chiu
/
google-api-ruby-client
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
google-api-ruby-client/generated/google-apis-gkehub_v1alpha/lib/google/apis/gkehub_v1alpha/classes.rb

3572 lines
149 KiB
Ruby
Raw Permalink Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

# Copyright 2020 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
require 'date'
require 'google/apis/core/base_service'
require 'google/apis/core/json_representation'
require 'google/apis/core/hashable'
require 'google/apis/errors'
module Google
module Apis
module GkehubV1alpha
# **Anthos Observability**: Spec
class AnthosObservabilityFeatureSpec
include Google::Apis::Core::Hashable
# **Anthosobservability**: Per-Membership Feature spec.
# Corresponds to the JSON property `defaultMembershipSpec`
# @return [Google::Apis::GkehubV1alpha::AnthosObservabilityMembershipSpec]
attr_accessor :default_membership_spec
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@default_membership_spec = args[:default_membership_spec] if args.key?(:default_membership_spec)
end
end
# **Anthosobservability**: Per-Membership Feature spec.
class AnthosObservabilityMembershipSpec
include Google::Apis::Core::Hashable
# use full of metrics rather than optimized metrics. See https://cloud.google.
# com/anthos/clusters/docs/on-prem/1.8/concepts/logging-and-monitoring#
# optimized_metrics_default_metrics
# Corresponds to the JSON property `doNotOptimizeMetrics`
# @return [Boolean]
attr_accessor :do_not_optimize_metrics
alias_method :do_not_optimize_metrics?, :do_not_optimize_metrics
# enable collecting and reporting metrics and logs from user apps See go/onyx-
# application-metrics-logs-user-guide
# Corresponds to the JSON property `enableStackdriverOnApplications`
# @return [Boolean]
attr_accessor :enable_stackdriver_on_applications
alias_method :enable_stackdriver_on_applications?, :enable_stackdriver_on_applications
# the version of stackdriver operator used by this feature
# Corresponds to the JSON property `version`
# @return [String]
attr_accessor :version
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@do_not_optimize_metrics = args[:do_not_optimize_metrics] if args.key?(:do_not_optimize_metrics)
@enable_stackdriver_on_applications = args[:enable_stackdriver_on_applications] if args.key?(:enable_stackdriver_on_applications)
@version = args[:version] if args.key?(:version)
end
end
# Spec for App Dev Experience Feature.
class AppDevExperienceFeatureSpec
include Google::Apis::Core::Hashable
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
end
end
# State for App Dev Exp Feature.
class AppDevExperienceFeatureState
include Google::Apis::Core::Hashable
# Status specifies state for the subcomponent.
# Corresponds to the JSON property `networkingInstallSucceeded`
# @return [Google::Apis::GkehubV1alpha::Status]
attr_accessor :networking_install_succeeded
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@networking_install_succeeded = args[:networking_install_succeeded] if args.key?(:networking_install_succeeded)
end
end
# Specifies the audit configuration for a service. The configuration determines
# which permission types are logged, and what identities, if any, are exempted
# from logging. An AuditConfig must have one or more AuditLogConfigs. If there
# are AuditConfigs for both `allServices` and a specific service, the union of
# the two AuditConfigs is used for that service: the log_types specified in each
# AuditConfig are enabled, and the exempted_members in each AuditLogConfig are
# exempted. Example Policy with multiple AuditConfigs: ` "audit_configs": [ ` "
# service": "allServices", "audit_log_configs": [ ` "log_type": "DATA_READ", "
# exempted_members": [ "user:jose@example.com" ] `, ` "log_type": "DATA_WRITE" `,
# ` "log_type": "ADMIN_READ" ` ] `, ` "service": "sampleservice.googleapis.com",
# "audit_log_configs": [ ` "log_type": "DATA_READ" `, ` "log_type": "DATA_WRITE"
# , "exempted_members": [ "user:aliya@example.com" ] ` ] ` ] ` For sampleservice,
# this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also
# exempts jose@example.com from DATA_READ logging, and aliya@example.com from
# DATA_WRITE logging.
class AuditConfig
include Google::Apis::Core::Hashable
# The configuration for logging of each type of permission.
# Corresponds to the JSON property `auditLogConfigs`
# @return [Array<Google::Apis::GkehubV1alpha::AuditLogConfig>]
attr_accessor :audit_log_configs
# Specifies a service that will be enabled for audit logging. For example, `
# storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special
# value that covers all services.
# Corresponds to the JSON property `service`
# @return [String]
attr_accessor :service
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@audit_log_configs = args[:audit_log_configs] if args.key?(:audit_log_configs)
@service = args[:service] if args.key?(:service)
end
end
# Provides the configuration for logging a type of permissions. Example: ` "
# audit_log_configs": [ ` "log_type": "DATA_READ", "exempted_members": [ "user:
# jose@example.com" ] `, ` "log_type": "DATA_WRITE" ` ] ` This enables '
# DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from
# DATA_READ logging.
class AuditLogConfig
include Google::Apis::Core::Hashable
# Specifies the identities that do not cause logging for this type of permission.
# Follows the same format of Binding.members.
# Corresponds to the JSON property `exemptedMembers`
# @return [Array<String>]
attr_accessor :exempted_members
# The log type that this config enables.
# Corresponds to the JSON property `logType`
# @return [String]
attr_accessor :log_type
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@exempted_members = args[:exempted_members] if args.key?(:exempted_members)
@log_type = args[:log_type] if args.key?(:log_type)
end
end
# Authority encodes how Google will recognize identities from this Membership.
# See the workload identity documentation for more details: https://cloud.google.
# com/kubernetes-engine/docs/how-to/workload-identity
class Authority
include Google::Apis::Core::Hashable
# Output only. An identity provider that reflects the `issuer` in the workload
# identity pool.
# Corresponds to the JSON property `identityProvider`
# @return [String]
attr_accessor :identity_provider
# Optional. A JSON Web Token (JWT) issuer URI. `issuer` must start with `https://
# ` and be a valid URL with length <2000 characters. If set, then Google will
# allow valid OIDC tokens from this issuer to authenticate within the
# workload_identity_pool. OIDC discovery will be performed on this URI to
# validate tokens from the issuer. Clearing `issuer` disables Workload Identity.
# `issuer` cannot be directly modified; it must be cleared (and Workload
# Identity disabled) before using a new issuer (and re-enabling Workload
# Identity).
# Corresponds to the JSON property `issuer`
# @return [String]
attr_accessor :issuer
# Optional. OIDC verification keys for this Membership in JWKS format (RFC 7517).
# When this field is set, OIDC discovery will NOT be performed on `issuer`, and
# instead OIDC tokens will be validated using this field.
# Corresponds to the JSON property `oidcJwks`
# NOTE: Values are automatically base64 encoded/decoded in the client library.
# @return [String]
attr_accessor :oidc_jwks
# Output only. The name of the workload identity pool in which `issuer` will be
# recognized. There is a single Workload Identity Pool per Hub that is shared
# between all Memberships that belong to that Hub. For a Hub hosted in `
# PROJECT_ID`, the workload pool format is ``PROJECT_ID`.hub.id.goog`, although
# this is subject to change in newer versions of this API.
# Corresponds to the JSON property `workloadIdentityPool`
# @return [String]
attr_accessor :workload_identity_pool
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@identity_provider = args[:identity_provider] if args.key?(:identity_provider)
@issuer = args[:issuer] if args.key?(:issuer)
@oidc_jwks = args[:oidc_jwks] if args.key?(:oidc_jwks)
@workload_identity_pool = args[:workload_identity_pool] if args.key?(:workload_identity_pool)
end
end
# Associates `members`, or principals, with a `role`.
class Binding
include Google::Apis::Core::Hashable
# Represents a textual expression in the Common Expression Language (CEL) syntax.
# CEL is a C-like expression language. The syntax and semantics of CEL are
# documented at https://github.com/google/cel-spec. Example (Comparison): title:
# "Summary size limit" description: "Determines if a summary is less than 100
# chars" expression: "document.summary.size() < 100" Example (Equality): title: "
# Requestor is owner" description: "Determines if requestor is the document
# owner" expression: "document.owner == request.auth.claims.email" Example (
# Logic): title: "Public documents" description: "Determine whether the document
# should be publicly visible" expression: "document.type != 'private' &&
# document.type != 'internal'" Example (Data Manipulation): title: "Notification
# string" description: "Create a notification string with a timestamp."
# expression: "'New message received at ' + string(document.create_time)" The
# exact variables and functions that may be referenced within an expression are
# determined by the service that evaluates it. See the service documentation for
# additional information.
# Corresponds to the JSON property `condition`
# @return [Google::Apis::GkehubV1alpha::Expr]
attr_accessor :condition
# Specifies the principals requesting access for a Cloud Platform resource. `
# members` can have the following values: * `allUsers`: A special identifier
# that represents anyone who is on the internet; with or without a Google
# account. * `allAuthenticatedUsers`: A special identifier that represents
# anyone who is authenticated with a Google account or a service account. * `
# user:`emailid``: An email address that represents a specific Google account.
# For example, `alice@example.com` . * `serviceAccount:`emailid``: An email
# address that represents a service account. For example, `my-other-app@appspot.
# gserviceaccount.com`. * `group:`emailid``: An email address that represents a
# Google group. For example, `admins@example.com`. * `deleted:user:`emailid`?uid=
# `uniqueid``: An email address (plus unique identifier) representing a user
# that has been recently deleted. For example, `alice@example.com?uid=
# 123456789012345678901`. If the user is recovered, this value reverts to `user:`
# emailid`` and the recovered user retains the role in the binding. * `deleted:
# serviceAccount:`emailid`?uid=`uniqueid``: An email address (plus unique
# identifier) representing a service account that has been recently deleted. For
# example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
# If the service account is undeleted, this value reverts to `serviceAccount:`
# emailid`` and the undeleted service account retains the role in the binding. *
# `deleted:group:`emailid`?uid=`uniqueid``: An email address (plus unique
# identifier) representing a Google group that has been recently deleted. For
# example, `admins@example.com?uid=123456789012345678901`. If the group is
# recovered, this value reverts to `group:`emailid`` and the recovered group
# retains the role in the binding. * `domain:`domain``: The G Suite domain (
# primary) that represents all the users of that domain. For example, `google.
# com` or `example.com`.
# Corresponds to the JSON property `members`
# @return [Array<String>]
attr_accessor :members
# Role that is assigned to the list of `members`, or principals. For example, `
# roles/viewer`, `roles/editor`, or `roles/owner`.
# Corresponds to the JSON property `role`
# @return [String]
attr_accessor :role
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@condition = args[:condition] if args.key?(:condition)
@members = args[:members] if args.key?(:members)
@role = args[:role] if args.key?(:role)
end
end
# The request message for Operations.CancelOperation.
class CancelOperationRequest
include Google::Apis::Core::Hashable
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
end
end
# **Cloud Audit Logging**: Spec for Audit Logging Allowlisting.
class CloudAuditLoggingFeatureSpec
include Google::Apis::Core::Hashable
# Service account that should be allowlisted to send the audit logs; eg
# cloudauditlogging@gcp-project.iam.gserviceaccount.com. These accounts must
# already exist, but do not need to have any permissions granted to them. The
# customer's entitlements will be checked prior to allowlisting (i.e. the
# customer must be an Anthos customer.)
# Corresponds to the JSON property `allowlistedServiceAccounts`
# @return [Array<String>]
attr_accessor :allowlisted_service_accounts
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@allowlisted_service_accounts = args[:allowlisted_service_accounts] if args.key?(:allowlisted_service_accounts)
end
end
# **Cloud Build**: Configurations for each Cloud Build enabled cluster.
class CloudBuildMembershipSpec
include Google::Apis::Core::Hashable
# Whether it is allowed to run the privileged builds on the cluster or not.
# Corresponds to the JSON property `securityPolicy`
# @return [String]
attr_accessor :security_policy
# Version of the cloud build software on the cluster.
# Corresponds to the JSON property `version`
# @return [String]
attr_accessor :version
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@security_policy = args[:security_policy] if args.key?(:security_policy)
@version = args[:version] if args.key?(:version)
end
end
# CommonFeatureSpec contains Hub-wide configuration information
class CommonFeatureSpec
include Google::Apis::Core::Hashable
# **Anthos Observability**: Spec
# Corresponds to the JSON property `anthosobservability`
# @return [Google::Apis::GkehubV1alpha::AnthosObservabilityFeatureSpec]
attr_accessor :anthosobservability
# Spec for App Dev Experience Feature.
# Corresponds to the JSON property `appdevexperience`
# @return [Google::Apis::GkehubV1alpha::AppDevExperienceFeatureSpec]
attr_accessor :appdevexperience
# **Cloud Audit Logging**: Spec for Audit Logging Allowlisting.
# Corresponds to the JSON property `cloudauditlogging`
# @return [Google::Apis::GkehubV1alpha::CloudAuditLoggingFeatureSpec]
attr_accessor :cloudauditlogging
# **Multi-cluster Ingress**: The configuration for the MultiClusterIngress
# feature.
# Corresponds to the JSON property `multiclusteringress`
# @return [Google::Apis::GkehubV1alpha::MultiClusterIngressFeatureSpec]
attr_accessor :multiclusteringress
# **Workload Certificate**: The Hub-wide input for the WorkloadCertificate
# feature.
# Corresponds to the JSON property `workloadcertificate`
# @return [Google::Apis::GkehubV1alpha::FeatureSpec]
attr_accessor :workloadcertificate
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@anthosobservability = args[:anthosobservability] if args.key?(:anthosobservability)
@appdevexperience = args[:appdevexperience] if args.key?(:appdevexperience)
@cloudauditlogging = args[:cloudauditlogging] if args.key?(:cloudauditlogging)
@multiclusteringress = args[:multiclusteringress] if args.key?(:multiclusteringress)
@workloadcertificate = args[:workloadcertificate] if args.key?(:workloadcertificate)
