Skip to content

Commit e0d0bce

Browse files
yoshi-automationsofisl
yoshi-automation
authored and
sofisl
committed
feat(iap): update the API
#### iap:v1 The following keys were added: - schemas.NextStateOfTags.description - schemas.NextStateOfTags.id - schemas.NextStateOfTags.properties.tagsFullState.$ref - schemas.NextStateOfTags.properties.tagsFullStateForChildResource.$ref - schemas.NextStateOfTags.properties.tagsPartialState.$ref - schemas.NextStateOfTags.type - schemas.Resource.properties.nextStateOfTags.$ref - schemas.Resource.properties.nextStateOfTags.description - schemas.TagsFullState.id - schemas.TagsFullState.properties.tags.additionalProperties.type - schemas.TagsFullState.properties.tags.description - schemas.TagsFullState.properties.tags.type - schemas.TagsFullState.type - schemas.TagsFullStateForChildResource.id - schemas.TagsFullStateForChildResource.properties.tags.additionalProperties.type - schemas.TagsFullStateForChildResource.properties.tags.description - schemas.TagsFullStateForChildResource.properties.tags.type - schemas.TagsFullStateForChildResource.type - schemas.TagsPartialState.id - schemas.TagsPartialState.properties.tagKeysToRemove.description - schemas.TagsPartialState.properties.tagKeysToRemove.items.type - schemas.TagsPartialState.properties.tagKeysToRemove.type - schemas.TagsPartialState.properties.tagsToUpsert.additionalProperties.type - schemas.TagsPartialState.properties.tagsToUpsert.description - schemas.TagsPartialState.properties.tagsToUpsert.type - schemas.TagsPartialState.type
1 parent 3fbbed4 commit e0d0bce

