happygapi.iam.projects — happygapi 0.4.8

Identity and Access Management (IAM) API: projects. Manages identity and access control for Google Cloud Platform resources, including the creation of service accounts, which you can use to authenticate to Google and make API calls. See: https://cloud.google.com/iam/api/reference/rest/v1/projects

locations-workloadIdentityPools-create$ clj

(locations-workloadIdentityPools-create$ auth parameters body)

https://cloud.google.com/iam/api/reference/rest/v1/projects/locations/workloadIdentityPools/create

Required parameters: parent

Optional parameters: workloadIdentityPoolId

Body:

{:description string, :disabled boolean, :name string, :state string, :displayName string}

Creates a new WorkloadIdentityPool. You cannot reuse the name of a deleted pool until 30 days after deletion.

locations-workloadIdentityPools-delete$ clj

(locations-workloadIdentityPools-delete$ auth parameters)

https://cloud.google.com/iam/api/reference/rest/v1/projects/locations/workloadIdentityPools/delete

Required parameters: name

Optional parameters: none

Deletes a WorkloadIdentityPool. You cannot use a deleted pool to exchange external credentials for Google Cloud credentials. However, deletion does not revoke credentials that have already been issued. Credentials issued for a deleted pool do not grant access to resources. If the pool is undeleted, and the credentials are not expired, they grant access again. You can undelete a pool for 30 days. After 30 days, deletion is permanent. You cannot update deleted pools. However, you can view and list them.

locations-workloadIdentityPools-get$ clj

(locations-workloadIdentityPools-get$ auth parameters)

https://cloud.google.com/iam/api/reference/rest/v1/projects/locations/workloadIdentityPools/get

Required parameters: name

Optional parameters: none

Gets an individual WorkloadIdentityPool.

locations-workloadIdentityPools-list$ clj

(locations-workloadIdentityPools-list$ auth parameters)

https://cloud.google.com/iam/api/reference/rest/v1/projects/locations/workloadIdentityPools/list

Required parameters: parent

Optional parameters: pageToken, pageSize, showDeleted

Lists all non-deleted WorkloadIdentityPools in a project. If show_deleted is set to true, then deleted pools are also listed.

locations-workloadIdentityPools-operations-get$ clj

(locations-workloadIdentityPools-operations-get$ auth parameters)

https://cloud.google.com/iam/api/reference/rest/v1/projects/locations/workloadIdentityPools/operations/get

Required parameters: name

Optional parameters: none

Gets the latest state of a long-running operation. Clients can use this method to poll the operation result at intervals as recommended by the API service.

locations-workloadIdentityPools-patch$ clj

(locations-workloadIdentityPools-patch$ auth parameters body)

https://cloud.google.com/iam/api/reference/rest/v1/projects/locations/workloadIdentityPools/patch

Required parameters: name

Optional parameters: updateMask

Body:

{:description string, :disabled boolean, :name string, :state string, :displayName string}

Updates an existing WorkloadIdentityPool.

locations-workloadIdentityPools-providers-create$ clj

(locations-workloadIdentityPools-providers-create$ auth parameters body)

https://cloud.google.com/iam/api/reference/rest/v1/projects/locations/workloadIdentityPools/providers/create

Required parameters: parent

Optional parameters: workloadIdentityPoolProviderId

Body:

{:description string, :aws {:accountId string}, :disabled boolean, :oidc {:issuerUri string, :allowedAudiences [string]}, :displayName string, :name string, :state string, :attributeCondition string, :attributeMapping {}}

Creates a new WorkloadIdentityPoolProvider in a WorkloadIdentityPool. You cannot reuse the name of a deleted provider until 30 days after deletion.

locations-workloadIdentityPools-providers-delete$ clj

(locations-workloadIdentityPools-providers-delete$ auth parameters)

https://cloud.google.com/iam/api/reference/rest/v1/projects/locations/workloadIdentityPools/providers/delete

Required parameters: name

Optional parameters: none

Deletes a WorkloadIdentityPoolProvider. Deleting a provider does not revoke credentials that have already been issued; they continue to grant access. You can undelete a provider for 30 days. After 30 days, deletion is permanent. You cannot update deleted providers. However, you can view and list them.

locations-workloadIdentityPools-providers-get$ clj

(locations-workloadIdentityPools-providers-get$ auth parameters)

https://cloud.google.com/iam/api/reference/rest/v1/projects/locations/workloadIdentityPools/providers/get

Required parameters: name

Optional parameters: none

Gets an individual WorkloadIdentityPoolProvider.

locations-workloadIdentityPools-providers-list$ clj

(locations-workloadIdentityPools-providers-list$ auth parameters)

https://cloud.google.com/iam/api/reference/rest/v1/projects/locations/workloadIdentityPools/providers/list

