1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 500 501 502 503 504 505 506 507 508 509 510 511 512 513 514 515 516 517 518 519 520 521 522 523 524 525 526 527 528 529 530 531 532 533 534 535 536 537 538 539 540 541 542 543 544 545 546 547 548 549 550 551 552 553 554 555 556 557 558 559 560 561 562 563 564 565 566 567 568 569 570 571 572 573 574 575 576 577 578 579 580 581 582 583 584 585 586 587 588 589 590 591 592 593 594 595 596 597 598 599 600 601 602 603 604 605 606 607 608 609 610 611 612 613 614 615 616 617 618 619 620 621 622 623 624 625 626 627 628 629 630 631 632 633 634 635 636 637 638 639 640 641 642 643 644 645 646 647 648 649 650 651 652 653 654 655 656 657 658 659 660 661 662 663 664 665 666 667 668 669 670 671 672 673 674 675 676 677 678 679 680 681 682 683 684 685 686 687 688 689 690 691 692 693 694 695 696 697 698 699 700 701 702 703 704 705 706 707 708 709 710 711 712 713 714 715 716 717 718 719 720 721 722 723 724 725 726 727 728 729 730 731 732 733 734 735 736 737 738 739 740 741 742 743 744 745 746 747 748 749 750 751 752 753 754 755 756 757 758 759 760 761 762 763 764 765 766 767 768 769 770 771 772 773 774 775 776 777 778 779 780 781 782 783 784 785 786 787 788 789 790 791 792 793 794 795 796 797 798 799 800 801 802 803 804 805 806 807 808 809 810 811 812 813 814 815 816 817 818 819 820 821 822 823 824 825 826 827 828 829 830 831 832 833 834 835 836 837 838 839 840 841 842 843 844 845 846 847 848 849 850 851 852 853 854 855 856 857 858 859 860 861 862 863 864 865 866 867 868 869 870 871 872 873 874 875 876 877 878 879 880 881 882 883 884 885 886 887 888 889 890 891 892 893 894 895 896 897 898 899 900 901 902 903 904 905 906 907 908 909 910 911 912 913 914 915 916 917 918 919 920 921 922 923 924 925 926 927 928 929 930 931 932 933 934 935
// This file is @generated by prost-build.
/// Home office and physical location of the principal.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct AccessLocations {
/// The "home office" location of the principal. A two-letter country code
/// (ISO 3166-1 alpha-2), such as "US", "DE" or "GB" or a region code. In some
/// limited situations Google systems may refer refer to a region code instead
/// of a country code.
/// Possible Region Codes:
///
/// * ASI: Asia
/// * EUR: Europe
/// * OCE: Oceania
/// * AFR: Africa
/// * NAM: North America
/// * SAM: South America
/// * ANT: Antarctica
/// * ANY: Any location
#[prost(string, tag = "1")]
pub principal_office_country: ::prost::alloc::string::String,
/// Physical location of the principal at the time of the access. A
/// two-letter country code (ISO 3166-1 alpha-2), such as "US", "DE" or "GB" or
/// a region code. In some limited situations Google systems may refer refer to
/// a region code instead of a country code.
/// Possible Region Codes:
///
/// * ASI: Asia
/// * EUR: Europe
/// * OCE: Oceania
/// * AFR: Africa
/// * NAM: North America
/// * SAM: South America
/// * ANT: Antarctica
/// * ANY: Any location
#[prost(string, tag = "2")]
pub principal_physical_location_country: ::prost::alloc::string::String,
}
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct AccessReason {
/// Type of access justification.
#[prost(enumeration = "access_reason::Type", tag = "1")]
pub r#type: i32,
/// More detail about certain reason types. See comments for each type above.
#[prost(string, tag = "2")]
pub detail: ::prost::alloc::string::String,
}
/// Nested message and enum types in `AccessReason`.
pub mod access_reason {
/// Type of access justification.
#[derive(
Clone,
Copy,
Debug,
PartialEq,
Eq,
Hash,
PartialOrd,
Ord,
::prost::Enumeration
)]
#[repr(i32)]
pub enum Type {
/// Default value for proto, shouldn't be used.
Unspecified = 0,
/// Customer made a request or raised an issue that required the principal to
/// access customer data. `detail` is of the form ("#####" is the issue ID):
///
/// * "Feedback Report: #####"
/// * "Case Number: #####"
/// * "Case ID: #####"
/// * "E-PIN Reference: #####"
/// * "Google-#####"
/// * "T-#####"
CustomerInitiatedSupport = 1,
/// The principal accessed customer data in order to diagnose or resolve a
/// suspected issue in services. Often this access is used to confirm that
/// customers are not affected by a suspected service issue or to remediate a
/// reversible system issue.
