Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -386,19 +386,19 @@ async def sample_set_iam_policy():
constraints based on attributes of the request, the
resource, or both. To learn which resources support
conditions in their IAM policies, see the [IAM
documentation](\ https://cloud.google.com/iam/help/conditions/resource-policies).
documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

**JSON example:**

:literal:`\` { "bindings": [ { "role": "roles/resourcemanager.organizationAdmin", "members": [ "user:mike@example.com", "group:admins@example.com", "domain:google.com", "serviceAccount:my-project-id@appspot.gserviceaccount.com" ] }, { "role": "roles/resourcemanager.organizationViewer", "members": [ "user:eve@example.com" ], "condition": { "title": "expirable access", "description": "Does not grant access after Sep 2020", "expression": "request.time < timestamp('2020-10-01T00:00:00.000Z')", } } ], "etag": "BwWWja0YfJA=", "version": 3 }`\ \`
:literal:`` { "bindings": [ { "role": "roles/resourcemanager.organizationAdmin", "members": [ "user:mike@example.com", "group:admins@example.com", "domain:google.com", "serviceAccount:my-project-id@appspot.gserviceaccount.com" ] }, { "role": "roles/resourcemanager.organizationViewer", "members": [ "user:eve@example.com" ], "condition": { "title": "expirable access", "description": "Does not grant access after Sep 2020", "expression": "request.time < timestamp('2020-10-01T00:00:00.000Z')", } } ], "etag": "BwWWja0YfJA=", "version": 3 }`\ \`

**YAML example:**

:literal:`\` bindings: - members: - user:mike@example.com - group:admins@example.com - domain:google.com - serviceAccount:my-project-id@appspot.gserviceaccount.com role: roles/resourcemanager.organizationAdmin - members: - user:eve@example.com role: roles/resourcemanager.organizationViewer condition: title: expirable access description: Does not grant access after Sep 2020 expression: request.time < timestamp('2020-10-01T00:00:00.000Z') etag: BwWWja0YfJA= version: 3`\ \`
:literal:`` bindings: - members: - user:mike@example.com - group:admins@example.com - domain:google.com - serviceAccount:my-project-id@appspot.gserviceaccount.com role: roles/resourcemanager.organizationAdmin - members: - user:eve@example.com role: roles/resourcemanager.organizationViewer condition: title: expirable access description: Does not grant access after Sep 2020 expression: request.time < timestamp('2020-10-01T00:00:00.000Z') etag: BwWWja0YfJA= version: 3`\ \`

For a description of IAM and its features, see the
[IAM
documentation](\ https://cloud.google.com/iam/docs/).
documentation](https://cloud.google.com/iam/docs/).

"""
# Create or coerce a protobuf request object.
Expand Down Expand Up @@ -505,19 +505,19 @@ async def sample_get_iam_policy():
constraints based on attributes of the request, the
resource, or both. To learn which resources support
conditions in their IAM policies, see the [IAM
documentation](\ https://cloud.google.com/iam/help/conditions/resource-policies).
documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

**JSON example:**

:literal:`\` { "bindings": [ { "role": "roles/resourcemanager.organizationAdmin", "members": [ "user:mike@example.com", "group:admins@example.com", "domain:google.com", "serviceAccount:my-project-id@appspot.gserviceaccount.com" ] }, { "role": "roles/resourcemanager.organizationViewer", "members": [ "user:eve@example.com" ], "condition": { "title": "expirable access", "description": "Does not grant access after Sep 2020", "expression": "request.time < timestamp('2020-10-01T00:00:00.000Z')", } } ], "etag": "BwWWja0YfJA=", "version": 3 }`\ \`
:literal:`` { "bindings": [ { "role": "roles/resourcemanager.organizationAdmin", "members": [ "user:mike@example.com", "group:admins@example.com", "domain:google.com", "serviceAccount:my-project-id@appspot.gserviceaccount.com" ] }, { "role": "roles/resourcemanager.organizationViewer", "members": [ "user:eve@example.com" ], "condition": { "title": "expirable access", "description": "Does not grant access after Sep 2020", "expression": "request.time < timestamp('2020-10-01T00:00:00.000Z')", } } ], "etag": "BwWWja0YfJA=", "version": 3 }`\ \`

**YAML example:**

:literal:`\` bindings: - members: - user:mike@example.com - group:admins@example.com - domain:google.com - serviceAccount:my-project-id@appspot.gserviceaccount.com role: roles/resourcemanager.organizationAdmin - members: - user:eve@example.com role: roles/resourcemanager.organizationViewer condition: title: expirable access description: Does not grant access after Sep 2020 expression: request.time < timestamp('2020-10-01T00:00:00.000Z') etag: BwWWja0YfJA= version: 3`\ \`
:literal:`` bindings: - members: - user:mike@example.com - group:admins@example.com - domain:google.com - serviceAccount:my-project-id@appspot.gserviceaccount.com role: roles/resourcemanager.organizationAdmin - members: - user:eve@example.com role: roles/resourcemanager.organizationViewer condition: title: expirable access description: Does not grant access after Sep 2020 expression: request.time < timestamp('2020-10-01T00:00:00.000Z') etag: BwWWja0YfJA= version: 3`\ \`

For a description of IAM and its features, see the
[IAM
documentation](\ https://cloud.google.com/iam/docs/).
documentation](https://cloud.google.com/iam/docs/).

"""
# Create or coerce a protobuf request object.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -825,19 +825,19 @@ def sample_set_iam_policy():
constraints based on attributes of the request, the
resource, or both. To learn which resources support
conditions in their IAM policies, see the [IAM
documentation](\ https://cloud.google.com/iam/help/conditions/resource-policies).
documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

**JSON example:**

:literal:`\` { "bindings": [ { "role": "roles/resourcemanager.organizationAdmin", "members": [ "user:mike@example.com", "group:admins@example.com", "domain:google.com", "serviceAccount:my-project-id@appspot.gserviceaccount.com" ] }, { "role": "roles/resourcemanager.organizationViewer", "members": [ "user:eve@example.com" ], "condition": { "title": "expirable access", "description": "Does not grant access after Sep 2020", "expression": "request.time < timestamp('2020-10-01T00:00:00.000Z')", } } ], "etag": "BwWWja0YfJA=", "version": 3 }`\ \`
:literal:`` { "bindings": [ { "role": "roles/resourcemanager.organizationAdmin", "members": [ "user:mike@example.com", "group:admins@example.com", "domain:google.com", "serviceAccount:my-project-id@appspot.gserviceaccount.com" ] }, { "role": "roles/resourcemanager.organizationViewer", "members": [ "user:eve@example.com" ], "condition": { "title": "expirable access", "description": "Does not grant access after Sep 2020", "expression": "request.time < timestamp('2020-10-01T00:00:00.000Z')", } } ], "etag": "BwWWja0YfJA=", "version": 3 }`\ \`

**YAML example:**

:literal:`\` bindings: - members: - user:mike@example.com - group:admins@example.com - domain:google.com - serviceAccount:my-project-id@appspot.gserviceaccount.com role: roles/resourcemanager.organizationAdmin - members: - user:eve@example.com role: roles/resourcemanager.organizationViewer condition: title: expirable access description: Does not grant access after Sep 2020 expression: request.time < timestamp('2020-10-01T00:00:00.000Z') etag: BwWWja0YfJA= version: 3`\ \`
:literal:`` bindings: - members: - user:mike@example.com - group:admins@example.com - domain:google.com - serviceAccount:my-project-id@appspot.gserviceaccount.com role: roles/resourcemanager.organizationAdmin - members: - user:eve@example.com role: roles/resourcemanager.organizationViewer condition: title: expirable access description: Does not grant access after Sep 2020 expression: request.time < timestamp('2020-10-01T00:00:00.000Z') etag: BwWWja0YfJA= version: 3`\ \`

For a description of IAM and its features, see the
[IAM
documentation](\ https://cloud.google.com/iam/docs/).
documentation](https://cloud.google.com/iam/docs/).

"""
# Create or coerce a protobuf request object.
Expand Down Expand Up @@ -943,19 +943,19 @@ def sample_get_iam_policy():
constraints based on attributes of the request, the
resource, or both. To learn which resources support
conditions in their IAM policies, see the [IAM
documentation](\ https://cloud.google.com/iam/help/conditions/resource-policies).
documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

**JSON example:**

:literal:`\` { "bindings": [ { "role": "roles/resourcemanager.organizationAdmin", "members": [ "user:mike@example.com", "group:admins@example.com", "domain:google.com", "serviceAccount:my-project-id@appspot.gserviceaccount.com" ] }, { "role": "roles/resourcemanager.organizationViewer", "members": [ "user:eve@example.com" ], "condition": { "title": "expirable access", "description": "Does not grant access after Sep 2020", "expression": "request.time < timestamp('2020-10-01T00:00:00.000Z')", } } ], "etag": "BwWWja0YfJA=", "version": 3 }`\ \`
:literal:`` { "bindings": [ { "role": "roles/resourcemanager.organizationAdmin", "members": [ "user:mike@example.com", "group:admins@example.com", "domain:google.com", "serviceAccount:my-project-id@appspot.gserviceaccount.com" ] }, { "role": "roles/resourcemanager.organizationViewer", "members": [ "user:eve@example.com" ], "condition": { "title": "expirable access", "description": "Does not grant access after Sep 2020", "expression": "request.time < timestamp('2020-10-01T00:00:00.000Z')", } } ], "etag": "BwWWja0YfJA=", "version": 3 }`\ \`

**YAML example:**

:literal:`\` bindings: - members: - user:mike@example.com - group:admins@example.com - domain:google.com - serviceAccount:my-project-id@appspot.gserviceaccount.com role: roles/resourcemanager.organizationAdmin - members: - user:eve@example.com role: roles/resourcemanager.organizationViewer condition: title: expirable access description: Does not grant access after Sep 2020 expression: request.time < timestamp('2020-10-01T00:00:00.000Z') etag: BwWWja0YfJA= version: 3`\ \`
:literal:`` bindings: - members: - user:mike@example.com - group:admins@example.com - domain:google.com - serviceAccount:my-project-id@appspot.gserviceaccount.com role: roles/resourcemanager.organizationAdmin - members: - user:eve@example.com role: roles/resourcemanager.organizationViewer condition: title: expirable access description: Does not grant access after Sep 2020 expression: request.time < timestamp('2020-10-01T00:00:00.000Z') etag: BwWWja0YfJA= version: 3`\ \`

For a description of IAM and its features, see the
[IAM
documentation](\ https://cloud.google.com/iam/docs/).
documentation](https://cloud.google.com/iam/docs/).

"""
# Create or coerce a protobuf request object.
Expand Down
48 changes: 24 additions & 24 deletions packages/google-cloud-iap/google/cloud/iap_v1/types/service.py
Original file line number Diff line number Diff line change
Expand Up @@ -772,30 +772,30 @@ class AttributePropagationSettings(proto.Message):
``attributes.iap_attributes``. The following functions are
supported:

- filter ``<list>.filter(<iter_var>, <predicate>)``:
Returns a subset of ``<list>`` where ``<predicate>`` is
true for every item.

- in ``<var> in <list>``: Returns true if ``<list>``
contains ``<var>``.

- selectByName ``<list>.selectByName(<string>)``: Returns
the attribute in ``<list>`` with the given ``<string>``
name, otherwise returns empty.

- emitAs ``<attribute>.emitAs(<string>)``: Sets the
``<attribute>`` name field to the given ``<string>`` for
propagation in selected output credentials.

- strict ``<attribute>.strict()``: Ignores the
``x-goog-iap-attr-`` prefix for the provided
``<attribute>`` when propagating with the ``HEADER``
output credential, such as request headers.

- append ``<target_list>.append(<attribute>)`` OR
``<target_list>.append(<list>)``: Appends the provided
``<attribute>`` or ``<list>`` to the end of
``<target_list>``.
- filter ``<list>.filter(<iter_var>, <predicate>)``: Returns
a subset of ``<list>`` where ``<predicate>`` is true for
every item.

- in ``<var> in <list>``: Returns true if ``<list>``
contains ``<var>``.

- selectByName ``<list>.selectByName(<string>)``: Returns
the attribute in ``<list>`` with the given ``<string>``
name, otherwise returns empty.

- emitAs ``<attribute>.emitAs(<string>)``: Sets the
``<attribute>`` name field to the given ``<string>`` for
propagation in selected output credentials.

- strict ``<attribute>.strict()``: Ignores the
``x-goog-iap-attr-`` prefix for the provided
``<attribute>`` when propagating with the ``HEADER``
output credential, such as request headers.

- append ``<target_list>.append(<attribute>)`` OR
``<target_list>.append(<list>)``: Appends the provided
``<attribute>`` or ``<list>`` to the end of
``<target_list>``.

Example expression:
``attributes.saml_attributes.filter(x, x.name in ['test']).append(attributes.iap_attributes.selectByName('exact').emitAs('custom').strict())``
Expand Down
5 changes: 3 additions & 2 deletions packages/google-cloud-iap/noxfile.py
Original file line number Diff line number Diff line change
Expand Up @@ -365,9 +365,10 @@ def docs(session):
"-T", # show full traceback on exception
"-N", # no colors
"-b",
"html",
"html", # builder
"-d",
os.path.join("docs", "_build", "doctrees", ""),
os.path.join("docs", "_build", "doctrees", ""), # cache directory
# paths to build:
os.path.join("docs", ""),
os.path.join("docs", "_build", "html", ""),
)
Expand Down
5 changes: 3 additions & 2 deletions packages/google-cloud-ids/noxfile.py
Original file line number Diff line number Diff line change
Expand Up @@ -365,9 +365,10 @@ def docs(session):
"-T", # show full traceback on exception
"-N", # no colors
"-b",
"html",
"html", # builder
"-d",
os.path.join("docs", "_build", "doctrees", ""),
os.path.join("docs", "_build", "doctrees", ""), # cache directory
# paths to build:
os.path.join("docs", ""),
os.path.join("docs", "_build", "html", ""),
)
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -138,12 +138,12 @@ class SearchProtectedResourcesRequest(proto.Message):

Regular expressions are also supported. For example:

- ``compute.googleapis.com.*`` snapshots resources whose
type starts with ``compute.googleapis.com``.
- ``.*Image`` snapshots resources whose type ends with
``Image``.
- ``.*Image.*`` snapshots resources whose type contains
``Image``.
- ``compute.googleapis.com.*`` snapshots resources whose
type starts with ``compute.googleapis.com``.
- ``.*Image`` snapshots resources whose type ends with
``Image``.
- ``.*Image.*`` snapshots resources whose type contains
``Image``.

See `RE2 <https://github.com/google/re2/wiki/Syntax>`__ for
all supported regular expression syntax. If the regular
Expand Down
5 changes: 3 additions & 2 deletions packages/google-cloud-kms-inventory/noxfile.py
Original file line number Diff line number Diff line change
Expand Up @@ -365,9 +365,10 @@ def docs(session):
"-T", # show full traceback on exception
"-N", # no colors
"-b",
"html",
"html", # builder
"-d",
os.path.join("docs", "_build", "doctrees", ""),
os.path.join("docs", "_build", "doctrees", ""), # cache directory
# paths to build:
os.path.join("docs", ""),
os.path.join("docs", "_build", "html", ""),
)
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -74,7 +74,7 @@ class EkmServiceAsyncClient:
Manages external cryptographic keys and operations using those keys.
Implements a REST model with the following objects:

- [EkmConnection][google.cloud.kms.v1.EkmConnection]
- [EkmConnection][google.cloud.kms.v1.EkmConnection]
"""

_client: EkmServiceClient
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -118,7 +118,7 @@ class EkmServiceClient(metaclass=EkmServiceClientMeta):
Manages external cryptographic keys and operations using those keys.
Implements a REST model with the following objects:

- [EkmConnection][google.cloud.kms.v1.EkmConnection]
- [EkmConnection][google.cloud.kms.v1.EkmConnection]
"""

@staticmethod
Expand Down
Loading
Loading