Skip to content

Commit 33b3134

Browse files
yoshi-automationBenjamin E. Coe
yoshi-automation
authored and
Benjamin E. Coe
committed
feat(assuredworkloads): update the API
#### assuredworkloads:v1beta1 The following keys were changed: - schemas.GoogleCloudAssuredworkloadsV1beta1RestrictAllowedResourcesRequest.properties.restrictionType.enum - schemas.GoogleCloudAssuredworkloadsV1beta1RestrictAllowedResourcesRequest.properties.restrictionType.enumDescriptions - schemas.GoogleCloudAssuredworkloadsV1beta1Workload.properties.complianceRegime.enum - schemas.GoogleCloudAssuredworkloadsV1beta1Workload.properties.complianceRegime.enumDescriptions - schemas.GoogleCloudAssuredworkloadsV1beta1Workload.properties.partner.description - schemas.GoogleCloudAssuredworkloadsV1beta1Workload.properties.partner.enum - schemas.GoogleCloudAssuredworkloadsV1beta1Workload.properties.partner.enumDescriptions #### assuredworkloads:v1 The following keys were added: - resources.organizations.resources.locations.resources.workloads.methods.mutatePartnerPermissions.description - resources.organizations.resources.locations.resources.workloads.methods.mutatePartnerPermissions.flatPath - resources.organizations.resources.locations.resources.workloads.methods.mutatePartnerPermissions.httpMethod - resources.organizations.resources.locations.resources.workloads.methods.mutatePartnerPermissions.id - resources.organizations.resources.locations.resources.workloads.methods.mutatePartnerPermissions.parameterOrder - resources.organizations.resources.locations.resources.workloads.methods.mutatePartnerPermissions.parameters.name.description - resources.organizations.resources.locations.resources.workloads.methods.mutatePartnerPermissions.parameters.name.location - resources.organizations.resources.locations.resources.workloads.methods.mutatePartnerPermissions.parameters.name.pattern - resources.organizations.resources.locations.resources.workloads.methods.mutatePartnerPermissions.parameters.name.required - resources.organizations.resources.locations.resources.workloads.methods.mutatePartnerPermissions.parameters.name.type - resources.organizations.resources.locations.resources.workloads.methods.mutatePartnerPermissions.path - resources.organizations.resources.locations.resources.workloads.methods.mutatePartnerPermissions.request.$ref - resources.organizations.resources.locations.resources.workloads.methods.mutatePartnerPermissions.response.$ref - resources.organizations.resources.locations.resources.workloads.methods.mutatePartnerPermissions.scopes - schemas.GoogleCloudAssuredworkloadsV1MutatePartnerPermissionsRequest.description - schemas.GoogleCloudAssuredworkloadsV1MutatePartnerPermissionsRequest.id - schemas.GoogleCloudAssuredworkloadsV1MutatePartnerPermissionsRequest.properties.etag.description - schemas.GoogleCloudAssuredworkloadsV1MutatePartnerPermissionsRequest.properties.etag.type - schemas.GoogleCloudAssuredworkloadsV1MutatePartnerPermissionsRequest.properties.partnerPermissions.$ref - schemas.GoogleCloudAssuredworkloadsV1MutatePartnerPermissionsRequest.properties.partnerPermissions.description - schemas.GoogleCloudAssuredworkloadsV1MutatePartnerPermissionsRequest.properties.updateMask.description - schemas.GoogleCloudAssuredworkloadsV1MutatePartnerPermissionsRequest.properties.updateMask.format - schemas.GoogleCloudAssuredworkloadsV1MutatePartnerPermissionsRequest.properties.updateMask.type - schemas.GoogleCloudAssuredworkloadsV1MutatePartnerPermissionsRequest.type - schemas.GoogleCloudAssuredworkloadsV1WorkloadPartnerPermissions.description - schemas.GoogleCloudAssuredworkloadsV1WorkloadPartnerPermissions.id - schemas.GoogleCloudAssuredworkloadsV1WorkloadPartnerPermissions.properties.dataLogsViewer.description - schemas.GoogleCloudAssuredworkloadsV1WorkloadPartnerPermissions.properties.dataLogsViewer.type - schemas.GoogleCloudAssuredworkloadsV1WorkloadPartnerPermissions.properties.remediateFolderViolations.description - schemas.GoogleCloudAssuredworkloadsV1WorkloadPartnerPermissions.properties.remediateFolderViolations.type - schemas.GoogleCloudAssuredworkloadsV1WorkloadPartnerPermissions.properties.serviceAccessApprover.description - schemas.GoogleCloudAssuredworkloadsV1WorkloadPartnerPermissions.properties.serviceAccessApprover.type - schemas.GoogleCloudAssuredworkloadsV1WorkloadPartnerPermissions.type The following keys were changed: - schemas.GoogleCloudAssuredworkloadsV1CreateWorkloadOperationMetadata.properties.complianceRegime.enum - schemas.GoogleCloudAssuredworkloadsV1CreateWorkloadOperationMetadata.properties.complianceRegime.enumDescriptions - schemas.GoogleCloudAssuredworkloadsV1RestrictAllowedResourcesRequest.properties.restrictionType.enum - schemas.GoogleCloudAssuredworkloadsV1RestrictAllowedResourcesRequest.properties.restrictionType.enumDescriptions - schemas.GoogleCloudAssuredworkloadsV1Workload.properties.complianceRegime.enum - schemas.GoogleCloudAssuredworkloadsV1Workload.properties.complianceRegime.enumDescriptions - schemas.GoogleCloudAssuredworkloadsV1Workload.properties.partner.description - schemas.GoogleCloudAssuredworkloadsV1Workload.properties.partner.enum - schemas.GoogleCloudAssuredworkloadsV1Workload.properties.partner.enumDescriptions
1 parent d9c964a commit 33b3134

