type AccessDeniedPageSettings struct {// AccessDeniedPageUri: The URI to be redirected to when access is denied.AccessDeniedPageUristring `json:"accessDeniedPageUri,omitempty"`// GenerateTroubleshootingUri: Whether to generate a troubleshooting URL on// access denied events to this application.GenerateTroubleshootingUribool `json:"generateTroubleshootingUri,omitempty"`// RemediationTokenGenerationEnabled: Whether to generate remediation token on// access denied events to this application.RemediationTokenGenerationEnabledbool `json:"remediationTokenGenerationEnabled,omitempty"`// ForceSendFields is a list of field names (e.g. "AccessDeniedPageUri") to// unconditionally include in API requests. By default, fields with empty or// default values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "AccessDeniedPageUri") to include// in API requests with the JSON null value. By default, fields with empty// values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (AccessDeniedPageSettings)MarshalJSON¶added inv0.22.0

func (sAccessDeniedPageSettings) MarshalJSON() ([]byte,error)

type AccessSettings struct {// AllowedDomainsSettings: Optional. Settings to configure and enable allowed// domains.AllowedDomainsSettings *AllowedDomainsSettings `json:"allowedDomainsSettings,omitempty"`// CorsSettings: Optional. Configuration to allow cross-origin requests via// IAP.CorsSettings *CorsSettings `json:"corsSettings,omitempty"`// GcipSettings: Optional. GCIP claims and endpoint configurations for 3p// identity providers.GcipSettings *GcipSettings `json:"gcipSettings,omitempty"`// IdentitySources: Optional. Identity sources that IAP can use to authenticate// the end user. Only one identity source can be configured.//// Possible values://   "IDENTITY_SOURCE_UNSPECIFIED" - IdentitySource Unspecified. When selected,// IAP relies on which identity settings are fully configured to redirect the// traffic to. The precedence order is WorkforceIdentitySettings >// GcipSettings. If none is set, default to use Google identity.//   "WORKFORCE_IDENTITY_FEDERATION" - Use external identities set up on Google// Cloud Workforce Identity Federation.IdentitySources []string `json:"identitySources,omitempty"`// OauthSettings: Optional. Settings to configure IAP's OAuth behavior.OauthSettings *OAuthSettings `json:"oauthSettings,omitempty"`// PolicyDelegationSettings: Optional. Settings to allow google-internal teams// to use IAP for apps hosted in a tenant project.PolicyDelegationSettings *PolicyDelegationSettings `json:"policyDelegationSettings,omitempty"`// ReauthSettings: Optional. Settings to configure reauthentication policies in// IAP.ReauthSettings *ReauthSettings `json:"reauthSettings,omitempty"`// WorkforceIdentitySettings: Optional. Settings to configure the workforce// identity federation, including workforce pools and OAuth 2.0 settings.WorkforceIdentitySettings *WorkforceIdentitySettings `json:"workforceIdentitySettings,omitempty"`// ForceSendFields is a list of field names (e.g. "AllowedDomainsSettings") to// unconditionally include in API requests. By default, fields with empty or// default values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "AllowedDomainsSettings") to// include in API requests with the JSON null value. By default, fields with// empty values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (AccessSettings)MarshalJSON¶added inv0.12.0

func (sAccessSettings) MarshalJSON() ([]byte,error)

type AllowedDomainsSettings struct {// Domains: Optional. List of trusted domains.Domains []string `json:"domains,omitempty"`// Enable: Optional. Configuration for customers to opt in for the feature.Enablebool `json:"enable,omitempty"`// ForceSendFields is a list of field names (e.g. "Domains") to unconditionally// include in API requests. By default, fields with empty or default values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "Domains") to include in API// requests with the JSON null value. By default, fields with empty values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (AllowedDomainsSettings)MarshalJSON¶added inv0.89.0

func (sAllowedDomainsSettings) MarshalJSON() ([]byte,error)

type ApplicationSettings struct {// AccessDeniedPageSettings: Optional. Customization for Access Denied page.AccessDeniedPageSettings *AccessDeniedPageSettings `json:"accessDeniedPageSettings,omitempty"`// AttributePropagationSettings: Optional. Settings to configure attribute// propagation.AttributePropagationSettings *AttributePropagationSettings `json:"attributePropagationSettings,omitempty"`// CookieDomain: The Domain value to set for cookies generated by IAP. This// value is not validated by the API, but will be ignored at runtime if// invalid.CookieDomainstring `json:"cookieDomain,omitempty"`// CsmSettings: Optional. Settings to configure IAP's behavior for a service// mesh.CsmSettings *CsmSettings `json:"csmSettings,omitempty"`// ForceSendFields is a list of field names (e.g. "AccessDeniedPageSettings")// to unconditionally include in API requests. By default, fields with empty or// default values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "AccessDeniedPageSettings") to// include in API requests with the JSON null value. By default, fields with// empty values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (ApplicationSettings)MarshalJSON¶added inv0.12.0

func (sApplicationSettings) MarshalJSON() ([]byte,error)

type AttributePropagationSettings struct {// Enable: Optional. Whether the provided attribute propagation settings should// be evaluated on user requests. If set to true, attributes returned from the// expression will be propagated in the set output credentials.Enablebool `json:"enable,omitempty"`// Expression: Optional. Raw string CEL expression. Must return a list of// attributes. A maximum of 45 attributes can be selected. Expressions can// select different attribute types from `attributes`:// `attributes.saml_attributes`, `attributes.iap_attributes`. The following// functions are supported: - filter `.filter(, )`: Returns a subset of “// where “ is true for every item. - in ` in `: Returns true if “ contains// “. - selectByName `.selectByName()`: Returns the attribute in “ with the// given “ name, otherwise returns empty. - emitAs `.emitAs()`: Sets the “// name field to the given “ for propagation in selected output credentials. -// strict `.strict()`: Ignores the `x-goog-iap-attr-` prefix for the provided// “ when propagating with the `HEADER` output credential, such as request// headers. - append `.append()` OR `.append()`: Appends the provided “ or “// to the end of “. Example expression: `attributes.saml_attributes.filter(x,// x.name in// ['test']).append(attributes.iap_attributes.selectByName('exact').emitAs('cust// om').strict())`Expressionstring `json:"expression,omitempty"`// OutputCredentials: Optional. Which output credentials attributes selected by// the CEL expression should be propagated in. All attributes will be fully// duplicated in each selected output credential.//// Possible values://   "OUTPUT_CREDENTIALS_UNSPECIFIED" - An output credential is required.//   "HEADER" - Propagate attributes in the headers with "x-goog-iap-attr-"// prefix.//   "JWT" - Propagate attributes in the JWT of the form: "additional_claims":// { "my_attribute": ["value1", "value2"] }`//   "RCTOKEN" - Propagate attributes in the RCToken of the form:// "additional_claims": { "my_attribute": ["value1", "value2"] }`OutputCredentials []string `json:"outputCredentials,omitempty"`// ForceSendFields is a list of field names (e.g. "Enable") to unconditionally// include in API requests. By default, fields with empty or default values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "Enable") to include in API// requests with the JSON null value. By default, fields with empty values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (AttributePropagationSettings)MarshalJSON¶added inv0.96.0

func (sAttributePropagationSettings) MarshalJSON() ([]byte,error)

