OLD | NEW |
1 { | 1 { |
2 "auth": { | 2 "auth": { |
3 "oauth2": { | 3 "oauth2": { |
4 "scopes": { | 4 "scopes": { |
| 5 "https://www.googleapis.com/auth/cloud-platform": { |
| 6 "description": "View and manage your data across Google Clou
d Platform services" |
| 7 }, |
5 "https://www.googleapis.com/auth/source.read_only": { | 8 "https://www.googleapis.com/auth/source.read_only": { |
6 "description": "View the contents of your source code reposi
tories" | 9 "description": "View the contents of your source code reposi
tories" |
7 }, | 10 }, |
8 "https://www.googleapis.com/auth/source.read_write": { | 11 "https://www.googleapis.com/auth/source.read_write": { |
9 "description": "Manage the contents of your source code repo
sitories" | 12 "description": "Manage the contents of your source code repo
sitories" |
10 }, | |
11 "https://www.googleapis.com/auth/cloud-platform": { | |
12 "description": "View and manage your data across Google Clou
d Platform services" | |
13 } | 13 } |
14 } | 14 } |
15 } | 15 } |
16 }, | 16 }, |
17 "basePath": "", | 17 "basePath": "", |
18 "baseUrl": "https://sourcerepo.googleapis.com/", | 18 "baseUrl": "https://sourcerepo.googleapis.com/", |
19 "batchPath": "batch", | 19 "batchPath": "batch", |
20 "canonicalName": "Cloud Source Repositories", | 20 "canonicalName": "Cloud Source Repositories", |
21 "description": "Access source code repositories hosted by Google.", | 21 "description": "Access source code repositories hosted by Google.", |
22 "discoveryVersion": "v1", | 22 "discoveryVersion": "v1", |
23 "documentationLink": "https://cloud.google.com/source-repositories/docs/apis
", | 23 "documentationLink": "https://cloud.google.com/source-repositories/docs/apis
", |
24 "icons": { | 24 "icons": { |
25 "x16": "http://www.google.com/images/icons/product/search-16.gif", | 25 "x16": "http://www.google.com/images/icons/product/search-16.gif", |
26 "x32": "http://www.google.com/images/icons/product/search-32.gif" | 26 "x32": "http://www.google.com/images/icons/product/search-32.gif" |
27 }, | 27 }, |
28 "id": "sourcerepo:v1", | 28 "id": "sourcerepo:v1", |
29 "kind": "discovery#restDescription", | 29 "kind": "discovery#restDescription", |
30 "name": "sourcerepo", | 30 "name": "sourcerepo", |
31 "ownerDomain": "google.com", | 31 "ownerDomain": "google.com", |
32 "ownerName": "Google", | 32 "ownerName": "Google", |
33 "parameters": { | 33 "parameters": { |
| 34 "bearer_token": { |
| 35 "description": "OAuth bearer token.", |
| 36 "location": "query", |
| 37 "type": "string" |
| 38 }, |
| 39 "oauth_token": { |
| 40 "description": "OAuth 2.0 token for the current user.", |
| 41 "location": "query", |
| 42 "type": "string" |
| 43 }, |
34 "upload_protocol": { | 44 "upload_protocol": { |
35 "description": "Upload protocol for media (e.g. \"raw\", \"multipart
\").", | 45 "description": "Upload protocol for media (e.g. \"raw\", \"multipart
\").", |
36 "location": "query", | 46 "location": "query", |
37 "type": "string" | 47 "type": "string" |
38 }, | 48 }, |
39 "prettyPrint": { | 49 "prettyPrint": { |
40 "default": "true", | 50 "default": "true", |
41 "description": "Returns response with indentations and line breaks."
, | 51 "description": "Returns response with indentations and line breaks."
, |
42 "location": "query", | 52 "location": "query", |
43 "type": "boolean" | 53 "type": "boolean" |
(...skipping 35 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
79 "proto" | 89 "proto" |
80 ], | 90 ], |
81 "enumDescriptions": [ | 91 "enumDescriptions": [ |
82 "Responses with Content-Type of application/json", | 92 "Responses with Content-Type of application/json", |
83 "Media download with context-dependent Content-Type", | 93 "Media download with context-dependent Content-Type", |
84 "Responses with Content-Type of application/x-protobuf" | 94 "Responses with Content-Type of application/x-protobuf" |
85 ], | 95 ], |
86 "location": "query", | 96 "location": "query", |
87 "type": "string" | 97 "type": "string" |
88 }, | 98 }, |
| 99 "key": { |
| 100 "description": "API key. Your API key identifies your project and pr
ovides you with API access, quota, and reports. Required unless you provide an O
Auth 2.0 token.", |
| 101 "location": "query", |
| 102 "type": "string" |
| 103 }, |
89 "access_token": { | 104 "access_token": { |
90 "description": "OAuth access token.", | 105 "description": "OAuth access token.", |
91 "location": "query", | 106 "location": "query", |
92 "type": "string" | 107 "type": "string" |
93 }, | 108 }, |
94 "key": { | |
95 "description": "API key. Your API key identifies your project and pr
ovides you with API access, quota, and reports. Required unless you provide an O
Auth 2.0 token.", | |
96 "location": "query", | |
97 "type": "string" | |
98 }, | |
99 "quotaUser": { | 109 "quotaUser": { |
100 "description": "Available to use for quota purposes for server-side
applications. Can be any arbitrary string assigned to a user, but should not exc
eed 40 characters.", | 110 "description": "Available to use for quota purposes for server-side
applications. Can be any arbitrary string assigned to a user, but should not exc
eed 40 characters.", |
101 "location": "query", | 111 "location": "query", |
102 "type": "string" | 112 "type": "string" |
103 }, | 113 }, |
104 "pp": { | 114 "pp": { |
105 "default": "true", | 115 "default": "true", |
106 "description": "Pretty-print response.", | 116 "description": "Pretty-print response.", |
107 "location": "query", | 117 "location": "query", |
108 "type": "boolean" | 118 "type": "boolean" |
109 }, | |
110 "oauth_token": { | |
111 "description": "OAuth 2.0 token for the current user.", | |
112 "location": "query", | |
113 "type": "string" | |
114 }, | |
115 "bearer_token": { | |
116 "description": "OAuth bearer token.", | |
117 "location": "query", | |
118 "type": "string" | |
119 } | 119 } |
120 }, | 120 }, |
121 "protocol": "rest", | 121 "protocol": "rest", |
122 "resources": { | 122 "resources": { |
123 "projects": { | 123 "projects": { |
124 "resources": { | 124 "resources": { |
125 "repos": { | 125 "repos": { |
