Gitiles
Code Review Sign In
gerrit-public.fairphone.software / platform / external / python / google-api-python-client / c72efbc6b71c963997c5728d471c04ab33d95e4f / . / docs / dyn / runtimeconfig_v1beta1.projects.configs.html
blob: be51d444b25e1797dccd9073b32bb98ab82f24d7 [file] [log] [blame]
Jon Wayne Parrott0a471d32016-05-19 10:54:38 -0700[diff] [blame]1<html><body>
2<style>
3
4body, h1, h2, h3, div, span, p, pre, a {
5 margin: 0;
6 padding: 0;
7 border: 0;
8 font-weight: inherit;
9 font-style: inherit;
10 font-size: 100%;
11 font-family: inherit;
12 vertical-align: baseline;
13}
14
15body {
16 font-size: 13px;
17 padding: 1em;
18}
19
20h1 {
21 font-size: 26px;
22 margin-bottom: 1em;
23}
24
25h2 {
26 font-size: 24px;
27 margin-bottom: 1em;
28}
29
30h3 {
31 font-size: 20px;
32 margin-bottom: 1em;
33 margin-top: 1em;
34}
35
36pre, code {
37 line-height: 1.5;
38 font-family: Monaco, 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', 'Lucida Console', monospace;
39}
40
41pre {
42 margin-top: 0.5em;
43}
44
45h1, h2, h3, p {
46 font-family: Arial, sans serif;
47}
48
49h1, h2, h3 {
50 border-bottom: solid #CCC 1px;
51}
52
53.toc_element {
54 margin-top: 0.5em;
55}
56
57.firstline {
58 margin-left: 2 em;
59}
60
61.method {
62 margin-top: 1em;
63 border: solid 1px #CCC;
64 padding: 1em;
65 background: #EEE;
66}
67
68.details {
69 font-weight: bold;
70 font-size: 14px;
71}
72
73</style>
74
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700[diff] [blame]75<h1><a href="runtimeconfig_v1beta1.html">Cloud Runtime Configuration API</a> . <a href="runtimeconfig_v1beta1.projects.html">projects</a> . <a href="runtimeconfig_v1beta1.projects.configs.html">configs</a></h1>
Jon Wayne Parrott0a471d32016-05-19 10:54:38 -0700[diff] [blame]76<h2>Instance Methods</h2>
77<p class="toc_element">
78 <code><a href="runtimeconfig_v1beta1.projects.configs.operations.html">operations()</a></code>
79</p>
80<p class="firstline">Returns the operations Resource.</p>
81
82<p class="toc_element">
83 <code><a href="runtimeconfig_v1beta1.projects.configs.variables.html">variables()</a></code>
84</p>
85<p class="firstline">Returns the variables Resource.</p>
86
87<p class="toc_element">
88 <code><a href="runtimeconfig_v1beta1.projects.configs.waiters.html">waiters()</a></code>
89</p>
90<p class="firstline">Returns the waiters Resource.</p>
91
92<p class="toc_element">
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]93 <code><a href="#create">create(parent, body=None, requestId=None, x__xgafv=None)</a></code></p>
Jon Wayne Parrott7d5badb2016-08-16 12:44:29 -0700[diff] [blame]94<p class="firstline">Creates a new RuntimeConfig resource. The configuration name must be</p>
Jon Wayne Parrott0a471d32016-05-19 10:54:38 -0700[diff] [blame]95<p class="toc_element">
Thomas Coffee2f245372017-03-27 10:39:26 -0700[diff] [blame]96 <code><a href="#delete">delete(name, x__xgafv=None)</a></code></p>
Jon Wayne Parrott7d5badb2016-08-16 12:44:29 -0700[diff] [blame]97<p class="firstline">Deletes a RuntimeConfig resource.</p>
Jon Wayne Parrott0a471d32016-05-19 10:54:38 -0700[diff] [blame]98<p class="toc_element">
Thomas Coffee2f245372017-03-27 10:39:26 -0700[diff] [blame]99 <code><a href="#get">get(name, x__xgafv=None)</a></code></p>
Jon Wayne Parrott7d5badb2016-08-16 12:44:29 -0700[diff] [blame]100<p class="firstline">Gets information about a RuntimeConfig resource.</p>
Jon Wayne Parrott0a471d32016-05-19 10:54:38 -0700[diff] [blame]101<p class="toc_element">
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]102 <code><a href="#getIamPolicy">getIamPolicy(resource, options_requestedPolicyVersion=None, x__xgafv=None)</a></code></p>
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]103<p class="firstline">Gets the access control policy for a resource.</p>
104<p class="toc_element">
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]105 <code><a href="#list">list(parent, pageToken=None, pageSize=None, x__xgafv=None)</a></code></p>
Jon Wayne Parrott7d5badb2016-08-16 12:44:29 -0700[diff] [blame]106<p class="firstline">Lists all the RuntimeConfig resources within project.</p>
Jon Wayne Parrott0a471d32016-05-19 10:54:38 -0700[diff] [blame]107<p class="toc_element">
108 <code><a href="#list_next">list_next(previous_request, previous_response)</a></code></p>
109<p class="firstline">Retrieves the next page of results.</p>
110<p class="toc_element">
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]111 <code><a href="#setIamPolicy">setIamPolicy(resource, body=None, x__xgafv=None)</a></code></p>
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]112<p class="firstline">Sets the access control policy on the specified resource. Replaces any</p>
113<p class="toc_element">
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]114 <code><a href="#testIamPermissions">testIamPermissions(resource, body=None, x__xgafv=None)</a></code></p>
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]115<p class="firstline">Returns permissions that a caller has on the specified resource.</p>
116<p class="toc_element">
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]117 <code><a href="#update">update(name, body=None, x__xgafv=None)</a></code></p>
Jon Wayne Parrott7d5badb2016-08-16 12:44:29 -0700[diff] [blame]118<p class="firstline">Updates a RuntimeConfig resource. The configuration must exist beforehand.</p>
Jon Wayne Parrott0a471d32016-05-19 10:54:38 -0700[diff] [blame]119<h3>Method Details</h3>
120<div class="method">
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]121 <code class="details" id="create">create(parent, body=None, requestId=None, x__xgafv=None)</code>
Jon Wayne Parrott7d5badb2016-08-16 12:44:29 -0700[diff] [blame]122 <pre>Creates a new RuntimeConfig resource. The configuration name must be
123unique within project.
Jon Wayne Parrott0a471d32016-05-19 10:54:38 -0700[diff] [blame]124
125Args:
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700[diff] [blame]126 parent: string, The [project
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]127ID](https://support.google.com/cloud/answer/6158840?hl=en&amp;ref_topic=6158848)
Jon Wayne Parrott7d5badb2016-08-16 12:44:29 -0700[diff] [blame]128for this request, in the format `projects/[PROJECT_ID]`. (required)
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]129 body: object, The request body.
