Package cloud.google.com/go/accessapproval/apiv1/accessapprovalpb (v1.7.7)

Variables

EnrollmentLevel_name, EnrollmentLevel_value

var (
	EnrollmentLevel_name = map[int32]string{
		0: "ENROLLMENT_LEVEL_UNSPECIFIED",
		1: "BLOCK_ALL",
	}
	EnrollmentLevel_value = map[string]int32{
		"ENROLLMENT_LEVEL_UNSPECIFIED": 0,
		"BLOCK_ALL":                    1,
	}
)

Enum value maps for EnrollmentLevel.

AccessReason_Type_name, AccessReason_Type_value

var (
	AccessReason_Type_name = map[int32]string{
		0: "TYPE_UNSPECIFIED",
		1: "CUSTOMER_INITIATED_SUPPORT",
		2: "GOOGLE_INITIATED_SERVICE",
		3: "GOOGLE_INITIATED_REVIEW",
		4: "THIRD_PARTY_DATA_REQUEST",
		5: "GOOGLE_RESPONSE_TO_PRODUCTION_ALERT",
	}
	AccessReason_Type_value = map[string]int32{
		"TYPE_UNSPECIFIED":                    0,
		"CUSTOMER_INITIATED_SUPPORT":          1,
		"GOOGLE_INITIATED_SERVICE":            2,
		"GOOGLE_INITIATED_REVIEW":             3,
		"THIRD_PARTY_DATA_REQUEST":            4,
		"GOOGLE_RESPONSE_TO_PRODUCTION_ALERT": 5,
	}
)

Enum value maps for AccessReason_Type.

File_google_cloud_accessapproval_v1_accessapproval_proto

var File_google_cloud_accessapproval_v1_accessapproval_proto protoreflect.FileDescriptor

Functions

func RegisterAccessApprovalServer

func RegisterAccessApprovalServer(s *grpc.Server, srv AccessApprovalServer)

AccessApprovalClient

type AccessApprovalClient interface {
	// Lists approval requests associated with a project, folder, or organization.
	// Approval requests can be filtered by state (pending, active, dismissed).
	// The order is reverse chronological.
	ListApprovalRequests(ctx context.Context, in *ListApprovalRequestsMessage, opts ...grpc.CallOption) (*ListApprovalRequestsResponse, error)
	// Gets an approval request. Returns NOT_FOUND if the request does not exist.
	GetApprovalRequest(ctx context.Context, in *GetApprovalRequestMessage, opts ...grpc.CallOption) (*ApprovalRequest, error)
	// Approves a request and returns the updated ApprovalRequest.
	//
	// Returns NOT_FOUND if the request does not exist. Returns
	// FAILED_PRECONDITION if the request exists but is not in a pending state.
	ApproveApprovalRequest(ctx context.Context, in *ApproveApprovalRequestMessage, opts ...grpc.CallOption) (*ApprovalRequest, error)
	// Dismisses a request. Returns the updated ApprovalRequest.
	//
	// NOTE: This does not deny access to the resource if another request has been
	// made and approved. It is equivalent in effect to ignoring the request
	// altogether.
	//
	// Returns NOT_FOUND if the request does not exist.
	//
	// Returns FAILED_PRECONDITION if the request exists but is not in a pending
	// state.
	DismissApprovalRequest(ctx context.Context, in *DismissApprovalRequestMessage, opts ...grpc.CallOption) (*ApprovalRequest, error)
	// Invalidates an existing ApprovalRequest. Returns the updated
	// ApprovalRequest.
	//
	// NOTE: This does not deny access to the resource if another request has been
	// made and approved. It only invalidates a single approval.
	//
	// Returns FAILED_PRECONDITION if the request exists but is not in an approved
	// state.
	InvalidateApprovalRequest(ctx context.Context, in *InvalidateApprovalRequestMessage, opts ...grpc.CallOption) (*ApprovalRequest, error)
	// Gets the settings associated with a project, folder, or organization.
	GetAccessApprovalSettings(ctx context.Context, in *GetAccessApprovalSettingsMessage, opts ...grpc.CallOption) (*AccessApprovalSettings, error)
	// Updates the settings associated with a project, folder, or organization.
	// Settings to update are determined by the value of field_mask.
	UpdateAccessApprovalSettings(ctx context.Context, in *UpdateAccessApprovalSettingsMessage, opts ...grpc.CallOption) (*AccessApprovalSettings, error)
	// Deletes the settings associated with a project, folder, or organization.
	// This will have the effect of disabling Access Approval for the project,
	// folder, or organization, but only if all ancestors also have Access
	// Approval disabled. If Access Approval is enabled at a higher level of the
	// hierarchy, then Access Approval will still be enabled at this level as
	// the settings are inherited.
	DeleteAccessApprovalSettings(ctx context.Context, in *DeleteAccessApprovalSettingsMessage, opts ...grpc.CallOption) (*emptypb.Empty, error)
	// Retrieves the service account that is used by Access Approval to access KMS
	// keys for signing approved approval requests.
	GetAccessApprovalServiceAccount(ctx context.Context, in *GetAccessApprovalServiceAccountMessage, opts ...grpc.CallOption) (*AccessApprovalServiceAccount, error)
}

AccessApprovalClient is the client API for AccessApproval service.