126 "methods": { | 126 "methods": { |
127 "setIamPolicy": { | 127 "delete": { |
128 "description": "Sets the access control policy on th
e specified resource. Replaces any\nexisting policy.", | 128 "description": "Deletes a repo.", |
129 "httpMethod": "POST", | 129 "httpMethod": "DELETE", |
130 "id": "sourcerepo.projects.repos.setIamPolicy", | 130 "id": "sourcerepo.projects.repos.delete", |
131 "parameterOrder": [ | 131 "parameterOrder": [ |
132 "resource" | 132 "name" |
133 ], | 133 ], |
134 "parameters": { | 134 "parameters": { |
135 "resource": { | 135 "name": { |
136 "description": "REQUIRED: The resource for w
hich the policy is being specified.\nSee the operation documentation for the app
ropriate value for this field.", | 136 "description": "The name of the repo to dele
te. Values are of the form\n`projects/<project>/repos/<repo>`.", |
137 "location": "path", | 137 "location": "path", |
138 "pattern": "^projects/[^/]+/repos/.+$", | 138 "pattern": "^projects/[^/]+/repos/.+$", |
139 "required": true, | 139 "required": true, |
140 "type": "string" | 140 "type": "string" |
141 } | 141 } |
142 }, | 142 }, |
143 "path": "v1/{+resource}:setIamPolicy", | 143 "path": "v1/{+name}", |
144 "request": { | |
145 "$ref": "SetIamPolicyRequest" | |
146 }, | |
147 "response": { | 144 "response": { |
148 "$ref": "Policy" | 145 "$ref": "Empty" |
149 }, | 146 }, |
150 "scopes": [ | 147 "scopes": [ |
151 "https://www.googleapis.com/auth/cloud-platform"
, | 148 "https://www.googleapis.com/auth/cloud-platform"
, |
| 149 "https://www.googleapis.com/auth/source.read_onl
y", |
| 150 "https://www.googleapis.com/auth/source.read_wri
te" |
| 151 ] |
| 152 }, |
| 153 "list": { |
| 154 "description": "Returns all repos belonging to a pro
ject. The sizes of the repos are\nnot set by ListRepos. To get the size of a re
po, use GetRepo.", |
| 155 "httpMethod": "GET", |
| 156 "id": "sourcerepo.projects.repos.list", |
| 157 "parameterOrder": [ |
| 158 "name" |
| 159 ], |
| 160 "parameters": { |
| 161 "pageToken": { |
| 162 "description": "Resume listing repositories
where a prior ListReposResponse\nleft off. This is an opaque token that must be
obtained from\na recent, prior ListReposResponse's next_page_token field.", |
| 163 "location": "query", |
| 164 "type": "string" |
| 165 }, |
| 166 "name": { |
| 167 "description": "The project ID whose repos s
hould be listed. Values are of the form\n`projects/<project>`.", |
| 168 "location": "path", |
| 169 "pattern": "^projects/[^/]+$", |
| 170 "required": true, |
| 171 "type": "string" |
| 172 }, |
| 173 "pageSize": { |
| 174 "description": "Maximum number of repositori
es to return; between 1 and 500.\nIf not set or zero, defaults to 100 at the ser
ver.", |
| 175 "format": "int32", |
| 176 "location": "query", |
| 177 "type": "integer" |
| 178 } |
| 179 }, |
| 180 "path": "v1/{+name}/repos", |
| 181 "response": { |
| 182 "$ref": "ListReposResponse" |
| 183 }, |
| 184 "scopes": [ |
| 185 "https://www.googleapis.com/auth/cloud-platform"
, |
152 "https://www.googleapis.com/auth/source.read_onl
y", | 186 "https://www.googleapis.com/auth/source.read_onl
y", |
153 "https://www.googleapis.com/auth/source.read_wri
te" | 187 "https://www.googleapis.com/auth/source.read_wri
te" |
154 ] | 188 ] |
155 }, | 189 }, |
156 "create": { | 190 "create": { |
157 "description": "Creates a repo in the given project
with the given name.\n\nIf the named repository already exists, `CreateRepo` ret
urns\n`ALREADY_EXISTS`.", | 191 "description": "Creates a repo in the given project
with the given name.\n\nIf the named repository already exists, `CreateRepo` ret
urns\n`ALREADY_EXISTS`.", |
158 "httpMethod": "POST", | 192 "httpMethod": "POST", |
159 "id": "sourcerepo.projects.repos.create", | 193 "id": "sourcerepo.projects.repos.create", |
160 "parameterOrder": [ | 194 "parameterOrder": [ |
161 "parent" | 195 "parent" |
(...skipping 13 matching lines...) Expand all Loading... |
175 }, | 209 }, |
176 "response": { | 210 "response": { |
177 "$ref": "Repo" | 211 "$ref": "Repo" |
178 }, | 212 }, |
179 "scopes": [ | 213 "scopes": [ |
180 "https://www.googleapis.com/auth/cloud-platform"
, | 214 "https://www.googleapis.com/auth/cloud-platform"
, |
181 "https://www.googleapis.com/auth/source.read_onl
y", | 215 "https://www.googleapis.com/auth/source.read_onl
y", |
182 "https://www.googleapis.com/auth/source.read_wri
te" | 216 "https://www.googleapis.com/auth/source.read_wri
te" |
183 ] | 217 ] |
184 }, | 218 }, |
| 219 "setIamPolicy": { |
| 220 "description": "Sets the access control policy on th
e specified resource. Replaces any\nexisting policy.", |
| 221 "httpMethod": "POST", |
| 222 "id": "sourcerepo.projects.repos.setIamPolicy", |
| 223 "parameterOrder": [ |
| 224 "resource" |
| 225 ], |
| 226 "parameters": { |
| 227 "resource": { |
| 228 "description": "REQUIRED: The resource for w
hich the policy is being specified.\nSee the operation documentation for the app
ropriate value for this field.", |
| 229 "location": "path", |
| 230 "pattern": "^projects/[^/]+/repos/.+$", |
| 231 "required": true, |
| 232 "type": "string" |
| 233 } |
| 234 }, |
| 235 "path": "v1/{+resource}:setIamPolicy", |
| 236 "request": { |
| 237 "$ref": "SetIamPolicyRequest" |
| 238 }, |
| 239 "response": { |
| 240 "$ref": "Policy" |
| 241 }, |
| 242 "scopes": [ |
| 243 "https://www.googleapis.com/auth/cloud-platform"
, |
| 244 "https://www.googleapis.com/auth/source.read_onl
y", |
| 245 "https://www.googleapis.com/auth/source.read_wri
te" |
| 246 ] |
| 247 }, |
185 "getIamPolicy": { | 248 "getIamPolicy": { |
186 "description": "Gets the access control policy for a
resource.\nReturns an empty policy if the resource exists and does not have a p
olicy\nset.", | 249 "description": "Gets the access control policy for a
resource.\nReturns an empty policy if the resource exists and does not have a p
olicy\nset.", |
187 "httpMethod": "GET", | 250 "httpMethod": "GET", |
188 "id": "sourcerepo.projects.repos.getIamPolicy", | 251 "id": "sourcerepo.projects.repos.getIamPolicy", |
189 "parameterOrder": [ | 252 "parameterOrder": [ |
190 "resource" | 253 "resource" |
