iampb

package
v1.5.3 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Oct 8, 2025 License: Apache-2.0 Imports: 14 Imported by: 0

Documentation

Index

Constants

View Source
const (
	PolicyBindings_CreatePolicyBinding_FullMethodName        = "/google.iam.v3beta.PolicyBindings/CreatePolicyBinding"
	PolicyBindings_GetPolicyBinding_FullMethodName           = "/google.iam.v3beta.PolicyBindings/GetPolicyBinding"
	PolicyBindings_UpdatePolicyBinding_FullMethodName        = "/google.iam.v3beta.PolicyBindings/UpdatePolicyBinding"
	PolicyBindings_DeletePolicyBinding_FullMethodName        = "/google.iam.v3beta.PolicyBindings/DeletePolicyBinding"
	PolicyBindings_ListPolicyBindings_FullMethodName         = "/google.iam.v3beta.PolicyBindings/ListPolicyBindings"
	PolicyBindings_SearchTargetPolicyBindings_FullMethodName = "/google.iam.v3beta.PolicyBindings/SearchTargetPolicyBindings"
)
View Source
const (
	PrincipalAccessBoundaryPolicies_CreatePrincipalAccessBoundaryPolicy_FullMethodName         = "/google.iam.v3beta.PrincipalAccessBoundaryPolicies/CreatePrincipalAccessBoundaryPolicy"
	PrincipalAccessBoundaryPolicies_GetPrincipalAccessBoundaryPolicy_FullMethodName            = "/google.iam.v3beta.PrincipalAccessBoundaryPolicies/GetPrincipalAccessBoundaryPolicy"
	PrincipalAccessBoundaryPolicies_UpdatePrincipalAccessBoundaryPolicy_FullMethodName         = "/google.iam.v3beta.PrincipalAccessBoundaryPolicies/UpdatePrincipalAccessBoundaryPolicy"
	PrincipalAccessBoundaryPolicies_DeletePrincipalAccessBoundaryPolicy_FullMethodName         = "/google.iam.v3beta.PrincipalAccessBoundaryPolicies/DeletePrincipalAccessBoundaryPolicy"
	PrincipalAccessBoundaryPolicies_ListPrincipalAccessBoundaryPolicies_FullMethodName         = "/google.iam.v3beta.PrincipalAccessBoundaryPolicies/ListPrincipalAccessBoundaryPolicies"
	PrincipalAccessBoundaryPolicies_SearchPrincipalAccessBoundaryPolicyBindings_FullMethodName = "/google.iam.v3beta.PrincipalAccessBoundaryPolicies/SearchPrincipalAccessBoundaryPolicyBindings"
)

Variables

View Source
var (
	PolicyBinding_PolicyKind_name = map[int32]string{
		0: "POLICY_KIND_UNSPECIFIED",
		1: "PRINCIPAL_ACCESS_BOUNDARY",
	}
	PolicyBinding_PolicyKind_value = map[string]int32{
		"POLICY_KIND_UNSPECIFIED":   0,
		"PRINCIPAL_ACCESS_BOUNDARY": 1,
	}
)

Enum value maps for PolicyBinding_PolicyKind.

View Source
var (
	PrincipalAccessBoundaryPolicyRule_Effect_name = map[int32]string{
		0: "EFFECT_UNSPECIFIED",
		1: "ALLOW",
	}
	PrincipalAccessBoundaryPolicyRule_Effect_value = map[string]int32{
		"EFFECT_UNSPECIFIED": 0,
		"ALLOW":              1,
	}
)

Enum value maps for PrincipalAccessBoundaryPolicyRule_Effect.

View Source
var File_google_iam_v3beta_operation_metadata_proto protoreflect.FileDescriptor
View Source
var File_google_iam_v3beta_policy_binding_resources_proto protoreflect.FileDescriptor
View Source
var File_google_iam_v3beta_policy_bindings_service_proto protoreflect.FileDescriptor
View Source
var File_google_iam_v3beta_principal_access_boundary_policies_service_proto protoreflect.FileDescriptor
View Source
var File_google_iam_v3beta_principal_access_boundary_policy_resources_proto protoreflect.FileDescriptor
View Source
var PolicyBindings_ServiceDesc = grpc.ServiceDesc{
	ServiceName: "google.iam.v3beta.PolicyBindings",
	HandlerType: (*PolicyBindingsServer)(nil),
	Methods: []grpc.MethodDesc{
		{
			MethodName: "CreatePolicyBinding",
			Handler:    _PolicyBindings_CreatePolicyBinding_Handler,
		},
		{
			MethodName: "GetPolicyBinding",
			Handler:    _PolicyBindings_GetPolicyBinding_Handler,
		},
		{
			MethodName: "UpdatePolicyBinding",
			Handler:    _PolicyBindings_UpdatePolicyBinding_Handler,
		},
		{
			MethodName: "DeletePolicyBinding",
			Handler:    _PolicyBindings_DeletePolicyBinding_Handler,
		},
		{
			MethodName: "ListPolicyBindings",
			Handler:    _PolicyBindings_ListPolicyBindings_Handler,
		},
		{
			MethodName: "SearchTargetPolicyBindings",
			Handler:    _PolicyBindings_SearchTargetPolicyBindings_Handler,
		},
	},
	Streams:  []grpc.StreamDesc{},
	Metadata: "google/iam/v3beta/policy_bindings_service.proto",
}

PolicyBindings_ServiceDesc is the grpc.ServiceDesc for PolicyBindings service. It's only intended for direct use with grpc.RegisterService, and not to be introspected or modified (even as a copy)

View Source
var PrincipalAccessBoundaryPolicies_ServiceDesc = grpc.ServiceDesc{
	ServiceName: "google.iam.v3beta.PrincipalAccessBoundaryPolicies",
	HandlerType: (*PrincipalAccessBoundaryPoliciesServer)(nil),
	Methods: []grpc.MethodDesc{
		{
			MethodName: "CreatePrincipalAccessBoundaryPolicy",
			Handler:    _PrincipalAccessBoundaryPolicies_CreatePrincipalAccessBoundaryPolicy_Handler,
		},
		{
			MethodName: "GetPrincipalAccessBoundaryPolicy",
			Handler:    _PrincipalAccessBoundaryPolicies_GetPrincipalAccessBoundaryPolicy_Handler,
		},
		{
			MethodName: "UpdatePrincipalAccessBoundaryPolicy",
			Handler:    _PrincipalAccessBoundaryPolicies_UpdatePrincipalAccessBoundaryPolicy_Handler,
		},
		{
			MethodName: "DeletePrincipalAccessBoundaryPolicy",
			Handler:    _PrincipalAccessBoundaryPolicies_DeletePrincipalAccessBoundaryPolicy_Handler,
		},
		{
			MethodName: "ListPrincipalAccessBoundaryPolicies",
			Handler:    _PrincipalAccessBoundaryPolicies_ListPrincipalAccessBoundaryPolicies_Handler,
		},
		{
			MethodName: "SearchPrincipalAccessBoundaryPolicyBindings",
			Handler:    _PrincipalAccessBoundaryPolicies_SearchPrincipalAccessBoundaryPolicyBindings_Handler,
		},
	},
	Streams:  []grpc.StreamDesc{},
	Metadata: "google/iam/v3beta/principal_access_boundary_policies_service.proto",
}

PrincipalAccessBoundaryPolicies_ServiceDesc is the grpc.ServiceDesc for PrincipalAccessBoundaryPolicies service. It's only intended for direct use with grpc.RegisterService, and not to be introspected or modified (even as a copy)

Functions

func RegisterPolicyBindingsServer

func RegisterPolicyBindingsServer(s grpc.ServiceRegistrar, srv PolicyBindingsServer)

func RegisterPrincipalAccessBoundaryPoliciesServer

func RegisterPrincipalAccessBoundaryPoliciesServer(s grpc.ServiceRegistrar, srv PrincipalAccessBoundaryPoliciesServer)

Types

type CreatePolicyBindingRequest

type CreatePolicyBindingRequest struct {

	// Required. The parent resource where this policy binding will be created.
	// The binding parent is the closest Resource Manager resource (project,
	// folder or organization) to the binding target.
	//
	// Format:
	//
	// * `projects/{project_id}/locations/{location}`
	// * `projects/{project_number}/locations/{location}`
	// * `folders/{folder_id}/locations/{location}`
	// * `organizations/{organization_id}/locations/{location}`
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Required. The ID to use for the policy binding, which will become the final
	// component of the policy binding's resource name.
	//
	// This value must start with a lowercase letter followed by up to 62
	// lowercase letters, numbers, hyphens, or dots. Pattern,
	// /[a-z][a-z0-9-\.]{2,62}/.
	PolicyBindingId string `protobuf:"bytes,2,opt,name=policy_binding_id,json=policyBindingId,proto3" json:"policy_binding_id,omitempty"`
	// Required. The policy binding to create.
	PolicyBinding *PolicyBinding `protobuf:"bytes,3,opt,name=policy_binding,json=policyBinding,proto3" json:"policy_binding,omitempty"`
	// Optional. If set, validate the request and preview the creation, but do not
	// actually post it.
	ValidateOnly bool `protobuf:"varint,4,opt,name=validate_only,json=validateOnly,proto3" json:"validate_only,omitempty"`
	// contains filtered or unexported fields
}