GoogleInitiatedService = 2,
/// Google initiated service for security, fraud, abuse, or compliance
/// purposes.
GoogleInitiatedReview = 3,
/// The principal was compelled to access customer data in order to respond
/// to a legal third party data request or process, including legal processes
/// from customers themselves.
ThirdPartyDataRequest = 4,
/// The principal accessed customer data in order to diagnose or resolve a
/// suspected issue in services or a known outage.
GoogleResponseToProductionAlert = 5,
}
impl Type {
/// String value of the enum field names used in the ProtoBuf definition.
///
/// The values are not transformed in any way and thus are considered stable
/// (if the ProtoBuf definition does not change) and safe for programmatic use.
pub fn as_str_name(&self) -> &'static str {
match self {
Type::Unspecified => "TYPE_UNSPECIFIED",
Type::CustomerInitiatedSupport => "CUSTOMER_INITIATED_SUPPORT",
Type::GoogleInitiatedService => "GOOGLE_INITIATED_SERVICE",
Type::GoogleInitiatedReview => "GOOGLE_INITIATED_REVIEW",
Type::ThirdPartyDataRequest => "THIRD_PARTY_DATA_REQUEST",
Type::GoogleResponseToProductionAlert => {
"GOOGLE_RESPONSE_TO_PRODUCTION_ALERT"
}
}
}
/// Creates an enum from field names used in the ProtoBuf definition.
pub fn from_str_name(value: &str) -> ::core::option::Option<Self> {
match value {
"TYPE_UNSPECIFIED" => Some(Self::Unspecified),
"CUSTOMER_INITIATED_SUPPORT" => Some(Self::CustomerInitiatedSupport),
"GOOGLE_INITIATED_SERVICE" => Some(Self::GoogleInitiatedService),
"GOOGLE_INITIATED_REVIEW" => Some(Self::GoogleInitiatedReview),
"THIRD_PARTY_DATA_REQUEST" => Some(Self::ThirdPartyDataRequest),
"GOOGLE_RESPONSE_TO_PRODUCTION_ALERT" => {
Some(Self::GoogleResponseToProductionAlert)
}
_ => None,
}
}
}
}
/// Information about the digital signature of the resource.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct SignatureInfo {
/// The digital signature.
#[prost(bytes = "bytes", tag = "1")]
pub signature: ::prost::bytes::Bytes,
/// How this signature may be verified.
#[prost(oneof = "signature_info::VerificationInfo", tags = "2, 3")]
pub verification_info: ::core::option::Option<signature_info::VerificationInfo>,
}
/// Nested message and enum types in `SignatureInfo`.
pub mod signature_info {
/// How this signature may be verified.
#[derive(Clone, PartialEq, ::prost::Oneof)]
pub enum VerificationInfo {
/// The public key for the Google default signing, encoded in PEM format. The
/// signature was created using a private key which may be verified using
/// this public key.
#[prost(string, tag = "2")]
GooglePublicKeyPem(::prost::alloc::string::String),
/// The resource name of the customer CryptoKeyVersion used for signing.
#[prost(string, tag = "3")]
CustomerKmsKeyVersion(::prost::alloc::string::String),
}
}
/// A decision that has been made to approve access to a resource.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct ApproveDecision {
/// The time at which approval was granted.
#[prost(message, optional, tag = "1")]
pub approve_time: ::core::option::Option<::prost_types::Timestamp>,
/// The time at which the approval expires.
#[prost(message, optional, tag = "2")]
pub expire_time: ::core::option::Option<::prost_types::Timestamp>,
/// If set, denotes the timestamp at which the approval is invalidated.
#[prost(message, optional, tag = "3")]
pub invalidate_time: ::core::option::Option<::prost_types::Timestamp>,
/// The signature for the ApprovalRequest and details on how it was signed.
#[prost(message, optional, tag = "4")]
pub signature_info: ::core::option::Option<SignatureInfo>,
/// True when the request has been auto-approved.
#[prost(bool, tag = "5")]
pub auto_approved: bool,
}
/// A decision that has been made to dismiss an approval request.
#[derive(Clone, Copy, PartialEq, ::prost::Message)]
pub struct DismissDecision {
/// The time at which the approval request was dismissed.
#[prost(message, optional, tag = "1")]
pub dismiss_time: ::core::option::Option<::prost_types::Timestamp>,
/// This field will be true if the ApprovalRequest was implicitly dismissed due
/// to inaction by the access approval approvers (the request is not acted
/// on by the approvers before the exiration time).
