| OLD | NEW |
| 1 { | 1 { |
| 2 "auth": { | 2 "auth": { |
| 3 "oauth2": { | 3 "oauth2": { |
| 4 "scopes": { | 4 "scopes": { |
| 5 "https://www.googleapis.com/auth/cloud-platform": { |
| 6 "description": "View and manage your data across Google Clou
d Platform services" |
| 7 }, |
| 5 "https://www.googleapis.com/auth/source.read_only": { | 8 "https://www.googleapis.com/auth/source.read_only": { |
| 6 "description": "View the contents of your source code reposi
tories" | 9 "description": "View the contents of your source code reposi
tories" |
| 7 }, | 10 }, |
| 8 "https://www.googleapis.com/auth/source.read_write": { | 11 "https://www.googleapis.com/auth/source.read_write": { |
| 9 "description": "Manage the contents of your source code repo
sitories" | 12 "description": "Manage the contents of your source code repo
sitories" |
| 10 }, | |
| 11 "https://www.googleapis.com/auth/cloud-platform": { | |
| 12 "description": "View and manage your data across Google Clou
d Platform services" | |
| 13 } | 13 } |
| 14 } | 14 } |
| 15 } | 15 } |
| 16 }, | 16 }, |
| 17 "basePath": "", | 17 "basePath": "", |
| 18 "baseUrl": "https://sourcerepo.googleapis.com/", | 18 "baseUrl": "https://sourcerepo.googleapis.com/", |
| 19 "batchPath": "batch", | 19 "batchPath": "batch", |
| 20 "canonicalName": "Cloud Source Repositories", | 20 "canonicalName": "Cloud Source Repositories", |
| 21 "description": "Access source code repositories hosted by Google.", | 21 "description": "Access source code repositories hosted by Google.", |
| 22 "discoveryVersion": "v1", | 22 "discoveryVersion": "v1", |
| 23 "documentationLink": "https://cloud.google.com/source-repositories/docs/apis
", | 23 "documentationLink": "https://cloud.google.com/source-repositories/docs/apis
", |
| 24 "icons": { | 24 "icons": { |
| 25 "x16": "http://www.google.com/images/icons/product/search-16.gif", | 25 "x16": "http://www.google.com/images/icons/product/search-16.gif", |
| 26 "x32": "http://www.google.com/images/icons/product/search-32.gif" | 26 "x32": "http://www.google.com/images/icons/product/search-32.gif" |
| 27 }, | 27 }, |
| 28 "id": "sourcerepo:v1", | 28 "id": "sourcerepo:v1", |
| 29 "kind": "discovery#restDescription", | 29 "kind": "discovery#restDescription", |
| 30 "name": "sourcerepo", | 30 "name": "sourcerepo", |
| 31 "ownerDomain": "google.com", | 31 "ownerDomain": "google.com", |
| 32 "ownerName": "Google", | 32 "ownerName": "Google", |
| 33 "parameters": { | 33 "parameters": { |
| 34 "bearer_token": { |
| 35 "description": "OAuth bearer token.", |
| 36 "location": "query", |
| 37 "type": "string" |
| 38 }, |
| 39 "oauth_token": { |
| 40 "description": "OAuth 2.0 token for the current user.", |
| 41 "location": "query", |
| 42 "type": "string" |
| 43 }, |
| 34 "upload_protocol": { | 44 "upload_protocol": { |
| 35 "description": "Upload protocol for media (e.g. \"raw\", \"multipart
\").", | 45 "description": "Upload protocol for media (e.g. \"raw\", \"multipart
\").", |
| 36 "location": "query", | 46 "location": "query", |
| 37 "type": "string" | 47 "type": "string" |
| 38 }, | 48 }, |
| 39 "prettyPrint": { | 49 "prettyPrint": { |
| 40 "default": "true", | 50 "default": "true", |
| 41 "description": "Returns response with indentations and line breaks."
, | 51 "description": "Returns response with indentations and line breaks."
, |
| 42 "location": "query", | 52 "location": "query", |
| 43 "type": "boolean" | 53 "type": "boolean" |
| (...skipping 35 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 79 "proto" | 89 "proto" |
| 80 ], | 90 ], |
| 81 "enumDescriptions": [ | 91 "enumDescriptions": [ |
| 82 "Responses with Content-Type of application/json", | 92 "Responses with Content-Type of application/json", |
| 83 "Media download with context-dependent Content-Type", | 93 "Media download with context-dependent Content-Type", |
| 84 "Responses with Content-Type of application/x-protobuf" | 94 "Responses with Content-Type of application/x-protobuf" |
| 85 ], | 95 ], |
| 86 "location": "query", | 96 "location": "query", |
| 87 "type": "string" | 97 "type": "string" |
| 88 }, | 98 }, |
| 99 "key": { |
| 100 "description": "API key. Your API key identifies your project and pr
ovides you with API access, quota, and reports. Required unless you provide an O
Auth 2.0 token.", |
| 101 "location": "query", |
| 102 "type": "string" |
| 103 }, |
| 89 "access_token": { | 104 "access_token": { |
| 90 "description": "OAuth access token.", | 105 "description": "OAuth access token.", |
| 91 "location": "query", | 106 "location": "query", |
| 92 "type": "string" | 107 "type": "string" |
| 93 }, | 108 }, |
| 94 "key": { | |
| 95 "description": "API key. Your API key identifies your project and pr
ovides you with API access, quota, and reports. Required unless you provide an O
Auth 2.0 token.", | |
| 96 "location": "query", | |
| 97 "type": "string" | |
| 98 }, | |
| 99 "quotaUser": { | 109 "quotaUser": { |
| 100 "description": "Available to use for quota purposes for server-side
applications. Can be any arbitrary string assigned to a user, but should not exc
eed 40 characters.", | 110 "description": "Available to use for quota purposes for server-side
applications. Can be any arbitrary string assigned to a user, but should not exc
eed 40 characters.", |
| 101 "location": "query", | 111 "location": "query", |
| 102 "type": "string" | 112 "type": "string" |
| 103 }, | 113 }, |
| 104 "pp": { | 114 "pp": { |
| 105 "default": "true", | 115 "default": "true", |
| 106 "description": "Pretty-print response.", | 116 "description": "Pretty-print response.", |
| 107 "location": "query", | 117 "location": "query", |
| 108 "type": "boolean" | 118 "type": "boolean" |
| 109 }, | |
| 110 "oauth_token": { | |
| 111 "description": "OAuth 2.0 token for the current user.", | |
| 112 "location": "query", | |
| 113 "type": "string" | |
| 114 }, | |
| 115 "bearer_token": { | |
| 116 "description": "OAuth bearer token.", | |
| 117 "location": "query", | |
| 118 "type": "string" | |
| 119 } | 119 } |
| 120 }, | 120 }, |
| 121 "protocol": "rest", | 121 "protocol": "rest", |
| 122 "resources": { | 122 "resources": { |
| 123 "projects": { | 123 "projects": { |
| 124 "resources": { | 124 "resources": { |
| 125 "repos": { | 125 "repos": { |
| 126 "methods": { | 126 "methods": { |
