@@ -347,31 +347,33 @@ class Binding
347347 # members` can have the following values: * `allUsers`: A special identifier
348348 # that represents anyone who is on the internet; with or without a Google
349349 # account. * `allAuthenticatedUsers`: A special identifier that represents
350- # anyone who is authenticated with a Google account or a service account. * `
351- # user:`emailid``: An email address that represents a specific Google account.
352- # For example, `[email protected] ` . * `serviceAccount:`emailid``: An email 353- # address that represents a Google service account. For example, `my-other-app@
354- # appspot.gserviceaccount.com`. * `serviceAccount:`projectid`.svc.id.goog[`
355- # namespace`/`kubernetes-sa`]`: An identifier for a [Kubernetes service account](
356- # https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-
357- # accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`
358- # . * `group:`emailid``: An email address that represents a Google group. For
359- # example, `[email protected] `. * `deleted:user:`emailid`?uid=`uniqueid``: An 360- # email address (plus unique identifier) representing a user that has been
361- # recently deleted. For example, `[email protected] ?uid=123456789012345678901`. 362- # If the user is recovered, this value reverts to `user:`emailid`` and the
363- # recovered user retains the role in the binding. * `deleted:serviceAccount:`
364- # emailid`?uid=`uniqueid``: An email address (plus unique identifier)
365- # representing a service account that has been recently deleted. For example, `
366- # [email protected] ?uid=123456789012345678901`. If the 367- # service account is undeleted, this value reverts to `serviceAccount:`emailid``
368- # and the undeleted service account retains the role in the binding. * `deleted:
369- # group:`emailid`?uid=`uniqueid``: An email address (plus unique identifier)
370- # representing a Google group that has been recently deleted. For example, `
371- # [email protected] ?uid=123456789012345678901`. If the group is recovered, this 372- # value reverts to `group:`emailid`` and the recovered group retains the role in
373- # the binding. * `domain:`domain``: The G Suite domain (primary) that represents
374- # all the users of that domain. For example, `google.com` or `example.com`.
350+ # anyone who is authenticated with a Google account or a service account. Does
351+ # not include identities that come from external identity providers (IdPs)
352+ # through identity federation. * `user:`emailid``: An email address that
353+ # represents a specific Google account. For example, `[email protected] ` . * ` 354+ # serviceAccount:`emailid``: An email address that represents a Google service
355+ # account. For example, `[email protected] `. * ` 356+ # serviceAccount:`projectid`.svc.id.goog[`namespace`/`kubernetes-sa`]`: An
357+ # identifier for a [Kubernetes service account](https://cloud.google.com/
358+ # kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-
359+ # project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:`emailid``: An
360+ # email address that represents a Google group. For example, `[email protected] ` 361+ # . * `deleted:user:`emailid`?uid=`uniqueid``: An email address (plus unique
362+ # identifier) representing a user that has been recently deleted. For example, `
363+ # [email protected] ?uid=123456789012345678901`. If the user is recovered, this 364+ # value reverts to `user:`emailid`` and the recovered user retains the role in
365+ # the binding. * `deleted:serviceAccount:`emailid`?uid=`uniqueid``: An email
366+ # address (plus unique identifier) representing a service account that has been
367+ # recently deleted. For example, `[email protected] ?uid= 368+ # 123456789012345678901`. If the service account is undeleted, this value
369+ # reverts to `serviceAccount:`emailid`` and the undeleted service account
370+ # retains the role in the binding. * `deleted:group:`emailid`?uid=`uniqueid``:
371+ # An email address (plus unique identifier) representing a Google group that has
372+ # been recently deleted. For example, `[email protected] ?uid= 373+ # 123456789012345678901`. If the group is recovered, this value reverts to `
374+ # group:`emailid`` and the recovered group retains the role in the binding. * `
375+ # domain:`domain``: The G Suite domain (primary) that represents all the users
376+ # of that domain. For example, `google.com` or `example.com`.
375377 # Corresponds to the JSON property `members`
376378 # @return [Array<String>]
377379 attr_accessor :members
0 commit comments