feat: Automated regeneration of iam v1 client (googleapis#23160)

Auto-created at 2025-05-18 10:22:59 +0000 using the toys pull request generator.

Author: yoshi-code-bot

api_names_out.yaml

@@ -256896,6 +256896,7 @@
 "/iam:v1/WorkforcePoolProvider/attributeMapping": attribute_mapping
 "/iam:v1/WorkforcePoolProvider/attributeMapping/attribute_mapping": attribute_mapping
 "/iam:v1/WorkforcePoolProvider/description": description
+"/iam:v1/WorkforcePoolProvider/detailedAuditLogging": detailed_audit_logging
 "/iam:v1/WorkforcePoolProvider/disabled": disabled
 "/iam:v1/WorkforcePoolProvider/displayName": display_name
 "/iam:v1/WorkforcePoolProvider/expireTime": expire_time

generated/google-apis-iam_v1/CHANGELOG.md

@@ -1,7 +1,8 @@
 # Release history for google-apis-iam_v1
 
-### v0.68.0 (2025-05-04)
+### v0.68.0 (2025-05-18)
 
+* Regenerated from discovery document revision 20250509
 * Regenerated using generator version 0.17.0
 
 ### v0.67.0 (2025-04-20)

generated/google-apis-iam_v1/lib/google/apis/iam_v1/classes.rb

@@ -755,12 +755,20 @@ def update!(**args)
       class GoogleIamAdminV1WorkforcePoolProviderExtraAttributesOAuth2ClientQueryParameters
         include Google::Apis::Core::Hashable
 
-        # Optional. The filter used to request specific records from IdP. In case of
-        # attributes type as AZURE_AD_GROUPS_MAIL, it represents the filter used to
-        # request specific groups for users from IdP. By default, all of the groups
-        # associated with the user are fetched. The groups should be mail enabled and
-        # security enabled. See https://learn.microsoft.com/en-us/graph/search-query-
-        # parameter for more details.
+        # Optional. The filter used to request specific records from the IdP. By default,
+        # all of the groups that are associated with a user are fetched. For Microsoft
+        # Entra ID, you can add `$search` query parameters using [Keyword Query Language]
+        # (https://learn.microsoft.com/en-us/sharepoint/dev/general-development/keyword-
+        # query-language-kql-syntax-reference). To learn more about `$search` querying
+        # in Microsoft Entra ID, see [Use the `$search` query parameter] (https://learn.
+        # microsoft.com/en-us/graph/search-query-parameter). Additionally, Workforce
+        # Identity Federation automatically adds the following [`$filter` query
+        # parameters] (https://learn.microsoft.com/en-us/graph/filter-query-parameter),
+        # based on the value of `attributes_type`. Values passed to `filter` are
+        # converted to `$search` query parameters. Additional `$filter` query parameters
+        # cannot be added using this field. * `AZURE_AD_GROUPS_MAIL`: `mailEnabled` and `
+        # securityEnabled` filters are applied. * `AZURE_AD_GROUPS_ID`: `securityEnabled`
+        # filter is applied.
         # Corresponds to the JSON property `filter`
         # @return [String]
         attr_accessor :filter
@@ -944,34 +952,35 @@ def update!(**args)
       class InlineCertificateIssuanceConfig
         include Google::Apis::Core::Hashable
 
-        # Optional. A required mapping of a cloud region to the CA pool resource located
-        # in that region used for certificate issuance, adhering to these constraints: *
-        # Key format: A supported cloud region name equivalent to the location
-        # identifier in the corresponding map entry's value. * Value format: A valid CA
-        # pool resource path format like: "projects/`project`/locations/`location`/
-        # caPools/`ca_pool`" * Region Matching: Workloads are ONLY issued certificates
-        # from CA pools within the same region. Also the CA pool region (in value) must
-        # match the workload's region (key).
+        # Optional. A required mapping of a Google Cloud region to the CA pool resource
+        # located in that region. The CA pool is used for certificate issuance, adhering
+        # to the following constraints: * Key format: A supported cloud region name
+        # equivalent to the location identifier in the corresponding map entry's value. *
+        # Value format: A valid CA pool resource path format like: "projects/`project`/
+        # locations/`location`/caPools/`ca_pool`" * Region Matching: Workloads are ONLY
+        # issued certificates from CA pools within the same region. Also the CA pool
+        # region (in value) must match the workload's region (key).
         # Corresponds to the JSON property `caPools`
         # @return [Hash<String,String>]
         attr_accessor :ca_pools
 
         # Optional. Key algorithm to use when generating the key pair. This key pair
-        # will be used to create the certificate. If unspecified, this will default to
+        # will be used to create the certificate. If not specified, this will default to
         # ECDSA_P256.
         # Corresponds to the JSON property `keyAlgorithm`
         # @return [String]
         attr_accessor :key_algorithm
 