| 127 "setIamPolicy": { | 127 "delete": { |
| 128 "description": "Sets the access control policy on th
e specified resource. Replaces any\nexisting policy.", | 128 "description": "Deletes a repo.", |
| 129 "httpMethod": "POST", | 129 "httpMethod": "DELETE", |
| 130 "id": "sourcerepo.projects.repos.setIamPolicy", | 130 "id": "sourcerepo.projects.repos.delete", |
| 131 "parameterOrder": [ | 131 "parameterOrder": [ |
| 132 "resource" | 132 "name" |
| 133 ], | 133 ], |
| 134 "parameters": { | 134 "parameters": { |
| 135 "resource": { | 135 "name": { |
| 136 "description": "REQUIRED: The resource for w
hich the policy is being specified.\nSee the operation documentation for the app
ropriate value for this field.", | 136 "description": "The name of the repo to dele
te. Values are of the form\n`projects/<project>/repos/<repo>`.", |
| 137 "location": "path", | 137 "location": "path", |
| 138 "pattern": "^projects/[^/]+/repos/.+$", | 138 "pattern": "^projects/[^/]+/repos/.+$", |
| 139 "required": true, | 139 "required": true, |
| 140 "type": "string" | 140 "type": "string" |
| 141 } | 141 } |
| 142 }, | 142 }, |
| 143 "path": "v1/{+resource}:setIamPolicy", | 143 "path": "v1/{+name}", |
| 144 "request": { | |
| 145 "$ref": "SetIamPolicyRequest" | |
| 146 }, | |
| 147 "response": { | 144 "response": { |
| 148 "$ref": "Policy" | 145 "$ref": "Empty" |
| 149 }, | 146 }, |
| 150 "scopes": [ | 147 "scopes": [ |
| 151 "https://www.googleapis.com/auth/cloud-platform"
, | 148 "https://www.googleapis.com/auth/cloud-platform"
, |
| 149 "https://www.googleapis.com/auth/source.read_onl
y", |
| 150 "https://www.googleapis.com/auth/source.read_wri
te" |
| 151 ] |
| 152 }, |
| 153 "list": { |
| 154 "description": "Returns all repos belonging to a pro
ject. The sizes of the repos are\nnot set by ListRepos. To get the size of a re
po, use GetRepo.", |
| 155 "httpMethod": "GET", |
| 156 "id": "sourcerepo.projects.repos.list", |
| 157 "parameterOrder": [ |
| 158 "name" |
| 159 ], |
| 160 "parameters": { |
| 161 "pageToken": { |
| 162 "description": "Resume listing repositories
where a prior ListReposResponse\nleft off. This is an opaque token that must be
obtained from\na recent, prior ListReposResponse's next_page_token field.", |
| 163 "location": "query", |
| 164 "type": "string" |
| 165 }, |
| 166 "name": { |
| 167 "description": "The project ID whose repos s
hould be listed. Values are of the form\n`projects/<project>`.", |
| 168 "location": "path", |
| 169 "pattern": "^projects/[^/]+$", |
| 170 "required": true, |
| 171 "type": "string" |
| 172 }, |
| 173 "pageSize": { |
| 174 "description": "Maximum number of repositori
es to return; between 1 and 500.\nIf not set or zero, defaults to 100 at the ser
ver.", |
| 175 "format": "int32", |
| 176 "location": "query", |
| 177 "type": "integer" |
| 178 } |
| 179 }, |
| 180 "path": "v1/{+name}/repos", |
| 181 "response": { |
| 182 "$ref": "ListReposResponse" |
| 183 }, |
| 184 "scopes": [ |
| 185 "https://www.googleapis.com/auth/cloud-platform"
, |
| 152 "https://www.googleapis.com/auth/source.read_onl
y", | 186 "https://www.googleapis.com/auth/source.read_onl
y", |
| 153 "https://www.googleapis.com/auth/source.read_wri
te" | 187 "https://www.googleapis.com/auth/source.read_wri
te" |
| 154 ] | 188 ] |
| 155 }, | 189 }, |
| 156 "create": { | 190 "create": { |
| 157 "description": "Creates a repo in the given project
with the given name.\n\nIf the named repository already exists, `CreateRepo` ret
urns\n`ALREADY_EXISTS`.", | 191 "description": "Creates a repo in the given project
with the given name.\n\nIf the named repository already exists, `CreateRepo` ret
urns\n`ALREADY_EXISTS`.", |
| 158 "httpMethod": "POST", | 192 "httpMethod": "POST", |
| 159 "id": "sourcerepo.projects.repos.create", | 193 "id": "sourcerepo.projects.repos.create", |
| 160 "parameterOrder": [ | 194 "parameterOrder": [ |
| 161 "parent" | 195 "parent" |
| (...skipping 13 matching lines...) Expand all Loading... |
| 175 }, | 209 }, |
| 176 "response": { | 210 "response": { |
| 177 "$ref": "Repo" | 211 "$ref": "Repo" |
| 178 }, | 212 }, |
| 179 "scopes": [ | 213 "scopes": [ |
| 180 "https://www.googleapis.com/auth/cloud-platform"
, | 214 "https://www.googleapis.com/auth/cloud-platform"
, |
| 181 "https://www.googleapis.com/auth/source.read_onl
y", | 215 "https://www.googleapis.com/auth/source.read_onl
y", |
| 182 "https://www.googleapis.com/auth/source.read_wri
te" | 216 "https://www.googleapis.com/auth/source.read_wri
te" |
| 183 ] | 217 ] |
| 184 }, | 218 }, |
| 219 "setIamPolicy": { |
| 220 "description": "Sets the access control policy on th
e specified resource. Replaces any\nexisting policy.", |
| 221 "httpMethod": "POST", |
| 222 "id": "sourcerepo.projects.repos.setIamPolicy", |
| 223 "parameterOrder": [ |
| 224 "resource" |
| 225 ], |
| 226 "parameters": { |
| 227 "resource": { |
| 228 "description": "REQUIRED: The resource for w
hich the policy is being specified.\nSee the operation documentation for the app
ropriate value for this field.", |
| 229 "location": "path", |
| 230 "pattern": "^projects/[^/]+/repos/.+$", |
| 231 "required": true, |
| 232 "type": "string" |
| 233 } |
| 234 }, |
| 235 "path": "v1/{+resource}:setIamPolicy", |
| 236 "request": { |
| 237 "$ref": "SetIamPolicyRequest" |
| 238 }, |
| 239 "response": { |
| 240 "$ref": "Policy" |
| 241 }, |
| 242 "scopes": [ |
| 243 "https://www.googleapis.com/auth/cloud-platform"
, |
| 244 "https://www.googleapis.com/auth/source.read_onl
y", |
| 245 "https://www.googleapis.com/auth/source.read_wri
te" |
| 246 ] |
| 247 }, |
| 185 "getIamPolicy": { | 248 "getIamPolicy": { |
| 186 "description": "Gets the access control policy for a
resource.\nReturns an empty policy if the resource exists and does not have a p
olicy\nset.", | 249 "description": "Gets the access control policy for a
resource.\nReturns an empty policy if the resource exists and does not have a p
olicy\nset.", |
| 187 "httpMethod": "GET", | 250 "httpMethod": "GET", |
| 188 "id": "sourcerepo.projects.repos.getIamPolicy", | 251 "id": "sourcerepo.projects.repos.getIamPolicy", |
| 189 "parameterOrder": [ | 252 "parameterOrder": [ |
| 190 "resource" | 253 "resource" |
| 191 ], | 254 ], |
| 192 "parameters": { | 255 "parameters": { |