Jon Wayne Parrott0a471d32016-05-19 10:54:38 -0700[diff] [blame]130 The object takes the form of:
131
Jon Wayne Parrott7d5badb2016-08-16 12:44:29 -0700[diff] [blame]132{ # A RuntimeConfig resource is the primary resource in the Cloud RuntimeConfig
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700[diff] [blame]133 # service. A RuntimeConfig resource consists of metadata and a hierarchy of
134 # variables.
135 &quot;name&quot;: &quot;A String&quot;, # The resource name of a runtime config. The name must have the format:
136 #
137 # projects/[PROJECT_ID]/configs/[CONFIG_NAME]
138 #
139 # The `[PROJECT_ID]` must be a valid project ID, and `[CONFIG_NAME]` is an
140 # arbitrary name that matches the
141 # `[0-9A-Za-z](?:[_.A-Za-z0-9-]{0,62}[_.A-Za-z0-9])?` regular expression.
142 # The length of `[CONFIG_NAME]` must be less than 64 characters.
143 #
144 # You pick the RuntimeConfig resource name, but the server will validate that
145 # the name adheres to this format. After you create the resource, you cannot
146 # change the resource&#x27;s name.
147 &quot;description&quot;: &quot;A String&quot;, # An optional description of the RuntimeConfig object.
148 }
Jon Wayne Parrott0a471d32016-05-19 10:54:38 -0700[diff] [blame]149
Sai Cheemalapatic30d2b52017-03-13 12:12:03 -0400[diff] [blame]150 requestId: string, An optional but recommended unique `request_id`. If the server
151receives two `create()` requests with the same
152`request_id`, then the second request will be ignored and the
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]153first resource created and stored in the backend is returned.
Sai Cheemalapatic30d2b52017-03-13 12:12:03 -0400[diff] [blame]154Empty `request_id` fields are ignored.
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]155
156It is responsibility of the client to ensure uniqueness of the
Sai Cheemalapatic30d2b52017-03-13 12:12:03 -0400[diff] [blame]157`request_id` strings.
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]158
Sai Cheemalapatic30d2b52017-03-13 12:12:03 -0400[diff] [blame]159`request_id` strings are limited to 64 characters.
Jon Wayne Parrott0a471d32016-05-19 10:54:38 -0700[diff] [blame]160 x__xgafv: string, V1 error format.
161 Allowed values
162 1 - v1 error format
163 2 - v2 error format
164
165Returns:
166 An object of the form:
167
Jon Wayne Parrott7d5badb2016-08-16 12:44:29 -0700[diff] [blame]168 { # A RuntimeConfig resource is the primary resource in the Cloud RuntimeConfig
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700[diff] [blame]169 # service. A RuntimeConfig resource consists of metadata and a hierarchy of
170 # variables.
171 &quot;name&quot;: &quot;A String&quot;, # The resource name of a runtime config. The name must have the format:
172 #
173 # projects/[PROJECT_ID]/configs/[CONFIG_NAME]
174 #
175 # The `[PROJECT_ID]` must be a valid project ID, and `[CONFIG_NAME]` is an
176 # arbitrary name that matches the
177 # `[0-9A-Za-z](?:[_.A-Za-z0-9-]{0,62}[_.A-Za-z0-9])?` regular expression.
178 # The length of `[CONFIG_NAME]` must be less than 64 characters.
179 #
180 # You pick the RuntimeConfig resource name, but the server will validate that
181 # the name adheres to this format. After you create the resource, you cannot
182 # change the resource&#x27;s name.
183 &quot;description&quot;: &quot;A String&quot;, # An optional description of the RuntimeConfig object.
184 }</pre>
Jon Wayne Parrott0a471d32016-05-19 10:54:38 -0700[diff] [blame]185</div>
186
187<div class="method">
Thomas Coffee2f245372017-03-27 10:39:26 -0700[diff] [blame]188 <code class="details" id="delete">delete(name, x__xgafv=None)</code>
Jon Wayne Parrott7d5badb2016-08-16 12:44:29 -0700[diff] [blame]189 <pre>Deletes a RuntimeConfig resource.
Jon Wayne Parrott0a471d32016-05-19 10:54:38 -0700[diff] [blame]190
191Args:
Jon Wayne Parrott7d5badb2016-08-16 12:44:29 -0700[diff] [blame]192 name: string, The RuntimeConfig resource to delete, in the format:
193
194`projects/[PROJECT_ID]/configs/[CONFIG_NAME]` (required)
Jon Wayne Parrott0a471d32016-05-19 10:54:38 -0700[diff] [blame]195 x__xgafv: string, V1 error format.
196 Allowed values
197 1 - v1 error format
198 2 - v2 error format
199
200Returns:
201 An object of the form:
202
203 { # A generic empty message that you can re-use to avoid defining duplicated
204 # empty messages in your APIs. A typical example is to use it as the request
205 # or the response type of an API method. For instance:
206 #
207 # service Foo {
208 # rpc Bar(google.protobuf.Empty) returns (google.protobuf.Empty);
209 # }
210 #
211 # The JSON representation for `Empty` is empty JSON object `{}`.
212 }</pre>
213</div>
214
215<div class="method">
Thomas Coffee2f245372017-03-27 10:39:26 -0700[diff] [blame]216 <code class="details" id="get">get(name, x__xgafv=None)</code>
Jon Wayne Parrott7d5badb2016-08-16 12:44:29 -0700[diff] [blame]217 <pre>Gets information about a RuntimeConfig resource.
Jon Wayne Parrott0a471d32016-05-19 10:54:38 -0700[diff] [blame]218
219Args:
Jon Wayne Parrott7d5badb2016-08-16 12:44:29 -0700[diff] [blame]220 name: string, The name of the RuntimeConfig resource to retrieve, in the format:
221
222`projects/[PROJECT_ID]/configs/[CONFIG_NAME]` (required)
Jon Wayne Parrott0a471d32016-05-19 10:54:38 -0700[diff] [blame]223 x__xgafv: string, V1 error format.
224 Allowed values
225 1 - v1 error format
226 2 - v2 error format
227
228Returns:
229 An object of the form:
230
Jon Wayne Parrott7d5badb2016-08-16 12:44:29 -0700[diff] [blame]231 { # A RuntimeConfig resource is the primary resource in the Cloud RuntimeConfig
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700[diff] [blame]232 # service. A RuntimeConfig resource consists of metadata and a hierarchy of
233 # variables.
234 &quot;name&quot;: &quot;A String&quot;, # The resource name of a runtime config. The name must have the format:
235 #
236 # projects/[PROJECT_ID]/configs/[CONFIG_NAME]
237 #
238 # The `[PROJECT_ID]` must be a valid project ID, and `[CONFIG_NAME]` is an
239 # arbitrary name that matches the
240 # `[0-9A-Za-z](?:[_.A-Za-z0-9-]{0,62}[_.A-Za-z0-9])?` regular expression.
241 # The length of `[CONFIG_NAME]` must be less than 64 characters.