         # Optional. Lifetime of the workload certificates issued by the CA pool. Must be
-        # between 10 hours - 30 days. If unspecified, this will be defaulted to 24 hours.
+        # between 10 hours and 30 days. If not specified, this will be defaulted to 24
+        # hours.
         # Corresponds to the JSON property `lifetime`
         # @return [String]
         attr_accessor :lifetime
 
         # Optional. Rotation window percentage indicating when certificate rotation
-        # should be initiated based on remaining lifetime. Must be between 10 - 80. If
-        # unspecified, this will be defaulted to 50.
+        # should be initiated based on remaining lifetime. Must be between 10 and 80. If
+        # not specified, this will be defaulted to 50.
         # Corresponds to the JSON property `rotationWindowPercentage`
         # @return [Fixnum]
         attr_accessor :rotation_window_percentage
@@ -998,12 +1007,12 @@ class InlineTrustConfig
         include Google::Apis::Core::Hashable
 
         # Optional. Maps specific trust domains (e.g., "example.com") to their
-        # corresponding TrustStore objects, which contain the trusted root certificates
-        # for that domain. There can be a maximum of 10 trust domain entries in this map.
-        # Note that a trust domain automatically trusts itself and don't need to be
-        # specified here. If however, this WorkloadIdentityPool's trust domain contains
-        # any trust anchors in the additional_trust_bundles map, those trust anchors
-        # will be *appended to* the Trust Bundle automatically derived from your
+        # corresponding TrustStore, which contain the trusted root certificates for that
+        # domain. There can be a maximum of 10 trust domain entries in this map. Note
+        # that a trust domain automatically trusts itself and don't need to be specified
+        # here. If however, this WorkloadIdentityPool's trust domain contains any trust
+        # anchors in the additional_trust_bundles map, those trust anchors will be *
+        # appended to* the trust bundle automatically derived from your
         # InlineCertificateIssuanceConfig's ca_pools.
         # Corresponds to the JSON property `additionalTrustBundles`
         # @return [Hash<String,Google::Apis::IamV1::TrustStore>]
@@ -1717,10 +1726,10 @@ class Oidc
         # @return [Array<String>]
         attr_accessor :allowed_audiences
 
-        # Required. The OIDC issuer URL. Must be an HTTPS endpoint. Used per OpenID
-        # Connect Discovery 1.0 spec to locate the provider's public keys (via `jwks_uri`
-        # ) for verifying tokens like the OIDC ID token. These public key types must be '
-        # EC' or 'RSA'.
+        # Required. The OIDC issuer URL. Must be an HTTPS endpoint. Per OpenID Connect
+        # Discovery 1.0 spec, the OIDC issuer URL is used to locate the provider's
+        # public keys (via `jwks_uri`) for verifying tokens like the OIDC ID token.
+        # These public key types must be 'EC' or 'RSA'.
         # Corresponds to the JSON property `issuerUri`
         # @return [String]
         attr_accessor :issuer_uri
@@ -2173,9 +2182,9 @@ def update!(**args)
       class QueryGrantableRolesRequest
         include Google::Apis::Core::Hashable
 
-        # Required. The full resource name to query from the list of grantable roles.
-        # The name follows the Google Cloud Platform resource format. For example, a
-        # Cloud Platform project with id `my-project` will be named `//
+        # Required. Required. The full resource name to query from the list of grantable
+        # roles. The name follows the Google Cloud Platform resource format. For example,
+        # a Cloud Platform project with id `my-project` will be named `//
         # cloudresourcemanager.googleapis.com/projects/my-project`.
         # Corresponds to the JSON property `fullResourceName`
         # @return [String]
@@ -2945,20 +2954,20 @@ def update!(**args)
       end
 
       # Trust store that contains trust anchors and optional intermediate CAs used in
-      # PKI to build trust chain and verify client's identity.
+      # PKI to build trust chain and verify a client's identity.
       class TrustStore
         include Google::Apis::Core::Hashable
 
         # Optional. Set of intermediate CA certificates used for building the trust
-        # chain to trust anchor. IMPORTANT: * Intermediate CAs are only supported when
-        # configuring x509 federation.
+        # chain to the trust anchor. Important: Intermediate CAs are only supported for
+        # X.509 federation.
         # Corresponds to the JSON property `intermediateCas`
         # @return [Array<Google::Apis::IamV1::IntermediateCa>]
         attr_accessor :intermediate_cas
 
-        # Required. List of Trust Anchors to be used while performing validation against
-        # a given TrustStore. The incoming end entity's certificate must be chained up
-        # to one of the trust anchors here.
+        # Required. List of trust anchors to be used while performing validation against
+        # a given TrustStore. The incoming end entity's certificate must be in the trust
+        # chain of one of the trust anchors here.
         # Corresponds to the JSON property `trustAnchors`
         # @return [Array<Google::Apis::IamV1::TrustAnchor>]
         attr_accessor :trust_anchors
@@ -3338,6 +3347,14 @@ class WorkforcePoolProvider
         # @return [String]
         attr_accessor :description
 