end
end
# CommonFeatureState contains Hub-wide Feature status information.
class CommonFeatureState
include Google::Apis::Core::Hashable
# State for App Dev Exp Feature.
# Corresponds to the JSON property `appdevexperience`
# @return [Google::Apis::GkehubV1alpha::AppDevExperienceFeatureState]
attr_accessor :appdevexperience
# **Service Mesh**: State for the whole Hub, as analyzed by the Service Mesh Hub
# Controller.
# Corresponds to the JSON property `servicemesh`
# @return [Google::Apis::GkehubV1alpha::ServiceMeshFeatureState]
attr_accessor :servicemesh
# FeatureState describes the high-level state of a Feature. It may be used to
# describe a Feature's state at the environ-level, or per-membershop, depending
# on the context.
# Corresponds to the JSON property `state`
# @return [Google::Apis::GkehubV1alpha::FeatureState]
attr_accessor :state
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@appdevexperience = args[:appdevexperience] if args.key?(:appdevexperience)
@servicemesh = args[:servicemesh] if args.key?(:servicemesh)
@state = args[:state] if args.key?(:state)
end
end
# Configuration for Binauthz
class ConfigManagementBinauthzConfig
include Google::Apis::Core::Hashable
# Whether binauthz is enabled in this cluster.
# Corresponds to the JSON property `enabled`
# @return [Boolean]
attr_accessor :enabled
alias_method :enabled?, :enabled
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@enabled = args[:enabled] if args.key?(:enabled)
end
end
# State for Binauthz
class ConfigManagementBinauthzState
include Google::Apis::Core::Hashable
# The version of binauthz.
# Corresponds to the JSON property `version`
# @return [Google::Apis::GkehubV1alpha::ConfigManagementBinauthzVersion]
attr_accessor :version
# The state of the binauthz webhook.
# Corresponds to the JSON property `webhook`
# @return [String]
attr_accessor :webhook
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@version = args[:version] if args.key?(:version)
@webhook = args[:webhook] if args.key?(:webhook)
end
end
# The version of binauthz.
class ConfigManagementBinauthzVersion
include Google::Apis::Core::Hashable
# The version of the binauthz webhook.
# Corresponds to the JSON property `webhookVersion`
# @return [String]
attr_accessor :webhook_version
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@webhook_version = args[:webhook_version] if args.key?(:webhook_version)
end
end
# Configuration for Config Sync
class ConfigManagementConfigSync
include Google::Apis::Core::Hashable
# Enables the installation of ConfigSync. If set to true, ConfigSync resources
# will be created and the other ConfigSync fields will be applied if exist. If
# set to false, all other ConfigSync fields will be ignored, ConfigSync
# resources will be deleted. If omitted, ConfigSync resources will be managed
# depends on the presence of git field.
# Corresponds to the JSON property `enabled`
# @return [Boolean]
attr_accessor :enabled
alias_method :enabled?, :enabled
# Git repo configuration for a single cluster.
# Corresponds to the JSON property `git`
# @return [Google::Apis::GkehubV1alpha::ConfigManagementGitConfig]
attr_accessor :git
# Set to true to enable the Config Sync admission webhook to prevent drifts. If
# set to `false`, disables the Config Sync admission webhook and does not
# prevent drifts.
# Corresponds to the JSON property `preventDrift`
# @return [Boolean]
attr_accessor :prevent_drift
alias_method :prevent_drift?, :prevent_drift
# Specifies whether the Config Sync Repo is in “hierarchical” or “unstructured”
# mode.
# Corresponds to the JSON property `sourceFormat`
# @return [String]
attr_accessor :source_format
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@enabled = args[:enabled] if args.key?(:enabled)
@git = args[:git] if args.key?(:git)
@prevent_drift = args[:prevent_drift] if args.key?(:prevent_drift)
@source_format = args[:source_format] if args.key?(:source_format)
end
end
# The state of ConfigSync's deployment on a cluster
class ConfigManagementConfigSyncDeploymentState
include Google::Apis::Core::Hashable
# Deployment state of admission-webhook
# Corresponds to the JSON property `admissionWebhook`
# @return [String]
attr_accessor :admission_webhook
# Deployment state of the git-sync pod
# Corresponds to the JSON property `gitSync`
# @return [String]
attr_accessor :git_sync
# Deployment state of the importer pod
# Corresponds to the JSON property `importer`
# @return [String]
attr_accessor :importer
# Deployment state of the monitor pod
# Corresponds to the JSON property `monitor`
# @return [String]
attr_accessor :monitor
# Deployment state of reconciler-manager pod
# Corresponds to the JSON property `reconcilerManager`
# @return [String]
attr_accessor :reconciler_manager
# Deployment state of root-reconciler
# Corresponds to the JSON property `rootReconciler`
# @return [String]
attr_accessor :root_reconciler
# Deployment state of the syncer pod
# Corresponds to the JSON property `syncer`
# @return [String]
attr_accessor :syncer
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@admission_webhook = args[:admission_webhook] if args.key?(:admission_webhook)
@git_sync = args[:git_sync] if args.key?(:git_sync)
@importer = args[:importer] if args.key?(:importer)
@monitor = args[:monitor] if args.key?(:monitor)
@reconciler_manager = args[:reconciler_manager] if args.key?(:reconciler_manager)
@root_reconciler = args[:root_reconciler] if args.key?(:root_reconciler)
@syncer = args[:syncer] if args.key?(:syncer)
end
end
# State information for ConfigSync
class ConfigManagementConfigSyncState
include Google::Apis::Core::Hashable
# The state of ConfigSync's deployment on a cluster
# Corresponds to the JSON property `deploymentState`
# @return [Google::Apis::GkehubV1alpha::ConfigManagementConfigSyncDeploymentState]
attr_accessor :deployment_state
# State indicating an ACM's progress syncing configurations to a cluster
# Corresponds to the JSON property `syncState`
# @return [Google::Apis::GkehubV1alpha::ConfigManagementSyncState]
attr_accessor :sync_state
# Specific versioning information pertaining to ConfigSync's Pods
# Corresponds to the JSON property `version`
# @return [Google::Apis::GkehubV1alpha::ConfigManagementConfigSyncVersion]
attr_accessor :version
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@deployment_state = args[:deployment_state] if args.key?(:deployment_state)
@sync_state = args[:sync_state] if args.key?(:sync_state)
@version = args[:version] if args.key?(:version)
end
end
# Specific versioning information pertaining to ConfigSync's Pods
class ConfigManagementConfigSyncVersion
include Google::Apis::Core::Hashable
# Version of the deployed admission_webhook pod
# Corresponds to the JSON property `admissionWebhook`
# @return [String]
attr_accessor :admission_webhook
# Version of the deployed git-sync pod
# Corresponds to the JSON property `gitSync`
# @return [String]
attr_accessor :git_sync
# Version of the deployed importer pod
# Corresponds to the JSON property `importer`
# @return [String]
attr_accessor :importer
# Version of the deployed monitor pod
# Corresponds to the JSON property `monitor`
# @return [String]
attr_accessor :monitor
# Version of the deployed reconciler-manager pod
# Corresponds to the JSON property `reconcilerManager`
# @return [String]
attr_accessor :reconciler_manager
# Version of the deployed reconciler container in root-reconciler pod
# Corresponds to the JSON property `rootReconciler`
# @return [String]
attr_accessor :root_reconciler
# Version of the deployed syncer pod
# Corresponds to the JSON property `syncer`
# @return [String]
attr_accessor :syncer
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@admission_webhook = args[:admission_webhook] if args.key?(:admission_webhook)
@git_sync = args[:git_sync] if args.key?(:git_sync)
@importer = args[:importer] if args.key?(:importer)
@monitor = args[:monitor] if args.key?(:monitor)
@reconciler_manager = args[:reconciler_manager] if args.key?(:reconciler_manager)
@root_reconciler = args[:root_reconciler] if args.key?(:root_reconciler)
@syncer = args[:syncer] if args.key?(:syncer)
end
end
# Model for a config file in the git repo with an associated Sync error
class ConfigManagementErrorResource
include Google::Apis::Core::Hashable
# A Kubernetes object's GVK
# Corresponds to the JSON property `resourceGvk`
# @return [Google::Apis::GkehubV1alpha::ConfigManagementGroupVersionKind]
attr_accessor :resource_gvk
# Metadata name of the resource that is causing an error
# Corresponds to the JSON property `resourceName`
# @return [String]
attr_accessor :resource_name
# Namespace of the resource that is causing an error
# Corresponds to the JSON property `resourceNamespace`
# @return [String]
attr_accessor :resource_namespace
# Path in the git repo of the erroneous config
# Corresponds to the JSON property `sourcePath`
# @return [String]
attr_accessor :source_path
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@resource_gvk = args[:resource_gvk] if args.key?(:resource_gvk)
@resource_name = args[:resource_name] if args.key?(:resource_name)
@resource_namespace = args[:resource_namespace] if args.key?(:resource_namespace)
@source_path = args[:source_path] if args.key?(:source_path)
end
end
# State of Policy Controller installation.
class ConfigManagementGatekeeperDeploymentState
include Google::Apis::Core::Hashable
# Status of gatekeeper-audit deployment.
# Corresponds to the JSON property `gatekeeperAudit`
# @return [String]
attr_accessor :gatekeeper_audit
# Status of gatekeeper-controller-manager pod.
# Corresponds to the JSON property `gatekeeperControllerManagerState`
# @return [String]
attr_accessor :gatekeeper_controller_manager_state
# Status of the pod serving the mutation webhook.
# Corresponds to the JSON property `gatekeeperMutation`
# @return [String]
attr_accessor :gatekeeper_mutation
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@gatekeeper_audit = args[:gatekeeper_audit] if args.key?(:gatekeeper_audit)
@gatekeeper_controller_manager_state = args[:gatekeeper_controller_manager_state] if args.key?(:gatekeeper_controller_manager_state)
@gatekeeper_mutation = args[:gatekeeper_mutation] if args.key?(:gatekeeper_mutation)
end
end
# Git repo configuration for a single cluster.
class ConfigManagementGitConfig
include Google::Apis::Core::Hashable
# The GCP Service Account Email used for auth when secret_type is
# gcpServiceAccount.
# Corresponds to the JSON property `gcpServiceAccountEmail`
# @return [String]
attr_accessor :gcp_service_account_email
# URL for the HTTPS proxy to be used when communicating with the Git repo.
# Corresponds to the JSON property `httpsProxy`
# @return [String]
attr_accessor :https_proxy
# The path within the Git repository that represents the top level of the repo
# to sync. Default: the root directory of the repository.
# Corresponds to the JSON property `policyDir`
# @return [String]
attr_accessor :policy_dir
# Type of secret configured for access to the Git repo. Must be one of ssh,
# cookiefile, gcenode, token, gcpserviceaccount or none. The validation of this
# is case-sensitive. Required.
# Corresponds to the JSON property `secretType`
# @return [String]
attr_accessor :secret_type
# The branch of the repository to sync from. Default: master.
# Corresponds to the JSON property `syncBranch`
# @return [String]
attr_accessor :sync_branch
# The URL of the Git repository to use as the source of truth.
# Corresponds to the JSON property `syncRepo`
# @return [String]
attr_accessor :sync_repo
# Git revision (tag or hash) to check out. Default HEAD.
# Corresponds to the JSON property `syncRev`
# @return [String]
attr_accessor :sync_rev
# Period in seconds between consecutive syncs. Default: 15.
# Corresponds to the JSON property `syncWaitSecs`
# @return [Fixnum]
attr_accessor :sync_wait_secs
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@gcp_service_account_email = args[:gcp_service_account_email] if args.key?(:gcp_service_account_email)
@https_proxy = args[:https_proxy] if args.key?(:https_proxy)
@policy_dir = args[:policy_dir] if args.key?(:policy_dir)
@secret_type = args[:secret_type] if args.key?(:secret_type)
@sync_branch = args[:sync_branch] if args.key?(:sync_branch)
@sync_repo = args[:sync_repo] if args.key?(:sync_repo)
@sync_rev = args[:sync_rev] if args.key?(:sync_rev)
@sync_wait_secs = args[:sync_wait_secs] if args.key?(:sync_wait_secs)
end
end
# A Kubernetes object's GVK
class ConfigManagementGroupVersionKind
include Google::Apis::Core::Hashable
# Kubernetes Group
# Corresponds to the JSON property `group`
# @return [String]
attr_accessor :group
# Kubernetes Kind
# Corresponds to the JSON property `kind`
# @return [String]
attr_accessor :kind
# Kubernetes Version
# Corresponds to the JSON property `version`
# @return [String]
attr_accessor :version
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@group = args[:group] if args.key?(:group)
@kind = args[:kind] if args.key?(:kind)
@version = args[:version] if args.key?(:version)
end
end
# Configuration for Hierarchy Controller
class ConfigManagementHierarchyControllerConfig
include Google::Apis::Core::Hashable
# Whether hierarchical resource quota is enabled in this cluster.
# Corresponds to the JSON property `enableHierarchicalResourceQuota`
# @return [Boolean]
attr_accessor :enable_hierarchical_resource_quota
alias_method :enable_hierarchical_resource_quota?, :enable_hierarchical_resource_quota
