qSrSSKJr SSKJr SSKJr Sr"SS\R5r "SS \R5r "S S \R5r "S S \R5r "SS\R5r"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SS\R5r"S S!\R5r"S"S#\R5r"S$S%\R5r"S&S'\R5r"S(S)\R5r"S*S+\R5r"S,S-\R5r"S.S/\R5r"S0S1\R5r"S2S3\R5r "S4S5\R5r!"S6S7\R5r""S8S9\R5r#"S:S;\R5r$"S<S=\R5r%"S>S?\R5r&"S@SA\R5r'"SBSC\R5r("SDSE\R5r)"SFSG\R5r*"SHSI\R5r+"SJSK\R5r,"SLSM\R5r-"SNSO\R5r."SPSQ\R5r/"SRSS\R5r0"STSU\R5r1"SVSW\R5r2"SXSY\R5r3"SZS[\R5r4"S\S]\R5r5"S^S_\R5r6"S`Sa\R5r7"SbSc\R5r8"SdSe\R5r9"SfSg\R5r:"ShSi\R5r;"SjSk\R5r<"SlSm\R5r="SnSo\R5r>"SpSq\R5r?"SrSs\R5r@"StSu\R5rA"SvSw\R5rB"SxSy\R5rC"SzS{\R5rD"S|S}\R5rE"S~S\R5rF"SS\R5rG"SS\R5rH"SS\R5rI"SS\R5rJ"SS\R5rK"SS\R5rL"SS\R5rM"SS\R5rN"SS\R5rO"SS\R5rP"SS\R5rQ"SS\R5rR"SS\R5rS"SS\R5rT"SS\R5rU"SS\R5rV"SS\R5rW"SS\R5rX"SS\R5rY"SS\R5rZ"SS\R5r["SS\R5r\"SS\R5r]"SS\R5r^"SS\R5r_"SS\R5r`"SS\R5ra"SS\R5rb"SS\R5rc"SS\R5rd\R"\ZSS5 \R"\ZRSS5 \R"\ZRSS5 g)zGenerated message classes for osconfig version v1alpha1. OS management tools that can be used for patch management, patch compliance, and configuration management on VM instances. )absolute_import)messages)encodingosconfigc\rSrSrSr\R "SSSS9r\R "SSSS9r\R "SS SS9r S r g ) AptPackageConfigaA list of packages to install, remove, and their repos for a given package manager type. Fields: packageInstalls: Packages to install. apt-get update && apt-get -y install package1 package2 package3 packageRemovals: Packages to remove. apt-get -y remove package1 package2 package3 repositories: Package repositories to configure in the package manager. The instance likely already has some defaults set and duplicates are acceptable but ignored. PackageTrepeated AptRepositoryN __name__ __module__ __qualname____firstlineno____doc__ _messages MessageFieldpackageInstallspackageRemovals repositories__static_attributes__rYlib/googlecloudsdk/generated_clients/apis/osconfig/v1alpha1/osconfig_v1alpha1_messages.pyrrE **9a$G/**9a$G/''TJ,rrc\rSrSrSr"SS\R 5r\R"SS5r \R"SSS9r \R"S 5r \R"S 5r \R"S 5rS rg )r$aRepresents a single apt package repository. These will be added to a repo file that will be managed at /etc/apt/sources.list.d/google_osconfig.list Enums: ArchiveTypeValueValuesEnum: Type of archive files in this repository. Unspecified will default to DEB. Fields: archiveType: Type of archive files in this repository. Unspecified will default to DEB. components: List of components for this repository. Must contain at least one item. distribution: Distribution of this repository. keyUri: Optional. URI of the key file for this repository. The agent will ensure that this key has been downloaded. uri: URI for this repository. c$\rSrSrSrSrSrSrSrg)(AptRepository.ArchiveTypeValueValuesEnum8zType of archive files in this repository. Unspecified will default to DEB. Values: ARCHIVE_TYPE_UNSPECIFIED: Unspecified. DEB: Deb. DEB_SRC: Deb-src. rr rrN) rrrrrARCHIVE_TYPE_UNSPECIFIEDDEBDEB_SRCrrrrArchiveTypeValueValuesEnumr$8s ! CGrr)r rTr rrN)rrrrrrEnumr) EnumField archiveType StringField components distributionkeyUriurirrrrrr$sn& 9>> ##$@!D+$$Q6*&&q),   #&a #rrc\rSrSrSr"SS\R 5r\R"SSS9r \R"SSS9r \R"SS 5r S r g ) AptSettingsLaApt patching will be performed by executing `apt-get update && apt-get upgrade`. Additional options can be set to control how this is executed. Enums: TypeValueValuesEnum: Optional. By changing the type to DIST, the patching will be performed using `apt-get dist-upgrade` instead. Fields: excludes: List of packages to exclude from update. exclusivePackages: An exclusive list of packages to be updated. These are the only packages that will be updated. If these packages are not installed, they will be ignored. This field cannot be specified with any other patch configuration fields. type: Optional. By changing the type to DIST, the patching will be performed using `apt-get dist-upgrade` instead. c$\rSrSrSrSrSrSrSrg)AptSettings.TypeValueValuesEnum^zOptional. By changing the type to DIST, the patching will be performed using `apt-get dist-upgrade` instead. Values: TYPE_UNSPECIFIED: By default, upgrade will be performed. DIST: Runs `apt-get dist-upgrade`. UPGRADE: Runs `apt-get upgrade`. rr rrN) rrrrrTYPE_UNSPECIFIEDDISTUPGRADErrrrTypeValueValuesEnumr8^s DGrr=r Tr rrrN)rrrrrrr,r=r/excludesexclusivePackagesr-typerrrrr5r5LsQ" INN  " "1t 4(++A=   2A 6$rr5ch\rSrSrSr\R "S5"SS\R55r \R"S5r \R"S5r \R"S5r \R"SS 5r\R"S 5r\R"S S S 9r\R"S5rSrg) AssignmentpaAn Assignment maps configurations to instance guest environments. Messages: LabelsValue: Represents cloud resource labels. Fields: createTime: Output only. Time this Assignment was created. description: Description of the Assignment. Length of the description is limited to 1024 characters. expression: Optional. A [CEL](https://github.com/google/cel-spec) expression used to filter instances when determining which configs apply. If omitted, the OsConfigs specified in this assignment will apply to all instances under this resource. labels: Represents cloud resource labels. name: Identifying name for this Assignment. osConfigs: List of OsConfigs to configure on the instances. These are relative resource names of OsConfigs. For example 'organizations/1234/osConfigs/foo' or 'projects/12345/osConfigs/foo'. If an OsConfig referenced here is deleted it will be ignored when instances lookup their configs. updateTime: Output only. Last time this Assignment was updated. additionalPropertiescf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) Assignment.LabelsValueRepresents cloud resource labels. Messages: AdditionalProperty: An additional property for a LabelsValue object. Fields: additionalProperties: Additional properties of type LabelsValue c`\rSrSrSr\R "S5r\R "S5rSr g))Assignment.LabelsValue.AdditionalPropertyAn additional property for a LabelsValue object. Fields: key: Name of the additional property. value: A string attribute. r rrN rrrrrrr/keyvaluerrrrAdditionalPropertyrJ)   ! !! $c##A&errPr Tr rN rrrrrrMessagerPrrDrrrr LabelsValuerF2 'Y.. '%112FTXYrrTr rrr*r+Tr rN)rrrrrrMapUnrecognizedFieldsrrSrTr/ createTime description expressionrlabelsname osConfigs updateTimerrrrrBrBps. !!"89ZI%%Z:Z.$$Q'*%%a(+$$Q'*  ! !- 3&   q !