191 ], | 254 ], |
192 "parameters": { | 255 "parameters": { |
193 "resource": { | 256 "resource": { |
194 "description": "REQUIRED: The resource for w
hich the policy is being requested.\nSee the operation documentation for the app
ropriate value for this field.", | 257 "description": "REQUIRED: The resource for w
hich the policy is being requested.\nSee the operation documentation for the app
ropriate value for this field.", |
(...skipping 60 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
255 "$ref": "TestIamPermissionsRequest" | 318 "$ref": "TestIamPermissionsRequest" |
256 }, | 319 }, |
257 "response": { | 320 "response": { |
258 "$ref": "TestIamPermissionsResponse" | 321 "$ref": "TestIamPermissionsResponse" |
259 }, | 322 }, |
260 "scopes": [ | 323 "scopes": [ |
261 "https://www.googleapis.com/auth/cloud-platform"
, | 324 "https://www.googleapis.com/auth/cloud-platform"
, |
262 "https://www.googleapis.com/auth/source.read_onl
y", | 325 "https://www.googleapis.com/auth/source.read_onl
y", |
263 "https://www.googleapis.com/auth/source.read_wri
te" | 326 "https://www.googleapis.com/auth/source.read_wri
te" |
264 ] | 327 ] |
265 }, | |
266 "delete": { | |
267 "description": "Deletes a repo.", | |
268 "httpMethod": "DELETE", | |
269 "id": "sourcerepo.projects.repos.delete", | |
270 "parameterOrder": [ | |
271 "name" | |
272 ], | |
273 "parameters": { | |
274 "name": { | |
275 "description": "The name of the repo to dele
te. Values are of the form\n`projects/<project>/repos/<repo>`.", | |
276 "location": "path", | |
277 "pattern": "^projects/[^/]+/repos/.+$", | |
278 "required": true, | |
279 "type": "string" | |
280 } | |
281 }, | |
282 "path": "v1/{+name}", | |
283 "response": { | |
284 "$ref": "Empty" | |
285 }, | |
286 "scopes": [ | |
287 "https://www.googleapis.com/auth/cloud-platform"
, | |
288 "https://www.googleapis.com/auth/source.read_onl
y", | |
289 "https://www.googleapis.com/auth/source.read_wri
te" | |
290 ] | |
291 }, | |
292 "list": { | |
293 "description": "Returns all repos belonging to a pro
ject. The sizes of the repos are\nnot set by ListRepos. To get the size of a re
po, use GetRepo.", | |
294 "httpMethod": "GET", | |
295 "id": "sourcerepo.projects.repos.list", | |
296 "parameterOrder": [ | |
297 "name" | |
298 ], | |
299 "parameters": { | |
300 "name": { | |
301 "description": "The project ID whose repos s
hould be listed. Values are of the form\n`projects/<project>`.", | |
302 "location": "path", | |
303 "pattern": "^projects/[^/]+$", | |
304 "required": true, | |
305 "type": "string" | |
306 }, | |
307 "pageToken": { | |
308 "description": "Resume listing repositories
where a prior ListReposResponse\nleft off. This is an opaque token that must be
obtained from\na recent, prior ListReposResponse's next_page_token field.", | |
309 "location": "query", | |
310 "type": "string" | |
311 }, | |
312 "pageSize": { | |
313 "description": "Maximum number of repositori
es to return; between 1 and 500.\nIf not set or zero, defaults to 100 at the ser
ver.", | |
314 "format": "int32", | |
315 "location": "query", | |
316 "type": "integer" | |
317 } | |
318 }, | |
319 "path": "v1/{+name}/repos", | |
320 "response": { | |
321 "$ref": "ListReposResponse" | |
322 }, | |
323 "scopes": [ | |
324 "https://www.googleapis.com/auth/cloud-platform"
, | |
325 "https://www.googleapis.com/auth/source.read_onl
y", | |
326 "https://www.googleapis.com/auth/source.read_wri
te" | |
327 ] | |
328 } | 328 } |
329 } | 329 } |
330 } | 330 } |
331 } | 331 } |
332 } | 332 } |
333 }, | 333 }, |
334 "revision": "20170528", | 334 "revision": "20170528", |
335 "rootUrl": "https://sourcerepo.googleapis.com/", | 335 "rootUrl": "https://sourcerepo.googleapis.com/", |
336 "schemas": { | 336 "schemas": { |
337 "AuditLogConfig": { | |
338 "description": "Provides the configuration for logging a type of per
missions.\nExample:\n\n {\n \"audit_log_configs\": [\n {\n
\"log_type\": \"DATA_READ\",\n \"exempted_members\": [\n
\"user:foo@gmail.com\"\n ]\n },\n {\n \"log_type
\": \"DATA_WRITE\",\n }\n ]\n }\n\nThis enables 'DATA_READ' and '
DATA_WRITE' logging, while exempting\nfoo@gmail.com from DATA_READ logging.", | |
339 "id": "AuditLogConfig", | |
340 "properties": { | |
341 "exemptedMembers": { | |
342 "description": "Specifies the identities that do not cause l
ogging for this type of\npermission.\nFollows the same format of Binding.members
.", | |
343 "items": { | |
344 "type": "string" | |
345 }, | |
346 "type": "array" | |
347 }, | |
348 "logType": { | |
349 "description": "The log type that this config enables.", | |
350 "enum": [ | |
351 "LOG_TYPE_UNSPECIFIED", | |
352 "ADMIN_READ", | |
353 "DATA_WRITE", | |
354 "DATA_READ" | |
355 ], | |
356 "enumDescriptions": [ | |
357 "Default case. Should never be this.", | |
358 "Admin reads. Example: CloudIAM getIamPolicy", | |
359 "Data writes. Example: CloudSQL Users create", | |
360 "Data reads. Example: CloudSQL Users list" | |
361 ], | |
362 "type": "string" | |
363 } | |
364 }, | |
365 "type": "object" | |
366 }, | |
367 "Rule": { | |
368 "description": "A rule to be applied in a Policy.", | |
369 "id": "Rule", | |
370 "properties": { | |
371 "description": { | |
372 "description": "Human-readable description of the rule.", | |
373 "type": "string" | |
374 }, | |
375 "conditions": { | |
376 "description": "Additional restrictions that must be met", | |
377 "items": { | |
378 "$ref": "Condition" | |
379 }, | |
380 "type": "array" | |
381 }, | |
382 "logConfig": { | |
383 "description": "The config returned to callers of tech.iam.I
AM.CheckPolicy for any entries\nthat match the LOG action.", | |
384 "items": { | |
385 "$ref": "LogConfig" | |
386 }, | |
387 "type": "array" | |
388 }, | |
389 "in": { | |
390 "description": "If one or more 'in' clauses are specified, t
he rule matches if\nthe PRINCIPAL/AUTHORITY_SELECTOR is in at least one of these
entries.", | |
391 "items": { | |
392 "type": "string" | |
393 }, | |
394 "type": "array" | |
395 }, | |
396 "permissions": { | |
397 "description": "A permission is a string of form '<service>.
