blob: 2e5861e41538e9cab2014c4ff6a313edbde772af [file] [log] [blame]
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001<html><body>
2<style>
3
4body, h1, h2, h3, div, span, p, pre, a {
5 margin: 0;
6 padding: 0;
7 border: 0;
8 font-weight: inherit;
9 font-style: inherit;
10 font-size: 100%;
11 font-family: inherit;
12 vertical-align: baseline;
13}
14
15body {
16 font-size: 13px;
17 padding: 1em;
18}
19
20h1 {
21 font-size: 26px;
22 margin-bottom: 1em;
23}
24
25h2 {
26 font-size: 24px;
27 margin-bottom: 1em;
28}
29
30h3 {
31 font-size: 20px;
32 margin-bottom: 1em;
33 margin-top: 1em;
34}
35
36pre, code {
37 line-height: 1.5;
38 font-family: Monaco, 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', 'Lucida Console', monospace;
39}
40
41pre {
42 margin-top: 0.5em;
43}
44
45h1, h2, h3, p {
46 font-family: Arial, sans serif;
47}
48
49h1, h2, h3 {
50 border-bottom: solid #CCC 1px;
51}
52
53.toc_element {
54 margin-top: 0.5em;
55}
56
57.firstline {
58 margin-left: 2 em;
59}
60
61.method {
62 margin-top: 1em;
63 border: solid 1px #CCC;
64 padding: 1em;
65 background: #EEE;
66}
67
68.details {
69 font-weight: bold;
70 font-size: 14px;
71}
72
73</style>
74
75<h1><a href="bigtableadmin_v2.html">Cloud Bigtable Admin API</a> . <a href="bigtableadmin_v2.projects.html">projects</a> . <a href="bigtableadmin_v2.projects.instances.html">instances</a></h1>
76<h2>Instance Methods</h2>
77<p class="toc_element">
78 <code><a href="bigtableadmin_v2.projects.instances.appProfiles.html">appProfiles()</a></code>
79</p>
80<p class="firstline">Returns the appProfiles Resource.</p>
81
82<p class="toc_element">
83 <code><a href="bigtableadmin_v2.projects.instances.clusters.html">clusters()</a></code>
84</p>
85<p class="firstline">Returns the clusters Resource.</p>
86
87<p class="toc_element">
88 <code><a href="bigtableadmin_v2.projects.instances.tables.html">tables()</a></code>
89</p>
90<p class="firstline">Returns the tables Resource.</p>
91
92<p class="toc_element">
Dan O'Mearadd494642020-05-01 07:42:23 -070093 <code><a href="#create">create(parent, body=None, x__xgafv=None)</a></code></p>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -070094<p class="firstline">Create an instance within a project.</p>
95<p class="toc_element">
96 <code><a href="#delete">delete(name, x__xgafv=None)</a></code></p>
97<p class="firstline">Delete an instance from a project.</p>
98<p class="toc_element">
99 <code><a href="#get">get(name, x__xgafv=None)</a></code></p>
100<p class="firstline">Gets information about an instance.</p>
101<p class="toc_element">
102 <code><a href="#getIamPolicy">getIamPolicy(resource, body=None, x__xgafv=None)</a></code></p>
103<p class="firstline">Gets the access control policy for an instance resource. Returns an empty</p>
104<p class="toc_element">
105 <code><a href="#list">list(parent, pageToken=None, x__xgafv=None)</a></code></p>
106<p class="firstline">Lists information about instances in a project.</p>
107<p class="toc_element">
108 <code><a href="#list_next">list_next(previous_request, previous_response)</a></code></p>
109<p class="firstline">Retrieves the next page of results.</p>
110<p class="toc_element">
Dan O'Mearadd494642020-05-01 07:42:23 -0700111 <code><a href="#partialUpdateInstance">partialUpdateInstance(name, body=None, updateMask=None, x__xgafv=None)</a></code></p>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700112<p class="firstline">Partially updates an instance within a project. This method can modify all</p>
113<p class="toc_element">
Dan O'Mearadd494642020-05-01 07:42:23 -0700114 <code><a href="#setIamPolicy">setIamPolicy(resource, body=None, x__xgafv=None)</a></code></p>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700115<p class="firstline">Sets the access control policy on an instance resource. Replaces any</p>
116<p class="toc_element">
Dan O'Mearadd494642020-05-01 07:42:23 -0700117 <code><a href="#testIamPermissions">testIamPermissions(resource, body=None, x__xgafv=None)</a></code></p>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700118<p class="firstline">Returns permissions that the caller has on the specified instance resource.</p>
119<p class="toc_element">
Dan O'Mearadd494642020-05-01 07:42:23 -0700120 <code><a href="#update">update(name, body=None, x__xgafv=None)</a></code></p>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700121<p class="firstline">Updates an instance within a project. This method updates only the display</p>
122<h3>Method Details</h3>
123<div class="method">
Dan O'Mearadd494642020-05-01 07:42:23 -0700124 <code class="details" id="create">create(parent, body=None, x__xgafv=None)</code>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700125 <pre>Create an instance within a project.
126
127Args:
Dan O'Mearadd494642020-05-01 07:42:23 -0700128 parent: string, Required. The unique name of the project in which to create the new instance.
129Values are of the form `projects/{project}`. (required)
130 body: object, The request body.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700131 The object takes the form of:
132
133{ # Request message for BigtableInstanceAdmin.CreateInstance.
Bu Sun Kim65020912020-05-20 12:08:20 -0700134 &quot;instanceId&quot;: &quot;A String&quot;, # Required. The ID to be used when referring to the new instance within its project,
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700135 # e.g., just `myinstance` rather than
136 # `projects/myproject/instances/myinstance`.
Bu Sun Kim65020912020-05-20 12:08:20 -0700137 &quot;clusters&quot;: { # Required. The clusters to be created within the instance, mapped by desired
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700138 # cluster ID, e.g., just `mycluster` rather than
139 # `projects/myproject/instances/myinstance/clusters/mycluster`.
140 # Fields marked `OutputOnly` must be left blank.
Dan O'Mearadd494642020-05-01 07:42:23 -0700141 # Currently, at most four clusters can be specified.
Bu Sun Kim65020912020-05-20 12:08:20 -0700142 &quot;a_key&quot;: { # A resizable group of nodes in a particular cloud location, capable
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700143 # of serving all Tables in the parent
144 # Instance.
Bu Sun Kim65020912020-05-20 12:08:20 -0700145 &quot;serveNodes&quot;: 42, # Required. The number of nodes allocated to this cluster. More nodes enable higher
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700146 # throughput and more consistent performance.
Bu Sun Kim65020912020-05-20 12:08:20 -0700147 &quot;defaultStorageType&quot;: &quot;A String&quot;, # (`CreationOnly`)
148 # The type of storage used by this cluster to serve its
149 # parent instance&#x27;s tables, unless explicitly overridden.
150 &quot;location&quot;: &quot;A String&quot;, # (`CreationOnly`)
151 # The location where this cluster&#x27;s nodes and storage reside. For best
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700152 # performance, clients should be located as close as possible to this
153 # cluster. Currently only zones are supported, so values should be of the
Dan O'Mearadd494642020-05-01 07:42:23 -0700154 # form `projects/{project}/locations/{zone}`.
Bu Sun Kim65020912020-05-20 12:08:20 -0700155 &quot;state&quot;: &quot;A String&quot;, # (`OutputOnly`)
156 # The current state of the cluster.
157 &quot;name&quot;: &quot;A String&quot;, # Required. (`OutputOnly`)
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700158 # The unique name of the cluster. Values are of the form
Dan O'Mearadd494642020-05-01 07:42:23 -0700159 # `projects/{project}/instances/{instance}/clusters/a-z*`.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700160 },
161 },
Bu Sun Kim65020912020-05-20 12:08:20 -0700162 &quot;instance&quot;: { # A collection of Bigtable Tables and # Required. The instance to create.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700163 # Fields marked `OutputOnly` must be left blank.
164 # the resources that serve them.
165 # All tables in an instance are served from all
166 # Clusters in the instance.
Bu Sun Kim65020912020-05-20 12:08:20 -0700167 &quot;type&quot;: &quot;A String&quot;, # Required. The type of the instance. Defaults to `PRODUCTION`.
168 &quot;labels&quot;: { # Required. Labels are a flexible and lightweight mechanism for organizing cloud
169 # resources into groups that reflect a customer&#x27;s organizational needs and
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700170 # deployment strategies. They can be used to filter resources and aggregate
171 # metrics.
172 #
173 # * Label keys must be between 1 and 63 characters long and must conform to
174 # the regular expression: `\p{Ll}\p{Lo}{0,62}`.
175 # * Label values must be between 0 and 63 characters long and must conform to
176 # the regular expression: `[\p{Ll}\p{Lo}\p{N}_-]{0,63}`.
177 # * No more than 64 labels can be associated with a given resource.
178 # * Keys and values must both be under 128 bytes.
Bu Sun Kim65020912020-05-20 12:08:20 -0700179 &quot;a_key&quot;: &quot;A String&quot;,
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700180 },
Bu Sun Kim65020912020-05-20 12:08:20 -0700181 &quot;state&quot;: &quot;A String&quot;, # (`OutputOnly`)
182 # The current state of the instance.
183 &quot;name&quot;: &quot;A String&quot;, # Required. (`OutputOnly`)
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700184 # The unique name of the instance. Values are of the form
Dan O'Mearadd494642020-05-01 07:42:23 -0700185 # `projects/{project}/instances/a-z+[a-z0-9]`.
Bu Sun Kim65020912020-05-20 12:08:20 -0700186 &quot;displayName&quot;: &quot;A String&quot;, # Required. The descriptive name for this instance as it appears in UIs.