$##A5)$$Q'*rrBc`\rSrSrSr\R "SSSS9r\R"S5r Sr g ) AuditConfigaSpecifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs. If there are AuditConfigs for both `allServices` and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted. Example Policy with multiple AuditConfigs: { "audit_configs": [ { "service": "allServices" "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE", }, { "log_type": "ADMIN_READ", } ] }, { "service": "sampleservice.googleapis.com" "audit_log_configs": [ { "log_type": "DATA_READ", }, { "log_type": "DATA_WRITE", "exempted_members": [ "user:aliya@example.com" ] } ] } ] } For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts jose@example.com from DATA_READ logging, and aliya@example.com from DATA_WRITE logging. Fields: auditLogConfigs: The configuration for logging of each type of permission. service: Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all services. AuditLogConfigr Tr rrN) rrrrrrrauditLogConfigsr/servicerrrrraras.8**+;QN/  ! !! $'rrac\rSrSrSr"SS\R 5r\R"SSS9r \R"SS5r S r g ) rcaProvides the configuration for logging a type of permissions. Example: { "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE", } ] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from DATA_READ logging. Enums: LogTypeValueValuesEnum: The log type that this config enables. Fields: exemptedMembers: Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members. logType: The log type that this config enables. c(\rSrSrSrSrSrSrSrSr g) %AuditLogConfig.LogTypeValueValuesEnumaThe log type that this config enables. Values: LOG_TYPE_UNSPECIFIED: Default case. Should never be this. ADMIN_READ: Admin reads. Example: CloudIAM getIamPolicy DATA_WRITE: Data writes. Example: CloudSQL Users create DATA_READ: Data reads. Example: CloudSQL Users list rr rrrN) rrrrrLOG_TYPE_UNSPECIFIED ADMIN_READ DATA_WRITE DATA_READrrrrLogTypeValueValuesEnumrisJJIrror Tr rrN) rrrrrrr,ror/exemptedMembersr-logTyperrrrrcrcs> y~~ ))!d;/    8! <'rrcc\rSrSrSr\R "SS5r\R"SSS9r \R"S5r S r g ) Bindinga Associates `members` with a `role`. Fields: condition: The condition that is associated with this binding. NOTE: An unsatisfied condition will not allow user access via current binding. Different bindings, including their conditions, are examined independently. members: Specifies the identities requesting access for a Cloud Platform resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a service account. For example, `my-other- app@appspot.gserviceaccount.com`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other- app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. role: Role that is assigned to `members`. For example, `roles/viewer`, `roles/editor`, or `roles/owner`. Exprr rTr rrN) rrrrrrr conditionr/membersrolerrrrrsrss>'R$$VQ/)  ! !!d 3'   q !$rrsc\rSrSrSrSrg)CancelPatchJobRequestiz"Message for canceling a patch job.rNrrrrrrrrrrzrzs+rrzc\rSrSrSrSrg)Emptyi abA generic empty message that you can re-use to avoid defining duplicated empty messages in your APIs. A typical example is to use it as the request or the response type of an API method. For instance: service Foo { rpc Bar(google.protobuf.Empty) returns (google.protobuf.Empty); } The JSON representation for `Empty` is empty JSON object `{}`. rNr{rrrr}r} srr}c\rSrSrSr\R "S5r\R "S5r\R"S5r \R "S5r \R "S5r \R"SS 5rS rg ) ExecutePatchJobRequesti*aA request message to initiate patching across GCE instances. Fields: description: Description of the PatchJob. Length of the description is limited to 1024 characters. displayName: Display name for this patch job. This does not have to be unique. dryRun: Should this patch be a dry-run only. Instances will be contacted, but they will do nothing. duration: Optional. Duration of the patch job. After the duration ends, the patch job will time out. filter: Required. There must be at least one instance to patch for this job to succeed. This is the same filter used when listing compute instances. patchConfig: Optional. Patch configuration being applied. If omitted, instances will be patched using the default configurations. r rrr*r+ PatchConfigrVrN)rrrrrrr/rZ displayName BooleanFielddryRundurationfilterr patchConfigrrrrrr*sk$%%a(+%%a(+  ! !! $&  " "1 %(   #&&&}a8+rrc\rSrSrSr\R "S5r\R "S5r\R "S5r \R "S5r Sr g) ruiEabRepresents an expression text. Example: title: "User account presence" description: "Determines whether the request has a user account" expression: "size(request.user) > 0" Fields: description: An optional description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI. expression: Textual representation of an expression in Common Expression Language syntax. The application context of the containing message determines which well-known feature set of CEL is supported. location: An optional string indicating the location of the expression for error reporting, e.g. a file name and a position in the file. title: An optional title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression. r rrr*rN) rrrrrrr/rZr[locationtitlerrrrruruEsI"%%a(+$$Q'*  " "1 %(    "%rruc>\rSrSrSr\R "SS5rSrg)GetIamPolicyRequesti]zRequest message for `GetIamPolicy` method. Fields: options: OPTIONAL: A `GetPolicyOptions` object for specifying options to `GetIamPolicy`. This field is only used by Cloud IAM. GetPolicyOptionsr rN) rrrrrrroptionsrrrrrr]s  " "#5q 9'rrcb\rSrSrSr\R "S\RRS9r Sr g)rihaEncapsulates settings provided to GetIamPolicy. Fields: requestedPolicyVersion: Optional. The policy format version to be returned. Valid values are 0, 1, and 3. Requests specifying an invalid value will be rejected. Requests for policies with any conditional bindings must specify version 3. Policies without any conditional bindings may specify any valid value or leave the field unset. r variantrN) rrrrrr IntegerFieldVariantINT32requestedPolicyVersionrrrrrrhs(%11!Y=N=N=T=TUrrc\rSrSrSr\R "SSSS9r\R "SSSS9r\R "SS SS9r S r g ) GooPackageConfigivaA list of packages to install, remove, and their repos for a given package manager type. Fields: packageInstalls: Packages to install. googet -noconfirm install package1 package2 package3 packageRemovals: Packages to remove. googet -noconfirm remove package1 package2 package3 repositories: Package repositories to configure in the package manager. The instance likely already has some defaults set and duplicates are acceptable but ignored. r r Tr r GooRepositoryrrNrrrrrrvr rrc`\rSrSrSr\R "S5r\R "S5rSr g)rizRepresents a Goo package repository. These will be added to a repo file that will be managed at C:/ProgramData/GooGet/repos/google_osconfig.repo Fields: name: The name of the repository. url: The url of the repository. r rrN) rrrrrrr/r]urlrrrrrrs)   q !