For semantics around ctx use and closing/ending streaming RPCs, please refer to https://godoc.org/google.golang.org/grpc#ClientConn.NewStream.

func NewAccessApprovalClient

func NewAccessApprovalClient(cc grpc.ClientConnInterface) AccessApprovalClient

AccessApprovalServer

type AccessApprovalServer interface {
	// Lists approval requests associated with a project, folder, or organization.
	// Approval requests can be filtered by state (pending, active, dismissed).
	// The order is reverse chronological.
	ListApprovalRequests(context.Context, *ListApprovalRequestsMessage) (*ListApprovalRequestsResponse, error)
	// Gets an approval request. Returns NOT_FOUND if the request does not exist.
	GetApprovalRequest(context.Context, *GetApprovalRequestMessage) (*ApprovalRequest, error)
	// Approves a request and returns the updated ApprovalRequest.
	//
	// Returns NOT_FOUND if the request does not exist. Returns
	// FAILED_PRECONDITION if the request exists but is not in a pending state.
	ApproveApprovalRequest(context.Context, *ApproveApprovalRequestMessage) (*ApprovalRequest, error)
	// Dismisses a request. Returns the updated ApprovalRequest.
	//
	// NOTE: This does not deny access to the resource if another request has been
	// made and approved. It is equivalent in effect to ignoring the request
	// altogether.
	//
	// Returns NOT_FOUND if the request does not exist.
	//
	// Returns FAILED_PRECONDITION if the request exists but is not in a pending
	// state.
	DismissApprovalRequest(context.Context, *DismissApprovalRequestMessage) (*ApprovalRequest, error)
	// Invalidates an existing ApprovalRequest. Returns the updated
	// ApprovalRequest.
	//
	// NOTE: This does not deny access to the resource if another request has been
	// made and approved. It only invalidates a single approval.
	//
	// Returns FAILED_PRECONDITION if the request exists but is not in an approved
	// state.
	InvalidateApprovalRequest(context.Context, *InvalidateApprovalRequestMessage) (*ApprovalRequest, error)
	// Gets the settings associated with a project, folder, or organization.
	GetAccessApprovalSettings(context.Context, *GetAccessApprovalSettingsMessage) (*AccessApprovalSettings, error)
	// Updates the settings associated with a project, folder, or organization.
	// Settings to update are determined by the value of field_mask.
	UpdateAccessApprovalSettings(context.Context, *UpdateAccessApprovalSettingsMessage) (*AccessApprovalSettings, error)
	// Deletes the settings associated with a project, folder, or organization.
	// This will have the effect of disabling Access Approval for the project,
	// folder, or organization, but only if all ancestors also have Access
	// Approval disabled. If Access Approval is enabled at a higher level of the
	// hierarchy, then Access Approval will still be enabled at this level as
	// the settings are inherited.
	DeleteAccessApprovalSettings(context.Context, *DeleteAccessApprovalSettingsMessage) (*emptypb.Empty, error)
	// Retrieves the service account that is used by Access Approval to access KMS
	// keys for signing approved approval requests.
	GetAccessApprovalServiceAccount(context.Context, *GetAccessApprovalServiceAccountMessage) (*AccessApprovalServiceAccount, error)
}

AccessApprovalServer is the server API for AccessApproval service.

AccessApprovalServiceAccount

type AccessApprovalServiceAccount struct {

	// The resource name of the Access Approval service account. Format is one of:
	//
	//   - "projects/{project}/serviceAccount"
	//   - "folders/{folder}/serviceAccount"
	//   - "organizations/{organization}/serviceAccount"
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Email address of the service account.
	AccountEmail string `protobuf:"bytes,2,opt,name=account_email,json=accountEmail,proto3" json:"account_email,omitempty"`
	// contains filtered or unexported fields
}

Access Approval service account related to a project/folder/organization.

func (*AccessApprovalServiceAccount) Descriptor

func (*AccessApprovalServiceAccount) Descriptor() ([]byte, []int)

Deprecated: Use AccessApprovalServiceAccount.ProtoReflect.Descriptor instead.

func (*AccessApprovalServiceAccount) GetAccountEmail

func (x *AccessApprovalServiceAccount) GetAccountEmail() string

func (*AccessApprovalServiceAccount) GetName

func (x *AccessApprovalServiceAccount) GetName() string

func (*AccessApprovalServiceAccount) ProtoMessage

func (*AccessApprovalServiceAccount) ProtoMessage()

func (*AccessApprovalServiceAccount) ProtoReflect

func (*AccessApprovalServiceAccount) Reset

func (x *AccessApprovalServiceAccount) Reset()

func (*AccessApprovalServiceAccount) String

AccessApprovalSettings

type AccessApprovalSettings struct {
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`

	NotificationEmails []string `protobuf:"bytes,2,rep,name=notification_emails,json=notificationEmails,proto3" json:"notification_emails,omitempty"`

	EnrolledServices []*EnrolledService `protobuf:"bytes,3,rep,name=enrolled_services,json=enrolledServices,proto3" json:"enrolled_services,omitempty"`

	EnrolledAncestor bool `protobuf:"varint,4,opt,name=enrolled_ancestor,json=enrolledAncestor,proto3" json:"enrolled_ancestor,omitempty"`

	ActiveKeyVersion string `protobuf:"bytes,6,opt,name=active_key_version,json=activeKeyVersion,proto3" json:"active_key_version,omitempty"`