187 # Can be changed at any time, but should be kept globally unique
188 # to avoid confusion.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700189 },
Bu Sun Kim65020912020-05-20 12:08:20 -0700190 &quot;parent&quot;: &quot;A String&quot;, # Required. The unique name of the project in which to create the new instance.
191 # Values are of the form `projects/{project}`.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700192 }
193
194 x__xgafv: string, V1 error format.
195 Allowed values
196 1 - v1 error format
197 2 - v2 error format
198
199Returns:
200 An object of the form:
201
202 { # This resource represents a long-running operation that is the result of a
203 # network API call.
Bu Sun Kim65020912020-05-20 12:08:20 -0700204 &quot;metadata&quot;: { # Service-specific metadata associated with the operation. It typically
205 # contains progress information and common metadata such as create time.
206 # Some services might not provide such metadata. Any method that returns a
207 # long-running operation should document the metadata type, if any.
208 &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
209 },
210 &quot;done&quot;: True or False, # If the value is `false`, it means the operation is still in progress.
211 # If `true`, the operation is completed, and either `error` or `response` is
212 # available.
213 &quot;response&quot;: { # The normal response of the operation in case of success. If the original
Dan O'Mearadd494642020-05-01 07:42:23 -0700214 # method returns no data on success, such as `Delete`, the response is
215 # `google.protobuf.Empty`. If the original method is standard
216 # `Get`/`Create`/`Update`, the response should be the resource. For other
217 # methods, the response should have the type `XxxResponse`, where `Xxx`
218 # is the original method name. For example, if the original method name
219 # is `TakeSnapshot()`, the inferred response type is
220 # `TakeSnapshotResponse`.
Bu Sun Kim65020912020-05-20 12:08:20 -0700221 &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
Dan O'Mearadd494642020-05-01 07:42:23 -0700222 },
Bu Sun Kim65020912020-05-20 12:08:20 -0700223 &quot;name&quot;: &quot;A String&quot;, # The server-assigned name, which is only unique within the same service that
Dan O'Mearadd494642020-05-01 07:42:23 -0700224 # originally returns it. If you use the default HTTP mapping, the
225 # `name` should be a resource name ending with `operations/{unique_id}`.
Bu Sun Kim65020912020-05-20 12:08:20 -0700226 &quot;error&quot;: { # The `Status` type defines a logical error model that is suitable for # The error result of the operation in case of failure or cancellation.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700227 # different programming environments, including REST APIs and RPC APIs. It is
Dan O'Mearadd494642020-05-01 07:42:23 -0700228 # used by [gRPC](https://github.com/grpc). Each `Status` message contains
229 # three pieces of data: error code, error message, and error details.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700230 #
Dan O'Mearadd494642020-05-01 07:42:23 -0700231 # You can find out more about this error model and how to work with it in the
232 # [API Design Guide](https://cloud.google.com/apis/design/errors).
Bu Sun Kim65020912020-05-20 12:08:20 -0700233 &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
234 &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700235 # user-facing error message should be localized and sent in the
236 # google.rpc.Status.details field, or localized by the client.
Bu Sun Kim65020912020-05-20 12:08:20 -0700237 &quot;details&quot;: [ # A list of messages that carry the error details. There is a common set of
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700238 # message types for APIs to use.
239 {
Bu Sun Kim65020912020-05-20 12:08:20 -0700240 &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700241 },
242 ],
243 },
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700244 }</pre>
245</div>
246
247<div class="method">
248 <code class="details" id="delete">delete(name, x__xgafv=None)</code>
249 <pre>Delete an instance from a project.
250
251Args:
Dan O'Mearadd494642020-05-01 07:42:23 -0700252 name: string, Required. The unique name of the instance to be deleted.
253Values are of the form `projects/{project}/instances/{instance}`. (required)
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700254 x__xgafv: string, V1 error format.
255 Allowed values
256 1 - v1 error format
257 2 - v2 error format
258
259Returns:
260 An object of the form:
261
262 { # A generic empty message that you can re-use to avoid defining duplicated
263 # empty messages in your APIs. A typical example is to use it as the request
264 # or the response type of an API method. For instance:
265 #
266 # service Foo {
267 # rpc Bar(google.protobuf.Empty) returns (google.protobuf.Empty);
268 # }
269 #
270 # The JSON representation for `Empty` is empty JSON object `{}`.
271 }</pre>
272</div>
273
274<div class="method">
275 <code class="details" id="get">get(name, x__xgafv=None)</code>
276 <pre>Gets information about an instance.
277
278Args:
Dan O'Mearadd494642020-05-01 07:42:23 -0700279 name: string, Required. The unique name of the requested instance. Values are of the form
280`projects/{project}/instances/{instance}`. (required)
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700281 x__xgafv: string, V1 error format.
282 Allowed values
283 1 - v1 error format
284 2 - v2 error format
285
286Returns:
287 An object of the form:
288
289 { # A collection of Bigtable Tables and
290 # the resources that serve them.
291 # All tables in an instance are served from all
292 # Clusters in the instance.
Bu Sun Kim65020912020-05-20 12:08:20 -0700293 &quot;type&quot;: &quot;A String&quot;, # Required. The type of the instance. Defaults to `PRODUCTION`.
294 &quot;labels&quot;: { # Required. Labels are a flexible and lightweight mechanism for organizing cloud
295 # resources into groups that reflect a customer&#x27;s organizational needs and
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700296 # deployment strategies. They can be used to filter resources and aggregate
297 # metrics.
298 #
299 # * Label keys must be between 1 and 63 characters long and must conform to
300 # the regular expression: `\p{Ll}\p{Lo}{0,62}`.
301 # * Label values must be between 0 and 63 characters long and must conform to
302 # the regular expression: `[\p{Ll}\p{Lo}\p{N}_-]{0,63}`.
303 # * No more than 64 labels can be associated with a given resource.
304 # * Keys and values must both be under 128 bytes.
Bu Sun Kim65020912020-05-20 12:08:20 -0700305 &quot;a_key&quot;: &quot;A String&quot;,
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700306 },
Bu Sun Kim65020912020-05-20 12:08:20 -0700307 &quot;state&quot;: &quot;A String&quot;, # (`OutputOnly`)
308 # The current state of the instance.
309 &quot;name&quot;: &quot;A String&quot;, # Required. (`OutputOnly`)
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700310 # The unique name of the instance. Values are of the form
Dan O'Mearadd494642020-05-01 07:42:23 -0700311 # `projects/{project}/instances/a-z+[a-z0-9]`.
Bu Sun Kim65020912020-05-20 12:08:20 -0700312 &quot;displayName&quot;: &quot;A String&quot;, # Required. The descriptive name for this instance as it appears in UIs.
313 # Can be changed at any time, but should be kept globally unique
314 # to avoid confusion.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700315 }</pre>
316</div>
317
318<div class="method">
319 <code class="details" id="getIamPolicy">getIamPolicy(resource, body=None, x__xgafv=None)</code>
320 <pre>Gets the access control policy for an instance resource. Returns an empty
321policy if an instance exists but does not have a policy set.
322
323Args:
324 resource: string, REQUIRED: The resource for which the policy is being requested.
325See the operation documentation for the appropriate value for this field. (required)
326 body: object, The request body.
327 The object takes the form of:
328
329{ # Request message for `GetIamPolicy` method.
Bu Sun Kim65020912020-05-20 12:08:20 -0700330 &quot;options&quot;: { # Encapsulates settings provided to GetIamPolicy. # OPTIONAL: A `GetPolicyOptions` object for specifying options to
Dan O'Mearadd494642020-05-01 07:42:23 -0700331 # `GetIamPolicy`. This field is only used by Cloud IAM.
Bu Sun Kim65020912020-05-20 12:08:20 -0700332 &quot;requestedPolicyVersion&quot;: 42, # Optional. The policy format version to be returned.
Dan O'Mearadd494642020-05-01 07:42:23 -0700333 #
334 # Valid values are 0, 1, and 3. Requests specifying an invalid value will be
335 # rejected.
336 #
337 # Requests for policies with any conditional bindings must specify version 3.
338 # Policies without any conditional bindings may specify any valid value or
339 # leave the field unset.
340 },
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700341 }
342
343 x__xgafv: string, V1 error format.
344 Allowed values
345 1 - v1 error format
346 2 - v2 error format
347
348Returns:
349 An object of the form:
350
Dan O'Mearadd494642020-05-01 07:42:23 -0700351 { # An Identity and Access Management (IAM) policy, which specifies access
352 # controls for Google Cloud resources.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700353 #
354 #
Dan O'Mearadd494642020-05-01 07:42:23 -0700355 # A `Policy` is a collection of `bindings`. A `binding` binds one or more
356 # `members` to a single `role`. Members can be user accounts, service accounts,
357 # Google groups, and domains (such as G Suite). A `role` is a named list of
358 # permissions; each `role` can be an IAM predefined role or a user-created
359 # custom role.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700360 #
Dan O'Mearadd494642020-05-01 07:42:23 -0700361 # Optionally, a `binding` can specify a `condition`, which is a logical
362 # expression that allows access to a resource only if the expression evaluates
363 # to `true`. A condition can add constraints based on attributes of the
364 # request, the resource, or both.