| 193 "resource": { | 256 "resource": { |
| 194 "description": "REQUIRED: The resource for w
hich the policy is being requested.\nSee the operation documentation for the app
ropriate value for this field.", | 257 "description": "REQUIRED: The resource for w
hich the policy is being requested.\nSee the operation documentation for the app
ropriate value for this field.", |
| (...skipping 60 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 255 "$ref": "TestIamPermissionsRequest" | 318 "$ref": "TestIamPermissionsRequest" |
| 256 }, | 319 }, |
| 257 "response": { | 320 "response": { |
| 258 "$ref": "TestIamPermissionsResponse" | 321 "$ref": "TestIamPermissionsResponse" |
| 259 }, | 322 }, |
| 260 "scopes": [ | 323 "scopes": [ |
| 261 "https://www.googleapis.com/auth/cloud-platform"
, | 324 "https://www.googleapis.com/auth/cloud-platform"
, |
| 262 "https://www.googleapis.com/auth/source.read_onl
y", | 325 "https://www.googleapis.com/auth/source.read_onl
y", |
| 263 "https://www.googleapis.com/auth/source.read_wri
te" | 326 "https://www.googleapis.com/auth/source.read_wri
te" |
| 264 ] | 327 ] |
| 265 }, | |
| 266 "delete": { | |
| 267 "description": "Deletes a repo.", | |
| 268 "httpMethod": "DELETE", | |
| 269 "id": "sourcerepo.projects.repos.delete", | |
| 270 "parameterOrder": [ | |
| 271 "name" | |
| 272 ], | |
| 273 "parameters": { | |
| 274 "name": { | |
| 275 "description": "The name of the repo to dele
te. Values are of the form\n`projects/<project>/repos/<repo>`.", | |
| 276 "location": "path", | |
| 277 "pattern": "^projects/[^/]+/repos/.+$", | |
| 278 "required": true, | |
| 279 "type": "string" | |
| 280 } | |
| 281 }, | |
| 282 "path": "v1/{+name}", | |
| 283 "response": { | |
| 284 "$ref": "Empty" | |
| 285 }, | |
| 286 "scopes": [ | |
| 287 "https://www.googleapis.com/auth/cloud-platform"
, | |
| 288 "https://www.googleapis.com/auth/source.read_onl
y", | |
| 289 "https://www.googleapis.com/auth/source.read_wri
te" | |
| 290 ] | |
| 291 }, | |
| 292 "list": { | |
| 293 "description": "Returns all repos belonging to a pro
ject. The sizes of the repos are\nnot set by ListRepos. To get the size of a re
po, use GetRepo.", | |
| 294 "httpMethod": "GET", | |
| 295 "id": "sourcerepo.projects.repos.list", | |
| 296 "parameterOrder": [ | |
| 297 "name" | |
| 298 ], | |
| 299 "parameters": { | |
| 300 "name": { | |
| 301 "description": "The project ID whose repos s
hould be listed. Values are of the form\n`projects/<project>`.", | |
| 302 "location": "path", | |
| 303 "pattern": "^projects/[^/]+$", | |
| 304 "required": true, | |
| 305 "type": "string" | |
| 306 }, | |
| 307 "pageToken": { | |
| 308 "description": "Resume listing repositories
where a prior ListReposResponse\nleft off. This is an opaque token that must be
obtained from\na recent, prior ListReposResponse's next_page_token field.", | |
| 309 "location": "query", | |
| 310 "type": "string" | |
| 311 }, | |
| 312 "pageSize": { | |
| 313 "description": "Maximum number of repositori
es to return; between 1 and 500.\nIf not set or zero, defaults to 100 at the ser
ver.", | |
| 314 "format": "int32", | |
| 315 "location": "query", | |
| 316 "type": "integer" | |
| 317 } | |
| 318 }, | |
| 319 "path": "v1/{+name}/repos", | |
| 320 "response": { | |
| 321 "$ref": "ListReposResponse" | |
| 322 }, | |
| 323 "scopes": [ | |
| 324 "https://www.googleapis.com/auth/cloud-platform"
, | |
| 325 "https://www.googleapis.com/auth/source.read_onl
y", | |
| 326 "https://www.googleapis.com/auth/source.read_wri
te" | |
| 327 ] | |
| 328 } | 328 } |
| 329 } | 329 } |
| 330 } | 330 } |
| 331 } | 331 } |
| 332 } | 332 } |
| 333 }, | 333 }, |
| 334 "revision": "20170528", | 334 "revision": "20170528", |
| 335 "rootUrl": "https://sourcerepo.googleapis.com/", | 335 "rootUrl": "https://sourcerepo.googleapis.com/", |
| 336 "schemas": { | 336 "schemas": { |
| 337 "AuditLogConfig": { | |
| 338 "description": "Provides the configuration for logging a type of per
missions.\nExample:\n\n {\n \"audit_log_configs\": [\n {\n
\"log_type\": \"DATA_READ\",\n \"exempted_members\": [\n
\"user:foo@gmail.com\"\n ]\n },\n {\n \"log_type
\": \"DATA_WRITE\",\n }\n ]\n }\n\nThis enables 'DATA_READ' and '
DATA_WRITE' logging, while exempting\nfoo@gmail.com from DATA_READ logging.", | |
| 339 "id": "AuditLogConfig", | |
| 340 "properties": { | |
| 341 "exemptedMembers": { | |
| 342 "description": "Specifies the identities that do not cause l
ogging for this type of\npermission.\nFollows the same format of Binding.members
.", | |
| 343 "items": { | |
| 344 "type": "string" | |
| 345 }, | |
| 346 "type": "array" | |
| 347 }, | |
| 348 "logType": { | |
| 349 "description": "The log type that this config enables.", | |
| 350 "enum": [ | |
| 351 "LOG_TYPE_UNSPECIFIED", | |
| 352 "ADMIN_READ", | |
| 353 "DATA_WRITE", | |
| 354 "DATA_READ" | |
| 355 ], | |
| 356 "enumDescriptions": [ | |
| 357 "Default case. Should never be this.", | |
| 358 "Admin reads. Example: CloudIAM getIamPolicy", | |
| 359 "Data writes. Example: CloudSQL Users create", | |
| 360 "Data reads. Example: CloudSQL Users list" | |
| 361 ], | |
| 362 "type": "string" | |
| 363 } | |
| 364 }, | |
| 365 "type": "object" | |
| 366 }, | |
| 367 "Rule": { | |
| 368 "description": "A rule to be applied in a Policy.", | |
| 369 "id": "Rule", | |
| 370 "properties": { | |
| 371 "description": { | |
| 372 "description": "Human-readable description of the rule.", | |
| 373 "type": "string" | |
| 374 }, | |
| 375 "conditions": { | |
| 376 "description": "Additional restrictions that must be met", | |
| 377 "items": { | |
| 378 "$ref": "Condition" | |
| 379 }, | |
| 380 "type": "array" | |
| 381 }, | |
| 382 "logConfig": { | |
| 383 "description": "The config returned to callers of tech.iam.I
AM.CheckPolicy for any entries\nthat match the LOG action.", | |
| 384 "items": { | |
| 385 "$ref": "LogConfig" | |
| 386 }, | |
| 387 "type": "array" | |
| 388 }, | |
| 389 "in": { | |
| 390 "description": "If one or more 'in' clauses are specified, t
he rule matches if\nthe PRINCIPAL/AUTHORITY_SELECTOR is in at least one of these
entries.", | |
| 391 "items": { | |
| 392 "type": "string" | |
| 393 }, | |
| 394 "type": "array" | |
| 395 }, | |
| 396 "permissions": { | |
| 397 "description": "A permission is a string of form '<service>.