<resource type>.<verb>'\n(e.g., 'storage.buckets.list'). A value of '*' matches
all permissions,\nand a verb part of '*' (e.g., 'storage.buckets.*') matches all
verbs.", | |
398 "items": { | |
399 "type": "string" | |
400 }, | |
401 "type": "array" | |
402 }, | |
403 "action": { | |
404 "description": "Required", | |
405 "enum": [ | |
406 "NO_ACTION", | |
407 "ALLOW", | |
408 "ALLOW_WITH_LOG", | |
409 "DENY", | |
410 "DENY_WITH_LOG", | |
411 "LOG" | |
412 ], | |
413 "enumDescriptions": [ | |
414 "Default no action.", | |
415 "Matching 'Entries' grant access.", | |
416 "Matching 'Entries' grant access and the caller promises
to log\nthe request per the returned log_configs.", | |
417 "Matching 'Entries' deny access.", | |
418 "Matching 'Entries' deny access and the caller promises
to log\nthe request per the returned log_configs.", | |
419 "Matching 'Entries' tell IAM.Check callers to generate l
ogs." | |
420 ], | |
421 "type": "string" | |
422 }, | |
423 "notIn": { | |
424 "description": "If one or more 'not_in' clauses are specifie
d, the rule matches\nif the PRINCIPAL/AUTHORITY_SELECTOR is in none of the entri
es.\nThe format for in and not_in entries is the same as for members in a\nBindi
ng (see google/iam/v1/policy.proto).", | |
425 "items": { | |
426 "type": "string" | |
427 }, | |
428 "type": "array" | |
429 } | |
430 }, | |
431 "type": "object" | |
432 }, | |
433 "LogConfig": { | |
434 "description": "Specifies what kind of log the caller must write", | |
435 "id": "LogConfig", | |
436 "properties": { | |
437 "cloudAudit": { | |
438 "$ref": "CloudAuditOptions", | |
439 "description": "Cloud audit options." | |
440 }, | |
441 "counter": { | |
442 "$ref": "CounterOptions", | |
443 "description": "Counter options." | |
444 }, | |
445 "dataAccess": { | |
446 "$ref": "DataAccessOptions", | |
447 "description": "Data access options." | |
448 } | |
449 }, | |
450 "type": "object" | |
451 }, | |
452 "TestIamPermissionsRequest": { | |
453 "description": "Request message for `TestIamPermissions` method.", | |
454 "id": "TestIamPermissionsRequest", | |
455 "properties": { | |
456 "permissions": { | |
457 "description": "The set of permissions to check for the `res
ource`. Permissions with\nwildcards (such as '*' or 'storage.*') are not allowed
. For more\ninformation see\n[IAM Overview](https://cloud.google.com/iam/docs/ov
erview#permissions).", | |
458 "items": { | |
459 "type": "string" | |
460 }, | |
461 "type": "array" | |
462 } | |
463 }, | |
464 "type": "object" | |
465 }, | |
466 "Policy": { | |
467 "description": "Defines an Identity and Access Management (IAM) poli
cy. It is used to\nspecify access control policies for Cloud Platform resources.
\n\n\nA `Policy` consists of a list of `bindings`. A `Binding` binds a list of\n
`members` to a `role`, where the members can be user accounts, Google groups,\nG
oogle domains, and service accounts. A `role` is a named list of permissions\nde
fined by IAM.\n\n**Example**\n\n {\n \"bindings\": [\n {\n
\"role\": \"roles/owner\",\n \"members\": [\n \"user:mike
@example.com\",\n \"group:admins@example.com\",\n \"domain
:google.com\",\n \"serviceAccount:my-other-app@appspot.gserviceaccoun
t.com\",\n ]\n },\n {\n \"role\": \"roles/viewer
\",\n \"members\": [\"user:sean@example.com\"]\n }\n ]\n
}\n\nFor a description of IAM and its features, see the\n[IAM developer's guide
](https://cloud.google.com/iam).", | |
468 "id": "Policy", | |
469 "properties": { | |
470 "version": { | |
471 "description": "Version of the `Policy`. The default version
is 0.", | |
472 "format": "int32", | |
473 "type": "integer" | |
474 }, | |
475 "auditConfigs": { | |
476 "description": "Specifies cloud audit logging configuration
for this policy.", | |
477 "items": { | |
478 "$ref": "AuditConfig" | |
479 }, | |
480 "type": "array" | |
481 }, | |
482 "bindings": { | |
483 "description": "Associates a list of `members` to a `role`.\
nMultiple `bindings` must not be specified for the same `role`.\n`bindings` with
no members will result in an error.", | |
484 "items": { | |
485 "$ref": "Binding" | |
486 }, | |
487 "type": "array" | |
488 }, | |
489 "etag": { | |
490 "description": "`etag` is used for optimistic concurrency co
ntrol as a way to help\nprevent simultaneous updates of a policy from overwritin
g each other.\nIt is strongly suggested that systems make use of the `etag` in t
he\nread-modify-write cycle to perform policy updates in order to avoid race\nco
nditions: An `etag` is returned in the response to `getIamPolicy`, and\nsystems
are expected to put that etag in the request to `setIamPolicy` to\nensure that t
heir change will be applied to the same version of the policy.\n\nIf no `etag` i
s provided in the call to `setIamPolicy`, then the existing\npolicy is overwritt
en blindly.", | |
491 "format": "byte", | |
492 "type": "string" | |
493 }, | |
494 "iamOwned": { | |
495 "type": "boolean" | |
496 }, | |
497 "rules": { | |
498 "description": "If more than one rule is specified, the rule
s are applied in the following\nmanner:\n- All matching LOG rules are always app
lied.\n- If any DENY/DENY_WITH_LOG rule matches, permission is denied.\n Loggin
g will be applied if one or more matching rule requires logging.\n- Otherwise, i
f any ALLOW/ALLOW_WITH_LOG rule matches, permission is\n granted.\n Logging wi
ll be applied if one or more matching rule requires logging.\n- Otherwise, if no
rule applies, permission is denied.", | |
499 "items": { | |
500 "$ref": "Rule" | |
501 }, | |
502 "type": "array" | |
503 } | |
504 }, | |
505 "type": "object" | |
506 }, | |
507 "DataAccessOptions": { | 337 "DataAccessOptions": { |
508 "description": "Write a Data Access (Gin) log", | 338 "description": "Write a Data Access (Gin) log", |
509 "id": "DataAccessOptions", | 339 "id": "DataAccessOptions", |
510 "properties": {}, | 340 "properties": {}, |
511 "type": "object" | 341 "type": "object" |
512 }, | 342 }, |
513 "AuditConfig": { | 343 "AuditConfig": { |
514 "description": "Specifies the audit configuration for a service.\nTh
e configuration determines which permission types are logged, and what\nidentiti
es, if any, are exempted from logging.\nAn AuditConfig must have one or more Aud
itLogConfigs.\n\nIf there are AuditConfigs for both `allServices` and a specific
service,\nthe union of the two AuditConfigs is used for that service: the log_t
ypes\nspecified in each AuditConfig are enabled, and the exempted_members in eac
h\nAuditConfig are exempted.\n\nExample Policy with multiple AuditConfigs:\n\n
{\n \"audit_configs\": [\n {\n \"service\": \"allServices
\"\n \"audit_log_configs\": [\n {\n \"log_type\
": \"DATA_READ\",\n \"exempted_members\": [\n \"user
:foo@gmail.com\"\n ]\n },\n {\n
\"log_type\": \"DATA_WRITE\",\n },\n {\n \"lo
g_type\": \"ADMIN_READ\",\n }\n ]\n },\n {\n
\"service\": \"fooservice.googleapis.com\"\n \"audit_log_config
s\": [\n {\n \"log_type\": \"DATA_READ\",\n }
,\n {\n \"log_type\": \"DATA_WRITE\",\n \"e
xempted_members\": [\n \"user:bar@gmail.com\"\n ]\n
