|
571 | 571 | } |
572 | 572 | } |
573 | 573 | }, |
574 | | -"revision": "20231207", |
| 574 | +"revision": "20240104", |
575 | 575 | "rootUrl": "https://cloudfunctions.googleapis.com/", |
576 | 576 | "schemas": { |
577 | 577 | "AuditConfig": { |
|
622 | 622 | }, |
623 | 623 | "type": "object" |
624 | 624 | }, |
| 625 | +"AutomaticUpdatePolicy": { |
| 626 | +"description": "Security patches are applied automatically to the runtime without requiring the function to be redeployed.", |
| 627 | +"id": "AutomaticUpdatePolicy", |
| 628 | +"properties": {}, |
| 629 | +"type": "object" |
| 630 | +}, |
625 | 631 | "Binding": { |
626 | 632 | "description": "Associates `members`, or principals, with a `role`.", |
627 | 633 | "id": "Binding", |
|
631 | 637 | "description": "The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies)." |
632 | 638 | }, |
633 | 639 | "members": { |
634 | | -"description": "Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, ` [email protected]` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, ` [email protected]`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, ` [email protected]`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, ` [email protected]?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, ` [email protected]?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, ` [email protected]?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.", |
| 640 | +"description": "Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, ` [email protected]` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, ` [email protected]`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, ` [email protected]`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `principal://iam.googleapis.com/locations/global/workforcePools/{pool_id}/subject/{subject_attribute_value}`: A single identity in a workforce identity pool. * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/group/{group_id}`: All workforce identities in a group. * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/attribute.{attribute_name}/{attribute_value}`: All workforce identities with a specific attribute value. * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/*`: All identities in a workforce identity pool. * `principal://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/subject/{subject_attribute_value}`: A single identity in a workload identity pool. * `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/group/{group_id}`: A workload identity pool group. * `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/attribute.{attribute_name}/{attribute_value}`: All identities in a workload identity pool with a certain attribute. * `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/*`: All identities in a workload identity pool. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, ` [email protected]?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, ` [email protected]?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, ` [email protected]?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding. * `deleted:principal://iam.googleapis.com/locations/global/workforcePools/{pool_id}/subject/{subject_attribute_value}`: Deleted single identity in a workforce identity pool. For example, `deleted:principal://iam.googleapis.com/locations/global/workforcePools/my-pool-id/subject/my-subject-attribute-value`.", |
635 | 641 | "items": { |
636 | 642 | "type": "string" |
637 | 643 | }, |
|
648 | 654 | "description": "Describes the Build step of the function that builds a container from the given source.", |
649 | 655 | "id": "BuildConfig", |
650 | 656 | "properties": { |
| 657 | +"automaticUpdatePolicy": { |
| 658 | +"$ref": "AutomaticUpdatePolicy", |
| 659 | +"description": "See the comment next to this message for more details." |
| 660 | +}, |
651 | 661 | "build": { |
652 | 662 | "description": "Output only. The Cloud Build name of the latest successful deployment of the function.", |
653 | 663 | "readOnly": true, |
|
668 | 678 | "type": "string" |
669 | 679 | }, |
670 | 680 | "dockerRepository": { |