type Binding struct {// Condition: The condition that is associated with this binding. If the// condition evaluates to `true`, then this binding applies to the current// request. If the condition evaluates to `false`, then this binding does not// apply to the current request. However, a different role binding might grant// the same role to one or more of the principals in this binding. To learn// which resources support conditions in their IAM policies, see the IAM// documentation// (https://cloud.google.com/iam/help/conditions/resource-policies).Condition *Expr `json:"condition,omitempty"`// Members: Specifies the principals requesting access for a Google Cloud// resource. `members` can have the following values: * `allUsers`: A special// identifier that represents anyone who is on the internet; with or without a// Google account. * `allAuthenticatedUsers`: A special identifier that// represents anyone who is authenticated with a Google account or a service// account. Does not include identities that come from external identity// providers (IdPs) through identity federation. * `user:{emailid}`: An email// address that represents a specific Google account. For example,// `alice@example.com` . * `serviceAccount:{emailid}`: An email address that// represents a Google service account. For example,// `my-other-app@appspot.gserviceaccount.com`. *// `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An// identifier for a Kubernetes service account// (https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts).// For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. *// `group:{emailid}`: An email address that represents a Google group. For// example, `admins@example.com`. * `domain:{domain}`: The G Suite domain// (primary) that represents all the users of that domain. For example,// `google.com` or `example.com`. *// `principal://iam.googleapis.com/locations/global/workforcePools/{pool_id}/sub// ject/{subject_attribute_value}`: A single identity in a workforce identity// pool. *// `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/// group/{group_id}`: All workforce identities in a group. *// `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/// attribute.{attribute_name}/{attribute_value}`: All workforce identities with// a specific attribute value. *// `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/// *`: All identities in a workforce identity pool. *// `principal://iam.googleapis.com/projects/{project_number}/locations/global/wo// rkloadIdentityPools/{pool_id}/subject/{subject_attribute_value}`: A single// identity in a workload identity pool. *// `principalSet://iam.googleapis.com/projects/{project_number}/locations/global// /workloadIdentityPools/{pool_id}/group/{group_id}`: A workload identity pool// group. *// `principalSet://iam.googleapis.com/projects/{project_number}/locations/global// /workloadIdentityPools/{pool_id}/attribute.{attribute_name}/{attribute_value}// `: All identities in a workload identity pool with a certain attribute. *// `principalSet://iam.googleapis.com/projects/{project_number}/locations/global// /workloadIdentityPools/{pool_id}/*`: All identities in a workload identity// pool. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus// unique identifier) representing a user that has been recently deleted. For// example, `alice@example.com?uid=123456789012345678901`. If the user is// recovered, this value reverts to `user:{emailid}` and the recovered user// retains the role in the binding. *// `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus// unique identifier) representing a service account that has been recently// deleted. For example,// `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the// service account is undeleted, this value reverts to// `serviceAccount:{emailid}` and the undeleted service account retains the// role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email// address (plus unique identifier) representing a Google group that has been// recently deleted. For example,// `admins@example.com?uid=123456789012345678901`. If the group is recovered,// this value reverts to `group:{emailid}` and the recovered group retains the// role in the binding. *// `deleted:principal://iam.googleapis.com/locations/global/workforcePools/{pool// _id}/subject/{subject_attribute_value}`: Deleted single identity in a// workforce identity pool. For example,// `deleted:principal://iam.googleapis.com/locations/global/workforcePools/my-po// ol-id/subject/my-subject-attribute-value`.Members []string `json:"members,omitempty"`// Role: Role that is assigned to the list of `members`, or principals. For// example, `roles/viewer`, `roles/editor`, or `roles/owner`. For an overview// of the IAM roles and permissions, see the IAM documentation// (https://cloud.google.com/iam/docs/roles-overview). For a list of the// available pre-defined roles, see here// (https://cloud.google.com/iam/docs/understanding-roles).Rolestring `json:"role,omitempty"`// ForceSendFields is a list of field names (e.g. "Condition") to// unconditionally include in API requests. By default, fields with empty or// default values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "Condition") to include in API// requests with the JSON null value. By default, fields with empty values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (Binding)MarshalJSON¶

func (sBinding) MarshalJSON() ([]byte,error)

type Brand struct {// ApplicationTitle: Application name displayed on OAuth consent screen.ApplicationTitlestring `json:"applicationTitle,omitempty"`// Name: Output only. Identifier of the brand. NOTE: GCP project number// achieves the same brand identification purpose as only one brand per project// can be created.Namestring `json:"name,omitempty"`// OrgInternalOnly: Output only. Whether the brand is only intended for usage// inside the G Suite organization only.OrgInternalOnlybool `json:"orgInternalOnly,omitempty"`// SupportEmail: Support email displayed on the OAuth consent screen.SupportEmailstring `json:"supportEmail,omitempty"`// ServerResponse contains the HTTP response code and headers from the server.googleapi.ServerResponse `json:"-"`// ForceSendFields is a list of field names (e.g. "ApplicationTitle") to// unconditionally include in API requests. By default, fields with empty or// default values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "ApplicationTitle") to include in// API requests with the JSON null value. By default, fields with empty values// are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (Brand)MarshalJSON¶added inv0.15.0

func (sBrand) MarshalJSON() ([]byte,error)

type CorsSettings struct {// AllowHttpOptions: Configuration to allow HTTP `OPTIONS` calls to skip// authentication and authorization. If undefined, IAP will not apply any// special logic to `OPTIONS` requests.AllowHttpOptionsbool `json:"allowHttpOptions,omitempty"`// ForceSendFields is a list of field names (e.g. "AllowHttpOptions") to// unconditionally include in API requests. By default, fields with empty or// default values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "AllowHttpOptions") to include in// API requests with the JSON null value. By default, fields with empty values// are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (CorsSettings)MarshalJSON¶added inv0.12.0

func (sCorsSettings) MarshalJSON() ([]byte,error)

type CsmSettings struct {// RctokenAud: Audience claim set in the generated RCToken. This value is not// validated by IAP.RctokenAudstring `json:"rctokenAud,omitempty"`// ForceSendFields is a list of field names (e.g. "RctokenAud") to// unconditionally include in API requests. By default, fields with empty or// default values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "RctokenAud") to include in API// requests with the JSON null value. By default, fields with empty values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (CsmSettings)MarshalJSON¶added inv0.12.0

func (sCsmSettings) MarshalJSON() ([]byte,error)

type Empty struct {// ServerResponse contains the HTTP response code and headers from the server.googleapi.ServerResponse `json:"-"`}

type Expr struct {// Description: Optional. Description of the expression. This is a longer text// which describes the expression, e.g. when hovered over it in a UI.Descriptionstring `json:"description,omitempty"`// Expression: Textual representation of an expression in Common Expression// Language syntax.Expressionstring `json:"expression,omitempty"`// Location: Optional. String indicating the location of the expression for// error reporting, e.g. a file name and a position in the file.Locationstring `json:"location,omitempty"`// Title: Optional. Title for the expression, i.e. a short string describing// its purpose. This can be used e.g. in UIs which allow to enter the// expression.Titlestring `json:"title,omitempty"`// ForceSendFields is a list of field names (e.g. "Description") to// unconditionally include in API requests. By default, fields with empty or// default values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "Description") to include in API// requests with the JSON null value. By default, fields with empty values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (Expr)MarshalJSON¶

func (sExpr) MarshalJSON() ([]byte,error)

type GcipSettings struct {// LoginPageUri: Login page URI associated with the GCIP tenants. Typically,// all resources within the same project share the same login page, though it// could be overridden at the sub resource level.LoginPageUristring `json:"loginPageUri,omitempty"`// TenantIds: Optional. GCIP tenant IDs that are linked to the IAP resource.// `tenant_ids` could be a string beginning with a number character to indicate// authenticating with GCIP tenant flow, or in the format of `_` to indicate// authenticating with GCIP agent flow. If agent flow is used, `tenant_ids`// should only contain one single element, while for tenant flow, `tenant_ids`// can contain multiple elements.TenantIds []string `json:"tenantIds,omitempty"`// ForceSendFields is a list of field names (e.g. "LoginPageUri") to// unconditionally include in API requests. By default, fields with empty or// default values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "LoginPageUri") to include in API// requests with the JSON null value. By default, fields with empty values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (GcipSettings)MarshalJSON¶added inv0.12.0

func (sGcipSettings) MarshalJSON() ([]byte,error)

type GetIamPolicyRequest struct {// Options: OPTIONAL: A `GetPolicyOptions` object for specifying options to// `GetIamPolicy`.Options *GetPolicyOptions `json:"options,omitempty"`// ForceSendFields is a list of field names (e.g. "Options") to unconditionally// include in API requests. By default, fields with empty or default values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "Options") to include in API// requests with the JSON null value. By default, fields with empty values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (GetIamPolicyRequest)MarshalJSON¶added inv0.8.0

func (sGetIamPolicyRequest) MarshalJSON() ([]byte,error)