	AncestorHasActiveKeyVersion bool "" /* 149 byte string literal not displayed */

	InvalidKeyVersion bool `protobuf:"varint,8,opt,name=invalid_key_version,json=invalidKeyVersion,proto3" json:"invalid_key_version,omitempty"`

}

Settings on a Project/Folder/Organization related to Access Approval.

func (*AccessApprovalSettings) Descriptor

func (*AccessApprovalSettings) Descriptor() ([]byte, []int)

Deprecated: Use AccessApprovalSettings.ProtoReflect.Descriptor instead.

func (*AccessApprovalSettings) GetActiveKeyVersion

func (x *AccessApprovalSettings) GetActiveKeyVersion() string

func (*AccessApprovalSettings) GetAncestorHasActiveKeyVersion

func (x *AccessApprovalSettings) GetAncestorHasActiveKeyVersion() bool

func (*AccessApprovalSettings) GetEnrolledAncestor

func (x *AccessApprovalSettings) GetEnrolledAncestor() bool

func (*AccessApprovalSettings) GetEnrolledServices

func (x *AccessApprovalSettings) GetEnrolledServices() []*EnrolledService

func (*AccessApprovalSettings) GetInvalidKeyVersion

func (x *AccessApprovalSettings) GetInvalidKeyVersion() bool

func (*AccessApprovalSettings) GetName

func (x *AccessApprovalSettings) GetName() string

func (*AccessApprovalSettings) GetNotificationEmails

func (x *AccessApprovalSettings) GetNotificationEmails() []string

func (*AccessApprovalSettings) ProtoMessage

func (*AccessApprovalSettings) ProtoMessage()

func (*AccessApprovalSettings) ProtoReflect

func (x *AccessApprovalSettings) ProtoReflect() protoreflect.Message

func (*AccessApprovalSettings) Reset

func (x *AccessApprovalSettings) Reset()

func (*AccessApprovalSettings) String

func (x *AccessApprovalSettings) String() string

AccessLocations

type AccessLocations struct {
	PrincipalOfficeCountry string "" /* 129 byte string literal not displayed */

	PrincipalPhysicalLocationCountry string "" /* 161 byte string literal not displayed */

}

Home office and physical location of the principal.

func (*AccessLocations) Descriptor

func (*AccessLocations) Descriptor() ([]byte, []int)

Deprecated: Use AccessLocations.ProtoReflect.Descriptor instead.

func (*AccessLocations) GetPrincipalOfficeCountry

func (x *AccessLocations) GetPrincipalOfficeCountry() string

func (*AccessLocations) GetPrincipalPhysicalLocationCountry

func (x *AccessLocations) GetPrincipalPhysicalLocationCountry() string

func (*AccessLocations) ProtoMessage

func (*AccessLocations) ProtoMessage()

func (*AccessLocations) ProtoReflect

func (x *AccessLocations) ProtoReflect() protoreflect.Message

func (*AccessLocations) Reset

func (x *AccessLocations) Reset()

func (*AccessLocations) String

func (x *AccessLocations) String() string

AccessReason

type AccessReason struct {

	// Type of access justification.
	Type AccessReason_Type `protobuf:"varint,1,opt,name=type,proto3,enum=google.cloud.accessapproval.v1.AccessReason_Type" json:"type,omitempty"`
	// More detail about certain reason types. See comments for each type above.
	Detail string `protobuf:"bytes,2,opt,name=detail,proto3" json:"detail,omitempty"`
	// contains filtered or unexported fields
}

func (*AccessReason) Descriptor

func (*AccessReason) Descriptor() ([]byte, []int)

Deprecated: Use AccessReason.ProtoReflect.Descriptor instead.

func (*AccessReason) GetDetail

func (x *AccessReason) GetDetail() string

func (*AccessReason) GetType

func (x *AccessReason) GetType() AccessReason_Type

func (*AccessReason) ProtoMessage

func (*AccessReason) ProtoMessage()

func (*AccessReason) ProtoReflect

func (x *AccessReason) ProtoReflect() protoreflect.Message

func (*AccessReason) Reset

func (x *AccessReason) Reset()

func (*AccessReason) String

func (x *AccessReason) String() string

AccessReason_Type

type AccessReason_Type int32

Type of access justification.

AccessReason_TYPE_UNSPECIFIED, AccessReason_CUSTOMER_INITIATED_SUPPORT, AccessReason_GOOGLE_INITIATED_SERVICE, AccessReason_GOOGLE_INITIATED_REVIEW, AccessReason_THIRD_PARTY_DATA_REQUEST, AccessReason_GOOGLE_RESPONSE_TO_PRODUCTION_ALERT