Required parameters: parent

Optional parameters: pageToken, pageSize, showDeleted

Lists all non-deleted WorkloadIdentityPoolProviders in a WorkloadIdentityPool. If show_deleted is set to true, then deleted providers are also listed.

locations-workloadIdentityPools-providers-operations-get$ clj

(locations-workloadIdentityPools-providers-operations-get$ auth parameters)

https://cloud.google.com/iam/api/reference/rest/v1/projects/locations/workloadIdentityPools/providers/operations/get

Required parameters: name

Optional parameters: none

Gets the latest state of a long-running operation. Clients can use this method to poll the operation result at intervals as recommended by the API service.

locations-workloadIdentityPools-providers-patch$ clj

(locations-workloadIdentityPools-providers-patch$ auth parameters body)

https://cloud.google.com/iam/api/reference/rest/v1/projects/locations/workloadIdentityPools/providers/patch

Required parameters: name

Optional parameters: updateMask

Body:

{:description string, :aws {:accountId string}, :disabled boolean, :oidc {:issuerUri string, :allowedAudiences [string]}, :displayName string, :name string, :state string, :attributeCondition string, :attributeMapping {}}

Updates an existing WorkloadIdentityPoolProvider.

locations-workloadIdentityPools-providers-undelete$ clj

(locations-workloadIdentityPools-providers-undelete$ auth parameters body)

https://cloud.google.com/iam/api/reference/rest/v1/projects/locations/workloadIdentityPools/providers/undelete

Required parameters: name

Optional parameters: none

Body:

{}

Undeletes a WorkloadIdentityPoolProvider, as long as it was deleted fewer than 30 days ago.

locations-workloadIdentityPools-undelete$ clj

(locations-workloadIdentityPools-undelete$ auth parameters body)

https://cloud.google.com/iam/api/reference/rest/v1/projects/locations/workloadIdentityPools/undelete

Required parameters: name

Optional parameters: none

Body:

{}

Undeletes a WorkloadIdentityPool, as long as it was deleted fewer than 30 days ago.

roles-create$ clj

(roles-create$ auth parameters body)

https://cloud.google.com/iam/api/reference/rest/v1/projects/roles/create

Required parameters: parent

Optional parameters: none

Body:

{:role {:name string, :deleted boolean, :includedPermissions [string], :description string, :title string, :stage string, :etag string}, :roleId string}

Creates a new custom Role.

roles-delete$ clj

(roles-delete$ auth parameters)

https://cloud.google.com/iam/api/reference/rest/v1/projects/roles/delete

Required parameters: name

Optional parameters: etag

Deletes a custom Role. When you delete a custom role, the following changes occur immediately: * You cannot bind a member to the custom role in an IAM Policy. * Existing bindings to the custom role are not changed, but they have no effect. * By default, the response from ListRoles does not include the custom role. You have 7 days to undelete the custom role. After 7 days, the following changes occur: * The custom role is permanently deleted and cannot be recovered. * If an IAM policy contains a binding to the custom role, the binding is permanently removed.

roles-get$ clj

(roles-get$ auth parameters)

https://cloud.google.com/iam/api/reference/rest/v1/projects/roles/get

Required parameters: name

Optional parameters: none

Gets the definition of a Role.

roles-list$ clj

(roles-list$ auth parameters)

https://cloud.google.com/iam/api/reference/rest/v1/projects/roles/list

Required parameters: parent

Optional parameters: view, pageSize, pageToken, showDeleted

Lists every predefined Role that IAM supports, or every custom role that is defined for an organization or project.

roles-patch$ clj

(roles-patch$ auth parameters body)

https://cloud.google.com/iam/api/reference/rest/v1/projects/roles/patch

Required parameters: name

Optional parameters: updateMask

Body:

{:name string, :deleted boolean, :includedPermissions [string], :description string, :title string, :stage string, :etag string}

Updates the definition of a custom Role.

roles-undelete$ clj

(roles-undelete$ auth parameters body)

https://cloud.google.com/iam/api/reference/rest/v1/projects/roles/undelete

Required parameters: name

Optional parameters: none

Body:

{:etag string}

Undeletes a custom Role.

serviceAccounts-create$ clj

(serviceAccounts-create$ auth parameters body)

https://cloud.google.com/iam/api/reference/rest/v1/projects/serviceAccounts/create

Required parameters: name

Optional parameters: none

Body:

{:serviceAccount {:description string, :oauth2ClientId string, :email string, :disabled boolean, :displayName string, :name string, :etag string, :uniqueId string, :projectId string}, :accountId string}

