feat: Automated regeneration of BinaryAuthorization client (googleapis#12846)

Auto-created at 2025-01-21 13:11:21 +0000 using the toys pull request generator.

Author: yoshi-code-bot

clients/binary_authorization/lib/google_api/binary_authorization/v1/metadata.ex

@@ -20,7 +20,7 @@ defmodule GoogleApi.BinaryAuthorization.V1 do
   API client metadata for GoogleApi.BinaryAuthorization.V1.
   """
 
-  @discovery_revision "20241115"
+  @discovery_revision "20250117"
 
   def discovery_revision(), do: @discovery_revision
 end

clients/binary_authorization/lib/google_api/binary_authorization/v1/model/admission_rule.ex

@@ -23,7 +23,7 @@ defmodule GoogleApi.BinaryAuthorization.V1.Model.AdmissionRule do
 
   *   `enforcementMode` (*type:* `String.t`, *default:* `nil`) - Required. The action when a pod creation is denied by the admission rule.
   *   `evaluationMode` (*type:* `String.t`, *default:* `nil`) - Required. How this admission rule will be evaluated.
-  *   `requireAttestationsBy` (*type:* `list(String.t)`, *default:* `nil`) - 
+  *   `requireAttestationsBy` (*type:* `list(String.t)`, *default:* `nil`) - Optional. The resource names of the attestors that must attest to a container image, in the format `projects/*/attestors/*`. Each attestor must exist before a policy can reference it. To add an attestor to a policy the principal issuing the policy change request must be able to read the attestor resource. Note: this field must be non-empty when the `evaluation_mode` field specifies `REQUIRE_ATTESTATION`, otherwise it must be empty.
   """
 
   use GoogleApi.Gax.ModelBase

clients/binary_authorization/lib/google_api/binary_authorization/v1/model/policy.ex

@@ -22,7 +22,7 @@ defmodule GoogleApi.BinaryAuthorization.V1.Model.Policy do
   ## Attributes
 
   *   `admissionWhitelistPatterns` (*type:* `list(GoogleApi.BinaryAuthorization.V1.Model.AdmissionWhitelistPattern.t)`, *default:* `nil`) - Optional. Admission policy allowlisting. A matching admission request will always be permitted. This feature is typically used to exclude Google or third-party infrastructure images from Binary Authorization policies.
-  *   `clusterAdmissionRules` (*type:* `%{optional(String.t) => GoogleApi.BinaryAuthorization.V1.Model.AdmissionRule.t}`, *default:* `nil`) - Optional. Per-cluster admission rules. Cluster spec format: `location.clusterId`. There can be at most one admission rule per cluster spec. A `location` is either a compute zone (e.g. us-central1-a) or a region (e.g. us-central1). For `clusterId` syntax restrictions see https://cloud.google.com/container-engine/reference/rest/v1/projects.zones.clusters.
+  *   `clusterAdmissionRules` (*type:* `%{optional(String.t) => GoogleApi.BinaryAuthorization.V1.Model.AdmissionRule.t}`, *default:* `nil`) - Optional. A valid policy has only one of the following rule maps non-empty, i.e. only one of `cluster_admission_rules`, `kubernetes_namespace_admission_rules`, `kubernetes_service_account_admission_rules`, or `istio_service_identity_admission_rules` can be non-empty. Per-cluster admission rules. Cluster spec format: `location.clusterId`. There can be at most one admission rule per cluster spec. A `location` is either a compute zone (e.g. us-central1-a) or a region (e.g. us-central1). For `clusterId` syntax restrictions see https://cloud.google.com/container-engine/reference/rest/v1/projects.zones.clusters.
   *   `defaultAdmissionRule` (*type:* `GoogleApi.BinaryAuthorization.V1.Model.AdmissionRule.t`, *default:* `nil`) - Required. Default admission rule for a cluster without a per-cluster, per- kubernetes-service-account, or per-istio-service-identity admission rule.
   *   `description` (*type:* `String.t`, *default:* `nil`) - Optional. A descriptive comment.
   *   `etag` (*type:* `String.t`, *default:* `nil`) - Optional. A checksum, returned by the server, that can be sent on update requests to ensure the policy has an up-to-date value before attempting to update it. See https://google.aip.dev/154.

clients/binary_authorization/mix.exs

@@ -18,7 +18,7 @@
 defmodule GoogleApi.BinaryAuthorization.Mixfile do
   use Mix.Project
 
-  @version "0.17.1"
+  @version "0.17.2"
 
   def project() do
     [