File tree

4 files changed

+318
-22
lines changed

4 files changed

+318
-22
lines changed

‎discovery/assuredworkloads-v1.json

Lines changed: 86 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -310,6 +310,34 @@
310310
"https://www.googleapis.com/auth/cloud-platform"
311311
]
312312
},
313+
"mutatePartnerPermissions": {
314+
"description": "Update the permissions settings for an existing partner workload. For force updates don't set etag field in the Workload. Only one update operation per workload can be in progress.",
315+
"flatPath": "v1/organizations/{organizationsId}/locations/{locationsId}/workloads/{workloadsId}:mutatePartnerPermissions",
316+
"httpMethod": "PATCH",
317+
"id": "assuredworkloads.organizations.locations.workloads.mutatePartnerPermissions",
318+
"parameterOrder": [
319+
"name"
320+
],
321+
"parameters": {
322+
"name": {
323+
"description": "Required. The `name` field is used to identify the workload. Format: organizations/{org_id}/locations/{location_id}/workloads/{workload_id}",
324+
"location": "path",
325+
"pattern": "^organizations/[^/]+/locations/[^/]+/workloads/[^/]+$",
326+
"required": true,
327+
"type": "string"
328+
}
329+
},
330+
"path": "v1/{+name}:mutatePartnerPermissions",
331+
"request": {
332+
"$ref": "GoogleCloudAssuredworkloadsV1MutatePartnerPermissionsRequest"
333+
},
334+
"response": {
335+
"$ref": "GoogleCloudAssuredworkloadsV1Workload"
336+
},
337+
"scopes": [
338+
"https://www.googleapis.com/auth/cloud-platform"
339+
]
340+
},
313341
"patch": {
314342
"description": "Updates an existing workload. Currently allows updating of workload display_name and labels. For force updates don't set etag field in the Workload. Only one update operation per workload can be in progress.",
315343
"flatPath": "v1/organizations/{organizationsId}/locations/{locationsId}/workloads/{workloadsId}",
@@ -491,7 +519,7 @@
491519
}
492520
}
493521
},
494-
"revision": "20221020",
522+
"revision": "20221212",
495523
"rootUrl": "https://assuredworkloads.googleapis.com/",
496524
"schemas": {
497525
"GoogleCloudAssuredworkloadsV1AcknowledgeViolationRequest": {
@@ -534,7 +562,8 @@
534562
"CA_REGIONS_AND_SUPPORT",
535563
"ITAR",
536564
"AU_REGIONS_AND_US_SUPPORT",
537-
"ASSURED_WORKLOADS_FOR_PARTNERS"
565+
"ASSURED_WORKLOADS_FOR_PARTNERS",
566+
"ISR_REGIONS"
538567
],
539568
"enumDescriptions": [
540569
"Unknown compliance regime.",
@@ -549,7 +578,8 @@
549578
"Assured Workloads For Canada Regions and Support controls",
550579
"International Traffic in Arms Regulations",
551580
"Assured Workloads for Australia Regions and Support controls Available for public preview consumption. Don't create production workloads.",
552-
"Assured Workloads for Partners"
581+
"Assured Workloads for Partners",
582+
"Assured Workloads for Israel Regions"
553583
],
554584
"type": "string"
555585
},
@@ -605,6 +635,26 @@
605635
},
606636
"type": "object"
607637
},
638+
"GoogleCloudAssuredworkloadsV1MutatePartnerPermissionsRequest": {
639+
"description": "Request of updating permission settings for a partner workload.",
640+
"id": "GoogleCloudAssuredworkloadsV1MutatePartnerPermissionsRequest",
641+
"properties": {
642+
"etag": {
643+
"description": "Optional. The etag of the workload. If this is provided, it must match the server's etag.",
644+
"type": "string"
645+
},
646+
"partnerPermissions": {
647+
"$ref": "GoogleCloudAssuredworkloadsV1WorkloadPartnerPermissions",
648+
"description": "Required. The partner permissions to be updated."
649+
},
650+
"updateMask": {
651+
"description": "Required. The list of fields to be updated. E.g. update_mask { paths: \"partner_permissions.data_logs_viewer\"}",
652+
"format": "google-fieldmask",
653+
"type": "string"
654+
}
655+
},
656+
"type": "object"
