mirror of
https://github.com/OMGeeky/google-apis-rs.git
synced 2026-01-19 09:50:46 +01:00
Update all json files; make some fixes to make it work at all
This commit is contained in:
Sebastian Thiel
@@ -24,10 +24,10 @@
|
||||
"description": "Administer your Cloud Bigtable tables"
|
||||
},
|
||||
"https://www.googleapis.com/auth/cloud-platform": {
|
||||
"description": "View and manage your data across Google Cloud Platform services"
|
||||
"description": "See, edit, configure, and delete your Google Cloud data and see the email address for your Google Account."
|
||||
},
|
||||
"https://www.googleapis.com/auth/cloud-platform.read-only": {
|
||||
"description": "View your data across Google Cloud Platform services"
|
||||
"description": "View your data across Google Cloud services and see the email address of your Google Account"
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -286,7 +286,7 @@
|
||||
"instances": {
|
||||
"methods": {
|
||||
"create": {
|
||||
"description": "Create an instance within a project.",
|
||||
"description": "Create an instance within a project. Note that exactly one of Cluster.serve_nodes and Cluster.cluster_config.cluster_autoscaling_config can be set. If serve_nodes is set to non-zero, then the cluster is manually scaled. If cluster_config.cluster_autoscaling_config is non-empty, then autoscaling is enabled.",
|
||||
"flatPath": "v2/projects/{projectsId}/instances",
|
||||
"httpMethod": "POST",
|
||||
"id": "bigtableadmin.projects.instances.create",
|
||||
@@ -789,7 +789,7 @@
|
||||
"clusters": {
|
||||
"methods": {
|
||||
"create": {
|
||||
"description": "Creates a cluster within an instance.",
|
||||
"description": "Creates a cluster within an instance. Note that exactly one of Cluster.serve_nodes and Cluster.cluster_config.cluster_autoscaling_config can be set. If serve_nodes is set to non-zero, then the cluster is manually scaled. If cluster_config.cluster_autoscaling_config is non-empty, then autoscaling is enabled.",
|
||||
"flatPath": "v2/projects/{projectsId}/instances/{instancesId}/clusters",
|
||||
"httpMethod": "POST",
|
||||
"id": "bigtableadmin.projects.instances.clusters.create",
|
||||
@@ -923,8 +923,47 @@
|
||||
"https://www.googleapis.com/auth/cloud-platform.read-only"
|
||||
]
|
||||
},
|
||||
"partialUpdateCluster": {
|
||||
"description": "Partially updates a cluster within a project. This method is the preferred way to update a Cluster. To enable and update autoscaling, set cluster_config.cluster_autoscaling_config. When autoscaling is enabled, serve_nodes is treated as an OUTPUT_ONLY field, meaning that updates to it are ignored. Note that an update cannot simultaneously set serve_nodes to non-zero and cluster_config.cluster_autoscaling_config to non-empty, and also specify both in the update_mask. To disable autoscaling, clear cluster_config.cluster_autoscaling_config, and explicitly set a serve_node count via the update_mask.",
|
||||
"flatPath": "v2/projects/{projectsId}/instances/{instancesId}/clusters/{clustersId}",
|
||||
"httpMethod": "PATCH",
|
||||
"id": "bigtableadmin.projects.instances.clusters.partialUpdateCluster",
|
||||
"parameterOrder": [
|
||||
"name"
|
||||
],
|
||||
"parameters": {
|
||||
"name": {
|
||||
"description": "The unique name of the cluster. Values are of the form `projects/{project}/instances/{instance}/clusters/a-z*`.",
|
||||
"location": "path",
|
||||
"pattern": "^projects/[^/]+/instances/[^/]+/clusters/[^/]+$",
|
||||
"required": true,
|
||||
"type": "string"
|
||||
},
|
||||
"updateMask": {
|
||||
"description": "Required. The subset of Cluster fields which should be replaced.",
|
||||
"format": "google-fieldmask",
|
||||
"location": "query",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"path": "v2/{+name}",
|
||||
"request": {
|
||||
"$ref": "Cluster"
|
||||
},
|
||||
"response": {
|
||||
"$ref": "Operation"
|
||||
},
|
||||
"scopes": [
|
||||