#[prost(bool, tag = "2")]
pub implicit: bool,
}
/// The properties associated with the resource of the request.
#[derive(Clone, Copy, PartialEq, ::prost::Message)]
pub struct ResourceProperties {
/// Whether an approval will exclude the descendants of the resource being
/// requested.
#[prost(bool, tag = "1")]
pub excludes_descendants: bool,
}
/// A request for the customer to approve access to a resource.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct ApprovalRequest {
/// The resource name of the request. Format is
/// "{projects|folders|organizations}/{id}/approvalRequests/{approval_request}".
#[prost(string, tag = "1")]
pub name: ::prost::alloc::string::String,
/// The resource for which approval is being requested. The format of the
/// resource name is defined at
/// <https://cloud.google.com/apis/design/resource_names.> The resource name here
/// may either be a "full" resource name (e.g.
/// "//library.googleapis.com/shelves/shelf1/books/book2") or a "relative"
/// resource name (e.g. "shelves/shelf1/books/book2") as described in the
/// resource name specification.
#[prost(string, tag = "2")]
pub requested_resource_name: ::prost::alloc::string::String,
/// Properties related to the resource represented by requested_resource_name.
#[prost(message, optional, tag = "9")]
pub requested_resource_properties: ::core::option::Option<ResourceProperties>,
/// The justification for which approval is being requested.
#[prost(message, optional, tag = "3")]
pub requested_reason: ::core::option::Option<AccessReason>,
/// The locations for which approval is being requested.
#[prost(message, optional, tag = "4")]
pub requested_locations: ::core::option::Option<AccessLocations>,
/// The time at which approval was requested.
#[prost(message, optional, tag = "5")]
pub request_time: ::core::option::Option<::prost_types::Timestamp>,
/// The requested expiration for the approval. If the request is approved,
/// access will be granted from the time of approval until the expiration time.
#[prost(message, optional, tag = "6")]
pub requested_expiration: ::core::option::Option<::prost_types::Timestamp>,
/// The current decision on the approval request.
#[prost(oneof = "approval_request::Decision", tags = "7, 8")]
pub decision: ::core::option::Option<approval_request::Decision>,
}
/// Nested message and enum types in `ApprovalRequest`.
pub mod approval_request {
/// The current decision on the approval request.
#[derive(Clone, PartialEq, ::prost::Oneof)]
pub enum Decision {
/// Access was approved.
#[prost(message, tag = "7")]
Approve(super::ApproveDecision),
/// The request was dismissed.
#[prost(message, tag = "8")]
Dismiss(super::DismissDecision),
}
}
/// Represents the enrollment of a cloud resource into a specific service.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct EnrolledService {
/// The product for which Access Approval will be enrolled. Allowed values are
/// listed below (case-sensitive):
///
/// * all
/// * GA
/// * App Engine
/// * BigQuery
/// * Cloud Bigtable
/// * Cloud Key Management Service
/// * Compute Engine
/// * Cloud Dataflow
/// * Cloud Dataproc
/// * Cloud DLP
/// * Cloud EKM
/// * Cloud HSM
/// * Cloud Identity and Access Management
/// * Cloud Logging
/// * Cloud Pub/Sub
/// * Cloud Spanner
/// * Cloud SQL
/// * Cloud Storage
/// * Google Kubernetes Engine
/// * Organization Policy Serivice
/// * Persistent Disk
/// * Resource Manager
/// * Secret Manager
/// * Speaker ID
///
/// Note: These values are supported as input for legacy purposes, but will not
/// be returned from the API.
///
/// * all
/// * ga-only
/// * appengine.googleapis.com
/// * bigquery.googleapis.com
/// * bigtable.googleapis.com
/// * container.googleapis.com
/// * cloudkms.googleapis.com
/// * cloudresourcemanager.googleapis.com
/// * cloudsql.googleapis.com
/// * compute.googleapis.com
/// * dataflow.googleapis.com
/// * dataproc.googleapis.com
/// * dlp.googleapis.com
/// * iam.googleapis.com
/// * logging.googleapis.com
/// * orgpolicy.googleapis.com
/// * pubsub.googleapis.com
/// * spanner.googleapis.com
/// * secretmanager.googleapis.com
/// * speakerid.googleapis.com
/// * storage.googleapis.com
///
/// Calls to UpdateAccessApprovalSettings using 'all' or any of the
/// XXX.googleapis.com will be translated to the associated product name
/// ('all', 'App Engine', etc.).
///
/// Note: 'all' will enroll the resource in all products supported at both 'GA'
/// and 'Preview' levels.