const (
	// Default value for proto, shouldn't be used.
	AccessReason_TYPE_UNSPECIFIED AccessReason_Type = 0
	// Customer made a request or raised an issue that required the principal to
	// access customer data. `detail` is of the form ("#####" is the issue ID):
	//
	//   - "Feedback Report: #####"
	//   - "Case Number: #####"
	//   - "Case ID: #####"
	//   - "E-PIN Reference: #####"
	//   - "Google-#####"
	//   - "T-#####"
	AccessReason_CUSTOMER_INITIATED_SUPPORT AccessReason_Type = 1
	// The principal accessed customer data in order to diagnose or resolve a
	// suspected issue in services. Often this access is used to confirm that
	// customers are not affected by a suspected service issue or to remediate a
	// reversible system issue.
	AccessReason_GOOGLE_INITIATED_SERVICE AccessReason_Type = 2
	// Google initiated service for security, fraud, abuse, or compliance
	// purposes.
	AccessReason_GOOGLE_INITIATED_REVIEW AccessReason_Type = 3
	// The principal was compelled to access customer data in order to respond
	// to a legal third party data request or process, including legal processes
	// from customers themselves.
	AccessReason_THIRD_PARTY_DATA_REQUEST AccessReason_Type = 4
	// The principal accessed customer data in order to diagnose or resolve a
	// suspected issue in services or a known outage.
	AccessReason_GOOGLE_RESPONSE_TO_PRODUCTION_ALERT AccessReason_Type = 5
)

func (AccessReason_Type) Descriptor

func (AccessReason_Type) Enum

func (AccessReason_Type) EnumDescriptor

func (AccessReason_Type) EnumDescriptor() ([]byte, []int)

Deprecated: Use AccessReason_Type.Descriptor instead.

func (AccessReason_Type) Number

func (AccessReason_Type) String

func (x AccessReason_Type) String() string

func (AccessReason_Type) Type

ApprovalRequest

type ApprovalRequest struct {
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`

	RequestedResourceName string `protobuf:"bytes,2,opt,name=requested_resource_name,json=requestedResourceName,proto3" json:"requested_resource_name,omitempty"`

	RequestedResourceProperties *ResourceProperties "" /* 144 byte string literal not displayed */

	RequestedReason *AccessReason `protobuf:"bytes,3,opt,name=requested_reason,json=requestedReason,proto3" json:"requested_reason,omitempty"`

	RequestedLocations *AccessLocations `protobuf:"bytes,4,opt,name=requested_locations,json=requestedLocations,proto3" json:"requested_locations,omitempty"`

	RequestTime *timestamppb.Timestamp `protobuf:"bytes,5,opt,name=request_time,json=requestTime,proto3" json:"request_time,omitempty"`

	RequestedExpiration *timestamppb.Timestamp `protobuf:"bytes,6,opt,name=requested_expiration,json=requestedExpiration,proto3" json:"requested_expiration,omitempty"`

	Decision isApprovalRequest_Decision `protobuf_oneof:"decision"`

}

A request for the customer to approve access to a resource.

func (*ApprovalRequest) Descriptor

func (*ApprovalRequest) Descriptor() ([]byte, []int)

Deprecated: Use ApprovalRequest.ProtoReflect.Descriptor instead.

func (*ApprovalRequest) GetApprove

func (x *ApprovalRequest) GetApprove() *ApproveDecision

func (*ApprovalRequest) GetDecision

func (m *ApprovalRequest) GetDecision() isApprovalRequest_Decision

func (*ApprovalRequest) GetDismiss

func (x *ApprovalRequest) GetDismiss() *DismissDecision

func (*ApprovalRequest) GetName

func (x *ApprovalRequest) GetName() string

func (*ApprovalRequest) GetRequestTime

func (x *ApprovalRequest) GetRequestTime() *timestamppb.Timestamp

func (*ApprovalRequest) GetRequestedExpiration

func (x *ApprovalRequest) GetRequestedExpiration() *timestamppb.Timestamp

func (*ApprovalRequest) GetRequestedLocations

func (x *ApprovalRequest) GetRequestedLocations() *AccessLocations

func (*ApprovalRequest) GetRequestedReason

func (x *ApprovalRequest) GetRequestedReason() *AccessReason

func (*ApprovalRequest) GetRequestedResourceName

func (x *ApprovalRequest) GetRequestedResourceName() string

func (*ApprovalRequest) GetRequestedResourceProperties

func (x *ApprovalRequest) GetRequestedResourceProperties() *ResourceProperties

func (*ApprovalRequest) ProtoMessage

func (*ApprovalRequest) ProtoMessage()

func (*ApprovalRequest) ProtoReflect

func (x *ApprovalRequest) ProtoReflect() protoreflect.Message

func (*ApprovalRequest) Reset

func (x *ApprovalRequest) Reset()

func (*ApprovalRequest) String

func (x *ApprovalRequest) String() string

ApprovalRequest_Approve

type ApprovalRequest_Approve struct {
	// Access was approved.
	Approve *ApproveDecision `protobuf:"bytes,7,opt,name=approve,proto3,oneof"`
}

ApprovalRequest_Dismiss

type ApprovalRequest_Dismiss struct {
	// The request was dismissed.
	Dismiss *DismissDecision `protobuf:"bytes,8,opt,name=dismiss,proto3,oneof"`
}

ApproveApprovalRequestMessage

type ApproveApprovalRequestMessage struct {

	// Name of the approval request to approve.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// The expiration time of this approval.
	ExpireTime *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=expire_time,json=expireTime,proto3" json:"expire_time,omitempty"`
	// contains filtered or unexported fields
}

Request to approve an ApprovalRequest.

func (*ApproveApprovalRequestMessage) Descriptor

func (*ApproveApprovalRequestMessage) Descriptor() ([]byte, []int)

Deprecated: Use ApproveApprovalRequestMessage.ProtoReflect.Descriptor instead.