"https://www.googleapis.com/auth/bigtable.admin",
|
||||
"https://www.googleapis.com/auth/bigtable.admin.cluster",
|
||||
"https://www.googleapis.com/auth/bigtable.admin.instance",
|
||||
"https://www.googleapis.com/auth/cloud-bigtable.admin",
|
||||
"https://www.googleapis.com/auth/cloud-bigtable.admin.cluster",
|
||||
"https://www.googleapis.com/auth/cloud-platform"
|
||||
]
|
||||
},
|
||||
"update": {
|
||||
"description": "Updates a cluster within an instance.",
|
||||
"description": "Updates a cluster within an instance. Note that UpdateCluster does not support updating cluster_config.cluster_autoscaling_config. In order to update it, you must use PartialUpdateCluster.",
|
||||
"flatPath": "v2/projects/{projectsId}/instances/{instancesId}/clusters/{clustersId}",
|
||||
"httpMethod": "PUT",
|
||||
"id": "bigtableadmin.projects.instances.clusters.update",
|
||||
@@ -1433,7 +1472,7 @@
|
||||
"Only populates `name`.",
|
||||
"Only populates `name` and fields related to the table's schema.",
|
||||
"Only populates `name` and fields related to the table's replication state.",
|
||||
"Only populates 'name' and fields related to the table's encryption state.",
|
||||
"Only populates `name` and fields related to the table's encryption state.",
|
||||
"Populates all fields."
|
||||
],
|
||||
"location": "query",
|
||||
@@ -1513,7 +1552,7 @@
|
||||
"type": "string"
|
||||
},
|
||||
"view": {
|
||||
"description": "The view to be applied to the returned tables' fields. Only NAME_ONLY view (default) and REPLICATION_VIEW are supported.",
|
||||
"description": "The view to be applied to the returned tables' fields. Only NAME_ONLY view (default), REPLICATION_VIEW and ENCRYPTION_VIEW are supported.",
|
||||
"enum": [
|
||||
"VIEW_UNSPECIFIED",
|
||||
"NAME_ONLY",
|
||||
@@ -1527,7 +1566,7 @@
|
||||
"Only populates `name`.",
|
||||
"Only populates `name` and fields related to the table's schema.",
|
||||
"Only populates `name` and fields related to the table's replication state.",
|
||||
"Only populates 'name' and fields related to the table's encryption state.",
|
||||
"Only populates `name` and fields related to the table's encryption state.",
|
||||
"Populates all fields."
|
||||
],
|
||||
"location": "query",
|
||||
@@ -1580,7 +1619,7 @@
|
||||
]
|
||||
},
|
||||
"restore": {
|
||||
"description": "Create a new table by restoring from a completed backup. The new table must be in the same instance as the instance containing the backup. The returned table long-running operation can be used to track the progress of the operation, and to cancel it. The metadata field type is RestoreTableMetadata. The response type is Table, if successful.",
|
||||
"description": "Create a new table by restoring from a completed backup. The new table must be in the same project as the instance containing the backup. The returned table long-running operation can be used to track the progress of the operation, and to cancel it. The metadata field type is RestoreTableMetadata. The response type is Table, if successful.",
|
||||
"flatPath": "v2/projects/{projectsId}/instances/{instancesId}/tables:restore",
|
||||
"httpMethod": "POST",
|
||||
"id": "bigtableadmin.projects.instances.tables.restore",
|
||||
@@ -1589,7 +1628,7 @@
|
||||
],
|
||||
"parameters": {
|
||||
"parent": {
|
||||
"description": "Required. The name of the instance in which to create the restored table. This instance must be the parent of the source backup. Values are of the form `projects//instances/`.",
|
||||
"description": "Required. The name of the instance in which to create the restored table. This instance must be in the same project as the source backup. Values are of the form `projects//instances/`.",
|
||||
"location": "path",
|
||||
"pattern": "^projects/[^/]+/instances/[^/]+$",
|
||||
"required": true,
|
||||
@@ -1722,7 +1761,7 @@
|
||||
],
|
||||
"parameters": {
|
||||
"filter": {
|
||||