242 #
243 # You pick the RuntimeConfig resource name, but the server will validate that
244 # the name adheres to this format. After you create the resource, you cannot
245 # change the resource&#x27;s name.
246 &quot;description&quot;: &quot;A String&quot;, # An optional description of the RuntimeConfig object.
247 }</pre>
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]248</div>
249
250<div class="method">
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]251 <code class="details" id="getIamPolicy">getIamPolicy(resource, options_requestedPolicyVersion=None, x__xgafv=None)</code>
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]252 <pre>Gets the access control policy for a resource.
253Returns an empty policy if the resource exists and does not have a policy
254set.
255
256Args:
257 resource: string, REQUIRED: The resource for which the policy is being requested.
Sai Cheemalapatic30d2b52017-03-13 12:12:03 -0400[diff] [blame]258See the operation documentation for the appropriate value for this field. (required)
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]259 options_requestedPolicyVersion: integer, Optional. The policy format version to be returned.
260
261Valid values are 0, 1, and 3. Requests specifying an invalid value will be
262rejected.
263
264Requests for policies with any conditional bindings must specify version 3.
265Policies without any conditional bindings may specify any valid value or
266leave the field unset.
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]267
268To learn which resources support conditions in their IAM policies, see the
269[IAM
270documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]271 x__xgafv: string, V1 error format.
272 Allowed values
273 1 - v1 error format
274 2 - v2 error format
275
276Returns:
277 An object of the form:
278
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]279 { # An Identity and Access Management (IAM) policy, which specifies access
280 # controls for Google Cloud resources.
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]281 #
282 #
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]283 # A `Policy` is a collection of `bindings`. A `binding` binds one or more
284 # `members` to a single `role`. Members can be user accounts, service accounts,
285 # Google groups, and domains (such as G Suite). A `role` is a named list of
286 # permissions; each `role` can be an IAM predefined role or a user-created
287 # custom role.
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]288 #
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]289 # For some types of Google Cloud resources, a `binding` can also specify a
290 # `condition`, which is a logical expression that allows access to a resource
291 # only if the expression evaluates to `true`. A condition can add constraints
292 # based on attributes of the request, the resource, or both. To learn which
293 # resources support conditions in their IAM policies, see the
294 # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]295 #
296 # **JSON example:**
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]297 #
298 # {
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]299 # &quot;bindings&quot;: [
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]300 # {
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]301 # &quot;role&quot;: &quot;roles/resourcemanager.organizationAdmin&quot;,
302 # &quot;members&quot;: [
303 # &quot;user:mike@example.com&quot;,
304 # &quot;group:admins@example.com&quot;,
305 # &quot;domain:google.com&quot;,
306 # &quot;serviceAccount:my-project-id@appspot.gserviceaccount.com&quot;
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]307 # ]
308 # },
309 # {
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]310 # &quot;role&quot;: &quot;roles/resourcemanager.organizationViewer&quot;,
311 # &quot;members&quot;: [
312 # &quot;user:eve@example.com&quot;
313 # ],
314 # &quot;condition&quot;: {
315 # &quot;title&quot;: &quot;expirable access&quot;,
316 # &quot;description&quot;: &quot;Does not grant access after Sep 2020&quot;,
317 # &quot;expression&quot;: &quot;request.time &lt; timestamp(&#x27;2020-10-01T00:00:00.000Z&#x27;)&quot;,
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]318 # }
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]319 # }
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]320 # ],
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]321 # &quot;etag&quot;: &quot;BwWWja0YfJA=&quot;,
322 # &quot;version&quot;: 3
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]323 # }
324 #
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]325 # **YAML example:**
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700[diff] [blame]326 #
327 # bindings:
328 # - members:
329 # - user:mike@example.com
330 # - group:admins@example.com
331 # - domain:google.com
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]332 # - serviceAccount:my-project-id@appspot.gserviceaccount.com
333 # role: roles/resourcemanager.organizationAdmin
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700[diff] [blame]334 # - members:
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]335 # - user:eve@example.com
336 # role: roles/resourcemanager.organizationViewer
337 # condition:
338 # title: expirable access
339 # description: Does not grant access after Sep 2020
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]340 # expression: request.time &lt; timestamp(&#x27;2020-10-01T00:00:00.000Z&#x27;)
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]341 # - etag: BwWWja0YfJA=
342 # - version: 3
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700[diff] [blame]343 #
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]344 # For a description of IAM and its features, see the
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]345 # [IAM documentation](https://cloud.google.com/iam/docs/).
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]346 &quot;version&quot;: 42, # Specifies the format of the policy.
347 #
348 # Valid values are `0`, `1`, and `3`. Requests that specify an invalid value
349 # are rejected.
350 #
351 # Any operation that affects conditional role bindings must specify version
352 # `3`. This requirement applies to the following operations:
353 #
354 # * Getting a policy that includes a conditional role binding
355 # * Adding a conditional role binding to a policy
356 # * Changing a conditional role binding in a policy
357 # * Removing any role binding, with or without a condition, from a policy
358 # that includes conditions
359 #
360 # **Important:** If you use IAM Conditions, you must include the `etag` field
361 # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
362 # you to overwrite a version `3` policy with a version `1` policy, and all of
363 # the conditions in the version `3` policy are lost.
364 #
365 # If a policy does not include any conditions, operations on that policy may
366 # specify any valid version or leave the field unset.
367 #
368 # To learn which resources support conditions in their IAM policies, see the
369 # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
370 &quot;bindings&quot;: [ # Associates a list of `members` to a `role`. Optionally, may specify a
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]371 # `condition` that determines how and when the `bindings` are applied. Each
372 # of the `bindings` must contain at least one member.
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]373 { # Associates `members` with a `role`.
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700[diff] [blame]374 &quot;role&quot;: &quot;A String&quot;, # Role that is assigned to `members`.
375 # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]376 &quot;condition&quot;: { # Represents a textual expression in the Common Expression Language (CEL) # The condition that is associated with this binding.
377 #
378 # If the condition evaluates to `true`, then this binding applies to the
379 # current request.
380 #
381 # If the condition evaluates to `false`, then this binding does not apply to
382 # the current request. However, a different role binding might grant the same
383 # role to one or more of the members in this binding.
384 #
385 # To learn which resources support conditions in their IAM policies, see the
386 # [IAM
387 # documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
388 # syntax. CEL is a C-like expression language. The syntax and semantics of CEL
389 # are documented at https://github.com/google/cel-spec.