<resource type>.<verb>'\n(e.g., 'storage.buckets.list'). A value of '*' matches
all permissions,\nand a verb part of '*' (e.g., 'storage.buckets.*') matches all
verbs.", | |
| 398 "items": { | |
| 399 "type": "string" | |
| 400 }, | |
| 401 "type": "array" | |
| 402 }, | |
| 403 "action": { | |
| 404 "description": "Required", | |
| 405 "enum": [ | |
| 406 "NO_ACTION", | |
| 407 "ALLOW", | |
| 408 "ALLOW_WITH_LOG", | |
| 409 "DENY", | |
| 410 "DENY_WITH_LOG", | |
| 411 "LOG" | |
| 412 ], | |
| 413 "enumDescriptions": [ | |
| 414 "Default no action.", | |
| 415 "Matching 'Entries' grant access.", | |
| 416 "Matching 'Entries' grant access and the caller promises
to log\nthe request per the returned log_configs.", | |
| 417 "Matching 'Entries' deny access.", | |
| 418 "Matching 'Entries' deny access and the caller promises
to log\nthe request per the returned log_configs.", | |
| 419 "Matching 'Entries' tell IAM.Check callers to generate l
ogs." | |
| 420 ], | |
| 421 "type": "string" | |
| 422 }, | |
| 423 "notIn": { | |
| 424 "description": "If one or more 'not_in' clauses are specifie
d, the rule matches\nif the PRINCIPAL/AUTHORITY_SELECTOR is in none of the entri
es.\nThe format for in and not_in entries is the same as for members in a\nBindi
ng (see google/iam/v1/policy.proto).", | |
| 425 "items": { | |
| 426 "type": "string" | |
| 427 }, | |
| 428 "type": "array" | |
| 429 } | |
| 430 }, | |
| 431 "type": "object" | |
| 432 }, | |
| 433 "LogConfig": { | |
| 434 "description": "Specifies what kind of log the caller must write", | |
| 435 "id": "LogConfig", | |
| 436 "properties": { | |
| 437 "cloudAudit": { | |
| 438 "$ref": "CloudAuditOptions", | |
| 439 "description": "Cloud audit options." | |
| 440 }, | |
| 441 "counter": { | |
| 442 "$ref": "CounterOptions", | |
| 443 "description": "Counter options." | |
| 444 }, | |
| 445 "dataAccess": { | |
| 446 "$ref": "DataAccessOptions", | |
| 447 "description": "Data access options." | |
| 448 } | |
| 449 }, | |
| 450 "type": "object" | |
| 451 }, | |
| 452 "TestIamPermissionsRequest": { | |
| 453 "description": "Request message for `TestIamPermissions` method.", | |
| 454 "id": "TestIamPermissionsRequest", | |
| 455 "properties": { | |
| 456 "permissions": { | |
| 457 "description": "The set of permissions to check for the `res
ource`. Permissions with\nwildcards (such as '*' or 'storage.*') are not allowed
. For more\ninformation see\n[IAM Overview](https://cloud.google.com/iam/docs/ov
erview#permissions).", | |
| 458 "items": { | |
| 459 "type": "string" | |
| 460 }, | |
| 461 "type": "array" | |
| 462 } | |
| 463 }, | |
| 464 "type": "object" | |
| 465 }, | |
| 466 "Policy": { | |
| 467 "description": "Defines an Identity and Access Management (IAM) poli
cy. It is used to\nspecify access control policies for Cloud Platform resources.
\n\n\nA `Policy` consists of a list of `bindings`. A `Binding` binds a list of\n
`members` to a `role`, where the members can be user accounts, Google groups,\nG
oogle domains, and service accounts. A `role` is a named list of permissions\nde
fined by IAM.\n\n**Example**\n\n {\n \"bindings\": [\n {\n
\"role\": \"roles/owner\",\n \"members\": [\n \"user:mike
@example.com\",\n \"group:admins@example.com\",\n \"domain
:google.com\",\n \"serviceAccount:my-other-app@appspot.gserviceaccoun
t.com\",\n ]\n },\n {\n \"role\": \"roles/viewer
\",\n \"members\": [\"user:sean@example.com\"]\n }\n ]\n
}\n\nFor a description of IAM and its features, see the\n[IAM developer's guide
](https://cloud.google.com/iam).", | |
| 468 "id": "Policy", | |
| 469 "properties": { | |
| 470 "version": { | |
| 471 "description": "Version of the `Policy`. The default version
is 0.", | |
| 472 "format": "int32", | |
| 473 "type": "integer" | |
| 474 }, | |
| 475 "auditConfigs": { | |
| 476 "description": "Specifies cloud audit logging configuration
for this policy.", | |
| 477 "items": { | |
| 478 "$ref": "AuditConfig" | |
| 479 }, | |
| 480 "type": "array" | |
| 481 }, | |
| 482 "bindings": { | |
| 483 "description": "Associates a list of `members` to a `role`.\
nMultiple `bindings` must not be specified for the same `role`.\n`bindings` with
no members will result in an error.", | |
| 484 "items": { | |
| 485 "$ref": "Binding" | |
| 486 }, | |
| 487 "type": "array" | |
| 488 }, | |
| 489 "etag": { | |
| 490 "description": "`etag` is used for optimistic concurrency co
ntrol as a way to help\nprevent simultaneous updates of a policy from overwritin
g each other.\nIt is strongly suggested that systems make use of the `etag` in t
he\nread-modify-write cycle to perform policy updates in order to avoid race\nco
nditions: An `etag` is returned in the response to `getIamPolicy`, and\nsystems
are expected to put that etag in the request to `setIamPolicy` to\nensure that t
heir change will be applied to the same version of the policy.\n\nIf no `etag` i
s provided in the call to `setIamPolicy`, then the existing\npolicy is overwritt
en blindly.", | |
| 491 "format": "byte", | |
| 492 "type": "string" | |
| 493 }, | |
| 494 "iamOwned": { | |
| 495 "type": "boolean" | |
| 496 }, | |
| 497 "rules": { | |
| 498 "description": "If more than one rule is specified, the rule
s are applied in the following\nmanner:\n- All matching LOG rules are always app
lied.\n- If any DENY/DENY_WITH_LOG rule matches, permission is denied.\n Loggin
g will be applied if one or more matching rule requires logging.\n- Otherwise, i
f any ALLOW/ALLOW_WITH_LOG rule matches, permission is\n granted.\n Logging wi
ll be applied if one or more matching rule requires logging.\n- Otherwise, if no
rule applies, permission is denied.", | |
| 499 "items": { | |
| 500 "$ref": "Rule" | |
| 501 }, | |
| 502 "type": "array" | |
| 503 } | |
| 504 }, | |
| 505 "type": "object" | |
| 506 }, | |
| 507 "DataAccessOptions": { | 337 "DataAccessOptions": { |
| 508 "description": "Write a Data Access (Gin) log", | 338 "description": "Write a Data Access (Gin) log", |
| 509 "id": "DataAccessOptions", | 339 "id": "DataAccessOptions", |
| 510 "properties": {}, | 340 "properties": {}, |
| 511 "type": "object" | 341 "type": "object" |
| 512 }, | 342 }, |
| 513 "AuditConfig": { | 343 "AuditConfig": { |
| 514 "description": "Specifies the audit configuration for a service.\nTh
e configuration determines which permission types are logged, and what\nidentiti
es, if any, are exempted from logging.\nAn AuditConfig must have one or more Aud
itLogConfigs.\n\nIf there are AuditConfigs for both `allServices` and a specific
service,\nthe union of the two AuditConfigs is used for that service: the log_t
ypes\nspecified in each AuditConfig are enabled, and the exempted_members in eac
h\nAuditConfig are exempted.\n\nExample Policy with multiple AuditConfigs:\n\n
{\n \"audit_configs\": [\n {\n \"service\": \"allServices
\"\n \"audit_log_configs\": [\n {\n \"log_type\
": \"DATA_READ\",\n \"exempted_members\": [\n \"user
:foo@gmail.com\"\n ]\n },\n {\n
\"log_type\": \"DATA_WRITE\",\n },\n {\n \"lo
g_type\": \"ADMIN_READ\",\n }\n ]\n },\n {\n
\"service\": \"fooservice.googleapis.com\"\n \"audit_log_config
s\": [\n {\n \"log_type\": \"DATA_READ\",\n }
,\n {\n \"log_type\": \"DATA_WRITE\",\n \"e