}\n ]\n }\n ]\n }\n\nFor fooservice, this pol
icy enables DATA_READ, DATA_WRITE and ADMIN_READ\nlogging. It also exempts foo@g
mail.com from DATA_READ logging, and\nbar@gmail.com from DATA_WRITE logging.", | 344 "description": "Specifies the audit configuration for a service.\nTh
e configuration determines which permission types are logged, and what\nidentiti
es, if any, are exempted from logging.\nAn AuditConfig must have one or more Aud
itLogConfigs.\n\nIf there are AuditConfigs for both `allServices` and a specific
service,\nthe union of the two AuditConfigs is used for that service: the log_t
ypes\nspecified in each AuditConfig are enabled, and the exempted_members in eac
h\nAuditConfig are exempted.\n\nExample Policy with multiple AuditConfigs:\n\n
{\n \"audit_configs\": [\n {\n \"service\": \"allServices
\"\n \"audit_log_configs\": [\n {\n \"log_type\
": \"DATA_READ\",\n \"exempted_members\": [\n \"user
:foo@gmail.com\"\n ]\n },\n {\n
\"log_type\": \"DATA_WRITE\",\n },\n {\n \"lo
g_type\": \"ADMIN_READ\",\n }\n ]\n },\n {\n
\"service\": \"fooservice.googleapis.com\"\n \"audit_log_config
s\": [\n {\n \"log_type\": \"DATA_READ\",\n }
,\n {\n \"log_type\": \"DATA_WRITE\",\n \"e
xempted_members\": [\n \"user:bar@gmail.com\"\n ]\n
}\n ]\n }\n ]\n }\n\nFor fooservice, this pol
icy enables DATA_READ, DATA_WRITE and ADMIN_READ\nlogging. It also exempts foo@g
mail.com from DATA_READ logging, and\nbar@gmail.com from DATA_WRITE logging.", |
515 "id": "AuditConfig", | 345 "id": "AuditConfig", |
516 "properties": { | 346 "properties": { |
| 347 "service": { |
| 348 "description": "Specifies a service that will be enabled for
audit logging.\nFor example, `storage.googleapis.com`, `cloudsql.googleapis.com
`.\n`allServices` is a special value that covers all services.", |
| 349 "type": "string" |
| 350 }, |
517 "auditLogConfigs": { | 351 "auditLogConfigs": { |
518 "description": "The configuration for logging of each type o
f permission.\nNext ID: 4", | 352 "description": "The configuration for logging of each type o
f permission.\nNext ID: 4", |
519 "items": { | 353 "items": { |
520 "$ref": "AuditLogConfig" | 354 "$ref": "AuditLogConfig" |
521 }, | 355 }, |
522 "type": "array" | 356 "type": "array" |
523 }, | 357 }, |
524 "exemptedMembers": { | 358 "exemptedMembers": { |
525 "items": { | 359 "items": { |
526 "type": "string" | 360 "type": "string" |
527 }, | 361 }, |
528 "type": "array" | 362 "type": "array" |
529 }, | |
530 "service": { | |
531 "description": "Specifies a service that will be enabled for
audit logging.\nFor example, `storage.googleapis.com`, `cloudsql.googleapis.com
`.\n`allServices` is a special value that covers all services.", | |
532 "type": "string" | |
533 } | 363 } |
534 }, | 364 }, |
535 "type": "object" | 365 "type": "object" |
536 }, | 366 }, |
537 "SetIamPolicyRequest": { | 367 "SetIamPolicyRequest": { |
538 "description": "Request message for `SetIamPolicy` method.", | 368 "description": "Request message for `SetIamPolicy` method.", |
539 "id": "SetIamPolicyRequest", | 369 "id": "SetIamPolicyRequest", |
540 "properties": { | 370 "properties": { |
541 "updateMask": { | 371 "updateMask": { |
542 "description": "OPTIONAL: A FieldMask specifying which field
s of the policy to modify. Only\nthe fields in the mask will be modified. If no
mask is provided, the\nfollowing default mask is used:\npaths: \"bindings, etag\
"\nThis field is only used by Cloud IAM.", | 372 "description": "OPTIONAL: A FieldMask specifying which field
s of the policy to modify. Only\nthe fields in the mask will be modified. If no
mask is provided, the\nfollowing default mask is used:\npaths: \"bindings, etag\
"\nThis field is only used by Cloud IAM.", |
(...skipping 39 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
582 }, | 412 }, |
583 "type": "array" | 413 "type": "array" |
584 }, | 414 }, |
585 "role": { | 415 "role": { |
586 "description": "Role that is assigned to `members`.\nFor exa
mple, `roles/viewer`, `roles/editor`, or `roles/owner`.\nRequired", | 416 "description": "Role that is assigned to `members`.\nFor exa
mple, `roles/viewer`, `roles/editor`, or `roles/owner`.\nRequired", |
587 "type": "string" | 417 "type": "string" |
588 } | 418 } |
589 }, | 419 }, |
590 "type": "object" | 420 "type": "object" |
591 }, | 421 }, |
| 422 "Empty": { |
| 423 "description": "A generic empty message that you can re-use to avoid
defining duplicated\nempty messages in your APIs. A typical example is to use i
t as the request\nor the response type of an API method. For instance:\n\n se
rvice Foo {\n rpc Bar(google.protobuf.Empty) returns (google.protobuf.Empty
);\n }\n\nThe JSON representation for `Empty` is empty JSON object `{}`.", |
| 424 "id": "Empty", |
| 425 "properties": {}, |
| 426 "type": "object" |
| 427 }, |
592 "MirrorConfig": { | 428 "MirrorConfig": { |
593 "description": "Configuration to automatically mirror a repository f
rom another\nhosting service, for example GitHub or BitBucket.", | 429 "description": "Configuration to automatically mirror a repository f
rom another\nhosting service, for example GitHub or BitBucket.", |
594 "id": "MirrorConfig", | 430 "id": "MirrorConfig", |
595 "properties": { | 431 "properties": { |
| 432 "deployKeyId": { |
| 433 "description": "ID of the SSH deploy key at the other hostin
g service.\nRemoving this key from the other service would deauthorize\nGoogle C
loud Source Repositories from mirroring.", |
| 434 "type": "string" |
| 435 }, |
596 "url": { | 436 "url": { |
597 "description": "URL of the main repository at the other host
ing service.", | 437 "description": "URL of the main repository at the other host
ing service.", |
598 "type": "string" | 438 "type": "string" |
599 }, | 439 }, |
600 "webhookId": { | 440 "webhookId": { |
601 "description": "ID of the webhook listening to updates to tr
igger mirroring.\nRemoving this webook from the other hosting service will stop\
nGoogle Cloud Source Repositories from receiving notifications,\nand thereby dis
abling mirroring.", | 441 "description": "ID of the webhook listening to updates to tr
igger mirroring.\nRemoving this webook from the other hosting service will stop\
nGoogle Cloud Source Repositories from receiving notifications,\nand thereby dis
abling mirroring.", |
602 "type": "string" | 442 "type": "string" |
603 }, | |
604 "deployKeyId": { | |
605 "description": "ID of the SSH deploy key at the other hostin
g service.\nRemoving this key from the other service would deauthorize\nGoogle C
loud Source Repositories from mirroring.", | |
606 "type": "string" | |
607 } | 443 } |
608 }, | 444 }, |
609 "type": "object" | 445 "type": "object" |
610 }, | 446 }, |
611 "Empty": { | |
612 "description": "A generic empty message that you can re-use to avoid
defining duplicated\nempty messages in your APIs. A typical example is to use i
t as the request\nor the response type of an API method. For instance:\n\n se
rvice Foo {\n rpc Bar(google.protobuf.Empty) returns (google.protobuf.Empty
);\n }\n\nThe JSON representation for `Empty` is empty JSON object `{}`.", | |