Request message for CreatePolicyBinding method.

func (*CreatePolicyBindingRequest) Descriptor deprecated

func (*CreatePolicyBindingRequest) Descriptor() ([]byte, []int)

Deprecated: Use CreatePolicyBindingRequest.ProtoReflect.Descriptor instead.

func (*CreatePolicyBindingRequest) GetParent

func (x *CreatePolicyBindingRequest) GetParent() string

func (*CreatePolicyBindingRequest) GetPolicyBinding

func (x *CreatePolicyBindingRequest) GetPolicyBinding() *PolicyBinding

func (*CreatePolicyBindingRequest) GetPolicyBindingId

func (x *CreatePolicyBindingRequest) GetPolicyBindingId() string

func (*CreatePolicyBindingRequest) GetValidateOnly

func (x *CreatePolicyBindingRequest) GetValidateOnly() bool

func (*CreatePolicyBindingRequest) ProtoMessage

func (*CreatePolicyBindingRequest) ProtoMessage()

func (*CreatePolicyBindingRequest) ProtoReflect

func (*CreatePolicyBindingRequest) Reset

func (x *CreatePolicyBindingRequest) Reset()

func (*CreatePolicyBindingRequest) String

func (x *CreatePolicyBindingRequest) String() string

type CreatePrincipalAccessBoundaryPolicyRequest

type CreatePrincipalAccessBoundaryPolicyRequest struct {

	// Required. The parent resource where this principal access boundary policy
	// will be created. Only organizations are supported.
	//
	// Format:
	//
	//	`organizations/{organization_id}/locations/{location}`
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Required. The ID to use for the principal access boundary policy, which
	// will become the final component of the principal access boundary policy's
	// resource name.
	//
	// This value must start with a lowercase letter followed by up to 62
	// lowercase letters, numbers, hyphens, or dots. Pattern,
	// /[a-z][a-z0-9-\.]{2,62}/.
	PrincipalAccessBoundaryPolicyId string `` /* 160-byte string literal not displayed */
	// Required. The principal access boundary policy to create.
	PrincipalAccessBoundaryPolicy *PrincipalAccessBoundaryPolicy `` /* 152-byte string literal not displayed */
	// Optional. If set, validate the request and preview the creation, but do not
	// actually post it.
	ValidateOnly bool `protobuf:"varint,4,opt,name=validate_only,json=validateOnly,proto3" json:"validate_only,omitempty"`
	// contains filtered or unexported fields
}

Request message for CreatePrincipalAccessBoundaryPolicyRequest method.

func (*CreatePrincipalAccessBoundaryPolicyRequest) Descriptor deprecated

Deprecated: Use CreatePrincipalAccessBoundaryPolicyRequest.ProtoReflect.Descriptor instead.

func (*CreatePrincipalAccessBoundaryPolicyRequest) GetParent

func (*CreatePrincipalAccessBoundaryPolicyRequest) GetPrincipalAccessBoundaryPolicy

func (x *CreatePrincipalAccessBoundaryPolicyRequest) GetPrincipalAccessBoundaryPolicy() *PrincipalAccessBoundaryPolicy

func (*CreatePrincipalAccessBoundaryPolicyRequest) GetPrincipalAccessBoundaryPolicyId

func (x *CreatePrincipalAccessBoundaryPolicyRequest) GetPrincipalAccessBoundaryPolicyId() string

func (*CreatePrincipalAccessBoundaryPolicyRequest) GetValidateOnly

func (x *CreatePrincipalAccessBoundaryPolicyRequest) GetValidateOnly() bool

func (*CreatePrincipalAccessBoundaryPolicyRequest) ProtoMessage

func (*CreatePrincipalAccessBoundaryPolicyRequest) ProtoReflect

func (*CreatePrincipalAccessBoundaryPolicyRequest) Reset

func (*CreatePrincipalAccessBoundaryPolicyRequest) String

type DeletePolicyBindingRequest

type DeletePolicyBindingRequest struct {

	// Required. The name of the policy binding to delete.
	//
	// Format:
	//
	// * `projects/{project_id}/locations/{location}/policyBindings/{policy_binding_id}`
	// * `projects/{project_number}/locations/{location}/policyBindings/{policy_binding_id}`
	// * `folders/{folder_id}/locations/{location}/policyBindings/{policy_binding_id}`
	// * `organizations/{organization_id}/locations/{location}/policyBindings/{policy_binding_id}`
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Optional. The etag of the policy binding.
	// If this is provided, it must match the server's etag.
	Etag string `protobuf:"bytes,2,opt,name=etag,proto3" json:"etag,omitempty"`
	// Optional. If set, validate the request and preview the deletion, but do not
	// actually post it.
	ValidateOnly bool `protobuf:"varint,3,opt,name=validate_only,json=validateOnly,proto3" json:"validate_only,omitempty"`
	// contains filtered or unexported fields
}

Request message for DeletePolicyBinding method.

func (*DeletePolicyBindingRequest) Descriptor deprecated

func (*DeletePolicyBindingRequest) Descriptor() ([]byte, []int)

Deprecated: Use DeletePolicyBindingRequest.ProtoReflect.Descriptor instead.

func (*DeletePolicyBindingRequest) GetEtag

func (x *DeletePolicyBindingRequest) GetEtag() string

func (*DeletePolicyBindingRequest) GetName

func (x *DeletePolicyBindingRequest) GetName() string

func (*DeletePolicyBindingRequest) GetValidateOnly

func (x *DeletePolicyBindingRequest) GetValidateOnly() bool

func (*DeletePolicyBindingRequest) ProtoMessage

func (*DeletePolicyBindingRequest) ProtoMessage()

func (*DeletePolicyBindingRequest) ProtoReflect

func (*DeletePolicyBindingRequest) Reset

func (x *DeletePolicyBindingRequest) Reset()

func (*DeletePolicyBindingRequest) String

func (x *DeletePolicyBindingRequest) String() string

type DeletePrincipalAccessBoundaryPolicyRequest

type DeletePrincipalAccessBoundaryPolicyRequest struct {

	// Required. The name of the principal access boundary policy to delete.
	//
	// Format:
	//
	//	`organizations/{organization_id}/locations/{location}/principalAccessBoundaryPolicies/{principal_access_boundary_policy_id}`
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Optional. The etag of the principal access boundary policy.
	// If this is provided, it must match the server's etag.
	Etag string `protobuf:"bytes,2,opt,name=etag,proto3" json:"etag,omitempty"`
	// Optional. If set, validate the request and preview the deletion, but do not
	// actually post it.
	ValidateOnly bool `protobuf:"varint,3,opt,name=validate_only,json=validateOnly,proto3" json:"validate_only,omitempty"`
	// Optional. If set to true, the request will force the deletion of the policy
	// even if the policy is referenced in policy bindings.
	Force bool `protobuf:"varint,4,opt,name=force,proto3" json:"force,omitempty"`
	// contains filtered or unexported fields
}

Request message for DeletePrincipalAccessBoundaryPolicy method.

func (*DeletePrincipalAccessBoundaryPolicyRequest) Descriptor deprecated

Deprecated: Use DeletePrincipalAccessBoundaryPolicyRequest.ProtoReflect.Descriptor instead.

func (*DeletePrincipalAccessBoundaryPolicyRequest) GetEtag

func (*DeletePrincipalAccessBoundaryPolicyRequest) GetForce

func (*DeletePrincipalAccessBoundaryPolicyRequest) GetName

func (*DeletePrincipalAccessBoundaryPolicyRequest) GetValidateOnly

func (x *DeletePrincipalAccessBoundaryPolicyRequest) GetValidateOnly() bool

func (*DeletePrincipalAccessBoundaryPolicyRequest) ProtoMessage

func (*DeletePrincipalAccessBoundaryPolicyRequest) ProtoReflect

func (*DeletePrincipalAccessBoundaryPolicyRequest) Reset

func (*DeletePrincipalAccessBoundaryPolicyRequest) String

type GetPolicyBindingRequest

type GetPolicyBindingRequest struct {

	// Required. The name of the policy binding to retrieve.
	//
	// Format:
	//
	// * `projects/{project_id}/locations/{location}/policyBindings/{policy_binding_id}`
	// * `projects/{project_number}/locations/{location}/policyBindings/{policy_binding_id}`
	// * `folders/{folder_id}/locations/{location}/policyBindings/{policy_binding_id}`
	// * `organizations/{organization_id}/locations/{location}/policyBindings/{policy_binding_id}`
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