func (*ApproveApprovalRequestMessage) GetExpireTime

func (*ApproveApprovalRequestMessage) GetName

func (*ApproveApprovalRequestMessage) ProtoMessage

func (*ApproveApprovalRequestMessage) ProtoMessage()

func (*ApproveApprovalRequestMessage) ProtoReflect

func (*ApproveApprovalRequestMessage) Reset

func (x *ApproveApprovalRequestMessage) Reset()

func (*ApproveApprovalRequestMessage) String

ApproveDecision

type ApproveDecision struct {

	// The time at which approval was granted.
	ApproveTime *timestamppb.Timestamp `protobuf:"bytes,1,opt,name=approve_time,json=approveTime,proto3" json:"approve_time,omitempty"`
	// The time at which the approval expires.
	ExpireTime *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=expire_time,json=expireTime,proto3" json:"expire_time,omitempty"`
	// If set, denotes the timestamp at which the approval is invalidated.
	InvalidateTime *timestamppb.Timestamp `protobuf:"bytes,3,opt,name=invalidate_time,json=invalidateTime,proto3" json:"invalidate_time,omitempty"`
	// The signature for the ApprovalRequest and details on how it was signed.
	SignatureInfo *SignatureInfo `protobuf:"bytes,4,opt,name=signature_info,json=signatureInfo,proto3" json:"signature_info,omitempty"`
	// True when the request has been auto-approved.
	AutoApproved bool `protobuf:"varint,5,opt,name=auto_approved,json=autoApproved,proto3" json:"auto_approved,omitempty"`
	// contains filtered or unexported fields
}

A decision that has been made to approve access to a resource.

func (*ApproveDecision) Descriptor

func (*ApproveDecision) Descriptor() ([]byte, []int)

Deprecated: Use ApproveDecision.ProtoReflect.Descriptor instead.

func (*ApproveDecision) GetApproveTime

func (x *ApproveDecision) GetApproveTime() *timestamppb.Timestamp

func (*ApproveDecision) GetAutoApproved

func (x *ApproveDecision) GetAutoApproved() bool

func (*ApproveDecision) GetExpireTime

func (x *ApproveDecision) GetExpireTime() *timestamppb.Timestamp

func (*ApproveDecision) GetInvalidateTime

func (x *ApproveDecision) GetInvalidateTime() *timestamppb.Timestamp

func (*ApproveDecision) GetSignatureInfo

func (x *ApproveDecision) GetSignatureInfo() *SignatureInfo

func (*ApproveDecision) ProtoMessage

func (*ApproveDecision) ProtoMessage()

func (*ApproveDecision) ProtoReflect

func (x *ApproveDecision) ProtoReflect() protoreflect.Message

func (*ApproveDecision) Reset

func (x *ApproveDecision) Reset()

func (*ApproveDecision) String

func (x *ApproveDecision) String() string

DeleteAccessApprovalSettingsMessage

type DeleteAccessApprovalSettingsMessage struct {

	// Name of the AccessApprovalSettings to delete.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

Request to delete access approval settings.

func (*DeleteAccessApprovalSettingsMessage) Descriptor

func (*DeleteAccessApprovalSettingsMessage) Descriptor() ([]byte, []int)

Deprecated: Use DeleteAccessApprovalSettingsMessage.ProtoReflect.Descriptor instead.

func (*DeleteAccessApprovalSettingsMessage) GetName

func (*DeleteAccessApprovalSettingsMessage) ProtoMessage

func (*DeleteAccessApprovalSettingsMessage) ProtoMessage()

func (*DeleteAccessApprovalSettingsMessage) ProtoReflect

func (*DeleteAccessApprovalSettingsMessage) Reset

func (*DeleteAccessApprovalSettingsMessage) String

DismissApprovalRequestMessage

type DismissApprovalRequestMessage struct {

	// Name of the ApprovalRequest to dismiss.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

Request to dismiss an approval request.

func (*DismissApprovalRequestMessage) Descriptor

func (*DismissApprovalRequestMessage) Descriptor() ([]byte, []int)

Deprecated: Use DismissApprovalRequestMessage.ProtoReflect.Descriptor instead.

func (*DismissApprovalRequestMessage) GetName

func (*DismissApprovalRequestMessage) ProtoMessage

func (*DismissApprovalRequestMessage) ProtoMessage()

func (*DismissApprovalRequestMessage) ProtoReflect

func (*DismissApprovalRequestMessage) Reset

func (x *DismissApprovalRequestMessage) Reset()

func (*DismissApprovalRequestMessage) String

DismissDecision

type DismissDecision struct {

	// The time at which the approval request was dismissed.
	DismissTime *timestamppb.Timestamp `protobuf:"bytes,1,opt,name=dismiss_time,json=dismissTime,proto3" json:"dismiss_time,omitempty"`
	// This field will be true if the ApprovalRequest was implicitly dismissed due
	// to inaction by the access approval approvers (the request is not acted
	// on by the approvers before the exiration time).
	Implicit bool `protobuf:"varint,2,opt,name=implicit,proto3" json:"implicit,omitempty"`
	// contains filtered or unexported fields
}

A decision that has been made to dismiss an approval request.

func (*DismissDecision) Descriptor

func (*DismissDecision) Descriptor() ([]byte, []int)