$a #rrc\rSrSrSrSrg) GooSettingsiz8Googet patching is performed by running `googet update`.rNr{rrrrrsArrc`\rSrSrSr\R "SSSS9r\R"S5r Sr g ) ListAssignmentsResponseizA response message for listing Assignments. Fields: assignments: The list of Assignments. nextPageToken: A pagination token that can be used to get the next page of Assignments. rBr Tr rrN) rrrrrrr assignmentsr/ nextPageTokenrrrrrrs-&&|QF+''*-rrc`\rSrSrSr\R "S5r\R"SSSS9r Sr g ) ListOsConfigsResponseizA response message for listing OsConfigs. Fields: nextPageToken: A pagination token that can be used to get the next page of OsConfigs. osConfigs: The list of OsConfigs. r OsConfigrTr rN) rrrrrrr/rrr^rrrrrr-''*-$$ZTB)rrc`\rSrSrSr\R "S5r\R"SSSS9r Sr g ) #ListPatchJobInstanceDetailsResponseizA response message for listing the instances' details for a patch job. Fields: nextPageToken: A pagination token that can be used to get the next page of results. patchJobInstanceDetails: The list of instance status. r PatchJobInstanceDetailsrTr rN) rrrrrrr/rrpatchJobInstanceDetailsrrrrrrs0''*-%223LaZ^_rrc`\rSrSrSr\R "S5r\R"SSSS9r Sr g ) ListPatchJobsResponseizA response message for listing patch jobs. Fields: nextPageToken: A pagination token that can be used to get the next page of results. patchJobs: The list of patch jobs. r PatchJobrTr rN) rrrrrrr/rr patchJobsrrrrrrrrrc\rSrSrSr"SS\R 5r\R"SSSS9r \R"SS 5r S r g ) LookupConfigsRequestiaA request message for getting the configs assigned to the instance. Enums: ConfigTypesValueListEntryValuesEnum: Fields: configTypes: Types of configuration system the instance is using. Only configs relevant to these configuration types will be returned. osInfo: Optional. OS info about the instance that can be used to filter its configs. If none is provided, the API will return the configs for this instance regardless of its OS. c0\rSrSrSrSrSrSrSrSr Sr S r g ) 8LookupConfigsRequest.ConfigTypesValueListEntryValuesEnumizConfigTypesValueListEntryValuesEnum enum type. Values: CONFIG_TYPE_UNSPECIFIED: APT: YUM: GOO: WINDOWS_UPDATE: ZYPPER: rr rrr*r+rN) rrrrrCONFIG_TYPE_UNSPECIFIEDAPTYUMGOOWINDOWS_UPDATEZYPPERrrrr#ConfigTypesValueListEntryValuesEnumrs(   C C CN Frrr Tr LookupConfigsRequestOsInforrN) rrrrrrr,rr- configTypesrosInforrrrrrsB INN$##$I1W[\+  ! !"> B&rrc\rSrSrSr\R "S5r\R "S5r\R "S5r \R "S5r \R "S5r Sr g ) ria#Guest information provided to service by agent when requesting configurations. Fields: osArchitecture: Architecture of the OS. Optional. osKernel: OS kernel name. Optional. osLongName: OS long name. Optional. osShortName: OS short name. Optional. osVersion: OS version. Optional. r rrr*r+rN) rrrrrrr/osArchitectureosKernel osLongName osShortName osVersionrrrrrrsY ((+.  " "1 %($$Q'*%%a(+##A&)rrc\rSrSrSr\R "SS5r\R "SS5r\R "SS5r \R "S S 5r \R "S S 5r S r g)LookupConfigsResponseizResponse with assigned configs for the instance. Fields: apt: Configs for apt. goo: Configs for windows. windowsUpdate: Configs for Windows Update. yum: Configs for yum. zypper: Configs for Zypper. rr rrWindowsUpdateConfigrYumPackageConfigr*ZypperPackageConfigr+rN) rrrrrrraptgoo windowsUpdateyumzypperrrrrrrsh 115#115#(()>B-115#  ! !"7 ;&rrc\rSrSrSr\R "S5"SS\R55r \R"SS5r \R"S5r \R"S 5r\R"S S 5r\R"SS 5r\R"S 5r\R"S5r\R"SS5r\R"SS5r\R"SS5rSrg)riaAn OS Config resource describing a set of OS configs that should be set on a group of instances. Messages: LabelsValue: Represents cloud resource labels. Fields: apt: Optional package manager configurations for apt. createTime: Output only. Time this OsConfig was created. description: Description of the OsConfig. Length of the description is limited to 1024 characters. goo: Optional package manager configurations for windows. labels: Represents cloud resource labels. name: Identifying name for this OsConfig. updateTime: Output only. Last time this OsConfig was updated. windowsUpdate: Optional Windows Update configurations. yum: Optional package manager configurations for yum. zypper: Optional package manager configuration for zypper. rDcf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) OsConfig.LabelsValuei,rHc`\rSrSrSr\R "S5r\R "S5rSr g)'OsConfig.LabelsValue.AdditionalPropertyi7rLr rrNrMrrrrPr7rQrrPr Tr rNrRrrrrTr,rUrrTrr rrrr*r+rVrWrr r rN)rrrrrrrXrrSrTrrr/rYrZrr\r]r_rrrrrrrrrs( !!"89ZI%%Z:Z. 115#$$Q'*%%a(+115#  ! !- 3&   q !$$$Q'*(()>B-115#  ! !"7 <&rrc`\rSrSrSr\R "SS5r\R"SSS9r Sr g ) 'OsconfigFoldersAssignmentsCreateRequestiPzA OsconfigFoldersAssignmentsCreateRequest object. Fields: assignment: A Assignment resource to be passed as the request body. parent: The resource name of the parent. rBr rTrequiredrN rrrrrrr assignmentr/parentrrrrrrP-%%lA6*  T 2&rrc:\rSrSrSr\R "SSS9rSrg)'OsconfigFoldersAssignmentsDeleteRequesti\zhA OsconfigFoldersAssignmentsDeleteRequest object. Fields: name: The resource name of the Assignment. r TrrN rrrrrrr/r]rrrrrr\   q4 0$rrc:\rSrSrSr\R "SSS9rSrg)$OsconfigFoldersAssignmentsGetRequestifzeA OsconfigFoldersAssignmentsGetRequest object. Fields: name: The resource name of the Assignment. r TrrNrrrrrrfrrrc\rSrSrSr\R "S\RRS9r \R"S5r \R"SSS9r S r g ) %OsconfigFoldersAssignmentsListRequestipaFA OsconfigFoldersAssignmentsListRequest object. Fields: pageSize: The maximum number of Assignments to return. pageToken: A pagination token returned from a previous call to ListAssignments that indicates where this listing should continue from. This field is optional. parent: The resource name of the parent. r rrrTrrNrrrrrrrrrpageSizer/ pageTokenrrrrrrrpI # #Ay/@/@/F/F G(##A&)  T 2&rrc\rSrSrSr\R "SS5r\R"SSS9r \R"S5r S r g ) &OsconfigFoldersAssignmentsPatchRequestia A OsconfigFoldersAssignmentsPatchRequest object. Fields: assignment: A Assignment resource to be passed as the request body. name: The resource name of the Assignment. updateMask: Field mask that controls which fields of the Assignment should be updated. rBr rTrrrN rrrrrrrrr/r] updateMaskrrrrrr=%%lA6*   q4 0$$$Q'*rrc`\rSrSrSr\R "SS5r\R"SSS9r Sr g ) "OsconfigFoldersGetIamPolicyRequestia0A OsconfigFoldersGetIamPolicyRequest object. Fields: getIamPolicyRequest: A GetIamPolicyRequest resource to be passed as the request body. resource: REQUIRED: The resource for which the policy is being requested. See the operation documentation for the appropriate value for this field. rr rTrrN rrrrrrrgetIamPolicyRequestr/resourcerrrrrr/"../DaH  " "1t 4(rrc`\rSrSrSr\R "SS5r\R"SSS9r Sr g ) %OsconfigFoldersOsConfigsCreateRequestizA OsconfigFoldersOsConfigsCreateRequest object. Fields: osConfig: A OsConfig resource to be passed as the request body. parent: The resource name of the parent. rr rTrrN rrrrrrrosConfigr/rrrrrrr- # #J 2(  T 2&rrc:\rSrSrSr\R "SSS9rSrg)%OsconfigFoldersOsConfigsDeleteRequestizdA OsconfigFoldersOsConfigsDeleteRequest object. Fields: name: The resource name of the OsConfig. r TrrNrrrrrrrrrc:\rSrSrSr\R "SSS9rSrg)"OsconfigFoldersOsConfigsGetRequestizaA OsconfigFoldersOsConfigsGetRequest object. Fields: name: The resource name of the OsConfig. r TrrNrrrrrrrrrc\rSrSrSr\R "S\RRS9r \R"S5r \R"SSS9r S r g ) #OsconfigFoldersOsConfigsListRequestia@A OsconfigFoldersOsConfigsListRequest object. Fields: pageSize: The maximum number of OsConfigs to return. pageToken: A pagination token returned from a previous call to ListOsConfigs that indicates where this listing should continue from. This field is optional. parent: The resource name of the parent. r rrrTrrNrrrrrrrrrc\rSrSrSr\R "SSS9r\R"SS5r \R "S5r S r g ) $OsconfigFoldersOsConfigsPatchRequestiaA OsconfigFoldersOsConfigsPatchRequest object. Fields: name: The resource name of the OsConfig. osConfig: A OsConfig resource to be passed as the request body. updateMask: Field mask that controls which fields of the OsConfig should be updated. r TrrrrrN rrrrrrr/r]rrrrrrrrr=   q4 0$  # #J 2($$Q'*rrc`\rSrSrSr\R "SSS9r\R"SS5r Sr g ) "OsconfigFoldersSetIamPolicyRequestia0A OsconfigFoldersSetIamPolicyRequest object. Fields: resource: REQUIRED: The resource for which the policy is being specified. See the operation documentation for the appropriate value for this field. setIamPolicyRequest: A SetIamPolicyRequest resource to be passed as the request body. r TrSetIamPolicyRequestrrN rrrrrrr/rrsetIamPolicyRequestrrrrrr/ " "1t 4(!../DaHrrc`\rSrSrSr\R "SSS9r\R"SS5r Sr g ) (OsconfigFoldersTestIamPermissionsRequestiaIA OsconfigFoldersTestIamPermissionsRequest object. Fields: resource: REQUIRED: The resource for which the policy detail is being requested. See the operation documentation for the appropriate value for this field. testIamPermissionsRequest: A TestIamPermissionsRequest resource to be passed as the request body. r TrTestIamPermissionsRequestrrN rrrrrrr/rrtestIamPermissionsRequestrrrrrr0 " "1t 4('445PRSTrrc`\rSrSrSr\R "SS5r\R"SSS9r Sr g ) -OsconfigOrganizationsAssignmentsCreateRequestizA OsconfigOrganizationsAssignmentsCreateRequest object. Fields: assignment: A Assignment resource to be passed as the request body. parent: The resource name of the parent. rBr rTrrNrrrrr r rrr c:\rSrSrSr\R "SSS9rSrg)-OsconfigOrganizationsAssignmentsDeleteRequestiznA OsconfigOrganizationsAssignmentsDeleteRequest object. Fields: name: The resource name of the Assignment. r TrrNrrrrrrrrrc:\rSrSrSr\R "SSS9rSrg)*OsconfigOrganizationsAssignmentsGetRequestizkA OsconfigOrganizationsAssignmentsGetRequest object. Fields: name: The resource name of the Assignment. r TrrNrrrrrrrrrc\rSrSrSr\R "S\RRS9r \R"S5r \R"SSS9r S r g ) +OsconfigOrganizationsAssignmentsListRequestiaLA OsconfigOrganizationsAssignmentsListRequest object. Fields: pageSize: The maximum number of Assignments to return. pageToken: A pagination token returned from a previous call to ListAssignments that indicates where this listing should continue from. This field is optional. parent: The resource name of the parent. r rrrTrrNrrrrrrrrrc\rSrSrSr\R "SS5r\R"SSS9r \R"S5r S r g ) ,OsconfigOrganizationsAssignmentsPatchRequesti+aA OsconfigOrganizationsAssignmentsPatchRequest object. Fields: assignment: A Assignment resource to be passed as the request body. name: The resource name of the Assignment. updateMask: Field mask that controls which fields of the Assignment should be updated. rBr rTrrrNrrrrrr+rrrc`\rSrSrSr\R "SS5r\R"SSS9r Sr g ) (OsconfigOrganizationsGetIamPolicyRequesti:a6A OsconfigOrganizationsGetIamPolicyRequest object. Fields: getIamPolicyRequest: A GetIamPolicyRequest resource to be passed as the request body. resource: REQUIRED: The resource for which the policy is being requested. See the operation documentation for the appropriate value for this field. rr rTrrNrrrrrr:rrrc`\rSrSrSr\R "SS5r\R"SSS9r Sr g ) +OsconfigOrganizationsOsConfigsCreateRequestiIzA OsconfigOrganizationsOsConfigsCreateRequest object. Fields: osConfig: A OsConfig resource to be passed as the request body. parent: The resource name of the parent. rr rTrrNrrrrrrIrrrc:\rSrSrSr\R "SSS9rSrg)+OsconfigOrganizationsOsConfigsDeleteRequestiUzjA OsconfigOrganizationsOsConfigsDeleteRequest object. Fields: name: The resource name of the OsConfig. r TrrNrrrrrrUrrrc:\rSrSrSr\R "SSS9rSrg)(OsconfigOrganizationsOsConfigsGetRequesti_zgA OsconfigOrganizationsOsConfigsGetRequest object. Fields: name: The resource name of the OsConfig. r TrrNrrrrrr_rrrc\rSrSrSr\R "S\RRS9r \R"S5r \R"SSS9r S r g ) )OsconfigOrganizationsOsConfigsListRequestiiaFA OsconfigOrganizationsOsConfigsListRequest object. Fields: pageSize: The maximum number of OsConfigs to return. pageToken: A pagination token returned from a previous call to ListOsConfigs that indicates where this listing should continue from. This field is optional. parent: The resource name of the parent. r rrrTrrNrrrrrrirrrc\rSrSrSr\R "SSS9r\R"SS5r \R "S5r S r g ) *OsconfigOrganizationsOsConfigsPatchRequestiyaA OsconfigOrganizationsOsConfigsPatchRequest object. Fields: name: The resource name of the OsConfig. osConfig: A OsConfig resource to be passed as the request body. updateMask: Field mask that controls which fields of the OsConfig should be updated. r TrrrrrNrrrrr!r!yrrr!c`\rSrSrSr\R "SSS9r\R"SS5r Sr g ) (OsconfigOrganizationsSetIamPolicyRequestia6A OsconfigOrganizationsSetIamPolicyRequest object. Fields: resource: REQUIRED: The resource for which the policy is being specified. See the operation documentation for the appropriate value for this field. setIamPolicyRequest: A SetIamPolicyRequest resource to be passed as the request body. r TrrrrNrrrrr#r#rrr#c`\rSrSrSr\R "SSS9r\R"SS5r Sr g ) .OsconfigOrganizationsTestIamPermissionsRequestiaOA OsconfigOrganizationsTestIamPermissionsRequest object. Fields: resource: REQUIRED: The resource for which the policy detail is being requested. See the operation documentation for the appropriate value for this field. testIamPermissionsRequest: A TestIamPermissionsRequest resource to be passed as the request body. r TrrrrNr rrrr%r%r rr%c`\rSrSrSr\R "SS5r\R"SSS9r Sr g ) (OsconfigProjectsAssignmentsCreateRequestizA OsconfigProjectsAssignmentsCreateRequest object. Fields: assignment: A Assignment resource to be passed as the request body. parent: The resource name of the parent. rBr rTrrNrrrrr'r'rrr'c:\rSrSrSr\R "SSS9rSrg)(OsconfigProjectsAssignmentsDeleteRequestiziA OsconfigProjectsAssignmentsDeleteRequest object. Fields: name: The resource name of the Assignment. r TrrNrrrrr)r)rrr)c:\rSrSrSr\R "SSS9rSrg)%OsconfigProjectsAssignmentsGetRequestizfA OsconfigProjectsAssignmentsGetRequest object. Fields: name: The resource name of the Assignment. r TrrNrrrrr+r+rrr+c\rSrSrSr\R "S\RRS9r \R"S5r \R"SSS9r S r g ) &OsconfigProjectsAssignmentsListRequestiaGA OsconfigProjectsAssignmentsListRequest object. Fields: pageSize: The maximum number of Assignments to return. pageToken: A pagination token returned from a previous call to ListAssignments that indicates where this listing should continue from. This field is optional. parent: The resource name of the parent. r rrrTrrNrrrrr-r-rrr-c\rSrSrSr\R "SS5r\R"SSS9r \R"S5r S r g ) 'OsconfigProjectsAssignmentsPatchRequestia A OsconfigProjectsAssignmentsPatchRequest object. Fields: assignment: A Assignment resource to be passed as the request body. name: The resource name of the Assignment. updateMask: Field mask that controls which fields of the Assignment should be updated. rBr rTrrrNrrrrr/r/rrr/c`\rSrSrSr\R "SS5r\R"SSS9r Sr g ) #OsconfigProjectsGetIamPolicyRequestia1A OsconfigProjectsGetIamPolicyRequest object. Fields: getIamPolicyRequest: A GetIamPolicyRequest resource to be passed as the request body. resource: REQUIRED: The resource for which the policy is being requested. See the operation documentation for the appropriate value for this field. rr rTrrNrrrrr1r1rrr1c`\rSrSrSr\R "SS5r\R"SSS9r Sr g ) &OsconfigProjectsOsConfigsCreateRequestizA OsconfigProjectsOsConfigsCreateRequest object. Fields: osConfig: A OsConfig resource to be passed as the request body. parent: The