"description": "The standard list filter.",
|
||||
"description": "A filter to narrow down results to a preferred subset. The filtering language accepts strings like \"displayName=tokyo\", and is documented in more detail in [AIP-160](https://google.aip.dev/160).",
|
||||
"location": "query",
|
||||
"type": "string"
|
||||
},
|
||||
@@ -1734,13 +1773,13 @@
|
||||
"type": "string"
|
||||
},
|
||||
"pageSize": {
|
||||
"description": "The standard list page size.",
|
||||
"description": "The maximum number of results to return. If not set, the service selects a default.",
|
||||
"format": "int32",
|
||||
"location": "query",
|
||||
"type": "integer"
|
||||
},
|
||||
"pageToken": {
|
||||
"description": "The standard list page token.",
|
||||
"description": "A page token received from the `next_page_token` field in the response. Send that page token to receive the subsequent page.",
|
||||
"location": "query",
|
||||
"type": "string"
|
||||
}
|
||||
@@ -1764,7 +1803,7 @@
|
||||
}
|
||||
}
|
||||
},
|
||||
"revision": "20210323",
|
||||
"revision": "20220222",
|
||||
"rootUrl": "https://bigtableadmin.googleapis.com/",
|
||||
"schemas": {
|
||||
"AppProfile": {
|
||||
@@ -1842,6 +1881,35 @@
|
||||
},
|
||||
"type": "object"
|
||||
},
|
||||
"AutoscalingLimits": {
|
||||
"description": "Limits for the number of nodes a Cluster can autoscale up/down to.",
|
||||
"id": "AutoscalingLimits",
|
||||
"properties": {
|
||||
"maxServeNodes": {
|
||||
"description": "Required. Maximum number of nodes to scale up to.",
|
||||
"format": "int32",
|
||||
"type": "integer"
|
||||
},
|
||||
"minServeNodes": {
|
||||
"description": "Required. Minimum number of nodes to scale down to.",
|
||||
"format": "int32",
|
||||
"type": "integer"
|
||||
}
|
||||
},
|
||||
"type": "object"
|
||||
},
|
||||
"AutoscalingTargets": {
|
||||
"description": "The Autoscaling targets for a Cluster. These determine the recommended nodes.",
|
||||
"id": "AutoscalingTargets",
|
||||
"properties": {
|
||||
"cpuUtilizationPercent": {
|
||||
"description": "The cpu utilization that the Autoscaler should be trying to achieve. This number is on a scale from 0 (no utilization) to 100 (total utilization), and is limited between 10 and 80.",
|
||||
"format": "int32",
|
||||
"type": "integer"
|
||||
}
|
||||
},
|
||||
"type": "object"
|
||||
},
|
||||
"Backup": {
|
||||
"description": "A backup of a Cloud Bigtable table.",
|
||||
"id": "Backup",
|
||||
@@ -1930,22 +1998,22 @@
|
||||
"type": "object"
|
||||
},
|
||||
"Binding": {
|
||||
"description": "Associates `members` with a `role`.",
|
||||
"description": "Associates `members`, or principals, with a `role`.",
|
||||
"id": "Binding",
|
||||
"properties": {
|
||||
"condition": {
|
||||
"$ref": "Expr",
|
||||
"description": "The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the members in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies)."
|
||||
"description": "The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies)."
|
||||
},
|
||||
"members": {
|
||||
"description": "Specifies the identities requesting access for a Cloud Platform resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. ",
|
||||
"description": "Specifies the principals requesting access for a Cloud Platform resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. ",
|
||||
"items": {
|
||||
"type": "string"
|
||||
},
|
||||
"type": "array"
|
||||
},
|
||||
"role": {
|
||||
"description": "Role that is assigned to `members`. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.",
|
||||
"description": "Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
@@ -1977,6 +2045,10 @@
|
||||
"description": "A resizable group of nodes in a particular cloud location, capable of serving all Tables in the parent Instance.",
|
||||
"id": "Cluster",
|
||||
"properties": {
|
||||
"clusterConfig": {
|
||||
"$ref": "ClusterConfig",
|
||||
"description": "Configuration for this cluster."