+        # Optional. If true, populates additional debug information in Cloud Audit Logs
+        # for this provider. Logged attribute mappings and values can be found in `sts.
+        # googleapis.com` data access logs. Default value is false.
+        # Corresponds to the JSON property `detailedAuditLogging`
+        # @return [Boolean]
+        attr_accessor :detailed_audit_logging
+        alias_method :detailed_audit_logging?, :detailed_audit_logging
+      
         # Optional. Disables the workforce pool provider. You cannot use a disabled
         # provider to exchange tokens. However, existing tokens still grant access.
         # Corresponds to the JSON property `disabled`
@@ -3396,6 +3413,7 @@ def update!(**args)
           @attribute_condition = args[:attribute_condition] if args.key?(:attribute_condition)
           @attribute_mapping = args[:attribute_mapping] if args.key?(:attribute_mapping)
           @description = args[:description] if args.key?(:description)
+          @detailed_audit_logging = args[:detailed_audit_logging] if args.key?(:detailed_audit_logging)
           @disabled = args[:disabled] if args.key?(:disabled)
           @display_name = args[:display_name] if args.key?(:display_name)
           @expire_time = args[:expire_time] if args.key?(:expire_time)
@@ -3838,7 +3856,7 @@ class X509
         include Google::Apis::Core::Hashable
 
         # Trust store that contains trust anchors and optional intermediate CAs used in
-        # PKI to build trust chain and verify client's identity.
+        # PKI to build trust chain and verify a client's identity.
         # Corresponds to the JSON property `trustStore`
         # @return [Google::Apis::IamV1::TrustStore]
         attr_accessor :trust_store

generated/google-apis-iam_v1/lib/google/apis/iam_v1/gem_version.rb

@@ -22,7 +22,7 @@ module IamV1
       GENERATOR_VERSION = "0.17.0"
 
       # Revision of the discovery document this client was generated from
-      REVISION = "20250411"
+      REVISION = "20250509"
     end
   end
 end

generated/google-apis-iam_v1/lib/google/apis/iam_v1/representations.rb

@@ -1564,6 +1564,7 @@ class Representation < Google::Apis::Core::JsonRepresentation
           property :attribute_condition, as: 'attributeCondition'
           hash :attribute_mapping, as: 'attributeMapping'
           property :description, as: 'description'
+          property :detailed_audit_logging, as: 'detailedAuditLogging'
           property :disabled, as: 'disabled'
           property :display_name, as: 'displayName'
           property :expire_time, as: 'expireTime'

generated/google-apis-iam_v1/lib/google/apis/iam_v1/service.rb

@@ -1921,8 +1921,7 @@ def get_project_location_workload_identity_pool(name, fields: nil, quota_user: n
           execute_or_queue_command(command, &block)
         end
 
-        # Gets IAM policies for one of WorkloadIdentityPool
-        # WorkloadIdentityPoolNamespace WorkloadIdentityPoolManagedIdentity
+        # Gets the IAM policy of a WorkloadIdentityPool.
         # @param [String] resource
         #   REQUIRED: The resource for which the policy is being requested. See [Resource
         #   names](https://cloud.google.com/apis/design/resource_names) for the
@@ -2035,8 +2034,7 @@ def patch_project_location_workload_identity_pool(name, workload_identity_pool_o
           execute_or_queue_command(command, &block)
         end
 
-        # Sets IAM policies on one of WorkloadIdentityPool WorkloadIdentityPoolNamespace
-        # WorkloadIdentityPoolManagedIdentity
+        # Sets the IAM policies on a WorkloadIdentityPool
         # @param [String] resource
         #   REQUIRED: The resource for which the policy is being specified. See [Resource
         #   names](https://cloud.google.com/apis/design/resource_names) for the
@@ -2071,8 +2069,7 @@ def set_workload_identity_pool_iam_policy(resource, set_iam_policy_request_objec
           execute_or_queue_command(command, &block)
         end
 
-        # Returns the caller's permissions on one of WorkloadIdentityPool
-        # WorkloadIdentityPoolNamespace WorkloadIdentityPoolManagedIdentity
+        # Returns the caller's permissions on a WorkloadIdentityPool
         # @param [String] resource
         #   REQUIRED: The resource for which the policy detail is being requested. See [
         #   Resource names](https://cloud.google.com/apis/design/resource_names) for the
@@ -2494,7 +2491,8 @@ def get_project_location_workload_identity_pool_namespace_managed_identity(name,
         end
 
         # Lists all non-deleted WorkloadIdentityPoolManagedIdentitys in a namespace. If `
-        # show_deleted` is set to `true`, then deleted managed identites are also listed.
+        # show_deleted` is set to `true`, then deleted managed identities are also
+        # listed.
         # @param [String] parent
         #   Required. The parent resource to list managed identities for.
         # @param [Fixnum] page_size