///
/// More information about levels of support is available at
/// <https://cloud.google.com/access-approval/docs/supported-services>
#[prost(string, tag = "1")]
pub cloud_product: ::prost::alloc::string::String,
/// The enrollment level of the service.
#[prost(enumeration = "EnrollmentLevel", tag = "2")]
pub enrollment_level: i32,
}
/// Settings on a Project/Folder/Organization related to Access Approval.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct AccessApprovalSettings {
/// The resource name of the settings. Format is one of:
///
/// * "projects/{project}/accessApprovalSettings"
/// * "folders/{folder}/accessApprovalSettings"
/// * "organizations/{organization}/accessApprovalSettings"
#[prost(string, tag = "1")]
pub name: ::prost::alloc::string::String,
/// A list of email addresses to which notifications relating to approval
/// requests should be sent. Notifications relating to a resource will be sent
/// to all emails in the settings of ancestor resources of that resource. A
/// maximum of 50 email addresses are allowed.
#[prost(string, repeated, tag = "2")]
pub notification_emails: ::prost::alloc::vec::Vec<::prost::alloc::string::String>,
/// A list of Google Cloud Services for which the given resource has Access
/// Approval enrolled. Access requests for the resource given by name against
/// any of these services contained here will be required to have explicit
/// approval. If name refers to an organization, enrollment can be done for
/// individual services. If name refers to a folder or project, enrollment can
/// only be done on an all or nothing basis.
///
/// If a cloud_product is repeated in this list, the first entry will be
/// honored and all following entries will be discarded. A maximum of 10
/// enrolled services will be enforced, to be expanded as the set of supported
/// services is expanded.
#[prost(message, repeated, tag = "3")]
pub enrolled_services: ::prost::alloc::vec::Vec<EnrolledService>,
/// Output only. This field is read only (not settable via
/// UpdateAccessApprovalSettings method). If the field is true, that
/// indicates that at least one service is enrolled for Access Approval in one
/// or more ancestors of the Project or Folder (this field will always be
/// unset for the organization since organizations do not have ancestors).
#[prost(bool, tag = "4")]
pub enrolled_ancestor: bool,
/// The asymmetric crypto key version to use for signing approval requests.
/// Empty active_key_version indicates that a Google-managed key should be used
/// for signing. This property will be ignored if set by an ancestor of this
/// resource, and new non-empty values may not be set.
#[prost(string, tag = "6")]
pub active_key_version: ::prost::alloc::string::String,
/// Output only. This field is read only (not settable via UpdateAccessApprovalSettings
/// method). If the field is true, that indicates that an ancestor of this
/// Project or Folder has set active_key_version (this field will always be
/// unset for the organization since organizations do not have ancestors).
#[prost(bool, tag = "7")]
pub ancestor_has_active_key_version: bool,
/// Output only. This field is read only (not settable via UpdateAccessApprovalSettings
/// method). If the field is true, that indicates that there is some
/// configuration issue with the active_key_version configured at this level in
/// the resource hierarchy (e.g. it doesn't exist or the Access Approval
/// service account doesn't have the correct permissions on it, etc.) This key
/// version is not necessarily the effective key version at this level, as key
/// versions are inherited top-down.
#[prost(bool, tag = "8")]
pub invalid_key_version: bool,
}
/// Access Approval service account related to a project/folder/organization.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct AccessApprovalServiceAccount {
/// The resource name of the Access Approval service account. Format is one of:
///
/// * "projects/{project}/serviceAccount"
/// * "folders/{folder}/serviceAccount"
/// * "organizations/{organization}/serviceAccount"
#[prost(string, tag = "1")]
pub name: ::prost::alloc::string::String,
/// Email address of the service account.
#[prost(string, tag = "2")]
pub account_email: ::prost::alloc::string::String,
}
/// Request to list approval requests.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct ListApprovalRequestsMessage {
/// The parent resource. This may be "projects/{project}",
/// "folders/{folder}", or "organizations/{organization}".
#[prost(string, tag = "1")]
pub parent: ::prost::alloc::string::String,
/// A filter on the type of approval requests to retrieve. Must be one of the
/// following values:
///
/// * \[not set\]: Requests that are pending or have active approvals.
/// * ALL: All requests.
/// * PENDING: Only pending requests.
/// * ACTIVE: Only active (i.e. currently approved) requests.
/// * DISMISSED: Only requests that have been dismissed, or requests that
/// are not approved and past expiration.
/// * EXPIRED: Only requests that have been approved, and the approval has
/// expired.
/// * HISTORY: Active, dismissed and expired requests.
