feat(iam): add v3 to the library (#15056)

* feat(iam): generate library

* Run generators and format their outputs

* Add API baseline

* Manually update READMEs, quickstart, and top-level stuff

* add deps lists

* fix

* fix

* checkers-pr

Author: cuiy0006

CHANGELOG.md

@@ -6,11 +6,17 @@ breaking changes in the upcoming 3.x release. This release is scheduled for
 
 ## v2.37.0 - TBD
 
+### New Libraries
+
 We are happy to announce the following GA libraries. Unless specifically noted,
 the APIs in these libraries are stable, and are ready for production use.
 
 - [Financial Services API](/google/cloud/financialservices/README.md)
 
+### Updated Libraries
+
+- [iam](/google/cloud/iam/README.md) - add v3 version of the library
+
 **BREAKING CHANGES**
 
 Client library `resourcesettings` is being removed because the service has been turned down.

ci/abi-dumps/google_cloud_cpp_iam.expected.abi.dump.gz

@@ -153,6 +153,7 @@ expected_dirs+=(
   ./lib64/cmake/google_cloud_cpp_grpc_utils
   ./lib64/cmake/google_cloud_cpp_logging_type
   ./lib64/cmake/google_cloud_cpp_iam_v2
+  ./lib64/cmake/google_cloud_cpp_iam_v3
   ./lib64/cmake/google_cloud_cpp_mocks
   ./lib64/cmake/google_cloud_cpp_oauth2
   ./lib64/cmake/google_cloud_cpp_opentelemetry

ci/cloudbuild/builds/cmake-install.sh

@@ -799,6 +799,9 @@
 ./include/google/cloud/iam/v2
 ./include/google/cloud/iam/v2/internal
 ./include/google/cloud/iam/v2/mocks
+./include/google/cloud/iam/v3
+./include/google/cloud/iam/v3/internal
+./include/google/cloud/iam/v3/mocks
 ./include/google/cloud/iap
 ./include/google/cloud/iap/mocks
 ./include/google/cloud/iap/v1
@@ -1240,6 +1243,7 @@
 ./include/google/iam/credentials/v1
 ./include/google/iam/v1
 ./include/google/iam/v2
+./include/google/iam/v3
 ./include/google/identity
 ./include/google/identity/accesscontextmanager
 ./include/google/identity/accesscontextmanager/v1

ci/etc/expected_install_directories

@@ -0,0 +1,10 @@
+@com_google_googleapis//google/api:annotations_proto
+@com_google_googleapis//google/api:client_proto
+@com_google_googleapis//google/api:field_behavior_proto
+@com_google_googleapis//google/api:field_info_proto
+@com_google_googleapis//google/api:http_proto
+@com_google_googleapis//google/api:launch_stage_proto
+@com_google_googleapis//google/api:resource_proto
+@com_google_googleapis//google/longrunning:operations_proto
+@com_google_googleapis//google/rpc:status_proto
+@com_google_googleapis//google/type:expr_proto

external/googleapis/protodeps/iam_v3.deps

@@ -0,0 +1,5 @@
+@com_google_googleapis//google/iam/v3:operation_metadata.proto
+@com_google_googleapis//google/iam/v3:policy_binding_resources.proto
+@com_google_googleapis//google/iam/v3:policy_bindings_service.proto
+@com_google_googleapis//google/iam/v3:principal_access_boundary_policies_service.proto
+@com_google_googleapis//google/iam/v3:principal_access_boundary_policy_resources.proto

external/googleapis/protolists/iam_v3.list

@@ -166,6 +166,7 @@ declare -A -r LIBRARIES=(
   ["grafeas"]="@com_google_googleapis//grafeas/v1:grafeas_cc_grpc"
   ["iam"]="@com_google_googleapis//google/iam/admin/v1:admin_cc_grpc"
   ["iam_v2"]="@com_google_googleapis//google/iam/v2:iam_cc_grpc"
+  ["iam_v3"]="@com_google_googleapis//google/iam/v3:iam_cc_grpc"
   ["iap"]="@com_google_googleapis//google/cloud/iap/v1:iap_cc_grpc"
   ["ids"]="@com_google_googleapis//google/cloud/ids/v1:ids_cc_grpc"
   ["kms"]="$(

external/googleapis/update_libraries.sh

@@ -2606,6 +2606,20 @@ service {
   retryable_status_codes: ["kUnavailable"]
 }
 
+service {
+  service_proto_path: "google/iam/v3/policy_bindings_service.proto"
+  product_path: "google/cloud/iam/v3"
+  initial_copyright_year: "2025"
+  retryable_status_codes: ["kUnavailable"]
+}
+
+service {
+  service_proto_path: "google/iam/v3/principal_access_boundary_policies_service.proto"
+  product_path: "google/cloud/iam/v3"
+  initial_copyright_year: "2025"
+  retryable_status_codes: ["kUnavailable"]
+}
+
 # Identity-Aware Proxy (IAP)
 service {
   service_proto_path: "google/cloud/iap/v1/service.proto"

generator/generator_config.textproto

@@ -24,13 +24,15 @@ service_dirs = [
     "credentials/v1/",
     "v1/",
     "v2/",
+    "v3/",
 ]
 
 googleapis_deps = [
     "@com_google_googleapis//google/iam/admin/v1:admin_cc_grpc",
     "@com_google_googleapis//google/iam/credentials/v1:credentials_cc_grpc",
     "@com_google_googleapis//google/iam/v1:iam_cc_grpc",
     "@com_google_googleapis//google/iam/v2:iam_cc_grpc",
+    "@com_google_googleapis//google/iam/v3:iam_cc_grpc",
 ]
 
 cc_gapic_library(

google/cloud/iam/BUILD.bazel

@@ -18,8 +18,8 @@ include(GoogleCloudCppLibrary)
 
 google_cloud_cpp_add_gapic_library(
     iam "Google Cloud IAM API"
-    SERVICE_DIRS "__EMPTY__" "admin/v1/" "credentials/v1/" "v1/" "v2/"
-    SHARED_PROTO_DEPS "iam_v2")
+    SERVICE_DIRS "__EMPTY__" "admin/v1/" "credentials/v1/" "v1/" "v2/" "v3/"
+    SHARED_PROTO_DEPS "iam_v2" "iam_v3")
 
 # Examples are enabled if possible, but package maintainers may want to disable
 # compilation to speed up their builds.