# Whether pod tree labels are enabled in this cluster.
# Corresponds to the JSON property `enablePodTreeLabels`
# @return [Boolean]
attr_accessor :enable_pod_tree_labels
alias_method :enable_pod_tree_labels?, :enable_pod_tree_labels
# Whether Hierarchy Controller is enabled in this cluster.
# Corresponds to the JSON property `enabled`
# @return [Boolean]
attr_accessor :enabled
alias_method :enabled?, :enabled
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@enable_hierarchical_resource_quota = args[:enable_hierarchical_resource_quota] if args.key?(:enable_hierarchical_resource_quota)
@enable_pod_tree_labels = args[:enable_pod_tree_labels] if args.key?(:enable_pod_tree_labels)
@enabled = args[:enabled] if args.key?(:enabled)
end
end
# Deployment state for Hierarchy Controller
class ConfigManagementHierarchyControllerDeploymentState
include Google::Apis::Core::Hashable
# The deployment state for Hierarchy Controller extension (e.g. v0.7.0-hc.1)
# Corresponds to the JSON property `extension`
# @return [String]
attr_accessor :extension
# The deployment state for open source HNC (e.g. v0.7.0-hc.0)
# Corresponds to the JSON property `hnc`
# @return [String]
attr_accessor :hnc
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@extension = args[:extension] if args.key?(:extension)
@hnc = args[:hnc] if args.key?(:hnc)
end
end
# State for Hierarchy Controller
class ConfigManagementHierarchyControllerState
include Google::Apis::Core::Hashable
# Deployment state for Hierarchy Controller
# Corresponds to the JSON property `state`
# @return [Google::Apis::GkehubV1alpha::ConfigManagementHierarchyControllerDeploymentState]
attr_accessor :state
# Version for Hierarchy Controller
# Corresponds to the JSON property `version`
# @return [Google::Apis::GkehubV1alpha::ConfigManagementHierarchyControllerVersion]
attr_accessor :version
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@state = args[:state] if args.key?(:state)
@version = args[:version] if args.key?(:version)
end
end
# Version for Hierarchy Controller
class ConfigManagementHierarchyControllerVersion
include Google::Apis::Core::Hashable
# Version for Hierarchy Controller extension
# Corresponds to the JSON property `extension`
# @return [String]
attr_accessor :extension
# Version for open source HNC
# Corresponds to the JSON property `hnc`
# @return [String]
attr_accessor :hnc
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@extension = args[:extension] if args.key?(:extension)
@hnc = args[:hnc] if args.key?(:hnc)
end
end
# Errors pertaining to the installation of ACM
class ConfigManagementInstallError
include Google::Apis::Core::Hashable
# A string representing the user facing error message
# Corresponds to the JSON property `errorMessage`
# @return [String]
attr_accessor :error_message
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@error_message = args[:error_message] if args.key?(:error_message)
end
end
# **Anthos Config Management**: Configuration for a single cluster. Intended to
# parallel the ConfigManagement CR.
class ConfigManagementMembershipSpec
include Google::Apis::Core::Hashable
# Configuration for Binauthz
# Corresponds to the JSON property `binauthz`
# @return [Google::Apis::GkehubV1alpha::ConfigManagementBinauthzConfig]
attr_accessor :binauthz
# Configuration for Config Sync
# Corresponds to the JSON property `configSync`
# @return [Google::Apis::GkehubV1alpha::ConfigManagementConfigSync]
attr_accessor :config_sync
# Configuration for Hierarchy Controller
# Corresponds to the JSON property `hierarchyController`
# @return [Google::Apis::GkehubV1alpha::ConfigManagementHierarchyControllerConfig]
attr_accessor :hierarchy_controller
# Configuration for Policy Controller
# Corresponds to the JSON property `policyController`
# @return [Google::Apis::GkehubV1alpha::ConfigManagementPolicyController]
attr_accessor :policy_controller
# Version of ACM installed.
# Corresponds to the JSON property `version`
# @return [String]
attr_accessor :version
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@binauthz = args[:binauthz] if args.key?(:binauthz)
@config_sync = args[:config_sync] if args.key?(:config_sync)
@hierarchy_controller = args[:hierarchy_controller] if args.key?(:hierarchy_controller)
@policy_controller = args[:policy_controller] if args.key?(:policy_controller)
@version = args[:version] if args.key?(:version)
end
end
# **Anthos Config Management**: State for a single cluster.
class ConfigManagementMembershipState
include Google::Apis::Core::Hashable
# State for Binauthz
# Corresponds to the JSON property `binauthzState`
# @return [Google::Apis::GkehubV1alpha::ConfigManagementBinauthzState]
attr_accessor :binauthz_state
# The user-defined name for the cluster used by ClusterSelectors to group
# clusters together. This should match Membership's membership_name, unless the
# user installed ACM on the cluster manually prior to enabling the ACM hub
# feature. Unique within a Anthos Config Management installation.
# Corresponds to the JSON property `clusterName`
# @return [String]
attr_accessor :cluster_name
# State information for ConfigSync
# Corresponds to the JSON property `configSyncState`
# @return [Google::Apis::GkehubV1alpha::ConfigManagementConfigSyncState]
attr_accessor :config_sync_state
# State for Hierarchy Controller
# Corresponds to the JSON property `hierarchyControllerState`
# @return [Google::Apis::GkehubV1alpha::ConfigManagementHierarchyControllerState]
attr_accessor :hierarchy_controller_state
# **Anthos Config Management**: Configuration for a single cluster. Intended to
# parallel the ConfigManagement CR.
# Corresponds to the JSON property `membershipSpec`
# @return [Google::Apis::GkehubV1alpha::ConfigManagementMembershipSpec]
attr_accessor :membership_spec
# State information for an ACM's Operator
# Corresponds to the JSON property `operatorState`
# @return [Google::Apis::GkehubV1alpha::ConfigManagementOperatorState]
attr_accessor :operator_state
# State for PolicyControllerState.
# Corresponds to the JSON property `policyControllerState`
# @return [Google::Apis::GkehubV1alpha::ConfigManagementPolicyControllerState]
attr_accessor :policy_controller_state
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@binauthz_state = args[:binauthz_state] if args.key?(:binauthz_state)
@cluster_name = args[:cluster_name] if args.key?(:cluster_name)
@config_sync_state = args[:config_sync_state] if args.key?(:config_sync_state)
@hierarchy_controller_state = args[:hierarchy_controller_state] if args.key?(:hierarchy_controller_state)
@membership_spec = args[:membership_spec] if args.key?(:membership_spec)
@operator_state = args[:operator_state] if args.key?(:operator_state)
@policy_controller_state = args[:policy_controller_state] if args.key?(:policy_controller_state)
end
end
# State information for an ACM's Operator
class ConfigManagementOperatorState
include Google::Apis::Core::Hashable
# The state of the Operator's deployment
# Corresponds to the JSON property `deploymentState`
# @return [String]
attr_accessor :deployment_state
# Install errors.
# Corresponds to the JSON property `errors`
# @return [Array<Google::Apis::GkehubV1alpha::ConfigManagementInstallError>]
attr_accessor :errors
# The semenatic version number of the operator
# Corresponds to the JSON property `version`
# @return [String]
attr_accessor :version
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@deployment_state = args[:deployment_state] if args.key?(:deployment_state)
@errors = args[:errors] if args.key?(:errors)
@version = args[:version] if args.key?(:version)
end
end
# Configuration for Policy Controller
class ConfigManagementPolicyController
include Google::Apis::Core::Hashable
# Sets the interval for Policy Controller Audit Scans (in seconds). When set to
# 0, this disables audit functionality altogether.
# Corresponds to the JSON property `auditIntervalSeconds`
# @return [Fixnum]
attr_accessor :audit_interval_seconds
# Enables the installation of Policy Controller. If false, the rest of
# PolicyController fields take no effect.
# Corresponds to the JSON property `enabled`
# @return [Boolean]
attr_accessor :enabled
alias_method :enabled?, :enabled
# The set of namespaces that are excluded from Policy Controller checks.
# Namespaces do not need to currently exist on the cluster.
# Corresponds to the JSON property `exemptableNamespaces`
# @return [Array<String>]
attr_accessor :exemptable_namespaces
# Logs all denies and dry run failures.
# Corresponds to the JSON property `logDeniesEnabled`
# @return [Boolean]
attr_accessor :log_denies_enabled
alias_method :log_denies_enabled?, :log_denies_enabled
# Enable users to try out mutation for PolicyController.
# Corresponds to the JSON property `mutationEnabled`
# @return [Boolean]
attr_accessor :mutation_enabled
alias_method :mutation_enabled?, :mutation_enabled
# Enables the ability to use Constraint Templates that reference to objects
# other than the object currently being evaluated.
# Corresponds to the JSON property `referentialRulesEnabled`
# @return [Boolean]
attr_accessor :referential_rules_enabled
alias_method :referential_rules_enabled?, :referential_rules_enabled
# Installs the default template library along with Policy Controller.
# Corresponds to the JSON property `templateLibraryInstalled`
# @return [Boolean]
attr_accessor :template_library_installed
alias_method :template_library_installed?, :template_library_installed
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@audit_interval_seconds = args[:audit_interval_seconds] if args.key?(:audit_interval_seconds)
@enabled = args[:enabled] if args.key?(:enabled)
@exemptable_namespaces = args[:exemptable_namespaces] if args.key?(:exemptable_namespaces)
@log_denies_enabled = args[:log_denies_enabled] if args.key?(:log_denies_enabled)
@mutation_enabled = args[:mutation_enabled] if args.key?(:mutation_enabled)
@referential_rules_enabled = args[:referential_rules_enabled] if args.key?(:referential_rules_enabled)
@template_library_installed = args[:template_library_installed] if args.key?(:template_library_installed)
end
end
# State for PolicyControllerState.
class ConfigManagementPolicyControllerState
include Google::Apis::Core::Hashable
# State of Policy Controller installation.
# Corresponds to the JSON property `deploymentState`
# @return [Google::Apis::GkehubV1alpha::ConfigManagementGatekeeperDeploymentState]
attr_accessor :deployment_state
# The build version of Gatekeeper Policy Controller is using.
# Corresponds to the JSON property `version`
# @return [Google::Apis::GkehubV1alpha::ConfigManagementPolicyControllerVersion]
attr_accessor :version
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@deployment_state = args[:deployment_state] if args.key?(:deployment_state)
@version = args[:version] if args.key?(:version)
end
end
# The build version of Gatekeeper Policy Controller is using.
class ConfigManagementPolicyControllerVersion
include Google::Apis::Core::Hashable
# The gatekeeper image tag that is composed of ACM version, git tag, build
# number.
# Corresponds to the JSON property `version`
# @return [String]
attr_accessor :version
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@version = args[:version] if args.key?(:version)
end
end
# An ACM created error representing a problem syncing configurations
class ConfigManagementSyncError
include Google::Apis::Core::Hashable
# An ACM defined error code
# Corresponds to the JSON property `code`
# @return [String]
attr_accessor :code
# A description of the error
# Corresponds to the JSON property `errorMessage`
# @return [String]
attr_accessor :error_message
# A list of config(s) associated with the error, if any
# Corresponds to the JSON property `errorResources`
# @return [Array<Google::Apis::GkehubV1alpha::ConfigManagementErrorResource>]
attr_accessor :error_resources
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@code = args[:code] if args.key?(:code)
@error_message = args[:error_message] if args.key?(:error_message)
@error_resources = args[:error_resources] if args.key?(:error_resources)
end
end
# State indicating an ACM's progress syncing configurations to a cluster
class ConfigManagementSyncState
include Google::Apis::Core::Hashable
# Sync status code
# Corresponds to the JSON property `code`
# @return [String]
attr_accessor :code
# A list of errors resulting from problematic configs. This list will be
# truncated after 100 errors, although it is unlikely for that many errors to
# simultaneously exist.
# Corresponds to the JSON property `errors`
# @return [Array<Google::Apis::GkehubV1alpha::ConfigManagementSyncError>]
attr_accessor :errors
# Token indicating the state of the importer.
# Corresponds to the JSON property `importToken`
# @return [String]
attr_accessor :import_token
# Deprecated: use last_sync_time instead. Timestamp of when ACM last
# successfully synced the repo The time format is specified in https://golang.
# org/pkg/time/#Time.String
# Corresponds to the JSON property `lastSync`
# @return [String]
attr_accessor :last_sync
# Timestamp type of when ACM last successfully synced the repo
# Corresponds to the JSON property `lastSyncTime`
# @return [String]
attr_accessor :last_sync_time
# Token indicating the state of the repo.
# Corresponds to the JSON property `sourceToken`
# @return [String]
attr_accessor :source_token
# Token indicating the state of the syncer.
# Corresponds to the JSON property `syncToken`
# @return [String]
attr_accessor :sync_token
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@code = args[:code] if args.key?(:code)
@errors = args[:errors] if args.key?(:errors)
@import_token = args[:import_token] if args.key?(:import_token)
@last_sync = args[:last_sync] if args.key?(:last_sync)
@last_sync_time = args[:last_sync_time] if args.key?(:last_sync_time)
@source_token = args[:source_token] if args.key?(:source_token)
@sync_token = args[:sync_token] if args.key?(:sync_token)
end
end
# ConnectAgentResource represents a Kubernetes resource manifest for Connect
# Agent deployment.
class ConnectAgentResource
include Google::Apis::Core::Hashable
# YAML manifest of the resource.
# Corresponds to the JSON property `manifest`
# @return [String]
attr_accessor :manifest
# TypeMeta is the type information needed for content unmarshalling of
# Kubernetes resources in the manifest.
# Corresponds to the JSON property `type`
# @return [Google::Apis::GkehubV1alpha::TypeMeta]
attr_accessor :type
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@manifest = args[:manifest] if args.key?(:manifest)
@type = args[:type] if args.key?(:type)
end
end
# EdgeCluster contains information specific to Google Edge Clusters.
class EdgeCluster
include Google::Apis::Core::Hashable
# Immutable. Self-link of the GCP resource for the Edge Cluster. For example: //
# edgecontainer.googleapis.com/projects/my-project/locations/us-west1-a/clusters/
# my-cluster
# Corresponds to the JSON property `resourceLink`
# @return [String]
attr_accessor :resource_link
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@resource_link = args[:resource_link] if args.key?(:resource_link)
