|
17 | 17 | Modifications using v1alpha should be limited to policies with |
18 | 18 | non-production/non-critical service perimeters. |
19 | 19 | version: v1 |
20 | | - x-discovery-doc-revision: '20240908' |
21 | | - x-generated-date: '2024-09-19' |
| 20 | + x-discovery-doc-revision: '20241028' |
| 21 | + x-generated-date: '2024-11-06' |
22 | 22 | externalDocs: |
23 | 23 | url: https://cloud.google.com/access-context-manager/docs/reference/rest/ |
24 | 24 | servers: |
@@ -1301,6 +1301,11 @@ components: |
1301 | 1301 | reauthSettings: |
1302 | 1302 | description: Optional. GCSL policy for the group key. |
1303 | 1303 | $ref: '#/components/schemas/ReauthSettings' |
| 1304 | + sessionSettings: |
| 1305 | + description: >- |
| 1306 | + Optional. GCSL policy for the group key. Migrated from |
| 1307 | + ReauthSettings |
| 1308 | + $ref: '#/components/schemas/SessionSettings' |
1304 | 1309 | restrictedClientApplications: |
1305 | 1310 | description: >- |
1306 | 1311 | Optional. A list of applications that are subject to this binding's |
@@ -1373,6 +1378,62 @@ components: |
1373 | 1378 | set above will be disregarded and the session length is basically |
1374 | 1379 | infinite. |
1375 | 1380 | type: boolean |
| 1381 | + SessionSettings: |
| 1382 | + id: SessionSettings |
| 1383 | + description: >- |
| 1384 | + Stores settings related to Google Cloud Session Length including session |
| 1385 | + duration, the type of challenge (i.e. method) they should face when |
| 1386 | + their session expires, and other related settings. |
| 1387 | + type: object |
| 1388 | + properties: |
| 1389 | + sessionReauthMethod: |
| 1390 | + description: Optional. Session method when users GCP session is up. |
| 1391 | + type: string |
| 1392 | + enumDescriptions: |
| 1393 | + - If method undefined in API, we will use LOGIN by default. |
| 1394 | + - >- |
| 1395 | + The user will prompted to perform regular login. Users who are |
| 1396 | + enrolled for two-step verification and haven't chosen to "Remember |
| 1397 | + this computer" will be prompted for their second factor. |
| 1398 | + - >- |
| 1399 | + The user will be prompted to autheticate using their security key. |
| 1400 | + If no security key has been configured, then we will fallback to |
| 1401 | + LOGIN. |
| 1402 | + - The user will be prompted for their password. |
| 1403 | + enum: |
| 1404 | + - SESSION_REAUTH_METHOD_UNSPECIFIED |
| 1405 | + - LOGIN |
| 1406 | + - SECURITY_KEY |
| 1407 | + - PASSWORD |
| 1408 | + sessionLength: |
| 1409 | + description: >- |
| 1410 | + Optional. The session length. Setting this field to zero is equal to |
| 1411 | + disabling. Session. Also can set infinite session by flipping the |
| 1412 | + enabled bit to false below. If use_oidc_max_age is true, for OIDC |
| 1413 | + apps, the session length will be the minimum of this field and OIDC |
| 1414 | + max_age param. |
| 1415 | + type: string |
| 1416 | + format: google-duration |
| 1417 | + maxInactivity: |
| 1418 | + description: >- |
| 1419 | + Optional. How long a user is allowed to take between actions before |
| 1420 | + a new access token must be issued. Presently only set for Cloud |
| 1421 | + Apps. |
| 1422 | + type: string |
| 1423 | + format: google-duration |
| 1424 | + useOidcMaxAge: |
| 1425 | + description: >- |
| 1426 | + Optional. Only useful for OIDC apps. When false, the OIDC max_age |
| 1427 | + param, if passed in the authentication request will be ignored. When |
| 1428 | + true, the re-auth period will be the minimum of the session_length |
| 1429 | + field and the max_age OIDC param. |
| 1430 | + type: boolean |
| 1431 | + sessionLengthEnabled: |
| 1432 | + description: >- |
| 1433 | + Optional. Big red button to turn off GCSL. When false, all fields |
| 1434 | + set above will be disregarded and the session length is basically |
| 1435 | + infinite. |
| 1436 | + type: boolean |
1376 | 1437 | Application: |
1377 | 1438 | id: Application |
1378 | 1439 | description: An application that accesses Google Cloud APIs. |
@@ -1446,6 +1507,11 @@ components: |
1446 | 1507 | Optional. Reauth settings applied to user access on a given |
1447 | 1508 | AccessScope. |
1448 | 1509 | $ref: '#/components/schemas/ReauthSettings' |
| 1510 | + sessionSettings: |
| 1511 | + description: >- |
| 1512 | + Optional. Session settings applied to user access on a given |
| 1513 | + AccessScope. Migrated from ReauthSettings |
| 1514 | + $ref: '#/components/schemas/SessionSettings' |
1449 | 1515 | SetIamPolicyRequest: |
1450 | 1516 | id: SetIamPolicyRequest |
1451 | 1517 | description: Request message for `SetIamPolicy` method. |
@@ -3627,6 +3693,10 @@ paths: |
3627 | 3693 | schema: |
3628 | 3694 | type: string |
3629 | 3695 | format: google-fieldmask |
| 3696 | + - in: query |
| 3697 | + name: append |
| 3698 | + schema: |
| 3699 | + type: boolean |
3630 | 3700 | delete: |
3631 | 3701 | description: >- |
3632 | 3702 | Deletes a GcpUserAccessBinding. Completion of this long-running |
|
0 commit comments