resource name of the parent. rr rTrrNrrrrr3r3rrr3c:\rSrSrSr\R "SSS9rSrg)&OsconfigProjectsOsConfigsDeleteRequestizeA OsconfigProjectsOsConfigsDeleteRequest object. Fields: name: The resource name of the OsConfig. r TrrNrrrrr5r5rrr5c:\rSrSrSr\R "SSS9rSrg)#OsconfigProjectsOsConfigsGetRequesti zbA OsconfigProjectsOsConfigsGetRequest object. Fields: name: The resource name of the OsConfig. r TrrNrrrrr7r7 rrr7c\rSrSrSr\R "S\RRS9r \R"S5r \R"SSS9r S r g ) $OsconfigProjectsOsConfigsListRequestiaAA OsconfigProjectsOsConfigsListRequest object. Fields: pageSize: The maximum number of OsConfigs to return. pageToken: A pagination token returned from a previous call to ListOsConfigs that indicates where this listing should continue from. This field is optional. parent: The resource name of the parent. r rrrTrrNrrrrr9r9rrr9c\rSrSrSr\R "SSS9r\R"SS5r \R "S5r S r g ) %OsconfigProjectsOsConfigsPatchRequesti$aA OsconfigProjectsOsConfigsPatchRequest object. Fields: name: The resource name of the OsConfig. osConfig: A OsConfig resource to be passed as the request body. updateMask: Field mask that controls which fields of the OsConfig should be updated. r TrrrrrNrrrrr;r;$rrr;c`\rSrSrSr\R "SS5r\R"SSS9r Sr g ) &OsconfigProjectsPatchJobsCancelRequesti3zA OsconfigProjectsPatchJobsCancelRequest object. Fields: cancelPatchJobRequest: A CancelPatchJobRequest resource to be passed as the request body. name: Name of the patch in the form `projects/*/patchJobs/*` rzr rTrrN) rrrrrrrcancelPatchJobRequestr/r]rrrrr=r=3s/$001H!L   q4 0$rr=c`\rSrSrSr\R "SS5r\R"SSS9r Sr g ) 'OsconfigProjectsPatchJobsExecuteRequesti@zA OsconfigProjectsPatchJobsExecuteRequest object. Fields: executePatchJobRequest: A ExecutePatchJobRequest resource to be passed as the request body. parent: The project in which to run this patch in the form `projects/*` rr rTrrN) rrrrrrrexecutePatchJobRequestr/rrrrrr@r@@s/%112JAN  T 2&rr@c:\rSrSrSr\R "SSS9rSrg)#OsconfigProjectsPatchJobsGetRequestiMzvA OsconfigProjectsPatchJobsGetRequest object. Fields: name: Name of the patch in the form `projects/*/patchJobs/*` r TrrNrrrrrCrCMrrrCc\rSrSrSr\R "S5r\R"S\RRS9r \R "S5r \R "SSS 9r S rg ) 3OsconfigProjectsPatchJobsInstanceDetailsListRequestiWaA OsconfigProjectsPatchJobsInstanceDetailsListRequest object. Fields: filter: A filter expression that filters results listed in the response. Supports filtering results by instance zone, name, state, or failure_reason. pageSize: The maximum number of instance details records to return. pageToken: A pagination token returned from a previous call that indicates where this listing should continue from. This field is optional. parent: In the form of `projects/*/patchJobs/*` r rrrr*TrrN)rrrrrrr/rrrrrrrrrrrrErEWsY    #&  # #Ay/@/@/F/F G(##A&)  T 2&rrEc\rSrSrSr\R "S\RRS9r \R"S5r \R"SSS9r S r g ) $OsconfigProjectsPatchJobsListRequestija-A OsconfigProjectsPatchJobsListRequest object. Fields: pageSize: The maximum number of instance status to return. pageToken: A pagination token returned from a previous call that indicates where this listing should continue from. This field is optional. parent: In the form of `projects/*` r rrrTrrNrrrrrGrGjsI # #Ay/@/@/F/F G(##A&)  T 2&rrGc`\rSrSrSr\R "SSS9r\R"SS5r Sr g ) #OsconfigProjectsSetIamPolicyRequestiya1A OsconfigProjectsSetIamPolicyRequest object. Fields: resource: REQUIRED: The resource for which the policy is being specified. See the operation documentation for the appropriate value for this field. setIamPolicyRequest: A SetIamPolicyRequest resource to be passed as the request body. r TrrrrNrrrrrIrIyrrrIc`\rSrSrSr\R "SSS9r\R"SS5r Sr g ) )OsconfigProjectsTestIamPermissionsRequestiaJA OsconfigProjectsTestIamPermissionsRequest object. Fields: resource: REQUIRED: The resource for which the policy detail is being requested. See the operation documentation for the appropriate value for this field. testIamPermissionsRequest: A TestIamPermissionsRequest resource to be passed as the request body. r TrrrrNr rrrrKrKr rrKc`\rSrSrSr\R "SS5r\R"SSS9r Sr g ) 2OsconfigProjectsZonesInstancesLookupConfigsRequestizA OsconfigProjectsZonesInstancesLookupConfigsRequest object. Fields: lookupConfigsRequest: A LookupConfigsRequest resource to be passed as the request body. resource: The resource name for the instance. rr rTrrN) rrrrrrrlookupConfigsRequestr/rrrrrrMrMs/#//0FJ  " "1t 4(rrMc`\rSrSrSr\R "SS5r\R"SSS9r Sr g ) BOsconfigProjectsZonesInstancesReportPatchJobInstanceDetailsRequestia7A OsconfigProjectsZonesInstancesReportPatchJobInstanceDetailsRequest object. Fields: reportPatchJobInstanceDetailsRequest: A ReportPatchJobInstanceDetailsRequest resource to be passed as the request body. resource: The instance reporting its status in the form `projects/*/zones/*/instances/*` $ReportPatchJobInstanceDetailsRequestr rTrrN) rrrrrrr$reportPatchJobInstanceDetailsRequestr/rrrrrrPrPs0 *3)?)?@fhi)j&  " "1t 4(rrPc<\rSrSrSr\R "S5rSrg)r izsPackage is a reference to the actual package to be installed or removed. Fields: name: The name of the package. r rNrrrrr r s   q !$rr cL\rSrSrSr"SS\R 5r\R"SS5r \R"SS5r \R"SS 5r \R"S S 5r \R"S S 5r\R"SS5r\R"SS5rSrg)riaXPatch configuration specifications. Contains details on specifically how to apply the patch(es) to an instance. Enums: RebootConfigValueValuesEnum: Optional. Post-patch reboot settings. Fields: apt: Apt update settings. Use this override the default apt patch rules. goo: Goo update settings. Use this override the default goo patch rules. rebootConfig: Optional. Post-patch reboot settings. retryStrategy: Optional. Retry strategy can be defined to have the agent retry patching during the window if patching fails. If omitted, the agent will use its default retry strategy. windowsUpdate: Windows update settings. Use this override the default windows patch rules. yum: Yum update settings. Use this override the default yum patch rules. zypper: Zypper update settings. Use this override the default zypper patch rules. c(\rSrSrSrSrSrSrSrSr g) 'PatchConfig.RebootConfigValueValuesEnumiaOptional. Post-patch reboot settings. Values: REBOOT_CONFIG_UNSPECIFIED: The default behavior is DEFAULT. DEFAULT: The agent will decide if a reboot is necessary by checking well known signals such as registry keys or `/var/run/reboot-required`. ALWAYS: Always reboot the machine after the update has completed. NEVER: Never reboot the machine after the update has completed. rr rrrN) rrrrrREBOOT_CONFIG_UNSPECIFIEDDEFAULTALWAYSNEVERrrrrRebootConfigValueValuesEnumrVs!"G F Err[r5r rrr RetryStrategyr*WindowsUpdateSettingsr+ YumSettingsrVZypperSettingsrWrN)rrrrrrr,r[rrrr- rebootConfig retryStrategyrrrrrrrrrs( INN  }a0#}a0#$$%BAF,((!