Request message for GetPolicyBinding method.

func (*GetPolicyBindingRequest) Descriptor deprecated

func (*GetPolicyBindingRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetPolicyBindingRequest.ProtoReflect.Descriptor instead.

func (*GetPolicyBindingRequest) GetName

func (x *GetPolicyBindingRequest) GetName() string

func (*GetPolicyBindingRequest) ProtoMessage

func (*GetPolicyBindingRequest) ProtoMessage()

func (*GetPolicyBindingRequest) ProtoReflect

func (x *GetPolicyBindingRequest) ProtoReflect() protoreflect.Message

func (*GetPolicyBindingRequest) Reset

func (x *GetPolicyBindingRequest) Reset()

func (*GetPolicyBindingRequest) String

func (x *GetPolicyBindingRequest) String() string

type GetPrincipalAccessBoundaryPolicyRequest

type GetPrincipalAccessBoundaryPolicyRequest struct {

	// Required. The name of the principal access boundary policy to retrieve.
	//
	// Format:
	//
	//	`organizations/{organization_id}/locations/{location}/principalAccessBoundaryPolicies/{principal_access_boundary_policy_id}`
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

Request message for GetPrincipalAccessBoundaryPolicy method.

func (*GetPrincipalAccessBoundaryPolicyRequest) Descriptor deprecated

func (*GetPrincipalAccessBoundaryPolicyRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetPrincipalAccessBoundaryPolicyRequest.ProtoReflect.Descriptor instead.

func (*GetPrincipalAccessBoundaryPolicyRequest) GetName

func (*GetPrincipalAccessBoundaryPolicyRequest) ProtoMessage

func (*GetPrincipalAccessBoundaryPolicyRequest) ProtoReflect

func (*GetPrincipalAccessBoundaryPolicyRequest) Reset

func (*GetPrincipalAccessBoundaryPolicyRequest) String

type ListPolicyBindingsRequest

type ListPolicyBindingsRequest struct {

	// Required. The parent resource, which owns the collection of policy
	// bindings.
	//
	// Format:
	//
	// * `projects/{project_id}/locations/{location}`
	// * `projects/{project_number}/locations/{location}`
	// * `folders/{folder_id}/locations/{location}`
	// * `organizations/{organization_id}/locations/{location}`
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Optional. The maximum number of policy bindings to return. The service may
	// return fewer than this value.
	//
	// If unspecified, at most 50 policy bindings will be returned.
	// The maximum value is 1000; values above 1000 will be coerced to 1000.
	PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// Optional. A page token, received from a previous `ListPolicyBindings` call.
	// Provide this to retrieve the subsequent page.
	//
	// When paginating, all other parameters provided to `ListPolicyBindings` must
	// match the call that provided the page token.
	PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// Optional. An expression for filtering the results of the request. Filter
	// rules are case insensitive. Some eligible fields for filtering are:
	//
	// + `target`
	// + `policy`
	//
	// Some examples of filter queries:
	//
	// * `target:ex*`: The binding target's name starts with "ex".
	// * `target:example`: The binding target's name is `example`.
	// * `policy:example`: The binding policy's name is `example`.
	Filter string `protobuf:"bytes,4,opt,name=filter,proto3" json:"filter,omitempty"`
	// contains filtered or unexported fields
}

Request message for ListPolicyBindings method.

func (*ListPolicyBindingsRequest) Descriptor deprecated

func (*ListPolicyBindingsRequest) Descriptor() ([]byte, []int)

Deprecated: Use ListPolicyBindingsRequest.ProtoReflect.Descriptor instead.

func (*ListPolicyBindingsRequest) GetFilter

func (x *ListPolicyBindingsRequest) GetFilter() string

func (*ListPolicyBindingsRequest) GetPageSize

func (x *ListPolicyBindingsRequest) GetPageSize() int32

func (*ListPolicyBindingsRequest) GetPageToken

func (x *ListPolicyBindingsRequest) GetPageToken() string

func (*ListPolicyBindingsRequest) GetParent

func (x *ListPolicyBindingsRequest) GetParent() string

func (*ListPolicyBindingsRequest) ProtoMessage

func (*ListPolicyBindingsRequest) ProtoMessage()

func (*ListPolicyBindingsRequest) ProtoReflect

func (*ListPolicyBindingsRequest) Reset

func (x *ListPolicyBindingsRequest) Reset()

func (*ListPolicyBindingsRequest) String

func (x *ListPolicyBindingsRequest) String() string

type ListPolicyBindingsResponse

type ListPolicyBindingsResponse struct {

	// The policy bindings from the specified parent.
	PolicyBindings []*PolicyBinding `protobuf:"bytes,1,rep,name=policy_bindings,json=policyBindings,proto3" json:"policy_bindings,omitempty"`
	// Optional. A token, which can be sent as `page_token` to retrieve the next
	// page. If this field is omitted, there are no subsequent pages.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

Response message for ListPolicyBindings method.

func (*ListPolicyBindingsResponse) Descriptor deprecated

func (*ListPolicyBindingsResponse) Descriptor() ([]byte, []int)

Deprecated: Use ListPolicyBindingsResponse.ProtoReflect.Descriptor instead.

func (*ListPolicyBindingsResponse) GetNextPageToken

func (x *ListPolicyBindingsResponse) GetNextPageToken() string

func (*ListPolicyBindingsResponse) GetPolicyBindings

func (x *ListPolicyBindingsResponse) GetPolicyBindings() []*PolicyBinding

func (*ListPolicyBindingsResponse) ProtoMessage

func (*ListPolicyBindingsResponse) ProtoMessage()

func (*ListPolicyBindingsResponse) ProtoReflect

func (*ListPolicyBindingsResponse) Reset

func (x *ListPolicyBindingsResponse) Reset()

func (*ListPolicyBindingsResponse) String

func (x *ListPolicyBindingsResponse) String() string

type ListPrincipalAccessBoundaryPoliciesRequest

type ListPrincipalAccessBoundaryPoliciesRequest struct {

	// Required. The parent resource, which owns the collection of principal
	// access boundary policies.
	//
	// Format:
	//
	//	`organizations/{organization_id}/locations/{location}`
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Optional. The maximum number of principal access boundary policies to
	// return. The service may return fewer than this value.
	//
	// If unspecified, at most 50 principal access boundary policies will be
	// returned. The maximum value is 1000; values above 1000 will be coerced to
	// 1000.
	PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// Optional. A page token, received from a previous
	// `ListPrincipalAccessBoundaryPolicies` call. Provide this to retrieve the
	// subsequent page.
	//
	// When paginating, all other parameters provided to
	// `ListPrincipalAccessBoundaryPolicies` must match the call that provided the
	// page token.
	PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// contains filtered or unexported fields
}

Request message for ListPrincipalAccessBoundaryPolicies method.

func (*ListPrincipalAccessBoundaryPoliciesRequest) Descriptor deprecated

Deprecated: Use ListPrincipalAccessBoundaryPoliciesRequest.ProtoReflect.Descriptor instead.

func (*ListPrincipalAccessBoundaryPoliciesRequest) GetPageSize

func (*ListPrincipalAccessBoundaryPoliciesRequest) GetPageToken

func (*ListPrincipalAccessBoundaryPoliciesRequest) GetParent

func (*ListPrincipalAccessBoundaryPoliciesRequest) ProtoMessage

func (*ListPrincipalAccessBoundaryPoliciesRequest) ProtoReflect

func (*ListPrincipalAccessBoundaryPoliciesRequest) Reset

func (*ListPrincipalAccessBoundaryPoliciesRequest) String

type ListPrincipalAccessBoundaryPoliciesResponse

type ListPrincipalAccessBoundaryPoliciesResponse struct {

	// The principal access boundary policies from the specified parent.
	PrincipalAccessBoundaryPolicies []*PrincipalAccessBoundaryPolicy `` /* 158-byte string literal not displayed */
	// Optional. A token, which can be sent as `page_token` to retrieve the next
	// page. If this field is omitted, there are no subsequent pages.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

Response message for ListPrincipalAccessBoundaryPolicies method.

func (*ListPrincipalAccessBoundaryPoliciesResponse) Descriptor deprecated

Deprecated: Use ListPrincipalAccessBoundaryPoliciesResponse.ProtoReflect.Descriptor instead.