Creates a ServiceAccount.

serviceAccounts-delete$ clj

(serviceAccounts-delete$ auth parameters)

https://cloud.google.com/iam/api/reference/rest/v1/projects/serviceAccounts/delete

Required parameters: name

Optional parameters: none

Deletes a ServiceAccount. Warning: After you delete a service account, you might not be able to undelete it. If you know that you need to re-enable the service account in the future, use DisableServiceAccount instead. If you delete a service account, IAM permanently removes the service account 30 days later. Google Cloud cannot recover the service account after it is permanently removed, even if you file a support request. To help avoid unplanned outages, we recommend that you disable the service account before you delete it. Use DisableServiceAccount to disable the service account, then wait at least 24 hours and watch for unintended consequences. If there are no unintended consequences, you can delete the service account.

serviceAccounts-disable$ clj

(serviceAccounts-disable$ auth parameters body)

https://cloud.google.com/iam/api/reference/rest/v1/projects/serviceAccounts/disable

Required parameters: name

Optional parameters: none

Body:

{}

Disables a ServiceAccount immediately. If an application uses the service account to authenticate, that application can no longer call Google APIs or access Google Cloud resources. Existing access tokens for the service account are rejected, and requests for new access tokens will fail. To re-enable the service account, use EnableServiceAccount. After you re-enable the service account, its existing access tokens will be accepted, and you can request new access tokens. To help avoid unplanned outages, we recommend that you disable the service account before you delete it. Use this method to disable the service account, then wait at least 24 hours and watch for unintended consequences. If there are no unintended consequences, you can delete the service account with DeleteServiceAccount.

serviceAccounts-enable$ clj

(serviceAccounts-enable$ auth parameters body)

https://cloud.google.com/iam/api/reference/rest/v1/projects/serviceAccounts/enable

Required parameters: name

Optional parameters: none

Body:

{}

Enables a ServiceAccount that was disabled by DisableServiceAccount. If the service account is already enabled, then this method has no effect. If the service account was disabled by other means—for example, if Google disabled the service account because it was compromised—you cannot use this method to enable the service account.

serviceAccounts-get$ clj

(serviceAccounts-get$ auth parameters)

https://cloud.google.com/iam/api/reference/rest/v1/projects/serviceAccounts/get

Required parameters: name

Optional parameters: none

Gets a ServiceAccount.

serviceAccounts-getIamPolicy$ clj

(serviceAccounts-getIamPolicy$ auth parameters)

https://cloud.google.com/iam/api/reference/rest/v1/projects/serviceAccounts/getIamPolicy

Required parameters: resource

Optional parameters: options.requestedPolicyVersion

Gets the IAM policy that is attached to a ServiceAccount. This IAM policy specifies which members have access to the service account. This method does not tell you whether the service account has been granted any roles on other resources. To check whether a service account has role grants on a resource, use the getIamPolicy method for that resource. For example, to view the role grants for a project, call the Resource Manager API's projects.getIamPolicy method.

serviceAccounts-keys-create$ clj

(serviceAccounts-keys-create$ auth parameters body)

https://cloud.google.com/iam/api/reference/rest/v1/projects/serviceAccounts/keys/create

Required parameters: name

Optional parameters: none

Body:

{:privateKeyType string, :keyAlgorithm string}

Creates a ServiceAccountKey.

serviceAccounts-keys-delete$ clj

(serviceAccounts-keys-delete$ auth parameters)

https://cloud.google.com/iam/api/reference/rest/v1/projects/serviceAccounts/keys/delete

Required parameters: name

Optional parameters: none

Deletes a ServiceAccountKey. Deleting a service account key does not revoke short-lived credentials that have been issued based on the service account key.

serviceAccounts-keys-disable$ clj

(serviceAccounts-keys-disable$ auth parameters body)

https://cloud.google.com/iam/api/reference/rest/v1/projects/serviceAccounts/keys/disable

Required parameters: name

Optional parameters: none

Body:

{}

Disable a ServiceAccountKey. A disabled service account key can be enabled through EnableServiceAccountKey.

serviceAccounts-keys-enable$ clj

(serviceAccounts-keys-enable$ auth parameters body)

https://cloud.google.com/iam/api/reference/rest/v1/projects/serviceAccounts/keys/enable

Required parameters: name

Optional parameters: none

Body:

{}

Enable a ServiceAccountKey.

serviceAccounts-keys-get$ clj

(serviceAccounts-keys-get$ auth parameters)

https://cloud.google.com/iam/api/reference/rest/v1/projects/serviceAccounts/keys/get

Required parameters: name

Optional parameters: publicKeyType

Gets a ServiceAccountKey.