File tree

2 files changed

+101
-1
lines changed

2 files changed

+101
-1
lines changed

‎discovery/iap-v1.json

Lines changed: 67 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -682,7 +682,7 @@
682682
}
683683
}
684684
},
685-
"revision": "20240527",
685+
"revision": "20240623",
686686
"rootUrl": "https://iap.googleapis.com/",
687687
"schemas": {
688688
"AccessDeniedPageSettings": {
@@ -1058,6 +1058,22 @@
10581058
},
10591059
"type": "object"
10601060
},
1061+
"NextStateOfTags": {
1062+
"description": "Used for calculating the next state of tags on the resource being passed for the CheckCustomConstraints RPC call. The detail evaluation of each field is described in go/op-create-update-time-tags and go/tags-in-orgpolicy-requests.",
1063+
"id": "NextStateOfTags",
1064+
"properties": {
1065+
"tagsFullState": {
1066+
"$ref": "TagsFullState"
1067+
},
1068+
"tagsFullStateForChildResource": {
1069+
"$ref": "TagsFullStateForChildResource"
1070+
},
1071+
"tagsPartialState": {
1072+
"$ref": "TagsPartialState"
1073+
}
1074+
},
1075+
"type": "object"
1076+
},
10611077
"OAuth2": {
10621078
"description": "The OAuth 2.0 Settings",
10631079
"id": "OAuth2",
@@ -1241,6 +1257,10 @@
12411257
"description": "The **relative** name of the resource, which is the URI path of the resource without the leading \"/\". See https://cloud.google.com/iam/docs/conditions-resource-attributes#resource-name for examples used by other GCP Services. This field is **required** for services integrated with resource-attribute-based IAM conditions and/or CustomOrgPolicy. This field requires special handling for parents-only permissions such as `create` and `list`. See the document linked below for further details. See go/iam-conditions-sig-g3#populate-resource-attributes for specific details on populating this field.",
12421258
"type": "string"
12431259
},
1260+
"nextStateOfTags": {
1261+
"$ref": "NextStateOfTags",
1262+
"description": "Used for calculating the next state of tags on the resource being passed for Custom Org Policy enforcement. NOTE: Only one of the tags representations (i.e. numeric or namespaced) should be populated. The input tags will be converted to the same representation before the calculation. This behavior intentionally may differ from other tags related fields in CheckPolicy request, which may require both formats to be passed in. IMPORTANT: If tags are unchanged, this field should not be set."
1263+
},
12441264
"service": {
12451265
"description": "The name of the service this resource belongs to. It is configured using the official_service_name of the Service as defined in service configurations under //configs/cloud/resourcetypes. For example, the official_service_name of cloud resource manager service is set as 'cloudresourcemanager.googleapis.com' according to //configs/cloud/resourcetypes/google/cloud/resourcemanager/prod.yaml This field is **required** for services integrated with resource-attribute-based IAM conditions and/or CustomOrgPolicy. This field requires special handling for parents-only permissions such as `create` and `list`. See the document linked below for further details. See go/iam-conditions-sig-g3#populate-resource-attributes for specific details on populating this field.",
12461266
"type": "string"
@@ -1263,6 +1283,52 @@
12631283
},
12641284
"type": "object"
12651285
},
1286+
"TagsFullState": {
1287+
"id": "TagsFullState",
1288+
"properties": {
1289+
"tags": {
1290+
"additionalProperties": {
1291+
"type": "string"
1292+
},
1293+
"description": "If TagsFullState is initialized, the values in this field fully represent all the tags in the next state (the current tag values are not used). If tags.size() == 0, the next state of tags would be no tags for evaluation purposes. Only one type of tags reference (numeric or namespace) is required to be passed.",
1294+
"type": "object"
1295+
}
1296+
},
1297+
"type": "object"
1298+
},
1299+
"TagsFullStateForChildResource": {
1300+
"id": "TagsFullStateForChildResource",
1301+
"properties": {
1302+
"tags": {
1303+
"additionalProperties": {
1304+
"type": "string"
1305+
},
1306+
"description": "If TagsFullStateForChildResource is initialized, the values in this field represent all the tags in the next state for the child resource. Only one type of tags reference (numeric or namespace) is required to be passed. IMPORTANT: This field should only be used when the target resource IAM policy name is UNKNOWN and the resource's parent IAM policy name is being passed in the request.",
1307+
"type": "object"
1308+
}
1309+
},
1310+
"type": "object"
1311+
},
1312+
"TagsPartialState": {
1313+
"id": "TagsPartialState",
1314+
"properties": {
1315+
"tagKeysToRemove": {
1316+
"description": "Keys of the tags that should be removed for evaluation purposes. IMPORTANT: Currently only numeric references are supported. Once support for namespace references is added, both the tag references (numeric and namespace) will be removed.",
1317+
"items": {
1318+
"type": "string"
1319+
},
1320+
"type": "array"
1321+
},
1322+
"tagsToUpsert": {
1323+
"additionalProperties": {
1324+
"type": "string"
1325+
},
1326+
"description": "Tags that’ll be updated or added to the current state of tags for evaluation purposes. If a key exists in both \"tags_to_upsert\" and \"tag_keys_to_remove\", the one in \"tag_keys_to_remove\" is ignored. Only one type of tags reference (numeric or namespace) is required to be passed.",
1327+
"type": "object"
1328+
}
1329+
},
1330+
"type": "object"
1331+
},
12661332
"TestIamPermissionsRequest": {
12671333
"description": "Request message for `TestIamPermissions` method.",
12681334
"id": "TestIamPermissionsRequest",