func (*ListPrincipalAccessBoundaryPoliciesResponse) GetNextPageToken

func (*ListPrincipalAccessBoundaryPoliciesResponse) GetPrincipalAccessBoundaryPolicies

func (x *ListPrincipalAccessBoundaryPoliciesResponse) GetPrincipalAccessBoundaryPolicies() []*PrincipalAccessBoundaryPolicy

func (*ListPrincipalAccessBoundaryPoliciesResponse) ProtoMessage

func (*ListPrincipalAccessBoundaryPoliciesResponse) ProtoReflect

func (*ListPrincipalAccessBoundaryPoliciesResponse) Reset

func (*ListPrincipalAccessBoundaryPoliciesResponse) String

type OperationMetadata

type OperationMetadata struct {

	// Output only. The time the operation was created.
	CreateTime *timestamppb.Timestamp `protobuf:"bytes,1,opt,name=create_time,json=createTime,proto3" json:"create_time,omitempty"`
	// Output only. The time the operation finished running.
	EndTime *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=end_time,json=endTime,proto3" json:"end_time,omitempty"`
	// Output only. Server-defined resource path for the target of the
	Target string `protobuf:"bytes,3,opt,name=target,proto3" json:"target,omitempty"`
	// Output only. Name of the verb executed by the operation.
	Verb string `protobuf:"bytes,4,opt,name=verb,proto3" json:"verb,omitempty"`
	// Output only. Human-readable status of the operation, if any.
	StatusMessage string `protobuf:"bytes,5,opt,name=status_message,json=statusMessage,proto3" json:"status_message,omitempty"`
	// Output only. Identifies whether the user has requested cancellation
	// of the operation. Operations that have successfully been cancelled
	// have [Operation.error][] value with a
	// [google.rpc.Status.code][google.rpc.Status.code] of 1, corresponding to
	// `Code.CANCELLED`.
	RequestedCancellation bool `protobuf:"varint,6,opt,name=requested_cancellation,json=requestedCancellation,proto3" json:"requested_cancellation,omitempty"`
	// Output only. API version used to start the operation.
	ApiVersion string `protobuf:"bytes,7,opt,name=api_version,json=apiVersion,proto3" json:"api_version,omitempty"`
	// contains filtered or unexported fields
}

Represents the metadata of the long-running operation.

func (*OperationMetadata) Descriptor deprecated

func (*OperationMetadata) Descriptor() ([]byte, []int)

Deprecated: Use OperationMetadata.ProtoReflect.Descriptor instead.

func (*OperationMetadata) GetApiVersion

func (x *OperationMetadata) GetApiVersion() string

func (*OperationMetadata) GetCreateTime

func (x *OperationMetadata) GetCreateTime() *timestamppb.Timestamp

func (*OperationMetadata) GetEndTime

func (x *OperationMetadata) GetEndTime() *timestamppb.Timestamp

func (*OperationMetadata) GetRequestedCancellation

func (x *OperationMetadata) GetRequestedCancellation() bool

func (*OperationMetadata) GetStatusMessage

func (x *OperationMetadata) GetStatusMessage() string

func (*OperationMetadata) GetTarget

func (x *OperationMetadata) GetTarget() string

func (*OperationMetadata) GetVerb

func (x *OperationMetadata) GetVerb() string

func (*OperationMetadata) ProtoMessage

func (*OperationMetadata) ProtoMessage()

func (*OperationMetadata) ProtoReflect

func (x *OperationMetadata) ProtoReflect() protoreflect.Message

func (*OperationMetadata) Reset

func (x *OperationMetadata) Reset()

func (*OperationMetadata) String

func (x *OperationMetadata) String() string

type PolicyBinding

type PolicyBinding struct {

	// Identifier. The name of the policy binding, in the format
	// `{binding_parent/locations/{location}/policyBindings/{policy_binding_id}`.
	// The binding parent is the closest Resource Manager resource (project,
	// folder, or organization) to the binding target.
	//
	// Format:
	//
	// * `projects/{project_id}/locations/{location}/policyBindings/{policy_binding_id}`
	// * `projects/{project_number}/locations/{location}/policyBindings/{policy_binding_id}`
	// * `folders/{folder_id}/locations/{location}/policyBindings/{policy_binding_id}`
	// * `organizations/{organization_id}/locations/{location}/policyBindings/{policy_binding_id}`
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Output only. The globally unique ID of the policy binding. Assigned when
	// the policy binding is created.
	Uid string `protobuf:"bytes,2,opt,name=uid,proto3" json:"uid,omitempty"`
	// Optional. The etag for the policy binding.
	// If this is provided on update, it must match the server's etag.
	Etag string `protobuf:"bytes,3,opt,name=etag,proto3" json:"etag,omitempty"`
	// Optional. The description of the policy binding. Must be less than or equal
	// to 63 characters.
	DisplayName string `protobuf:"bytes,4,opt,name=display_name,json=displayName,proto3" json:"display_name,omitempty"`
	// Optional. User-defined annotations. See
	// https://google.aip.dev/148#annotations for more details such as format and
	// size limitations
	Annotations map[string]string `` /* 163-byte string literal not displayed */
	// Required. Immutable. Target is the full resource name of the resource to
	// which the policy will be bound. Immutable once set.
	Target *PolicyBinding_Target `protobuf:"bytes,6,opt,name=target,proto3" json:"target,omitempty"`
	// Immutable. The kind of the policy to attach in this binding. This field
	// must be one of the following:
	//
	// - Left empty (will be automatically set to the policy kind)
	// - The input policy kind
	PolicyKind PolicyBinding_PolicyKind `` /* 141-byte string literal not displayed */
	// Required. Immutable. The resource name of the policy to be bound. The
	// binding parent and policy must belong to the same organization.
	Policy string `protobuf:"bytes,7,opt,name=policy,proto3" json:"policy,omitempty"`
	// Output only. The globally unique ID of the policy to be bound.
	PolicyUid string `protobuf:"bytes,12,opt,name=policy_uid,json=policyUid,proto3" json:"policy_uid,omitempty"`
	// Optional. The condition to apply to the policy binding. When set, the
	// `expression` field in the `Expr` must include from 1 to 10 subexpressions,
	// joined by the
	// "||"(Logical OR), "&&"(Logical AND) or "!"(Logical NOT) operators and
	// cannot contain more than 250 characters.
	//
	// The condition is currently only supported when bound to policies of kind
	// principal access boundary.
	//
	// When the bound policy is a principal access boundary policy, the only
	// supported attributes in any subexpression are `principal.type` and
	// `principal.subject`. An example expression is: "principal.type ==
	// 'iam.googleapis.com/ServiceAccount'" or "principal.subject ==
	// 'bob@example.com'".
	//
	// Allowed operations for `principal.subject`:
	//
	// - `principal.subject == <principal subject string>`
	// - `principal.subject != <principal subject string>`
	// - `principal.subject in [<list of principal subjects>]`
	// - `principal.subject.startsWith(<string>)`
	// - `principal.subject.endsWith(<string>)`
	//
	// Allowed operations for `principal.type`:
	//
	// - `principal.type == <principal type string>`
	// - `principal.type != <principal type string>`
	// - `principal.type in [<list of principal types>]`
	//
	// Supported principal types are Workspace, Workforce Pool, Workload Pool and
	// Service Account. Allowed string must be one of:
	//
	// - iam.googleapis.com/WorkspaceIdentity
	// - iam.googleapis.com/WorkforcePoolIdentity
	// - iam.googleapis.com/WorkloadPoolIdentity
	// - iam.googleapis.com/ServiceAccount
	Condition *expr.Expr `protobuf:"bytes,8,opt,name=condition,proto3" json:"condition,omitempty"`
	// Output only. The time when the policy binding was created.
	CreateTime *timestamppb.Timestamp `protobuf:"bytes,9,opt,name=create_time,json=createTime,proto3" json:"create_time,omitempty"`
	// Output only. The time when the policy binding was most recently updated.
	UpdateTime *timestamppb.Timestamp `protobuf:"bytes,10,opt,name=update_time,json=updateTime,proto3" json:"update_time,omitempty"`
	// contains filtered or unexported fields
}

IAM policy binding resource.

func (*PolicyBinding) Descriptor deprecated

func (*PolicyBinding) Descriptor() ([]byte, []int)

Deprecated: Use PolicyBinding.ProtoReflect.Descriptor instead.