390 #
391 # Example (Comparison):
392 #
393 # title: &quot;Summary size limit&quot;
394 # description: &quot;Determines if a summary is less than 100 chars&quot;
395 # expression: &quot;document.summary.size() &lt; 100&quot;
396 #
397 # Example (Equality):
398 #
399 # title: &quot;Requestor is owner&quot;
400 # description: &quot;Determines if requestor is the document owner&quot;
401 # expression: &quot;document.owner == request.auth.claims.email&quot;
402 #
403 # Example (Logic):
404 #
405 # title: &quot;Public documents&quot;
406 # description: &quot;Determine whether the document should be publicly visible&quot;
407 # expression: &quot;document.type != &#x27;private&#x27; &amp;&amp; document.type != &#x27;internal&#x27;&quot;
408 #
409 # Example (Data Manipulation):
410 #
411 # title: &quot;Notification string&quot;
412 # description: &quot;Create a notification string with a timestamp.&quot;
413 # expression: &quot;&#x27;New message received at &#x27; + string(document.create_time)&quot;
414 #
415 # The exact variables and functions that may be referenced within an expression
416 # are determined by the service that evaluates it. See the service
417 # documentation for additional information.
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]418 &quot;title&quot;: &quot;A String&quot;, # Optional. Title for the expression, i.e. a short string describing
419 # its purpose. This can be used e.g. in UIs which allow to enter the
420 # expression.
421 &quot;location&quot;: &quot;A String&quot;, # Optional. String indicating the location of the expression for error
422 # reporting, e.g. a file name and a position in the file.
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700[diff] [blame]423 &quot;description&quot;: &quot;A String&quot;, # Optional. Description of the expression. This is a longer text which
424 # describes the expression, e.g. when hovered over it in a UI.
425 &quot;expression&quot;: &quot;A String&quot;, # Textual representation of an expression in Common Expression Language
426 # syntax.
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]427 },
428 &quot;members&quot;: [ # Specifies the identities requesting access for a Cloud Platform resource.
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]429 # `members` can have the following values:
430 #
431 # * `allUsers`: A special identifier that represents anyone who is
432 # on the internet; with or without a Google account.
433 #
434 # * `allAuthenticatedUsers`: A special identifier that represents anyone
435 # who is authenticated with a Google account or a service account.
436 #
437 # * `user:{emailid}`: An email address that represents a specific Google
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]438 # account. For example, `alice@example.com` .
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]439 #
440 #
441 # * `serviceAccount:{emailid}`: An email address that represents a service
442 # account. For example, `my-other-app@appspot.gserviceaccount.com`.
443 #
444 # * `group:{emailid}`: An email address that represents a Google group.
445 # For example, `admins@example.com`.
446 #
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]447 # * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
448 # identifier) representing a user that has been recently deleted. For
449 # example, `alice@example.com?uid=123456789012345678901`. If the user is
450 # recovered, this value reverts to `user:{emailid}` and the recovered user
451 # retains the role in the binding.
452 #
453 # * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
454 # unique identifier) representing a service account that has been recently
455 # deleted. For example,
456 # `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
457 # If the service account is undeleted, this value reverts to
458 # `serviceAccount:{emailid}` and the undeleted service account retains the
459 # role in the binding.
460 #
461 # * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
462 # identifier) representing a Google group that has been recently
463 # deleted. For example, `admins@example.com?uid=123456789012345678901`. If
464 # the group is recovered, this value reverts to `group:{emailid}` and the
465 # recovered group retains the role in the binding.
466 #
Sai Cheemalapati4ba8c232017-06-06 18:46:08 -0400[diff] [blame]467 #
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700[diff] [blame]468 # * `domain:{domain}`: The G Suite domain (primary) that represents all the
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]469 # users of that domain. For example, `google.com` or `example.com`.
470 #
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]471 &quot;A String&quot;,
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]472 ],
473 },
474 ],
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700[diff] [blame]475 &quot;etag&quot;: &quot;A String&quot;, # `etag` is used for optimistic concurrency control as a way to help
476 # prevent simultaneous updates of a policy from overwriting each other.
477 # It is strongly suggested that systems make use of the `etag` in the
478 # read-modify-write cycle to perform policy updates in order to avoid race
479 # conditions: An `etag` is returned in the response to `getIamPolicy`, and
480 # systems are expected to put that etag in the request to `setIamPolicy` to
481 # ensure that their change will be applied to the same version of the policy.
482 #
483 # **Important:** If you use IAM Conditions, you must include the `etag` field
484 # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
485 # you to overwrite a version `3` policy with a version `1` policy, and all of
486 # the conditions in the version `3` policy are lost.
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]487 }</pre>
Jon Wayne Parrott0a471d32016-05-19 10:54:38 -0700[diff] [blame]488</div>
489
490<div class="method">
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]491 <code class="details" id="list">list(parent, pageToken=None, pageSize=None, x__xgafv=None)</code>
Jon Wayne Parrott7d5badb2016-08-16 12:44:29 -0700[diff] [blame]492 <pre>Lists all the RuntimeConfig resources within project.
Jon Wayne Parrott0a471d32016-05-19 10:54:38 -0700[diff] [blame]493
494Args:
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700[diff] [blame]495 parent: string, The [project
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]496ID](https://support.google.com/cloud/answer/6158840?hl=en&amp;ref_topic=6158848)
Jon Wayne Parrott7d5badb2016-08-16 12:44:29 -0700[diff] [blame]497for this request, in the format `projects/[PROJECT_ID]`. (required)
498 pageToken: string, Specifies a page token to use. Set `pageToken` to a `nextPageToken`
499returned by a previous list request to get the next page of results.
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]500 pageSize: integer, Specifies the number of results to return per page. If there are fewer
501elements than the specified number, returns all elements.
Jon Wayne Parrott0a471d32016-05-19 10:54:38 -0700[diff] [blame]502 x__xgafv: string, V1 error format.
503 Allowed values
504 1 - v1 error format
505 2 - v2 error format
Jon Wayne Parrott0a471d32016-05-19 10:54:38 -0700[diff] [blame]506
507Returns:
508 An object of the form:
509
Jon Wayne Parrott7d5badb2016-08-16 12:44:29 -0700[diff] [blame]510 { # `ListConfigs()` returns the following response. The order of returned
511 # objects is arbitrary; that is, it is not ordered in any particular way.
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]512 &quot;configs&quot;: [ # A list of the configurations in the project. The order of returned
Jon Wayne Parrott7d5badb2016-08-16 12:44:29 -0700[diff] [blame]513 # objects is arbitrary; that is, it is not ordered in any particular way.
514 { # A RuntimeConfig resource is the primary resource in the Cloud RuntimeConfig
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700[diff] [blame]515 # service. A RuntimeConfig resource consists of metadata and a hierarchy of
516 # variables.
517 &quot;name&quot;: &quot;A String&quot;, # The resource name of a runtime config. The name must have the format:
518 #
519 # projects/[PROJECT_ID]/configs/[CONFIG_NAME]
520 #
521 # The `[PROJECT_ID]` must be a valid project ID, and `[CONFIG_NAME]` is an
522 # arbitrary name that matches the
523 # `[0-9A-Za-z](?:[_.A-Za-z0-9-]{0,62}[_.A-Za-z0-9])?` regular expression.
524 # The length of `[CONFIG_NAME]` must be less than 64 characters.
