@@ -168,6 +168,19 @@ export namespace iamcredentials_v1 {
168168 */
169169 token ?: string | null ;
170170 }
171+ /**
172+ * Represents a list of allowed locations for given service account.
173+ */
174+ export interface Schema$ServiceAccountAllowedLocations {
175+ /**
176+ * Output only. The hex encoded bitmap of the trust boundary locations
177+ */
178+ encodedLocations ?: string | null ;
179+ /**
180+ * Output only. The human readable trust boundary locations. For example, ["us-central1", "europe-west1"]
181+ */
182+ locations ?: string [ ] | null ;
183+ }
171184 export interface Schema$SignBlobRequest {
172185 /**
173186 * The sequence of service accounts in a delegation chain. Each service account must be granted the `roles/iam.serviceAccountTokenCreator` role on its next service account in the chain. The last service account in the chain must be granted the `roles/iam.serviceAccountTokenCreator` role on the service account that is specified in the `name` field of the request. The delegates must have the following format: `projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID\}`. The `-` wildcard character is required; replacing it with a project ID is invalid.
@@ -419,6 +432,105 @@ export namespace iamcredentials_v1 {
419432 }
420433 }
421434
435+ /**
436+ * Returns the trust boundary info for a given service account.
437+ *
438+ * @param params - Parameters for request
439+ * @param options - Optionally override request options, such as `url`, `method`, and `encoding`.
440+ * @param callback - Optional callback that handles the response.
441+ * @returns A promise if used with async/await, or void if used with a callback.
442+ */
443+ getAllowedLocations (
444+ params : Params$Resource$Projects$Serviceaccounts$Getallowedlocations ,
445+ options : StreamMethodOptions
446+ ) : GaxiosPromise < Readable > ;
447+ getAllowedLocations (
448+ params ?: Params$Resource$Projects$Serviceaccounts$Getallowedlocations ,
449+ options ?: MethodOptions
450+ ) : GaxiosPromise < Schema$ServiceAccountAllowedLocations > ;
451+ getAllowedLocations (
452+ params : Params$Resource$Projects$Serviceaccounts$Getallowedlocations ,
453+ options : StreamMethodOptions | BodyResponseCallback < Readable > ,
454+ callback : BodyResponseCallback < Readable >
455+ ) : void ;
456+ getAllowedLocations (
457+ params : Params$Resource$Projects$Serviceaccounts$Getallowedlocations ,
458+ options :
459+ | MethodOptions
460+ | BodyResponseCallback < Schema$ServiceAccountAllowedLocations > ,
461+ callback : BodyResponseCallback < Schema$ServiceAccountAllowedLocations >
462+ ) : void ;
463+ getAllowedLocations (
464+ params : Params$Resource$Projects$Serviceaccounts$Getallowedlocations ,
465+ callback : BodyResponseCallback < Schema$ServiceAccountAllowedLocations >
466+ ) : void ;
467+ getAllowedLocations (
468+ callback : BodyResponseCallback < Schema$ServiceAccountAllowedLocations >
469+ ) : void ;
470+ getAllowedLocations (
471+ paramsOrCallback ?:
472+ | Params$Resource$Projects$Serviceaccounts$Getallowedlocations
473+ | BodyResponseCallback < Schema$ServiceAccountAllowedLocations >
474+ | BodyResponseCallback < Readable > ,
475+ optionsOrCallback ?:
476+ | MethodOptions
477+ | StreamMethodOptions
478+ | BodyResponseCallback < Schema$ServiceAccountAllowedLocations >
479+ | BodyResponseCallback < Readable > ,
480+ callback ?:
481+ | BodyResponseCallback < Schema$ServiceAccountAllowedLocations >
482+ | BodyResponseCallback < Readable >
483+ ) :
484+ | void
485+ | GaxiosPromise < Schema$ServiceAccountAllowedLocations >
486+ | GaxiosPromise < Readable > {
487+ let params = ( paramsOrCallback ||
488+ { } ) as Params$Resource$Projects$Serviceaccounts$Getallowedlocations ;
489+ let options = ( optionsOrCallback || { } ) as MethodOptions ;
490+
491+ if ( typeof paramsOrCallback === 'function' ) {
492+ callback = paramsOrCallback ;
493+ params =
494+ { } as Params$Resource$Projects$Serviceaccounts$Getallowedlocations ;
495+ options = { } ;
496+ }
497+
498+ if ( typeof optionsOrCallback === 'function' ) {
499+ callback = optionsOrCallback ;
500+ options = { } ;
501+ }
502+
503+ const rootUrl =
504+ options . rootUrl || 'https://iamcredentials.googleapis.com/' ;
505+ const parameters = {
506+ options : Object . assign (
507+ {
508+ url : ( rootUrl + '/v1/{+name}/allowedLocations' ) . replace (
509+ / ( [ ^ : ] \/ ) \/ + / g,
510+ '$1'
511+ ) ,
512+ method : 'GET' ,
513+ apiVersion : '' ,
514+ } ,
515+ options
516+ ) ,
517+ params,
518+ requiredParams : [ 'name' ] ,
519+ pathParams : [ 'name' ] ,
520+ context : this . context ,
521+ } ;
522+ if ( callback ) {
523+ createAPIRequest < Schema$ServiceAccountAllowedLocations > (
524+ parameters ,
525+ callback as BodyResponseCallback < unknown >
526+ ) ;
527+ } else {
528+ return createAPIRequest < Schema$ServiceAccountAllowedLocations > (
529+ parameters
530+ ) ;
531+ }
532+ }
533+
422534 /**
423535 * Signs a blob using a service account's system-managed private key.
424536 *
@@ -622,6 +734,13 @@ export namespace iamcredentials_v1 {
622734 */
623735 requestBody ?: Schema$GenerateIdTokenRequest ;
624736 }
737+ export interface Params$Resource$Projects$Serviceaccounts$Getallowedlocations
738+ extends StandardParameters {
739+ /**
740+ * Required. Resource name of service account.
741+ */
742+ name ?: string ;
743+ }
625744 export interface Params$Resource$Projects$Serviceaccounts$Signblob
626745 extends StandardParameters {
627746 /**
0 commit comments