Skip to content

Commit c7a9bc3

Browse files
feat(iamcredentials): update the API
#### iamcredentials:v1 The following keys were added: - endpoints - resources.locations.resources.workforcePools.methods.getAllowedLocations.description - resources.locations.resources.workforcePools.methods.getAllowedLocations.flatPath - resources.locations.resources.workforcePools.methods.getAllowedLocations.httpMethod - resources.locations.resources.workforcePools.methods.getAllowedLocations.id - resources.locations.resources.workforcePools.methods.getAllowedLocations.parameterOrder - resources.locations.resources.workforcePools.methods.getAllowedLocations.parameters.name.description - resources.locations.resources.workforcePools.methods.getAllowedLocations.parameters.name.location - resources.locations.resources.workforcePools.methods.getAllowedLocations.parameters.name.pattern - resources.locations.resources.workforcePools.methods.getAllowedLocations.parameters.name.required - resources.locations.resources.workforcePools.methods.getAllowedLocations.parameters.name.type - resources.locations.resources.workforcePools.methods.getAllowedLocations.path - resources.locations.resources.workforcePools.methods.getAllowedLocations.response.$ref - resources.projects.resources.locations.resources.workloadIdentityPools.methods.getAllowedLocations.description - resources.projects.resources.locations.resources.workloadIdentityPools.methods.getAllowedLocations.flatPath - resources.projects.resources.locations.resources.workloadIdentityPools.methods.getAllowedLocations.httpMethod - resources.projects.resources.locations.resources.workloadIdentityPools.methods.getAllowedLocations.id - resources.projects.resources.locations.resources.workloadIdentityPools.methods.getAllowedLocations.parameterOrder - resources.projects.resources.locations.resources.workloadIdentityPools.methods.getAllowedLocations.parameters.name.description - resources.projects.resources.locations.resources.workloadIdentityPools.methods.getAllowedLocations.parameters.name.location - resources.projects.resources.locations.resources.workloadIdentityPools.methods.getAllowedLocations.parameters.name.pattern - resources.projects.resources.locations.resources.workloadIdentityPools.methods.getAllowedLocations.parameters.name.required - resources.projects.resources.locations.resources.workloadIdentityPools.methods.getAllowedLocations.parameters.name.type - resources.projects.resources.locations.resources.workloadIdentityPools.methods.getAllowedLocations.path - resources.projects.resources.locations.resources.workloadIdentityPools.methods.getAllowedLocations.response.$ref - schemas.GenerateIdTokenRequest.properties.organizationNumberIncluded.description - schemas.GenerateIdTokenRequest.properties.organizationNumberIncluded.type - schemas.WorkforcePoolAllowedLocations.description - schemas.WorkforcePoolAllowedLocations.id - schemas.WorkforcePoolAllowedLocations.properties.encodedLocations.description - schemas.WorkforcePoolAllowedLocations.properties.encodedLocations.readOnly - schemas.WorkforcePoolAllowedLocations.properties.encodedLocations.type - schemas.WorkforcePoolAllowedLocations.properties.locations.description - schemas.WorkforcePoolAllowedLocations.properties.locations.items.type - schemas.WorkforcePoolAllowedLocations.properties.locations.readOnly - schemas.WorkforcePoolAllowedLocations.properties.locations.type - schemas.WorkforcePoolAllowedLocations.type - schemas.WorkloadIdentityPoolAllowedLocations.description - schemas.WorkloadIdentityPoolAllowedLocations.id - schemas.WorkloadIdentityPoolAllowedLocations.properties.encodedLocations.description - schemas.WorkloadIdentityPoolAllowedLocations.properties.encodedLocations.readOnly - schemas.WorkloadIdentityPoolAllowedLocations.properties.encodedLocations.type - schemas.WorkloadIdentityPoolAllowedLocations.properties.locations.description - schemas.WorkloadIdentityPoolAllowedLocations.properties.locations.items.type - schemas.WorkloadIdentityPoolAllowedLocations.properties.locations.readOnly - schemas.WorkloadIdentityPoolAllowedLocations.properties.locations.type - schemas.WorkloadIdentityPoolAllowedLocations.type The following keys were changed: - schemas.GenerateIdTokenResponse.properties.token.description
1 parent 14c334f commit c7a9bc3