365 #
366 # **JSON example:**
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700367 #
368 # {
Bu Sun Kim65020912020-05-20 12:08:20 -0700369 # &quot;bindings&quot;: [
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700370 # {
Bu Sun Kim65020912020-05-20 12:08:20 -0700371 # &quot;role&quot;: &quot;roles/resourcemanager.organizationAdmin&quot;,
372 # &quot;members&quot;: [
373 # &quot;user:mike@example.com&quot;,
374 # &quot;group:admins@example.com&quot;,
375 # &quot;domain:google.com&quot;,
376 # &quot;serviceAccount:my-project-id@appspot.gserviceaccount.com&quot;
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700377 # ]
378 # },
379 # {
Bu Sun Kim65020912020-05-20 12:08:20 -0700380 # &quot;role&quot;: &quot;roles/resourcemanager.organizationViewer&quot;,
381 # &quot;members&quot;: [&quot;user:eve@example.com&quot;],
382 # &quot;condition&quot;: {
383 # &quot;title&quot;: &quot;expirable access&quot;,
384 # &quot;description&quot;: &quot;Does not grant access after Sep 2020&quot;,
385 # &quot;expression&quot;: &quot;request.time &lt; timestamp(&#x27;2020-10-01T00:00:00.000Z&#x27;)&quot;,
Dan O'Mearadd494642020-05-01 07:42:23 -0700386 # }
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700387 # }
Dan O'Mearadd494642020-05-01 07:42:23 -0700388 # ],
Bu Sun Kim65020912020-05-20 12:08:20 -0700389 # &quot;etag&quot;: &quot;BwWWja0YfJA=&quot;,
390 # &quot;version&quot;: 3
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700391 # }
392 #
Dan O'Mearadd494642020-05-01 07:42:23 -0700393 # **YAML example:**
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700394 #
395 # bindings:
396 # - members:
397 # - user:mike@example.com
398 # - group:admins@example.com
399 # - domain:google.com
Dan O'Mearadd494642020-05-01 07:42:23 -0700400 # - serviceAccount:my-project-id@appspot.gserviceaccount.com
401 # role: roles/resourcemanager.organizationAdmin
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700402 # - members:
Dan O'Mearadd494642020-05-01 07:42:23 -0700403 # - user:eve@example.com
404 # role: roles/resourcemanager.organizationViewer
405 # condition:
406 # title: expirable access
407 # description: Does not grant access after Sep 2020
Bu Sun Kim65020912020-05-20 12:08:20 -0700408 # expression: request.time &lt; timestamp(&#x27;2020-10-01T00:00:00.000Z&#x27;)
Dan O'Mearadd494642020-05-01 07:42:23 -0700409 # - etag: BwWWja0YfJA=
410 # - version: 3
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700411 #
412 # For a description of IAM and its features, see the
Dan O'Mearadd494642020-05-01 07:42:23 -0700413 # [IAM documentation](https://cloud.google.com/iam/docs/).
Bu Sun Kim65020912020-05-20 12:08:20 -0700414 &quot;etag&quot;: &quot;A String&quot;, # `etag` is used for optimistic concurrency control as a way to help
415 # prevent simultaneous updates of a policy from overwriting each other.
416 # It is strongly suggested that systems make use of the `etag` in the
417 # read-modify-write cycle to perform policy updates in order to avoid race
418 # conditions: An `etag` is returned in the response to `getIamPolicy`, and
419 # systems are expected to put that etag in the request to `setIamPolicy` to
420 # ensure that their change will be applied to the same version of the policy.
421 #
422 # **Important:** If you use IAM Conditions, you must include the `etag` field
423 # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
424 # you to overwrite a version `3` policy with a version `1` policy, and all of
425 # the conditions in the version `3` policy are lost.
426 &quot;version&quot;: 42, # Specifies the format of the policy.
Dan O'Mearadd494642020-05-01 07:42:23 -0700427 #
428 # Valid values are `0`, `1`, and `3`. Requests that specify an invalid value
429 # are rejected.
430 #
431 # Any operation that affects conditional role bindings must specify version
432 # `3`. This requirement applies to the following operations:
433 #
434 # * Getting a policy that includes a conditional role binding
435 # * Adding a conditional role binding to a policy
436 # * Changing a conditional role binding in a policy
437 # * Removing any role binding, with or without a condition, from a policy
438 # that includes conditions
439 #
440 # **Important:** If you use IAM Conditions, you must include the `etag` field
441 # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
442 # you to overwrite a version `3` policy with a version `1` policy, and all of
443 # the conditions in the version `3` policy are lost.
444 #
445 # If a policy does not include any conditions, operations on that policy may
446 # specify any valid version or leave the field unset.
Bu Sun Kim65020912020-05-20 12:08:20 -0700447 &quot;auditConfigs&quot;: [ # Specifies cloud audit logging configuration for this policy.
448 { # Specifies the audit configuration for a service.
449 # The configuration determines which permission types are logged, and what
450 # identities, if any, are exempted from logging.
451 # An AuditConfig must have one or more AuditLogConfigs.
452 #
453 # If there are AuditConfigs for both `allServices` and a specific service,
454 # the union of the two AuditConfigs is used for that service: the log_types
455 # specified in each AuditConfig are enabled, and the exempted_members in each
456 # AuditLogConfig are exempted.
457 #
458 # Example Policy with multiple AuditConfigs:
459 #
460 # {
461 # &quot;audit_configs&quot;: [
462 # {
463 # &quot;service&quot;: &quot;allServices&quot;
464 # &quot;audit_log_configs&quot;: [
465 # {
466 # &quot;log_type&quot;: &quot;DATA_READ&quot;,
467 # &quot;exempted_members&quot;: [
468 # &quot;user:jose@example.com&quot;
469 # ]
470 # },
471 # {
472 # &quot;log_type&quot;: &quot;DATA_WRITE&quot;,
473 # },
474 # {
475 # &quot;log_type&quot;: &quot;ADMIN_READ&quot;,
476 # }
477 # ]
478 # },
479 # {
480 # &quot;service&quot;: &quot;sampleservice.googleapis.com&quot;
481 # &quot;audit_log_configs&quot;: [
482 # {
483 # &quot;log_type&quot;: &quot;DATA_READ&quot;,
484 # },
485 # {
486 # &quot;log_type&quot;: &quot;DATA_WRITE&quot;,
487 # &quot;exempted_members&quot;: [
488 # &quot;user:aliya@example.com&quot;
489 # ]
490 # }
491 # ]
492 # }
493 # ]
494 # }
495 #
496 # For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ
497 # logging. It also exempts jose@example.com from DATA_READ logging, and
498 # aliya@example.com from DATA_WRITE logging.
499 &quot;service&quot;: &quot;A String&quot;, # Specifies a service that will be enabled for audit logging.
500 # For example, `storage.googleapis.com`, `cloudsql.googleapis.com`.
501 # `allServices` is a special value that covers all services.
502 &quot;auditLogConfigs&quot;: [ # The configuration for logging of each type of permission.
503 { # Provides the configuration for logging a type of permissions.
504 # Example:
505 #
506 # {
507 # &quot;audit_log_configs&quot;: [
508 # {
509 # &quot;log_type&quot;: &quot;DATA_READ&quot;,
510 # &quot;exempted_members&quot;: [
511 # &quot;user:jose@example.com&quot;
512 # ]
513 # },
514 # {
515 # &quot;log_type&quot;: &quot;DATA_WRITE&quot;,
516 # }
517 # ]
518 # }
519 #
520 # This enables &#x27;DATA_READ&#x27; and &#x27;DATA_WRITE&#x27; logging, while exempting
521 # jose@example.com from DATA_READ logging.
522 &quot;exemptedMembers&quot;: [ # Specifies the identities that do not cause logging for this type of
523 # permission.
524 # Follows the same format of Binding.members.
525 &quot;A String&quot;,
526 ],
527 &quot;logType&quot;: &quot;A String&quot;, # The log type that this config enables.
528 },
529 ],
530 },
531 ],
532 &quot;bindings&quot;: [ # Associates a list of `members` to a `role`. Optionally, may specify a
Dan O'Mearadd494642020-05-01 07:42:23 -0700533 # `condition` that determines how and when the `bindings` are applied. Each
534 # of the `bindings` must contain at least one member.
535 { # Associates `members` with a `role`.
Bu Sun Kim65020912020-05-20 12:08:20 -0700536 &quot;condition&quot;: { # Represents a textual expression in the Common Expression Language (CEL) # The condition that is associated with this binding.
537 # NOTE: An unsatisfied condition will not allow user access via current
538 # binding. Different bindings, including their conditions, are examined
539 # independently.
540 # syntax. CEL is a C-like expression language. The syntax and semantics of CEL
541 # are documented at https://github.com/google/cel-spec.
542 #
543 # Example (Comparison):
544 #
545 # title: &quot;Summary size limit&quot;
546 # description: &quot;Determines if a summary is less than 100 chars&quot;
547 # expression: &quot;document.summary.size() &lt; 100&quot;
548 #
549 # Example (Equality):
550 #
551 # title: &quot;Requestor is owner&quot;
552 # description: &quot;Determines if requestor is the document owner&quot;
553 # expression: &quot;document.owner == request.auth.claims.email&quot;
554 #
555 # Example (Logic):
556 #
557 # title: &quot;Public documents&quot;
558 # description: &quot;Determine whether the document should be publicly visible&quot;
559 # expression: &quot;document.type != &#x27;private&#x27; &amp;&amp; document.type != &#x27;internal&#x27;&quot;
560 #
561 # Example (Data Manipulation):
562 #
563 # title: &quot;Notification string&quot;
564 # description: &quot;Create a notification string with a timestamp.&quot;
565 # expression: &quot;&#x27;New message received at &#x27; + string(document.create_time)&quot;
566 #
567 # The exact variables and functions that may be referenced within an expression
568 # are determined by the service that evaluates it. See the service
569 # documentation for additional information.
570 &quot;description&quot;: &quot;A String&quot;, # Optional. Description of the expression. This is a longer text which
571 # describes the expression, e.g. when hovered over it in a UI.
572 &quot;expression&quot;: &quot;A String&quot;, # Textual representation of an expression in Common Expression Language
573 # syntax.
574 &quot;title&quot;: &quot;A String&quot;, # Optional. Title for the expression, i.e. a short string describing
575 # its purpose. This can be used e.g. in UIs which allow to enter the
576 # expression.