type GetPolicyOptions struct {// RequestedPolicyVersion: Optional. The maximum policy version that will be// used to format the policy. Valid values are 0, 1, and 3. Requests specifying// an invalid value will be rejected. Requests for policies with any// conditional role bindings must specify version 3. Policies with no// conditional role bindings may specify any valid value or leave the field// unset. The policy in the response might use the policy version that you// specified, or it might use a lower policy version. For example, if you// specify version 3, but the policy has no conditional role bindings, the// response uses version 1. To learn which resources support conditions in// their IAM policies, see the IAM documentation// (https://cloud.google.com/iam/help/conditions/resource-policies).RequestedPolicyVersionint64 `json:"requestedPolicyVersion,omitempty"`// ForceSendFields is a list of field names (e.g. "RequestedPolicyVersion") to// unconditionally include in API requests. By default, fields with empty or// default values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "RequestedPolicyVersion") to// include in API requests with the JSON null value. By default, fields with// empty values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (GetPolicyOptions)MarshalJSON¶added inv0.8.0

func (sGetPolicyOptions) MarshalJSON() ([]byte,error)

type IapSettings struct {// AccessSettings: Optional. Top level wrapper for all access related setting// in IAPAccessSettings *AccessSettings `json:"accessSettings,omitempty"`// ApplicationSettings: Optional. Top level wrapper for all application related// settings in IAPApplicationSettings *ApplicationSettings `json:"applicationSettings,omitempty"`// Name: Required. The resource name of the IAP protected resource.Namestring `json:"name,omitempty"`// ServerResponse contains the HTTP response code and headers from the server.googleapi.ServerResponse `json:"-"`// ForceSendFields is a list of field names (e.g. "AccessSettings") to// unconditionally include in API requests. By default, fields with empty or// default values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "AccessSettings") to include in// API requests with the JSON null value. By default, fields with empty values// are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (IapSettings)MarshalJSON¶added inv0.12.0

func (sIapSettings) MarshalJSON() ([]byte,error)

type IdentityAwareProxyClient struct {// DisplayName: Human-friendly name given to the OAuth client.DisplayNamestring `json:"displayName,omitempty"`// Name: Output only. Unique identifier of the OAuth client.Namestring `json:"name,omitempty"`// Secret: Output only. Client secret of the OAuth client.Secretstring `json:"secret,omitempty"`// ServerResponse contains the HTTP response code and headers from the server.googleapi.ServerResponse `json:"-"`// ForceSendFields is a list of field names (e.g. "DisplayName") to// unconditionally include in API requests. By default, fields with empty or// default values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "DisplayName") to include in API// requests with the JSON null value. By default, fields with empty values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (IdentityAwareProxyClient)MarshalJSON¶added inv0.15.0

func (sIdentityAwareProxyClient) MarshalJSON() ([]byte,error)

type ListBrandsResponse struct {// Brands: Brands existing in the project.Brands []*Brand `json:"brands,omitempty"`// ServerResponse contains the HTTP response code and headers from the server.googleapi.ServerResponse `json:"-"`// ForceSendFields is a list of field names (e.g. "Brands") to unconditionally// include in API requests. By default, fields with empty or default values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "Brands") to include in API// requests with the JSON null value. By default, fields with empty values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (ListBrandsResponse)MarshalJSON¶added inv0.15.0

func (sListBrandsResponse) MarshalJSON() ([]byte,error)

type ListIdentityAwareProxyClientsResponse struct {// IdentityAwareProxyClients: Clients existing in the brand.IdentityAwareProxyClients []*IdentityAwareProxyClient `json:"identityAwareProxyClients,omitempty"`// NextPageToken: A token, which can be send as `page_token` to retrieve the// next page. If this field is omitted, there are no subsequent pages.NextPageTokenstring `json:"nextPageToken,omitempty"`// ServerResponse contains the HTTP response code and headers from the server.googleapi.ServerResponse `json:"-"`// ForceSendFields is a list of field names (e.g. "IdentityAwareProxyClients")// to unconditionally include in API requests. By default, fields with empty or// default values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "IdentityAwareProxyClients") to// include in API requests with the JSON null value. By default, fields with// empty values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (ListIdentityAwareProxyClientsResponse)MarshalJSON¶added inv0.15.0

func (sListIdentityAwareProxyClientsResponse) MarshalJSON() ([]byte,error)

type ListTunnelDestGroupsResponse struct {// NextPageToken: A token that you can send as `page_token` to retrieve the// next page. If this field is omitted, there are no subsequent pages.NextPageTokenstring `json:"nextPageToken,omitempty"`// TunnelDestGroups: TunnelDestGroup existing in the project.TunnelDestGroups []*TunnelDestGroup `json:"tunnelDestGroups,omitempty"`// ServerResponse contains the HTTP response code and headers from the server.googleapi.ServerResponse `json:"-"`// ForceSendFields is a list of field names (e.g. "NextPageToken") to// unconditionally include in API requests. By default, fields with empty or// default values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "NextPageToken") to include in API// requests with the JSON null value. By default, fields with empty values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (ListTunnelDestGroupsResponse)MarshalJSON¶added inv0.74.0

func (sListTunnelDestGroupsResponse) MarshalJSON() ([]byte,error)

type NextStateOfTags struct {TagsFullState                 *TagsFullState                 `json:"tagsFullState,omitempty"`TagsFullStateForChildResource *TagsFullStateForChildResource `json:"tagsFullStateForChildResource,omitempty"`TagsPartialState              *TagsPartialState              `json:"tagsPartialState,omitempty"`// ForceSendFields is a list of field names (e.g. "TagsFullState") to// unconditionally include in API requests. By default, fields with empty or// default values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "TagsFullState") to include in API// requests with the JSON null value. By default, fields with empty values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (NextStateOfTags)MarshalJSON¶added inv0.186.0

func (sNextStateOfTags) MarshalJSON() ([]byte,error)

type OAuth2 struct {// ClientId: The OAuth 2.0 client ID registered in the workforce identity// federation OAuth 2.0 Server.ClientIdstring `json:"clientId,omitempty"`// ClientSecret: Input only. The OAuth 2.0 client secret created while// registering the client ID.ClientSecretstring `json:"clientSecret,omitempty"`// ClientSecretSha256: Output only. SHA256 hash value for the client secret.// This field is returned by IAP when the settings are retrieved.ClientSecretSha256string `json:"clientSecretSha256,omitempty"`// ForceSendFields is a list of field names (e.g. "ClientId") to// unconditionally include in API requests. By default, fields with empty or// default values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "ClientId") to include in API// requests with the JSON null value. By default, fields with empty values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (OAuth2)MarshalJSON¶added inv0.178.0

func (sOAuth2) MarshalJSON() ([]byte,error)

type OAuthSettings struct {// LoginHint: Domain hint to send as hd=? parameter in OAuth request flow.// Enables redirect to primary IDP by skipping Google's login screen.//https://developers.google.com/identity/protocols/OpenIDConnect#hd-param// Note: IAP does not verify that the id token's hd claim matches this value// since access behavior is managed by IAM policies.LoginHintstring `json:"loginHint,omitempty"`// ProgrammaticClients: Optional. List of client ids allowed to use IAP// programmatically.ProgrammaticClients []string `json:"programmaticClients,omitempty"`// ForceSendFields is a list of field names (e.g. "LoginHint") to// unconditionally include in API requests. By default, fields with empty or// default values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "LoginHint") to include in API// requests with the JSON null value. By default, fields with empty values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (OAuthSettings)MarshalJSON¶added inv0.12.0

func (sOAuthSettings) MarshalJSON() ([]byte,error)