|
||||
},
|
||||
"defaultStorageType": {
|
||||
"description": "Immutable. The type of storage used by this cluster to serve its parent instance's tables, unless explicitly overridden.",
|
||||
"enum": [
|
||||
@@ -2004,7 +2076,7 @@
|
||||
"type": "string"
|
||||
},
|
||||
"serveNodes": {
|
||||
"description": "Required. The number of nodes allocated to this cluster. More nodes enable higher throughput and more consistent performance.",
|
||||
"description": "The number of nodes allocated to this cluster. More nodes enable higher throughput and more consistent performance.",
|
||||
"format": "int32",
|
||||
"type": "integer"
|
||||
},
|
||||
@@ -2030,6 +2102,32 @@
|
||||
},
|
||||
"type": "object"
|
||||
},
|
||||
"ClusterAutoscalingConfig": {
|
||||
"description": "Autoscaling config for a cluster.",
|
||||
"id": "ClusterAutoscalingConfig",
|
||||
"properties": {
|
||||
"autoscalingLimits": {
|
||||
"$ref": "AutoscalingLimits",
|
||||
"description": "Required. Autoscaling limits for this cluster."
|
||||
},
|
||||
"autoscalingTargets": {
|
||||
"$ref": "AutoscalingTargets",
|
||||
"description": "Required. Autoscaling targets for this cluster."
|
||||
}
|
||||
},
|
||||
"type": "object"
|
||||
},
|
||||
"ClusterConfig": {
|
||||
"description": "Configuration for a cluster.",
|
||||
"id": "ClusterConfig",
|
||||
"properties": {
|
||||
"clusterAutoscalingConfig": {
|
||||
"$ref": "ClusterAutoscalingConfig",
|
||||
"description": "Autoscaling configuration for this cluster."
|
||||
}
|
||||
},
|
||||
"type": "object"
|
||||
},
|
||||
"ClusterState": {
|
||||
"description": "The state of a table's data in a particular cluster.",
|
||||
"id": "ClusterState",
|
||||
@@ -2306,34 +2404,6 @@
|
||||
},
|
||||
"type": "object"
|
||||
},
|
||||
"FailureTrace": {
|
||||
"description": "Added to the error payload.",
|
||||
"id": "FailureTrace",
|
||||
"properties": {
|
||||
"frames": {
|
||||
"items": {
|
||||
"$ref": "Frame"
|
||||
},
|
||||
"type": "array"
|
||||
}
|
||||
},
|
||||
"type": "object"
|
||||
},
|
||||
"Frame": {
|
||||
"id": "Frame",
|
||||
"properties": {
|
||||
"targetName": {
|
||||
"type": "string"
|
||||
},
|
||||
"workflowGuid": {
|
||||
"type": "string"
|
||||
},
|
||||
"zoneId": {
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"type": "object"
|
||||
},
|
||||
"GcRule": {
|
||||
"description": "Rule for determining which cells to delete during garbage collection.",
|
||||
"id": "GcRule",
|
||||
@@ -2392,7 +2462,7 @@
|
||||
"id": "GetPolicyOptions",
|
||||
"properties": {
|
||||
"requestedPolicyVersion": {
|
||||
"description": "Optional. The policy format version to be returned. Valid values are 0, 1, and 3. Requests specifying an invalid value will be rejected. Requests for policies with any conditional bindings must specify version 3. Policies without any conditional bindings may specify any valid value or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).",
|
||||