525 #
526 # You pick the RuntimeConfig resource name, but the server will validate that
527 # the name adheres to this format. After you create the resource, you cannot
528 # change the resource&#x27;s name.
529 &quot;description&quot;: &quot;A String&quot;, # An optional description of the RuntimeConfig object.
530 },
Jon Wayne Parrott0a471d32016-05-19 10:54:38 -0700[diff] [blame]531 ],
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]532 &quot;nextPageToken&quot;: &quot;A String&quot;, # This token allows you to get the next page of results for list requests.
533 # If the number of results is larger than `pageSize`, use the `nextPageToken`
534 # as a value for the query parameter `pageToken` in the next list request.
535 # Subsequent list requests will have their own `nextPageToken` to continue
536 # paging through the results
Jon Wayne Parrott0a471d32016-05-19 10:54:38 -0700[diff] [blame]537 }</pre>
538</div>
539
540<div class="method">
541 <code class="details" id="list_next">list_next(previous_request, previous_response)</code>
542 <pre>Retrieves the next page of results.
543
544Args:
545 previous_request: The request for the previous page. (required)
546 previous_response: The response from the request for the previous page. (required)
547
548Returns:
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]549 A request object that you can call &#x27;execute()&#x27; on to request the next
Jon Wayne Parrott0a471d32016-05-19 10:54:38 -0700[diff] [blame]550 page. Returns None if there are no more items in the collection.
551 </pre>
552</div>
553
554<div class="method">
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]555 <code class="details" id="setIamPolicy">setIamPolicy(resource, body=None, x__xgafv=None)</code>
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]556 <pre>Sets the access control policy on the specified resource. Replaces any
557existing policy.
558
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]559Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.
560
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]561Args:
562 resource: string, REQUIRED: The resource for which the policy is being specified.
Sai Cheemalapatic30d2b52017-03-13 12:12:03 -0400[diff] [blame]563See the operation documentation for the appropriate value for this field. (required)
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]564 body: object, The request body.
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]565 The object takes the form of:
566
567{ # Request message for `SetIamPolicy` method.
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]568 &quot;policy&quot;: { # An Identity and Access Management (IAM) policy, which specifies access # REQUIRED: The complete policy to be applied to the `resource`. The size of
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]569 # the policy is limited to a few 10s of KB. An empty policy is a
570 # valid policy but certain Cloud Platform services (such as Projects)
571 # might reject them.
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]572 # controls for Google Cloud resources.
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]573 #
574 #
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]575 # A `Policy` is a collection of `bindings`. A `binding` binds one or more
576 # `members` to a single `role`. Members can be user accounts, service accounts,
577 # Google groups, and domains (such as G Suite). A `role` is a named list of
578 # permissions; each `role` can be an IAM predefined role or a user-created
579 # custom role.
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]580 #
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]581 # For some types of Google Cloud resources, a `binding` can also specify a
582 # `condition`, which is a logical expression that allows access to a resource
583 # only if the expression evaluates to `true`. A condition can add constraints
584 # based on attributes of the request, the resource, or both. To learn which
585 # resources support conditions in their IAM policies, see the
586 # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]587 #
588 # **JSON example:**
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]589 #
590 # {
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]591 # &quot;bindings&quot;: [
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]592 # {
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]593 # &quot;role&quot;: &quot;roles/resourcemanager.organizationAdmin&quot;,
594 # &quot;members&quot;: [
595 # &quot;user:mike@example.com&quot;,
596 # &quot;group:admins@example.com&quot;,
597 # &quot;domain:google.com&quot;,
598 # &quot;serviceAccount:my-project-id@appspot.gserviceaccount.com&quot;
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]599 # ]
600 # },
601 # {
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]602 # &quot;role&quot;: &quot;roles/resourcemanager.organizationViewer&quot;,
603 # &quot;members&quot;: [
604 # &quot;user:eve@example.com&quot;
605 # ],
606 # &quot;condition&quot;: {
607 # &quot;title&quot;: &quot;expirable access&quot;,
608 # &quot;description&quot;: &quot;Does not grant access after Sep 2020&quot;,
609 # &quot;expression&quot;: &quot;request.time &lt; timestamp(&#x27;2020-10-01T00:00:00.000Z&#x27;)&quot;,
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]610 # }
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]611 # }
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]612 # ],
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]613 # &quot;etag&quot;: &quot;BwWWja0YfJA=&quot;,
614 # &quot;version&quot;: 3
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]615 # }
616 #
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]617 # **YAML example:**
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700[diff] [blame]618 #
619 # bindings:
620 # - members:
621 # - user:mike@example.com
622 # - group:admins@example.com
623 # - domain:google.com
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]624 # - serviceAccount:my-project-id@appspot.gserviceaccount.com
625 # role: roles/resourcemanager.organizationAdmin
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700[diff] [blame]626 # - members:
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]627 # - user:eve@example.com
628 # role: roles/resourcemanager.organizationViewer
629 # condition:
630 # title: expirable access
631 # description: Does not grant access after Sep 2020
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]632 # expression: request.time &lt; timestamp(&#x27;2020-10-01T00:00:00.000Z&#x27;)
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]633 # - etag: BwWWja0YfJA=
634 # - version: 3
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700[diff] [blame]635 #
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]636 # For a description of IAM and its features, see the
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]637 # [IAM documentation](https://cloud.google.com/iam/docs/).
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]638 &quot;version&quot;: 42, # Specifies the format of the policy.
639 #
640 # Valid values are `0`, `1`, and `3`. Requests that specify an invalid value
641 # are rejected.
642 #
643 # Any operation that affects conditional role bindings must specify version
644 # `3`. This requirement applies to the following operations:
645 #
646 # * Getting a policy that includes a conditional role binding
647 # * Adding a conditional role binding to a policy
648 # * Changing a conditional role binding in a policy
649 # * Removing any role binding, with or without a condition, from a policy
650 # that includes conditions
651 #
652 # **Important:** If you use IAM Conditions, you must include the `etag` field
653 # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
654 # you to overwrite a version `3` policy with a version `1` policy, and all of
655 # the conditions in the version `3` policy are lost.
656 #
657 # If a policy does not include any conditions, operations on that policy may
658 # specify any valid version or leave the field unset.
659 #
660 # To learn which resources support conditions in their IAM policies, see the
661 # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
662 &quot;bindings&quot;: [ # Associates a list of `members` to a `role`. Optionally, may specify a
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]663 # `condition` that determines how and when the `bindings` are applied. Each
664 # of the `bindings` must contain at least one member.
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]665 { # Associates `members` with a `role`.
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700[diff] [blame]666 &quot;role&quot;: &quot;A String&quot;, # Role that is assigned to `members`.
667 # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]668 &quot;condition&quot;: { # Represents a textual expression in the Common Expression Language (CEL) # The condition that is associated with this binding.
669 #
670 # If the condition evaluates to `true`, then this binding applies to the
671 # current request.