type Policy struct {// Bindings: Associates a list of `members`, or principals, with a `role`.// Optionally, may specify a `condition` that determines how and when the// `bindings` are applied. Each of the `bindings` must contain at least one// principal. The `bindings` in a `Policy` can refer to up to 1,500 principals;// up to 250 of these principals can be Google groups. Each occurrence of a// principal counts towards these limits. For example, if the `bindings` grant// 50 different roles to `user:alice@example.com`, and not to any other// principal, then you can add another 1,450 principals to the `bindings` in// the `Policy`.Bindings []*Binding `json:"bindings,omitempty"`// Etag: `etag` is used for optimistic concurrency control as a way to help// prevent simultaneous updates of a policy from overwriting each other. It is// strongly suggested that systems make use of the `etag` in the// read-modify-write cycle to perform policy updates in order to avoid race// conditions: An `etag` is returned in the response to `getIamPolicy`, and// systems are expected to put that etag in the request to `setIamPolicy` to// ensure that their change will be applied to the same version of the policy.// **Important:** If you use IAM Conditions, you must include the `etag` field// whenever you call `setIamPolicy`. If you omit this field, then IAM allows// you to overwrite a version `3` policy with a version `1` policy, and all of// the conditions in the version `3` policy are lost.Etagstring `json:"etag,omitempty"`// Version: Specifies the format of the policy. Valid values are `0`, `1`, and// `3`. Requests that specify an invalid value are rejected. Any operation that// affects conditional role bindings must specify version `3`. This requirement// applies to the following operations: * Getting a policy that includes a// conditional role binding * Adding a conditional role binding to a policy *// Changing a conditional role binding in a policy * Removing any role binding,// with or without a condition, from a policy that includes conditions// **Important:** If you use IAM Conditions, you must include the `etag` field// whenever you call `setIamPolicy`. If you omit this field, then IAM allows// you to overwrite a version `3` policy with a version `1` policy, and all of// the conditions in the version `3` policy are lost. If a policy does not// include any conditions, operations on that policy may specify any valid// version or leave the field unset. To learn which resources support// conditions in their IAM policies, see the IAM documentation// (https://cloud.google.com/iam/help/conditions/resource-policies).Versionint64 `json:"version,omitempty"`// ServerResponse contains the HTTP response code and headers from the server.googleapi.ServerResponse `json:"-"`// ForceSendFields is a list of field names (e.g. "Bindings") to// unconditionally include in API requests. By default, fields with empty or// default values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "Bindings") to include in API// requests with the JSON null value. By default, fields with empty values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (Policy)MarshalJSON¶

func (sPolicy) MarshalJSON() ([]byte,error)

type PolicyDelegationSettings struct {// IamPermission: Permission to check in IAM.IamPermissionstring `json:"iamPermission,omitempty"`// IamServiceName: The DNS name of the service (e.g.// "resourcemanager.googleapis.com"). This should be the domain name part of// the full resource names (seehttps://aip.dev/122#full-resource-names), which// is usually the same as IamServiceSpec.service of the service where the// resource type is defined.IamServiceNamestring `json:"iamServiceName,omitempty"`// PolicyName: Policy name to be checkedPolicyName *PolicyName `json:"policyName,omitempty"`// Resource: IAM resource to check permission onResource *Resource `json:"resource,omitempty"`// ForceSendFields is a list of field names (e.g. "IamPermission") to// unconditionally include in API requests. By default, fields with empty or// default values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "IamPermission") to include in API// requests with the JSON null value. By default, fields with empty values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (PolicyDelegationSettings)MarshalJSON¶added inv0.22.0

func (sPolicyDelegationSettings) MarshalJSON() ([]byte,error)

type PolicyName struct {// Id: Identifies an instance of the type. ID format varies by type. The ID// format is defined in the IAM .service file that defines the type, either in// path_mapping or in a comment.Idstring `json:"id,omitempty"`// Region: For Cloud IAM: The location of the Policy. Must be empty or "global"// for Policies owned by global IAM. Must name a region from// prodspec/cloud-iam-cloudspec for Regional IAM Policies, see// go/iam-faq#where-is-iam-currently-deployed. For Local IAM: This field should// be set to "local".Regionstring `json:"region,omitempty"`// Type: Resource type. Types are defined in IAM's .service files. Valid values// for type might be 'storage_buckets', 'compute_instances',// 'resourcemanager_customers', 'billing_accounts', etc.Typestring `json:"type,omitempty"`// ForceSendFields is a list of field names (e.g. "Id") to unconditionally// include in API requests. By default, fields with empty or default values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "Id") to include in API requests// with the JSON null value. By default, fields with empty values are omitted// from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (PolicyName)MarshalJSON¶added inv0.22.0

func (sPolicyName) MarshalJSON() ([]byte,error)

type ProjectsBrandsCreateCall struct {// contains filtered or unexported fields}

func (*ProjectsBrandsCreateCall)Context¶added inv0.16.0

func (c *ProjectsBrandsCreateCall) Context(ctxcontext.Context) *ProjectsBrandsCreateCall

Context sets the context to be used in this call's Do method.

func (*ProjectsBrandsCreateCall)Do¶added inv0.16.0

func (c *ProjectsBrandsCreateCall) Do(opts ...googleapi.CallOption) (*Brand,error)

Do executes the "iap.projects.brands.create" call.Any non-2xx status code is an error. Response headers are in either*Brand.ServerResponse.Header or (if a response was returned at all) inerror.(*googleapi.Error).Header. Use googleapi.IsNotModified to checkwhether the returned error was because http.StatusNotModified was returned.

func (*ProjectsBrandsCreateCall)Fields¶added inv0.16.0

func (c *ProjectsBrandsCreateCall) Fields(s ...googleapi.Field) *ProjectsBrandsCreateCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*ProjectsBrandsCreateCall)Header¶added inv0.16.0

func (c *ProjectsBrandsCreateCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

type ProjectsBrandsGetCall struct {// contains filtered or unexported fields}

func (*ProjectsBrandsGetCall)Context¶added inv0.16.0

func (c *ProjectsBrandsGetCall) Context(ctxcontext.Context) *ProjectsBrandsGetCall

Context sets the context to be used in this call's Do method.

func (*ProjectsBrandsGetCall)Do¶added inv0.16.0

func (c *ProjectsBrandsGetCall) Do(opts ...googleapi.CallOption) (*Brand,error)

Do executes the "iap.projects.brands.get" call.Any non-2xx status code is an error. Response headers are in either*Brand.ServerResponse.Header or (if a response was returned at all) inerror.(*googleapi.Error).Header. Use googleapi.IsNotModified to checkwhether the returned error was because http.StatusNotModified was returned.

func (*ProjectsBrandsGetCall)Fields¶added inv0.16.0

func (c *ProjectsBrandsGetCall) Fields(s ...googleapi.Field) *ProjectsBrandsGetCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*ProjectsBrandsGetCall)Header¶added inv0.16.0

func (c *ProjectsBrandsGetCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

func (*ProjectsBrandsGetCall)IfNoneMatch¶added inv0.16.0

func (c *ProjectsBrandsGetCall) IfNoneMatch(entityTagstring) *ProjectsBrandsGetCall

IfNoneMatch sets an optional parameter which makes the operation fail if theobject's ETag matches the given value. This is useful for getting updatesonly after the object has changed since the last request.

type ProjectsBrandsIdentityAwareProxyClientsCreateCall struct {// contains filtered or unexported fields}

func (*ProjectsBrandsIdentityAwareProxyClientsCreateCall)Context¶added inv0.16.0

func (c *ProjectsBrandsIdentityAwareProxyClientsCreateCall) Context(ctxcontext.Context) *ProjectsBrandsIdentityAwareProxyClientsCreateCall

Context sets the context to be used in this call's Do method.

func (*ProjectsBrandsIdentityAwareProxyClientsCreateCall)Do¶added inv0.16.0

func (c *ProjectsBrandsIdentityAwareProxyClientsCreateCall) Do(opts ...googleapi.CallOption) (*IdentityAwareProxyClient,error)

Do executes the "iap.projects.brands.identityAwareProxyClients.create" call.Any non-2xx status code is an error. Response headers are in either*IdentityAwareProxyClient.ServerResponse.Header or (if a response wasreturned at all) in error.(*googleapi.Error).Header. Usegoogleapi.IsNotModified to check whether the returned error was becausehttp.StatusNotModified was returned.

func (*ProjectsBrandsIdentityAwareProxyClientsCreateCall)Fields¶added inv0.16.0

func (c *ProjectsBrandsIdentityAwareProxyClientsCreateCall) Fields(s ...googleapi.Field) *ProjectsBrandsIdentityAwareProxyClientsCreateCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*ProjectsBrandsIdentityAwareProxyClientsCreateCall)Header¶added inv0.16.0

func (c *ProjectsBrandsIdentityAwareProxyClientsCreateCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

type ProjectsBrandsIdentityAwareProxyClientsDeleteCall struct {// contains filtered or unexported fields}

func (*ProjectsBrandsIdentityAwareProxyClientsDeleteCall)Context¶added inv0.16.0

func (c *ProjectsBrandsIdentityAwareProxyClientsDeleteCall) Context(ctxcontext.Context) *ProjectsBrandsIdentityAwareProxyClientsDeleteCall

