|
215 | 215 | ]
|
216 | 216 | },
|
217 | 217 | "delete": {
|
218 |
| - "description": "Deletes the workload. Make sure that workload's direct children are already in a deleted state, otherwise the request will fail with a FAILED_PRECONDITION error. In addition to assuredworkloads.workload.delete permission, the user should also have orgpolicy.policy.set permission on the deleted folder to remove Assured Workloads OrgPolicies.", |
| 218 | + "description": "Deletes the workload. Make sure that workload's direct children are already in a deleted state, otherwise the request will fail with a FAILED_PRECONDITION error.", |
219 | 219 | "flatPath": "v1/organizations/{organizationsId}/locations/{locationsId}/workloads/{workloadsId}",
|
220 | 220 | "httpMethod": "DELETE",
|
221 | 221 | "id": "assuredworkloads.organizations.locations.workloads.delete",
|
|
254 | 254 | ],
|
255 | 255 | "parameters": {
|
256 | 256 | "name": {
|
257 |
| - "description": "Required. The resource name of the Workload to fetch. This is the workloads's relative path in the API, formatted as \"organizations/{organization_id}/locations/{location_id}/workloads/{workload_id}\". For example, \"organizations/123/locations/us-east1/workloads/assured-workload-1\".", |
| 257 | + "description": "Required. The resource name of the Workload to fetch. This is the workload's relative path in the API, formatted as \"organizations/{organization_id}/locations/{location_id}/workloads/{workload_id}\". For example, \"organizations/123/locations/us-east1/workloads/assured-workload-1\".", |
258 | 258 | "location": "path",
|
259 | 259 | "pattern": "^organizations/[^/]+/locations/[^/]+/workloads/[^/]+$",
|
260 | 260 | "required": true,
|
|
519 | 519 | }
|
520 | 520 | }
|
521 | 521 | },
|
522 |
| - "revision": "20230331", |
| 522 | + "revision": "20230406", |
523 | 523 | "rootUrl": "https://assuredworkloads.googleapis.com/",
|
524 | 524 | "schemas": {
|
525 | 525 | "GoogleCloudAssuredworkloadsV1AcknowledgeViolationRequest": {
|
|
580 | 580 | "Assured Workloads For Canada Regions and Support controls",
|
581 | 581 | "International Traffic in Arms Regulations",
|
582 | 582 | "Assured Workloads for Australia Regions and Support controls Available for public preview consumption. Don't create production workloads.",
|
583 |
| - "Assured Workloads for Partners;", |
584 |
| - "Assured Workloads for Israel", |
| 583 | + "Assured Workloads for Partners", |
| 584 | + "Assured Workloads for Israel Regions", |
585 | 585 | "Assured Workloads for Israel Regions",
|
586 | 586 | "Assured Workloads for Canada Protected B regime"
|
587 | 587 | ],
|
|
640 | 640 | "type": "object"
|
641 | 641 | },
|
642 | 642 | "GoogleCloudAssuredworkloadsV1MutatePartnerPermissionsRequest": {
|
643 |
| - "description": "Request for updating permission settings for a partner workload.", |
| 643 | + "description": "Request of updating permission settings for a partner workload.", |
644 | 644 | "id": "GoogleCloudAssuredworkloadsV1MutatePartnerPermissionsRequest",
|
645 | 645 | "properties": {
|
646 | 646 | "etag": {
|
|
675 | 675 | "Unknown restriction type.",
|
676 | 676 | "Allow the use all of all gcp products, irrespective of the compliance posture. This effectively removes gcp.restrictServiceUsage OrgPolicy on the AssuredWorkloads Folder.",
|
677 | 677 | "Based on Workload's compliance regime, allowed list changes. See - https://cloud.google.com/assured-workloads/docs/supported-products for the list of supported resources.",
|
678 |
| - "Similar to ALLOW_COMPLIANT_RESOURCES but adds the list of compliant resources to the existing list of compliant resources. Effective org-policy of the Folder is considered to ensure there is no disruption to the existing customer workflows." |
| 678 | + "Similar to ALLOW_COMPLIANT_RESOURCES but adds the list of compliant resources to the existing list of resources. Effective org-policy of the Folder is considered to ensure there is no disruption to the existing customer workflows." |
679 | 679 | ],
|
680 | 680 | "type": "string"
|
681 | 681 | }
|
|
697 | 697 | "type": "boolean"
|
698 | 698 | },
|
699 | 699 | "acknowledgementTime": {
|
700 |
| - "description": "Optional. Timestamp when this violation was acknowledged last. This will be absent when acknowledged field is marked as false.", |
| 700 | + "description": "Optional. Timestamp when this violation was acknowledged first. Check exception_contexts to find the last time the violation was acknowledged when there are more than one violations. This field will be absent when acknowledged field is marked as false.", |
701 | 701 | "format": "google-datetime",