#[prost(string, tag = "2")]
pub filter: ::prost::alloc::string::String,
/// Requested page size.
#[prost(int32, tag = "3")]
pub page_size: i32,
/// A token identifying the page of results to return.
#[prost(string, tag = "4")]
pub page_token: ::prost::alloc::string::String,
}
/// Response to listing of ApprovalRequest objects.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct ListApprovalRequestsResponse {
/// Approval request details.
#[prost(message, repeated, tag = "1")]
pub approval_requests: ::prost::alloc::vec::Vec<ApprovalRequest>,
/// Token to retrieve the next page of results, or empty if there are no more.
#[prost(string, tag = "2")]
pub next_page_token: ::prost::alloc::string::String,
}
/// Request to get an approval request.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct GetApprovalRequestMessage {
/// The name of the approval request to retrieve.
/// Format:
/// "{projects|folders|organizations}/{id}/approvalRequests/{approval_request}"
#[prost(string, tag = "1")]
pub name: ::prost::alloc::string::String,
}
/// Request to approve an ApprovalRequest.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct ApproveApprovalRequestMessage {
/// Name of the approval request to approve.
#[prost(string, tag = "1")]
pub name: ::prost::alloc::string::String,
/// The expiration time of this approval.
#[prost(message, optional, tag = "2")]
pub expire_time: ::core::option::Option<::prost_types::Timestamp>,
}
/// Request to dismiss an approval request.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct DismissApprovalRequestMessage {
/// Name of the ApprovalRequest to dismiss.
#[prost(string, tag = "1")]
pub name: ::prost::alloc::string::String,
}
/// Request to invalidate an existing approval.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct InvalidateApprovalRequestMessage {
/// Name of the ApprovalRequest to invalidate.
#[prost(string, tag = "1")]
pub name: ::prost::alloc::string::String,
}
/// Request to get access approval settings.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct GetAccessApprovalSettingsMessage {
/// The name of the AccessApprovalSettings to retrieve.
/// Format: "{projects|folders|organizations}/{id}/accessApprovalSettings"
#[prost(string, tag = "1")]
pub name: ::prost::alloc::string::String,
}
/// Request to update access approval settings.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct UpdateAccessApprovalSettingsMessage {
/// The new AccessApprovalSettings.
#[prost(message, optional, tag = "1")]
pub settings: ::core::option::Option<AccessApprovalSettings>,
/// The update mask applies to the settings. Only the top level fields of
/// AccessApprovalSettings (notification_emails & enrolled_services) are
/// supported. For each field, if it is included, the currently stored value
/// will be entirely overwritten with the value of the field passed in this
/// request.
///
/// For the `FieldMask` definition, see
/// <https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#fieldmask>
/// If this field is left unset, only the notification_emails field will be
/// updated.
#[prost(message, optional, tag = "2")]
pub update_mask: ::core::option::Option<::prost_types::FieldMask>,
}
/// Request to delete access approval settings.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct DeleteAccessApprovalSettingsMessage {
/// Name of the AccessApprovalSettings to delete.
#[prost(string, tag = "1")]
pub name: ::prost::alloc::string::String,
}
/// Request to get an Access Approval service account.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct GetAccessApprovalServiceAccountMessage {
/// Name of the AccessApprovalServiceAccount to retrieve.
#[prost(string, tag = "1")]
pub name: ::prost::alloc::string::String,
}
/// Represents the type of enrollment for a given service to Access Approval.
#[derive(Clone, Copy, Debug, PartialEq, Eq, Hash, PartialOrd, Ord, ::prost::Enumeration)]
#[repr(i32)]
pub enum EnrollmentLevel {
/// Default value for proto, shouldn't be used.
Unspecified = 0,
/// Service is enrolled in Access Approval for all requests
BlockAll = 1,
}
impl EnrollmentLevel {
/// String value of the enum field names used in the ProtoBuf definition.
///
/// The values are not transformed in any way and thus are considered stable
/// (if the ProtoBuf definition does not change) and safe for programmatic use.
pub fn as_str_name(&self) -> &'static str {
match self {
EnrollmentLevel::Unspecified => "ENROLLMENT_LEVEL_UNSPECIFIED",
EnrollmentLevel::BlockAll => "BLOCK_ALL",
}
}
/// Creates an enum from field names used in the ProtoBuf definition.
pub fn from_str_name(value: &str) -> ::core::option::Option<Self> {
match value {
"ENROLLMENT_LEVEL_UNSPECIFIED" => Some(Self::Unspecified),
"BLOCK_ALL" => Some(Self::BlockAll),
_ => None,
}
}
}
/// Generated client implementations.