Context sets the context to be used in this call's Do method.

func (*ProjectsBrandsIdentityAwareProxyClientsDeleteCall)Do¶added inv0.16.0

func (c *ProjectsBrandsIdentityAwareProxyClientsDeleteCall) Do(opts ...googleapi.CallOption) (*Empty,error)

Do executes the "iap.projects.brands.identityAwareProxyClients.delete" call.Any non-2xx status code is an error. Response headers are in either*Empty.ServerResponse.Header or (if a response was returned at all) inerror.(*googleapi.Error).Header. Use googleapi.IsNotModified to checkwhether the returned error was because http.StatusNotModified was returned.

func (*ProjectsBrandsIdentityAwareProxyClientsDeleteCall)Fields¶added inv0.16.0

func (c *ProjectsBrandsIdentityAwareProxyClientsDeleteCall) Fields(s ...googleapi.Field) *ProjectsBrandsIdentityAwareProxyClientsDeleteCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*ProjectsBrandsIdentityAwareProxyClientsDeleteCall)Header¶added inv0.16.0

func (c *ProjectsBrandsIdentityAwareProxyClientsDeleteCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

type ProjectsBrandsIdentityAwareProxyClientsGetCall struct {// contains filtered or unexported fields}

func (*ProjectsBrandsIdentityAwareProxyClientsGetCall)Context¶added inv0.16.0

func (c *ProjectsBrandsIdentityAwareProxyClientsGetCall) Context(ctxcontext.Context) *ProjectsBrandsIdentityAwareProxyClientsGetCall

Context sets the context to be used in this call's Do method.

func (*ProjectsBrandsIdentityAwareProxyClientsGetCall)Do¶added inv0.16.0

func (c *ProjectsBrandsIdentityAwareProxyClientsGetCall) Do(opts ...googleapi.CallOption) (*IdentityAwareProxyClient,error)

Do executes the "iap.projects.brands.identityAwareProxyClients.get" call.Any non-2xx status code is an error. Response headers are in either*IdentityAwareProxyClient.ServerResponse.Header or (if a response wasreturned at all) in error.(*googleapi.Error).Header. Usegoogleapi.IsNotModified to check whether the returned error was becausehttp.StatusNotModified was returned.

func (*ProjectsBrandsIdentityAwareProxyClientsGetCall)Fields¶added inv0.16.0

func (c *ProjectsBrandsIdentityAwareProxyClientsGetCall) Fields(s ...googleapi.Field) *ProjectsBrandsIdentityAwareProxyClientsGetCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*ProjectsBrandsIdentityAwareProxyClientsGetCall)Header¶added inv0.16.0

func (c *ProjectsBrandsIdentityAwareProxyClientsGetCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

func (*ProjectsBrandsIdentityAwareProxyClientsGetCall)IfNoneMatch¶added inv0.16.0

func (c *ProjectsBrandsIdentityAwareProxyClientsGetCall) IfNoneMatch(entityTagstring) *ProjectsBrandsIdentityAwareProxyClientsGetCall

IfNoneMatch sets an optional parameter which makes the operation fail if theobject's ETag matches the given value. This is useful for getting updatesonly after the object has changed since the last request.

type ProjectsBrandsIdentityAwareProxyClientsListCall struct {// contains filtered or unexported fields}

func (*ProjectsBrandsIdentityAwareProxyClientsListCall)Context¶added inv0.16.0

func (c *ProjectsBrandsIdentityAwareProxyClientsListCall) Context(ctxcontext.Context) *ProjectsBrandsIdentityAwareProxyClientsListCall

Context sets the context to be used in this call's Do method.

func (*ProjectsBrandsIdentityAwareProxyClientsListCall)Do¶added inv0.16.0

func (c *ProjectsBrandsIdentityAwareProxyClientsListCall) Do(opts ...googleapi.CallOption) (*ListIdentityAwareProxyClientsResponse,error)

Do executes the "iap.projects.brands.identityAwareProxyClients.list" call.Any non-2xx status code is an error. Response headers are in either*ListIdentityAwareProxyClientsResponse.ServerResponse.Header or (if aresponse was returned at all) in error.(*googleapi.Error).Header. Usegoogleapi.IsNotModified to check whether the returned error was becausehttp.StatusNotModified was returned.

func (*ProjectsBrandsIdentityAwareProxyClientsListCall)Fields¶added inv0.16.0

func (c *ProjectsBrandsIdentityAwareProxyClientsListCall) Fields(s ...googleapi.Field) *ProjectsBrandsIdentityAwareProxyClientsListCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*ProjectsBrandsIdentityAwareProxyClientsListCall)Header¶added inv0.16.0

func (c *ProjectsBrandsIdentityAwareProxyClientsListCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

func (*ProjectsBrandsIdentityAwareProxyClientsListCall)IfNoneMatch¶added inv0.16.0

func (c *ProjectsBrandsIdentityAwareProxyClientsListCall) IfNoneMatch(entityTagstring) *ProjectsBrandsIdentityAwareProxyClientsListCall

IfNoneMatch sets an optional parameter which makes the operation fail if theobject's ETag matches the given value. This is useful for getting updatesonly after the object has changed since the last request.

func (*ProjectsBrandsIdentityAwareProxyClientsListCall)PageSize¶added inv0.16.0

func (c *ProjectsBrandsIdentityAwareProxyClientsListCall) PageSize(pageSizeint64) *ProjectsBrandsIdentityAwareProxyClientsListCall

PageSize sets the optional parameter "pageSize": The maximum number ofclients to return. The service may return fewer than this value. Ifunspecified, at most 100 clients will be returned. The maximum value is1000; values above 1000 will be coerced to 1000.

func (*ProjectsBrandsIdentityAwareProxyClientsListCall)PageToken¶added inv0.16.0

func (c *ProjectsBrandsIdentityAwareProxyClientsListCall) PageToken(pageTokenstring) *ProjectsBrandsIdentityAwareProxyClientsListCall

PageToken sets the optional parameter "pageToken": A page token, receivedfrom a previous `ListIdentityAwareProxyClients` call. Provide this toretrieve the subsequent page. When paginating, all other parameters providedto `ListIdentityAwareProxyClients` must match the call that provided thepage token.

func (*ProjectsBrandsIdentityAwareProxyClientsListCall)Pages¶added inv0.16.0

func (c *ProjectsBrandsIdentityAwareProxyClientsListCall) Pages(ctxcontext.Context, f func(*ListIdentityAwareProxyClientsResponse)error)error

Pages invokes f for each page of results.A non-nil error returned from f will halt the iteration.The provided context supersedes any context provided to the Context method.

type ProjectsBrandsIdentityAwareProxyClientsResetSecretCall struct {// contains filtered or unexported fields}

func (*ProjectsBrandsIdentityAwareProxyClientsResetSecretCall)Context¶added inv0.16.0

func (c *ProjectsBrandsIdentityAwareProxyClientsResetSecretCall) Context(ctxcontext.Context) *ProjectsBrandsIdentityAwareProxyClientsResetSecretCall

Context sets the context to be used in this call's Do method.

func (*ProjectsBrandsIdentityAwareProxyClientsResetSecretCall)Do¶added inv0.16.0

func (c *ProjectsBrandsIdentityAwareProxyClientsResetSecretCall) Do(opts ...googleapi.CallOption) (*IdentityAwareProxyClient,error)

Do executes the "iap.projects.brands.identityAwareProxyClients.resetSecret" call.Any non-2xx status code is an error. Response headers are in either*IdentityAwareProxyClient.ServerResponse.Header or (if a response wasreturned at all) in error.(*googleapi.Error).Header. Usegoogleapi.IsNotModified to check whether the returned error was becausehttp.StatusNotModified was returned.