613 "id": "Empty", | |
614 "properties": {}, | |
615 "type": "object" | |
616 }, | |
617 "Repo": { | 447 "Repo": { |
618 "description": "A repository (or repo) is a Git repository storing v
ersioned source content.", | 448 "description": "A repository (or repo) is a Git repository storing v
ersioned source content.", |
619 "id": "Repo", | 449 "id": "Repo", |
620 "properties": { | 450 "properties": { |
621 "name": { | |
622 "description": "Resource name of the repository, of the form
\n`projects/<project>/repos/<repo>`. The repo name may contain slashes.\neg, `p
rojects/myproject/repos/name/with/slash`", | |
623 "type": "string" | |
624 }, | |
625 "mirrorConfig": { | |
626 "$ref": "MirrorConfig", | |
627 "description": "How this repository mirrors a repository man
aged by another service." | |
628 }, | |
629 "url": { | 451 "url": { |
630 "description": "URL to clone the repository from Google Clou
d Source Repositories.", | 452 "description": "URL to clone the repository from Google Clou
d Source Repositories.", |
631 "type": "string" | 453 "type": "string" |
632 }, | 454 }, |
633 "size": { | 455 "size": { |
634 "description": "The disk usage of the repo, in bytes.\nOnly
returned by GetRepo.", | 456 "description": "The disk usage of the repo, in bytes.\nOnly
returned by GetRepo.", |
635 "format": "int64", | 457 "format": "int64", |
636 "type": "string" | 458 "type": "string" |
| 459 }, |
| 460 "name": { |
| 461 "description": "Resource name of the repository, of the form
\n`projects/<project>/repos/<repo>`. The repo name may contain slashes.\neg, `p
rojects/myproject/repos/name/with/slash`", |
| 462 "type": "string" |
| 463 }, |
| 464 "mirrorConfig": { |
| 465 "$ref": "MirrorConfig", |
| 466 "description": "How this repository mirrors a repository man
aged by another service." |
637 } | 467 } |
638 }, | 468 }, |
639 "type": "object" | 469 "type": "object" |
| 470 }, |
| 471 "TestIamPermissionsResponse": { |
| 472 "description": "Response message for `TestIamPermissions` method.", |
| 473 "id": "TestIamPermissionsResponse", |
| 474 "properties": { |
| 475 "permissions": { |
| 476 "description": "A subset of `TestPermissionsRequest.permissi
ons` that the caller is\nallowed.", |
| 477 "items": { |
| 478 "type": "string" |
| 479 }, |
| 480 "type": "array" |
| 481 } |
| 482 }, |
| 483 "type": "object" |
640 }, | 484 }, |
641 "ListReposResponse": { | 485 "ListReposResponse": { |
642 "description": "Response for ListRepos. The size is not set in the
returned repositories.", | 486 "description": "Response for ListRepos. The size is not set in the
returned repositories.", |
643 "id": "ListReposResponse", | 487 "id": "ListReposResponse", |
644 "properties": { | 488 "properties": { |
645 "repos": { | 489 "repos": { |
646 "description": "The listed repos.", | 490 "description": "The listed repos.", |
647 "items": { | 491 "items": { |
648 "$ref": "Repo" | 492 "$ref": "Repo" |
649 }, | 493 }, |
650 "type": "array" | 494 "type": "array" |
651 }, | 495 }, |
652 "nextPageToken": { | 496 "nextPageToken": { |
653 "description": "If non-empty, additional repositories exist
within the project. These\ncan be retrieved by including this value in the next
ListReposRequest's\npage_token field.", | 497 "description": "If non-empty, additional repositories exist
within the project. These\ncan be retrieved by including this value in the next
ListReposRequest's\npage_token field.", |
654 "type": "string" | 498 "type": "string" |
655 } | 499 } |
656 }, | 500 }, |
657 "type": "object" | 501 "type": "object" |
658 }, | 502 }, |
659 "Condition": { | 503 "Condition": { |
660 "description": "A condition to be met.", | 504 "description": "A condition to be met.", |
661 "id": "Condition", | 505 "id": "Condition", |
662 "properties": { | 506 "properties": { |
| 507 "svc": { |
| 508 "description": "Trusted attributes discharged by the service
.", |
| 509 "type": "string" |
| 510 }, |
| 511 "value": { |
| 512 "description": "DEPRECATED. Use 'values' instead.", |
| 513 "type": "string" |
| 514 }, |
| 515 "sys": { |
| 516 "description": "Trusted attributes supplied by any service t
hat owns resources and uses\nthe IAM system for access control.", |
| 517 "enum": [ |
| 518 "NO_ATTR", |
| 519 "REGION", |
| 520 "SERVICE", |
| 521 "NAME", |
| 522 "IP" |
| 523 ], |
| 524 "enumDescriptions": [ |
| 525 "Default non-attribute type", |
| 526 "Region of the resource", |
| 527 "Service name", |
| 528 "Resource name", |
| 529 "IP address of the caller" |
| 530 ], |
| 531 "type": "string" |
| 532 }, |
| 533 "values": { |
| 534 "description": "The objects of the condition. This is mutual
ly exclusive with 'value'.", |
| 535 "items": { |
| 536 "type": "string" |
| 537 }, |
| 538 "type": "array" |
| 539 }, |
663 "iam": { | 540 "iam": { |
664 "description": "Trusted attributes supplied by the IAM syste
m.", | 541 "description": "Trusted attributes supplied by the IAM syste
m.", |
665 "enum": [ | 542 "enum": [ |
666 "NO_ATTR", | 543 "NO_ATTR", |
667 "AUTHORITY", | 544 "AUTHORITY", |
668 "ATTRIBUTION", | 545 "ATTRIBUTION", |
669 "APPROVER", | 546 "APPROVER", |
670 "JUSTIFICATION_TYPE" | 547 "JUSTIFICATION_TYPE" |
671 ], | 548 ], |
672 "enumDescriptions": [ | 549 "enumDescriptions": [ |
673 "Default non-attribute.", | 550 "Default non-attribute.", |
674 "Either principal or (if present) authority selector.", | 551 "Either principal or (if present) authority selector.", |
675 "The principal (even if an authority selector is present
), which\nmust only be used for attribution, not authorization.", | 552 "The principal (even if an authority selector is present
), which\nmust only be used for attribution, not authorization.", |
676 "An approver (distinct from the requester) that has auth
orized this\nrequest.\nWhen used with IN, the condition indicates that one of th
e approvers\nassociated with the request matches the specified principal, or is
a\nmember of the specified group. Approvers can only grant additional\naccess, a
nd are thus only used in a strictly positive context\n(e.g. ALLOW/IN or DENY/NOT
_IN).\nSee: go/rpc-security-policy-dynamicauth.", | 553 "An approver (distinct from the requester) that has auth
orized this\nrequest.\nWhen used with IN, the condition indicates that one of th
e approvers\nassociated with the request matches the specified principal, or is
a\nmember of the specified group. Approvers can only grant additional\naccess, a
nd are thus only used in a strictly positive context\n(e.g. ALLOW/IN or DENY/NOT
_IN).\nSee: go/rpc-security-policy-dynamicauth.", |
677 "What types of justifications have been supplied with th
is request.\nString values should match enum names from tech.iam.JustificationTy
pe,\ne.g. \"MANUAL_STRING\". It is not permitted to grant access based on\nthe *
absence* of a justification, so justification conditions can only\nbe used in a
\"positive\" context (e.g., ALLOW/IN or DENY/NOT_IN).\n\nMultiple justifications
, e.g., a Buganizer ID and a manually-entered\nreason, are normal and supported.