File tree

2 files changed

+395
-3
lines changed

2 files changed

+395
-3
lines changed

‎discovery/iamcredentials-v1.json

Lines changed: 113 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,13 @@
1515
"description": "Creates short-lived credentials for impersonating IAM service accounts. Disabling this API also disables the IAM API (iam.googleapis.com). However, enabling this API doesn't enable the IAM API. ",
1616
"discoveryVersion": "v1",
1717
"documentationLink": "https://cloud.google.com/iam/docs/creating-short-lived-service-account-credentials",
18+
"endpoints": [
19+
{
20+
"description": "Regional Endpoint",
21+
"endpointUrl": "https://iamcredentials.us-east7.rep.googleapis.com/",
22+
"location": "us-east7"
23+
}
24+
],
1825
"fullyEncodeReservedExpansion": true,
1926
"icons": {
2027
"x16": "http://www.google.com/images/icons/product/search-16.gif",
@@ -105,8 +112,68 @@
105112
},
106113
"protocol": "rest",
107114
"resources": {
115+
"locations": {
116+
"resources": {
117+
"workforcePools": {
118+
"methods": {
119+
"getAllowedLocations": {
120+
"description": "Returns the trust boundary info for a given workforce pool.",
121+
"flatPath": "v1/locations/{locationsId}/workforcePools/{workforcePoolsId}/allowedLocations",
122+
"httpMethod": "GET",
123+
"id": "iamcredentials.locations.workforcePools.getAllowedLocations",
124+
"parameterOrder": [
125+
"name"
126+
],
127+
"parameters": {
128+
"name": {
129+
"description": "Required. Resource name of workforce pool.",
130+
"location": "path",
131+
"pattern": "^locations/[^/]+/workforcePools/[^/]+$",
132+
"required": true,
133+
"type": "string"
134+
}
135+
},
136+
"path": "v1/{+name}/allowedLocations",
137+
"response": {
138+
"$ref": "WorkforcePoolAllowedLocations"
139+
}
140+
}
141+
}
142+
}
143+
}
144+
},
108145
"projects": {
109146
"resources": {
147+
"locations": {
148+
"resources": {
149+
"workloadIdentityPools": {
150+
"methods": {
151+
"getAllowedLocations": {
152+
"description": "Returns the trust boundary info for a given workload identity pool.",
153+
"flatPath": "v1/projects/{projectsId}/locations/{locationsId}/workloadIdentityPools/{workloadIdentityPoolsId}/allowedLocations",
154+
"httpMethod": "GET",
155+
"id": "iamcredentials.projects.locations.workloadIdentityPools.getAllowedLocations",
156+
"parameterOrder": [
157+
"name"
158+
],
159+
"parameters": {
160+
"name": {
161+
"description": "Required. Resource name of workload identity pool.",
162+
"location": "path",
163+
"pattern": "^projects/[^/]+/locations/[^/]+/workloadIdentityPools/[^/]+$",
164+
"required": true,
165+
"type": "string"
166+
}
167+
},
168+
"path": "v1/{+name}/allowedLocations",
169+
"response": {
170+
"$ref": "WorkloadIdentityPoolAllowedLocations"
171+
}
172+
}
173+
}
174+
}
175+
}
176+
},
110177
"serviceAccounts": {
111178
"methods": {
112179
"generateAccessToken": {
@@ -248,7 +315,7 @@
248315
}
249316
}
250317
},
251-
"revision": "20241024",
318+
"revision": "20250417",
252319
"rootUrl": "https://iamcredentials.googleapis.com/",
253320
"schemas": {
254321
"GenerateAccessTokenRequest": {
@@ -308,6 +375,10 @@
308375
"includeEmail": {
309376
"description": "Include the service account email in the token. If set to `true`, the token will contain `email` and `email_verified` claims.",
310377
"type": "boolean"
378+
},
379+
"organizationNumberIncluded": {
380+
"description": "Include the organization number of the service account in the token. If set to `true`, the token will contain a `google.organization_number` claim. The value of the claim will be `null` if the service account isn't associated with an organization.",
381+
"type": "boolean"
311382
}
312383
},
313384
"type": "object"
@@ -316,7 +387,7 @@
316387
"id": "GenerateIdTokenResponse",
317388
"properties": {
318389
"token": {
319-
"description": "The OpenId Connect ID token.",
390+
"description": "The OpenId Connect ID token. The token is a JSON Web Token (JWT) that contains a payload with claims. See the [JSON Web Token spec](https://tools.ietf.org/html/rfc7519) for more information. Here is an example of a decoded JWT payload: ``` { \"iss\": \"https://accounts.google.com\", \"iat\": 1496953245, \"exp\": 1496953245, \"aud\": \"https://www.example.com\", \"sub\": \"107517467455664443765\", \"azp\": \"107517467455664443765\", \"email\": \"my-iam-account@my-project.iam.gserviceaccount.com\", \"email_verified\": true, \"google\": { \"organization_number\": 123456 } } ```",
320391
"type": "string"
321392
}
322393
},
@@ -405,6 +476,46 @@
405476
}
406477
},
407478
"type": "object"
479+
},
480+
"WorkforcePoolAllowedLocations": {
481+
"description": "Represents a list of allowed locations for given workforce pool.",
482+
"id": "WorkforcePoolAllowedLocations",
483+
"properties": {
484+
"encodedLocations": {
485+
"description": "Output only. The hex encoded bitmap of the trust boundary locations",
486+
"readOnly": true,
487+
"type": "string"
488+
},
489+
"locations": {
490+
"description": "Output only. The human readable trust boundary locations. For example, [\"us-central1\", \"europe-west1\"]",
491+
"items": {
492+
"type": "string"
493+
},
494+
"readOnly": true,
495+
"type": "array"
496+
}
497+
},
498+
"type": "object"
499+
},
500+
"WorkloadIdentityPoolAllowedLocations": {
501+
"description": "Represents a list of allowed locations for given workload identity pool.",
502+
"id": "WorkloadIdentityPoolAllowedLocations",
503+
"properties": {
504+
"encodedLocations": {
505+
"description": "Output only. The hex encoded bitmap of the trust boundary locations",
506+
"readOnly": true,
507+
"type": "string"
508+
},
509+
"locations": {
510+
"description": "Output only. The human readable trust boundary locations. For example, [\"us-central1\", \"europe-west1\"]",
511+
"items": {
512+
"type": "string"
513+
},
514+
"readOnly": true,
515+
"type": "array"
516+
}
517+
},
518+
"type": "object"
408519
}
409520
},
410521
"servicePath": "",

0 commit comments

Comments
 (0)