func (*PolicyBinding) GetAnnotations

func (x *PolicyBinding) GetAnnotations() map[string]string

func (*PolicyBinding) GetCondition

func (x *PolicyBinding) GetCondition() *expr.Expr

func (*PolicyBinding) GetCreateTime

func (x *PolicyBinding) GetCreateTime() *timestamppb.Timestamp

func (*PolicyBinding) GetDisplayName

func (x *PolicyBinding) GetDisplayName() string

func (*PolicyBinding) GetEtag

func (x *PolicyBinding) GetEtag() string

func (*PolicyBinding) GetName

func (x *PolicyBinding) GetName() string

func (*PolicyBinding) GetPolicy

func (x *PolicyBinding) GetPolicy() string

func (*PolicyBinding) GetPolicyKind

func (x *PolicyBinding) GetPolicyKind() PolicyBinding_PolicyKind

func (*PolicyBinding) GetPolicyUid

func (x *PolicyBinding) GetPolicyUid() string

func (*PolicyBinding) GetTarget

func (x *PolicyBinding) GetTarget() *PolicyBinding_Target

func (*PolicyBinding) GetUid

func (x *PolicyBinding) GetUid() string

func (*PolicyBinding) GetUpdateTime

func (x *PolicyBinding) GetUpdateTime() *timestamppb.Timestamp

func (*PolicyBinding) ProtoMessage

func (*PolicyBinding) ProtoMessage()

func (*PolicyBinding) ProtoReflect

func (x *PolicyBinding) ProtoReflect() protoreflect.Message

func (*PolicyBinding) Reset

func (x *PolicyBinding) Reset()

func (*PolicyBinding) String

func (x *PolicyBinding) String() string

type PolicyBinding_PolicyKind

type PolicyBinding_PolicyKind int32

Different policy kinds supported in this binding.

const (
	// Unspecified policy kind; Not a valid state
	PolicyBinding_POLICY_KIND_UNSPECIFIED PolicyBinding_PolicyKind = 0
	// Principal access boundary policy kind
	PolicyBinding_PRINCIPAL_ACCESS_BOUNDARY PolicyBinding_PolicyKind = 1
)

func (PolicyBinding_PolicyKind) Descriptor

func (PolicyBinding_PolicyKind) Enum

func (PolicyBinding_PolicyKind) EnumDescriptor deprecated

func (PolicyBinding_PolicyKind) EnumDescriptor() ([]byte, []int)

Deprecated: Use PolicyBinding_PolicyKind.Descriptor instead.

func (PolicyBinding_PolicyKind) Number

func (PolicyBinding_PolicyKind) String

func (x PolicyBinding_PolicyKind) String() string

func (PolicyBinding_PolicyKind) Type

type PolicyBinding_Target

type PolicyBinding_Target struct {

	// The different types of targets that can be bound to a policy.
	//
	// Types that are assignable to Target:
	//
	//	*PolicyBinding_Target_PrincipalSet
	Target isPolicyBinding_Target_Target `protobuf_oneof:"target"`
	// contains filtered or unexported fields
}

Target is the full resource name of the resource to which the policy will be bound. Immutable once set.

func (*PolicyBinding_Target) Descriptor deprecated

func (*PolicyBinding_Target) Descriptor() ([]byte, []int)

Deprecated: Use PolicyBinding_Target.ProtoReflect.Descriptor instead.

func (*PolicyBinding_Target) GetPrincipalSet

func (x *PolicyBinding_Target) GetPrincipalSet() string

func (*PolicyBinding_Target) GetTarget

func (m *PolicyBinding_Target) GetTarget() isPolicyBinding_Target_Target

func (*PolicyBinding_Target) ProtoMessage

func (*PolicyBinding_Target) ProtoMessage()

func (*PolicyBinding_Target) ProtoReflect

func (x *PolicyBinding_Target) ProtoReflect() protoreflect.Message

func (*PolicyBinding_Target) Reset

func (x *PolicyBinding_Target) Reset()

func (*PolicyBinding_Target) String

func (x *PolicyBinding_Target) String() string

type PolicyBinding_Target_PrincipalSet

type PolicyBinding_Target_PrincipalSet struct {
	// Immutable. Full Resource Name used for principal access boundary policy
	// bindings. The principal set must be directly parented by the policy
	// binding's parent or same as the parent if the target is a
	// project/folder/organization.
	//
	// Examples:
	// * For binding's parented by an organization:
	//   - Organization:
	//     `//cloudresourcemanager.googleapis.com/organizations/ORGANIZATION_ID`
	//   - Workforce Identity:
	//     `//iam.googleapis.com/locations/global/workforcePools/WORKFORCE_POOL_ID`
	//   - Workspace Identity:
	//     `//iam.googleapis.com/locations/global/workspace/WORKSPACE_ID`
	//
	// * For binding's parented by a folder:
	//   - Folder:
	//     `//cloudresourcemanager.googleapis.com/folders/FOLDER_ID`
	//
	// * For binding's parented by a project:
	//   - Project:
	//   - `//cloudresourcemanager.googleapis.com/projects/PROJECT_NUMBER`
	//   - `//cloudresourcemanager.googleapis.com/projects/PROJECT_ID`
	//   - Workload Identity Pool:
	//     `//iam.googleapis.com/projects/PROJECT_NUMBER/locations/LOCATION/workloadIdentityPools/WORKLOAD_POOL_ID`
	PrincipalSet string `protobuf:"bytes,1,opt,name=principal_set,json=principalSet,proto3,oneof"`
}

type PolicyBindingsClient

type PolicyBindingsClient interface {
	// Creates a policy binding and returns a long-running operation.
	// Callers will need the IAM permissions on both the policy and target.
	// Once the binding is created, the policy is applied to the target.
	CreatePolicyBinding(ctx context.Context, in *CreatePolicyBindingRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Gets a policy binding.
	GetPolicyBinding(ctx context.Context, in *GetPolicyBindingRequest, opts ...grpc.CallOption) (*PolicyBinding, error)
	// Updates a policy binding and returns a long-running operation.
	// Callers will need the IAM permissions on the policy and target in the
	// binding to update, and the IAM permission to remove the existing policy
	// from the binding. Target is immutable and cannot be updated. Once the
	// binding is updated, the new policy is applied to the target.
	UpdatePolicyBinding(ctx context.Context, in *UpdatePolicyBindingRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Deletes a policy binding and returns a long-running operation.
	// Callers will need the IAM permissions on both the policy and target.
	// Once the binding is deleted, the policy no longer applies to the target.
	DeletePolicyBinding(ctx context.Context, in *DeletePolicyBindingRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Lists policy bindings.
	ListPolicyBindings(ctx context.Context, in *ListPolicyBindingsRequest, opts ...grpc.CallOption) (*ListPolicyBindingsResponse, error)
	// Search policy bindings by target. Returns all policy binding objects bound
	// directly to target.
	SearchTargetPolicyBindings(ctx context.Context, in *SearchTargetPolicyBindingsRequest, opts ...grpc.CallOption) (*SearchTargetPolicyBindingsResponse, error)
}

PolicyBindingsClient is the client API for PolicyBindings service.

For semantics around ctx use and closing/ending streaming RPCs, please refer to https://pkg.go.dev/google.golang.org/grpc/?tab=doc#ClientConn.NewStream.

type PolicyBindingsServer

type PolicyBindingsServer interface {
	// Creates a policy binding and returns a long-running operation.
	// Callers will need the IAM permissions on both the policy and target.
	// Once the binding is created, the policy is applied to the target.
	CreatePolicyBinding(context.Context, *CreatePolicyBindingRequest) (*longrunningpb.Operation, error)
	// Gets a policy binding.
	GetPolicyBinding(context.Context, *GetPolicyBindingRequest) (*PolicyBinding, error)
	// Updates a policy binding and returns a long-running operation.
	// Callers will need the IAM permissions on the policy and target in the
	// binding to update, and the IAM permission to remove the existing policy
	// from the binding. Target is immutable and cannot be updated. Once the
	// binding is updated, the new policy is applied to the target.
	UpdatePolicyBinding(context.Context, *UpdatePolicyBindingRequest) (*longrunningpb.Operation, error)
	// Deletes a policy binding and returns a long-running operation.
	// Callers will need the IAM permissions on both the policy and target.
	// Once the binding is deleted, the policy no longer applies to the target.
	DeletePolicyBinding(context.Context, *DeletePolicyBindingRequest) (*longrunningpb.Operation, error)
	// Lists policy bindings.
	ListPolicyBindings(context.Context, *ListPolicyBindingsRequest) (*ListPolicyBindingsResponse, error)
	// Search policy bindings by target. Returns all policy binding objects bound
	// directly to target.
	SearchTargetPolicyBindings(context.Context, *SearchTargetPolicyBindingsRequest) (*SearchTargetPolicyBindingsResponse, error)
}