" | 554 "What types of justifications have been supplied with th
is request.\nString values should match enum names from tech.iam.JustificationTy
pe,\ne.g. \"MANUAL_STRING\". It is not permitted to grant access based on\nthe *
absence* of a justification, so justification conditions can only\nbe used in a
\"positive\" context (e.g., ALLOW/IN or DENY/NOT_IN).\n\nMultiple justifications
, e.g., a Buganizer ID and a manually-entered\nreason, are normal and supported.
" |
678 ], | 555 ], |
679 "type": "string" | 556 "type": "string" |
680 }, | 557 }, |
681 "values": { | |
682 "description": "The objects of the condition. This is mutual
ly exclusive with 'value'.", | |
683 "items": { | |
684 "type": "string" | |
685 }, | |
686 "type": "array" | |
687 }, | |
688 "op": { | 558 "op": { |
689 "description": "An operator to apply the subject with.", | 559 "description": "An operator to apply the subject with.", |
690 "enum": [ | 560 "enum": [ |
691 "NO_OP", | 561 "NO_OP", |
692 "EQUALS", | 562 "EQUALS", |
693 "NOT_EQUALS", | 563 "NOT_EQUALS", |
694 "IN", | 564 "IN", |
695 "NOT_IN", | 565 "NOT_IN", |
696 "DISCHARGED" | 566 "DISCHARGED" |
697 ], | 567 ], |
698 "enumDescriptions": [ | 568 "enumDescriptions": [ |
699 "Default no-op.", | 569 "Default no-op.", |
700 "DEPRECATED. Use IN instead.", | 570 "DEPRECATED. Use IN instead.", |
701 "DEPRECATED. Use NOT_IN instead.", | 571 "DEPRECATED. Use NOT_IN instead.", |
702 "The condition is true if the subject (or any element of
it if it is\na set) matches any of the supplied values.", | 572 "The condition is true if the subject (or any element of
it if it is\na set) matches any of the supplied values.", |
703 "The condition is true if the subject (or every element
of it if it is\na set) matches none of the supplied values.", | 573 "The condition is true if the subject (or every element
of it if it is\na set) matches none of the supplied values.", |
704 "Subject is discharged" | 574 "Subject is discharged" |
705 ], | 575 ], |
706 "type": "string" | 576 "type": "string" |
707 }, | |
708 "svc": { | |
709 "description": "Trusted attributes discharged by the service
.", | |
710 "type": "string" | |
711 }, | |
712 "sys": { | |
713 "description": "Trusted attributes supplied by any service t
hat owns resources and uses\nthe IAM system for access control.", | |
714 "enum": [ | |
715 "NO_ATTR", | |
716 "REGION", | |
717 "SERVICE", | |
718 "NAME", | |
719 "IP" | |
720 ], | |
721 "enumDescriptions": [ | |
722 "Default non-attribute type", | |
723 "Region of the resource", | |
724 "Service name", | |
725 "Resource name", | |
726 "IP address of the caller" | |
727 ], | |
728 "type": "string" | |
729 }, | |
730 "value": { | |
731 "description": "DEPRECATED. Use 'values' instead.", | |
732 "type": "string" | |
733 } | 577 } |
734 }, | 578 }, |
735 "type": "object" | 579 "type": "object" |
736 }, | 580 }, |
737 "TestIamPermissionsResponse": { | 581 "CounterOptions": { |
738 "description": "Response message for `TestIamPermissions` method.", | 582 "description": "Options for counters", |
739 "id": "TestIamPermissionsResponse", | 583 "id": "CounterOptions", |
740 "properties": { | 584 "properties": { |
741 "permissions": { | 585 "field": { |
742 "description": "A subset of `TestPermissionsRequest.permissi
ons` that the caller is\nallowed.", | 586 "description": "The field value to attribute.", |
| 587 "type": "string" |
| 588 }, |
| 589 "metric": { |
| 590 "description": "The metric to update.", |
| 591 "type": "string" |
| 592 } |
| 593 }, |
| 594 "type": "object" |
| 595 }, |
| 596 "AuditLogConfig": { |
| 597 "description": "Provides the configuration for logging a type of per
missions.\nExample:\n\n {\n \"audit_log_configs\": [\n {\n
\"log_type\": \"DATA_READ\",\n \"exempted_members\": [\n
\"user:foo@gmail.com\"\n ]\n },\n {\n \"log_type
\": \"DATA_WRITE\",\n }\n ]\n }\n\nThis enables 'DATA_READ' and '
DATA_WRITE' logging, while exempting\nfoo@gmail.com from DATA_READ logging.", |
| 598 "id": "AuditLogConfig", |
| 599 "properties": { |
| 600 "exemptedMembers": { |
| 601 "description": "Specifies the identities that do not cause l
ogging for this type of\npermission.\nFollows the same format of Binding.members
.", |
743 "items": { | 602 "items": { |
744 "type": "string" | 603 "type": "string" |
745 }, | 604 }, |
| 605 "type": "array" |
| 606 }, |
| 607 "logType": { |
| 608 "description": "The log type that this config enables.", |
| 609 "enum": [ |
| 610 "LOG_TYPE_UNSPECIFIED", |
| 611 "ADMIN_READ", |
| 612 "DATA_WRITE", |
| 613 "DATA_READ" |
| 614 ], |
| 615 "enumDescriptions": [ |
| 616 "Default case. Should never be this.", |
| 617 "Admin reads. Example: CloudIAM getIamPolicy", |
| 618 "Data writes. Example: CloudSQL Users create", |
| 619 "Data reads. Example: CloudSQL Users list" |
| 620 ], |
| 621 "type": "string" |
| 622 } |
| 623 }, |
| 624 "type": "object" |
| 625 }, |
| 626 "Rule": { |
| 627 "description": "A rule to be applied in a Policy.", |
| 628 "id": "Rule", |
| 629 "properties": { |
| 630 "logConfig": { |
| 631 "description": "The config returned to callers of tech.iam.I
AM.CheckPolicy for any entries\nthat match the LOG action.", |
| 632 "items": { |
| 633 "$ref": "LogConfig" |
| 634 }, |
| 635 "type": "array" |
| 636 }, |
| 637 "in": { |
| 638 "description": "If one or more 'in' clauses are specified, t
he rule matches if\nthe PRINCIPAL/AUTHORITY_SELECTOR is in at least one of these
entries.", |
| 639 "items": { |
| 640 "type": "string" |
| 641 }, |
| 642 "type": "array" |
| 643 }, |
| 644 "permissions": { |
| 645 "description": "A permission is a string of form '<service>.