Deprecated: Use DismissDecision.ProtoReflect.Descriptor instead.

func (*DismissDecision) GetDismissTime

func (x *DismissDecision) GetDismissTime() *timestamppb.Timestamp

func (*DismissDecision) GetImplicit

func (x *DismissDecision) GetImplicit() bool

func (*DismissDecision) ProtoMessage

func (*DismissDecision) ProtoMessage()

func (*DismissDecision) ProtoReflect

func (x *DismissDecision) ProtoReflect() protoreflect.Message

func (*DismissDecision) Reset

func (x *DismissDecision) Reset()

func (*DismissDecision) String

func (x *DismissDecision) String() string

EnrolledService

type EnrolledService struct {
	CloudProduct string `protobuf:"bytes,1,opt,name=cloud_product,json=cloudProduct,proto3" json:"cloud_product,omitempty"`

	EnrollmentLevel EnrollmentLevel "" /* 159 byte string literal not displayed */

}

Represents the enrollment of a cloud resource into a specific service.

func (*EnrolledService) Descriptor

func (*EnrolledService) Descriptor() ([]byte, []int)

Deprecated: Use EnrolledService.ProtoReflect.Descriptor instead.

func (*EnrolledService) GetCloudProduct

func (x *EnrolledService) GetCloudProduct() string

func (*EnrolledService) GetEnrollmentLevel

func (x *EnrolledService) GetEnrollmentLevel() EnrollmentLevel

func (*EnrolledService) ProtoMessage

func (*EnrolledService) ProtoMessage()

func (*EnrolledService) ProtoReflect

func (x *EnrolledService) ProtoReflect() protoreflect.Message

func (*EnrolledService) Reset

func (x *EnrolledService) Reset()

func (*EnrolledService) String

func (x *EnrolledService) String() string

EnrollmentLevel

type EnrollmentLevel int32

Represents the type of enrollment for a given service to Access Approval.

EnrollmentLevel_ENROLLMENT_LEVEL_UNSPECIFIED, EnrollmentLevel_BLOCK_ALL

const (
	// Default value for proto, shouldn't be used.
	EnrollmentLevel_ENROLLMENT_LEVEL_UNSPECIFIED EnrollmentLevel = 0
	// Service is enrolled in Access Approval for all requests
	EnrollmentLevel_BLOCK_ALL EnrollmentLevel = 1
)

func (EnrollmentLevel) Descriptor

func (EnrollmentLevel) Enum

func (x EnrollmentLevel) Enum() *EnrollmentLevel

func (EnrollmentLevel) EnumDescriptor

func (EnrollmentLevel) EnumDescriptor() ([]byte, []int)

Deprecated: Use EnrollmentLevel.Descriptor instead.

func (EnrollmentLevel) Number

func (EnrollmentLevel) String

func (x EnrollmentLevel) String() string

func (EnrollmentLevel) Type

GetAccessApprovalServiceAccountMessage

type GetAccessApprovalServiceAccountMessage struct {

	// Name of the AccessApprovalServiceAccount to retrieve.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

Request to get an Access Approval service account.

func (*GetAccessApprovalServiceAccountMessage) Descriptor

func (*GetAccessApprovalServiceAccountMessage) Descriptor() ([]byte, []int)

Deprecated: Use GetAccessApprovalServiceAccountMessage.ProtoReflect.Descriptor instead.

func (*GetAccessApprovalServiceAccountMessage) GetName

func (*GetAccessApprovalServiceAccountMessage) ProtoMessage

func (*GetAccessApprovalServiceAccountMessage) ProtoReflect

func (*GetAccessApprovalServiceAccountMessage) Reset

func (*GetAccessApprovalServiceAccountMessage) String

GetAccessApprovalSettingsMessage

type GetAccessApprovalSettingsMessage struct {

	// The name of the AccessApprovalSettings to retrieve.
	// Format: "{projects|folders|organizations}/{id}/accessApprovalSettings"
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

Request to get access approval settings.

func (*GetAccessApprovalSettingsMessage) Descriptor

func (*GetAccessApprovalSettingsMessage) Descriptor() ([]byte, []int)

Deprecated: Use GetAccessApprovalSettingsMessage.ProtoReflect.Descriptor instead.

func (*GetAccessApprovalSettingsMessage) GetName

func (*GetAccessApprovalSettingsMessage) ProtoMessage

func (*GetAccessApprovalSettingsMessage) ProtoMessage()

func (*GetAccessApprovalSettingsMessage) ProtoReflect

func (*GetAccessApprovalSettingsMessage) Reset

func (*GetAccessApprovalSettingsMessage) String

GetApprovalRequestMessage

type GetApprovalRequestMessage struct {

	// The name of the approval request to retrieve.
	// Format:
	// "{projects|folders|organizations}/{id}/approvalRequests/{approval_request}"
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

Request to get an approval request.

func (*GetApprovalRequestMessage) Descriptor

func (*GetApprovalRequestMessage) Descriptor() ([]byte, []int)

Deprecated: Use GetApprovalRequestMessage.ProtoReflect.Descriptor instead.