‎src/apis/iap/v1.ts

Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -412,6 +412,14 @@ export namespace iap_v1 {
412412
*/
413413
tunnelDestGroups?: Schema$TunnelDestGroup[];
414414
}
415+
/**
416+
* Used for calculating the next state of tags on the resource being passed for the CheckCustomConstraints RPC call. The detail evaluation of each field is described in go/op-create-update-time-tags and go/tags-in-orgpolicy-requests.
417+
*/
418+
export interface Schema$NextStateOfTags {
419+
tagsFullState?: Schema$TagsFullState;
420+
tagsFullStateForChildResource?: Schema$TagsFullStateForChildResource;
421+
tagsPartialState?: Schema$TagsPartialState;
422+
}
415423
/**
416424
* The OAuth 2.0 Settings
417425
*/
@@ -531,6 +539,10 @@ export namespace iap_v1 {
531539
* The **relative** name of the resource, which is the URI path of the resource without the leading "/". See https://cloud.google.com/iam/docs/conditions-resource-attributes#resource-name for examples used by other GCP Services. This field is **required** for services integrated with resource-attribute-based IAM conditions and/or CustomOrgPolicy. This field requires special handling for parents-only permissions such as `create` and `list`. See the document linked below for further details. See go/iam-conditions-sig-g3#populate-resource-attributes for specific details on populating this field.
532540
*/
533541
name?: string | null;
542+
/**
543+
* Used for calculating the next state of tags on the resource being passed for Custom Org Policy enforcement. NOTE: Only one of the tags representations (i.e. numeric or namespaced) should be populated. The input tags will be converted to the same representation before the calculation. This behavior intentionally may differ from other tags related fields in CheckPolicy request, which may require both formats to be passed in. IMPORTANT: If tags are unchanged, this field should not be set.
544+
*/
545+
nextStateOfTags?: Schema$NextStateOfTags;
534546
/**
535547
* The name of the service this resource belongs to. It is configured using the official_service_name of the Service as defined in service configurations under //configs/cloud/resourcetypes. For example, the official_service_name of cloud resource manager service is set as 'cloudresourcemanager.googleapis.com' according to //configs/cloud/resourcetypes/google/cloud/resourcemanager/prod.yaml This field is **required** for services integrated with resource-attribute-based IAM conditions and/or CustomOrgPolicy. This field requires special handling for parents-only permissions such as `create` and `list`. See the document linked below for further details. See go/iam-conditions-sig-g3#populate-resource-attributes for specific details on populating this field.
536548
*/
@@ -549,6 +561,28 @@ export namespace iap_v1 {
549561
*/
550562
policy?: Schema$Policy;
551563
}
564+
export interface Schema$TagsFullState {
565+
/**
566+
* If TagsFullState is initialized, the values in this field fully represent all the tags in the next state (the current tag values are not used). If tags.size() == 0, the next state of tags would be no tags for evaluation purposes. Only one type of tags reference (numeric or namespace) is required to be passed.
567+
*/
568+
tags?: {[key: string]: string} | null;
569+
}
570+
export interface Schema$TagsFullStateForChildResource {
571+
/**
572+
* If TagsFullStateForChildResource is initialized, the values in this field represent all the tags in the next state for the child resource. Only one type of tags reference (numeric or namespace) is required to be passed. IMPORTANT: This field should only be used when the target resource IAM policy name is UNKNOWN and the resource's parent IAM policy name is being passed in the request.
573+
*/
574+
tags?: {[key: string]: string} | null;
575+
}
576+
export interface Schema$TagsPartialState {
577+
/**
578+
* Keys of the tags that should be removed for evaluation purposes. IMPORTANT: Currently only numeric references are supported. Once support for namespace references is added, both the tag references (numeric and namespace) will be removed.
579+
*/
580+
tagKeysToRemove?: string[] | null;
581+
/**
582+
* Tags that’ll be updated or added to the current state of tags for evaluation purposes. If a key exists in both "tags_to_upsert" and "tag_keys_to_remove", the one in "tag_keys_to_remove" is ignored. Only one type of tags reference (numeric or namespace) is required to be passed.
583+
*/
584+
tagsToUpsert?: {[key: string]: string} | null;
585+
}
552586
/**
553587
* Request message for `TestIamPermissions` method.
554588
*/

0 commit comments

Comments
 (0)