"description": "Optional. The maximum policy version that will be used to format the policy. Valid values are 0, 1, and 3. Requests specifying an invalid value will be rejected. Requests for policies with any conditional role bindings must specify version 3. Policies with no conditional role bindings may specify any valid value or leave the field unset. The policy in the response might use the policy version that you specified, or it might use a lower policy version. For example, if you specify version 3, but the policy has no conditional role bindings, the response uses version 1. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).",
|
||||
"format": "int32",
|
||||
"type": "integer"
|
||||
}
|
||||
@@ -2403,6 +2473,12 @@
|
||||
"description": "A collection of Bigtable Tables and the resources that serve them. All tables in an instance are served from all Clusters in the instance.",
|
||||
"id": "Instance",
|
||||
"properties": {
|
||||
"createTime": {
|
||||
"description": "Output only. A server-assigned timestamp representing when this Instance was created. For instances created before this field was added (August 2021), this value is `seconds: 0, nanos: 1`.",
|
||||
"format": "google-datetime",
|
||||
"readOnly": true,
|
||||
"type": "string"
|
||||
},
|
||||
"displayName": {
|
||||
"description": "Required. The descriptive name for this instance as it appears in UIs. Can be changed at any time, but should be kept globally unique to avoid confusion.",
|
||||
"type": "string"
|
||||
@@ -2685,7 +2761,15 @@
|
||||
"MultiClusterRoutingUseAny": {
|
||||
"description": "Read/write requests are routed to the nearest cluster in the instance, and will fail over to the nearest cluster that is available in the event of transient errors or delays. Clusters in a region are considered equidistant. Choosing this option sacrifices read-your-writes consistency to improve availability.",
|
||||
"id": "MultiClusterRoutingUseAny",
|
||||
"properties": {},
|
||||
"properties": {
|
||||
"clusterIds": {
|
||||
"description": "The set of clusters to route to. The order is ignored; clusters will be tried in order of distance. If left empty, all clusters are eligible.",
|
||||
"items": {
|
||||
"type": "string"
|
||||
},
|
||||
"type": "array"
|
||||
}
|
||||
},
|
||||
"type": "object"
|
||||
},
|
||||
"Operation": {
|
||||
@@ -2760,6 +2844,43 @@
|
||||
},
|
||||
"type": "object"
|
||||
},
|
||||
"PartialUpdateClusterMetadata": {
|
||||
"description": "The metadata for the Operation returned by PartialUpdateCluster.",
|
||||
"id": "PartialUpdateClusterMetadata",
|
||||
"properties": {
|
||||
"finishTime": {
|
||||
"description": "The time at which the operation failed or was completed successfully.",
|
||||
"format": "google-datetime",
|
||||
"type": "string"
|
||||
},
|
||||
"originalRequest": {
|
||||
"$ref": "PartialUpdateClusterRequest",
|
||||
"description": "The original request for PartialUpdateCluster."
|
||||
},
|
||||
"requestTime": {
|
||||
"description": "The time at which the original request was received.",
|
||||
"format": "google-datetime",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"type": "object"
|
||||
},
|
||||
"PartialUpdateClusterRequest": {
|
||||
"description": "Request message for BigtableInstanceAdmin.PartialUpdateCluster.",
|
||||
"id": "PartialUpdateClusterRequest",
|
||||
"properties": {
|
||||
"cluster": {
|
||||
"$ref": "Cluster",
|
||||
"description": "Required. The Cluster which contains the partial updates to be applied, subject to the update_mask."