func (*GetApprovalRequestMessage) GetName

func (x *GetApprovalRequestMessage) GetName() string

func (*GetApprovalRequestMessage) ProtoMessage

func (*GetApprovalRequestMessage) ProtoMessage()

func (*GetApprovalRequestMessage) ProtoReflect

func (*GetApprovalRequestMessage) Reset

func (x *GetApprovalRequestMessage) Reset()

func (*GetApprovalRequestMessage) String

func (x *GetApprovalRequestMessage) String() string

InvalidateApprovalRequestMessage

type InvalidateApprovalRequestMessage struct {

	// Name of the ApprovalRequest to invalidate.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

Request to invalidate an existing approval.

func (*InvalidateApprovalRequestMessage) Descriptor

func (*InvalidateApprovalRequestMessage) Descriptor() ([]byte, []int)

Deprecated: Use InvalidateApprovalRequestMessage.ProtoReflect.Descriptor instead.

func (*InvalidateApprovalRequestMessage) GetName

func (*InvalidateApprovalRequestMessage) ProtoMessage

func (*InvalidateApprovalRequestMessage) ProtoMessage()

func (*InvalidateApprovalRequestMessage) ProtoReflect

func (*InvalidateApprovalRequestMessage) Reset

func (*InvalidateApprovalRequestMessage) String

ListApprovalRequestsMessage

type ListApprovalRequestsMessage struct {

	// The parent resource. This may be "projects/{project}",
	// "folders/{folder}", or "organizations/{organization}".
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// A filter on the type of approval requests to retrieve. Must be one of the
	// following values:
	//
	//   - [not set]: Requests that are pending or have active approvals.
	//   - ALL: All requests.
	//   - PENDING: Only pending requests.
	//   - ACTIVE: Only active (i.e. currently approved) requests.
	//   - DISMISSED: Only requests that have been dismissed, or requests that
	//     are not approved and past expiration.
	//   - EXPIRED: Only requests that have been approved, and the approval has
	//     expired.
	//   - HISTORY: Active, dismissed and expired requests.
	Filter string `protobuf:"bytes,2,opt,name=filter,proto3" json:"filter,omitempty"`
	// Requested page size.
	PageSize int32 `protobuf:"varint,3,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// A token identifying the page of results to return.
	PageToken string `protobuf:"bytes,4,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// contains filtered or unexported fields
}

Request to list approval requests.

func (*ListApprovalRequestsMessage) Descriptor

func (*ListApprovalRequestsMessage) Descriptor() ([]byte, []int)

Deprecated: Use ListApprovalRequestsMessage.ProtoReflect.Descriptor instead.

func (*ListApprovalRequestsMessage) GetFilter

func (x *ListApprovalRequestsMessage) GetFilter() string

func (*ListApprovalRequestsMessage) GetPageSize

func (x *ListApprovalRequestsMessage) GetPageSize() int32

func (*ListApprovalRequestsMessage) GetPageToken

func (x *ListApprovalRequestsMessage) GetPageToken() string

func (*ListApprovalRequestsMessage) GetParent

func (x *ListApprovalRequestsMessage) GetParent() string

func (*ListApprovalRequestsMessage) ProtoMessage

func (*ListApprovalRequestsMessage) ProtoMessage()

func (*ListApprovalRequestsMessage) ProtoReflect

func (*ListApprovalRequestsMessage) Reset

func (x *ListApprovalRequestsMessage) Reset()

func (*ListApprovalRequestsMessage) String

func (x *ListApprovalRequestsMessage) String() string

ListApprovalRequestsResponse

type ListApprovalRequestsResponse struct {

	// Approval request details.
	ApprovalRequests []*ApprovalRequest `protobuf:"bytes,1,rep,name=approval_requests,json=approvalRequests,proto3" json:"approval_requests,omitempty"`
	// Token to retrieve the next page of results, or empty if there are no more.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

Response to listing of ApprovalRequest objects.

func (*ListApprovalRequestsResponse) Descriptor

func (*ListApprovalRequestsResponse) Descriptor() ([]byte, []int)

Deprecated: Use ListApprovalRequestsResponse.ProtoReflect.Descriptor instead.

func (*ListApprovalRequestsResponse) GetApprovalRequests

func (x *ListApprovalRequestsResponse) GetApprovalRequests() []*ApprovalRequest

func (*ListApprovalRequestsResponse) GetNextPageToken

func (x *ListApprovalRequestsResponse) GetNextPageToken() string

func (*ListApprovalRequestsResponse) ProtoMessage

func (*ListApprovalRequestsResponse) ProtoMessage()

func (*ListApprovalRequestsResponse) ProtoReflect

func (*ListApprovalRequestsResponse) Reset

func (x *ListApprovalRequestsResponse) Reset()

func (*ListApprovalRequestsResponse) String

ResourceProperties

type ResourceProperties struct {

	// Whether an approval will exclude the descendants of the resource being
	// requested.
	ExcludesDescendants bool `protobuf:"varint,1,opt,name=excludes_descendants,json=excludesDescendants,proto3" json:"excludes_descendants,omitempty"`
	// contains filtered or unexported fields
}

The properties associated with the resource of the request.

func (*ResourceProperties) Descriptor

func (*ResourceProperties) Descriptor() ([]byte, []int)

Deprecated: Use ResourceProperties.ProtoReflect.Descriptor instead.