end
end
# A generic empty message that you can re-use to avoid defining duplicated empty
# messages in your APIs. A typical example is to use it as the request or the
# response type of an API method. For instance: service Foo ` rpc Bar(google.
# protobuf.Empty) returns (google.protobuf.Empty); `
class Empty
include Google::Apis::Core::Hashable
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
end
end
# Represents a textual expression in the Common Expression Language (CEL) syntax.
# CEL is a C-like expression language. The syntax and semantics of CEL are
# documented at https://github.com/google/cel-spec. Example (Comparison): title:
# "Summary size limit" description: "Determines if a summary is less than 100
# chars" expression: "document.summary.size() < 100" Example (Equality): title: "
# Requestor is owner" description: "Determines if requestor is the document
# owner" expression: "document.owner == request.auth.claims.email" Example (
# Logic): title: "Public documents" description: "Determine whether the document
# should be publicly visible" expression: "document.type != 'private' &&
# document.type != 'internal'" Example (Data Manipulation): title: "Notification
# string" description: "Create a notification string with a timestamp."
# expression: "'New message received at ' + string(document.create_time)" The
# exact variables and functions that may be referenced within an expression are
# determined by the service that evaluates it. See the service documentation for
# additional information.
class Expr
include Google::Apis::Core::Hashable
# Optional. Description of the expression. This is a longer text which describes
# the expression, e.g. when hovered over it in a UI.
# Corresponds to the JSON property `description`
# @return [String]
attr_accessor :description
# Textual representation of an expression in Common Expression Language syntax.
# Corresponds to the JSON property `expression`
# @return [String]
attr_accessor :expression
# Optional. String indicating the location of the expression for error reporting,
# e.g. a file name and a position in the file.
# Corresponds to the JSON property `location`
# @return [String]
attr_accessor :location
# Optional. Title for the expression, i.e. a short string describing its purpose.
# This can be used e.g. in UIs which allow to enter the expression.
# Corresponds to the JSON property `title`
# @return [String]
attr_accessor :title
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@description = args[:description] if args.key?(:description)
@expression = args[:expression] if args.key?(:expression)
@location = args[:location] if args.key?(:location)
@title = args[:title] if args.key?(:title)
end
end
# Feature represents the settings and status of any Hub Feature.
class Feature
include Google::Apis::Core::Hashable
# Output only. When the Feature resource was created.
# Corresponds to the JSON property `createTime`
# @return [String]
attr_accessor :create_time
# Output only. When the Feature resource was deleted.
# Corresponds to the JSON property `deleteTime`
# @return [String]
attr_accessor :delete_time
# GCP labels for this Feature.
# Corresponds to the JSON property `labels`
# @return [Hash<String,String>]
attr_accessor :labels
# Optional. Membership-specific configuration for this Feature. If this Feature
# does not support any per-Membership configuration, this field may be unused.
# The keys indicate which Membership the configuration is for, in the form: `
# projects/`p`/locations/`l`/memberships/`m`` Where `p` is the project, `l` is a
# valid location and `m` is a valid Membership in this project at that location.
# `p` WILL match the Feature's project. `p` will always be returned as the
# project number, but the project ID is also accepted during input. If the same
# Membership is specified in the map twice (using the project ID form, and the
# project number form), exactly ONE of the entries will be saved, with no
# guarantees as to which. For this reason, it is recommended the same format be
# used for all entries when mutating a Feature.
# Corresponds to the JSON property `membershipSpecs`
# @return [Hash<String,Google::Apis::GkehubV1alpha::MembershipFeatureSpec>]
attr_accessor :membership_specs
# Output only. Membership-specific Feature status. If this Feature does report
# any per-Membership status, this field may be unused. The keys indicate which
# Membership the state is for, in the form: `projects/`p`/locations/`l`/
# memberships/`m`` Where `p` is the project number, `l` is a valid location and `
# m` is a valid Membership in this project at that location. `p` MUST match the
# Feature's project number.
# Corresponds to the JSON property `membershipStates`
# @return [Hash<String,Google::Apis::GkehubV1alpha::MembershipFeatureState>]
attr_accessor :membership_states
# Output only. The full, unique name of this Feature resource in the format `
# projects/*/locations/*/features/*`.
# Corresponds to the JSON property `name`
# @return [String]
attr_accessor :name
# FeatureResourceState describes the state of a Feature *resource* in the GkeHub
# API. See `FeatureState` for the "running state" of the Feature in the Hub and
# across Memberships.
# Corresponds to the JSON property `resourceState`
# @return [Google::Apis::GkehubV1alpha::FeatureResourceState]
attr_accessor :resource_state
# CommonFeatureSpec contains Hub-wide configuration information
# Corresponds to the JSON property `spec`
# @return [Google::Apis::GkehubV1alpha::CommonFeatureSpec]
attr_accessor :spec
# CommonFeatureState contains Hub-wide Feature status information.
# Corresponds to the JSON property `state`
# @return [Google::Apis::GkehubV1alpha::CommonFeatureState]
attr_accessor :state
# Output only. When the Feature resource was last updated.
# Corresponds to the JSON property `updateTime`
# @return [String]
attr_accessor :update_time
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@create_time = args[:create_time] if args.key?(:create_time)
@delete_time = args[:delete_time] if args.key?(:delete_time)
@labels = args[:labels] if args.key?(:labels)
@membership_specs = args[:membership_specs] if args.key?(:membership_specs)
@membership_states = args[:membership_states] if args.key?(:membership_states)
@name = args[:name] if args.key?(:name)
@resource_state = args[:resource_state] if args.key?(:resource_state)
@spec = args[:spec] if args.key?(:spec)
@state = args[:state] if args.key?(:state)
@update_time = args[:update_time] if args.key?(:update_time)
end
end
# FeatureResourceState describes the state of a Feature *resource* in the GkeHub
# API. See `FeatureState` for the "running state" of the Feature in the Hub and
# across Memberships.
class FeatureResourceState
include Google::Apis::Core::Hashable
# The current state of the Feature resource in the Hub API.
# Corresponds to the JSON property `state`
# @return [String]
attr_accessor :state
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@state = args[:state] if args.key?(:state)
end
end
# **Workload Certificate**: The Hub-wide input for the WorkloadCertificate
# feature.
class FeatureSpec
include Google::Apis::Core::Hashable
# **Workload Certificate**: The membership-specific input for
# WorkloadCertificate feature.
# Corresponds to the JSON property `defaultConfig`
# @return [Google::Apis::GkehubV1alpha::MembershipSpec]
attr_accessor :default_config
# Immutable. Specifies CA configuration.
# Corresponds to the JSON property `provisionGoogleCa`
# @return [String]
attr_accessor :provision_google_ca
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@default_config = args[:default_config] if args.key?(:default_config)
@provision_google_ca = args[:provision_google_ca] if args.key?(:provision_google_ca)
end
end
# FeatureState describes the high-level state of a Feature. It may be used to
# describe a Feature's state at the environ-level, or per-membershop, depending
# on the context.
class FeatureState
include Google::Apis::Core::Hashable
# The high-level, machine-readable status of this Feature.
# Corresponds to the JSON property `code`
# @return [String]
attr_accessor :code
# A human-readable description of the current status.
# Corresponds to the JSON property `description`
# @return [String]
attr_accessor :description
# The time this status and any related Feature-specific details were updated.
# Corresponds to the JSON property `updateTime`
# @return [String]
attr_accessor :update_time
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@code = args[:code] if args.key?(:code)
@description = args[:description] if args.key?(:description)
@update_time = args[:update_time] if args.key?(:update_time)
end
end
# Fleet contains the Fleet-wide metadata and configuration.
class Fleet
include Google::Apis::Core::Hashable
# Output only. When the Fleet was created.
# Corresponds to the JSON property `createTime`
# @return [String]
attr_accessor :create_time
# Output only. When the Fleet was deleted.
# Corresponds to the JSON property `deleteTime`
# @return [String]
attr_accessor :delete_time
# Optional. A user-assigned display name of the Fleet. When present, it must be
# between 4 to 30 characters. Allowed characters are: lowercase and uppercase
# letters, numbers, hyphen, single-quote, double-quote, space, and exclamation
# point. Example: `Production Fleet`
# Corresponds to the JSON property `displayName`
# @return [String]
attr_accessor :display_name
# The name for the fleet. The name must meet the following constraints: + The
# name of a fleet should be unique within the organization; + It must consist of
# lower case alphanumeric characters or `-`; + The length of the name must be
# less than or equal to 63; + Unicode names must be expressed in Punycode format
# (rfc3492). Examples: + prod-fleet + xn--wlq33vhyw9jb （Punycode form for "生产环境")
# Corresponds to the JSON property `fleetName`
# @return [String]
attr_accessor :fleet_name
# Output only. The full, unique resource name of this fleet in the format of `
# projects/`project`/locations/`location`/fleets/`fleet``. Each GCP project can
# have at most one fleet resource, named "default".
# Corresponds to the JSON property `name`
# @return [String]
attr_accessor :name
# Output only. Google-generated UUID for this resource. This is unique across
# all Fleet resources. If a Fleet resource is deleted and another resource with
# the same name is created, it gets a different uid.
# Corresponds to the JSON property `uid`
# @return [String]
attr_accessor :uid
# Output only. When the Fleet was last updated.
# Corresponds to the JSON property `updateTime`
# @return [String]
attr_accessor :update_time
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@create_time = args[:create_time] if args.key?(:create_time)
@delete_time = args[:delete_time] if args.key?(:delete_time)
@display_name = args[:display_name] if args.key?(:display_name)
@fleet_name = args[:fleet_name] if args.key?(:fleet_name)
@name = args[:name] if args.key?(:name)
@uid = args[:uid] if args.key?(:uid)
@update_time = args[:update_time] if args.key?(:update_time)
end
end
# GenerateConnectManifestResponse contains manifest information for installing/
# upgrading a Connect agent.
class GenerateConnectManifestResponse
include Google::Apis::Core::Hashable
# The ordered list of Kubernetes resources that need to be applied to the
# cluster for GKE Connect agent installation/upgrade.
# Corresponds to the JSON property `manifest`
# @return [Array<Google::Apis::GkehubV1alpha::ConnectAgentResource>]
attr_accessor :manifest
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@manifest = args[:manifest] if args.key?(:manifest)
end
end
# GkeCluster contains information specific to GKE clusters.
class GkeCluster
include Google::Apis::Core::Hashable
# Output only. If cluster_missing is set then it denotes that the GKE cluster no
# longer exists in the GKE Control Plane.
# Corresponds to the JSON property `clusterMissing`
# @return [Boolean]
attr_accessor :cluster_missing
alias_method :cluster_missing?, :cluster_missing
# Immutable. Self-link of the GCP resource for the GKE cluster. For example: //
# container.googleapis.com/projects/my-project/locations/us-west1-a/clusters/my-
# cluster Zonal clusters are also supported.
# Corresponds to the JSON property `resourceLink`
# @return [String]
attr_accessor :resource_link
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@cluster_missing = args[:cluster_missing] if args.key?(:cluster_missing)
@resource_link = args[:resource_link] if args.key?(:resource_link)
end
end
# The `Status` type defines a logical error model that is suitable for different
# programming environments, including REST APIs and RPC APIs. It is used by [
# gRPC](https://github.com/grpc). Each `Status` message contains three pieces of
# data: error code, error message, and error details. You can find out more
# about this error model and how to work with it in the [API Design Guide](https:
# //cloud.google.com/apis/design/errors).
class GoogleRpcStatus
include Google::Apis::Core::Hashable
# The status code, which should be an enum value of google.rpc.Code.
# Corresponds to the JSON property `code`
# @return [Fixnum]
attr_accessor :code
# A list of messages that carry the error details. There is a common set of
# message types for APIs to use.
# Corresponds to the JSON property `details`
# @return [Array<Hash<String,Object>>]
attr_accessor :details
# A developer-facing error message, which should be in English. Any user-facing
# error message should be localized and sent in the google.rpc.Status.details
# field, or localized by the client.
# Corresponds to the JSON property `message`
# @return [String]
attr_accessor :message
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@code = args[:code] if args.key?(:code)
@details = args[:details] if args.key?(:details)
@message = args[:message] if args.key?(:message)
end
end
# Configuration of an auth method for a member/cluster. Only one authentication
# method (e.g., OIDC and LDAP) can be set per AuthMethod.
class IdentityServiceAuthMethod
include Google::Apis::Core::Hashable
# Identifier for auth config.
# Corresponds to the JSON property `name`
# @return [String]
attr_accessor :name
# Configuration for OIDC Auth flow.
# Corresponds to the JSON property `oidcConfig`
# @return [Google::Apis::GkehubV1alpha::IdentityServiceOidcConfig]
attr_accessor :oidc_config
# Proxy server address to use for auth method.
# Corresponds to the JSON property `proxy`
# @return [String]
attr_accessor :proxy
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@name = args[:name] if args.key?(:name)
@oidc_config = args[:oidc_config] if args.key?(:oidc_config)
@proxy = args[:proxy] if args.key?(:proxy)
end
end
# **Anthos Identity Service**: Configuration for a single Membership.
class IdentityServiceMembershipSpec
include Google::Apis::Core::Hashable
# A member may support multiple auth methods.
# Corresponds to the JSON property `authMethods`
# @return [Array<Google::Apis::GkehubV1alpha::IdentityServiceAuthMethod>]
attr_accessor :auth_methods
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@auth_methods = args[:auth_methods] if args.key?(:auth_methods)
end
end
# **Anthos Identity Service**: State for a single Membership.
class IdentityServiceMembershipState
include Google::Apis::Core::Hashable
# The reason of the failure.
# Corresponds to the JSON property `failureReason`
# @return [String]
attr_accessor :failure_reason
# Installed AIS version. This is the AIS version installed on this member. The
# values makes sense iff state is OK.
# Corresponds to the JSON property `installedVersion`
# @return [String]
attr_accessor :installed_version
# **Anthos Identity Service**: Configuration for a single Membership.
# Corresponds to the JSON property `memberConfig`
# @return [Google::Apis::GkehubV1alpha::IdentityServiceMembershipSpec]
attr_accessor :member_config
# Deployment state on this member
# Corresponds to the JSON property `state`
# @return [String]
attr_accessor :state
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@failure_reason = args[:failure_reason] if args.key?(:failure_reason)
@installed_version = args[:installed_version] if args.key?(:installed_version)
@member_config = args[:member_config] if args.key?(:member_config)
@state = args[:state] if args.key?(:state)