pub mod access_approval_client {
#![allow(unused_variables, dead_code, missing_docs, clippy::let_unit_value)]
use tonic::codegen::*;
use tonic::codegen::http::Uri;
/// This API allows a customer to manage accesses to cloud resources by
/// Google personnel. It defines the following resource model:
///
/// - The API has a collection of
/// [ApprovalRequest][google.cloud.accessapproval.v1.ApprovalRequest]
/// resources, named `approvalRequests/{approval_request}`
/// - The API has top-level settings per Project/Folder/Organization, named
/// `accessApprovalSettings`
///
/// The service also periodically emails a list of recipients, defined at the
/// Project/Folder/Organization level in the accessApprovalSettings, when there
/// is a pending ApprovalRequest for them to act on. The ApprovalRequests can
/// also optionally be published to a Pub/Sub topic owned by the customer
/// (contact support if you would like to enable Pub/Sub notifications).
///
/// ApprovalRequests can be approved or dismissed. Google personnel can only
/// access the indicated resource or resources if the request is approved
/// (subject to some exclusions:
/// https://cloud.google.com/access-approval/docs/overview#exclusions).
///
/// Note: Using Access Approval functionality will mean that Google may not be
/// able to meet the SLAs for your chosen products, as any support response times
/// may be dramatically increased. As such the SLAs do not apply to any service
/// disruption to the extent impacted by Customer's use of Access Approval. Do
/// not enable Access Approval for projects where you may require high service
/// availability and rapid response by Google Cloud Support.
///
/// After a request is approved or dismissed, no further action may be taken on
/// it. Requests with the requested_expiration in the past or with no activity
/// for 14 days are considered dismissed. When an approval expires, the request
/// is considered dismissed.
///
/// If a request is not approved or dismissed, we call it pending.
#[derive(Debug, Clone)]
pub struct AccessApprovalClient<T> {
inner: tonic::client::Grpc<T>,
}
impl<T> AccessApprovalClient<T>
where
T: tonic::client::GrpcService<tonic::body::BoxBody>,
T::Error: Into<StdError>,
T::ResponseBody: Body<Data = Bytes> + std::marker::Send + 'static,
<T::ResponseBody as Body>::Error: Into<StdError> + std::marker::Send,
{
pub fn new(inner: T) -> Self {
let inner = tonic::client::Grpc::new(inner);
Self { inner }
}
pub fn with_origin(inner: T, origin: Uri) -> Self {
let inner = tonic::client::Grpc::with_origin(inner, origin);
Self { inner }
}
pub fn with_interceptor<F>(
inner: T,
interceptor: F,
) -> AccessApprovalClient<InterceptedService<T, F>>
where
F: tonic::service::Interceptor,
T::ResponseBody: Default,
T: tonic::codegen::Service<
http::Request<tonic::body::BoxBody>,
Response = http::Response<
<T as tonic::client::GrpcService<tonic::body::BoxBody>>::ResponseBody,
>,
>,
<T as tonic::codegen::Service<
http::Request<tonic::body::BoxBody>,
>>::Error: Into<StdError> + std::marker::Send + std::marker::Sync,
{
AccessApprovalClient::new(InterceptedService::new(inner, interceptor))
}
/// Compress requests with the given encoding.
///
/// This requires the server to support it otherwise it might respond with an
/// error.
#[must_use]
pub fn send_compressed(mut self, encoding: CompressionEncoding) -> Self {
self.inner = self.inner.send_compressed(encoding);
self
}
/// Enable decompressing responses.
#[must_use]
pub fn accept_compressed(mut self, encoding: CompressionEncoding) -> Self {
self.inner = self.inner.accept_compressed(encoding);
self
}
/// Limits the maximum size of a decoded message.
///
/// Default: `4MB`
#[must_use]
pub fn max_decoding_message_size(mut self, limit: usize) -> Self {
self.inner = self.inner.max_decoding_message_size(limit);
self
}
/// Limits the maximum size of an encoded message.
///
/// Default: `usize::MAX`
#[must_use]
pub fn max_encoding_message_size(mut self, limit: usize) -> Self {
self.inner = self.inner.max_encoding_message_size(limit);
self
}
/// Lists approval requests associated with a project, folder, or organization.
/// Approval requests can be filtered by state (pending, active, dismissed).