xempted_members\": [\n \"user:bar@gmail.com\"\n ]\n
}\n ]\n }\n ]\n }\n\nFor fooservice, this pol
icy enables DATA_READ, DATA_WRITE and ADMIN_READ\nlogging. It also exempts foo@g
mail.com from DATA_READ logging, and\nbar@gmail.com from DATA_WRITE logging.", | 344 "description": "Specifies the audit configuration for a service.\nTh
e configuration determines which permission types are logged, and what\nidentiti
es, if any, are exempted from logging.\nAn AuditConfig must have one or more Aud
itLogConfigs.\n\nIf there are AuditConfigs for both `allServices` and a specific
service,\nthe union of the two AuditConfigs is used for that service: the log_t
ypes\nspecified in each AuditConfig are enabled, and the exempted_members in eac
h\nAuditConfig are exempted.\n\nExample Policy with multiple AuditConfigs:\n\n
{\n \"audit_configs\": [\n {\n \"service\": \"allServices
\"\n \"audit_log_configs\": [\n {\n \"log_type\
": \"DATA_READ\",\n \"exempted_members\": [\n \"user
:foo@gmail.com\"\n ]\n },\n {\n
\"log_type\": \"DATA_WRITE\",\n },\n {\n \"lo
g_type\": \"ADMIN_READ\",\n }\n ]\n },\n {\n
\"service\": \"fooservice.googleapis.com\"\n \"audit_log_config
s\": [\n {\n \"log_type\": \"DATA_READ\",\n }
,\n {\n \"log_type\": \"DATA_WRITE\",\n \"e
xempted_members\": [\n \"user:bar@gmail.com\"\n ]\n
}\n ]\n }\n ]\n }\n\nFor fooservice, this pol
icy enables DATA_READ, DATA_WRITE and ADMIN_READ\nlogging. It also exempts foo@g
mail.com from DATA_READ logging, and\nbar@gmail.com from DATA_WRITE logging.", |
| 515 "id": "AuditConfig", | 345 "id": "AuditConfig", |
| 516 "properties": { | 346 "properties": { |
| 347 "service": { |
| 348 "description": "Specifies a service that will be enabled for
audit logging.\nFor example, `storage.googleapis.com`, `cloudsql.googleapis.com
`.\n`allServices` is a special value that covers all services.", |
| 349 "type": "string" |
| 350 }, |
| 517 "auditLogConfigs": { | 351 "auditLogConfigs": { |
| 518 "description": "The configuration for logging of each type o
f permission.\nNext ID: 4", | 352 "description": "The configuration for logging of each type o
f permission.\nNext ID: 4", |
| 519 "items": { | 353 "items": { |
| 520 "$ref": "AuditLogConfig" | 354 "$ref": "AuditLogConfig" |
| 521 }, | 355 }, |
| 522 "type": "array" | 356 "type": "array" |
| 523 }, | 357 }, |
| 524 "exemptedMembers": { | 358 "exemptedMembers": { |
| 525 "items": { | 359 "items": { |
| 526 "type": "string" | 360 "type": "string" |
| 527 }, | 361 }, |
| 528 "type": "array" | 362 "type": "array" |
| 529 }, | |
| 530 "service": { | |
| 531 "description": "Specifies a service that will be enabled for
audit logging.\nFor example, `storage.googleapis.com`, `cloudsql.googleapis.com
`.\n`allServices` is a special value that covers all services.", | |
| 532 "type": "string" | |
| 533 } | 363 } |
| 534 }, | 364 }, |
| 535 "type": "object" | 365 "type": "object" |
| 536 }, | 366 }, |
| 537 "SetIamPolicyRequest": { | 367 "SetIamPolicyRequest": { |
| 538 "description": "Request message for `SetIamPolicy` method.", | 368 "description": "Request message for `SetIamPolicy` method.", |
| 539 "id": "SetIamPolicyRequest", | 369 "id": "SetIamPolicyRequest", |
| 540 "properties": { | 370 "properties": { |
| 541 "updateMask": { | 371 "updateMask": { |
| 542 "description": "OPTIONAL: A FieldMask specifying which field
s of the policy to modify. Only\nthe fields in the mask will be modified. If no
mask is provided, the\nfollowing default mask is used:\npaths: \"bindings, etag\
"\nThis field is only used by Cloud IAM.", | 372 "description": "OPTIONAL: A FieldMask specifying which field
s of the policy to modify. Only\nthe fields in the mask will be modified. If no
mask is provided, the\nfollowing default mask is used:\npaths: \"bindings, etag\
"\nThis field is only used by Cloud IAM.", |
| (...skipping 39 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 582 }, | 412 }, |
| 583 "type": "array" | 413 "type": "array" |
| 584 }, | 414 }, |
| 585 "role": { | 415 "role": { |
| 586 "description": "Role that is assigned to `members`.\nFor exa
mple, `roles/viewer`, `roles/editor`, or `roles/owner`.\nRequired", | 416 "description": "Role that is assigned to `members`.\nFor exa
mple, `roles/viewer`, `roles/editor`, or `roles/owner`.\nRequired", |
| 587 "type": "string" | 417 "type": "string" |
| 588 } | 418 } |
| 589 }, | 419 }, |
| 590 "type": "object" | 420 "type": "object" |
| 591 }, | 421 }, |
| 422 "Empty": { |
| 423 "description": "A generic empty message that you can re-use to avoid
defining duplicated\nempty messages in your APIs. A typical example is to use i
t as the request\nor the response type of an API method. For instance:\n\n se
rvice Foo {\n rpc Bar(google.protobuf.Empty) returns (google.protobuf.Empty
);\n }\n\nThe JSON representation for `Empty` is empty JSON object `{}`.", |
| 424 "id": "Empty", |
| 425 "properties": {}, |
| 426 "type": "object" |
| 427 }, |
| 592 "MirrorConfig": { | 428 "MirrorConfig": { |
| 593 "description": "Configuration to automatically mirror a repository f
rom another\nhosting service, for example GitHub or BitBucket.", | 429 "description": "Configuration to automatically mirror a repository f
rom another\nhosting service, for example GitHub or BitBucket.", |
| 594 "id": "MirrorConfig", | 430 "id": "MirrorConfig", |
| 595 "properties": { | 431 "properties": { |
| 432 "deployKeyId": { |
| 433 "description": "ID of the SSH deploy key at the other hostin
g service.\nRemoving this key from the other service would deauthorize\nGoogle C
loud Source Repositories from mirroring.", |
| 434 "type": "string" |
| 435 }, |
| 596 "url": { | 436 "url": { |
| 597 "description": "URL of the main repository at the other host
ing service.", | 437 "description": "URL of the main repository at the other host
ing service.", |
| 598 "type": "string" | 438 "type": "string" |
| 599 }, | 439 }, |
| 600 "webhookId": { | 440 "webhookId": { |
| 601 "description": "ID of the webhook listening to updates to tr
igger mirroring.\nRemoving this webook from the other hosting service will stop\
nGoogle Cloud Source Repositories from receiving notifications,\nand thereby dis
abling mirroring.", | 441 "description": "ID of the webhook listening to updates to tr
igger mirroring.\nRemoving this webook from the other hosting service will stop\
nGoogle Cloud Source Repositories from receiving notifications,\nand thereby dis
abling mirroring.", |
| 602 "type": "string" | 442 "type": "string" |
| 603 }, | |
| 604 "deployKeyId": { | |
| 605 "description": "ID of the SSH deploy key at the other hostin
g service.\nRemoving this key from the other service would deauthorize\nGoogle C
loud Source Repositories from mirroring.", | |
| 606 "type": "string" | |
| 607 } | 443 } |
| 608 }, | 444 }, |
| 609 "type": "object" | 445 "type": "object" |
| 610 }, | 446 }, |
| 611 "Empty": { | |
| 612 "description": "A generic empty message that you can re-use to avoid
defining duplicated\nempty messages in your APIs. A typical example is to use i
t as the request\nor the response type of an API method. For instance:\n\n se
rvice Foo {\n rpc Bar(google.protobuf.Empty) returns (google.protobuf.Empty