PolicyBindingsServer is the server API for PolicyBindings service. All implementations should embed UnimplementedPolicyBindingsServer for forward compatibility

type PrincipalAccessBoundaryPoliciesClient

type PrincipalAccessBoundaryPoliciesClient interface {
	// Creates a principal access boundary policy, and returns a long running
	// operation.
	CreatePrincipalAccessBoundaryPolicy(ctx context.Context, in *CreatePrincipalAccessBoundaryPolicyRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Gets a principal access boundary policy.
	GetPrincipalAccessBoundaryPolicy(ctx context.Context, in *GetPrincipalAccessBoundaryPolicyRequest, opts ...grpc.CallOption) (*PrincipalAccessBoundaryPolicy, error)
	// Updates a principal access boundary policy.
	UpdatePrincipalAccessBoundaryPolicy(ctx context.Context, in *UpdatePrincipalAccessBoundaryPolicyRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Deletes a principal access boundary policy.
	DeletePrincipalAccessBoundaryPolicy(ctx context.Context, in *DeletePrincipalAccessBoundaryPolicyRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Lists principal access boundary policies.
	ListPrincipalAccessBoundaryPolicies(ctx context.Context, in *ListPrincipalAccessBoundaryPoliciesRequest, opts ...grpc.CallOption) (*ListPrincipalAccessBoundaryPoliciesResponse, error)
	// Returns all policy bindings that bind a specific policy if a user has
	// searchPolicyBindings permission on that policy.
	SearchPrincipalAccessBoundaryPolicyBindings(ctx context.Context, in *SearchPrincipalAccessBoundaryPolicyBindingsRequest, opts ...grpc.CallOption) (*SearchPrincipalAccessBoundaryPolicyBindingsResponse, error)
}

PrincipalAccessBoundaryPoliciesClient is the client API for PrincipalAccessBoundaryPolicies service.

For semantics around ctx use and closing/ending streaming RPCs, please refer to https://pkg.go.dev/google.golang.org/grpc/?tab=doc#ClientConn.NewStream.

type PrincipalAccessBoundaryPoliciesServer

type PrincipalAccessBoundaryPoliciesServer interface {
	// Creates a principal access boundary policy, and returns a long running
	// operation.
	CreatePrincipalAccessBoundaryPolicy(context.Context, *CreatePrincipalAccessBoundaryPolicyRequest) (*longrunningpb.Operation, error)
	// Gets a principal access boundary policy.
	GetPrincipalAccessBoundaryPolicy(context.Context, *GetPrincipalAccessBoundaryPolicyRequest) (*PrincipalAccessBoundaryPolicy, error)
	// Updates a principal access boundary policy.
	UpdatePrincipalAccessBoundaryPolicy(context.Context, *UpdatePrincipalAccessBoundaryPolicyRequest) (*longrunningpb.Operation, error)
	// Deletes a principal access boundary policy.
	DeletePrincipalAccessBoundaryPolicy(context.Context, *DeletePrincipalAccessBoundaryPolicyRequest) (*longrunningpb.Operation, error)
	// Lists principal access boundary policies.
	ListPrincipalAccessBoundaryPolicies(context.Context, *ListPrincipalAccessBoundaryPoliciesRequest) (*ListPrincipalAccessBoundaryPoliciesResponse, error)
	// Returns all policy bindings that bind a specific policy if a user has
	// searchPolicyBindings permission on that policy.
	SearchPrincipalAccessBoundaryPolicyBindings(context.Context, *SearchPrincipalAccessBoundaryPolicyBindingsRequest) (*SearchPrincipalAccessBoundaryPolicyBindingsResponse, error)
}

PrincipalAccessBoundaryPoliciesServer is the server API for PrincipalAccessBoundaryPolicies service. All implementations should embed UnimplementedPrincipalAccessBoundaryPoliciesServer for forward compatibility

type PrincipalAccessBoundaryPolicy

type PrincipalAccessBoundaryPolicy struct {

	// Identifier. The resource name of the principal access boundary policy.
	//
	// The following format is supported:
	// `organizations/{organization_id}/locations/{location}/principalAccessBoundaryPolicies/{policy_id}`
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Output only. The globally unique ID of the principal access boundary
	// policy.
	Uid string `protobuf:"bytes,2,opt,name=uid,proto3" json:"uid,omitempty"`
	// Optional. The etag for the principal access boundary.
	// If this is provided on update, it must match the server's etag.
	Etag string `protobuf:"bytes,3,opt,name=etag,proto3" json:"etag,omitempty"`
	// Optional. The description of the principal access boundary policy. Must be
	// less than or equal to 63 characters.
	DisplayName string `protobuf:"bytes,4,opt,name=display_name,json=displayName,proto3" json:"display_name,omitempty"`
	// Optional. User defined annotations. See
	// https://google.aip.dev/148#annotations for more details such as format and
	// size limitations
	Annotations map[string]string `` /* 163-byte string literal not displayed */
	// Output only. The time when the principal access boundary policy was
	// created.
	CreateTime *timestamppb.Timestamp `protobuf:"bytes,6,opt,name=create_time,json=createTime,proto3" json:"create_time,omitempty"`
	// Output only. The time when the principal access boundary policy was most
	// recently updated.
	UpdateTime *timestamppb.Timestamp `protobuf:"bytes,7,opt,name=update_time,json=updateTime,proto3" json:"update_time,omitempty"`
	// Optional. The details for the principal access boundary policy.
	Details *PrincipalAccessBoundaryPolicyDetails `protobuf:"bytes,8,opt,name=details,proto3" json:"details,omitempty"`
	// contains filtered or unexported fields
}

An IAM principal access boundary policy resource.

func (*PrincipalAccessBoundaryPolicy) Descriptor deprecated

func (*PrincipalAccessBoundaryPolicy) Descriptor() ([]byte, []int)

Deprecated: Use PrincipalAccessBoundaryPolicy.ProtoReflect.Descriptor instead.

func (*PrincipalAccessBoundaryPolicy) GetAnnotations

func (x *PrincipalAccessBoundaryPolicy) GetAnnotations() map[string]string

func (*PrincipalAccessBoundaryPolicy) GetCreateTime

func (*PrincipalAccessBoundaryPolicy) GetDetails

func (*PrincipalAccessBoundaryPolicy) GetDisplayName

func (x *PrincipalAccessBoundaryPolicy) GetDisplayName() string

func (*PrincipalAccessBoundaryPolicy) GetEtag

func (*PrincipalAccessBoundaryPolicy) GetName

func (*PrincipalAccessBoundaryPolicy) GetUid

func (*PrincipalAccessBoundaryPolicy) GetUpdateTime

func (*PrincipalAccessBoundaryPolicy) ProtoMessage

func (*PrincipalAccessBoundaryPolicy) ProtoMessage()

func (*PrincipalAccessBoundaryPolicy) ProtoReflect

func (*PrincipalAccessBoundaryPolicy) Reset

func (x *PrincipalAccessBoundaryPolicy) Reset()

func (*PrincipalAccessBoundaryPolicy) String

type PrincipalAccessBoundaryPolicyDetails

type PrincipalAccessBoundaryPolicyDetails struct {

	// Required. A list of principal access boundary policy rules. The number of
	// rules in a policy is limited to 500.
	Rules []*PrincipalAccessBoundaryPolicyRule `protobuf:"bytes,1,rep,name=rules,proto3" json:"rules,omitempty"`
	// Optional.
	// The version number (for example, `1` or `latest`) that indicates which
	// permissions are able to be blocked by the policy. If empty, the PAB policy
	// version will be set to the most recent version number at the time of the
	// policy's creation.
	EnforcementVersion string `protobuf:"bytes,4,opt,name=enforcement_version,json=enforcementVersion,proto3" json:"enforcement_version,omitempty"`
	// contains filtered or unexported fields
}

Principal access boundary policy details

func (*PrincipalAccessBoundaryPolicyDetails) Descriptor deprecated

func (*PrincipalAccessBoundaryPolicyDetails) Descriptor() ([]byte, []int)

Deprecated: Use PrincipalAccessBoundaryPolicyDetails.ProtoReflect.Descriptor instead.