end
end
# Configuration for OIDC Auth flow.
class IdentityServiceOidcConfig
include Google::Apis::Core::Hashable
# PEM-encoded CA for OIDC provider.
# Corresponds to the JSON property `certificateAuthorityData`
# @return [String]
attr_accessor :certificate_authority_data
# ID for OIDC client application.
# Corresponds to the JSON property `clientId`
# @return [String]
attr_accessor :client_id
# Unencrypted OIDC client secret will be passed to the GKE Hub CLH.
# Corresponds to the JSON property `clientSecret`
# @return [String]
attr_accessor :client_secret
# Flag to denote if reverse proxy is used to connect to auth provider. This flag
# should be set to true when provider is not reachable by Google Cloud Console.
# Corresponds to the JSON property `deployCloudConsoleProxy`
# @return [Boolean]
attr_accessor :deploy_cloud_console_proxy
alias_method :deploy_cloud_console_proxy?, :deploy_cloud_console_proxy
# Output only. Encrypted OIDC Client secret
# Corresponds to the JSON property `encryptedClientSecret`
# NOTE: Values are automatically base64 encoded/decoded in the client library.
# @return [String]
attr_accessor :encrypted_client_secret
# Comma-separated list of key-value pairs.
# Corresponds to the JSON property `extraParams`
# @return [String]
attr_accessor :extra_params
# Prefix to prepend to group name.
# Corresponds to the JSON property `groupPrefix`
# @return [String]
attr_accessor :group_prefix
# Claim in OIDC ID token that holds group information.
# Corresponds to the JSON property `groupsClaim`
# @return [String]
attr_accessor :groups_claim
# URI for the OIDC provider. This should point to the level below .well-known/
# openid-configuration.
# Corresponds to the JSON property `issuerUri`
# @return [String]
attr_accessor :issuer_uri
# Registered redirect uri to redirect users going through OAuth flow using
# kubectl plugin.
# Corresponds to the JSON property `kubectlRedirectUri`
# @return [String]
attr_accessor :kubectl_redirect_uri
# Comma-separated list of identifiers.
# Corresponds to the JSON property `scopes`
# @return [String]
attr_accessor :scopes
# Claim in OIDC ID token that holds username.
# Corresponds to the JSON property `userClaim`
# @return [String]
attr_accessor :user_claim
# Prefix to prepend to user name.
# Corresponds to the JSON property `userPrefix`
# @return [String]
attr_accessor :user_prefix
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@certificate_authority_data = args[:certificate_authority_data] if args.key?(:certificate_authority_data)
@client_id = args[:client_id] if args.key?(:client_id)
@client_secret = args[:client_secret] if args.key?(:client_secret)
@deploy_cloud_console_proxy = args[:deploy_cloud_console_proxy] if args.key?(:deploy_cloud_console_proxy)
@encrypted_client_secret = args[:encrypted_client_secret] if args.key?(:encrypted_client_secret)
@extra_params = args[:extra_params] if args.key?(:extra_params)
@group_prefix = args[:group_prefix] if args.key?(:group_prefix)
@groups_claim = args[:groups_claim] if args.key?(:groups_claim)
@issuer_uri = args[:issuer_uri] if args.key?(:issuer_uri)
@kubectl_redirect_uri = args[:kubectl_redirect_uri] if args.key?(:kubectl_redirect_uri)
@scopes = args[:scopes] if args.key?(:scopes)
@user_claim = args[:user_claim] if args.key?(:user_claim)
@user_prefix = args[:user_prefix] if args.key?(:user_prefix)
end
end
# KubernetesMetadata provides informational metadata for Memberships
# representing Kubernetes clusters.
class KubernetesMetadata
include Google::Apis::Core::Hashable
# Output only. Kubernetes API server version string as reported by `/version`.
# Corresponds to the JSON property `kubernetesApiServerVersion`
# @return [String]
attr_accessor :kubernetes_api_server_version
# Output only. The total memory capacity as reported by the sum of all
# Kubernetes nodes resources, defined in MB.
# Corresponds to the JSON property `memoryMb`
# @return [Fixnum]
attr_accessor :memory_mb
# Output only. Node count as reported by Kubernetes nodes resources.
# Corresponds to the JSON property `nodeCount`
# @return [Fixnum]
attr_accessor :node_count
# Output only. Node providerID as reported by the first node in the list of
# nodes on the Kubernetes endpoint. On Kubernetes platforms that support zero-
# node clusters (like GKE-on-GCP), the node_count will be zero and the
# node_provider_id will be empty.
# Corresponds to the JSON property `nodeProviderId`
# @return [String]
attr_accessor :node_provider_id
# Output only. The time at which these details were last updated. This
# update_time is different from the Membership-level update_time since
# EndpointDetails are updated internally for API consumers.
# Corresponds to the JSON property `updateTime`
# @return [String]
attr_accessor :update_time
# Output only. vCPU count as reported by Kubernetes nodes resources.
# Corresponds to the JSON property `vcpuCount`
# @return [Fixnum]
attr_accessor :vcpu_count
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@kubernetes_api_server_version = args[:kubernetes_api_server_version] if args.key?(:kubernetes_api_server_version)
@memory_mb = args[:memory_mb] if args.key?(:memory_mb)
@node_count = args[:node_count] if args.key?(:node_count)
@node_provider_id = args[:node_provider_id] if args.key?(:node_provider_id)
@update_time = args[:update_time] if args.key?(:update_time)
@vcpu_count = args[:vcpu_count] if args.key?(:vcpu_count)
end
end
# KubernetesResource contains the YAML manifests and configuration for
# Membership Kubernetes resources in the cluster. After CreateMembership or
# UpdateMembership, these resources should be re-applied in the cluster.
class KubernetesResource
include Google::Apis::Core::Hashable
# Output only. The Kubernetes resources for installing the GKE Connect agent
# This field is only populated in the Membership returned from a successful long-
# running operation from CreateMembership or UpdateMembership. It is not
# populated during normal GetMembership or ListMemberships requests. To get the
# resource manifest after the initial registration, the caller should make a
# UpdateMembership call with an empty field mask.
# Corresponds to the JSON property `connectResources`
# @return [Array<Google::Apis::GkehubV1alpha::ResourceManifest>]
attr_accessor :connect_resources
# Input only. The YAML representation of the Membership CR. This field is
# ignored for GKE clusters where Hub can read the CR directly. Callers should
# provide the CR that is currently present in the cluster during
# CreateMembership or UpdateMembership, or leave this field empty if none exists.
# The CR manifest is used to validate the cluster has not been registered with
# another Membership.
# Corresponds to the JSON property `membershipCrManifest`
# @return [String]
attr_accessor :membership_cr_manifest
# Output only. Additional Kubernetes resources that need to be applied to the
# cluster after Membership creation, and after every update. This field is only
# populated in the Membership returned from a successful long-running operation
# from CreateMembership or UpdateMembership. It is not populated during normal
# GetMembership or ListMemberships requests. To get the resource manifest after
# the initial registration, the caller should make a UpdateMembership call with
# an empty field mask.
# Corresponds to the JSON property `membershipResources`
# @return [Array<Google::Apis::GkehubV1alpha::ResourceManifest>]
attr_accessor :membership_resources
# ResourceOptions represent options for Kubernetes resource generation.
# Corresponds to the JSON property `resourceOptions`
# @return [Google::Apis::GkehubV1alpha::ResourceOptions]
attr_accessor :resource_options
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@connect_resources = args[:connect_resources] if args.key?(:connect_resources)
@membership_cr_manifest = args[:membership_cr_manifest] if args.key?(:membership_cr_manifest)
@membership_resources = args[:membership_resources] if args.key?(:membership_resources)
@resource_options = args[:resource_options] if args.key?(:resource_options)
end
end
# Response message for the `GkeHub.ListAdminClusterMemberships` method.
class ListAdminClusterMembershipsResponse
include Google::Apis::Core::Hashable
# The list of matching Memberships of admin clusters.
# Corresponds to the JSON property `adminClusterMemberships`
# @return [Array<Google::Apis::GkehubV1alpha::Membership>]
attr_accessor :admin_cluster_memberships
# A token to request the next page of resources from the `
# ListAdminClusterMemberships` method. The value of an empty string means that
# there are no more resources to return.
# Corresponds to the JSON property `nextPageToken`
# @return [String]
attr_accessor :next_page_token
# List of locations that could not be reached while fetching this list.
# Corresponds to the JSON property `unreachable`
# @return [Array<String>]
attr_accessor :unreachable
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@admin_cluster_memberships = args[:admin_cluster_memberships] if args.key?(:admin_cluster_memberships)
@next_page_token = args[:next_page_token] if args.key?(:next_page_token)
@unreachable = args[:unreachable] if args.key?(:unreachable)
end
end
# Response message for the `GkeHub.ListFeatures` method.
class ListFeaturesResponse
include Google::Apis::Core::Hashable
# A token to request the next page of resources from the `ListFeatures` method.
# The value of an empty string means that there are no more resources to return.
# Corresponds to the JSON property `nextPageToken`
# @return [String]
attr_accessor :next_page_token
# The list of matching Features
# Corresponds to the JSON property `resources`
# @return [Array<Google::Apis::GkehubV1alpha::Feature>]
attr_accessor :resources
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@next_page_token = args[:next_page_token] if args.key?(:next_page_token)
@resources = args[:resources] if args.key?(:resources)
end
end
# Response message for the `GkeHub.ListFleetsResponse` method.
class ListFleetsResponse
include Google::Apis::Core::Hashable
# The list of matching fleets.
# Corresponds to the JSON property `fleets`
# @return [Array<Google::Apis::GkehubV1alpha::Fleet>]
attr_accessor :fleets
# A token, which can be sent as `page_token` to retrieve the next page. If this
# field is omitted, there are no subsequent pages.
# Corresponds to the JSON property `nextPageToken`
# @return [String]
attr_accessor :next_page_token
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@fleets = args[:fleets] if args.key?(:fleets)
@next_page_token = args[:next_page_token] if args.key?(:next_page_token)
end
end
# The response message for Locations.ListLocations.
class ListLocationsResponse
include Google::Apis::Core::Hashable
# A list of locations that matches the specified filter in the request.
# Corresponds to the JSON property `locations`
# @return [Array<Google::Apis::GkehubV1alpha::Location>]
attr_accessor :locations
# The standard List next-page token.
# Corresponds to the JSON property `nextPageToken`
# @return [String]
attr_accessor :next_page_token
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@locations = args[:locations] if args.key?(:locations)
@next_page_token = args[:next_page_token] if args.key?(:next_page_token)
end
end
# Response message for the `GkeHub.ListMemberships` method.
class ListMembershipsResponse
include Google::Apis::Core::Hashable
# A token to request the next page of resources from the `ListMemberships`
# method. The value of an empty string means that there are no more resources to
# return.
# Corresponds to the JSON property `nextPageToken`
# @return [String]
attr_accessor :next_page_token
# The list of matching Memberships.
# Corresponds to the JSON property `resources`
# @return [Array<Google::Apis::GkehubV1alpha::Membership>]
attr_accessor :resources
# List of locations that could not be reached while fetching this list.
# Corresponds to the JSON property `unreachable`
# @return [Array<String>]
attr_accessor :unreachable
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@next_page_token = args[:next_page_token] if args.key?(:next_page_token)
@resources = args[:resources] if args.key?(:resources)
@unreachable = args[:unreachable] if args.key?(:unreachable)
end
end
# The response message for Operations.ListOperations.
class ListOperationsResponse
include Google::Apis::Core::Hashable
# The standard List next-page token.
# Corresponds to the JSON property `nextPageToken`
# @return [String]
attr_accessor :next_page_token
# A list of operations that matches the specified filter in the request.
# Corresponds to the JSON property `operations`
# @return [Array<Google::Apis::GkehubV1alpha::Operation>]
attr_accessor :operations
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@next_page_token = args[:next_page_token] if args.key?(:next_page_token)
@operations = args[:operations] if args.key?(:operations)
end
end
# A resource that represents Google Cloud Platform location.
class Location
include Google::Apis::Core::Hashable
# The friendly name for this location, typically a nearby city name. For example,
# "Tokyo".
# Corresponds to the JSON property `displayName`
# @return [String]
attr_accessor :display_name
# Cross-service attributes for the location. For example `"cloud.googleapis.com/
# region": "us-east1"`
# Corresponds to the JSON property `labels`
# @return [Hash<String,String>]
attr_accessor :labels
# The canonical id for this location. For example: `"us-east1"`.
# Corresponds to the JSON property `locationId`
# @return [String]
attr_accessor :location_id
# Service-specific metadata. For example the available capacity at the given
# location.
# Corresponds to the JSON property `metadata`
# @return [Hash<String,Object>]
attr_accessor :metadata
# Resource name for the location, which may vary between implementations. For
# example: `"projects/example-project/locations/us-east1"`
# Corresponds to the JSON property `name`
# @return [String]
attr_accessor :name
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@display_name = args[:display_name] if args.key?(:display_name)
@labels = args[:labels] if args.key?(:labels)
@location_id = args[:location_id] if args.key?(:location_id)
@metadata = args[:metadata] if args.key?(:metadata)
@name = args[:name] if args.key?(:name)