657+
},
608658
"GoogleCloudAssuredworkloadsV1RestrictAllowedResourcesRequest": {
609659
"description": "Request for restricting list of available resources in Workload environment.",
610660
"id": "GoogleCloudAssuredworkloadsV1RestrictAllowedResourcesRequest",
@@ -614,12 +664,14 @@
614664
"enum": [
615665
"RESTRICTION_TYPE_UNSPECIFIED",
616666
"ALLOW_ALL_GCP_RESOURCES",
617-
"ALLOW_COMPLIANT_RESOURCES"
667+
"ALLOW_COMPLIANT_RESOURCES",
668+
"APPEND_COMPLIANT_RESOURCES"
618669
],
619670
"enumDescriptions": [
620671
"Unknown restriction type.",
621672
"Allow the use all of all gcp products, irrespective of the compliance posture. This effectively removes gcp.restrictServiceUsage OrgPolicy on the AssuredWorkloads Folder.",
622-
"Based on Workload's compliance regime, allowed list changes. See - https://cloud.google.com/assured-workloads/docs/supported-products for the list of supported resources."
673+
"Based on Workload's compliance regime, allowed list changes. See - https://cloud.google.com/assured-workloads/docs/supported-products for the list of supported resources.",
674+
"Similar to ALLOW_COMPLIANT_RESOURCES but adds the list of compliant resources to the existing list of resources. Effective org-policy of the Folder is considered to ensure there is no disruption to the existing customer workflows."
623675
],
624676
"type": "string"
625677
}
@@ -854,7 +906,8 @@
854906
"CA_REGIONS_AND_SUPPORT",
855907
"ITAR",
856908
"AU_REGIONS_AND_US_SUPPORT",
857-
"ASSURED_WORKLOADS_FOR_PARTNERS"
909+
"ASSURED_WORKLOADS_FOR_PARTNERS",
910+
"ISR_REGIONS"
858911
],
859912
"enumDescriptions": [
860913
"Unknown compliance regime.",
@@ -869,7 +922,8 @@
869922
"Assured Workloads For Canada Regions and Support controls",
870923
"International Traffic in Arms Regulations",
871924
"Assured Workloads for Australia Regions and Support controls Available for public preview consumption. Don't create production workloads.",
872-
"Assured Workloads for Partners"
925+
"Assured Workloads for Partners",
926+
"Assured Workloads for Israel Regions"
873927
],
874928
"type": "string"
875929
},
@@ -935,14 +989,16 @@
935989
"type": "string"
936990
},
937991
"partner": {
938-
"description": "Optional. Compliance Regime associated with this workload.",
992+
"description": "Optional. Partner regime associated with this workload.",
939993
"enum": [
940994
"PARTNER_UNSPECIFIED",
941-
"LOCAL_CONTROLS_BY_S3NS"
995+
"LOCAL_CONTROLS_BY_S3NS",
996+
"SOVEREIGN_CONTROLS_BY_T_SYSTEMS"
942997
],
943998
"enumDescriptions": [
944-
"Unknown partner regime/controls.",
945-
"S3NS regime/controls."
999+
"",
1000+
"Enum representing S3NS partner.",
1001+
"Enum representing T_SYSTEM partner."
9461002
],
9471003
"type": "string"
9481004
},
@@ -1007,6 +1063,25 @@
10071063
},
10081064
"type": "object"
10091065
},
1066+
"GoogleCloudAssuredworkloadsV1WorkloadPartnerPermissions": {
1067+
"description": "Permissions granted to the AW Partner SA account for the customer workload",
1068+
"id": "GoogleCloudAssuredworkloadsV1WorkloadPartnerPermissions",
1069+
"properties": {
1070+
"dataLogsViewer": {
1071+
"description": "Allow partner to view data and logs",
1072+
"type": "boolean"
1073+
},
1074+
"remediateFolderViolations": {
1075+
"description": "Allow partner to monitor folder and remediate violations",
1076+
"type": "boolean"
1077+
},
1078+
"serviceAccessApprover": {
1079+
"description": "Allow partner to approve or reject Service Access requests",
1080+
"type": "boolean"
1081+
}
1082+
},
1083+
"type": "object"
1084+
},
10101085
"GoogleCloudAssuredworkloadsV1WorkloadResourceInfo": {
10111086
"description": "Represent the resources that are children of this Workload.",
10121087
"id": "GoogleCloudAssuredworkloadsV1WorkloadResourceInfo",