|
702 | 702 | "type": "string"
|
703 | 703 | },
|
|
928 | 928 | "Assured Workloads For Canada Regions and Support controls",
|
929 | 929 | "International Traffic in Arms Regulations",
|
930 | 930 | "Assured Workloads for Australia Regions and Support controls Available for public preview consumption. Don't create production workloads.",
|
931 |
| - "Assured Workloads for Partners;", |
932 |
| - "Assured Workloads for Israel", |
| 931 | + "Assured Workloads for Partners", |
| 932 | + "Assured Workloads for Israel Regions", |
933 | 933 | "Assured Workloads for Israel Regions",
|
934 | 934 | "Assured Workloads for Canada Protected B regime"
|
935 | 935 | ],
|
|
1005 | 1005 | "enum": [
|
1006 | 1006 | "PARTNER_UNSPECIFIED",
|
1007 | 1007 | "LOCAL_CONTROLS_BY_S3NS",
|
1008 |
| - "SOVEREIGN_CONTROLS_BY_T_SYSTEMS" |
| 1008 | + "SOVEREIGN_CONTROLS_BY_T_SYSTEMS", |
| 1009 | + "SOVEREIGN_CONTROLS_BY_SIA_MINSAIT", |
| 1010 | + "SOVEREIGN_CONTROLS_BY_PSN" |
1009 | 1011 | ],
|
1010 | 1012 | "enumDescriptions": [
|
1011 | 1013 | "",
|
1012 | 1014 | "Enum representing S3NS (Thales) partner.",
|
1013 |
| - "Enum representing T_SYSTEM (TSI) partner." |
| 1015 | + "Enum representing T_SYSTEM (TSI) partner.", |
| 1016 | + "Enum representing SIA_MINSAIT (Indra) partner.", |
| 1017 | + "Enum representing PSN (TIM) partner." |
1014 | 1018 | ],
|
1015 | 1019 | "type": "string"
|
1016 | 1020 | },
|
|
1082 | 1086 | ],
|
1083 | 1087 | "type": "string"
|
1084 | 1088 | },
|
1085 |
| - "ekmProvisioningErrorMessage": { |
| 1089 | + "ekmProvisioningErrorMapping": { |
1086 | 1090 | "description": "Detailed error message if Ekm provisioning fails",
|
| 1091 | + "enum": [ |
| 1092 | + "EKM_PROVISIONING_ERROR_MAPPING_UNSPECIFIED", |
| 1093 | + "INVALID_SERVICE_ACCOUNT", |
| 1094 | + "MISSING_METRICS_SCOPE_ADMIN_PERMISSION", |
| 1095 | + "MISSING_EKM_CONNECTION_ADMIN_PERMISSION" |
| 1096 | + ], |
| 1097 | + "enumDescriptions": [ |
| 1098 | + "Error is unspecified.", |
| 1099 | + "Service account is used is invalid.", |
| 1100 | + "Iam permission monitoring.MetricsScopeAdmin wasn't applied.", |
| 1101 | + "Iam permission cloudkms.ekmConnectionsAdmin wasn't applied." |
| 1102 | + ], |
1087 | 1103 | "type": "string"
|
1088 | 1104 | },
|
1089 | 1105 | "ekmProvisioningState": {
|
|
1106 | 1122 | "type": "object"
|
1107 | 1123 | },
|
1108 | 1124 | "GoogleCloudAssuredworkloadsV1WorkloadKMSSettings": {
|
1109 |
| - "description": "Settings specific to the Key Management Service.", |
| 1125 | + "description": "Settings specific to the Key Management Service. This message is deprecated. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.", |
1110 | 1126 | "id": "GoogleCloudAssuredworkloadsV1WorkloadKMSSettings",
|
1111 | 1127 | "properties": {
|
1112 | 1128 | "nextRotationTime": {
|
|
1161 | 1177 | ],
|
1162 | 1178 | "enumDescriptions": [
|
1163 | 1179 | "Unknown resource type.",
|
1164 |
| - "Deprecated. Existing workloads will continue to support this, but new CreateWorkloadRequests should not specify this as an input value.", |
| 1180 | + "Consumer project. AssuredWorkloads Projects are no longer supported. This field will be ignored only in CreateWorkload requests. ListWorkloads and GetWorkload will continue to provide projects information. Use CONSUMER_FOLDER instead.", |
1165 | 1181 | "Consumer Folder.",
|
1166 | 1182 | "Consumer project containing encryption keys.",
|
1167 | 1183 | "Keyring resource that hosts encryption keys."
|
|
1184 | 1200 | "type": "string"
|
1185 | 1201 | },
|
1186 | 1202 | "resourceType": {
|
1187 |
| - "description": "Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)", |
| 1203 | + "description": "Indicates the type of resource. This field should be specified to correspond the id to the right resource type (CONSUMER_FOLDER or ENCRYPTION_KEYS_PROJECT)", |
1188 | 1204 | "enum": [
|
1189 | 1205 | "RESOURCE_TYPE_UNSPECIFIED",
|
1190 | 1206 | "CONSUMER_PROJECT",
|
|
1194 | 1210 | ],
|
1195 | 1211 | "enumDescriptions": [
|
1196 | 1212 | "Unknown resource type.",
|
1197 |
| - "Deprecated. Existing workloads will continue to support this, but new CreateWorkloadRequests should not specify this as an input value.", |
| 1213 | + "Consumer project. AssuredWorkloads Projects are no longer supported. This field will be ignored only in CreateWorkload requests. ListWorkloads and GetWorkload will continue to provide projects information. Use CONSUMER_FOLDER instead.", |
1198 | 1214 | "Consumer Folder.",
|
1199 | 1215 | "Consumer project containing encryption keys.",
|
1200 | 1216 | "Keyring resource that hosts encryption keys."
|
|
0 commit comments