func (*ResourceProperties) GetExcludesDescendants

func (x *ResourceProperties) GetExcludesDescendants() bool

func (*ResourceProperties) ProtoMessage

func (*ResourceProperties) ProtoMessage()

func (*ResourceProperties) ProtoReflect

func (x *ResourceProperties) ProtoReflect() protoreflect.Message

func (*ResourceProperties) Reset

func (x *ResourceProperties) Reset()

func (*ResourceProperties) String

func (x *ResourceProperties) String() string

SignatureInfo

type SignatureInfo struct {

	// The digital signature.
	Signature []byte `protobuf:"bytes,1,opt,name=signature,proto3" json:"signature,omitempty"`
	// How this signature may be verified.
	//
	// Types that are assignable to VerificationInfo:
	//
	//	*SignatureInfo_GooglePublicKeyPem
	//	*SignatureInfo_CustomerKmsKeyVersion
	VerificationInfo isSignatureInfo_VerificationInfo `protobuf_oneof:"verification_info"`
	// contains filtered or unexported fields
}

Information about the digital signature of the resource.

func (*SignatureInfo) Descriptor

func (*SignatureInfo) Descriptor() ([]byte, []int)

Deprecated: Use SignatureInfo.ProtoReflect.Descriptor instead.

func (*SignatureInfo) GetCustomerKmsKeyVersion

func (x *SignatureInfo) GetCustomerKmsKeyVersion() string

func (*SignatureInfo) GetGooglePublicKeyPem

func (x *SignatureInfo) GetGooglePublicKeyPem() string

func (*SignatureInfo) GetSignature

func (x *SignatureInfo) GetSignature() []byte

func (*SignatureInfo) GetVerificationInfo

func (m *SignatureInfo) GetVerificationInfo() isSignatureInfo_VerificationInfo

func (*SignatureInfo) ProtoMessage

func (*SignatureInfo) ProtoMessage()

func (*SignatureInfo) ProtoReflect

func (x *SignatureInfo) ProtoReflect() protoreflect.Message

func (*SignatureInfo) Reset

func (x *SignatureInfo) Reset()

func (*SignatureInfo) String

func (x *SignatureInfo) String() string

SignatureInfo_CustomerKmsKeyVersion

type SignatureInfo_CustomerKmsKeyVersion struct {
	// The resource name of the customer CryptoKeyVersion used for signing.
	CustomerKmsKeyVersion string `protobuf:"bytes,3,opt,name=customer_kms_key_version,json=customerKmsKeyVersion,proto3,oneof"`
}

SignatureInfo_GooglePublicKeyPem

type SignatureInfo_GooglePublicKeyPem struct {
	// The public key for the Google default signing, encoded in PEM format. The
	// signature was created using a private key which may be verified using
	// this public key.
	GooglePublicKeyPem string `protobuf:"bytes,2,opt,name=google_public_key_pem,json=googlePublicKeyPem,proto3,oneof"`
}

UnimplementedAccessApprovalServer

type UnimplementedAccessApprovalServer struct {
}

UnimplementedAccessApprovalServer can be embedded to have forward compatible implementations.

func (*UnimplementedAccessApprovalServer) ApproveApprovalRequest

func (*UnimplementedAccessApprovalServer) DeleteAccessApprovalSettings

func (*UnimplementedAccessApprovalServer) DismissApprovalRequest

func (*UnimplementedAccessApprovalServer) GetAccessApprovalServiceAccount

func (*UnimplementedAccessApprovalServer) GetAccessApprovalSettings

func (*UnimplementedAccessApprovalServer) GetApprovalRequest

func (*UnimplementedAccessApprovalServer) InvalidateApprovalRequest

func (*UnimplementedAccessApprovalServer) ListApprovalRequests

func (*UnimplementedAccessApprovalServer) UpdateAccessApprovalSettings

UpdateAccessApprovalSettingsMessage

type UpdateAccessApprovalSettingsMessage struct {

	// The new AccessApprovalSettings.
	Settings *AccessApprovalSettings `protobuf:"bytes,1,opt,name=settings,proto3" json:"settings,omitempty"`
	// The update mask applies to the settings. Only the top level fields of
	// AccessApprovalSettings (notification_emails & enrolled_services) are
	// supported. For each field, if it is included, the currently stored value
	// will be entirely overwritten with the value of the field passed in this
	// request.
	//
	// For the `FieldMask` definition, see
	// https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#fieldmask
	// If this field is left unset, only the notification_emails field will be
	// updated.
	UpdateMask *fieldmaskpb.FieldMask `protobuf:"bytes,2,opt,name=update_mask,json=updateMask,proto3" json:"update_mask,omitempty"`
	// contains filtered or unexported fields
}

Request to update access approval settings.

func (*UpdateAccessApprovalSettingsMessage) Descriptor

func (*UpdateAccessApprovalSettingsMessage) Descriptor() ([]byte, []int)

Deprecated: Use UpdateAccessApprovalSettingsMessage.ProtoReflect.Descriptor instead.

func (*UpdateAccessApprovalSettingsMessage) GetSettings

func (*UpdateAccessApprovalSettingsMessage) GetUpdateMask

func (*UpdateAccessApprovalSettingsMessage) ProtoMessage

func (*UpdateAccessApprovalSettingsMessage) ProtoMessage()

func (*UpdateAccessApprovalSettingsMessage) ProtoReflect

func (*UpdateAccessApprovalSettingsMessage) Reset

func (*UpdateAccessApprovalSettingsMessage) String