end
end
# Membership contains information about a member cluster.
class Membership
include Google::Apis::Core::Hashable
# Authority encodes how Google will recognize identities from this Membership.
# See the workload identity documentation for more details: https://cloud.google.
# com/kubernetes-engine/docs/how-to/workload-identity
# Corresponds to the JSON property `authority`
# @return [Google::Apis::GkehubV1alpha::Authority]
attr_accessor :authority
# Output only. When the Membership was created.
# Corresponds to the JSON property `createTime`
# @return [String]
attr_accessor :create_time
# Output only. When the Membership was deleted.
# Corresponds to the JSON property `deleteTime`
# @return [String]
attr_accessor :delete_time
# Output only. Description of this membership, limited to 63 characters. Must
# match the regex: `a-zA-Z0-9*` This field is present for legacy purposes.
# Corresponds to the JSON property `description`
# @return [String]
attr_accessor :description
# MembershipEndpoint contains information needed to contact a Kubernetes API,
# endpoint and any additional Kubernetes metadata.
# Corresponds to the JSON property `endpoint`
# @return [Google::Apis::GkehubV1alpha::MembershipEndpoint]
attr_accessor :endpoint
# Optional. An externally-generated and managed ID for this Membership. This ID
# may be modified after creation, but this is not recommended. The ID must match
# the regex: `a-zA-Z0-9*` If this Membership represents a Kubernetes cluster,
# this value should be set to the UID of the `kube-system` namespace object.
# Corresponds to the JSON property `externalId`
# @return [String]
attr_accessor :external_id
# Optional. GCP labels for this membership.
# Corresponds to the JSON property `labels`
# @return [Hash<String,String>]
attr_accessor :labels
# Output only. For clusters using Connect, the timestamp of the most recent
# connection established with Google Cloud. This time is updated every several
# minutes, not continuously. For clusters that do not use GKE Connect, or that
# have never connected successfully, this field will be unset.
# Corresponds to the JSON property `lastConnectionTime`
# @return [String]
attr_accessor :last_connection_time
# Output only. The full, unique name of this Membership resource in the format `
# projects/*/locations/*/memberships/`membership_id``, set during creation. `
# membership_id` must be a valid RFC 1123 compliant DNS label: 1. At most 63
# characters in length 2. It must consist of lower case alphanumeric characters
# or `-` 3. It must start and end with an alphanumeric character Which can be
# expressed as the regex: `[a-z0-9]([-a-z0-9]*[a-z0-9])?`, with a maximum length
# of 63 characters.
# Corresponds to the JSON property `name`
# @return [String]
attr_accessor :name
# MembershipState describes the state of a Membership resource.
# Corresponds to the JSON property `state`
# @return [Google::Apis::GkehubV1alpha::MembershipState]
attr_accessor :state
# Output only. Google-generated UUID for this resource. This is unique across
# all Membership resources. If a Membership resource is deleted and another
# resource with the same name is created, it gets a different unique_id.
# Corresponds to the JSON property `uniqueId`
# @return [String]
attr_accessor :unique_id
# Output only. When the Membership was last updated.
# Corresponds to the JSON property `updateTime`
# @return [String]
attr_accessor :update_time
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@authority = args[:authority] if args.key?(:authority)
@create_time = args[:create_time] if args.key?(:create_time)
@delete_time = args[:delete_time] if args.key?(:delete_time)
@description = args[:description] if args.key?(:description)
@endpoint = args[:endpoint] if args.key?(:endpoint)
@external_id = args[:external_id] if args.key?(:external_id)
@labels = args[:labels] if args.key?(:labels)
@last_connection_time = args[:last_connection_time] if args.key?(:last_connection_time)
@name = args[:name] if args.key?(:name)
@state = args[:state] if args.key?(:state)
@unique_id = args[:unique_id] if args.key?(:unique_id)
@update_time = args[:update_time] if args.key?(:update_time)
end
end
# MembershipEndpoint contains information needed to contact a Kubernetes API,
# endpoint and any additional Kubernetes metadata.
class MembershipEndpoint
include Google::Apis::Core::Hashable
# EdgeCluster contains information specific to Google Edge Clusters.
# Corresponds to the JSON property `edgeCluster`
# @return [Google::Apis::GkehubV1alpha::EdgeCluster]
attr_accessor :edge_cluster
# GkeCluster contains information specific to GKE clusters.
# Corresponds to the JSON property `gkeCluster`
# @return [Google::Apis::GkehubV1alpha::GkeCluster]
attr_accessor :gke_cluster
# KubernetesMetadata provides informational metadata for Memberships
# representing Kubernetes clusters.
# Corresponds to the JSON property `kubernetesMetadata`
# @return [Google::Apis::GkehubV1alpha::KubernetesMetadata]
attr_accessor :kubernetes_metadata
# KubernetesResource contains the YAML manifests and configuration for
# Membership Kubernetes resources in the cluster. After CreateMembership or
# UpdateMembership, these resources should be re-applied in the cluster.
# Corresponds to the JSON property `kubernetesResource`
# @return [Google::Apis::GkehubV1alpha::KubernetesResource]
attr_accessor :kubernetes_resource
# MultiCloudCluster contains information specific to GKE Multi-Cloud clusters.
# Corresponds to the JSON property `multiCloudCluster`
# @return [Google::Apis::GkehubV1alpha::MultiCloudCluster]
attr_accessor :multi_cloud_cluster
# OnPremCluster contains information specific to GKE On-Prem clusters.
# Corresponds to the JSON property `onPremCluster`
# @return [Google::Apis::GkehubV1alpha::OnPremCluster]
attr_accessor :on_prem_cluster
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@edge_cluster = args[:edge_cluster] if args.key?(:edge_cluster)
@gke_cluster = args[:gke_cluster] if args.key?(:gke_cluster)
@kubernetes_metadata = args[:kubernetes_metadata] if args.key?(:kubernetes_metadata)
@kubernetes_resource = args[:kubernetes_resource] if args.key?(:kubernetes_resource)
@multi_cloud_cluster = args[:multi_cloud_cluster] if args.key?(:multi_cloud_cluster)
@on_prem_cluster = args[:on_prem_cluster] if args.key?(:on_prem_cluster)
end
end
# MembershipFeatureSpec contains configuration information for a single
# Membership.
class MembershipFeatureSpec
include Google::Apis::Core::Hashable
# **Anthosobservability**: Per-Membership Feature spec.
# Corresponds to the JSON property `anthosobservability`
# @return [Google::Apis::GkehubV1alpha::AnthosObservabilityMembershipSpec]
attr_accessor :anthosobservability
# **Cloud Build**: Configurations for each Cloud Build enabled cluster.
# Corresponds to the JSON property `cloudbuild`
# @return [Google::Apis::GkehubV1alpha::CloudBuildMembershipSpec]
attr_accessor :cloudbuild
# **Anthos Config Management**: Configuration for a single cluster. Intended to
# parallel the ConfigManagement CR.
# Corresponds to the JSON property `configmanagement`
# @return [Google::Apis::GkehubV1alpha::ConfigManagementMembershipSpec]
attr_accessor :configmanagement
# **Anthos Identity Service**: Configuration for a single Membership.
# Corresponds to the JSON property `identityservice`
# @return [Google::Apis::GkehubV1alpha::IdentityServiceMembershipSpec]
attr_accessor :identityservice
# **Service Mesh**: Spec for a single Membership for the servicemesh feature
# Corresponds to the JSON property `mesh`
# @return [Google::Apis::GkehubV1alpha::ServiceMeshMembershipSpec]
attr_accessor :mesh
# **Policy Controller**: Configuration for a single cluster. Intended to
# parallel the PolicyController CR.
# Corresponds to the JSON property `policycontroller`
# @return [Google::Apis::GkehubV1alpha::PolicyControllerMembershipSpec]
attr_accessor :policycontroller
# **Workload Certificate**: The membership-specific input for
# WorkloadCertificate feature.
# Corresponds to the JSON property `workloadcertificate`
# @return [Google::Apis::GkehubV1alpha::MembershipSpec]
attr_accessor :workloadcertificate
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@anthosobservability = args[:anthosobservability] if args.key?(:anthosobservability)
@cloudbuild = args[:cloudbuild] if args.key?(:cloudbuild)
@configmanagement = args[:configmanagement] if args.key?(:configmanagement)
@identityservice = args[:identityservice] if args.key?(:identityservice)
@mesh = args[:mesh] if args.key?(:mesh)
@policycontroller = args[:policycontroller] if args.key?(:policycontroller)
@workloadcertificate = args[:workloadcertificate] if args.key?(:workloadcertificate)
end
end
# MembershipFeatureState contains Feature status information for a single
# Membership.
class MembershipFeatureState
include Google::Apis::Core::Hashable
# State for App Dev Exp Feature.
# Corresponds to the JSON property `appdevexperience`
# @return [Google::Apis::GkehubV1alpha::AppDevExperienceFeatureState]
attr_accessor :appdevexperience
# **Anthos Config Management**: State for a single cluster.
# Corresponds to the JSON property `configmanagement`
# @return [Google::Apis::GkehubV1alpha::ConfigManagementMembershipState]
attr_accessor :configmanagement
# **Anthos Identity Service**: State for a single Membership.
# Corresponds to the JSON property `identityservice`
# @return [Google::Apis::GkehubV1alpha::IdentityServiceMembershipState]
attr_accessor :identityservice
# **Metering**: Per-Membership Feature State.
# Corresponds to the JSON property `metering`
# @return [Google::Apis::GkehubV1alpha::MeteringMembershipState]
attr_accessor :metering
# **Policy Controller**: State for a single cluster.
# Corresponds to the JSON property `policycontroller`
# @return [Google::Apis::GkehubV1alpha::PolicyControllerMembershipState]
attr_accessor :policycontroller
# **Service Mesh**: State for a single Membership, as analyzed by the Service
# Mesh Hub Controller.
# Corresponds to the JSON property `servicemesh`
# @return [Google::Apis::GkehubV1alpha::ServiceMeshMembershipState]
attr_accessor :servicemesh
# FeatureState describes the high-level state of a Feature. It may be used to
# describe a Feature's state at the environ-level, or per-membershop, depending
# on the context.
# Corresponds to the JSON property `state`
# @return [Google::Apis::GkehubV1alpha::FeatureState]
attr_accessor :state
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@appdevexperience = args[:appdevexperience] if args.key?(:appdevexperience)
@configmanagement = args[:configmanagement] if args.key?(:configmanagement)
@identityservice = args[:identityservice] if args.key?(:identityservice)
@metering = args[:metering] if args.key?(:metering)
@policycontroller = args[:policycontroller] if args.key?(:policycontroller)
@servicemesh = args[:servicemesh] if args.key?(:servicemesh)
@state = args[:state] if args.key?(:state)
end
end
# **Workload Certificate**: The membership-specific input for
# WorkloadCertificate feature.
class MembershipSpec
include Google::Apis::Core::Hashable
# Specifies workload certificate management.
# Corresponds to the JSON property `certificateManagement`
# @return [String]
attr_accessor :certificate_management
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@certificate_management = args[:certificate_management] if args.key?(:certificate_management)
end
end
# MembershipState describes the state of a Membership resource.
class MembershipState
include Google::Apis::Core::Hashable
# Output only. The current state of the Membership resource.
# Corresponds to the JSON property `code`
# @return [String]
attr_accessor :code
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@code = args[:code] if args.key?(:code)
end
end
# **Metering**: Per-Membership Feature State.
class MeteringMembershipState
include Google::Apis::Core::Hashable
# The time stamp of the most recent measurement of the number of vCPUs in the
# cluster.
# Corresponds to the JSON property `lastMeasurementTime`
# @return [String]
attr_accessor :last_measurement_time
# The vCPUs capacity in the cluster according to the most recent measurement (1/
# 1000 precision).
# Corresponds to the JSON property `preciseLastMeasuredClusterVcpuCapacity`
# @return [Float]
attr_accessor :precise_last_measured_cluster_vcpu_capacity
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@last_measurement_time = args[:last_measurement_time] if args.key?(:last_measurement_time)
@precise_last_measured_cluster_vcpu_capacity = args[:precise_last_measured_cluster_vcpu_capacity] if args.key?(:precise_last_measured_cluster_vcpu_capacity)
end
end
# MultiCloudCluster contains information specific to GKE Multi-Cloud clusters.
class MultiCloudCluster
include Google::Apis::Core::Hashable
# Output only. If cluster_missing is set then it denotes that API(gkemulticloud.
# googleapis.com) resource for this GKE Multi-Cloud cluster no longer exists.
# Corresponds to the JSON property `clusterMissing`
# @return [Boolean]
attr_accessor :cluster_missing
alias_method :cluster_missing?, :cluster_missing
# Immutable. Self-link of the GCP resource for the GKE Multi-Cloud cluster. For
# example: //gkemulticloud.googleapis.com/projects/my-project/locations/us-west1-
# a/awsClusters/my-cluster //gkemulticloud.googleapis.com/projects/my-project/
# locations/us-west1-a/azureClusters/my-cluster
# Corresponds to the JSON property `resourceLink`
# @return [String]
attr_accessor :resource_link
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@cluster_missing = args[:cluster_missing] if args.key?(:cluster_missing)
@resource_link = args[:resource_link] if args.key?(:resource_link)
end
end
# **Multi-cluster Ingress**: The configuration for the MultiClusterIngress
# feature.
class MultiClusterIngressFeatureSpec
include Google::Apis::Core::Hashable
# Deprecated: This field will be ignored and should not be set. Customer's
# billing structure.
# Corresponds to the JSON property `billing`
# @return [String]
attr_accessor :billing
# Fully-qualified Membership name which hosts the MultiClusterIngress CRD.
# Example: `projects/foo-proj/locations/global/memberships/bar`
# Corresponds to the JSON property `configMembership`
# @return [String]
attr_accessor :config_membership
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@billing = args[:billing] if args.key?(:billing)
@config_membership = args[:config_membership] if args.key?(:config_membership)