‎discovery/assuredworkloads-v1beta1.json

Lines changed: 15 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -595,7 +595,7 @@
595595
}
596596
}
597597
},
598-
"revision": "20221020",
598+
"revision": "20221212",
599599
"rootUrl": "https://assuredworkloads.googleapis.com/",
600600
"schemas": {
601601
"GoogleCloudAssuredworkloadsV1beta1AcknowledgeViolationRequest": {
@@ -678,12 +678,14 @@
678678
"enum": [
679679
"RESTRICTION_TYPE_UNSPECIFIED",
680680
"ALLOW_ALL_GCP_RESOURCES",
681-
"ALLOW_COMPLIANT_RESOURCES"
681+
"ALLOW_COMPLIANT_RESOURCES",
682+
"APPEND_COMPLIANT_RESOURCES"
682683
],
683684
"enumDescriptions": [
684685
"Unknown restriction type.",
685686
"Allow the use all of all gcp products, irrespective of the compliance posture. This effectively removes gcp.restrictServiceUsage OrgPolicy on the AssuredWorkloads Folder.",
686-
"Based on Workload's compliance regime, allowed list changes. See - https://cloud.google.com/assured-workloads/docs/supported-products for the list of supported resources."
687+
"Based on Workload's compliance regime, allowed list changes. See - https://cloud.google.com/assured-workloads/docs/supported-products for the list of supported resources.",
688+
"Similar to ALLOW_COMPLIANT_RESOURCES but adds the list of compliant resources to the existing list of compliant resources. Effective org-policy of the Folder is considered to ensure there is no disruption to the existing customer workflows."
687689
],
688690
"type": "string"
689691
}
@@ -922,7 +924,8 @@
922924
"CA_REGIONS_AND_SUPPORT",
923925
"ITAR",
924926
"AU_REGIONS_AND_US_SUPPORT",
925-
"ASSURED_WORKLOADS_FOR_PARTNERS"
927+
"ASSURED_WORKLOADS_FOR_PARTNERS",
928+
"ISR_REGIONS"
926929
],
927930
"enumDescriptions": [
928931
"Unknown compliance regime.",
@@ -937,7 +940,8 @@
937940
"Assured Workloads For Canada Regions and Support controls",
938941
"International Traffic in Arms Regulations",
939942
"Assured Workloads for Australia Regions and Support controls Available for public preview consumption. Don't create production workloads.",
940-
"Assured Workloads for Partners;"
943+
"Assured Workloads for Partners;",
944+
"Assured Workloads for Israel"
941945
],
942946
"type": "string"
943947
},
@@ -1015,14 +1019,16 @@
10151019
"type": "string"
10161020
},
10171021
"partner": {
1018-
"description": "Optional. Compliance Regime associated with this workload.",
1022+
"description": "Optional. Partner regime associated with this workload.",
10191023
"enum": [
10201024
"PARTNER_UNSPECIFIED",
1021-
"LOCAL_CONTROLS_BY_S3NS"
1025+
"LOCAL_CONTROLS_BY_S3NS",
1026+
"SOVEREIGN_CONTROLS_BY_T_SYSTEMS"
10221027
],
10231028
"enumDescriptions": [
1024-
"Unknown partner regime/controls.",
1025-
"S3NS regime/controls."
1029+
"",
1030+
"Enum representing S3NS partner.",
1031+
"Enum representing T_SYSTEM partner."
10261032
],
10271033
"type": "string"
10281034
},

0 commit comments

Comments
 (0)