672 #
673 # If the condition evaluates to `false`, then this binding does not apply to
674 # the current request. However, a different role binding might grant the same
675 # role to one or more of the members in this binding.
676 #
677 # To learn which resources support conditions in their IAM policies, see the
678 # [IAM
679 # documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
680 # syntax. CEL is a C-like expression language. The syntax and semantics of CEL
681 # are documented at https://github.com/google/cel-spec.
682 #
683 # Example (Comparison):
684 #
685 # title: &quot;Summary size limit&quot;
686 # description: &quot;Determines if a summary is less than 100 chars&quot;
687 # expression: &quot;document.summary.size() &lt; 100&quot;
688 #
689 # Example (Equality):
690 #
691 # title: &quot;Requestor is owner&quot;
692 # description: &quot;Determines if requestor is the document owner&quot;
693 # expression: &quot;document.owner == request.auth.claims.email&quot;
694 #
695 # Example (Logic):
696 #
697 # title: &quot;Public documents&quot;
698 # description: &quot;Determine whether the document should be publicly visible&quot;
699 # expression: &quot;document.type != &#x27;private&#x27; &amp;&amp; document.type != &#x27;internal&#x27;&quot;
700 #
701 # Example (Data Manipulation):
702 #
703 # title: &quot;Notification string&quot;
704 # description: &quot;Create a notification string with a timestamp.&quot;
705 # expression: &quot;&#x27;New message received at &#x27; + string(document.create_time)&quot;
706 #
707 # The exact variables and functions that may be referenced within an expression
708 # are determined by the service that evaluates it. See the service
709 # documentation for additional information.
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]710 &quot;title&quot;: &quot;A String&quot;, # Optional. Title for the expression, i.e. a short string describing
711 # its purpose. This can be used e.g. in UIs which allow to enter the
712 # expression.
713 &quot;location&quot;: &quot;A String&quot;, # Optional. String indicating the location of the expression for error
714 # reporting, e.g. a file name and a position in the file.
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700[diff] [blame]715 &quot;description&quot;: &quot;A String&quot;, # Optional. Description of the expression. This is a longer text which
716 # describes the expression, e.g. when hovered over it in a UI.
717 &quot;expression&quot;: &quot;A String&quot;, # Textual representation of an expression in Common Expression Language
718 # syntax.
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]719 },
720 &quot;members&quot;: [ # Specifies the identities requesting access for a Cloud Platform resource.
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]721 # `members` can have the following values:
722 #
723 # * `allUsers`: A special identifier that represents anyone who is
724 # on the internet; with or without a Google account.
725 #
726 # * `allAuthenticatedUsers`: A special identifier that represents anyone
727 # who is authenticated with a Google account or a service account.
728 #
729 # * `user:{emailid}`: An email address that represents a specific Google
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]730 # account. For example, `alice@example.com` .
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]731 #
732 #
733 # * `serviceAccount:{emailid}`: An email address that represents a service
734 # account. For example, `my-other-app@appspot.gserviceaccount.com`.
735 #
736 # * `group:{emailid}`: An email address that represents a Google group.
737 # For example, `admins@example.com`.
738 #
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]739 # * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
740 # identifier) representing a user that has been recently deleted. For
741 # example, `alice@example.com?uid=123456789012345678901`. If the user is
742 # recovered, this value reverts to `user:{emailid}` and the recovered user
743 # retains the role in the binding.
744 #
745 # * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
746 # unique identifier) representing a service account that has been recently
747 # deleted. For example,
748 # `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
749 # If the service account is undeleted, this value reverts to
750 # `serviceAccount:{emailid}` and the undeleted service account retains the
751 # role in the binding.
752 #
753 # * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
754 # identifier) representing a Google group that has been recently
755 # deleted. For example, `admins@example.com?uid=123456789012345678901`. If
756 # the group is recovered, this value reverts to `group:{emailid}` and the
757 # recovered group retains the role in the binding.
758 #
Sai Cheemalapati4ba8c232017-06-06 18:46:08 -0400[diff] [blame]759 #
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700[diff] [blame]760 # * `domain:{domain}`: The G Suite domain (primary) that represents all the
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]761 # users of that domain. For example, `google.com` or `example.com`.
762 #
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]763 &quot;A String&quot;,
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]764 ],
765 },
766 ],
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700[diff] [blame]767 &quot;etag&quot;: &quot;A String&quot;, # `etag` is used for optimistic concurrency control as a way to help
768 # prevent simultaneous updates of a policy from overwriting each other.
769 # It is strongly suggested that systems make use of the `etag` in the
770 # read-modify-write cycle to perform policy updates in order to avoid race
771 # conditions: An `etag` is returned in the response to `getIamPolicy`, and
772 # systems are expected to put that etag in the request to `setIamPolicy` to
773 # ensure that their change will be applied to the same version of the policy.
774 #
775 # **Important:** If you use IAM Conditions, you must include the `etag` field
776 # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
777 # you to overwrite a version `3` policy with a version `1` policy, and all of
778 # the conditions in the version `3` policy are lost.
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]779 },
780 }
781
782 x__xgafv: string, V1 error format.
783 Allowed values
784 1 - v1 error format
785 2 - v2 error format
786
787Returns:
788 An object of the form:
789
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]790 { # An Identity and Access Management (IAM) policy, which specifies access
791 # controls for Google Cloud resources.
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]792 #
793 #
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]794 # A `Policy` is a collection of `bindings`. A `binding` binds one or more
795 # `members` to a single `role`. Members can be user accounts, service accounts,
796 # Google groups, and domains (such as G Suite). A `role` is a named list of
797 # permissions; each `role` can be an IAM predefined role or a user-created
798 # custom role.
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]799 #
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]800 # For some types of Google Cloud resources, a `binding` can also specify a
801 # `condition`, which is a logical expression that allows access to a resource
802 # only if the expression evaluates to `true`. A condition can add constraints
803 # based on attributes of the request, the resource, or both. To learn which
804 # resources support conditions in their IAM policies, see the
805 # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]806 #
807 # **JSON example:**
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]808 #
809 # {
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]810 # &quot;bindings&quot;: [
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]811 # {
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]812 # &quot;role&quot;: &quot;roles/resourcemanager.organizationAdmin&quot;,
813 # &quot;members&quot;: [
814 # &quot;user:mike@example.com&quot;,
815 # &quot;group:admins@example.com&quot;,
816 # &quot;domain:google.com&quot;,
817 # &quot;serviceAccount:my-project-id@appspot.gserviceaccount.com&quot;
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]818 # ]
819 # },
820 # {
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]821 # &quot;role&quot;: &quot;roles/resourcemanager.organizationViewer&quot;,
822 # &quot;members&quot;: [
823 # &quot;user:eve@example.com&quot;
824 # ],
825 # &quot;condition&quot;: {
826 # &quot;title&quot;: &quot;expirable access&quot;,
827 # &quot;description&quot;: &quot;Does not grant access after Sep 2020&quot;,
828 # &quot;expression&quot;: &quot;request.time &lt; timestamp(&#x27;2020-10-01T00:00:00.000Z&#x27;)&quot;,
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]829 # }
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]830 # }
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]831 # ],
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]832 # &quot;etag&quot;: &quot;BwWWja0YfJA=&quot;,
833 # &quot;version&quot;: 3
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]834 # }
835 #
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]836 # **YAML example:**
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700[diff] [blame]837 #
838 # bindings:
839 # - members:
840 # - user:mike@example.com
841 # - group:admins@example.com
842 # - domain:google.com
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]843 # - serviceAccount:my-project-id@appspot.gserviceaccount.com
844 # role: roles/resourcemanager.organizationAdmin
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700[diff] [blame]845 # - members:
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]846 # - user:eve@example.com
847 # role: roles/resourcemanager.organizationViewer
848 # condition:
849 # title: expirable access
850 # description: Does not grant access after Sep 2020
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]851 # expression: request.time &lt; timestamp(&#x27;2020-10-01T00:00:00.000Z&#x27;)
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]852 # - etag: BwWWja0YfJA=
853 # - version: 3
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700[diff] [blame]854 #
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]855 # For a description of IAM and its features, see the
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]856 # [IAM documentation](https://cloud.google.com/iam/docs/).