<resource type>.<verb>'\n(e.g., 'storage.buckets.list'). A value of '*' matches
all permissions,\nand a verb part of '*' (e.g., 'storage.buckets.*') matches all
verbs.", |
| 646 "items": { |
| 647 "type": "string" |
| 648 }, |
| 649 "type": "array" |
| 650 }, |
| 651 "action": { |
| 652 "description": "Required", |
| 653 "enum": [ |
| 654 "NO_ACTION", |
| 655 "ALLOW", |
| 656 "ALLOW_WITH_LOG", |
| 657 "DENY", |
| 658 "DENY_WITH_LOG", |
| 659 "LOG" |
| 660 ], |
| 661 "enumDescriptions": [ |
| 662 "Default no action.", |
| 663 "Matching 'Entries' grant access.", |
| 664 "Matching 'Entries' grant access and the caller promises
to log\nthe request per the returned log_configs.", |
| 665 "Matching 'Entries' deny access.", |
| 666 "Matching 'Entries' deny access and the caller promises
to log\nthe request per the returned log_configs.", |
| 667 "Matching 'Entries' tell IAM.Check callers to generate l
ogs." |
| 668 ], |
| 669 "type": "string" |
| 670 }, |
| 671 "notIn": { |
| 672 "description": "If one or more 'not_in' clauses are specifie
d, the rule matches\nif the PRINCIPAL/AUTHORITY_SELECTOR is in none of the entri
es.\nThe format for in and not_in entries is the same as for members in a\nBindi
ng (see google/iam/v1/policy.proto).", |
| 673 "items": { |
| 674 "type": "string" |
| 675 }, |
| 676 "type": "array" |
| 677 }, |
| 678 "description": { |
| 679 "description": "Human-readable description of the rule.", |
| 680 "type": "string" |
| 681 }, |
| 682 "conditions": { |
| 683 "description": "Additional restrictions that must be met", |
| 684 "items": { |
| 685 "$ref": "Condition" |
| 686 }, |
| 687 "type": "array" |
| 688 } |
| 689 }, |
| 690 "type": "object" |
| 691 }, |
| 692 "LogConfig": { |
| 693 "description": "Specifies what kind of log the caller must write", |
| 694 "id": "LogConfig", |
| 695 "properties": { |
| 696 "counter": { |
| 697 "$ref": "CounterOptions", |
| 698 "description": "Counter options." |
| 699 }, |
| 700 "dataAccess": { |
| 701 "$ref": "DataAccessOptions", |
| 702 "description": "Data access options." |
| 703 }, |
| 704 "cloudAudit": { |
| 705 "$ref": "CloudAuditOptions", |
| 706 "description": "Cloud audit options." |
| 707 } |
| 708 }, |
| 709 "type": "object" |
| 710 }, |
| 711 "TestIamPermissionsRequest": { |
| 712 "description": "Request message for `TestIamPermissions` method.", |
| 713 "id": "TestIamPermissionsRequest", |
| 714 "properties": { |
| 715 "permissions": { |
| 716 "description": "The set of permissions to check for the `res
ource`. Permissions with\nwildcards (such as '*' or 'storage.*') are not allowed
. For more\ninformation see\n[IAM Overview](https://cloud.google.com/iam/docs/ov
erview#permissions).", |
| 717 "items": { |
| 718 "type": "string" |
| 719 }, |
746 "type": "array" | 720 "type": "array" |
747 } | 721 } |
748 }, | 722 }, |
749 "type": "object" | 723 "type": "object" |
750 }, | 724 }, |
751 "CounterOptions": { | 725 "Policy": { |
752 "description": "Options for counters", | 726 "description": "Defines an Identity and Access Management (IAM) poli
cy. It is used to\nspecify access control policies for Cloud Platform resources.
\n\n\nA `Policy` consists of a list of `bindings`. A `Binding` binds a list of\n
`members` to a `role`, where the members can be user accounts, Google groups,\nG
oogle domains, and service accounts. A `role` is a named list of permissions\nde
fined by IAM.\n\n**Example**\n\n {\n \"bindings\": [\n {\n
\"role\": \"roles/owner\",\n \"members\": [\n \"user:mike
@example.com\",\n \"group:admins@example.com\",\n \"domain
:google.com\",\n \"serviceAccount:my-other-app@appspot.gserviceaccoun
t.com\",\n ]\n },\n {\n \"role\": \"roles/viewer
\",\n \"members\": [\"user:sean@example.com\"]\n }\n ]\n
}\n\nFor a description of IAM and its features, see the\n[IAM developer's guide
](https://cloud.google.com/iam).", |
753 "id": "CounterOptions", | 727 "id": "Policy", |
754 "properties": { | 728 "properties": { |
755 "metric": { | 729 "iamOwned": { |
756 "description": "The metric to update.", | 730 "type": "boolean" |
757 "type": "string" | |
758 }, | 731 }, |
759 "field": { | 732 "rules": { |
760 "description": "The field value to attribute.", | 733 "description": "If more than one rule is specified, the rule
s are applied in the following\nmanner:\n- All matching LOG rules are always app
lied.\n- If any DENY/DENY_WITH_LOG rule matches, permission is denied.\n Loggin
g will be applied if one or more matching rule requires logging.\n- Otherwise, i
f any ALLOW/ALLOW_WITH_LOG rule matches, permission is\n granted.\n Logging wi
ll be applied if one or more matching rule requires logging.\n- Otherwise, if no
rule applies, permission is denied.", |
| 734 "items": { |
| 735 "$ref": "Rule" |
| 736 }, |
| 737 "type": "array" |
| 738 }, |
| 739 "version": { |
| 740 "description": "Version of the `Policy`. The default version
is 0.", |
| 741 "format": "int32", |
| 742 "type": "integer" |
| 743 }, |
| 744 "auditConfigs": { |
| 745 "description": "Specifies cloud audit logging configuration
for this policy.", |
| 746 "items": { |
| 747 "$ref": "AuditConfig" |
| 748 }, |
| 749 "type": "array" |
| 750 }, |
| 751 "bindings": { |
| 752 "description": "Associates a list of `members` to a `role`.\
nMultiple `bindings` must not be specified for the same `role`.\n`bindings` with
no members will result in an error.", |
| 753 "items": { |
| 754 "$ref": "Binding" |
| 755 }, |
| 756 "type": "array" |
| 757 }, |
| 758 "etag": { |
| 759 "description": "`etag` is used for optimistic concurrency co
ntrol as a way to help\nprevent simultaneous updates of a policy from overwritin
g each other.\nIt is strongly suggested that systems make use of the `etag` in t
he\nread-modify-write cycle to perform policy updates in order to avoid race\nco
nditions: An `etag` is returned in the response to `getIamPolicy`, and\nsystems
are expected to put that etag in the request to `setIamPolicy` to\nensure that t
heir change will be applied to the same version of the policy.\n\nIf no `etag` i
s provided in the call to `setIamPolicy`, then the existing\npolicy is overwritt
en blindly.", |
| 760 "format": "byte", |
761 "type": "string" | 761 "type": "string" |
762 } | 762 } |
763 }, | 763 }, |
764 "type": "object" | 764 "type": "object" |
765 } | 765 } |
766 }, | 766 }, |
767 "servicePath": "", | 767 "servicePath": "", |
768 "title": "Cloud Source Repositories API", | 768 "title": "Cloud Source Repositories API", |
769 "version": "v1" | 769 "version": "v1" |
770 } | 770 } |
OLD | NEW |