);\n }\n\nThe JSON representation for `Empty` is empty JSON object `{}`.", | |
| 613 "id": "Empty", | |
| 614 "properties": {}, | |
| 615 "type": "object" | |
| 616 }, | |
| 617 "Repo": { | 447 "Repo": { |
| 618 "description": "A repository (or repo) is a Git repository storing v
ersioned source content.", | 448 "description": "A repository (or repo) is a Git repository storing v
ersioned source content.", |
| 619 "id": "Repo", | 449 "id": "Repo", |
| 620 "properties": { | 450 "properties": { |
| 621 "name": { | |
| 622 "description": "Resource name of the repository, of the form
\n`projects/<project>/repos/<repo>`. The repo name may contain slashes.\neg, `p
rojects/myproject/repos/name/with/slash`", | |
| 623 "type": "string" | |
| 624 }, | |
| 625 "mirrorConfig": { | |
| 626 "$ref": "MirrorConfig", | |
| 627 "description": "How this repository mirrors a repository man
aged by another service." | |
| 628 }, | |
| 629 "url": { | 451 "url": { |
| 630 "description": "URL to clone the repository from Google Clou
d Source Repositories.", | 452 "description": "URL to clone the repository from Google Clou
d Source Repositories.", |
| 631 "type": "string" | 453 "type": "string" |
| 632 }, | 454 }, |
| 633 "size": { | 455 "size": { |
| 634 "description": "The disk usage of the repo, in bytes.\nOnly
returned by GetRepo.", | 456 "description": "The disk usage of the repo, in bytes.\nOnly
returned by GetRepo.", |
| 635 "format": "int64", | 457 "format": "int64", |
| 636 "type": "string" | 458 "type": "string" |
| 459 }, |
| 460 "name": { |
| 461 "description": "Resource name of the repository, of the form
\n`projects/<project>/repos/<repo>`. The repo name may contain slashes.\neg, `p
rojects/myproject/repos/name/with/slash`", |
| 462 "type": "string" |
| 463 }, |
| 464 "mirrorConfig": { |
| 465 "$ref": "MirrorConfig", |
| 466 "description": "How this repository mirrors a repository man
aged by another service." |
| 637 } | 467 } |
| 638 }, | 468 }, |
| 639 "type": "object" | 469 "type": "object" |
| 470 }, |
| 471 "TestIamPermissionsResponse": { |
| 472 "description": "Response message for `TestIamPermissions` method.", |
| 473 "id": "TestIamPermissionsResponse", |
| 474 "properties": { |
| 475 "permissions": { |
| 476 "description": "A subset of `TestPermissionsRequest.permissi
ons` that the caller is\nallowed.", |
| 477 "items": { |
| 478 "type": "string" |
| 479 }, |
| 480 "type": "array" |
| 481 } |
| 482 }, |
| 483 "type": "object" |
| 640 }, | 484 }, |
| 641 "ListReposResponse": { | 485 "ListReposResponse": { |
| 642 "description": "Response for ListRepos. The size is not set in the
returned repositories.", | 486 "description": "Response for ListRepos. The size is not set in the
returned repositories.", |
| 643 "id": "ListReposResponse", | 487 "id": "ListReposResponse", |
| 644 "properties": { | 488 "properties": { |
| 645 "repos": { | 489 "repos": { |
| 646 "description": "The listed repos.", | 490 "description": "The listed repos.", |
| 647 "items": { | 491 "items": { |
| 648 "$ref": "Repo" | 492 "$ref": "Repo" |
| 649 }, | 493 }, |
| 650 "type": "array" | 494 "type": "array" |
| 651 }, | 495 }, |
| 652 "nextPageToken": { | 496 "nextPageToken": { |
| 653 "description": "If non-empty, additional repositories exist
within the project. These\ncan be retrieved by including this value in the next
ListReposRequest's\npage_token field.", | 497 "description": "If non-empty, additional repositories exist
within the project. These\ncan be retrieved by including this value in the next
ListReposRequest's\npage_token field.", |
| 654 "type": "string" | 498 "type": "string" |
| 655 } | 499 } |
| 656 }, | 500 }, |
| 657 "type": "object" | 501 "type": "object" |
| 658 }, | 502 }, |
| 659 "Condition": { | 503 "Condition": { |
| 660 "description": "A condition to be met.", | 504 "description": "A condition to be met.", |
| 661 "id": "Condition", | 505 "id": "Condition", |
| 662 "properties": { | 506 "properties": { |
| 507 "svc": { |
| 508 "description": "Trusted attributes discharged by the service
.", |
| 509 "type": "string" |
| 510 }, |
| 511 "value": { |
| 512 "description": "DEPRECATED. Use 'values' instead.", |
| 513 "type": "string" |
| 514 }, |
| 515 "sys": { |
| 516 "description": "Trusted attributes supplied by any service t
hat owns resources and uses\nthe IAM system for access control.", |
| 517 "enum": [ |
| 518 "NO_ATTR", |
| 519 "REGION", |
| 520 "SERVICE", |
| 521 "NAME", |
| 522 "IP" |
| 523 ], |
| 524 "enumDescriptions": [ |
| 525 "Default non-attribute type", |
| 526 "Region of the resource", |
| 527 "Service name", |
| 528 "Resource name", |
| 529 "IP address of the caller" |
| 530 ], |
| 531 "type": "string" |
| 532 }, |
| 533 "values": { |
| 534 "description": "The objects of the condition. This is mutual
ly exclusive with 'value'.", |
| 535 "items": { |
| 536 "type": "string" |
| 537 }, |
| 538 "type": "array" |
| 539 }, |
| 663 "iam": { | 540 "iam": { |
| 664 "description": "Trusted attributes supplied by the IAM syste
m.", | 541 "description": "Trusted attributes supplied by the IAM syste
m.", |
| 665 "enum": [ | 542 "enum": [ |
| 666 "NO_ATTR", | 543 "NO_ATTR", |
| 667 "AUTHORITY", | 544 "AUTHORITY", |
| 668 "ATTRIBUTION", | 545 "ATTRIBUTION", |
| 669 "APPROVER", | 546 "APPROVER", |
| 670 "JUSTIFICATION_TYPE" | 547 "JUSTIFICATION_TYPE" |
| 671 ], | 548 ], |
| 672 "enumDescriptions": [ | 549 "enumDescriptions": [ |
| 673 "Default non-attribute.", | 550 "Default non-attribute.", |
| 674 "Either principal or (if present) authority selector.", | 551 "Either principal or (if present) authority selector.", |
| 675 "The principal (even if an authority selector is present
), which\nmust only be used for attribution, not authorization.", | 552 "The principal (even if an authority selector is present
), which\nmust only be used for attribution, not authorization.", |
| 676 "An approver (distinct from the requester) that has auth
orized this\nrequest.\nWhen used with IN, the condition indicates that one of th
e approvers\nassociated with the request matches the specified principal, or is
a\nmember of the specified group. Approvers can only grant additional\naccess, a
nd are thus only used in a strictly positive context\n(e.g. ALLOW/IN or DENY/NOT
_IN).\nSee: go/rpc-security-policy-dynamicauth.", | 553 "An approver (distinct from the requester) that has auth
orized this\nrequest.\nWhen used with IN, the condition indicates that one of th
e approvers\nassociated with the request matches the specified principal, or is
a\nmember of the specified group. Approvers can only grant additional\naccess, a
nd are thus only used in a strictly positive context\n(e.g. ALLOW/IN or DENY/NOT
_IN).\nSee: go/rpc-security-policy-dynamicauth.", |
| 677 "What types of justifications have been supplied with th
is request.\nString values should match enum names from tech.iam.JustificationTy
pe,\ne.g. \"MANUAL_STRING\". It is not permitted to grant access based on\nthe *
absence* of a justification, so justification conditions can only\nbe used in a
\"positive\" context (e.g., ALLOW/IN or DENY/NOT_IN).\n\nMultiple justifications
, e.g., a Buganizer ID and a manually-entered\nreason, are normal and supported.