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]857 &quot;version&quot;: 42, # Specifies the format of the policy.
858 #
859 # Valid values are `0`, `1`, and `3`. Requests that specify an invalid value
860 # are rejected.
861 #
862 # Any operation that affects conditional role bindings must specify version
863 # `3`. This requirement applies to the following operations:
864 #
865 # * Getting a policy that includes a conditional role binding
866 # * Adding a conditional role binding to a policy
867 # * Changing a conditional role binding in a policy
868 # * Removing any role binding, with or without a condition, from a policy
869 # that includes conditions
870 #
871 # **Important:** If you use IAM Conditions, you must include the `etag` field
872 # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
873 # you to overwrite a version `3` policy with a version `1` policy, and all of
874 # the conditions in the version `3` policy are lost.
875 #
876 # If a policy does not include any conditions, operations on that policy may
877 # specify any valid version or leave the field unset.
878 #
879 # To learn which resources support conditions in their IAM policies, see the
880 # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
881 &quot;bindings&quot;: [ # Associates a list of `members` to a `role`. Optionally, may specify a
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]882 # `condition` that determines how and when the `bindings` are applied. Each
883 # of the `bindings` must contain at least one member.
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]884 { # Associates `members` with a `role`.
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700[diff] [blame]885 &quot;role&quot;: &quot;A String&quot;, # Role that is assigned to `members`.
886 # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]887 &quot;condition&quot;: { # Represents a textual expression in the Common Expression Language (CEL) # The condition that is associated with this binding.
888 #
889 # If the condition evaluates to `true`, then this binding applies to the
890 # current request.
891 #
892 # If the condition evaluates to `false`, then this binding does not apply to
893 # the current request. However, a different role binding might grant the same
894 # role to one or more of the members in this binding.
895 #
896 # To learn which resources support conditions in their IAM policies, see the
897 # [IAM
898 # documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
899 # syntax. CEL is a C-like expression language. The syntax and semantics of CEL
900 # are documented at https://github.com/google/cel-spec.
901 #
902 # Example (Comparison):
903 #
904 # title: &quot;Summary size limit&quot;
905 # description: &quot;Determines if a summary is less than 100 chars&quot;
906 # expression: &quot;document.summary.size() &lt; 100&quot;
907 #
908 # Example (Equality):
909 #
910 # title: &quot;Requestor is owner&quot;
911 # description: &quot;Determines if requestor is the document owner&quot;
912 # expression: &quot;document.owner == request.auth.claims.email&quot;
913 #
914 # Example (Logic):
915 #
916 # title: &quot;Public documents&quot;
917 # description: &quot;Determine whether the document should be publicly visible&quot;
918 # expression: &quot;document.type != &#x27;private&#x27; &amp;&amp; document.type != &#x27;internal&#x27;&quot;
919 #
920 # Example (Data Manipulation):
921 #
922 # title: &quot;Notification string&quot;
923 # description: &quot;Create a notification string with a timestamp.&quot;
924 # expression: &quot;&#x27;New message received at &#x27; + string(document.create_time)&quot;
925 #
926 # The exact variables and functions that may be referenced within an expression
927 # are determined by the service that evaluates it. See the service
928 # documentation for additional information.
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]929 &quot;title&quot;: &quot;A String&quot;, # Optional. Title for the expression, i.e. a short string describing
930 # its purpose. This can be used e.g. in UIs which allow to enter the
931 # expression.
932 &quot;location&quot;: &quot;A String&quot;, # Optional. String indicating the location of the expression for error
933 # reporting, e.g. a file name and a position in the file.
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700[diff] [blame]934 &quot;description&quot;: &quot;A String&quot;, # Optional. Description of the expression. This is a longer text which
935 # describes the expression, e.g. when hovered over it in a UI.
936 &quot;expression&quot;: &quot;A String&quot;, # Textual representation of an expression in Common Expression Language
937 # syntax.
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]938 },
939 &quot;members&quot;: [ # Specifies the identities requesting access for a Cloud Platform resource.
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]940 # `members` can have the following values:
941 #
942 # * `allUsers`: A special identifier that represents anyone who is
943 # on the internet; with or without a Google account.
944 #
945 # * `allAuthenticatedUsers`: A special identifier that represents anyone
946 # who is authenticated with a Google account or a service account.
947 #
948 # * `user:{emailid}`: An email address that represents a specific Google
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]949 # account. For example, `alice@example.com` .
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]950 #
951 #
952 # * `serviceAccount:{emailid}`: An email address that represents a service
953 # account. For example, `my-other-app@appspot.gserviceaccount.com`.
954 #
955 # * `group:{emailid}`: An email address that represents a Google group.
956 # For example, `admins@example.com`.
957 #
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]958 # * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
959 # identifier) representing a user that has been recently deleted. For
960 # example, `alice@example.com?uid=123456789012345678901`. If the user is
961 # recovered, this value reverts to `user:{emailid}` and the recovered user
962 # retains the role in the binding.
963 #
964 # * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
965 # unique identifier) representing a service account that has been recently
966 # deleted. For example,
967 # `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
968 # If the service account is undeleted, this value reverts to
969 # `serviceAccount:{emailid}` and the undeleted service account retains the
970 # role in the binding.
971 #
972 # * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
973 # identifier) representing a Google group that has been recently
974 # deleted. For example, `admins@example.com?uid=123456789012345678901`. If
975 # the group is recovered, this value reverts to `group:{emailid}` and the
976 # recovered group retains the role in the binding.
977 #
Sai Cheemalapati4ba8c232017-06-06 18:46:08 -0400[diff] [blame]978 #
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700[diff] [blame]979 # * `domain:{domain}`: The G Suite domain (primary) that represents all the
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]980 # users of that domain. For example, `google.com` or `example.com`.