577 &quot;location&quot;: &quot;A String&quot;, # Optional. String indicating the location of the expression for error
578 # reporting, e.g. a file name and a position in the file.
579 },
580 &quot;members&quot;: [ # Specifies the identities requesting access for a Cloud Platform resource.
Dan O'Mearadd494642020-05-01 07:42:23 -0700581 # `members` can have the following values:
582 #
583 # * `allUsers`: A special identifier that represents anyone who is
584 # on the internet; with or without a Google account.
585 #
586 # * `allAuthenticatedUsers`: A special identifier that represents anyone
587 # who is authenticated with a Google account or a service account.
588 #
589 # * `user:{emailid}`: An email address that represents a specific Google
590 # account. For example, `alice@example.com` .
591 #
592 #
593 # * `serviceAccount:{emailid}`: An email address that represents a service
594 # account. For example, `my-other-app@appspot.gserviceaccount.com`.
595 #
596 # * `group:{emailid}`: An email address that represents a Google group.
597 # For example, `admins@example.com`.
598 #
599 # * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
600 # identifier) representing a user that has been recently deleted. For
601 # example, `alice@example.com?uid=123456789012345678901`. If the user is
602 # recovered, this value reverts to `user:{emailid}` and the recovered user
603 # retains the role in the binding.
604 #
605 # * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
606 # unique identifier) representing a service account that has been recently
607 # deleted. For example,
608 # `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
609 # If the service account is undeleted, this value reverts to
610 # `serviceAccount:{emailid}` and the undeleted service account retains the
611 # role in the binding.
612 #
613 # * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
614 # identifier) representing a Google group that has been recently
615 # deleted. For example, `admins@example.com?uid=123456789012345678901`. If
616 # the group is recovered, this value reverts to `group:{emailid}` and the
617 # recovered group retains the role in the binding.
618 #
619 #
620 # * `domain:{domain}`: The G Suite domain (primary) that represents all the
621 # users of that domain. For example, `google.com` or `example.com`.
622 #
Bu Sun Kim65020912020-05-20 12:08:20 -0700623 &quot;A String&quot;,
Dan O'Mearadd494642020-05-01 07:42:23 -0700624 ],
Bu Sun Kim65020912020-05-20 12:08:20 -0700625 &quot;role&quot;: &quot;A String&quot;, # Role that is assigned to `members`.
626 # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
Dan O'Mearadd494642020-05-01 07:42:23 -0700627 },
628 ],
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700629 }</pre>
630</div>
631
632<div class="method">
633 <code class="details" id="list">list(parent, pageToken=None, x__xgafv=None)</code>
634 <pre>Lists information about instances in a project.
635
636Args:
Dan O'Mearadd494642020-05-01 07:42:23 -0700637 parent: string, Required. The unique name of the project for which a list of instances is requested.
638Values are of the form `projects/{project}`. (required)
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700639 pageToken: string, DEPRECATED: This field is unused and ignored.
640 x__xgafv: string, V1 error format.
641 Allowed values
642 1 - v1 error format
643 2 - v2 error format
644
645Returns:
646 An object of the form:
647
648 { # Response message for BigtableInstanceAdmin.ListInstances.
Bu Sun Kim65020912020-05-20 12:08:20 -0700649 &quot;instances&quot;: [ # The list of requested instances.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700650 { # A collection of Bigtable Tables and
651 # the resources that serve them.
652 # All tables in an instance are served from all
653 # Clusters in the instance.
Bu Sun Kim65020912020-05-20 12:08:20 -0700654 &quot;type&quot;: &quot;A String&quot;, # Required. The type of the instance. Defaults to `PRODUCTION`.
655 &quot;labels&quot;: { # Required. Labels are a flexible and lightweight mechanism for organizing cloud
656 # resources into groups that reflect a customer&#x27;s organizational needs and
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700657 # deployment strategies. They can be used to filter resources and aggregate
658 # metrics.
659 #
660 # * Label keys must be between 1 and 63 characters long and must conform to
661 # the regular expression: `\p{Ll}\p{Lo}{0,62}`.
662 # * Label values must be between 0 and 63 characters long and must conform to
663 # the regular expression: `[\p{Ll}\p{Lo}\p{N}_-]{0,63}`.
664 # * No more than 64 labels can be associated with a given resource.
665 # * Keys and values must both be under 128 bytes.
Bu Sun Kim65020912020-05-20 12:08:20 -0700666 &quot;a_key&quot;: &quot;A String&quot;,
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700667 },
Bu Sun Kim65020912020-05-20 12:08:20 -0700668 &quot;state&quot;: &quot;A String&quot;, # (`OutputOnly`)
669 # The current state of the instance.
670 &quot;name&quot;: &quot;A String&quot;, # Required. (`OutputOnly`)
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700671 # The unique name of the instance. Values are of the form
Dan O'Mearadd494642020-05-01 07:42:23 -0700672 # `projects/{project}/instances/a-z+[a-z0-9]`.
Bu Sun Kim65020912020-05-20 12:08:20 -0700673 &quot;displayName&quot;: &quot;A String&quot;, # Required. The descriptive name for this instance as it appears in UIs.
674 # Can be changed at any time, but should be kept globally unique
675 # to avoid confusion.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700676 },
677 ],
Bu Sun Kim65020912020-05-20 12:08:20 -0700678 &quot;failedLocations&quot;: [ # Locations from which Instance information could not be retrieved,
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700679 # due to an outage or some other transient condition.
680 # Instances whose Clusters are all in one of the failed locations
681 # may be missing from `instances`, and Instances with at least one
682 # Cluster in a failed location may only have partial information returned.
Dan O'Mearadd494642020-05-01 07:42:23 -0700683 # Values are of the form `projects/&lt;project&gt;/locations/&lt;zone_id&gt;`
Bu Sun Kim65020912020-05-20 12:08:20 -0700684 &quot;A String&quot;,
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700685 ],
Bu Sun Kim65020912020-05-20 12:08:20 -0700686 &quot;nextPageToken&quot;: &quot;A String&quot;, # DEPRECATED: This field is unused and ignored.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700687 }</pre>
688</div>
689
690<div class="method">
691 <code class="details" id="list_next">list_next(previous_request, previous_response)</code>
692 <pre>Retrieves the next page of results.
693
694Args:
695 previous_request: The request for the previous page. (required)
696 previous_response: The response from the request for the previous page. (required)
697
698Returns:
Bu Sun Kim65020912020-05-20 12:08:20 -0700699 A request object that you can call &#x27;execute()&#x27; on to request the next
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700700 page. Returns None if there are no more items in the collection.
701 </pre>
702</div>
703
704<div class="method">
Dan O'Mearadd494642020-05-01 07:42:23 -0700705 <code class="details" id="partialUpdateInstance">partialUpdateInstance(name, body=None, updateMask=None, x__xgafv=None)</code>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700706 <pre>Partially updates an instance within a project. This method can modify all
707fields of an Instance and is the preferred way to update an Instance.
708
709Args:
Dan O'Mearadd494642020-05-01 07:42:23 -0700710 name: string, Required. (`OutputOnly`)
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700711The unique name of the instance. Values are of the form
Dan O'Mearadd494642020-05-01 07:42:23 -0700712`projects/{project}/instances/a-z+[a-z0-9]`. (required)
713 body: object, The request body.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700714 The object takes the form of:
715
716{ # A collection of Bigtable Tables and
717 # the resources that serve them.
718 # All tables in an instance are served from all
719 # Clusters in the instance.
Bu Sun Kim65020912020-05-20 12:08:20 -0700720 &quot;type&quot;: &quot;A String&quot;, # Required. The type of the instance. Defaults to `PRODUCTION`.
721 &quot;labels&quot;: { # Required. Labels are a flexible and lightweight mechanism for organizing cloud
722 # resources into groups that reflect a customer&#x27;s organizational needs and
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700723 # deployment strategies. They can be used to filter resources and aggregate
724 # metrics.
725 #
726 # * Label keys must be between 1 and 63 characters long and must conform to
727 # the regular expression: `\p{Ll}\p{Lo}{0,62}`.
728 # * Label values must be between 0 and 63 characters long and must conform to
729 # the regular expression: `[\p{Ll}\p{Lo}\p{N}_-]{0,63}`.
730 # * No more than 64 labels can be associated with a given resource.
731 # * Keys and values must both be under 128 bytes.
Bu Sun Kim65020912020-05-20 12:08:20 -0700732 &quot;a_key&quot;: &quot;A String&quot;,
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700733 },
Bu Sun Kim65020912020-05-20 12:08:20 -0700734 &quot;state&quot;: &quot;A String&quot;, # (`OutputOnly`)
735 # The current state of the instance.
736 &quot;name&quot;: &quot;A String&quot;, # Required. (`OutputOnly`)
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700737 # The unique name of the instance. Values are of the form
Dan O'Mearadd494642020-05-01 07:42:23 -0700738 # `projects/{project}/instances/a-z+[a-z0-9]`.
Bu Sun Kim65020912020-05-20 12:08:20 -0700739 &quot;displayName&quot;: &quot;A String&quot;, # Required. The descriptive name for this instance as it appears in UIs.
740 # Can be changed at any time, but should be kept globally unique
741 # to avoid confusion.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700742}
743
Dan O'Mearadd494642020-05-01 07:42:23 -0700744 updateMask: string, Required. The subset of Instance fields which should be replaced.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700745Must be explicitly set.
746 x__xgafv: string, V1 error format.
747 Allowed values
748 1 - v1 error format
749 2 - v2 error format
750
751Returns:
752 An object of the form:
753
754 { # This resource represents a long-running operation that is the result of a
755 # network API call.
Bu Sun Kim65020912020-05-20 12:08:20 -0700756 &quot;metadata&quot;: { # Service-specific metadata associated with the operation. It typically
757 # contains progress information and common metadata such as create time.