<-(()@!D-}a0#  ! !"2A 6&rrc\rSrSrSr"SS\R 5r\R"S5r \R"S5r \R"S5r \R"S5r \R"S 5r\R"S 5r\R"S 5r\R""S S 5r\R"S5r\R""SS5r\R*"S5r\R."SS5r\R"S5rSrg)riaA high level representation of a patch job that is either in progress or has completed. Instances' details are not included in the job. To paginate through instance details, use ListPatchJobInstanceDetails. Enums: StateValueValuesEnum: The current state of the PatchJob. Fields: createTime: Time this PatchJob was created. description: Description of the patch job. Length of the description is limited to 1024 characters. displayName: Display name for this patch job. This is not a unique identifier. dryRun: If this patch job is a dry run, the agent will report that it has finished without running any updates on the VM. duration: Duration of the patch job. After the duration ends, the patch job will time out. errorMessage: If this patch job failed, this message will provide information about the failure. filter: There must be at least one instance to patch for this job to succeed. This is the same filter used when listing compute instances. instanceDetailsSummary: Summary of instance details. name: Unique identifier for this patch job in the form `projects/*/patchJobs/*` patchConfig: Patch configuration being applied. percentComplete: Reflects the overall progress of the patch job in the range of 0.0 being no progress to 100.0 being complete. state: The current state of the PatchJob. updateTime: Last time this PatchJob was updated. c8\rSrSrSrSrSrSrSrSr Sr S r S r S r g ) PatchJob.StateValueValuesEnumi aThe current state of the PatchJob. Values: STATE_UNSPECIFIED: State must be specified. STARTED: The patch job was successfully initiated. INSTANCE_LOOKUP: The patch job is looking up instances to run the patch on. PATCHING: Instances are being patched. SUCCEEDED: Patch job completed successfully. COMPLETED_WITH_ERRORS: Patch job completed but there were errors. CANCELED: The patch job was canceled. TIMED_OUT: The patch job has timed out. rr rrr*r+rVrWrN)rrrrrSTATE_UNSPECIFIEDSTARTEDINSTANCE_LOOKUPPATCHING SUCCEEDEDCOMPLETED_WITH_ERRORSCANCELED TIMED_OUTrrrrStateValueValuesEnumrd s3 GOHIHIrrmr rrr*r+rVrWPatchJobInstanceDetailsSummaryrrrr rN)rrrrrrr,rmr/rYrZrrrr errorMessagerrinstanceDetailsSummaryr]r FloatFieldpercentCompleter-stater_rrrrrrs>Y^^.$$Q'*%%a(+%%a(+  ! !! $&  " "1 %(&&q),   #&$112RTUV   q !$&&}b9+((,/   4b 9%$$R(*rrc\rSrSrSr"SS\R 5r\R"S5r \R"S5r \R"S5r \R"S5r \R"SS 5rS rg ) ri1aPatch details of an instance. Enums: StateValueValuesEnum: Current state of instance patch. Fields: attemptCount: Number of times the agent attempted to apply the patch. failureReason: If the patch has failed, this is the reason. instanceSystemId: The unique, system-generated identifier for the instance. name: The instance name in the form `projects/*/zones/*/instances/*` state: Current state of instance patch. cL\rSrSrSrSrSrSrSrSr Sr S r S r S r S rS rSrSrSrg),PatchJobInstanceDetails.StateValueValuesEnumi@a8Current state of instance patch. Values: PATCH_STATE_UNSPECIFIED: Unspecified. PENDING: The instance has not been notified yet. INACTIVE: Instance is inactive and cannot be patched. NOTIFIED: The instance has been notified that it should patch. STARTED: The instance has started the patching process. DOWNLOADING_PATCHES: The instance is downloading patches. APPLYING_PATCHES: The instance is applying patches. REBOOTING: The instance is rebooting. SUCCEEDED: The instance has completed applying patches. SUCCEEDED_REBOOT_REQUIRED: The instance has completed applying patches but a reboot is required. FAILED: The instance has failed to apply the patch. ACKED: The instance acked the notification and will start shortly. TIMED_OUT: The instance exceeded the time out while applying the patch. rr rrr*r+rVrWrrrrorprNrrrrrPATCH_STATE_UNSPECIFIEDPENDINGINACTIVENOTIFIEDrfDOWNLOADING_PATCHESAPPLYING_PATCHES REBOOTINGriSUCCEEDED_REBOOT_REQUIREDFAILEDACKEDrlrrrrrmry@N$ GHHGII ! F EIrrmr rrr*r+rN)rrrrrrr,rmr attemptCountr/ failureReasoninstanceSystemIdr]r-rvrrrrrr1sn Y^^B''*,''*-**1-   q !$   4a 8%rrc\rSrSrSr\R "S5r\R "S5r\R "S5r \R "S5r \R "S5r \R "S5r \R "S 5r \R "S 5r\R "S 5r\R "S 5r\R "S 5r\R "S5rSrg)rnihaMA summary of the current patch state across all instances this patch job affects. Contains counts of instances in different states. These states map to InstancePatchState. List patch job instance details to see the specific states of each instance. Fields: instancesAcked: Number of instances that have acked and will start shortly. instancesApplyingPatches: Number of instances that are applying patches. instancesDownloadingPatches: Number of instances that are downloading patches. instancesFailed: Number of instances that failed. instancesInactive: Number of instances that are inactive. instancesNotified: Number of instances notified about patch job. instancesPending: Number of instances pending patch job. instancesRebooting: Number of instances rebooting. instancesStarted: Number of instances that have started. instancesSucceeded: Number of instances that have completed successfully. instancesSucceededRebootRequired: Number of instances that require reboot. instancesTimedOut: Number of instances that exceeded the time out while applying the patch. r rrr*r+rVrWrrrrorprN)rrrrrrrinstancesAckedinstancesApplyingPatchesinstancesDownloadingPatchesinstancesFailedinstancesInactiveinstancesNotifiedinstancesPendinginstancesRebootinginstancesStartedinstancesSucceeded instancesSucceededRebootRequiredinstancesTimedOutrrrrrnrnhs.))!,.&33A6 ) 6 6q 9**1-/,,Q/,,Q/++A. --a0++A. --b1%.%;%;B%?",,R0rrnc\rSrSrSr\R "SSSS9r\R "SSSS9r\R"S 5r \R"S \RRS 9rS rg )PolicyiaNAn Identity and Access Management (IAM) policy, which specifies access controls for Google Cloud resources. A `Policy` is a collection of `bindings`. A `binding` binds one or more `members` to a single `role`. Members can be user accounts, service accounts, Google groups, and domains (such as G Suite). A `role` is a named list of permissions; each `role` can be an IAM predefined role or a user-created custom role. Optionally, a `binding` can specify a `condition`, which is a logical expression that allows access to a resource only if the expression evaluates to `true`. A condition can add constraints based on attributes of the request, the resource, or both. **JSON example:** { "bindings": [ { "role": "roles/resourcemanager.organizationAdmin", "members": [ "user:mike@example.com", "group:admins@example.com", "domain:google.com", "serviceAccount:my-project- id@appspot.gserviceaccount.com" ] }, { "role": "roles/resourcemanager.organizationViewer", "members": ["user:eve@example.com"], "condition": { "title": "expirable access", "description": "Does not grant access after Sep 2020", "expression": "request.time < timestamp('2020-10-01T00:00:00.000Z')", } } ], "etag": "BwWWja0YfJA=", "version": 3 } **YAML example:** bindings: - members: - user:mike@example.com - group:admins@example.com - domain:google.com - serviceAccount:my-project-id@appspot.gserviceaccount.com role: roles/resourcemanager.organizationAdmin - members: - user:eve@example.com role: roles/resourcemanager.organizationViewer condition: title: expirable access description: Does not grant access after Sep 2020 expression: request.time < timestamp('2020-10-01T00:00:00.000Z') - etag: BwWWja0YfJA= - version: 3 For a description of IAM and its features, see the [IAM documentation](https://cloud.google.com/iam/docs/). Fields: auditConfigs: Specifies cloud audit logging configuration for this policy. bindings: Associates a list of `members` to a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one member. etag: `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read- modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. version: Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. rar Tr rsrrr*rrN)rrrrrrr auditConfigsbindings BytesFieldetagrrrversionrrrrrrs`=~'' q4H,  # #Iq4 @(   a $  " "1i.?.?.E.E F'rrc\rSrSrSr"SS\R 5r\R"S5r \R"S5r \R"S5r \R"S5r \R"S 5r\R"SS 5rS rg ) rQiaRequest to report the patch status for an instance. Enums: StateValueValuesEnum: State of current patch execution on the instance. Fields: attemptCount: Number of times the agent attempted to apply the patch. failureReason: Reason for failure. instanceIdToken: This is the GCE instance identity token described in https://cloud.google.com/compute/docs/instances/verifying-instance- identity where the audience is 'osconfig.googleapis.com' and the format is 'full'. instanceSystemId: Required. The unique, system-generated identifier for the instance. This is the unchangeable, auto-generated ID assigned to the instance upon creation. This is needed here because GCE instance names are not tombstoned; it is possible to delete an instance and create a new one with the same name; this provides a mechanism for this API to identify distinct instances in this case. patchJob: Unique identifier of the patch job this request applies to. state: State of current patch execution on the instance. cL\rSrSrSrSrSrSrSrSr Sr S r S r S r S rS rSrSrSrg)9ReportPatchJobInstanceDetailsRequest.StateValueValuesEnumiaIState of current patch execution on the instance. Values: PATCH_STATE_UNSPECIFIED: Unspecified. PENDING: The instance has not been notified yet. INACTIVE: Instance is inactive and cannot be patched. NOTIFIED: The instance has been notified that it should patch. STARTED: The instance has started the patching process. DOWNLOADING_PATCHES: The instance is downloading patches. APPLYING_PATCHES: The instance is applying patches. REBOOTING: The instance is rebooting. SUCCEEDED: The instance has completed applying patches. SUCCEEDED_REBOOT_REQUIRED: The instance has completed applying patches but a reboot is required. FAILED: The instance has failed to apply the patch. ACKED: The instance acked the notification and will start shortly. TIMED_OUT: The instance exceeded the time out while applying the patch. rr rrr*r+rVrWrrrrorprNrzrrrrmrrrrmr rrr*r+rVrN)rrrrrrr,rmrrr/rinstanceIdTokenrpatchJobr-rvrrrrrQrQs~,Y^^B''*,''*-))!,/**1-  " "1 %(   4a 8%rrQc\rSrSrSr"SS\R 5r\R"S5r \R"SS5r \R"S5r \R"SS 5rS rg ) %ReportPatchJobInstanceDetailsResponseiaResponse from reporting instance patch details. Includes information the agent needs to continue or stop patching. Enums: PatchJobStateValueValuesEnum: State of the overall patch. If the patch is no longer active, the agent should not begin a new patch step. Fields: dryRun: If this patch job is a dry run, the agent will report its status as it goes through the motions but won't actually run any updates or perform any reboots. patchConfig: Patch configuration the agent should apply. patchJob: Unique identifier for the current patch job. patchJobState: State of the overall patch. If the patch is no longer active, the agent should not begin a new patch step. c$\rSrSrSrSrSrSrSrg)BReportPatchJobInstanceDetailsResponse.PatchJobStateValueValuesEnumi&a+State of the overall patch. If the patch is no longer active, the agent should not begin a new patch step. Values: PATCH_JOB_STATE_UNSPECIFIED: Unspecified is invalid. ACTIVE: The patch job is running. Instances will continue to run patch job steps. COMPLETED: The patch job is complete. rr rrN) rrrrrPATCH_JOB_STATE_UNSPECIFIEDACTIVE COMPLETEDrrrrPatchJobStateValueValuesEnumr&s#$ FIrrr rrrr*rN)rrrrrrr,rrrrrr/rr- patchJobStaterrrrrrs^" Y^^   ! !! $&&&}a8+  " "1 %(%%&DaH-rrc<\rSrSrSr\R "S5rSrg)r\i:zThe strategy for retrying failed patches during the patch window. Fields: enabled: If true, the agent will continue to try and patch until the window has ended. r rN) rrrrrrrenabledrrrrr\r\:s  " "1 %'rr\cb\rSrSrSr\R "SS5r\R"S5r Sr g)riEa4Request message for `SetIamPolicy` method. Fields: policy: REQUIRED: The complete policy to be applied to the `resource`. The size of the policy is limited to a few 10s of KB. An empty policy is a valid policy but certain Cloud Platform services (such as Projects) might reject them. updateMask: OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only the fields in the mask will be modified. If no mask is provided, the following default mask is used: paths: "bindings, etag" This field is only used by Cloud IAM. rr rrN) rrrrrrrpolicyr/rrrrrrrEs+   ! !(A .&$$Q'*rrc\rSrSrSr"SS\R 5r"SS\R 5r\R"SS5r \R"S5r \R"SS S S 9r \R"S 5r\R"S 5r\R"S5r\R"S5r\R$"SSS 9r\R"S5r\R"S5r\R"S5r\R"S5rSrg)StandardQueryParametersiWaQuery parameters accepted by all methods. Enums: FXgafvValueValuesEnum: V1 error format. AltValueValuesEnum: Data format for response. Fields: f__xgafv: V1 error format. access_token: OAuth access token. alt: Data format for response. callback: JSONP fields: Selector specifying which fields to include in a partial response. key: API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. oauth_token: OAuth 2.0 token for the current user. prettyPrint: Returns response with indentations and line breaks. quotaUser: Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. trace: A tracing token of the form "token:" to include in api requests. uploadType: Legacy upload protocol for media (e.g. "media", "multipart"). upload_protocol: Upload protocol for media (e.g. "raw", "multipart"). c$\rSrSrSrSrSrSrSrg)*StandardQueryParameters.AltValueValuesEnumirzData format for response. Values: json: Responses with Content-Type of application/json media: Media download with context-dependent Content-Type proto: Responses with Content-Type of application/x-protobuf rr rrN) rrrrrjsonmediaprotorrrrAltValueValuesEnumrrs D E Errc \rSrSrSrSrSrSrg)-StandardQueryParameters.FXgafvValueValuesEnumi~zFV1 error format. Values: _1: v1 error format _2: v2 error format rr rN)rrrrr_1_2rrrrFXgafvValueValuesEnumr~s B Brrr rrr)defaultr*r+rVrWrTrrrorprN)rrrrrrr,rrr-f__xgafvr/ access_tokenaltcallbackfieldsrN oauth_tokenr prettyPrint quotaUsertrace uploadTypeupload_protocolrrrrrrWs4 9>>  inn  !8! <(&&q),0!VD#  " "1 %(   #&a #%%a(+&&q$7+##A&)    #%$$R(*))"-/rrc:\rSrSrSr\R "SSS9rSrg)ria3Request message for `TestIamPermissions` method. Fields: permissions: The set of permissions to check for the `resource`. Permissions with wildcards (such as '*' or 'storage.