serviceAccounts-keys-list$ clj

(serviceAccounts-keys-list$ auth parameters)

https://cloud.google.com/iam/api/reference/rest/v1/projects/serviceAccounts/keys/list

Required parameters: name

Optional parameters: keyTypes

Lists every ServiceAccountKey for a service account.

serviceAccounts-keys-upload$ clj

(serviceAccounts-keys-upload$ auth parameters body)

https://cloud.google.com/iam/api/reference/rest/v1/projects/serviceAccounts/keys/upload

Required parameters: name

Optional parameters: none

Body:

{:publicKeyData string}

Creates a ServiceAccountKey, using a public key that you provide.

serviceAccounts-list$ clj

(serviceAccounts-list$ auth parameters)

https://cloud.google.com/iam/api/reference/rest/v1/projects/serviceAccounts/list

Required parameters: name

Optional parameters: pageSize, pageToken

Lists every ServiceAccount that belongs to a specific project.

serviceAccounts-patch$ clj

(serviceAccounts-patch$ auth parameters body)

https://cloud.google.com/iam/api/reference/rest/v1/projects/serviceAccounts/patch

Required parameters: name

Optional parameters: none

Body:

{:serviceAccount {:description string, :oauth2ClientId string, :email string, :disabled boolean, :displayName string, :name string, :etag string, :uniqueId string, :projectId string}, :updateMask string}

Patches a ServiceAccount.

serviceAccounts-setIamPolicy$ clj

(serviceAccounts-setIamPolicy$ auth parameters body)

https://cloud.google.com/iam/api/reference/rest/v1/projects/serviceAccounts/setIamPolicy

Required parameters: resource

Optional parameters: none

Body:

{:updateMask string, :policy {:version integer, :etag string, :bindings [Binding], :auditConfigs [AuditConfig]}}

Sets the IAM policy that is attached to a ServiceAccount. Use this method to grant or revoke access to the service account. For example, you could grant a member the ability to impersonate the service account. This method does not enable the service account to access other resources. To grant roles to a service account on a resource, follow these steps: 1. Call the resource's getIamPolicy method to get its current IAM policy. 2. Edit the policy so that it binds the service account to an IAM role for the resource. 3. Call the resource's setIamPolicy method to update its IAM policy. For detailed instructions, see Granting roles to a service account for specific resources.

serviceAccounts-signBlob$ clj

(serviceAccounts-signBlob$ auth parameters body)

https://cloud.google.com/iam/api/reference/rest/v1/projects/serviceAccounts/signBlob

Required parameters: name

Optional parameters: none

Body:

{:bytesToSign string}

Note: This method is deprecated. Use the signBlob method in the IAM Service Account Credentials API instead. If you currently use this method, see the migration guide for instructions. Signs a blob using the system-managed private key for a ServiceAccount.

serviceAccounts-signJwt$ clj

(serviceAccounts-signJwt$ auth parameters body)

https://cloud.google.com/iam/api/reference/rest/v1/projects/serviceAccounts/signJwt

Required parameters: name

Optional parameters: none

Body:

{:payload string}

Note: This method is deprecated. Use the signJwt method in the IAM Service Account Credentials API instead. If you currently use this method, see the migration guide for instructions. Signs a JSON Web Token (JWT) using the system-managed private key for a ServiceAccount.

serviceAccounts-testIamPermissions$ clj

(serviceAccounts-testIamPermissions$ auth parameters body)

https://cloud.google.com/iam/api/reference/rest/v1/projects/serviceAccounts/testIamPermissions

Required parameters: resource

Optional parameters: none

Body:

{:permissions [string]}

Tests whether the caller has the specified permissions on a ServiceAccount.

serviceAccounts-undelete$ clj

(serviceAccounts-undelete$ auth parameters body)

https://cloud.google.com/iam/api/reference/rest/v1/projects/serviceAccounts/undelete

Required parameters: name

Optional parameters: none

Body:

{}

Restores a deleted ServiceAccount. Important: It is not always possible to restore a deleted service account. Use this method only as a last resort. After you delete a service account, IAM permanently removes the service account 30 days later. There is no way to restore a deleted service account that has been permanently removed.

serviceAccounts-update$ clj

(serviceAccounts-update$ auth parameters body)

https://cloud.google.com/iam/api/reference/rest/v1/projects/serviceAccounts/update

Required parameters: name

Optional parameters: none

Body:

{:description string, :oauth2ClientId string, :email string, :disabled boolean, :displayName string, :name string, :etag string, :uniqueId string, :projectId string}

Note: We are in the process of deprecating this method. Use PatchServiceAccount instead. Updates a ServiceAccount. You can update only the display_name and description fields.