758 # Some services might not provide such metadata. Any method that returns a
759 # long-running operation should document the metadata type, if any.
760 &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
761 },
762 &quot;done&quot;: True or False, # If the value is `false`, it means the operation is still in progress.
763 # If `true`, the operation is completed, and either `error` or `response` is
764 # available.
765 &quot;response&quot;: { # The normal response of the operation in case of success. If the original
Dan O'Mearadd494642020-05-01 07:42:23 -0700766 # method returns no data on success, such as `Delete`, the response is
767 # `google.protobuf.Empty`. If the original method is standard
768 # `Get`/`Create`/`Update`, the response should be the resource. For other
769 # methods, the response should have the type `XxxResponse`, where `Xxx`
770 # is the original method name. For example, if the original method name
771 # is `TakeSnapshot()`, the inferred response type is
772 # `TakeSnapshotResponse`.
Bu Sun Kim65020912020-05-20 12:08:20 -0700773 &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
Dan O'Mearadd494642020-05-01 07:42:23 -0700774 },
Bu Sun Kim65020912020-05-20 12:08:20 -0700775 &quot;name&quot;: &quot;A String&quot;, # The server-assigned name, which is only unique within the same service that
Dan O'Mearadd494642020-05-01 07:42:23 -0700776 # originally returns it. If you use the default HTTP mapping, the
777 # `name` should be a resource name ending with `operations/{unique_id}`.
Bu Sun Kim65020912020-05-20 12:08:20 -0700778 &quot;error&quot;: { # The `Status` type defines a logical error model that is suitable for # The error result of the operation in case of failure or cancellation.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700779 # different programming environments, including REST APIs and RPC APIs. It is
Dan O'Mearadd494642020-05-01 07:42:23 -0700780 # used by [gRPC](https://github.com/grpc). Each `Status` message contains
781 # three pieces of data: error code, error message, and error details.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700782 #
Dan O'Mearadd494642020-05-01 07:42:23 -0700783 # You can find out more about this error model and how to work with it in the
784 # [API Design Guide](https://cloud.google.com/apis/design/errors).
Bu Sun Kim65020912020-05-20 12:08:20 -0700785 &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
786 &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700787 # user-facing error message should be localized and sent in the
788 # google.rpc.Status.details field, or localized by the client.
Bu Sun Kim65020912020-05-20 12:08:20 -0700789 &quot;details&quot;: [ # A list of messages that carry the error details. There is a common set of
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700790 # message types for APIs to use.
791 {
Bu Sun Kim65020912020-05-20 12:08:20 -0700792 &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700793 },
794 ],
795 },
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700796 }</pre>
797</div>
798
799<div class="method">
Dan O'Mearadd494642020-05-01 07:42:23 -0700800 <code class="details" id="setIamPolicy">setIamPolicy(resource, body=None, x__xgafv=None)</code>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700801 <pre>Sets the access control policy on an instance resource. Replaces any
802existing policy.
803
804Args:
805 resource: string, REQUIRED: The resource for which the policy is being specified.
806See the operation documentation for the appropriate value for this field. (required)
Dan O'Mearadd494642020-05-01 07:42:23 -0700807 body: object, The request body.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700808 The object takes the form of:
809
810{ # Request message for `SetIamPolicy` method.
Bu Sun Kim65020912020-05-20 12:08:20 -0700811 &quot;policy&quot;: { # An Identity and Access Management (IAM) policy, which specifies access # REQUIRED: The complete policy to be applied to the `resource`. The size of
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700812 # the policy is limited to a few 10s of KB. An empty policy is a
813 # valid policy but certain Cloud Platform services (such as Projects)
814 # might reject them.
Dan O'Mearadd494642020-05-01 07:42:23 -0700815 # controls for Google Cloud resources.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700816 #
817 #
Dan O'Mearadd494642020-05-01 07:42:23 -0700818 # A `Policy` is a collection of `bindings`. A `binding` binds one or more
819 # `members` to a single `role`. Members can be user accounts, service accounts,
820 # Google groups, and domains (such as G Suite). A `role` is a named list of
821 # permissions; each `role` can be an IAM predefined role or a user-created
822 # custom role.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700823 #
Dan O'Mearadd494642020-05-01 07:42:23 -0700824 # Optionally, a `binding` can specify a `condition`, which is a logical
825 # expression that allows access to a resource only if the expression evaluates
826 # to `true`. A condition can add constraints based on attributes of the
827 # request, the resource, or both.
828 #
829 # **JSON example:**
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700830 #
831 # {
Bu Sun Kim65020912020-05-20 12:08:20 -0700832 # &quot;bindings&quot;: [
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700833 # {
Bu Sun Kim65020912020-05-20 12:08:20 -0700834 # &quot;role&quot;: &quot;roles/resourcemanager.organizationAdmin&quot;,
835 # &quot;members&quot;: [
836 # &quot;user:mike@example.com&quot;,
837 # &quot;group:admins@example.com&quot;,
838 # &quot;domain:google.com&quot;,
839 # &quot;serviceAccount:my-project-id@appspot.gserviceaccount.com&quot;
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700840 # ]
841 # },
842 # {
Bu Sun Kim65020912020-05-20 12:08:20 -0700843 # &quot;role&quot;: &quot;roles/resourcemanager.organizationViewer&quot;,
844 # &quot;members&quot;: [&quot;user:eve@example.com&quot;],
845 # &quot;condition&quot;: {
846 # &quot;title&quot;: &quot;expirable access&quot;,
847 # &quot;description&quot;: &quot;Does not grant access after Sep 2020&quot;,
848 # &quot;expression&quot;: &quot;request.time &lt; timestamp(&#x27;2020-10-01T00:00:00.000Z&#x27;)&quot;,
Dan O'Mearadd494642020-05-01 07:42:23 -0700849 # }
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700850 # }
Dan O'Mearadd494642020-05-01 07:42:23 -0700851 # ],
Bu Sun Kim65020912020-05-20 12:08:20 -0700852 # &quot;etag&quot;: &quot;BwWWja0YfJA=&quot;,
853 # &quot;version&quot;: 3
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700854 # }
855 #
Dan O'Mearadd494642020-05-01 07:42:23 -0700856 # **YAML example:**
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700857 #
858 # bindings:
859 # - members:
860 # - user:mike@example.com
861 # - group:admins@example.com
862 # - domain:google.com
Dan O'Mearadd494642020-05-01 07:42:23 -0700863 # - serviceAccount:my-project-id@appspot.gserviceaccount.com
864 # role: roles/resourcemanager.organizationAdmin
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700865 # - members:
Dan O'Mearadd494642020-05-01 07:42:23 -0700866 # - user:eve@example.com
867 # role: roles/resourcemanager.organizationViewer
868 # condition:
869 # title: expirable access
870 # description: Does not grant access after Sep 2020
Bu Sun Kim65020912020-05-20 12:08:20 -0700871 # expression: request.time &lt; timestamp(&#x27;2020-10-01T00:00:00.000Z&#x27;)
Dan O'Mearadd494642020-05-01 07:42:23 -0700872 # - etag: BwWWja0YfJA=
873 # - version: 3
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700874 #
875 # For a description of IAM and its features, see the
Dan O'Mearadd494642020-05-01 07:42:23 -0700876 # [IAM documentation](https://cloud.google.com/iam/docs/).
Bu Sun Kim65020912020-05-20 12:08:20 -0700877 &quot;etag&quot;: &quot;A String&quot;, # `etag` is used for optimistic concurrency control as a way to help
878 # prevent simultaneous updates of a policy from overwriting each other.
879 # It is strongly suggested that systems make use of the `etag` in the
880 # read-modify-write cycle to perform policy updates in order to avoid race
881 # conditions: An `etag` is returned in the response to `getIamPolicy`, and
882 # systems are expected to put that etag in the request to `setIamPolicy` to
883 # ensure that their change will be applied to the same version of the policy.
884 #
885 # **Important:** If you use IAM Conditions, you must include the `etag` field
886 # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
887 # you to overwrite a version `3` policy with a version `1` policy, and all of
888 # the conditions in the version `3` policy are lost.
889 &quot;version&quot;: 42, # Specifies the format of the policy.
Dan O'Mearadd494642020-05-01 07:42:23 -0700890 #
891 # Valid values are `0`, `1`, and `3`. Requests that specify an invalid value
892 # are rejected.
893 #
894 # Any operation that affects conditional role bindings must specify version
895 # `3`. This requirement applies to the following operations:
896 #
897 # * Getting a policy that includes a conditional role binding
898 # * Adding a conditional role binding to a policy
899 # * Changing a conditional role binding in a policy
900 # * Removing any role binding, with or without a condition, from a policy
901 # that includes conditions
902 #
903 # **Important:** If you use IAM Conditions, you must include the `etag` field
904 # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
905 # you to overwrite a version `3` policy with a version `1` policy, and all of
906 # the conditions in the version `3` policy are lost.
907 #
908 # If a policy does not include any conditions, operations on that policy may
909 # specify any valid version or leave the field unset.
Bu Sun Kim65020912020-05-20 12:08:20 -0700910 &quot;auditConfigs&quot;: [ # Specifies cloud audit logging configuration for this policy.
911 { # Specifies the audit configuration for a service.
912 # The configuration determines which permission types are logged, and what
913 # identities, if any, are exempted from logging.
914 # An AuditConfig must have one or more AuditLogConfigs.
915 #
916 # If there are AuditConfigs for both `allServices` and a specific service,
917 # the union of the two AuditConfigs is used for that service: the log_types
918 # specified in each AuditConfig are enabled, and the exempted_members in each
919 # AuditLogConfig are exempted.