/// The order is reverse chronological.
pub async fn list_approval_requests(
&mut self,
request: impl tonic::IntoRequest<super::ListApprovalRequestsMessage>,
) -> std::result::Result<
tonic::Response<super::ListApprovalRequestsResponse>,
tonic::Status,
> {
self.inner
.ready()
.await
.map_err(|e| {
tonic::Status::new(
tonic::Code::Unknown,
format!("Service was not ready: {}", e.into()),
)
})?;
let codec = tonic::codec::ProstCodec::default();
let path = http::uri::PathAndQuery::from_static(
"/google.cloud.accessapproval.v1.AccessApproval/ListApprovalRequests",
);
let mut req = request.into_request();
req.extensions_mut()
.insert(
GrpcMethod::new(
"google.cloud.accessapproval.v1.AccessApproval",
"ListApprovalRequests",
),
);
self.inner.unary(req, path, codec).await
}
/// Gets an approval request. Returns NOT_FOUND if the request does not exist.
pub async fn get_approval_request(
&mut self,
request: impl tonic::IntoRequest<super::GetApprovalRequestMessage>,
) -> std::result::Result<
tonic::Response<super::ApprovalRequest>,
tonic::Status,
> {
self.inner
.ready()
.await
.map_err(|e| {
tonic::Status::new(
tonic::Code::Unknown,
format!("Service was not ready: {}", e.into()),
)
})?;
let codec = tonic::codec::ProstCodec::default();
let path = http::uri::PathAndQuery::from_static(
"/google.cloud.accessapproval.v1.AccessApproval/GetApprovalRequest",
);
let mut req = request.into_request();
req.extensions_mut()
.insert(
GrpcMethod::new(
"google.cloud.accessapproval.v1.AccessApproval",
"GetApprovalRequest",
),
);
self.inner.unary(req, path, codec).await
}
/// Approves a request and returns the updated ApprovalRequest.
///
/// Returns NOT_FOUND if the request does not exist. Returns
/// FAILED_PRECONDITION if the request exists but is not in a pending state.
pub async fn approve_approval_request(
&mut self,
request: impl tonic::IntoRequest<super::ApproveApprovalRequestMessage>,
) -> std::result::Result<
tonic::Response<super::ApprovalRequest>,
tonic::Status,
> {
self.inner
.ready()
.await
.map_err(|e| {
tonic::Status::new(
tonic::Code::Unknown,
format!("Service was not ready: {}", e.into()),
)
})?;
let codec = tonic::codec::ProstCodec::default();
let path = http::uri::PathAndQuery::from_static(
"/google.cloud.accessapproval.v1.AccessApproval/ApproveApprovalRequest",
);
let mut req = request.into_request();
req.extensions_mut()
.insert(
GrpcMethod::new(
"google.cloud.accessapproval.v1.AccessApproval",
"ApproveApprovalRequest",
),
);
self.inner.unary(req, path, codec).await
}
/// Dismisses a request. Returns the updated ApprovalRequest.
///
/// NOTE: This does not deny access to the resource if another request has been
/// made and approved. It is equivalent in effect to ignoring the request
/// altogether.
///
/// Returns NOT_FOUND if the request does not exist.
///
/// Returns FAILED_PRECONDITION if the request exists but is not in a pending
/// state.
pub async fn dismiss_approval_request(
&mut self,
request: impl tonic::IntoRequest<super::DismissApprovalRequestMessage>,
) -> std::result::Result<
tonic::Response<super::ApprovalRequest>,
tonic::Status,
> {
self.inner
.ready()
.await
.map_err(|e| {
tonic::Status::new(
tonic::Code::Unknown,
format!("Service was not ready: {}", e.into()),
)
})?;
let codec = tonic::codec::ProstCodec::default();
let path = http::uri::PathAndQuery::from_static(
"/google.cloud.accessapproval.v1.AccessApproval/DismissApprovalRequest",
);
let mut req = request.into_request();
req.extensions_mut()
.insert(
GrpcMethod::new(
"google.cloud.accessapproval.v1.AccessApproval",
"DismissApprovalRequest",
),
);
self.inner.unary(req, path, codec).await
}
/// Invalidates an existing ApprovalRequest. Returns the updated
/// ApprovalRequest.
///
/// NOTE: This does not deny access to the resource if another request has been
/// made and approved. It only invalidates a single approval.