func (*ProjectsBrandsIdentityAwareProxyClientsResetSecretCall)Fields¶added inv0.16.0

func (c *ProjectsBrandsIdentityAwareProxyClientsResetSecretCall) Fields(s ...googleapi.Field) *ProjectsBrandsIdentityAwareProxyClientsResetSecretCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*ProjectsBrandsIdentityAwareProxyClientsResetSecretCall)Header¶added inv0.16.0

func (c *ProjectsBrandsIdentityAwareProxyClientsResetSecretCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

type ProjectsBrandsIdentityAwareProxyClientsService struct {// contains filtered or unexported fields}

funcNewProjectsBrandsIdentityAwareProxyClientsService¶added inv0.16.0

func NewProjectsBrandsIdentityAwareProxyClientsService(s *Service) *ProjectsBrandsIdentityAwareProxyClientsService

func (*ProjectsBrandsIdentityAwareProxyClientsService)Create¶added inv0.16.0

func (r *ProjectsBrandsIdentityAwareProxyClientsService) Create(parentstring, identityawareproxyclient *IdentityAwareProxyClient) *ProjectsBrandsIdentityAwareProxyClientsCreateCall

Create: Creates an Identity Aware Proxy (IAP) OAuth client. The client isowned by IAP. Requires that the brand for the project exists and that it isset for internal-only use.

• parent: Path to create the client in. In the following format:projects/{project_number/id}/brands/{brand}. The project must belong to aG Suite account.

func (*ProjectsBrandsIdentityAwareProxyClientsService)Delete¶added inv0.16.0

func (r *ProjectsBrandsIdentityAwareProxyClientsService) Delete(namestring) *ProjectsBrandsIdentityAwareProxyClientsDeleteCall

Delete: Deletes an Identity Aware Proxy (IAP) OAuth client. Useful forremoving obsolete clients, managing the number of clients in a givenproject, and cleaning up after tests. Requires that the client is owned byIAP.

• name: Name of the Identity Aware Proxy client to be deleted. In thefollowing format:projects/{project_number/id}/brands/{brand}/identityAwareProxyClients/{client_id}.

func (*ProjectsBrandsIdentityAwareProxyClientsService)Get¶added inv0.16.0

func (r *ProjectsBrandsIdentityAwareProxyClientsService) Get(namestring) *ProjectsBrandsIdentityAwareProxyClientsGetCall

Get: Retrieves an Identity Aware Proxy (IAP) OAuth client. Requires that theclient is owned by IAP.

• name: Name of the Identity Aware Proxy client to be fetched. In thefollowing format:projects/{project_number/id}/brands/{brand}/identityAwareProxyClients/{client_id}.

func (*ProjectsBrandsIdentityAwareProxyClientsService)List¶added inv0.16.0

func (r *ProjectsBrandsIdentityAwareProxyClientsService) List(parentstring) *ProjectsBrandsIdentityAwareProxyClientsListCall

List: Lists the existing clients for the brand.

• parent: Full brand path. In the following format:projects/{project_number/id}/brands/{brand}.

func (*ProjectsBrandsIdentityAwareProxyClientsService)ResetSecret¶added inv0.16.0

func (r *ProjectsBrandsIdentityAwareProxyClientsService) ResetSecret(namestring, resetidentityawareproxyclientsecretrequest *ResetIdentityAwareProxyClientSecretRequest) *ProjectsBrandsIdentityAwareProxyClientsResetSecretCall

ResetSecret: Resets an Identity Aware Proxy (IAP) OAuth client secret.Useful if the secret was compromised. Requires that the client is owned byIAP.

• name: Name of the Identity Aware Proxy client to that will have its secretreset. In the following format:projects/{project_number/id}/brands/{brand}/identityAwareProxyClients/{client_id}.

type ProjectsBrandsListCall struct {// contains filtered or unexported fields}

func (*ProjectsBrandsListCall)Context¶added inv0.16.0

func (c *ProjectsBrandsListCall) Context(ctxcontext.Context) *ProjectsBrandsListCall

Context sets the context to be used in this call's Do method.

func (*ProjectsBrandsListCall)Do¶added inv0.16.0

func (c *ProjectsBrandsListCall) Do(opts ...googleapi.CallOption) (*ListBrandsResponse,error)

Do executes the "iap.projects.brands.list" call.Any non-2xx status code is an error. Response headers are in either*ListBrandsResponse.ServerResponse.Header or (if a response was returned atall) in error.(*googleapi.Error).Header. Use googleapi.IsNotModified tocheck whether the returned error was because http.StatusNotModified wasreturned.

func (*ProjectsBrandsListCall)Fields¶added inv0.16.0

func (c *ProjectsBrandsListCall) Fields(s ...googleapi.Field) *ProjectsBrandsListCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*ProjectsBrandsListCall)Header¶added inv0.16.0

func (c *ProjectsBrandsListCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

func (*ProjectsBrandsListCall)IfNoneMatch¶added inv0.16.0

func (c *ProjectsBrandsListCall) IfNoneMatch(entityTagstring) *ProjectsBrandsListCall

IfNoneMatch sets an optional parameter which makes the operation fail if theobject's ETag matches the given value. This is useful for getting updatesonly after the object has changed since the last request.

type ProjectsBrandsService struct {IdentityAwareProxyClients *ProjectsBrandsIdentityAwareProxyClientsService// contains filtered or unexported fields}

funcNewProjectsBrandsService¶added inv0.16.0

func NewProjectsBrandsService(s *Service) *ProjectsBrandsService

func (*ProjectsBrandsService)Create¶added inv0.16.0

func (r *ProjectsBrandsService) Create(parentstring, brand *Brand) *ProjectsBrandsCreateCall

Create: Constructs a new OAuth brand for the project if one does not exist.The created brand is "internal only", meaning that OAuth clients createdunder it only accept requests from users who belong to the same GoogleWorkspace organization as the project. The brand is created in anun-reviewed status. NOTE: The "internal only" status can be manually changedin the Google Cloud Console. Requires that a brand does not already existfor the project, and that the specified support email is owned by thecaller.

• parent: GCP Project number/id under which the brand is to be created. Inthe following format: projects/{project_number/id}.

func (*ProjectsBrandsService)Get¶added inv0.16.0

func (r *ProjectsBrandsService) Get(namestring) *ProjectsBrandsGetCall

Get: Retrieves the OAuth brand of the project.

• name: Name of the brand to be fetched. In the following format:projects/{project_number/id}/brands/{brand}.

func (*ProjectsBrandsService)List¶added inv0.16.0

func (r *ProjectsBrandsService) List(parentstring) *ProjectsBrandsListCall

List: Lists the existing brands for the project.

• parent: GCP Project number/id. In the following format:projects/{project_number/id}.

type ProjectsIapTunnelLocationsDestGroupsCreateCall struct {// contains filtered or unexported fields}

func (*ProjectsIapTunnelLocationsDestGroupsCreateCall)Context¶added inv0.74.0

func (c *ProjectsIapTunnelLocationsDestGroupsCreateCall) Context(ctxcontext.Context) *ProjectsIapTunnelLocationsDestGroupsCreateCall

Context sets the context to be used in this call's Do method.

func (*ProjectsIapTunnelLocationsDestGroupsCreateCall)Do¶added inv0.74.0

func (c *ProjectsIapTunnelLocationsDestGroupsCreateCall) Do(opts ...googleapi.CallOption) (*TunnelDestGroup,error)

Do executes the "iap.projects.iap_tunnel.locations.destGroups.create" call.Any non-2xx status code is an error. Response headers are in either*TunnelDestGroup.ServerResponse.Header or (if a response was returned atall) in error.(*googleapi.Error).Header. Use googleapi.IsNotModified tocheck whether the returned error was because http.StatusNotModified wasreturned.

func (*ProjectsIapTunnelLocationsDestGroupsCreateCall)Fields¶added inv0.74.0

func (c *ProjectsIapTunnelLocationsDestGroupsCreateCall) Fields(s ...googleapi.Field) *ProjectsIapTunnelLocationsDestGroupsCreateCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*ProjectsIapTunnelLocationsDestGroupsCreateCall)Header¶added inv0.74.0

func (c *ProjectsIapTunnelLocationsDestGroupsCreateCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

func (*ProjectsIapTunnelLocationsDestGroupsCreateCall)TunnelDestGroupId¶added inv0.74.0

func (c *ProjectsIapTunnelLocationsDestGroupsCreateCall) TunnelDestGroupId(tunnelDestGroupIdstring) *ProjectsIapTunnelLocationsDestGroupsCreateCall