|
||||
},
|
||||
"updateMask": {
|
||||
"description": "Required. The subset of Cluster fields which should be replaced.",
|
||||
"format": "google-fieldmask",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"type": "object"
|
||||
},
|
||||
"PartialUpdateInstanceRequest": {
|
||||
"description": "Request message for BigtableInstanceAdmin.PartialUpdateInstance.",
|
||||
"id": "PartialUpdateInstanceRequest",
|
||||
@@ -2777,7 +2898,7 @@
|
||||
"type": "object"
|
||||
},
|
||||
"Policy": {
|
||||
"description": "An Identity and Access Management (IAM) policy, which specifies access controls for Google Cloud resources. A `Policy` is a collection of `bindings`. A `binding` binds one or more `members` to a single `role`. Members can be user accounts, service accounts, Google groups, and domains (such as G Suite). A `role` is a named list of permissions; each `role` can be an IAM predefined role or a user-created custom role. For some types of Google Cloud resources, a `binding` can also specify a `condition`, which is a logical expression that allows access to a resource only if the expression evaluates to `true`. A condition can add constraints based on attributes of the request, the resource, or both. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies). **JSON example:** { \"bindings\": [ { \"role\": \"roles/resourcemanager.organizationAdmin\", \"members\": [ \"user:mike@example.com\", \"group:admins@example.com\", \"domain:google.com\", \"serviceAccount:my-project-id@appspot.gserviceaccount.com\" ] }, { \"role\": \"roles/resourcemanager.organizationViewer\", \"members\": [ \"user:eve@example.com\" ], \"condition\": { \"title\": \"expirable access\", \"description\": \"Does not grant access after Sep 2020\", \"expression\": \"request.time < timestamp('2020-10-01T00:00:00.000Z')\", } } ], \"etag\": \"BwWWja0YfJA=\", \"version\": 3 } **YAML example:** bindings: - members: - user:mike@example.com - group:admins@example.com - domain:google.com - serviceAccount:my-project-id@appspot.gserviceaccount.com role: roles/resourcemanager.organizationAdmin - members: - user:eve@example.com role: roles/resourcemanager.organizationViewer condition: title: expirable access description: Does not grant access after Sep 2020 expression: request.time < timestamp('2020-10-01T00:00:00.000Z') - etag: BwWWja0YfJA= - version: 3 For a description of IAM and its features, see the [IAM documentation](https://cloud.google.com/iam/docs/).",
|
||||
"description": "An Identity and Access Management (IAM) policy, which specifies access controls for Google Cloud resources. A `Policy` is a collection of `bindings`. A `binding` binds one or more `members`, or principals, to a single `role`. Principals can be user accounts, service accounts, Google groups, and domains (such as G Suite). A `role` is a named list of permissions; each `role` can be an IAM predefined role or a user-created custom role. For some types of Google Cloud resources, a `binding` can also specify a `condition`, which is a logical expression that allows access to a resource only if the expression evaluates to `true`. A condition can add constraints based on attributes of the request, the resource, or both. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies). **JSON example:** { \"bindings\": [ { \"role\": \"roles/resourcemanager.organizationAdmin\", \"members\": [ \"user:mike@example.com\", \"group:admins@example.com\", \"domain:google.com\", \"serviceAccount:my-project-id@appspot.gserviceaccount.com\" ] }, { \"role\": \"roles/resourcemanager.organizationViewer\", \"members\": [ \"user:eve@example.com\" ], \"condition\": { \"title\": \"expirable access\", \"description\": \"Does not grant access after Sep 2020\", \"expression\": \"request.time < timestamp('2020-10-01T00:00:00.000Z')\", } } ], \"etag\": \"BwWWja0YfJA=\", \"version\": 3 } **YAML example:** bindings: - members: - user:mike@example.com - group:admins@example.com - domain:google.com - serviceAccount:my-project-id@appspot.gserviceaccount.com role: roles/resourcemanager.organizationAdmin - members: - user:eve@example.com role: roles/resourcemanager.organizationViewer condition: title: expirable access description: Does not grant access after Sep 2020 expression: request.time < timestamp('2020-10-01T00:00:00.000Z') etag: BwWWja0YfJA= version: 3 For a description of IAM and its features, see the [IAM documentation](https://cloud.google.com/iam/docs/).",
|
||||
"id": "Policy",
|
||||
"properties": {
|
||||
"auditConfigs": {
|
||||
@@ -2788,7 +2909,7 @@
|
||||
"type": "array"
|
||||
},
|
||||
"bindings": {
|
||||
"description": "Associates a list of `members` to a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one member.",
|
||||
"description": "Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.",
|
||||
"items": {
|
||||
"$ref": "Binding"
|
||||
},
|
||||
|
||||
Reference in New Issue
Block a user