*') are not allowed. For more information see [IAM Overview](https://cloud.google.com/iam/docs/overview#permissions). r Tr rN rrrrrrr/ permissionsrrrrrrs%%a$7+rrc:\rSrSrSr\R "SSS9rSrg)TestIamPermissionsResponseizResponse message for `TestIamPermissions` method. Fields: permissions: A subset of `TestPermissionsRequest.permissions` that the caller is allowed. r Tr rNrrrrrrs%%a$7+rrc<\rSrSrSr\R "S5rSrg)rizConfiguration settings for the Windows update. Fields: windowsUpdateServerUri: Optional URI of Windows update server. This sets the registry value `WUServer` under `HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate`. r rN) rrrrrrr/windowsUpdateServerUrirrrrrrs%003rrc\rSrSrSr"SS\R 5r\R"SSSS9r \R"SSS9r \R"S SS9r S r g ) r]iaWindows patching is performed using the Windows Update Agent. Enums: ClassificationsValueListEntryValuesEnum: Fields: classifications: Only apply updates of these windows update classifications. If empty, all updates will be applied. excludes: List of KBs to exclude from update. exclusivePatches: An exclusive list of kbs to be updated. These are the only patches that will be updated. This field must not be used with other patch configurations. c@\rSrSrSrSrSrSrSrSr Sr S r S r S r S rS rg)=WindowsUpdateSettings.ClassificationsValueListEntryValuesEnumiawClassificationsValueListEntryValuesEnum enum type. Values: CLASSIFICATION_UNSPECIFIED: CRITICAL: SECURITY: DEFINITION: DRIVER: FEATURE_PACK: SERVICE_PACK: TOOL: UPDATE_ROLLUP: UPDATE: rr rrr*r+rVrWrrrN)rrrrrCLASSIFICATION_UNSPECIFIEDCRITICALSECURITY DEFINITIONDRIVER FEATURE_PACK SERVICE_PACKTOOL UPDATE_ROLLUPUPDATErrrr'ClassificationsValueListEntryValuesEnumrs< "#HHJ FLL DM Frrr Tr rrrN)rrrrrrr,rr-classificationsr/r>exclusivePatchesrrrrr]r]sU  4''(QST_cd/  " "1t 4(**1t<rr]c\rSrSrSr\R "SSSS9r\R "SSSS9r\R "SS SS9r S r g ) riaA list of packages to install, remove, and their repos for a given package manager type. Fields: packageInstalls: Packages to install. yum -y install package1 package2 package3 packageRemovals: Packages to remove. yum -y remove package1 package2 package3 repositories: Package repositories to configure in the package manager. The instance likely already has some defaults set and duplicates are acceptable but ignored. r r Tr r YumRepositoryrrNrrrrrrr rrc\rSrSrSr\R "S5r\R "S5r\R "SSS9r \R "S5r S r g ) riaRepresents a single yum package repository. These will be added to a repo file that will be managed a /etc/yum.repos.d/google_osconfig.repo Fields: baseUrl: Required. The location of the repository directory. displayName: Optional. If omitted, the id will be used for the name. gpgKeys: Optional. URIs of GPG keys. id: Required. A one word, unique name for this repository. This will be the `repo id` in the yum config file and also the `display_name` if `display_name` is omitted. r rrTr r*rN rrrrrrr/baseUrlrgpgKeysidrrrrrrK   ! !! $'%%a(+  ! !!d 3'Q"rrc\rSrSrSr\R "SSS9r\R "SSS9r\R"S5r \R"S5r S r g ) r^iaYum patching will be performed by executing `yum update`. Additional options can be set to control how this is executed. Note that not all settings are supported on all platforms. Fields: excludes: List of packages to exclude from update. These packages will be excluded by using the yum `--exclude` field. exclusivePackages: An exclusive list of packages to be updated. These are the only packages that will be updated. If these packages are not installed, they will be ignored. This field must not be specified with any other patch configuration fields. minimal: Optional. Will cause patch to run `yum update-minimal` instead. security: Optional. Adds the `--security` flag to `yum update`. Not supported on all platforms. r Tr rrr*rN) rrrrrrr/r>r?rminimalsecurityrrrrr^r^sN  " "1t 4(++A=  " "1 %'  # #A &(rr^c\rSrSrSr\R "SSSS9r\R "SSSS9r\R "SS SS9r S r g ) ri%aA list of packages to install, remove, and their repos for a given package manager type. Fields: packageInstalls: Packages to install. zypper install package1 package2 package3 packageRemovals: Packages to remove. zypper rm package1 package2 repositories: Package repositories to configure in the package manager. The instance likely already has some defaults set and duplicates are acceptable but ignored. r r Tr rZypperRepositoryrrNrrrrrr%sF **9a$G/**9a$G/''(:AM,rrc\rSrSrSr\R "S5r\R "S5r\R "SSS9r \R "S5r S r g ) ri7aRepresents a single zypper package repository. These will be added to a repo file that will be managed a /etc/zypp/repos.d/google_osconfig.repo Fields: baseUrl: Required. The location of the repository directory. displayName: Optional. If omitted, the id will be used for the name. gpgKeys: Optional. URIs of GPG keys. id: Required. A one word, unique name for this repository. This will be the `repo id` in the zypper config file and also the `display_name` if `display_name` is omitted. r rrTr r*rNrrrrrr7rrrc\rSrSrSr\R "SSS9r\R "SSS9r\R "SSS9r \R "SSS9r \R"S 5r \R"S 5r S rg ) r_iJaFZypper patching is performed by running `zypper patch`. See also https://en.opensuse.org/SDB:Zypper_manual. Fields: categories: Optional. Install only patches with these categories. Common categories include security, recommended, and feature. excludes: List of patches to exclude from update. exclusivePatches: An exclusive list of patches to be updated. These are the only patches that will be installed using 'zypper patch patch:' command. This field must not be used with any other patch configuration fields. severities: Optional. Install only patches with these severities. Common severities include critical, important, moderate, and low. withOptional: Optional. Adds the `--with-optional` flag to `zypper patch`. withUpdate: Optional. Adds the `--with-update` flag, to `zypper patch`. r Tr rrr*r+rVrN)rrrrrrr/ categoriesr>r severitiesr withOptional withUpdaterrrrr_r_Jsr"$$Q6*  " "1t 4(**1t<$$Q6*''*,%%a(*rr_rz$.xgafvr1r2N)hr __future__rapitools.base.protorpcliterrapitools.base.pyrpackagerSrrr5rBrarcrsrzr}rrurrrrrrrrrrrrrrrrrrrrrrrrrrr rrrrrrrrrr!r#r%r'r)r+r-r/r1r3r5r7r9r;r=r@rCrErGrIrKrMrPr rrrrnrrQrr\rrrrrr]rrr^rrr_AddCustomJsonFieldMappingAddCustomJsonEnumMappingrrrrrs'<% Ky((K&%!I%%%!P!7)##!7H6(""6(r%)##%B =Y&& =F,"i,"^,I--,I  9Y..96#9  #0:)++: Vy(( VKy((K& !I%% !B)##B +i// + CI-- C `)*;*; ` CI-- C!C9,,!CH'!2!2'&-> ( 5):): 5 3I,=,= 31I,=,=11):):1 3)*;*; 3 (9+<+< ( I):): I Uy/@/@ U 3I4E4E 31I4E4E111B1B1 3)2C2C 3 (93D3D ( 5y/@/@ 5 3)2C2C 31)2C2C11y/@/@1 3 0A0A 3 (1B1B ( Iy/@/@ I UY5F5F U 3y/@/@ 31y/@/@11I,=,=1 3Y->-> 3 (i.?.? ( 5)*;*; 5 3Y->-> 31Y->->11)*;*;1 39+<+< 3 (I,=,= ( 1Y->-> 1 3i.?.? 31)*;*;13):K:K3& 39+<+< 3 I)*;*; I U 0A0A U 59J9J 5 5IZIZ 5 "i"*7)##*7ZC)y  C)L49i//49n#1Y%6%6#1LCGY  CGL=99+<+<=9@#II,=,=#IL&I%%&()++($<.i//<.~ 8 1 1 88!2!28 4)++ 4+=I--+=\Ky((K& I%% &')##'.N)++N$ y(( &)Y&&)4 ""Z4!!114>!!114>r