TunnelDestGroupId sets the optional parameter "tunnelDestGroupId": Required.The ID to use for the TunnelDestGroup, which becomes the final component ofthe resource name. This value must be 4-63 characters, and valid charactersare `[a-z]-`.

type ProjectsIapTunnelLocationsDestGroupsDeleteCall struct {// contains filtered or unexported fields}

func (*ProjectsIapTunnelLocationsDestGroupsDeleteCall)Context¶added inv0.74.0

func (c *ProjectsIapTunnelLocationsDestGroupsDeleteCall) Context(ctxcontext.Context) *ProjectsIapTunnelLocationsDestGroupsDeleteCall

Context sets the context to be used in this call's Do method.

func (*ProjectsIapTunnelLocationsDestGroupsDeleteCall)Do¶added inv0.74.0

func (c *ProjectsIapTunnelLocationsDestGroupsDeleteCall) Do(opts ...googleapi.CallOption) (*Empty,error)

Do executes the "iap.projects.iap_tunnel.locations.destGroups.delete" call.Any non-2xx status code is an error. Response headers are in either*Empty.ServerResponse.Header or (if a response was returned at all) inerror.(*googleapi.Error).Header. Use googleapi.IsNotModified to checkwhether the returned error was because http.StatusNotModified was returned.

func (*ProjectsIapTunnelLocationsDestGroupsDeleteCall)Fields¶added inv0.74.0

func (c *ProjectsIapTunnelLocationsDestGroupsDeleteCall) Fields(s ...googleapi.Field) *ProjectsIapTunnelLocationsDestGroupsDeleteCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*ProjectsIapTunnelLocationsDestGroupsDeleteCall)Header¶added inv0.74.0

func (c *ProjectsIapTunnelLocationsDestGroupsDeleteCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

type ProjectsIapTunnelLocationsDestGroupsGetCall struct {// contains filtered or unexported fields}

func (*ProjectsIapTunnelLocationsDestGroupsGetCall)Context¶added inv0.74.0

func (c *ProjectsIapTunnelLocationsDestGroupsGetCall) Context(ctxcontext.Context) *ProjectsIapTunnelLocationsDestGroupsGetCall

Context sets the context to be used in this call's Do method.

func (*ProjectsIapTunnelLocationsDestGroupsGetCall)Do¶added inv0.74.0

func (c *ProjectsIapTunnelLocationsDestGroupsGetCall) Do(opts ...googleapi.CallOption) (*TunnelDestGroup,error)

Do executes the "iap.projects.iap_tunnel.locations.destGroups.get" call.Any non-2xx status code is an error. Response headers are in either*TunnelDestGroup.ServerResponse.Header or (if a response was returned atall) in error.(*googleapi.Error).Header. Use googleapi.IsNotModified tocheck whether the returned error was because http.StatusNotModified wasreturned.

func (*ProjectsIapTunnelLocationsDestGroupsGetCall)Fields¶added inv0.74.0

func (c *ProjectsIapTunnelLocationsDestGroupsGetCall) Fields(s ...googleapi.Field) *ProjectsIapTunnelLocationsDestGroupsGetCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*ProjectsIapTunnelLocationsDestGroupsGetCall)Header¶added inv0.74.0

func (c *ProjectsIapTunnelLocationsDestGroupsGetCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

func (*ProjectsIapTunnelLocationsDestGroupsGetCall)IfNoneMatch¶added inv0.74.0

func (c *ProjectsIapTunnelLocationsDestGroupsGetCall) IfNoneMatch(entityTagstring) *ProjectsIapTunnelLocationsDestGroupsGetCall

IfNoneMatch sets an optional parameter which makes the operation fail if theobject's ETag matches the given value. This is useful for getting updatesonly after the object has changed since the last request.

type ProjectsIapTunnelLocationsDestGroupsListCall struct {// contains filtered or unexported fields}

func (*ProjectsIapTunnelLocationsDestGroupsListCall)Context¶added inv0.74.0

func (c *ProjectsIapTunnelLocationsDestGroupsListCall) Context(ctxcontext.Context) *ProjectsIapTunnelLocationsDestGroupsListCall

Context sets the context to be used in this call's Do method.

func (*ProjectsIapTunnelLocationsDestGroupsListCall)Do¶added inv0.74.0

func (c *ProjectsIapTunnelLocationsDestGroupsListCall) Do(opts ...googleapi.CallOption) (*ListTunnelDestGroupsResponse,error)

Do executes the "iap.projects.iap_tunnel.locations.destGroups.list" call.Any non-2xx status code is an error. Response headers are in either*ListTunnelDestGroupsResponse.ServerResponse.Header or (if a response wasreturned at all) in error.(*googleapi.Error).Header. Usegoogleapi.IsNotModified to check whether the returned error was becausehttp.StatusNotModified was returned.

func (*ProjectsIapTunnelLocationsDestGroupsListCall)Fields¶added inv0.74.0

func (c *ProjectsIapTunnelLocationsDestGroupsListCall) Fields(s ...googleapi.Field) *ProjectsIapTunnelLocationsDestGroupsListCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*ProjectsIapTunnelLocationsDestGroupsListCall)Header¶added inv0.74.0

func (c *ProjectsIapTunnelLocationsDestGroupsListCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

func (*ProjectsIapTunnelLocationsDestGroupsListCall)IfNoneMatch¶added inv0.74.0

func (c *ProjectsIapTunnelLocationsDestGroupsListCall) IfNoneMatch(entityTagstring) *ProjectsIapTunnelLocationsDestGroupsListCall

IfNoneMatch sets an optional parameter which makes the operation fail if theobject's ETag matches the given value. This is useful for getting updatesonly after the object has changed since the last request.

func (*ProjectsIapTunnelLocationsDestGroupsListCall)PageSize¶added inv0.74.0

func (c *ProjectsIapTunnelLocationsDestGroupsListCall) PageSize(pageSizeint64) *ProjectsIapTunnelLocationsDestGroupsListCall

PageSize sets the optional parameter "pageSize": The maximum number ofgroups to return. The service might return fewer than this value. Ifunspecified, at most 100 groups are returned. The maximum value is 1000;values above 1000 are coerced to 1000.

func (*ProjectsIapTunnelLocationsDestGroupsListCall)PageToken¶added inv0.74.0

func (c *ProjectsIapTunnelLocationsDestGroupsListCall) PageToken(pageTokenstring) *ProjectsIapTunnelLocationsDestGroupsListCall

PageToken sets the optional parameter "pageToken": A page token, receivedfrom a previous `ListTunnelDestGroups` call. Provide this to retrieve thesubsequent page. When paginating, all other parameters provided to`ListTunnelDestGroups` must match the call that provided the page token.

func (*ProjectsIapTunnelLocationsDestGroupsListCall)Pages¶added inv0.74.0

func (c *ProjectsIapTunnelLocationsDestGroupsListCall) Pages(ctxcontext.Context, f func(*ListTunnelDestGroupsResponse)error)error

Pages invokes f for each page of results.A non-nil error returned from f will halt the iteration.The provided context supersedes any context provided to the Context method.

type ProjectsIapTunnelLocationsDestGroupsPatchCall struct {// contains filtered or unexported fields}

func (*ProjectsIapTunnelLocationsDestGroupsPatchCall)Context¶added inv0.74.0

func (c *ProjectsIapTunnelLocationsDestGroupsPatchCall) Context(ctxcontext.Context) *ProjectsIapTunnelLocationsDestGroupsPatchCall

Context sets the context to be used in this call's Do method.

func (*ProjectsIapTunnelLocationsDestGroupsPatchCall)Do¶added inv0.74.0

func (c *ProjectsIapTunnelLocationsDestGroupsPatchCall) Do(opts ...googleapi.CallOption) (*TunnelDestGroup,error)