end
end
# OnPremCluster contains information specific to GKE On-Prem clusters.
class OnPremCluster
include Google::Apis::Core::Hashable
# Immutable. Whether the cluster is an admin cluster.
# Corresponds to the JSON property `adminCluster`
# @return [Boolean]
attr_accessor :admin_cluster
alias_method :admin_cluster?, :admin_cluster
# Output only. If cluster_missing is set then it denotes that API(gkeonprem.
# googleapis.com) resource for this GKE On-Prem cluster no longer exists.
# Corresponds to the JSON property `clusterMissing`
# @return [Boolean]
attr_accessor :cluster_missing
alias_method :cluster_missing?, :cluster_missing
# Immutable. Self-link of the GCP resource for the GKE On-Prem cluster. For
# example: //gkeonprem.googleapis.com/projects/my-project/locations/us-west1-a/
# vmwareClusters/my-cluster //gkeonprem.googleapis.com/projects/my-project/
# locations/us-west1-a/bareMetalClusters/my-cluster
# Corresponds to the JSON property `resourceLink`
# @return [String]
attr_accessor :resource_link
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@admin_cluster = args[:admin_cluster] if args.key?(:admin_cluster)
@cluster_missing = args[:cluster_missing] if args.key?(:cluster_missing)
@resource_link = args[:resource_link] if args.key?(:resource_link)
end
end
# This resource represents a long-running operation that is the result of a
# network API call.
class Operation
include Google::Apis::Core::Hashable
# If the value is `false`, it means the operation is still in progress. If `true`
# , the operation is completed, and either `error` or `response` is available.
# Corresponds to the JSON property `done`
# @return [Boolean]
attr_accessor :done
alias_method :done?, :done
# The `Status` type defines a logical error model that is suitable for different
# programming environments, including REST APIs and RPC APIs. It is used by [
# gRPC](https://github.com/grpc). Each `Status` message contains three pieces of
# data: error code, error message, and error details. You can find out more
# about this error model and how to work with it in the [API Design Guide](https:
# //cloud.google.com/apis/design/errors).
# Corresponds to the JSON property `error`
# @return [Google::Apis::GkehubV1alpha::GoogleRpcStatus]
attr_accessor :error
# Service-specific metadata associated with the operation. It typically contains
# progress information and common metadata such as create time. Some services
# might not provide such metadata. Any method that returns a long-running
# operation should document the metadata type, if any.
# Corresponds to the JSON property `metadata`
# @return [Hash<String,Object>]
attr_accessor :metadata
# The server-assigned name, which is only unique within the same service that
# originally returns it. If you use the default HTTP mapping, the `name` should
# be a resource name ending with `operations/`unique_id``.
# Corresponds to the JSON property `name`
# @return [String]
attr_accessor :name
# The normal response of the operation in case of success. If the original
# method returns no data on success, such as `Delete`, the response is `google.
# protobuf.Empty`. If the original method is standard `Get`/`Create`/`Update`,
# the response should be the resource. For other methods, the response should
# have the type `XxxResponse`, where `Xxx` is the original method name. For
# example, if the original method name is `TakeSnapshot()`, the inferred
# response type is `TakeSnapshotResponse`.
# Corresponds to the JSON property `response`
# @return [Hash<String,Object>]
attr_accessor :response
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@done = args[:done] if args.key?(:done)
@error = args[:error] if args.key?(:error)
@metadata = args[:metadata] if args.key?(:metadata)
@name = args[:name] if args.key?(:name)
@response = args[:response] if args.key?(:response)
end
end
# Represents the metadata of the long-running operation.
class OperationMetadata
include Google::Apis::Core::Hashable
# Output only. API version used to start the operation.
# Corresponds to the JSON property `apiVersion`
# @return [String]
attr_accessor :api_version
# Output only. Identifies whether the user has requested cancellation of the
# operation. Operations that have successfully been cancelled have Operation.
# error value with a google.rpc.Status.code of 1, corresponding to `Code.
# CANCELLED`.
# Corresponds to the JSON property `cancelRequested`
# @return [Boolean]
attr_accessor :cancel_requested
alias_method :cancel_requested?, :cancel_requested
# Output only. The time the operation was created.
# Corresponds to the JSON property `createTime`
# @return [String]
attr_accessor :create_time
# Output only. The time the operation finished running.
# Corresponds to the JSON property `endTime`
# @return [String]
attr_accessor :end_time
# Output only. Human-readable status of the operation, if any.
# Corresponds to the JSON property `statusDetail`
# @return [String]
attr_accessor :status_detail
# Output only. Server-defined resource path for the target of the operation.
# Corresponds to the JSON property `target`
# @return [String]
attr_accessor :target
# Output only. Name of the verb executed by the operation.
# Corresponds to the JSON property `verb`
# @return [String]
attr_accessor :verb
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@api_version = args[:api_version] if args.key?(:api_version)
@cancel_requested = args[:cancel_requested] if args.key?(:cancel_requested)
@create_time = args[:create_time] if args.key?(:create_time)
@end_time = args[:end_time] if args.key?(:end_time)
@status_detail = args[:status_detail] if args.key?(:status_detail)
@target = args[:target] if args.key?(:target)
@verb = args[:verb] if args.key?(:verb)
end
end
# An Identity and Access Management (IAM) policy, which specifies access
# controls for Google Cloud resources. A `Policy` is a collection of `bindings`.
# A `binding` binds one or more `members`, or principals, to a single `role`.
# Principals can be user accounts, service accounts, Google groups, and domains (
# such as G Suite). A `role` is a named list of permissions; each `role` can be
# an IAM predefined role or a user-created custom role. For some types of Google
# Cloud resources, a `binding` can also specify a `condition`, which is a
# logical expression that allows access to a resource only if the expression
# evaluates to `true`. A condition can add constraints based on attributes of
# the request, the resource, or both. To learn which resources support
# conditions in their IAM policies, see the [IAM documentation](https://cloud.
# google.com/iam/help/conditions/resource-policies). **JSON example:** ` "
# bindings": [ ` "role": "roles/resourcemanager.organizationAdmin", "members": [
# "user:mike@example.com", "group:admins@example.com", "domain:google.com", "
# serviceAccount:my-project-id@appspot.gserviceaccount.com" ] `, ` "role": "
# roles/resourcemanager.organizationViewer", "members": [ "user:eve@example.com"
# ], "condition": ` "title": "expirable access", "description": "Does not grant
# access after Sep 2020", "expression": "request.time < timestamp('2020-10-01T00:
# 00:00.000Z')", ` ` ], "etag": "BwWWja0YfJA=", "version": 3 ` **YAML example:**
# bindings: - members: - user:mike@example.com - group:admins@example.com -
# domain:google.com - serviceAccount:my-project-id@appspot.gserviceaccount.com
# role: roles/resourcemanager.organizationAdmin - members: - user:eve@example.
# com role: roles/resourcemanager.organizationViewer condition: title: expirable
# access description: Does not grant access after Sep 2020 expression: request.
# time < timestamp('2020-10-01T00:00:00.000Z') etag: BwWWja0YfJA= version: 3 For
# a description of IAM and its features, see the [IAM documentation](https://
# cloud.google.com/iam/docs/).
class Policy
include Google::Apis::Core::Hashable
# Specifies cloud audit logging configuration for this policy.
# Corresponds to the JSON property `auditConfigs`
# @return [Array<Google::Apis::GkehubV1alpha::AuditConfig>]
attr_accessor :audit_configs
# Associates a list of `members`, or principals, with a `role`. Optionally, may
# specify a `condition` that determines how and when the `bindings` are applied.
# Each of the `bindings` must contain at least one principal. The `bindings` in
# a `Policy` can refer to up to 1,500 principals; up to 250 of these principals
# can be Google groups. Each occurrence of a principal counts towards these
# limits. For example, if the `bindings` grant 50 different roles to `user:alice@
# example.com`, and not to any other principal, then you can add another 1,450
# principals to the `bindings` in the `Policy`.
# Corresponds to the JSON property `bindings`
# @return [Array<Google::Apis::GkehubV1alpha::Binding>]
attr_accessor :bindings
# `etag` is used for optimistic concurrency control as a way to help prevent
# simultaneous updates of a policy from overwriting each other. It is strongly
# suggested that systems make use of the `etag` in the read-modify-write cycle
# to perform policy updates in order to avoid race conditions: An `etag` is
# returned in the response to `getIamPolicy`, and systems are expected to put
# that etag in the request to `setIamPolicy` to ensure that their change will be
# applied to the same version of the policy. **Important:** If you use IAM
# Conditions, you must include the `etag` field whenever you call `setIamPolicy`.
# If you omit this field, then IAM allows you to overwrite a version `3` policy
# with a version `1` policy, and all of the conditions in the version `3` policy
# are lost.
# Corresponds to the JSON property `etag`
# NOTE: Values are automatically base64 encoded/decoded in the client library.
# @return [String]
attr_accessor :etag
# Specifies the format of the policy. Valid values are `0`, `1`, and `3`.
# Requests that specify an invalid value are rejected. Any operation that
# affects conditional role bindings must specify version `3`. This requirement
# applies to the following operations: * Getting a policy that includes a
# conditional role binding * Adding a conditional role binding to a policy *
# Changing a conditional role binding in a policy * Removing any role binding,
# with or without a condition, from a policy that includes conditions **
# Important:** If you use IAM Conditions, you must include the `etag` field
# whenever you call `setIamPolicy`. If you omit this field, then IAM allows you
# to overwrite a version `3` policy with a version `1` policy, and all of the
# conditions in the version `3` policy are lost. If a policy does not include
# any conditions, operations on that policy may specify any valid version or
# leave the field unset. To learn which resources support conditions in their
# IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/
# conditions/resource-policies).
# Corresponds to the JSON property `version`
# @return [Fixnum]
attr_accessor :version
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@audit_configs = args[:audit_configs] if args.key?(:audit_configs)
@bindings = args[:bindings] if args.key?(:bindings)
@etag = args[:etag] if args.key?(:etag)
@version = args[:version] if args.key?(:version)
end
end
# Configuration for Policy Controller
class PolicyControllerHubConfig
include Google::Apis::Core::Hashable
# Sets the interval for Policy Controller Audit Scans (in seconds). When set to
# 0, this disables audit functionality altogether.
# Corresponds to the JSON property `auditIntervalSeconds`
# @return [Fixnum]
attr_accessor :audit_interval_seconds
# The set of namespaces that are excluded from Policy Controller checks.
# Namespaces do not need to currently exist on the cluster.
# Corresponds to the JSON property `exemptableNamespaces`
# @return [Array<String>]
attr_accessor :exemptable_namespaces
# The install_spec represents the intended state specified by the latest request
# that mutated install_spec in the feature spec, not the lifecycle state of the
# feature observed by the Hub feature controller that is reported in the feature
# state.
# Corresponds to the JSON property `installSpec`
# @return [String]
attr_accessor :install_spec
# Logs all denies and dry run failures.
# Corresponds to the JSON property `logDeniesEnabled`
# @return [Boolean]
attr_accessor :log_denies_enabled
alias_method :log_denies_enabled?, :log_denies_enabled
# Enables the ability to mutate resources using Policy Controller.
# Corresponds to the JSON property `mutationEnabled`
# @return [Boolean]
attr_accessor :mutation_enabled
alias_method :mutation_enabled?, :mutation_enabled
# Enables the ability to use Constraint Templates that reference to objects
# other than the object currently being evaluated.
# Corresponds to the JSON property `referentialRulesEnabled`
# @return [Boolean]
attr_accessor :referential_rules_enabled
alias_method :referential_rules_enabled?, :referential_rules_enabled
# The config specifying which default library templates to install.
# Corresponds to the JSON property `templateLibraryConfig`
# @return [Google::Apis::GkehubV1alpha::PolicyControllerTemplateLibraryConfig]
attr_accessor :template_library_config
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@audit_interval_seconds = args[:audit_interval_seconds] if args.key?(:audit_interval_seconds)
@exemptable_namespaces = args[:exemptable_namespaces] if args.key?(:exemptable_namespaces)
@install_spec = args[:install_spec] if args.key?(:install_spec)
@log_denies_enabled = args[:log_denies_enabled] if args.key?(:log_denies_enabled)
@mutation_enabled = args[:mutation_enabled] if args.key?(:mutation_enabled)
@referential_rules_enabled = args[:referential_rules_enabled] if args.key?(:referential_rules_enabled)
@template_library_config = args[:template_library_config] if args.key?(:template_library_config)
end
end
# State of the Policy Controller.
class PolicyControllerHubState
include Google::Apis::Core::Hashable
# Map from deployment name to deployment state. Example deployments are
# gatekeeper-controller-manager, gatekeeper-audit deployment, and gatekeeper-
# mutation.
# Corresponds to the JSON property `deploymentStates`
# @return [Hash<String,String>]
attr_accessor :deployment_states
# The build version of Gatekeeper that Policy Controller is using.
# Corresponds to the JSON property `version`
# @return [Google::Apis::GkehubV1alpha::PolicyControllerHubVersion]
attr_accessor :version
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@deployment_states = args[:deployment_states] if args.key?(:deployment_states)
@version = args[:version] if args.key?(:version)
end
end
# The build version of Gatekeeper that Policy Controller is using.
class PolicyControllerHubVersion
include Google::Apis::Core::Hashable
# The gatekeeper image tag that is composed of ACM version, git tag, build
# number.
# Corresponds to the JSON property `version`
# @return [String]
attr_accessor :version
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@version = args[:version] if args.key?(:version)
end
end
# **Policy Controller**: Configuration for a single cluster. Intended to
# parallel the PolicyController CR.
class PolicyControllerMembershipSpec
include Google::Apis::Core::Hashable
# Configuration for Policy Controller
# Corresponds to the JSON property `policyControllerHubConfig`
# @return [Google::Apis::GkehubV1alpha::PolicyControllerHubConfig]
attr_accessor :policy_controller_hub_config
# Version of Policy Controller installed.
# Corresponds to the JSON property `version`
# @return [String]
attr_accessor :version
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@policy_controller_hub_config = args[:policy_controller_hub_config] if args.key?(:policy_controller_hub_config)
@version = args[:version] if args.key?(:version)