920 #
921 # Example Policy with multiple AuditConfigs:
922 #
923 # {
924 # &quot;audit_configs&quot;: [
925 # {
926 # &quot;service&quot;: &quot;allServices&quot;
927 # &quot;audit_log_configs&quot;: [
928 # {
929 # &quot;log_type&quot;: &quot;DATA_READ&quot;,
930 # &quot;exempted_members&quot;: [
931 # &quot;user:jose@example.com&quot;
932 # ]
933 # },
934 # {
935 # &quot;log_type&quot;: &quot;DATA_WRITE&quot;,
936 # },
937 # {
938 # &quot;log_type&quot;: &quot;ADMIN_READ&quot;,
939 # }
940 # ]
941 # },
942 # {
943 # &quot;service&quot;: &quot;sampleservice.googleapis.com&quot;
944 # &quot;audit_log_configs&quot;: [
945 # {
946 # &quot;log_type&quot;: &quot;DATA_READ&quot;,
947 # },
948 # {
949 # &quot;log_type&quot;: &quot;DATA_WRITE&quot;,
950 # &quot;exempted_members&quot;: [
951 # &quot;user:aliya@example.com&quot;
952 # ]
953 # }
954 # ]
955 # }
956 # ]
957 # }
958 #
959 # For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ
960 # logging. It also exempts jose@example.com from DATA_READ logging, and
961 # aliya@example.com from DATA_WRITE logging.
962 &quot;service&quot;: &quot;A String&quot;, # Specifies a service that will be enabled for audit logging.
963 # For example, `storage.googleapis.com`, `cloudsql.googleapis.com`.
964 # `allServices` is a special value that covers all services.
965 &quot;auditLogConfigs&quot;: [ # The configuration for logging of each type of permission.
966 { # Provides the configuration for logging a type of permissions.
967 # Example:
968 #
969 # {
970 # &quot;audit_log_configs&quot;: [
971 # {
972 # &quot;log_type&quot;: &quot;DATA_READ&quot;,
973 # &quot;exempted_members&quot;: [
974 # &quot;user:jose@example.com&quot;
975 # ]
976 # },
977 # {
978 # &quot;log_type&quot;: &quot;DATA_WRITE&quot;,
979 # }
980 # ]
981 # }
982 #
983 # This enables &#x27;DATA_READ&#x27; and &#x27;DATA_WRITE&#x27; logging, while exempting
984 # jose@example.com from DATA_READ logging.
985 &quot;exemptedMembers&quot;: [ # Specifies the identities that do not cause logging for this type of
986 # permission.
987 # Follows the same format of Binding.members.
988 &quot;A String&quot;,
989 ],
990 &quot;logType&quot;: &quot;A String&quot;, # The log type that this config enables.
991 },
992 ],
993 },
994 ],
995 &quot;bindings&quot;: [ # Associates a list of `members` to a `role`. Optionally, may specify a
Dan O'Mearadd494642020-05-01 07:42:23 -0700996 # `condition` that determines how and when the `bindings` are applied. Each
997 # of the `bindings` must contain at least one member.
998 { # Associates `members` with a `role`.
Bu Sun Kim65020912020-05-20 12:08:20 -0700999 &quot;condition&quot;: { # Represents a textual expression in the Common Expression Language (CEL) # The condition that is associated with this binding.
1000 # NOTE: An unsatisfied condition will not allow user access via current
1001 # binding. Different bindings, including their conditions, are examined
1002 # independently.
1003 # syntax. CEL is a C-like expression language. The syntax and semantics of CEL
1004 # are documented at https://github.com/google/cel-spec.
1005 #
1006 # Example (Comparison):
1007 #
1008 # title: &quot;Summary size limit&quot;
1009 # description: &quot;Determines if a summary is less than 100 chars&quot;
1010 # expression: &quot;document.summary.size() &lt; 100&quot;
1011 #
1012 # Example (Equality):
1013 #
1014 # title: &quot;Requestor is owner&quot;
1015 # description: &quot;Determines if requestor is the document owner&quot;
1016 # expression: &quot;document.owner == request.auth.claims.email&quot;
1017 #
1018 # Example (Logic):
1019 #
1020 # title: &quot;Public documents&quot;
1021 # description: &quot;Determine whether the document should be publicly visible&quot;
1022 # expression: &quot;document.type != &#x27;private&#x27; &amp;&amp; document.type != &#x27;internal&#x27;&quot;
1023 #
1024 # Example (Data Manipulation):
1025 #
1026 # title: &quot;Notification string&quot;
1027 # description: &quot;Create a notification string with a timestamp.&quot;
1028 # expression: &quot;&#x27;New message received at &#x27; + string(document.create_time)&quot;
1029 #
1030 # The exact variables and functions that may be referenced within an expression
1031 # are determined by the service that evaluates it. See the service
1032 # documentation for additional information.
1033 &quot;description&quot;: &quot;A String&quot;, # Optional. Description of the expression. This is a longer text which
1034 # describes the expression, e.g. when hovered over it in a UI.
1035 &quot;expression&quot;: &quot;A String&quot;, # Textual representation of an expression in Common Expression Language
1036 # syntax.
1037 &quot;title&quot;: &quot;A String&quot;, # Optional. Title for the expression, i.e. a short string describing
1038 # its purpose. This can be used e.g. in UIs which allow to enter the
1039 # expression.
1040 &quot;location&quot;: &quot;A String&quot;, # Optional. String indicating the location of the expression for error
1041 # reporting, e.g. a file name and a position in the file.
1042 },
1043 &quot;members&quot;: [ # Specifies the identities requesting access for a Cloud Platform resource.
Dan O'Mearadd494642020-05-01 07:42:23 -07001044 # `members` can have the following values:
1045 #
1046 # * `allUsers`: A special identifier that represents anyone who is
1047 # on the internet; with or without a Google account.
1048 #
1049 # * `allAuthenticatedUsers`: A special identifier that represents anyone
1050 # who is authenticated with a Google account or a service account.
1051 #
1052 # * `user:{emailid}`: An email address that represents a specific Google
1053 # account. For example, `alice@example.com` .
1054 #
1055 #
1056 # * `serviceAccount:{emailid}`: An email address that represents a service
1057 # account. For example, `my-other-app@appspot.gserviceaccount.com`.
1058 #
1059 # * `group:{emailid}`: An email address that represents a Google group.
1060 # For example, `admins@example.com`.
1061 #
1062 # * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
1063 # identifier) representing a user that has been recently deleted. For
1064 # example, `alice@example.com?uid=123456789012345678901`. If the user is
1065 # recovered, this value reverts to `user:{emailid}` and the recovered user
1066 # retains the role in the binding.
1067 #
1068 # * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
1069 # unique identifier) representing a service account that has been recently
1070 # deleted. For example,
1071 # `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
1072 # If the service account is undeleted, this value reverts to
1073 # `serviceAccount:{emailid}` and the undeleted service account retains the
1074 # role in the binding.
1075 #
1076 # * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
1077 # identifier) representing a Google group that has been recently
1078 # deleted. For example, `admins@example.com?uid=123456789012345678901`. If
1079 # the group is recovered, this value reverts to `group:{emailid}` and the
1080 # recovered group retains the role in the binding.
1081 #
1082 #
1083 # * `domain:{domain}`: The G Suite domain (primary) that represents all the
1084 # users of that domain. For example, `google.com` or `example.com`.
1085 #
Bu Sun Kim65020912020-05-20 12:08:20 -07001086 &quot;A String&quot;,
Dan O'Mearadd494642020-05-01 07:42:23 -07001087 ],
Bu Sun Kim65020912020-05-20 12:08:20 -07001088 &quot;role&quot;: &quot;A String&quot;, # Role that is assigned to `members`.
1089 # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
Dan O'Mearadd494642020-05-01 07:42:23 -07001090 },
1091 ],
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001092 },
Bu Sun Kim65020912020-05-20 12:08:20 -07001093 &quot;updateMask&quot;: &quot;A String&quot;, # OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001094 # the fields in the mask will be modified. If no mask is provided, the
1095 # following default mask is used:
Bu Sun Kim65020912020-05-20 12:08:20 -07001096 # paths: &quot;bindings, etag&quot;
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001097 # This field is only used by Cloud IAM.
1098 }
1099
1100 x__xgafv: string, V1 error format.
1101 Allowed values
1102 1 - v1 error format
1103 2 - v2 error format
1104
1105Returns:
1106 An object of the form:
1107
Dan O'Mearadd494642020-05-01 07:42:23 -07001108 { # An Identity and Access Management (IAM) policy, which specifies access
1109 # controls for Google Cloud resources.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001110 #
1111 #
Dan O'Mearadd494642020-05-01 07:42:23 -07001112 # A `Policy` is a collection of `bindings`. A `binding` binds one or more
1113 # `members` to a single `role`. Members can be user accounts, service accounts,
1114 # Google groups, and domains (such as G Suite). A `role` is a named list of
1115 # permissions; each `role` can be an IAM predefined role or a user-created
1116 # custom role.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001117 #
Dan O'Mearadd494642020-05-01 07:42:23 -07001118 # Optionally, a `binding` can specify a `condition`, which is a logical
1119 # expression that allows access to a resource only if the expression evaluates
1120 # to `true`. A condition can add constraints based on attributes of the
1121 # request, the resource, or both.