" | 554 "What types of justifications have been supplied with th
is request.\nString values should match enum names from tech.iam.JustificationTy
pe,\ne.g. \"MANUAL_STRING\". It is not permitted to grant access based on\nthe *
absence* of a justification, so justification conditions can only\nbe used in a
\"positive\" context (e.g., ALLOW/IN or DENY/NOT_IN).\n\nMultiple justifications
, e.g., a Buganizer ID and a manually-entered\nreason, are normal and supported.
" |
| 678 ], | 555 ], |
| 679 "type": "string" | 556 "type": "string" |
| 680 }, | 557 }, |
| 681 "values": { | |
| 682 "description": "The objects of the condition. This is mutual
ly exclusive with 'value'.", | |
| 683 "items": { | |
| 684 "type": "string" | |
| 685 }, | |
| 686 "type": "array" | |
| 687 }, | |
| 688 "op": { | 558 "op": { |
| 689 "description": "An operator to apply the subject with.", | 559 "description": "An operator to apply the subject with.", |
| 690 "enum": [ | 560 "enum": [ |
| 691 "NO_OP", | 561 "NO_OP", |
| 692 "EQUALS", | 562 "EQUALS", |
| 693 "NOT_EQUALS", | 563 "NOT_EQUALS", |
| 694 "IN", | 564 "IN", |
| 695 "NOT_IN", | 565 "NOT_IN", |
| 696 "DISCHARGED" | 566 "DISCHARGED" |
| 697 ], | 567 ], |
| 698 "enumDescriptions": [ | 568 "enumDescriptions": [ |
| 699 "Default no-op.", | 569 "Default no-op.", |
| 700 "DEPRECATED. Use IN instead.", | 570 "DEPRECATED. Use IN instead.", |
| 701 "DEPRECATED. Use NOT_IN instead.", | 571 "DEPRECATED. Use NOT_IN instead.", |
| 702 "The condition is true if the subject (or any element of
it if it is\na set) matches any of the supplied values.", | 572 "The condition is true if the subject (or any element of
it if it is\na set) matches any of the supplied values.", |
| 703 "The condition is true if the subject (or every element
of it if it is\na set) matches none of the supplied values.", | 573 "The condition is true if the subject (or every element
of it if it is\na set) matches none of the supplied values.", |
| 704 "Subject is discharged" | 574 "Subject is discharged" |
| 705 ], | 575 ], |
| 706 "type": "string" | 576 "type": "string" |
| 707 }, | |
| 708 "svc": { | |
| 709 "description": "Trusted attributes discharged by the service
.", | |
| 710 "type": "string" | |
| 711 }, | |
| 712 "sys": { | |
| 713 "description": "Trusted attributes supplied by any service t
hat owns resources and uses\nthe IAM system for access control.", | |
| 714 "enum": [ | |
| 715 "NO_ATTR", | |
| 716 "REGION", | |
| 717 "SERVICE", | |
| 718 "NAME", | |
| 719 "IP" | |
| 720 ], | |
| 721 "enumDescriptions": [ | |
| 722 "Default non-attribute type", | |
| 723 "Region of the resource", | |
| 724 "Service name", | |
| 725 "Resource name", | |
| 726 "IP address of the caller" | |
| 727 ], | |
| 728 "type": "string" | |
| 729 }, | |
| 730 "value": { | |
| 731 "description": "DEPRECATED. Use 'values' instead.", | |
| 732 "type": "string" | |
| 733 } | 577 } |
| 734 }, | 578 }, |
| 735 "type": "object" | 579 "type": "object" |
| 736 }, | 580 }, |
| 737 "TestIamPermissionsResponse": { | 581 "CounterOptions": { |
| 738 "description": "Response message for `TestIamPermissions` method.", | 582 "description": "Options for counters", |
| 739 "id": "TestIamPermissionsResponse", | 583 "id": "CounterOptions", |
| 740 "properties": { | 584 "properties": { |
| 741 "permissions": { | 585 "field": { |
| 742 "description": "A subset of `TestPermissionsRequest.permissi
ons` that the caller is\nallowed.", | 586 "description": "The field value to attribute.", |
| 587 "type": "string" |
| 588 }, |
| 589 "metric": { |
| 590 "description": "The metric to update.", |
| 591 "type": "string" |
| 592 } |
| 593 }, |
| 594 "type": "object" |
| 595 }, |
| 596 "AuditLogConfig": { |
| 597 "description": "Provides the configuration for logging a type of per
missions.\nExample:\n\n {\n \"audit_log_configs\": [\n {\n
\"log_type\": \"DATA_READ\",\n \"exempted_members\": [\n
\"user:foo@gmail.com\"\n ]\n },\n {\n \"log_type
\": \"DATA_WRITE\",\n }\n ]\n }\n\nThis enables 'DATA_READ' and '
DATA_WRITE' logging, while exempting\nfoo@gmail.com from DATA_READ logging.", |
| 598 "id": "AuditLogConfig", |
| 599 "properties": { |
| 600 "exemptedMembers": { |
| 601 "description": "Specifies the identities that do not cause l
ogging for this type of\npermission.\nFollows the same format of Binding.members
.", |
| 743 "items": { | 602 "items": { |
| 744 "type": "string" | 603 "type": "string" |
| 745 }, | 604 }, |
| 605 "type": "array" |
| 606 }, |
| 607 "logType": { |
| 608 "description": "The log type that this config enables.", |
| 609 "enum": [ |
| 610 "LOG_TYPE_UNSPECIFIED", |
| 611 "ADMIN_READ", |
| 612 "DATA_WRITE", |
| 613 "DATA_READ" |
| 614 ], |
| 615 "enumDescriptions": [ |
| 616 "Default case. Should never be this.", |
| 617 "Admin reads. Example: CloudIAM getIamPolicy", |
| 618 "Data writes. Example: CloudSQL Users create", |
| 619 "Data reads. Example: CloudSQL Users list" |
| 620 ], |
| 621 "type": "string" |
| 622 } |
| 623 }, |
| 624 "type": "object" |
| 625 }, |
| 626 "Rule": { |
| 627 "description": "A rule to be applied in a Policy.", |
| 628 "id": "Rule", |
| 629 "properties": { |
| 630 "logConfig": { |
| 631 "description": "The config returned to callers of tech.iam.I
AM.CheckPolicy for any entries\nthat match the LOG action.", |
| 632 "items": { |
| 633 "$ref": "LogConfig" |
| 634 }, |
| 635 "type": "array" |
| 636 }, |
| 637 "in": { |
| 638 "description": "If one or more 'in' clauses are specified, t
he rule matches if\nthe PRINCIPAL/AUTHORITY_SELECTOR is in at least one of these
entries.", |
| 639 "items": { |
| 640 "type": "string" |
| 641 }, |
| 642 "type": "array" |
| 643 }, |
| 644 "permissions": { |
| 645 "description": "A permission is a string of form '<service>.