981 #
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]982 &quot;A String&quot;,
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]983 ],
984 },
985 ],
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700[diff] [blame]986 &quot;etag&quot;: &quot;A String&quot;, # `etag` is used for optimistic concurrency control as a way to help
987 # prevent simultaneous updates of a policy from overwriting each other.
988 # It is strongly suggested that systems make use of the `etag` in the
989 # read-modify-write cycle to perform policy updates in order to avoid race
990 # conditions: An `etag` is returned in the response to `getIamPolicy`, and
991 # systems are expected to put that etag in the request to `setIamPolicy` to
992 # ensure that their change will be applied to the same version of the policy.
993 #
994 # **Important:** If you use IAM Conditions, you must include the `etag` field
995 # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
996 # you to overwrite a version `3` policy with a version `1` policy, and all of
997 # the conditions in the version `3` policy are lost.
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]998 }</pre>
999</div>
1000
1001<div class="method">
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]1002 <code class="details" id="testIamPermissions">testIamPermissions(resource, body=None, x__xgafv=None)</code>
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]1003 <pre>Returns permissions that a caller has on the specified resource.
1004If the resource does not exist, this will return an empty set of
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]1005permissions, not a `NOT_FOUND` error.
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]1006
Sai Cheemalapatic30d2b52017-03-13 12:12:03 -0400[diff] [blame]1007Note: This operation is designed to be used for building permission-aware
1008UIs and command-line tools, not for authorization checking. This operation
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]1009may &quot;fail open&quot; without warning.
Sai Cheemalapatic30d2b52017-03-13 12:12:03 -0400[diff] [blame]1010
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]1011Args:
1012 resource: string, REQUIRED: The resource for which the policy detail is being requested.
Sai Cheemalapatic30d2b52017-03-13 12:12:03 -0400[diff] [blame]1013See the operation documentation for the appropriate value for this field. (required)
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]1014 body: object, The request body.
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]1015 The object takes the form of:
1016
1017{ # Request message for `TestIamPermissions` method.
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]1018 &quot;permissions&quot;: [ # The set of permissions to check for the `resource`. Permissions with
1019 # wildcards (such as &#x27;*&#x27; or &#x27;storage.*&#x27;) are not allowed. For more
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]1020 # information see
1021 # [IAM Overview](https://cloud.google.com/iam/docs/overview#permissions).
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]1022 &quot;A String&quot;,
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]1023 ],
1024 }
1025
1026 x__xgafv: string, V1 error format.
1027 Allowed values
1028 1 - v1 error format
1029 2 - v2 error format
1030
1031Returns:
1032 An object of the form:
1033
1034 { # Response message for `TestIamPermissions` method.
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]1035 &quot;permissions&quot;: [ # A subset of `TestPermissionsRequest.permissions` that the caller is
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]1036 # allowed.
Bu Sun Kim65020912020-05-20 12:08:20 -0700[diff] [blame]1037 &quot;A String&quot;,
Jon Wayne Parrott692617a2017-01-06 09:58:29 -0800[diff] [blame]1038 ],
1039 }</pre>
1040</div>
1041
1042<div class="method">
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]1043 <code class="details" id="update">update(name, body=None, x__xgafv=None)</code>
Jon Wayne Parrott7d5badb2016-08-16 12:44:29 -0700[diff] [blame]1044 <pre>Updates a RuntimeConfig resource. The configuration must exist beforehand.
Jon Wayne Parrott0a471d32016-05-19 10:54:38 -0700[diff] [blame]1045
1046Args:
Jon Wayne Parrott7d5badb2016-08-16 12:44:29 -0700[diff] [blame]1047 name: string, The name of the RuntimeConfig resource to update, in the format:
1048
1049`projects/[PROJECT_ID]/configs/[CONFIG_NAME]` (required)
Dan O'Mearadd494642020-05-01 07:42:23 -0700[diff] [blame]1050 body: object, The request body.
Jon Wayne Parrott0a471d32016-05-19 10:54:38 -0700[diff] [blame]1051 The object takes the form of:
1052
Jon Wayne Parrott7d5badb2016-08-16 12:44:29 -0700[diff] [blame]1053{ # A RuntimeConfig resource is the primary resource in the Cloud RuntimeConfig
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700[diff] [blame]1054 # service. A RuntimeConfig resource consists of metadata and a hierarchy of
1055 # variables.
1056 &quot;name&quot;: &quot;A String&quot;, # The resource name of a runtime config. The name must have the format:
1057 #
1058 # projects/[PROJECT_ID]/configs/[CONFIG_NAME]
1059 #
1060 # The `[PROJECT_ID]` must be a valid project ID, and `[CONFIG_NAME]` is an
1061 # arbitrary name that matches the
1062 # `[0-9A-Za-z](?:[_.A-Za-z0-9-]{0,62}[_.A-Za-z0-9])?` regular expression.
1063 # The length of `[CONFIG_NAME]` must be less than 64 characters.
1064 #
1065 # You pick the RuntimeConfig resource name, but the server will validate that
1066 # the name adheres to this format. After you create the resource, you cannot
1067 # change the resource&#x27;s name.
1068 &quot;description&quot;: &quot;A String&quot;, # An optional description of the RuntimeConfig object.
1069 }
Jon Wayne Parrott0a471d32016-05-19 10:54:38 -0700[diff] [blame]1070
1071 x__xgafv: string, V1 error format.
1072 Allowed values
1073 1 - v1 error format
1074 2 - v2 error format
1075
1076Returns:
1077 An object of the form:
1078
Jon Wayne Parrott7d5badb2016-08-16 12:44:29 -0700[diff] [blame]1079 { # A RuntimeConfig resource is the primary resource in the Cloud RuntimeConfig
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700[diff] [blame]1080 # service. A RuntimeConfig resource consists of metadata and a hierarchy of
1081 # variables.
1082 &quot;name&quot;: &quot;A String&quot;, # The resource name of a runtime config. The name must have the format:
1083 #
1084 # projects/[PROJECT_ID]/configs/[CONFIG_NAME]
1085 #
1086 # The `[PROJECT_ID]` must be a valid project ID, and `[CONFIG_NAME]` is an
1087 # arbitrary name that matches the
1088 # `[0-9A-Za-z](?:[_.A-Za-z0-9-]{0,62}[_.A-Za-z0-9])?` regular expression.
1089 # The length of `[CONFIG_NAME]` must be less than 64 characters.
1090 #
1091 # You pick the RuntimeConfig resource name, but the server will validate that
1092 # the name adheres to this format. After you create the resource, you cannot
1093 # change the resource&#x27;s name.
1094 &quot;description&quot;: &quot;A String&quot;, # An optional description of the RuntimeConfig object.
1095 }</pre>
Jon Wayne Parrott0a471d32016-05-19 10:54:38 -0700[diff] [blame]1096</div>
1097
1098</body></html>