource name of the attack path simulation result that contains the details regarding this attack exposure score. Example: organizations/123/attackExposureResults/456", + "description": "The resource name of the attack path simulation result that contains the details regarding this attack exposure score. Example: organizations/123/simulations/456/attackExposureResults/789", "type": "string" }, "exposedHighValueResourcesCount": { @@ -4457,6 +4457,25 @@ }, "type": "object" }, + "PolicyDriftDetails": { + "description": "The policy field that violates the deployed posture and its expected and and detected values.", + "id": "PolicyDriftDetails", + "properties": { + "detectedValue": { + "description": "The detected value that violates the deployed posture, for example, `false` or `allowed_values={\"projects/22831892”}`.", + "type": "string" + }, + "expectedValue": { + "description": "The value of this field that was configured in a posture, for example, `true` or `allowed_values={\"projects/29831892”}`.", + "type": "string" + }, + "field": { + "description": "The name of the updated field, for example constraint.implementation.policy_rules[0].enforce", + "type": "string" + } + }, + "type": "object" + }, "Process": { "description": "Represents an operating system process.", "id": "Process", @@ -4746,19 +4765,34 @@ "id": "SecurityPosture", "properties": { "changedPolicy": { - "description": "The name of the policy that has been updated, for example, `projects/{project_id}/policies/{constraint_name}`.", + "description": "The name of the updated policy, for example, `projects/{project_id}/policies/{constraint_name}`.", "type": "string" }, "name": { - "description": "Name of the posture, for example, `organizations/{org_id}/locations/{location}/postures/{posture_name}`.", + "description": "Name of the posture, for example, `CIS-Posture`.", + "type": "string" + }, + "policy": { + "description": "The ID of the updated policy, for example, `compute-policy-1`.", + "type": "string" + }, + "policyDriftDetails": { + "description": "The details about a change in an updated policy that violates the deployed posture.", + "items": { + "$ref": "PolicyDriftDetails" + }, + "type": "array" + }, + "policySet": { + "description": "The name of the updated policyset, for example, `cis-policyset`.", "type": "string" }, "postureDeployment": { - "description": "The name of the posture deployment, for example, `projects/{project_id}/posturedeployments/{posture_deployment_id}`.", + "description": "The name of the posture deployment, for example, `organizations/{org_id}/posturedeployments/{posture_deployment_id}`.", "type": "string" }, "postureDeploymentResource": { - "description": "The project, folder, or organization on which the posture is deployed, for example, `projects/{project_id}`.", + "description": "The project, folder, or organization on which the posture is deployed, for example, `projects/{project_number}`.", "type": "string" }, "revisionId": { diff --git a/securitycenter/v1beta2/securitycenter-gen.go b/securitycenter/v1beta2/securitycenter-gen.go index ef04e6eabaf..861a851e85a 100644 --- a/securitycenter/v1beta2/securitycenter-gen.go +++ b/securitycenter/v1beta2/securitycenter-gen.go @@ -624,7 +624,8 @@ func (s *Application) MarshalJSON() ([]byte, error) { type AttackExposure struct { // AttackExposureResult: The resource name of the attack path simulation // result that contains the details regarding this attack exposure - // score. Example: organizations/123/attackExposureResults/456 + // score. Example: + // organizations/123/simulations/456/attackExposureResults/789 AttackExposureResult string `json:"attackExposureResult,omitempty"` // ExposedHighValueResourcesCount: The number of high value resources @@ -4089,6 +4090,45 @@ func (s *Pod) MarshalJSON() ([]byte, error) { return gensupport.MarshalJSON(raw, s.ForceSendFields, s.NullFields) } +// PolicyDriftDetails: The policy field that violates the deployed +// posture and its expected and and detected values. +type PolicyDriftDetails struct { + // DetectedValue: The detected value that violates the deployed posture, + // for example, `false` or `allowed_values={"projects/22831892”}`. + DetectedValue string `json:"detectedValue,omitempty"` + + // ExpectedValue: The value of this field that was configured in a + // posture, for example, `true` or + // `allowed_values={"projects/29831892”}`. + ExpectedValue string `json:"expectedValue,omitempty"` + + // Field: The name of the updated field, for example + // constraint.implementation.policy_rules[0].enforce + Field string `json:"field,omitempty"` + + // ForceSendFields is a list of field names (e.g. "DetectedValue") to + // unconditionally include in API requests. By default, fields with + // empty or default values are omitted from API requests. However, any + // non-pointer, non-interface field appearing in ForceSendFields will be + // sent to the server regardless of whether the field is empty or not. + // This may be used to include empty fields in Patch requests. + ForceSendFields []string `json:"-"` + + // NullFields is a list of field names (e.g. "DetectedValue") to include + // in API requests with the JSON null value. By default, fields with + // empty values are omitted from API requests. However, any field with + // an empty value appearing in NullFields will be sent to the server as + // null. It is an error if a field in this list has a non-empty value. + // This may be used to include null fields in Patch requests. + NullFields []string `json:"-"` +} + +func (s *PolicyDriftDetails) MarshalJSON() ([]byte, error) { + type NoMethod PolicyDriftDetails + raw := NoMethod(*s) + return gensupport.MarshalJSON(raw, s.ForceSendFields, s.NullFields) +} + // Process: Represents an operating system process. type Process struct { // Args: Process arguments as JSON encoded strings. @@ -4534,20 +4574,32 @@ func (s *SecurityMarks) MarshalJSON() ([]byte, error) { // posture contains one or more policy sets. A policy set is a group of // policies that enforce a set of security rules on Google Cloud. type SecurityPosture struct { - // ChangedPolicy: The name of the policy that has been updated, for - // example, `projects/{project_id}/policies/{constraint_name}`. + // ChangedPolicy: The name of the updated policy, for example, + // `projects/{project_id}/policies/{constraint_name}`. ChangedPolicy string `json:"changedPolicy,omitempty"` - // Name: Name of the posture, for example, - // `organizations/{org_id}/locations/{location}/postures/{posture_name}`. + // Name: Name of the posture, for example, `CIS-Posture`. Name string `json:"name,omitempty"` + // Policy: The ID of the updated policy, for example, + // `compute-policy-1`. + Policy string `json:"policy,omitempty"` + + // PolicyDriftDetails: The details about a change in an updated policy + // that violates the deployed posture. + PolicyDriftDetails []*PolicyDriftDetails `json:"policyDriftDetails,omitempty"` + + // PolicySet: The name of the updated policyset, for example, + // `cis-policyset`. + PolicySet string `json:"policySet,omitempty"` + // PostureDeployment: The name of the posture deployment, for example, - // `projects/{project_id}/posturedeployments/{posture_deployment_id}`. + // `organizations/{org_id}/posturedeployments/{posture_deployment_id}`. PostureDeployment string `json:"postureDeployment,omitempty"` // PostureDeploymentResource: The project, folder, or organization on - // which the posture is deployed, for example, `projects/{project_id}`. + // which the posture is deployed, for example, + // `projects/{project_number}`. PostureDeploymentResource string `json:"postureDeploymentResource,omitempty"` // RevisionId: The version of the posture, for example, `c7cfa2a8`.