end
end
# **Policy Controller**: State for a single cluster.
class PolicyControllerMembershipState
include Google::Apis::Core::Hashable
# The user-defined name for the cluster used by ClusterSelectors to group
# clusters together. This should match Membership's membership_name, unless the
# user installed PC on the cluster manually prior to enabling the PC hub feature.
# Unique within a Policy Controller installation.
# Corresponds to the JSON property `clusterName`
# @return [String]
attr_accessor :cluster_name
# **Policy Controller**: Configuration for a single cluster. Intended to
# parallel the PolicyController CR.
# Corresponds to the JSON property `membershipSpec`
# @return [Google::Apis::GkehubV1alpha::PolicyControllerMembershipSpec]
attr_accessor :membership_spec
# State of the Policy Controller.
# Corresponds to the JSON property `policyControllerHubState`
# @return [Google::Apis::GkehubV1alpha::PolicyControllerHubState]
attr_accessor :policy_controller_hub_state
# The lifecycle state Policy Controller is in.
# Corresponds to the JSON property `state`
# @return [String]
attr_accessor :state
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@cluster_name = args[:cluster_name] if args.key?(:cluster_name)
@membership_spec = args[:membership_spec] if args.key?(:membership_spec)
@policy_controller_hub_state = args[:policy_controller_hub_state] if args.key?(:policy_controller_hub_state)
@state = args[:state] if args.key?(:state)
end
end
# The config specifying which default library templates to install.
class PolicyControllerTemplateLibraryConfig
include Google::Apis::Core::Hashable
# Whether the standard template library should be installed or not.
# Corresponds to the JSON property `included`
# @return [Boolean]
attr_accessor :included
alias_method :included?, :included
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@included = args[:included] if args.key?(:included)
end
end
# ResourceManifest represents a single Kubernetes resource to be applied to the
# cluster.
class ResourceManifest
include Google::Apis::Core::Hashable
# Whether the resource provided in the manifest is `cluster_scoped`. If unset,
# the manifest is assumed to be namespace scoped. This field is used for REST
# mapping when applying the resource in a cluster.
# Corresponds to the JSON property `clusterScoped`
# @return [Boolean]
attr_accessor :cluster_scoped
alias_method :cluster_scoped?, :cluster_scoped
# YAML manifest of the resource.
# Corresponds to the JSON property `manifest`
# @return [String]
attr_accessor :manifest
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@cluster_scoped = args[:cluster_scoped] if args.key?(:cluster_scoped)
@manifest = args[:manifest] if args.key?(:manifest)
end
end
# ResourceOptions represent options for Kubernetes resource generation.
class ResourceOptions
include Google::Apis::Core::Hashable
# Optional. The Connect agent version to use for connect_resources. Defaults to
# the latest GKE Connect version. The version must be a currently supported
# version, obsolete versions will be rejected.
# Corresponds to the JSON property `connectVersion`
# @return [String]
attr_accessor :connect_version
# Optional. Major version of the Kubernetes cluster. This is only used to
# determine which version to use for the CustomResourceDefinition resources, `
# apiextensions/v1beta1` or`apiextensions/v1`.
# Corresponds to the JSON property `k8sVersion`
# @return [String]
attr_accessor :k8s_version
# Optional. Use `apiextensions/v1beta1` instead of `apiextensions/v1` for
# CustomResourceDefinition resources. This option should be set for clusters
# with Kubernetes apiserver versions <1.16.
# Corresponds to the JSON property `v1beta1Crd`
# @return [Boolean]
attr_accessor :v1beta1_crd
alias_method :v1beta1_crd?, :v1beta1_crd
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@connect_version = args[:connect_version] if args.key?(:connect_version)
@k8s_version = args[:k8s_version] if args.key?(:k8s_version)
@v1beta1_crd = args[:v1beta1_crd] if args.key?(:v1beta1_crd)
end
end
# AnalysisMessage is a single message produced by an analyzer, and it used to
# communicate to the end user about the state of their Service Mesh
# configuration.
class ServiceMeshAnalysisMessage
include Google::Apis::Core::Hashable
# A UI can combine these args with a template (based on message_base.type) to
# produce an internationalized message.
# Corresponds to the JSON property `args`
# @return [Hash<String,Object>]
attr_accessor :args
# A human readable description of what the error means. It is suitable for non-
# internationalize display purposes.
# Corresponds to the JSON property `description`
# @return [String]
attr_accessor :description
# AnalysisMessageBase describes some common information that is needed for all
# messages.
# Corresponds to the JSON property `messageBase`
# @return [Google::Apis::GkehubV1alpha::ServiceMeshAnalysisMessageBase]
attr_accessor :message_base
# A list of strings specifying the resource identifiers that were the cause of
# message generation. A "path" here may be: * MEMBERSHIP_ID if the cause is a
# specific member cluster * MEMBERSHIP_ID/(NAMESPACE\/)?RESOURCETYPE/NAME if the
# cause is a resource in a cluster
# Corresponds to the JSON property `resourcePaths`
# @return [Array<String>]
attr_accessor :resource_paths
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@args = args[:args] if args.key?(:args)
@description = args[:description] if args.key?(:description)
@message_base = args[:message_base] if args.key?(:message_base)
@resource_paths = args[:resource_paths] if args.key?(:resource_paths)
end
end
# AnalysisMessageBase describes some common information that is needed for all
# messages.
class ServiceMeshAnalysisMessageBase
include Google::Apis::Core::Hashable
# A url pointing to the Service Mesh or Istio documentation for this specific
# error type.
# Corresponds to the JSON property `documentationUrl`
# @return [String]
attr_accessor :documentation_url
# Represents how severe a message is.
# Corresponds to the JSON property `level`
# @return [String]
attr_accessor :level
# A unique identifier for the type of message. Display_name is intended to be
# human-readable, code is intended to be machine readable. There should be a one-
# to-one mapping between display_name and code. (i.e. do not re-use
# display_names or codes between message types.) See istio.analysis.v1alpha1.
# AnalysisMessageBase.Type
# Corresponds to the JSON property `type`
# @return [Google::Apis::GkehubV1alpha::ServiceMeshType]
attr_accessor :type
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@documentation_url = args[:documentation_url] if args.key?(:documentation_url)
@level = args[:level] if args.key?(:level)
@type = args[:type] if args.key?(:type)
end
end
# Status of control plane management.
class ServiceMeshControlPlaneManagement
include Google::Apis::Core::Hashable
# Explanation of state.
# Corresponds to the JSON property `details`
# @return [Array<Google::Apis::GkehubV1alpha::ServiceMeshStatusDetails>]
attr_accessor :details
# LifecycleState of control plane management.
# Corresponds to the JSON property `state`
# @return [String]
attr_accessor :state
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@details = args[:details] if args.key?(:details)
@state = args[:state] if args.key?(:state)
end
end
# **Service Mesh**: State for the whole Hub, as analyzed by the Service Mesh Hub
# Controller.
class ServiceMeshFeatureState
include Google::Apis::Core::Hashable
# Output only. Results of running Service Mesh analyzers.
# Corresponds to the JSON property `analysisMessages`
# @return [Array<Google::Apis::GkehubV1alpha::ServiceMeshAnalysisMessage>]
attr_accessor :analysis_messages
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@analysis_messages = args[:analysis_messages] if args.key?(:analysis_messages)
end
end
# **Service Mesh**: Spec for a single Membership for the servicemesh feature
class ServiceMeshMembershipSpec
include Google::Apis::Core::Hashable
# Enables automatic control plane management.
# Corresponds to the JSON property `controlPlane`
# @return [String]
attr_accessor :control_plane
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@control_plane = args[:control_plane] if args.key?(:control_plane)
end
end
# **Service Mesh**: State for a single Membership, as analyzed by the Service
# Mesh Hub Controller.
class ServiceMeshMembershipState
include Google::Apis::Core::Hashable
# Output only. Results of running Service Mesh analyzers.
# Corresponds to the JSON property `analysisMessages`
# @return [Array<Google::Apis::GkehubV1alpha::ServiceMeshAnalysisMessage>]
attr_accessor :analysis_messages
# Status of control plane management.
# Corresponds to the JSON property `controlPlaneManagement`
# @return [Google::Apis::GkehubV1alpha::ServiceMeshControlPlaneManagement]
attr_accessor :control_plane_management
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@analysis_messages = args[:analysis_messages] if args.key?(:analysis_messages)
@control_plane_management = args[:control_plane_management] if args.key?(:control_plane_management)
end
end
# Structured and human-readable details for a status.
class ServiceMeshStatusDetails
include Google::Apis::Core::Hashable
# A machine-readable code that further describes a broad status.
# Corresponds to the JSON property `code`
# @return [String]
attr_accessor :code
# Human-readable explanation of code.
# Corresponds to the JSON property `details`
# @return [String]
attr_accessor :details
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@code = args[:code] if args.key?(:code)
@details = args[:details] if args.key?(:details)
end
end
# A unique identifier for the type of message. Display_name is intended to be
# human-readable, code is intended to be machine readable. There should be a one-
# to-one mapping between display_name and code. (i.e. do not re-use
# display_names or codes between message types.) See istio.analysis.v1alpha1.
# AnalysisMessageBase.Type
class ServiceMeshType
include Google::Apis::Core::Hashable
# A 7 character code matching `^IST[0-9]`4`$` or `^ASM[0-9]`4`$`, intended to
# uniquely identify the message type. (e.g. "IST0001" is mapped to the "
# InternalError" message type.)
# Corresponds to the JSON property `code`
# @return [String]
attr_accessor :code
# A human-readable name for the message type. e.g. "InternalError", "
# PodMissingProxy". This should be the same for all messages of the same type. (
# This corresponds to the `name` field in open-source Istio.)
# Corresponds to the JSON property `displayName`
# @return [String]
attr_accessor :display_name
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@code = args[:code] if args.key?(:code)
@display_name = args[:display_name] if args.key?(:display_name)
end
end
# Request message for `SetIamPolicy` method.
class SetIamPolicyRequest
include Google::Apis::Core::Hashable
# An Identity and Access Management (IAM) policy, which specifies access
# controls for Google Cloud resources. A `Policy` is a collection of `bindings`.
# A `binding` binds one or more `members`, or principals, to a single `role`.
# Principals can be user accounts, service accounts, Google groups, and domains (
# such as G Suite). A `role` is a named list of permissions; each `role` can be
# an IAM predefined role or a user-created custom role. For some types of Google
# Cloud resources, a `binding` can also specify a `condition`, which is a
# logical expression that allows access to a resource only if the expression
# evaluates to `true`. A condition can add constraints based on attributes of
# the request, the resource, or both. To learn which resources support
# conditions in their IAM policies, see the [IAM documentation](https://cloud.
# google.com/iam/help/conditions/resource-policies). **JSON example:** ` "
# bindings": [ ` "role": "roles/resourcemanager.organizationAdmin", "members": [
# "user:mike@example.com", "group:admins@example.com", "domain:google.com", "
# serviceAccount:my-project-id@appspot.gserviceaccount.com" ] `, ` "role": "
# roles/resourcemanager.organizationViewer", "members": [ "user:eve@example.com"
# ], "condition": ` "title": "expirable access", "description": "Does not grant
# access after Sep 2020", "expression": "request.time < timestamp('2020-10-01T00:
# 00:00.000Z')", ` ` ], "etag": "BwWWja0YfJA=", "version": 3 ` **YAML example:**
# bindings: - members: - user:mike@example.com - group:admins@example.com -
# domain:google.com - serviceAccount:my-project-id@appspot.gserviceaccount.com
# role: roles/resourcemanager.organizationAdmin - members: - user:eve@example.
# com role: roles/resourcemanager.organizationViewer condition: title: expirable
# access description: Does not grant access after Sep 2020 expression: request.
# time < timestamp('2020-10-01T00:00:00.000Z') etag: BwWWja0YfJA= version: 3 For
# a description of IAM and its features, see the [IAM documentation](https://
# cloud.google.com/iam/docs/).
# Corresponds to the JSON property `policy`
# @return [Google::Apis::GkehubV1alpha::Policy]
attr_accessor :policy
# OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only
# the fields in the mask will be modified. If no mask is provided, the following
# default mask is used: `paths: "bindings, etag"`
# Corresponds to the JSON property `updateMask`
# @return [String]
attr_accessor :update_mask
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@policy = args[:policy] if args.key?(:policy)
@update_mask = args[:update_mask] if args.key?(:update_mask)
end
end
# Status specifies state for the subcomponent.
class Status
include Google::Apis::Core::Hashable
# Code specifies AppDevExperienceFeature's subcomponent ready state.
# Corresponds to the JSON property `code`
# @return [String]
attr_accessor :code
# Description is populated if Code is Failed, explaining why it has failed.
# Corresponds to the JSON property `description`
# @return [String]
attr_accessor :description
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@code = args[:code] if args.key?(:code)
@description = args[:description] if args.key?(:description)
end
end
# Request message for `TestIamPermissions` method.
class TestIamPermissionsRequest
include Google::Apis::Core::Hashable
# The set of permissions to check for the `resource`. Permissions with wildcards
# (such as '*' or 'storage.*') are not allowed. For more information see [IAM
# Overview](https://cloud.google.com/iam/docs/overview#permissions).
# Corresponds to the JSON property `permissions`
# @return [Array<String>]
attr_accessor :permissions
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@permissions = args[:permissions] if args.key?(:permissions)
end
end
# Response message for `TestIamPermissions` method.
class TestIamPermissionsResponse
include Google::Apis::Core::Hashable
# A subset of `TestPermissionsRequest.permissions` that the caller is allowed.
# Corresponds to the JSON property `permissions`
# @return [Array<String>]
attr_accessor :permissions
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@permissions = args[:permissions] if args.key?(:permissions)
end
end
# TypeMeta is the type information needed for content unmarshalling of
# Kubernetes resources in the manifest.
class TypeMeta
include Google::Apis::Core::Hashable
# APIVersion of the resource (e.g. v1).
# Corresponds to the JSON property `apiVersion`
# @return [String]
attr_accessor :api_version
# Kind of the resource (e.g. Deployment).
# Corresponds to the JSON property `kind`
# @return [String]
attr_accessor :kind
def initialize(**args)
update!(**args)
end
# Update properties of this object
def update!(**args)
@api_version = args[:api_version] if args.key?(:api_version)
@kind = args[:kind] if args.key?(:kind)
end
end
end
end
end
Reference in New Issue View Git Blame Copy Permalink