func (*PrincipalAccessBoundaryPolicyDetails) GetEnforcementVersion

func (x *PrincipalAccessBoundaryPolicyDetails) GetEnforcementVersion() string

func (*PrincipalAccessBoundaryPolicyDetails) GetRules

func (*PrincipalAccessBoundaryPolicyDetails) ProtoMessage

func (*PrincipalAccessBoundaryPolicyDetails) ProtoMessage()

func (*PrincipalAccessBoundaryPolicyDetails) ProtoReflect

func (*PrincipalAccessBoundaryPolicyDetails) Reset

func (*PrincipalAccessBoundaryPolicyDetails) String

type PrincipalAccessBoundaryPolicyRule

type PrincipalAccessBoundaryPolicyRule struct {

	// Optional. The description of the principal access boundary policy rule.
	// Must be less than or equal to 256 characters.
	Description string `protobuf:"bytes,1,opt,name=description,proto3" json:"description,omitempty"`
	// Required. A list of Resource Manager resources. If a resource is listed in
	// the rule, then the rule applies for that resource and its descendants. The
	// number of resources in a policy is limited to 500 across all rules in the
	// policy.
	//
	// The following resource types are supported:
	//
	// * Organizations, such as
	// `//cloudresourcemanager.googleapis.com/organizations/123`.
	//   - Folders, such as `//cloudresourcemanager.googleapis.com/folders/123`.
	//   - Projects, such as `//cloudresourcemanager.googleapis.com/projects/123`
	//     or `//cloudresourcemanager.googleapis.com/projects/my-project-id`.
	Resources []string `protobuf:"bytes,2,rep,name=resources,proto3" json:"resources,omitempty"`
	// Required. The access relationship of principals to the resources in this
	// rule.
	Effect PrincipalAccessBoundaryPolicyRule_Effect `` /* 130-byte string literal not displayed */
	// contains filtered or unexported fields
}

Principal access boundary policy rule that defines the resource boundary.

func (*PrincipalAccessBoundaryPolicyRule) Descriptor deprecated

func (*PrincipalAccessBoundaryPolicyRule) Descriptor() ([]byte, []int)

Deprecated: Use PrincipalAccessBoundaryPolicyRule.ProtoReflect.Descriptor instead.

func (*PrincipalAccessBoundaryPolicyRule) GetDescription

func (x *PrincipalAccessBoundaryPolicyRule) GetDescription() string

func (*PrincipalAccessBoundaryPolicyRule) GetEffect

func (*PrincipalAccessBoundaryPolicyRule) GetResources

func (x *PrincipalAccessBoundaryPolicyRule) GetResources() []string

func (*PrincipalAccessBoundaryPolicyRule) ProtoMessage

func (*PrincipalAccessBoundaryPolicyRule) ProtoMessage()

func (*PrincipalAccessBoundaryPolicyRule) ProtoReflect

func (*PrincipalAccessBoundaryPolicyRule) Reset

func (*PrincipalAccessBoundaryPolicyRule) String

type PrincipalAccessBoundaryPolicyRule_Effect

type PrincipalAccessBoundaryPolicyRule_Effect int32

An effect to describe the access relationship.

const (
	// Effect unspecified.
	PrincipalAccessBoundaryPolicyRule_EFFECT_UNSPECIFIED PrincipalAccessBoundaryPolicyRule_Effect = 0
	// Allows access to the resources in this rule.
	PrincipalAccessBoundaryPolicyRule_ALLOW PrincipalAccessBoundaryPolicyRule_Effect = 1
)

func (PrincipalAccessBoundaryPolicyRule_Effect) Descriptor

func (PrincipalAccessBoundaryPolicyRule_Effect) Enum

func (PrincipalAccessBoundaryPolicyRule_Effect) EnumDescriptor deprecated

func (PrincipalAccessBoundaryPolicyRule_Effect) EnumDescriptor() ([]byte, []int)

Deprecated: Use PrincipalAccessBoundaryPolicyRule_Effect.Descriptor instead.

func (PrincipalAccessBoundaryPolicyRule_Effect) Number

func (PrincipalAccessBoundaryPolicyRule_Effect) String

func (PrincipalAccessBoundaryPolicyRule_Effect) Type

type SearchPrincipalAccessBoundaryPolicyBindingsRequest

type SearchPrincipalAccessBoundaryPolicyBindingsRequest struct {

	// Required. The name of the principal access boundary policy.
	// Format:
	//
	//	`organizations/{organization_id}/locations/{location}/principalAccessBoundaryPolicies/{principal_access_boundary_policy_id}`
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Optional. The maximum number of policy bindings to return. The service may
	// return fewer than this value.
	//
	// If unspecified, at most 50 policy bindings will be returned.
	// The maximum value is 1000; values above 1000 will be coerced to 1000.
	PageSize int32 `protobuf:"varint,3,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// Optional. A page token, received from a previous
	// `SearchPrincipalAccessBoundaryPolicyBindingsRequest` call. Provide this to
	// retrieve the subsequent page.
	//
	// When paginating, all other parameters provided to
	// `SearchPrincipalAccessBoundaryPolicyBindingsRequest` must match the call
	// that provided the page token.
	PageToken string `protobuf:"bytes,4,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// contains filtered or unexported fields
}

Request message for SearchPrincipalAccessBoundaryPolicyBindings rpc.

func (*SearchPrincipalAccessBoundaryPolicyBindingsRequest) Descriptor deprecated

Deprecated: Use SearchPrincipalAccessBoundaryPolicyBindingsRequest.ProtoReflect.Descriptor instead.

func (*SearchPrincipalAccessBoundaryPolicyBindingsRequest) GetName

func (*SearchPrincipalAccessBoundaryPolicyBindingsRequest) GetPageSize

func (*SearchPrincipalAccessBoundaryPolicyBindingsRequest) GetPageToken

func (*SearchPrincipalAccessBoundaryPolicyBindingsRequest) ProtoMessage

func (*SearchPrincipalAccessBoundaryPolicyBindingsRequest) ProtoReflect

func (*SearchPrincipalAccessBoundaryPolicyBindingsRequest) Reset

func (*SearchPrincipalAccessBoundaryPolicyBindingsRequest) String

type SearchPrincipalAccessBoundaryPolicyBindingsResponse

type SearchPrincipalAccessBoundaryPolicyBindingsResponse struct {

	// The policy bindings that reference the specified policy.
	PolicyBindings []*PolicyBinding `protobuf:"bytes,1,rep,name=policy_bindings,json=policyBindings,proto3" json:"policy_bindings,omitempty"`
	// Optional. A token, which can be sent as `page_token` to retrieve the next
	// page. If this field is omitted, there are no subsequent pages.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

Response message for SearchPrincipalAccessBoundaryPolicyBindings rpc.

func (*SearchPrincipalAccessBoundaryPolicyBindingsResponse) Descriptor deprecated

Deprecated: Use SearchPrincipalAccessBoundaryPolicyBindingsResponse.ProtoReflect.Descriptor instead.

func (*SearchPrincipalAccessBoundaryPolicyBindingsResponse) GetNextPageToken

func (*SearchPrincipalAccessBoundaryPolicyBindingsResponse) GetPolicyBindings

func (*SearchPrincipalAccessBoundaryPolicyBindingsResponse) ProtoMessage

func (*SearchPrincipalAccessBoundaryPolicyBindingsResponse) ProtoReflect

func (*SearchPrincipalAccessBoundaryPolicyBindingsResponse) Reset

func (*SearchPrincipalAccessBoundaryPolicyBindingsResponse) String

type SearchTargetPolicyBindingsRequest

type SearchTargetPolicyBindingsRequest struct {

	// Required. The target resource, which is bound to the policy in the binding.
	//
	// Format:
	//
	// * `//iam.googleapis.com/locations/global/workforcePools/POOL_ID`
	// * `//iam.googleapis.com/projects/PROJECT_NUMBER/locations/global/workloadIdentityPools/POOL_ID`
	// * `//iam.googleapis.com/locations/global/workspace/WORKSPACE_ID`
	// * `//cloudresourcemanager.googleapis.com/projects/{project_number}`
	// * `//cloudresourcemanager.googleapis.com/folders/{folder_id}`
	// * `//cloudresourcemanager.googleapis.com/organizations/{organization_id}`
	Target string `protobuf:"bytes,1,opt,name=target,proto3" json:"target,omitempty"`
	// Optional. The maximum number of policy bindings to return. The service may
	// return fewer than this value.
	//
	// If unspecified, at most 50 policy bindings will be returned.
	// The maximum value is 1000; values above 1000 will be coerced to 1000.
	PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// Optional. A page token, received from a previous
	// `SearchTargetPolicyBindingsRequest` call. Provide this to retrieve the
	// subsequent page.
	//
	// When paginating, all other parameters provided to
	// `SearchTargetPolicyBindingsRequest` must match the call that provided the
	// page token.
	PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// Required. The parent resource where this search will be performed. This
	// should be the nearest Resource Manager resource (project, folder, or
	// organization) to the target.
	//
	// Format:
	//
	// * `projects/{project_id}/locations/{location}`
	// * `projects/{project_number}/locations/{location}`
	// * `folders/{folder_id}/locations/{location}`
	// * `organizations/{organization_id}/locations/{location}`
	Parent string `protobuf:"bytes,5,opt,name=parent,proto3" json:"parent,omitempty"`
	// contains filtered or unexported fields
}