1122 #
1123 # **JSON example:**
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001124 #
1125 # {
Bu Sun Kim65020912020-05-20 12:08:20 -07001126 # &quot;bindings&quot;: [
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001127 # {
Bu Sun Kim65020912020-05-20 12:08:20 -07001128 # &quot;role&quot;: &quot;roles/resourcemanager.organizationAdmin&quot;,
1129 # &quot;members&quot;: [
1130 # &quot;user:mike@example.com&quot;,
1131 # &quot;group:admins@example.com&quot;,
1132 # &quot;domain:google.com&quot;,
1133 # &quot;serviceAccount:my-project-id@appspot.gserviceaccount.com&quot;
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001134 # ]
1135 # },
1136 # {
Bu Sun Kim65020912020-05-20 12:08:20 -07001137 # &quot;role&quot;: &quot;roles/resourcemanager.organizationViewer&quot;,
1138 # &quot;members&quot;: [&quot;user:eve@example.com&quot;],
1139 # &quot;condition&quot;: {
1140 # &quot;title&quot;: &quot;expirable access&quot;,
1141 # &quot;description&quot;: &quot;Does not grant access after Sep 2020&quot;,
1142 # &quot;expression&quot;: &quot;request.time &lt; timestamp(&#x27;2020-10-01T00:00:00.000Z&#x27;)&quot;,
Dan O'Mearadd494642020-05-01 07:42:23 -07001143 # }
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001144 # }
Dan O'Mearadd494642020-05-01 07:42:23 -07001145 # ],
Bu Sun Kim65020912020-05-20 12:08:20 -07001146 # &quot;etag&quot;: &quot;BwWWja0YfJA=&quot;,
1147 # &quot;version&quot;: 3
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001148 # }
1149 #
Dan O'Mearadd494642020-05-01 07:42:23 -07001150 # **YAML example:**
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001151 #
1152 # bindings:
1153 # - members:
1154 # - user:mike@example.com
1155 # - group:admins@example.com
1156 # - domain:google.com
Dan O'Mearadd494642020-05-01 07:42:23 -07001157 # - serviceAccount:my-project-id@appspot.gserviceaccount.com
1158 # role: roles/resourcemanager.organizationAdmin
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001159 # - members:
Dan O'Mearadd494642020-05-01 07:42:23 -07001160 # - user:eve@example.com
1161 # role: roles/resourcemanager.organizationViewer
1162 # condition:
1163 # title: expirable access
1164 # description: Does not grant access after Sep 2020
Bu Sun Kim65020912020-05-20 12:08:20 -07001165 # expression: request.time &lt; timestamp(&#x27;2020-10-01T00:00:00.000Z&#x27;)
Dan O'Mearadd494642020-05-01 07:42:23 -07001166 # - etag: BwWWja0YfJA=
1167 # - version: 3
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001168 #
1169 # For a description of IAM and its features, see the
Dan O'Mearadd494642020-05-01 07:42:23 -07001170 # [IAM documentation](https://cloud.google.com/iam/docs/).
Bu Sun Kim65020912020-05-20 12:08:20 -07001171 &quot;etag&quot;: &quot;A String&quot;, # `etag` is used for optimistic concurrency control as a way to help
1172 # prevent simultaneous updates of a policy from overwriting each other.
1173 # It is strongly suggested that systems make use of the `etag` in the
1174 # read-modify-write cycle to perform policy updates in order to avoid race
1175 # conditions: An `etag` is returned in the response to `getIamPolicy`, and
1176 # systems are expected to put that etag in the request to `setIamPolicy` to
1177 # ensure that their change will be applied to the same version of the policy.
1178 #
1179 # **Important:** If you use IAM Conditions, you must include the `etag` field
1180 # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
1181 # you to overwrite a version `3` policy with a version `1` policy, and all of
1182 # the conditions in the version `3` policy are lost.
1183 &quot;version&quot;: 42, # Specifies the format of the policy.
Dan O'Mearadd494642020-05-01 07:42:23 -07001184 #
1185 # Valid values are `0`, `1`, and `3`. Requests that specify an invalid value
1186 # are rejected.
1187 #
1188 # Any operation that affects conditional role bindings must specify version
1189 # `3`. This requirement applies to the following operations:
1190 #
1191 # * Getting a policy that includes a conditional role binding
1192 # * Adding a conditional role binding to a policy
1193 # * Changing a conditional role binding in a policy
1194 # * Removing any role binding, with or without a condition, from a policy
1195 # that includes conditions
1196 #
1197 # **Important:** If you use IAM Conditions, you must include the `etag` field
1198 # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
1199 # you to overwrite a version `3` policy with a version `1` policy, and all of
1200 # the conditions in the version `3` policy are lost.
1201 #
1202 # If a policy does not include any conditions, operations on that policy may
1203 # specify any valid version or leave the field unset.
Bu Sun Kim65020912020-05-20 12:08:20 -07001204 &quot;auditConfigs&quot;: [ # Specifies cloud audit logging configuration for this policy.
1205 { # Specifies the audit configuration for a service.
1206 # The configuration determines which permission types are logged, and what
1207 # identities, if any, are exempted from logging.
1208 # An AuditConfig must have one or more AuditLogConfigs.
1209 #
1210 # If there are AuditConfigs for both `allServices` and a specific service,
1211 # the union of the two AuditConfigs is used for that service: the log_types
1212 # specified in each AuditConfig are enabled, and the exempted_members in each
1213 # AuditLogConfig are exempted.
1214 #
1215 # Example Policy with multiple AuditConfigs:
1216 #
1217 # {
1218 # &quot;audit_configs&quot;: [
1219 # {
1220 # &quot;service&quot;: &quot;allServices&quot;
1221 # &quot;audit_log_configs&quot;: [
1222 # {
1223 # &quot;log_type&quot;: &quot;DATA_READ&quot;,
1224 # &quot;exempted_members&quot;: [
1225 # &quot;user:jose@example.com&quot;
1226 # ]
1227 # },
1228 # {
1229 # &quot;log_type&quot;: &quot;DATA_WRITE&quot;,
1230 # },
1231 # {
1232 # &quot;log_type&quot;: &quot;ADMIN_READ&quot;,
1233 # }
1234 # ]
1235 # },
1236 # {
1237 # &quot;service&quot;: &quot;sampleservice.googleapis.com&quot;
1238 # &quot;audit_log_configs&quot;: [
1239 # {
1240 # &quot;log_type&quot;: &quot;DATA_READ&quot;,
1241 # },
1242 # {
1243 # &quot;log_type&quot;: &quot;DATA_WRITE&quot;,
1244 # &quot;exempted_members&quot;: [
1245 # &quot;user:aliya@example.com&quot;
1246 # ]
1247 # }
1248 # ]
1249 # }
1250 # ]
1251 # }
1252 #
1253 # For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ
1254 # logging. It also exempts jose@example.com from DATA_READ logging, and
1255 # aliya@example.com from DATA_WRITE logging.
1256 &quot;service&quot;: &quot;A String&quot;, # Specifies a service that will be enabled for audit logging.
1257 # For example, `storage.googleapis.com`, `cloudsql.googleapis.com`.
1258 # `allServices` is a special value that covers all services.
1259 &quot;auditLogConfigs&quot;: [ # The configuration for logging of each type of permission.
1260 { # Provides the configuration for logging a type of permissions.
1261 # Example:
1262 #
1263 # {
1264 # &quot;audit_log_configs&quot;: [
1265 # {
1266 # &quot;log_type&quot;: &quot;DATA_READ&quot;,
1267 # &quot;exempted_members&quot;: [
1268 # &quot;user:jose@example.com&quot;
1269 # ]
1270 # },
1271 # {
1272 # &quot;log_type&quot;: &quot;DATA_WRITE&quot;,
1273 # }
1274 # ]
1275 # }
1276 #
1277 # This enables &#x27;DATA_READ&#x27; and &#x27;DATA_WRITE&#x27; logging, while exempting
1278 # jose@example.com from DATA_READ logging.
1279 &quot;exemptedMembers&quot;: [ # Specifies the identities that do not cause logging for this type of
1280 # permission.
1281 # Follows the same format of Binding.members.
1282 &quot;A String&quot;,
1283 ],
1284 &quot;logType&quot;: &quot;A String&quot;, # The log type that this config enables.
1285 },
1286 ],
1287 },
1288 ],
1289 &quot;bindings&quot;: [ # Associates a list of `members` to a `role`. Optionally, may specify a
Dan O'Mearadd494642020-05-01 07:42:23 -07001290 # `condition` that determines how and when the `bindings` are applied. Each
1291 # of the `bindings` must contain at least one member.
1292 { # Associates `members` with a `role`.
Bu Sun Kim65020912020-05-20 12:08:20 -07001293 &quot;condition&quot;: { # Represents a textual expression in the Common Expression Language (CEL) # The condition that is associated with this binding.
1294 # NOTE: An unsatisfied condition will not allow user access via current
1295 # binding. Different bindings, including their conditions, are examined
1296 # independently.
1297 # syntax. CEL is a C-like expression language. The syntax and semantics of CEL
1298 # are documented at https://github.com/google/cel-spec.
1299 #
1300 # Example (Comparison):
1301 #
1302 # title: &quot;Summary size limit&quot;
1303 # description: &quot;Determines if a summary is less than 100 chars&quot;
1304 # expression: &quot;document.summary.size() &lt; 100&quot;
1305 #
1306 # Example (Equality):
1307 #
1308 # title: &quot;Requestor is owner&quot;
1309 # description: &quot;Determines if requestor is the document owner&quot;
1310 # expression: &quot;document.owner == request.auth.claims.email&quot;
1311 #
1312 # Example (Logic):
1313 #
1314 # title: &quot;Public documents&quot;
1315 # description: &quot;Determine whether the document should be publicly visible&quot;
1316 # expression: &quot;document.type != &#x27;private&#x27; &amp;&amp; document.type != &#x27;internal&#x27;&quot;
1317 #
1318 # Example (Data Manipulation):
1319 #
1320 # title: &quot;Notification string&quot;
1321 # description: &quot;Create a notification string with a timestamp.&quot;
1322 # expression: &quot;&#x27;New message received at &#x27; + string(document.create_time)&quot;
1323 #
1324 # The exact variables and functions that may be referenced within an expression
1325 # are determined by the service that evaluates it. See the service
1326 # documentation for additional information.