671 | | -"description": "User managed repository created in Artifact Registry optionally with a customer managed encryption key. This is the repository to which the function docker image will be pushed after it is built by Cloud Build. If unspecified, GCF will create and use a repository named 'gcf-artifacts' for every deployed region. It must match the pattern `projects/{project}/locations/{location}/repositories/{repository}`. Cross-project repositories are not supported. Cross-location repositories are not supported. Repository format must be 'DOCKER'.", |
| 681 | +"description": "Repository in Artifact Registry to which the function docker image will be pushed after it is built by Cloud Build. If specified by user, it is created and managed by user with a customer managed encryption key. Otherwise, GCF will create and use a repository named 'gcf-artifacts' for every deployed region. It must match the pattern `projects/{project}/locations/{location}/repositories/{repository}`. Cross-project repositories are not supported. Cross-location repositories are not supported. Repository format must be 'DOCKER'.", |
672 | 682 | "type": "string" |
673 | 683 | }, |
674 | 684 | "entryPoint": { |
|
682 | 692 | "description": "User-provided build-time environment variables for the function", |
683 | 693 | "type": "object" |
684 | 694 | }, |
| 695 | +"onDeployUpdatePolicy": { |
| 696 | +"$ref": "OnDeployUpdatePolicy", |
| 697 | +"description": "See the comment next to this message for more details." |
| 698 | +}, |
685 | 699 | "runtime": { |
686 | 700 | "description": "The runtime in which to run the function. Required when deploying a new function, optional when updating an existing function. For a complete list of possible choices, see the [`gcloud` command reference](https://cloud.google.com/sdk/gcloud/reference/functions/deploy#--runtime).", |
687 | 701 | "type": "string" |
688 | 702 | }, |
| 703 | +"serviceAccount": { |
| 704 | +"description": "[Preview] Service account to be used for building the container", |
| 705 | +"type": "string" |
| 706 | +}, |
689 | 707 | "source": { |
690 | 708 | "$ref": "Source", |
691 | 709 | "description": "The location of the function source code." |
|
945 | 963 | "description": "Request of `GenerateSourceUploadUrl` method.", |
946 | 964 | "id": "GenerateUploadUrlRequest", |
947 | 965 | "properties": { |
| 966 | +"environment": { |
| 967 | +"description": "The function environment the generated upload url will be used for. The upload url for 2nd Gen functions can also be used for 1st gen functions, but not vice versa. If not specified, 2nd generation-style upload URLs are generated.", |
| 968 | +"enum": [ |
| 969 | +"ENVIRONMENT_UNSPECIFIED", |
| 970 | +"GEN_1", |
| 971 | +"GEN_2" |
| 972 | +], |
| 973 | +"enumDescriptions": [ |
| 974 | +"Unspecified", |
| 975 | +"Gen 1", |
| 976 | +"Gen 2" |
| 977 | +], |
| 978 | +"type": "string" |
| 979 | +}, |
948 | 980 | "kmsKeyName": { |
949 | 981 | "description": "[Preview] Resource name of a KMS crypto key (managed by the user) used to encrypt/decrypt function source code objects in intermediate Cloud Storage buckets. When you generate an upload url and upload your source code, it gets copied to an intermediate Cloud Storage bucket. The source code is then copied to a versioned directory in the sources bucket in the consumer project during the function deployment. It must match the pattern `projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}`. The Google Cloud Functions service account (service-{project_number}@gcf-admin-robot.iam.gserviceaccount.com) must be granted the role 'Cloud KMS CryptoKey Encrypter/Decrypter (roles/cloudkms.cryptoKeyEncrypterDecrypter)' on the Key/KeyRing/Project/Organization (least access preferred).", |
950 | 982 | "type": "string" |
|
1679 | 1711 | }, |
1680 | 1712 | "type": "object" |
1681 | 1713 | }, |
| 1714 | +"OnDeployUpdatePolicy": { |
| 1715 | +"description": "Security patches are only applied when a function is redeployed.", |
| 1716 | +"id": "OnDeployUpdatePolicy", |
| 1717 | +"properties": { |
| 1718 | +"runtimeVersion": { |
| 1719 | +"description": "Output only. contains the runtime version which was used during latest function deployment.", |
| 1720 | +"readOnly": true, |
| 1721 | +"type": "string" |
| 1722 | +} |
| 1723 | +}, |
| 1724 | +"type": "object" |
| 1725 | +}, |
1682 | 1726 | "Operation": { |
1683 | 1727 | "description": "This resource represents a long-running operation that is the result of a network API call.", |
1684 | 1728 | "id": "Operation", |
|
0 commit comments