Request message for SearchTargetPolicyBindings method.

func (*SearchTargetPolicyBindingsRequest) Descriptor deprecated

func (*SearchTargetPolicyBindingsRequest) Descriptor() ([]byte, []int)

Deprecated: Use SearchTargetPolicyBindingsRequest.ProtoReflect.Descriptor instead.

func (*SearchTargetPolicyBindingsRequest) GetPageSize

func (x *SearchTargetPolicyBindingsRequest) GetPageSize() int32

func (*SearchTargetPolicyBindingsRequest) GetPageToken

func (x *SearchTargetPolicyBindingsRequest) GetPageToken() string

func (*SearchTargetPolicyBindingsRequest) GetParent

func (*SearchTargetPolicyBindingsRequest) GetTarget

func (*SearchTargetPolicyBindingsRequest) ProtoMessage

func (*SearchTargetPolicyBindingsRequest) ProtoMessage()

func (*SearchTargetPolicyBindingsRequest) ProtoReflect

func (*SearchTargetPolicyBindingsRequest) Reset

func (*SearchTargetPolicyBindingsRequest) String

type SearchTargetPolicyBindingsResponse

type SearchTargetPolicyBindingsResponse struct {

	// The policy bindings bound to the specified target.
	PolicyBindings []*PolicyBinding `protobuf:"bytes,1,rep,name=policy_bindings,json=policyBindings,proto3" json:"policy_bindings,omitempty"`
	// Optional. A token, which can be sent as `page_token` to retrieve the next
	// page. If this field is omitted, there are no subsequent pages.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

Response message for SearchTargetPolicyBindings method.

func (*SearchTargetPolicyBindingsResponse) Descriptor deprecated

func (*SearchTargetPolicyBindingsResponse) Descriptor() ([]byte, []int)

Deprecated: Use SearchTargetPolicyBindingsResponse.ProtoReflect.Descriptor instead.

func (*SearchTargetPolicyBindingsResponse) GetNextPageToken

func (x *SearchTargetPolicyBindingsResponse) GetNextPageToken() string

func (*SearchTargetPolicyBindingsResponse) GetPolicyBindings

func (x *SearchTargetPolicyBindingsResponse) GetPolicyBindings() []*PolicyBinding

func (*SearchTargetPolicyBindingsResponse) ProtoMessage

func (*SearchTargetPolicyBindingsResponse) ProtoMessage()

func (*SearchTargetPolicyBindingsResponse) ProtoReflect

func (*SearchTargetPolicyBindingsResponse) Reset

func (*SearchTargetPolicyBindingsResponse) String

type UnimplementedPolicyBindingsServer

type UnimplementedPolicyBindingsServer struct {
}

UnimplementedPolicyBindingsServer should be embedded to have forward compatible implementations.

func (UnimplementedPolicyBindingsServer) CreatePolicyBinding

func (UnimplementedPolicyBindingsServer) DeletePolicyBinding

func (UnimplementedPolicyBindingsServer) GetPolicyBinding

func (UnimplementedPolicyBindingsServer) ListPolicyBindings

func (UnimplementedPolicyBindingsServer) UpdatePolicyBinding

type UnimplementedPrincipalAccessBoundaryPoliciesServer

type UnimplementedPrincipalAccessBoundaryPoliciesServer struct {
}

UnimplementedPrincipalAccessBoundaryPoliciesServer should be embedded to have forward compatible implementations.

func (UnimplementedPrincipalAccessBoundaryPoliciesServer) CreatePrincipalAccessBoundaryPolicy

func (UnimplementedPrincipalAccessBoundaryPoliciesServer) DeletePrincipalAccessBoundaryPolicy

func (UnimplementedPrincipalAccessBoundaryPoliciesServer) GetPrincipalAccessBoundaryPolicy

func (UnimplementedPrincipalAccessBoundaryPoliciesServer) UpdatePrincipalAccessBoundaryPolicy

type UnsafePolicyBindingsServer added in v1.5.3

type UnsafePolicyBindingsServer interface {
	// contains filtered or unexported methods
}

UnsafePolicyBindingsServer may be embedded to opt out of forward compatibility for this service. Use of this interface is not recommended, as added methods to PolicyBindingsServer will result in compilation errors.

type UnsafePrincipalAccessBoundaryPoliciesServer added in v1.5.3

type UnsafePrincipalAccessBoundaryPoliciesServer interface {
	// contains filtered or unexported methods
}

UnsafePrincipalAccessBoundaryPoliciesServer may be embedded to opt out of forward compatibility for this service. Use of this interface is not recommended, as added methods to PrincipalAccessBoundaryPoliciesServer will result in compilation errors.

type UpdatePolicyBindingRequest

type UpdatePolicyBindingRequest struct {

	// Required. The policy binding to update.
	//
	// The policy binding's `name` field is used to identify the policy binding to
	// update.
	PolicyBinding *PolicyBinding `protobuf:"bytes,1,opt,name=policy_binding,json=policyBinding,proto3" json:"policy_binding,omitempty"`
	// Optional. If set, validate the request and preview the update, but do not
	// actually post it.
	ValidateOnly bool `protobuf:"varint,2,opt,name=validate_only,json=validateOnly,proto3" json:"validate_only,omitempty"`
	// Optional. The list of fields to update
	UpdateMask *fieldmaskpb.FieldMask `protobuf:"bytes,3,opt,name=update_mask,json=updateMask,proto3" json:"update_mask,omitempty"`
	// contains filtered or unexported fields
}

Request message for UpdatePolicyBinding method.

func (*UpdatePolicyBindingRequest) Descriptor deprecated

func (*UpdatePolicyBindingRequest) Descriptor() ([]byte, []int)

Deprecated: Use UpdatePolicyBindingRequest.ProtoReflect.Descriptor instead.

func (*UpdatePolicyBindingRequest) GetPolicyBinding

func (x *UpdatePolicyBindingRequest) GetPolicyBinding() *PolicyBinding

func (*UpdatePolicyBindingRequest) GetUpdateMask

func (x *UpdatePolicyBindingRequest) GetUpdateMask() *fieldmaskpb.FieldMask

func (*UpdatePolicyBindingRequest) GetValidateOnly

func (x *UpdatePolicyBindingRequest) GetValidateOnly() bool

func (*UpdatePolicyBindingRequest) ProtoMessage

func (*UpdatePolicyBindingRequest) ProtoMessage()

func (*UpdatePolicyBindingRequest) ProtoReflect

func (*UpdatePolicyBindingRequest) Reset

func (x *UpdatePolicyBindingRequest) Reset()

func (*UpdatePolicyBindingRequest) String

func (x *UpdatePolicyBindingRequest) String() string

type UpdatePrincipalAccessBoundaryPolicyRequest

type UpdatePrincipalAccessBoundaryPolicyRequest struct {

	// Required. The principal access boundary policy to update.
	//
	// The principal access boundary policy's `name` field is used to identify the
	// policy to update.
	PrincipalAccessBoundaryPolicy *PrincipalAccessBoundaryPolicy `` /* 152-byte string literal not displayed */
	// Optional. If set, validate the request and preview the update, but do not
	// actually post it.
	ValidateOnly bool `protobuf:"varint,2,opt,name=validate_only,json=validateOnly,proto3" json:"validate_only,omitempty"`
	// Optional. The list of fields to update
	UpdateMask *fieldmaskpb.FieldMask `protobuf:"bytes,3,opt,name=update_mask,json=updateMask,proto3" json:"update_mask,omitempty"`
	// contains filtered or unexported fields
}

Request message for UpdatePrincipalAccessBoundaryPolicy method.

func (*UpdatePrincipalAccessBoundaryPolicyRequest) Descriptor deprecated

Deprecated: Use UpdatePrincipalAccessBoundaryPolicyRequest.ProtoReflect.Descriptor instead.

func (*UpdatePrincipalAccessBoundaryPolicyRequest) GetPrincipalAccessBoundaryPolicy

func (x *UpdatePrincipalAccessBoundaryPolicyRequest) GetPrincipalAccessBoundaryPolicy() *PrincipalAccessBoundaryPolicy

func (*UpdatePrincipalAccessBoundaryPolicyRequest) GetUpdateMask

func (*UpdatePrincipalAccessBoundaryPolicyRequest) GetValidateOnly

func (x *UpdatePrincipalAccessBoundaryPolicyRequest) GetValidateOnly() bool

func (*UpdatePrincipalAccessBoundaryPolicyRequest) ProtoMessage

func (*UpdatePrincipalAccessBoundaryPolicyRequest) ProtoReflect

func (*UpdatePrincipalAccessBoundaryPolicyRequest) Reset

func (*UpdatePrincipalAccessBoundaryPolicyRequest) String

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL