docs: update docs (#916)
* fix: re-run script
* test: fix noxfile
diff --git a/docs/dyn/cloudbilling_v1.billingAccounts.html b/docs/dyn/cloudbilling_v1.billingAccounts.html
index 32e7751..a9ac9b6 100644
--- a/docs/dyn/cloudbilling_v1.billingAccounts.html
+++ b/docs/dyn/cloudbilling_v1.billingAccounts.html
@@ -89,7 +89,7 @@
<code><a href="#getIamPolicy">getIamPolicy(resource, options_requestedPolicyVersion=None, x__xgafv=None)</a></code></p>
<p class="firstline">Gets the access control policy for a billing account.</p>
<p class="toc_element">
- <code><a href="#list">list(pageSize=None, filter=None, pageToken=None, x__xgafv=None)</a></code></p>
+ <code><a href="#list">list(filter=None, pageSize=None, pageToken=None, x__xgafv=None)</a></code></p>
<p class="firstline">Lists the billing accounts that the current authenticated user has</p>
<p class="toc_element">
<code><a href="#list_next">list_next(previous_request, previous_response)</a></code></p>
@@ -122,22 +122,22 @@
The object takes the form of:
{ # A billing account in [GCP Console](https://console.cloud.google.com/).
- # You can assign a billing account to one or more projects.
- "name": "A String", # The resource name of the billing account. The resource name has the form
- # `billingAccounts/{billing_account_id}`. For example,
- # `billingAccounts/012345-567890-ABCDEF` would be the resource name for
- # billing account `012345-567890-ABCDEF`.
- "open": True or False, # Output only. True if the billing account is open, and will therefore be charged for any
- # usage on associated projects. False if the billing account is closed, and
- # therefore projects associated with it will be unable to use paid services.
- "displayName": "A String", # The display name given to the billing account, such as `My Billing
- # Account`. This name is displayed in the GCP Console.
- "masterBillingAccount": "A String", # If this account is a
- # [subaccount](https://cloud.google.com/billing/docs/concepts), then this
- # will be the resource name of the master billing account that it is being
- # resold through.
- # Otherwise this will be empty.
-}
+ # You can assign a billing account to one or more projects.
+ "displayName": "A String", # The display name given to the billing account, such as `My Billing
+ # Account`. This name is displayed in the GCP Console.
+ "masterBillingAccount": "A String", # If this account is a
+ # [subaccount](https://cloud.google.com/billing/docs/concepts), then this
+ # will be the resource name of the master billing account that it is being
+ # resold through.
+ # Otherwise this will be empty.
+ "name": "A String", # The resource name of the billing account. The resource name has the form
+ # `billingAccounts/{billing_account_id}`. For example,
+ # `billingAccounts/012345-567890-ABCDEF` would be the resource name for
+ # billing account `012345-567890-ABCDEF`.
+ "open": True or False, # Output only. True if the billing account is open, and will therefore be charged for any
+ # usage on associated projects. False if the billing account is closed, and
+ # therefore projects associated with it will be unable to use paid services.
+ }
x__xgafv: string, V1 error format.
Allowed values
@@ -148,22 +148,22 @@
An object of the form:
{ # A billing account in [GCP Console](https://console.cloud.google.com/).
- # You can assign a billing account to one or more projects.
- "name": "A String", # The resource name of the billing account. The resource name has the form
- # `billingAccounts/{billing_account_id}`. For example,
- # `billingAccounts/012345-567890-ABCDEF` would be the resource name for
- # billing account `012345-567890-ABCDEF`.
- "open": True or False, # Output only. True if the billing account is open, and will therefore be charged for any
- # usage on associated projects. False if the billing account is closed, and
- # therefore projects associated with it will be unable to use paid services.
- "displayName": "A String", # The display name given to the billing account, such as `My Billing
- # Account`. This name is displayed in the GCP Console.
- "masterBillingAccount": "A String", # If this account is a
- # [subaccount](https://cloud.google.com/billing/docs/concepts), then this
- # will be the resource name of the master billing account that it is being
- # resold through.
- # Otherwise this will be empty.
- }</pre>
+ # You can assign a billing account to one or more projects.
+ "displayName": "A String", # The display name given to the billing account, such as `My Billing
+ # Account`. This name is displayed in the GCP Console.
+ "masterBillingAccount": "A String", # If this account is a
+ # [subaccount](https://cloud.google.com/billing/docs/concepts), then this
+ # will be the resource name of the master billing account that it is being
+ # resold through.
+ # Otherwise this will be empty.
+ "name": "A String", # The resource name of the billing account. The resource name has the form
+ # `billingAccounts/{billing_account_id}`. For example,
+ # `billingAccounts/012345-567890-ABCDEF` would be the resource name for
+ # billing account `012345-567890-ABCDEF`.
+ "open": True or False, # Output only. True if the billing account is open, and will therefore be charged for any
+ # usage on associated projects. False if the billing account is closed, and
+ # therefore projects associated with it will be unable to use paid services.
+ }</pre>
</div>
<div class="method">
@@ -184,22 +184,22 @@
An object of the form:
{ # A billing account in [GCP Console](https://console.cloud.google.com/).
- # You can assign a billing account to one or more projects.
- "name": "A String", # The resource name of the billing account. The resource name has the form
- # `billingAccounts/{billing_account_id}`. For example,
- # `billingAccounts/012345-567890-ABCDEF` would be the resource name for
- # billing account `012345-567890-ABCDEF`.
- "open": True or False, # Output only. True if the billing account is open, and will therefore be charged for any
- # usage on associated projects. False if the billing account is closed, and
- # therefore projects associated with it will be unable to use paid services.
- "displayName": "A String", # The display name given to the billing account, such as `My Billing
- # Account`. This name is displayed in the GCP Console.
- "masterBillingAccount": "A String", # If this account is a
- # [subaccount](https://cloud.google.com/billing/docs/concepts), then this
- # will be the resource name of the master billing account that it is being
- # resold through.
- # Otherwise this will be empty.
- }</pre>
+ # You can assign a billing account to one or more projects.
+ "displayName": "A String", # The display name given to the billing account, such as `My Billing
+ # Account`. This name is displayed in the GCP Console.
+ "masterBillingAccount": "A String", # If this account is a
+ # [subaccount](https://cloud.google.com/billing/docs/concepts), then this
+ # will be the resource name of the master billing account that it is being
+ # resold through.
+ # Otherwise this will be empty.
+ "name": "A String", # The resource name of the billing account. The resource name has the form
+ # `billingAccounts/{billing_account_id}`. For example,
+ # `billingAccounts/012345-567890-ABCDEF` would be the resource name for
+ # billing account `012345-567890-ABCDEF`.
+ "open": True or False, # Output only. True if the billing account is open, and will therefore be charged for any
+ # usage on associated projects. False if the billing account is closed, and
+ # therefore projects associated with it will be unable to use paid services.
+ }</pre>
</div>
<div class="method">
@@ -299,10 +299,48 @@
#
# For a description of IAM and its features, see the
# [IAM documentation](https://cloud.google.com/iam/docs/).
+ "version": 42, # Specifies the format of the policy.
+ #
+ # Valid values are `0`, `1`, and `3`. Requests that specify an invalid value
+ # are rejected.
+ #
+ # Any operation that affects conditional role bindings must specify version
+ # `3`. This requirement applies to the following operations:
+ #
+ # * Getting a policy that includes a conditional role binding
+ # * Adding a conditional role binding to a policy
+ # * Changing a conditional role binding in a policy
+ # * Removing any role binding, with or without a condition, from a policy
+ # that includes conditions
+ #
+ # **Important:** If you use IAM Conditions, you must include the `etag` field
+ # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
+ # you to overwrite a version `3` policy with a version `1` policy, and all of
+ # the conditions in the version `3` policy are lost.
+ #
+ # If a policy does not include any conditions, operations on that policy may
+ # specify any valid version or leave the field unset.
+ #
+ # To learn which resources support conditions in their IAM policies, see the
+ # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
+ "etag": "A String", # `etag` is used for optimistic concurrency control as a way to help
+ # prevent simultaneous updates of a policy from overwriting each other.
+ # It is strongly suggested that systems make use of the `etag` in the
+ # read-modify-write cycle to perform policy updates in order to avoid race
+ # conditions: An `etag` is returned in the response to `getIamPolicy`, and
+ # systems are expected to put that etag in the request to `setIamPolicy` to
+ # ensure that their change will be applied to the same version of the policy.
+ #
+ # **Important:** If you use IAM Conditions, you must include the `etag` field
+ # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
+ # you to overwrite a version `3` policy with a version `1` policy, and all of
+ # the conditions in the version `3` policy are lost.
"bindings": [ # Associates a list of `members` to a `role`. Optionally, may specify a
# `condition` that determines how and when the `bindings` are applied. Each
# of the `bindings` must contain at least one member.
{ # Associates `members` with a `role`.
+ "role": "A String", # Role that is assigned to `members`.
+ # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
"condition": { # Represents a textual expression in the Common Expression Language (CEL) # The condition that is associated with this binding.
#
# If the condition evaluates to `true`, then this binding applies to the
@@ -345,15 +383,15 @@
# The exact variables and functions that may be referenced within an expression
# are determined by the service that evaluates it. See the service
# documentation for additional information.
- "description": "A String", # Optional. Description of the expression. This is a longer text which
- # describes the expression, e.g. when hovered over it in a UI.
"expression": "A String", # Textual representation of an expression in Common Expression Language
# syntax.
+ "location": "A String", # Optional. String indicating the location of the expression for error
+ # reporting, e.g. a file name and a position in the file.
"title": "A String", # Optional. Title for the expression, i.e. a short string describing
# its purpose. This can be used e.g. in UIs which allow to enter the
# expression.
- "location": "A String", # Optional. String indicating the location of the expression for error
- # reporting, e.g. a file name and a position in the file.
+ "description": "A String", # Optional. Description of the expression. This is a longer text which
+ # describes the expression, e.g. when hovered over it in a UI.
},
"members": [ # Specifies the identities requesting access for a Cloud Platform resource.
# `members` can have the following values:
@@ -400,46 +438,8 @@
#
"A String",
],
- "role": "A String", # Role that is assigned to `members`.
- # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
},
],
- "etag": "A String", # `etag` is used for optimistic concurrency control as a way to help
- # prevent simultaneous updates of a policy from overwriting each other.
- # It is strongly suggested that systems make use of the `etag` in the
- # read-modify-write cycle to perform policy updates in order to avoid race
- # conditions: An `etag` is returned in the response to `getIamPolicy`, and
- # systems are expected to put that etag in the request to `setIamPolicy` to
- # ensure that their change will be applied to the same version of the policy.
- #
- # **Important:** If you use IAM Conditions, you must include the `etag` field
- # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
- # you to overwrite a version `3` policy with a version `1` policy, and all of
- # the conditions in the version `3` policy are lost.
- "version": 42, # Specifies the format of the policy.
- #
- # Valid values are `0`, `1`, and `3`. Requests that specify an invalid value
- # are rejected.
- #
- # Any operation that affects conditional role bindings must specify version
- # `3`. This requirement applies to the following operations:
- #
- # * Getting a policy that includes a conditional role binding
- # * Adding a conditional role binding to a policy
- # * Changing a conditional role binding in a policy
- # * Removing any role binding, with or without a condition, from a policy
- # that includes conditions
- #
- # **Important:** If you use IAM Conditions, you must include the `etag` field
- # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
- # you to overwrite a version `3` policy with a version `1` policy, and all of
- # the conditions in the version `3` policy are lost.
- #
- # If a policy does not include any conditions, operations on that policy may
- # specify any valid version or leave the field unset.
- #
- # To learn which resources support conditions in their IAM policies, see the
- # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
"auditConfigs": [ # Specifies cloud audit logging configuration for this policy.
{ # Specifies the audit configuration for a service.
# The configuration determines which permission types are logged, and what
@@ -492,6 +492,9 @@
# For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ
# logging. It also exempts jose@example.com from DATA_READ logging, and
# aliya@example.com from DATA_WRITE logging.
+ "service": "A String", # Specifies a service that will be enabled for audit logging.
+ # For example, `storage.googleapis.com`, `cloudsql.googleapis.com`.
+ # `allServices` is a special value that covers all services.
"auditLogConfigs": [ # The configuration for logging of each type of permission.
{ # Provides the configuration for logging a type of permissions.
# Example:
@@ -520,29 +523,26 @@
"logType": "A String", # The log type that this config enables.
},
],
- "service": "A String", # Specifies a service that will be enabled for audit logging.
- # For example, `storage.googleapis.com`, `cloudsql.googleapis.com`.
- # `allServices` is a special value that covers all services.
},
],
}</pre>
</div>
<div class="method">
- <code class="details" id="list">list(pageSize=None, filter=None, pageToken=None, x__xgafv=None)</code>
+ <code class="details" id="list">list(filter=None, pageSize=None, pageToken=None, x__xgafv=None)</code>
<pre>Lists the billing accounts that the current authenticated user has
permission to
[view](https://cloud.google.com/billing/docs/how-to/billing-access).
Args:
- pageSize: integer, Requested page size. The maximum page size is 100; this is also the
-default.
filter: string, Options for how to filter the returned billing accounts.
Currently this only supports filtering for
[subaccounts](https://cloud.google.com/billing/docs/concepts) under a
single provided reseller billing account.
(e.g. "master_billing_account=billingAccounts/012345-678901-ABCDEF").
Boolean algebra and other fields are not currently supported.
+ pageSize: integer, Requested page size. The maximum page size is 100; this is also the
+default.
pageToken: string, A token identifying a page of results to return. This should be a
`next_page_token` value returned from a previous `ListBillingAccounts`
call. If unspecified, the first page of results is returned.
@@ -555,28 +555,28 @@
An object of the form:
{ # Response message for `ListBillingAccounts`.
- "billingAccounts": [ # A list of billing accounts.
- { # A billing account in [GCP Console](https://console.cloud.google.com/).
- # You can assign a billing account to one or more projects.
- "name": "A String", # The resource name of the billing account. The resource name has the form
- # `billingAccounts/{billing_account_id}`. For example,
- # `billingAccounts/012345-567890-ABCDEF` would be the resource name for
- # billing account `012345-567890-ABCDEF`.
- "open": True or False, # Output only. True if the billing account is open, and will therefore be charged for any
- # usage on associated projects. False if the billing account is closed, and
- # therefore projects associated with it will be unable to use paid services.
- "displayName": "A String", # The display name given to the billing account, such as `My Billing
- # Account`. This name is displayed in the GCP Console.
- "masterBillingAccount": "A String", # If this account is a
- # [subaccount](https://cloud.google.com/billing/docs/concepts), then this
- # will be the resource name of the master billing account that it is being
- # resold through.
- # Otherwise this will be empty.
- },
- ],
"nextPageToken": "A String", # A token to retrieve the next page of results. To retrieve the next page,
# call `ListBillingAccounts` again with the `page_token` field set to this
# value. This field is empty if there are no more results to retrieve.
+ "billingAccounts": [ # A list of billing accounts.
+ { # A billing account in [GCP Console](https://console.cloud.google.com/).
+ # You can assign a billing account to one or more projects.
+ "displayName": "A String", # The display name given to the billing account, such as `My Billing
+ # Account`. This name is displayed in the GCP Console.
+ "masterBillingAccount": "A String", # If this account is a
+ # [subaccount](https://cloud.google.com/billing/docs/concepts), then this
+ # will be the resource name of the master billing account that it is being
+ # resold through.
+ # Otherwise this will be empty.
+ "name": "A String", # The resource name of the billing account. The resource name has the form
+ # `billingAccounts/{billing_account_id}`. For example,
+ # `billingAccounts/012345-567890-ABCDEF` would be the resource name for
+ # billing account `012345-567890-ABCDEF`.
+ "open": True or False, # Output only. True if the billing account is open, and will therefore be charged for any
+ # usage on associated projects. False if the billing account is closed, and
+ # therefore projects associated with it will be unable to use paid services.
+ },
+ ],
}</pre>
</div>
@@ -609,22 +609,22 @@
The object takes the form of:
{ # A billing account in [GCP Console](https://console.cloud.google.com/).
- # You can assign a billing account to one or more projects.
- "name": "A String", # The resource name of the billing account. The resource name has the form
- # `billingAccounts/{billing_account_id}`. For example,
- # `billingAccounts/012345-567890-ABCDEF` would be the resource name for
- # billing account `012345-567890-ABCDEF`.
- "open": True or False, # Output only. True if the billing account is open, and will therefore be charged for any
- # usage on associated projects. False if the billing account is closed, and
- # therefore projects associated with it will be unable to use paid services.
- "displayName": "A String", # The display name given to the billing account, such as `My Billing
- # Account`. This name is displayed in the GCP Console.
- "masterBillingAccount": "A String", # If this account is a
- # [subaccount](https://cloud.google.com/billing/docs/concepts), then this
- # will be the resource name of the master billing account that it is being
- # resold through.
- # Otherwise this will be empty.
-}
+ # You can assign a billing account to one or more projects.
+ "displayName": "A String", # The display name given to the billing account, such as `My Billing
+ # Account`. This name is displayed in the GCP Console.
+ "masterBillingAccount": "A String", # If this account is a
+ # [subaccount](https://cloud.google.com/billing/docs/concepts), then this
+ # will be the resource name of the master billing account that it is being
+ # resold through.
+ # Otherwise this will be empty.
+ "name": "A String", # The resource name of the billing account. The resource name has the form
+ # `billingAccounts/{billing_account_id}`. For example,
+ # `billingAccounts/012345-567890-ABCDEF` would be the resource name for
+ # billing account `012345-567890-ABCDEF`.
+ "open": True or False, # Output only. True if the billing account is open, and will therefore be charged for any
+ # usage on associated projects. False if the billing account is closed, and
+ # therefore projects associated with it will be unable to use paid services.
+ }
updateMask: string, The update mask applied to the resource.
Only "display_name" is currently supported.
@@ -637,22 +637,22 @@
An object of the form:
{ # A billing account in [GCP Console](https://console.cloud.google.com/).
- # You can assign a billing account to one or more projects.
- "name": "A String", # The resource name of the billing account. The resource name has the form
- # `billingAccounts/{billing_account_id}`. For example,
- # `billingAccounts/012345-567890-ABCDEF` would be the resource name for
- # billing account `012345-567890-ABCDEF`.
- "open": True or False, # Output only. True if the billing account is open, and will therefore be charged for any
- # usage on associated projects. False if the billing account is closed, and
- # therefore projects associated with it will be unable to use paid services.
- "displayName": "A String", # The display name given to the billing account, such as `My Billing
- # Account`. This name is displayed in the GCP Console.
- "masterBillingAccount": "A String", # If this account is a
- # [subaccount](https://cloud.google.com/billing/docs/concepts), then this
- # will be the resource name of the master billing account that it is being
- # resold through.
- # Otherwise this will be empty.
- }</pre>
+ # You can assign a billing account to one or more projects.
+ "displayName": "A String", # The display name given to the billing account, such as `My Billing
+ # Account`. This name is displayed in the GCP Console.
+ "masterBillingAccount": "A String", # If this account is a
+ # [subaccount](https://cloud.google.com/billing/docs/concepts), then this
+ # will be the resource name of the master billing account that it is being
+ # resold through.
+ # Otherwise this will be empty.
+ "name": "A String", # The resource name of the billing account. The resource name has the form
+ # `billingAccounts/{billing_account_id}`. For example,
+ # `billingAccounts/012345-567890-ABCDEF` would be the resource name for
+ # billing account `012345-567890-ABCDEF`.
+ "open": True or False, # Output only. True if the billing account is open, and will therefore be charged for any
+ # usage on associated projects. False if the billing account is closed, and
+ # therefore projects associated with it will be unable to use paid services.
+ }</pre>
</div>
<div class="method">
@@ -740,10 +740,48 @@
#
# For a description of IAM and its features, see the
# [IAM documentation](https://cloud.google.com/iam/docs/).
+ "version": 42, # Specifies the format of the policy.
+ #
+ # Valid values are `0`, `1`, and `3`. Requests that specify an invalid value
+ # are rejected.
+ #
+ # Any operation that affects conditional role bindings must specify version
+ # `3`. This requirement applies to the following operations:
+ #
+ # * Getting a policy that includes a conditional role binding
+ # * Adding a conditional role binding to a policy
+ # * Changing a conditional role binding in a policy
+ # * Removing any role binding, with or without a condition, from a policy
+ # that includes conditions
+ #
+ # **Important:** If you use IAM Conditions, you must include the `etag` field
+ # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
+ # you to overwrite a version `3` policy with a version `1` policy, and all of
+ # the conditions in the version `3` policy are lost.
+ #
+ # If a policy does not include any conditions, operations on that policy may
+ # specify any valid version or leave the field unset.
+ #
+ # To learn which resources support conditions in their IAM policies, see the
+ # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
+ "etag": "A String", # `etag` is used for optimistic concurrency control as a way to help
+ # prevent simultaneous updates of a policy from overwriting each other.
+ # It is strongly suggested that systems make use of the `etag` in the
+ # read-modify-write cycle to perform policy updates in order to avoid race
+ # conditions: An `etag` is returned in the response to `getIamPolicy`, and
+ # systems are expected to put that etag in the request to `setIamPolicy` to
+ # ensure that their change will be applied to the same version of the policy.
+ #
+ # **Important:** If you use IAM Conditions, you must include the `etag` field
+ # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
+ # you to overwrite a version `3` policy with a version `1` policy, and all of
+ # the conditions in the version `3` policy are lost.
"bindings": [ # Associates a list of `members` to a `role`. Optionally, may specify a
# `condition` that determines how and when the `bindings` are applied. Each
# of the `bindings` must contain at least one member.
{ # Associates `members` with a `role`.
+ "role": "A String", # Role that is assigned to `members`.
+ # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
"condition": { # Represents a textual expression in the Common Expression Language (CEL) # The condition that is associated with this binding.
#
# If the condition evaluates to `true`, then this binding applies to the
@@ -786,15 +824,15 @@
# The exact variables and functions that may be referenced within an expression
# are determined by the service that evaluates it. See the service
# documentation for additional information.
- "description": "A String", # Optional. Description of the expression. This is a longer text which
- # describes the expression, e.g. when hovered over it in a UI.
"expression": "A String", # Textual representation of an expression in Common Expression Language
# syntax.
+ "location": "A String", # Optional. String indicating the location of the expression for error
+ # reporting, e.g. a file name and a position in the file.
"title": "A String", # Optional. Title for the expression, i.e. a short string describing
# its purpose. This can be used e.g. in UIs which allow to enter the
# expression.
- "location": "A String", # Optional. String indicating the location of the expression for error
- # reporting, e.g. a file name and a position in the file.
+ "description": "A String", # Optional. Description of the expression. This is a longer text which
+ # describes the expression, e.g. when hovered over it in a UI.
},
"members": [ # Specifies the identities requesting access for a Cloud Platform resource.
# `members` can have the following values:
@@ -841,46 +879,8 @@
#
"A String",
],
- "role": "A String", # Role that is assigned to `members`.
- # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
},
],
- "etag": "A String", # `etag` is used for optimistic concurrency control as a way to help
- # prevent simultaneous updates of a policy from overwriting each other.
- # It is strongly suggested that systems make use of the `etag` in the
- # read-modify-write cycle to perform policy updates in order to avoid race
- # conditions: An `etag` is returned in the response to `getIamPolicy`, and
- # systems are expected to put that etag in the request to `setIamPolicy` to
- # ensure that their change will be applied to the same version of the policy.
- #
- # **Important:** If you use IAM Conditions, you must include the `etag` field
- # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
- # you to overwrite a version `3` policy with a version `1` policy, and all of
- # the conditions in the version `3` policy are lost.
- "version": 42, # Specifies the format of the policy.
- #
- # Valid values are `0`, `1`, and `3`. Requests that specify an invalid value
- # are rejected.
- #
- # Any operation that affects conditional role bindings must specify version
- # `3`. This requirement applies to the following operations:
- #
- # * Getting a policy that includes a conditional role binding
- # * Adding a conditional role binding to a policy
- # * Changing a conditional role binding in a policy
- # * Removing any role binding, with or without a condition, from a policy
- # that includes conditions
- #
- # **Important:** If you use IAM Conditions, you must include the `etag` field
- # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
- # you to overwrite a version `3` policy with a version `1` policy, and all of
- # the conditions in the version `3` policy are lost.
- #
- # If a policy does not include any conditions, operations on that policy may
- # specify any valid version or leave the field unset.
- #
- # To learn which resources support conditions in their IAM policies, see the
- # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
"auditConfigs": [ # Specifies cloud audit logging configuration for this policy.
{ # Specifies the audit configuration for a service.
# The configuration determines which permission types are logged, and what
@@ -933,6 +933,9 @@
# For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ
# logging. It also exempts jose@example.com from DATA_READ logging, and
# aliya@example.com from DATA_WRITE logging.
+ "service": "A String", # Specifies a service that will be enabled for audit logging.
+ # For example, `storage.googleapis.com`, `cloudsql.googleapis.com`.
+ # `allServices` is a special value that covers all services.
"auditLogConfigs": [ # The configuration for logging of each type of permission.
{ # Provides the configuration for logging a type of permissions.
# Example:
@@ -961,9 +964,6 @@
"logType": "A String", # The log type that this config enables.
},
],
- "service": "A String", # Specifies a service that will be enabled for audit logging.
- # For example, `storage.googleapis.com`, `cloudsql.googleapis.com`.
- # `allServices` is a special value that covers all services.
},
],
},
@@ -1049,10 +1049,48 @@
#
# For a description of IAM and its features, see the
# [IAM documentation](https://cloud.google.com/iam/docs/).
+ "version": 42, # Specifies the format of the policy.
+ #
+ # Valid values are `0`, `1`, and `3`. Requests that specify an invalid value
+ # are rejected.
+ #
+ # Any operation that affects conditional role bindings must specify version
+ # `3`. This requirement applies to the following operations:
+ #
+ # * Getting a policy that includes a conditional role binding
+ # * Adding a conditional role binding to a policy
+ # * Changing a conditional role binding in a policy
+ # * Removing any role binding, with or without a condition, from a policy
+ # that includes conditions
+ #
+ # **Important:** If you use IAM Conditions, you must include the `etag` field
+ # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
+ # you to overwrite a version `3` policy with a version `1` policy, and all of
+ # the conditions in the version `3` policy are lost.
+ #
+ # If a policy does not include any conditions, operations on that policy may
+ # specify any valid version or leave the field unset.
+ #
+ # To learn which resources support conditions in their IAM policies, see the
+ # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
+ "etag": "A String", # `etag` is used for optimistic concurrency control as a way to help
+ # prevent simultaneous updates of a policy from overwriting each other.
+ # It is strongly suggested that systems make use of the `etag` in the
+ # read-modify-write cycle to perform policy updates in order to avoid race
+ # conditions: An `etag` is returned in the response to `getIamPolicy`, and
+ # systems are expected to put that etag in the request to `setIamPolicy` to
+ # ensure that their change will be applied to the same version of the policy.
+ #
+ # **Important:** If you use IAM Conditions, you must include the `etag` field
+ # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
+ # you to overwrite a version `3` policy with a version `1` policy, and all of
+ # the conditions in the version `3` policy are lost.
"bindings": [ # Associates a list of `members` to a `role`. Optionally, may specify a
# `condition` that determines how and when the `bindings` are applied. Each
# of the `bindings` must contain at least one member.
{ # Associates `members` with a `role`.
+ "role": "A String", # Role that is assigned to `members`.
+ # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
"condition": { # Represents a textual expression in the Common Expression Language (CEL) # The condition that is associated with this binding.
#
# If the condition evaluates to `true`, then this binding applies to the
@@ -1095,15 +1133,15 @@
# The exact variables and functions that may be referenced within an expression
# are determined by the service that evaluates it. See the service
# documentation for additional information.
- "description": "A String", # Optional. Description of the expression. This is a longer text which
- # describes the expression, e.g. when hovered over it in a UI.
"expression": "A String", # Textual representation of an expression in Common Expression Language
# syntax.
+ "location": "A String", # Optional. String indicating the location of the expression for error
+ # reporting, e.g. a file name and a position in the file.
"title": "A String", # Optional. Title for the expression, i.e. a short string describing
# its purpose. This can be used e.g. in UIs which allow to enter the
# expression.
- "location": "A String", # Optional. String indicating the location of the expression for error
- # reporting, e.g. a file name and a position in the file.
+ "description": "A String", # Optional. Description of the expression. This is a longer text which
+ # describes the expression, e.g. when hovered over it in a UI.
},
"members": [ # Specifies the identities requesting access for a Cloud Platform resource.
# `members` can have the following values:
@@ -1150,46 +1188,8 @@
#
"A String",
],
- "role": "A String", # Role that is assigned to `members`.
- # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
},
],
- "etag": "A String", # `etag` is used for optimistic concurrency control as a way to help
- # prevent simultaneous updates of a policy from overwriting each other.
- # It is strongly suggested that systems make use of the `etag` in the
- # read-modify-write cycle to perform policy updates in order to avoid race
- # conditions: An `etag` is returned in the response to `getIamPolicy`, and
- # systems are expected to put that etag in the request to `setIamPolicy` to
- # ensure that their change will be applied to the same version of the policy.
- #
- # **Important:** If you use IAM Conditions, you must include the `etag` field
- # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
- # you to overwrite a version `3` policy with a version `1` policy, and all of
- # the conditions in the version `3` policy are lost.
- "version": 42, # Specifies the format of the policy.
- #
- # Valid values are `0`, `1`, and `3`. Requests that specify an invalid value
- # are rejected.
- #
- # Any operation that affects conditional role bindings must specify version
- # `3`. This requirement applies to the following operations:
- #
- # * Getting a policy that includes a conditional role binding
- # * Adding a conditional role binding to a policy
- # * Changing a conditional role binding in a policy
- # * Removing any role binding, with or without a condition, from a policy
- # that includes conditions
- #
- # **Important:** If you use IAM Conditions, you must include the `etag` field
- # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
- # you to overwrite a version `3` policy with a version `1` policy, and all of
- # the conditions in the version `3` policy are lost.
- #
- # If a policy does not include any conditions, operations on that policy may
- # specify any valid version or leave the field unset.
- #
- # To learn which resources support conditions in their IAM policies, see the
- # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
"auditConfigs": [ # Specifies cloud audit logging configuration for this policy.
{ # Specifies the audit configuration for a service.
# The configuration determines which permission types are logged, and what
@@ -1242,6 +1242,9 @@
# For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ
# logging. It also exempts jose@example.com from DATA_READ logging, and
# aliya@example.com from DATA_WRITE logging.
+ "service": "A String", # Specifies a service that will be enabled for audit logging.
+ # For example, `storage.googleapis.com`, `cloudsql.googleapis.com`.
+ # `allServices` is a special value that covers all services.
"auditLogConfigs": [ # The configuration for logging of each type of permission.
{ # Provides the configuration for logging a type of permissions.
# Example:
@@ -1270,9 +1273,6 @@
"logType": "A String", # The log type that this config enables.
},
],
- "service": "A String", # Specifies a service that will be enabled for audit logging.
- # For example, `storage.googleapis.com`, `cloudsql.googleapis.com`.
- # `allServices` is a special value that covers all services.
},
],
}</pre>