<resource type>.<verb>'\n(e.g., 'storage.buckets.list'). A value of '*' matches
all permissions,\nand a verb part of '*' (e.g., 'storage.buckets.*') matches all
verbs.", |
| 646 "items": { |
| 647 "type": "string" |
| 648 }, |
| 649 "type": "array" |
| 650 }, |
| 651 "action": { |
| 652 "description": "Required", |
| 653 "enum": [ |
| 654 "NO_ACTION", |
| 655 "ALLOW", |
| 656 "ALLOW_WITH_LOG", |
| 657 "DENY", |
| 658 "DENY_WITH_LOG", |
| 659 "LOG" |
| 660 ], |
| 661 "enumDescriptions": [ |
| 662 "Default no action.", |
| 663 "Matching 'Entries' grant access.", |
| 664 "Matching 'Entries' grant access and the caller promises
to log\nthe request per the returned log_configs.", |
| 665 "Matching 'Entries' deny access.", |
| 666 "Matching 'Entries' deny access and the caller promises
to log\nthe request per the returned log_configs.", |
| 667 "Matching 'Entries' tell IAM.Check callers to generate l
ogs." |
| 668 ], |
| 669 "type": "string" |
| 670 }, |
| 671 "notIn": { |
| 672 "description": "If one or more 'not_in' clauses are specifie
d, the rule matches\nif the PRINCIPAL/AUTHORITY_SELECTOR is in none of the entri
es.\nThe format for in and not_in entries is the same as for members in a\nBindi
ng (see google/iam/v1/policy.proto).", |
| 673 "items": { |
| 674 "type": "string" |
| 675 }, |
| 676 "type": "array" |
| 677 }, |
| 678 "description": { |
| 679 "description": "Human-readable description of the rule.", |
| 680 "type": "string" |
| 681 }, |
| 682 "conditions": { |
| 683 "description": "Additional restrictions that must be met", |
| 684 "items": { |
| 685 "$ref": "Condition" |
| 686 }, |
| 687 "type": "array" |
| 688 } |
| 689 }, |
| 690 "type": "object" |
| 691 }, |
| 692 "LogConfig": { |
| 693 "description": "Specifies what kind of log the caller must write", |
| 694 "id": "LogConfig", |
| 695 "properties": { |
| 696 "counter": { |
| 697 "$ref": "CounterOptions", |
| 698 "description": "Counter options." |
| 699 }, |
| 700 "dataAccess": { |
| 701 "$ref": "DataAccessOptions", |
| 702 "description": "Data access options." |
| 703 }, |
| 704 "cloudAudit": { |
| 705 "$ref": "CloudAuditOptions", |
| 706 "description": "Cloud audit options." |
| 707 } |
| 708 }, |
| 709 "type": "object" |
| 710 }, |
| 711 "TestIamPermissionsRequest": { |
| 712 "description": "Request message for `TestIamPermissions` method.", |
| 713 "id": "TestIamPermissionsRequest", |
| 714 "properties": { |
| 715 "permissions": { |
| 716 "description": "The set of permissions to check for the `res
ource`. Permissions with\nwildcards (such as '*' or 'storage.*') are not allowed
. For more\ninformation see\n[IAM Overview](https://cloud.google.com/iam/docs/ov
erview#permissions).", |
| 717 "items": { |
| 718 "type": "string" |
| 719 }, |
| 746 "type": "array" | 720 "type": "array" |
| 747 } | 721 } |
| 748 }, | 722 }, |
| 749 "type": "object" | 723 "type": "object" |
| 750 }, | 724 }, |
| 751 "CounterOptions": { | 725 "Policy": { |
| 752 "description": "Options for counters", | 726 "description": "Defines an Identity and Access Management (IAM) poli
cy. It is used to\nspecify access control policies for Cloud Platform resources.
\n\n\nA `Policy` consists of a list of `bindings`. A `Binding` binds a list of\n
`members` to a `role`, where the members can be user accounts, Google groups,\nG
oogle domains, and service accounts. A `role` is a named list of permissions\nde
fined by IAM.\n\n**Example**\n\n {\n \"bindings\": [\n {\n
\"role\": \"roles/owner\",\n \"members\": [\n \"user:mike
@example.com\",\n \"group:admins@example.com\",\n \"domain
:google.com\",\n \"serviceAccount:my-other-app@appspot.gserviceaccoun
t.com\",\n ]\n },\n {\n \"role\": \"roles/viewer
\",\n \"members\": [\"user:sean@example.com\"]\n }\n ]\n
}\n\nFor a description of IAM and its features, see the\n[IAM developer's guide
](https://cloud.google.com/iam).", |
| 753 "id": "CounterOptions", | 727 "id": "Policy", |
| 754 "properties": { | 728 "properties": { |
| 755 "metric": { | 729 "iamOwned": { |
| 756 "description": "The metric to update.", | 730 "type": "boolean" |
| 757 "type": "string" | |
| 758 }, | 731 }, |
| 759 "field": { | 732 "rules": { |
| 760 "description": "The field value to attribute.", | 733 "description": "If more than one rule is specified, the rule
s are applied in the following\nmanner:\n- All matching LOG rules are always app
lied.\n- If any DENY/DENY_WITH_LOG rule matches, permission is denied.\n Loggin
g will be applied if one or more matching rule requires logging.\n- Otherwise, i
f any ALLOW/ALLOW_WITH_LOG rule matches, permission is\n granted.\n Logging wi
ll be applied if one or more matching rule requires logging.\n- Otherwise, if no
rule applies, permission is denied.", |
| 734 "items": { |
| 735 "$ref": "Rule" |
| 736 }, |
| 737 "type": "array" |
| 738 }, |
| 739 "version": { |
| 740 "description": "Version of the `Policy`. The default version
is 0.", |
| 741 "format": "int32", |
| 742 "type": "integer" |
| 743 }, |
| 744 "auditConfigs": { |
| 745 "description": "Specifies cloud audit logging configuration
for this policy.", |
| 746 "items": { |
| 747 "$ref": "AuditConfig" |
| 748 }, |
| 749 "type": "array" |
| 750 }, |
| 751 "bindings": { |
| 752 "description": "Associates a list of `members` to a `role`.\
nMultiple `bindings` must not be specified for the same `role`.\n`bindings` with
no members will result in an error.", |
| 753 "items": { |
| 754 "$ref": "Binding" |
| 755 }, |
| 756 "type": "array" |
| 757 }, |
| 758 "etag": { |
| 759 "description": "`etag` is used for optimistic concurrency co
ntrol as a way to help\nprevent simultaneous updates of a policy from overwritin
g each other.\nIt is strongly suggested that systems make use of the `etag` in t
he\nread-modify-write cycle to perform policy updates in order to avoid race\nco
nditions: An `etag` is returned in the response to `getIamPolicy`, and\nsystems
are expected to put that etag in the request to `setIamPolicy` to\nensure that t
heir change will be applied to the same version of the policy.\n\nIf no `etag` i
s provided in the call to `setIamPolicy`, then the existing\npolicy is overwritt
en blindly.", |
| 760 "format": "byte", |
| 761 "type": "string" | 761 "type": "string" |
| 762 } | 762 } |
| 763 }, | 763 }, |
| 764 "type": "object" | 764 "type": "object" |
| 765 } | 765 } |
| 766 }, | 766 }, |
| 767 "servicePath": "", | 767 "servicePath": "", |
| 768 "title": "Cloud Source Repositories API", | 768 "title": "Cloud Source Repositories API", |
| 769 "version": "v1" | 769 "version": "v1" |
| 770 } | 770 } |
| OLD | NEW |