1327 &quot;description&quot;: &quot;A String&quot;, # Optional. Description of the expression. This is a longer text which
1328 # describes the expression, e.g. when hovered over it in a UI.
1329 &quot;expression&quot;: &quot;A String&quot;, # Textual representation of an expression in Common Expression Language
1330 # syntax.
1331 &quot;title&quot;: &quot;A String&quot;, # Optional. Title for the expression, i.e. a short string describing
1332 # its purpose. This can be used e.g. in UIs which allow to enter the
1333 # expression.
1334 &quot;location&quot;: &quot;A String&quot;, # Optional. String indicating the location of the expression for error
1335 # reporting, e.g. a file name and a position in the file.
1336 },
1337 &quot;members&quot;: [ # Specifies the identities requesting access for a Cloud Platform resource.
Dan O'Mearadd494642020-05-01 07:42:23 -07001338 # `members` can have the following values:
1339 #
1340 # * `allUsers`: A special identifier that represents anyone who is
1341 # on the internet; with or without a Google account.
1342 #
1343 # * `allAuthenticatedUsers`: A special identifier that represents anyone
1344 # who is authenticated with a Google account or a service account.
1345 #
1346 # * `user:{emailid}`: An email address that represents a specific Google
1347 # account. For example, `alice@example.com` .
1348 #
1349 #
1350 # * `serviceAccount:{emailid}`: An email address that represents a service
1351 # account. For example, `my-other-app@appspot.gserviceaccount.com`.
1352 #
1353 # * `group:{emailid}`: An email address that represents a Google group.
1354 # For example, `admins@example.com`.
1355 #
1356 # * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
1357 # identifier) representing a user that has been recently deleted. For
1358 # example, `alice@example.com?uid=123456789012345678901`. If the user is
1359 # recovered, this value reverts to `user:{emailid}` and the recovered user
1360 # retains the role in the binding.
1361 #
1362 # * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
1363 # unique identifier) representing a service account that has been recently
1364 # deleted. For example,
1365 # `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
1366 # If the service account is undeleted, this value reverts to
1367 # `serviceAccount:{emailid}` and the undeleted service account retains the
1368 # role in the binding.
1369 #
1370 # * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
1371 # identifier) representing a Google group that has been recently
1372 # deleted. For example, `admins@example.com?uid=123456789012345678901`. If
1373 # the group is recovered, this value reverts to `group:{emailid}` and the
1374 # recovered group retains the role in the binding.
1375 #
1376 #
1377 # * `domain:{domain}`: The G Suite domain (primary) that represents all the
1378 # users of that domain. For example, `google.com` or `example.com`.
1379 #
Bu Sun Kim65020912020-05-20 12:08:20 -07001380 &quot;A String&quot;,
Dan O'Mearadd494642020-05-01 07:42:23 -07001381 ],
Bu Sun Kim65020912020-05-20 12:08:20 -07001382 &quot;role&quot;: &quot;A String&quot;, # Role that is assigned to `members`.
1383 # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
Dan O'Mearadd494642020-05-01 07:42:23 -07001384 },
1385 ],
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001386 }</pre>
1387</div>
1388
1389<div class="method">
Dan O'Mearadd494642020-05-01 07:42:23 -07001390 <code class="details" id="testIamPermissions">testIamPermissions(resource, body=None, x__xgafv=None)</code>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001391 <pre>Returns permissions that the caller has on the specified instance resource.
1392
1393Args:
1394 resource: string, REQUIRED: The resource for which the policy detail is being requested.
1395See the operation documentation for the appropriate value for this field. (required)
Dan O'Mearadd494642020-05-01 07:42:23 -07001396 body: object, The request body.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001397 The object takes the form of:
1398
1399{ # Request message for `TestIamPermissions` method.
Bu Sun Kim65020912020-05-20 12:08:20 -07001400 &quot;permissions&quot;: [ # The set of permissions to check for the `resource`. Permissions with
1401 # wildcards (such as &#x27;*&#x27; or &#x27;storage.*&#x27;) are not allowed. For more
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001402 # information see
1403 # [IAM Overview](https://cloud.google.com/iam/docs/overview#permissions).
Bu Sun Kim65020912020-05-20 12:08:20 -07001404 &quot;A String&quot;,
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001405 ],
1406 }
1407
1408 x__xgafv: string, V1 error format.
1409 Allowed values
1410 1 - v1 error format
1411 2 - v2 error format
1412
1413Returns:
1414 An object of the form:
1415
1416 { # Response message for `TestIamPermissions` method.
Bu Sun Kim65020912020-05-20 12:08:20 -07001417 &quot;permissions&quot;: [ # A subset of `TestPermissionsRequest.permissions` that the caller is
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001418 # allowed.
Bu Sun Kim65020912020-05-20 12:08:20 -07001419 &quot;A String&quot;,
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001420 ],
1421 }</pre>
1422</div>
1423
1424<div class="method">
Dan O'Mearadd494642020-05-01 07:42:23 -07001425 <code class="details" id="update">update(name, body=None, x__xgafv=None)</code>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001426 <pre>Updates an instance within a project. This method updates only the display
1427name and type for an Instance. To update other Instance properties, such as
1428labels, use PartialUpdateInstance.
1429
1430Args:
Dan O'Mearadd494642020-05-01 07:42:23 -07001431 name: string, Required. (`OutputOnly`)
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001432The unique name of the instance. Values are of the form
Dan O'Mearadd494642020-05-01 07:42:23 -07001433`projects/{project}/instances/a-z+[a-z0-9]`. (required)
1434 body: object, The request body.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001435 The object takes the form of:
1436
1437{ # A collection of Bigtable Tables and
1438 # the resources that serve them.
1439 # All tables in an instance are served from all
1440 # Clusters in the instance.
Bu Sun Kim65020912020-05-20 12:08:20 -07001441 &quot;type&quot;: &quot;A String&quot;, # Required. The type of the instance. Defaults to `PRODUCTION`.
1442 &quot;labels&quot;: { # Required. Labels are a flexible and lightweight mechanism for organizing cloud
1443 # resources into groups that reflect a customer&#x27;s organizational needs and
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001444 # deployment strategies. They can be used to filter resources and aggregate
1445 # metrics.
1446 #
1447 # * Label keys must be between 1 and 63 characters long and must conform to
1448 # the regular expression: `\p{Ll}\p{Lo}{0,62}`.
1449 # * Label values must be between 0 and 63 characters long and must conform to
1450 # the regular expression: `[\p{Ll}\p{Lo}\p{N}_-]{0,63}`.
1451 # * No more than 64 labels can be associated with a given resource.
1452 # * Keys and values must both be under 128 bytes.
Bu Sun Kim65020912020-05-20 12:08:20 -07001453 &quot;a_key&quot;: &quot;A String&quot;,
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001454 },
Bu Sun Kim65020912020-05-20 12:08:20 -07001455 &quot;state&quot;: &quot;A String&quot;, # (`OutputOnly`)
1456 # The current state of the instance.
1457 &quot;name&quot;: &quot;A String&quot;, # Required. (`OutputOnly`)
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001458 # The unique name of the instance. Values are of the form
Dan O'Mearadd494642020-05-01 07:42:23 -07001459 # `projects/{project}/instances/a-z+[a-z0-9]`.
Bu Sun Kim65020912020-05-20 12:08:20 -07001460 &quot;displayName&quot;: &quot;A String&quot;, # Required. The descriptive name for this instance as it appears in UIs.
1461 # Can be changed at any time, but should be kept globally unique
1462 # to avoid confusion.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001463}
1464
1465 x__xgafv: string, V1 error format.
1466 Allowed values
1467 1 - v1 error format
1468 2 - v2 error format
1469
1470Returns:
1471 An object of the form:
1472
1473 { # A collection of Bigtable Tables and
1474 # the resources that serve them.
1475 # All tables in an instance are served from all
1476 # Clusters in the instance.
Bu Sun Kim65020912020-05-20 12:08:20 -07001477 &quot;type&quot;: &quot;A String&quot;, # Required. The type of the instance. Defaults to `PRODUCTION`.
1478 &quot;labels&quot;: { # Required. Labels are a flexible and lightweight mechanism for organizing cloud
1479 # resources into groups that reflect a customer&#x27;s organizational needs and
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001480 # deployment strategies. They can be used to filter resources and aggregate
1481 # metrics.
1482 #
1483 # * Label keys must be between 1 and 63 characters long and must conform to
1484 # the regular expression: `\p{Ll}\p{Lo}{0,62}`.
1485 # * Label values must be between 0 and 63 characters long and must conform to
1486 # the regular expression: `[\p{Ll}\p{Lo}\p{N}_-]{0,63}`.
1487 # * No more than 64 labels can be associated with a given resource.
1488 # * Keys and values must both be under 128 bytes.
Bu Sun Kim65020912020-05-20 12:08:20 -07001489 &quot;a_key&quot;: &quot;A String&quot;,
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001490 },
Bu Sun Kim65020912020-05-20 12:08:20 -07001491 &quot;state&quot;: &quot;A String&quot;, # (`OutputOnly`)
1492 # The current state of the instance.
1493 &quot;name&quot;: &quot;A String&quot;, # Required. (`OutputOnly`)
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001494 # The unique name of the instance. Values are of the form
Dan O'Mearadd494642020-05-01 07:42:23 -07001495 # `projects/{project}/instances/a-z+[a-z0-9]`.
Bu Sun Kim65020912020-05-20 12:08:20 -07001496 &quot;displayName&quot;: &quot;A String&quot;, # Required. The descriptive name for this instance as it appears in UIs.
1497 # Can be changed at any time, but should be kept globally unique
1498 # to avoid confusion.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001499 }</pre>
1500</div>
1501
1502</body></html>