///
/// Returns FAILED_PRECONDITION if the request exists but is not in an approved
/// state.
pub async fn invalidate_approval_request(
&mut self,
request: impl tonic::IntoRequest<super::InvalidateApprovalRequestMessage>,
) -> std::result::Result<
tonic::Response<super::ApprovalRequest>,
tonic::Status,
> {
self.inner
.ready()
.await
.map_err(|e| {
tonic::Status::new(
tonic::Code::Unknown,
format!("Service was not ready: {}", e.into()),
)
})?;
let codec = tonic::codec::ProstCodec::default();
let path = http::uri::PathAndQuery::from_static(
"/google.cloud.accessapproval.v1.AccessApproval/InvalidateApprovalRequest",
);
let mut req = request.into_request();
req.extensions_mut()
.insert(
GrpcMethod::new(
"google.cloud.accessapproval.v1.AccessApproval",
"InvalidateApprovalRequest",
),
);
self.inner.unary(req, path, codec).await
}
/// Gets the settings associated with a project, folder, or organization.
pub async fn get_access_approval_settings(
&mut self,
request: impl tonic::IntoRequest<super::GetAccessApprovalSettingsMessage>,
) -> std::result::Result<
tonic::Response<super::AccessApprovalSettings>,
tonic::Status,
> {
self.inner
.ready()
.await
.map_err(|e| {
tonic::Status::new(
tonic::Code::Unknown,
format!("Service was not ready: {}", e.into()),
)
})?;
let codec = tonic::codec::ProstCodec::default();
let path = http::uri::PathAndQuery::from_static(
"/google.cloud.accessapproval.v1.AccessApproval/GetAccessApprovalSettings",
);
let mut req = request.into_request();
req.extensions_mut()
.insert(
GrpcMethod::new(
"google.cloud.accessapproval.v1.AccessApproval",
"GetAccessApprovalSettings",
),
);
self.inner.unary(req, path, codec).await
}
/// Updates the settings associated with a project, folder, or organization.
/// Settings to update are determined by the value of field_mask.
pub async fn update_access_approval_settings(
&mut self,
request: impl tonic::IntoRequest<super::UpdateAccessApprovalSettingsMessage>,
) -> std::result::Result<
tonic::Response<super::AccessApprovalSettings>,
tonic::Status,
> {
self.inner
.ready()
.await
.map_err(|e| {
tonic::Status::new(
tonic::Code::Unknown,
format!("Service was not ready: {}", e.into()),
)
})?;
let codec = tonic::codec::ProstCodec::default();
let path = http::uri::PathAndQuery::from_static(
"/google.cloud.accessapproval.v1.AccessApproval/UpdateAccessApprovalSettings",
);
let mut req = request.into_request();
req.extensions_mut()
.insert(
GrpcMethod::new(
"google.cloud.accessapproval.v1.AccessApproval",
"UpdateAccessApprovalSettings",
),
);
self.inner.unary(req, path, codec).await
}
/// Deletes the settings associated with a project, folder, or organization.
/// This will have the effect of disabling Access Approval for the project,
/// folder, or organization, but only if all ancestors also have Access
/// Approval disabled. If Access Approval is enabled at a higher level of the
/// hierarchy, then Access Approval will still be enabled at this level as
/// the settings are inherited.
pub async fn delete_access_approval_settings(
&mut self,
request: impl tonic::IntoRequest<super::DeleteAccessApprovalSettingsMessage>,
) -> std::result::Result<tonic::Response<()>, tonic::Status> {
self.inner
.ready()
.await
.map_err(|e| {
tonic::Status::new(
tonic::Code::Unknown,
format!("Service was not ready: {}", e.into()),
)
})?;
let codec = tonic::codec::ProstCodec::default();
let path = http::uri::PathAndQuery::from_static(
"/google.cloud.accessapproval.v1.AccessApproval/DeleteAccessApprovalSettings",
);
let mut req = request.into_request();
req.extensions_mut()
.insert(
GrpcMethod::new(
"google.cloud.accessapproval.v1.AccessApproval",
"DeleteAccessApprovalSettings",
),
);
self.inner.unary(req, path, codec).await
}
/// Retrieves the service account that is used by Access Approval to access KMS
/// keys for signing approved approval requests.
pub async fn get_access_approval_service_account(
&mut self,
request: impl tonic::IntoRequest<
super::GetAccessApprovalServiceAccountMessage,
>,
) -> std::result::Result<
tonic::Response<super::AccessApprovalServiceAccount>,
tonic::Status,
> {
self.inner
.ready()
.await
.map_err(|e| {
tonic::Status::new(
tonic::Code::Unknown,
format!("Service was not ready: {}", e.into()),
)
})?;
let codec = tonic::codec::ProstCodec::default();
let path = http::uri::PathAndQuery::from_static(
"/google.cloud.accessapproval.v1.AccessApproval/GetAccessApprovalServiceAccount",
);
let mut req = request.into_request();
req.extensions_mut()
.insert(
GrpcMethod::new(
"google.cloud.accessapproval.v1.AccessApproval",
"GetAccessApprovalServiceAccount",
),
);
self.inner.unary(req, path, codec).await
}
}
}