Do executes the "iap.projects.iap_tunnel.locations.destGroups.patch" call.Any non-2xx status code is an error. Response headers are in either*TunnelDestGroup.ServerResponse.Header or (if a response was returned atall) in error.(*googleapi.Error).Header. Use googleapi.IsNotModified tocheck whether the returned error was because http.StatusNotModified wasreturned.

func (*ProjectsIapTunnelLocationsDestGroupsPatchCall)Fields¶added inv0.74.0

func (c *ProjectsIapTunnelLocationsDestGroupsPatchCall) Fields(s ...googleapi.Field) *ProjectsIapTunnelLocationsDestGroupsPatchCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*ProjectsIapTunnelLocationsDestGroupsPatchCall)Header¶added inv0.74.0

func (c *ProjectsIapTunnelLocationsDestGroupsPatchCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

func (*ProjectsIapTunnelLocationsDestGroupsPatchCall)UpdateMask¶added inv0.74.0

func (c *ProjectsIapTunnelLocationsDestGroupsPatchCall) UpdateMask(updateMaskstring) *ProjectsIapTunnelLocationsDestGroupsPatchCall

UpdateMask sets the optional parameter "updateMask": A field mask thatspecifies which IAP settings to update. If omitted, then all of the settingsare updated. Seehttps://developers.google.com/protocol-buffers/docs/reference/google.protobuf#fieldmask

type ProjectsIapTunnelLocationsDestGroupsService struct {// contains filtered or unexported fields}

funcNewProjectsIapTunnelLocationsDestGroupsService¶added inv0.74.0

func NewProjectsIapTunnelLocationsDestGroupsService(s *Service) *ProjectsIapTunnelLocationsDestGroupsService

func (*ProjectsIapTunnelLocationsDestGroupsService)Create¶added inv0.74.0

func (r *ProjectsIapTunnelLocationsDestGroupsService) Create(parentstring, tunneldestgroup *TunnelDestGroup) *ProjectsIapTunnelLocationsDestGroupsCreateCall

Create: Creates a new TunnelDestGroup.

• parent: Google Cloud Project ID and location. In the following format:`projects/{project_number/id}/iap_tunnel/locations/{location}`.

func (*ProjectsIapTunnelLocationsDestGroupsService)Delete¶added inv0.74.0

func (r *ProjectsIapTunnelLocationsDestGroupsService) Delete(namestring) *ProjectsIapTunnelLocationsDestGroupsDeleteCall

Delete: Deletes a TunnelDestGroup.

• name: Name of the TunnelDestGroup to delete. In the following format:`projects/{project_number/id}/iap_tunnel/locations/{location}/destGroups/{dest_group}`.

func (*ProjectsIapTunnelLocationsDestGroupsService)Get¶added inv0.74.0

func (r *ProjectsIapTunnelLocationsDestGroupsService) Get(namestring) *ProjectsIapTunnelLocationsDestGroupsGetCall

Get: Retrieves an existing TunnelDestGroup.

• name: Name of the TunnelDestGroup to be fetched. In the following format:`projects/{project_number/id}/iap_tunnel/locations/{location}/destGroups/{dest_group}`.

func (*ProjectsIapTunnelLocationsDestGroupsService)List¶added inv0.74.0

func (r *ProjectsIapTunnelLocationsDestGroupsService) List(parentstring) *ProjectsIapTunnelLocationsDestGroupsListCall

List: Lists the existing TunnelDestGroups. To group across all locations,use a `-` as the location ID. For example:`/v1/projects/123/iap_tunnel/locations/-/destGroups`

• parent: Google Cloud Project ID and location. In the following format:`projects/{project_number/id}/iap_tunnel/locations/{location}`. A `-` canbe used for the location to group across all locations.

func (*ProjectsIapTunnelLocationsDestGroupsService)Patch¶added inv0.74.0

func (r *ProjectsIapTunnelLocationsDestGroupsService) Patch(namestring, tunneldestgroup *TunnelDestGroup) *ProjectsIapTunnelLocationsDestGroupsPatchCall

Patch: Updates a TunnelDestGroup.

• name: Identifier. Identifier for the TunnelDestGroup. Must be uniquewithin the project and contain only lower case letters (a-z) and dashes(-).

type ProjectsIapTunnelLocationsService struct {DestGroups *ProjectsIapTunnelLocationsDestGroupsService// contains filtered or unexported fields}

funcNewProjectsIapTunnelLocationsService¶added inv0.74.0

func NewProjectsIapTunnelLocationsService(s *Service) *ProjectsIapTunnelLocationsService

type ProjectsIapTunnelService struct {Locations *ProjectsIapTunnelLocationsService// contains filtered or unexported fields}

funcNewProjectsIapTunnelService¶

func NewProjectsIapTunnelService(s *Service) *ProjectsIapTunnelService

type ProjectsService struct {Brands *ProjectsBrandsServiceIapTunnel *ProjectsIapTunnelService// contains filtered or unexported fields}

funcNewProjectsService¶

func NewProjectsService(s *Service) *ProjectsService

type ReauthSettings struct {// MaxAge: Optional. Reauth session lifetime, how long before a user has to// reauthenticate again.MaxAgestring `json:"maxAge,omitempty"`// Method: Optional. Reauth method requested.//// Possible values://   "METHOD_UNSPECIFIED" - Reauthentication disabled.//   "LOGIN" - Prompts the user to log in again.//   "PASSWORD"//   "SECURE_KEY" - User must use their secure key 2nd factor device.//   "ENROLLED_SECOND_FACTORS" - User can use any enabled 2nd factor.Methodstring `json:"method,omitempty"`// PolicyType: Optional. How IAP determines the effective policy in cases of// hierarchical policies. Policies are merged from higher in the hierarchy to// lower in the hierarchy.//// Possible values://   "POLICY_TYPE_UNSPECIFIED" - Default value. This value is unused.//   "MINIMUM" - This policy acts as a minimum to other policies, lower in the// hierarchy. Effective policy may only be the same or stricter.//   "DEFAULT" - This policy acts as a default if no other reauth policy is// set.PolicyTypestring `json:"policyType,omitempty"`// ForceSendFields is a list of field names (e.g. "MaxAge") to unconditionally// include in API requests. By default, fields with empty or default values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "MaxAge") to include in API// requests with the JSON null value. By default, fields with empty values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (ReauthSettings)MarshalJSON¶added inv0.59.0

func (sReauthSettings) MarshalJSON() ([]byte,error)

type ResetIdentityAwareProxyClientSecretRequest struct {}

type Resource struct {// ExpectedNextState: The proto or JSON formatted expected next state of the// resource, wrapped in a google.protobuf.Any proto, against which the policy// rules are evaluated. Services not integrated with custom org policy can omit// this field. Services integrated with custom org policy must populate this// field for all requests where the API call changes the state of the resource.// Custom org policy backend uses these attributes to enforce custom org// policies. For create operations, GCP service is expected to pass resource// from customer request as is. For update/patch operations, GCP service is// expected to compute the next state with the patch provided by the user. See// go/federated-custom-org-policy-integration-guide for additional details.ExpectedNextStategoogleapi.RawMessage `json:"expectedNextState,omitempty"`// Labels: The service defined labels of the resource on which the conditions// will be evaluated. The semantics - including the key names - are vague to// IAM. If the effective condition has a reference to a `resource.labels[foo]`// construct, IAM consults with this map to retrieve the values associated with// `foo` key for Conditions evaluation. If the provided key is not found in the// labels map, the condition would evaluate to false. This field is in limited// use. If your intended use case is not expected to express resource.labels// attribute in IAM Conditions, leave this field empty. Before planning on// using this attribute please: * Read go/iam-conditions-labels-comm and ensure// your service can meet the data availability and management requirements. *// Talk to iam-conditions-eng@ about your use case.Labels map[string]string `json:"labels,omitempty"`// Locations: The locations of the resource. This field is used to determine// whether the request is compliant with Trust Boundaries. Usage: - Must not be// empty for services in-scope for Trust Boundaries. Once Trust Boundaries is// GA, empty values will cause the request to be rejected if customers enforce// Trust Boundaries on the parent CRM nodes. - For global resources: use a// single value of "global". - For regional/multi-regional resources: use name// of the GCP region(s) where the resource exists (e.g., ["us-east1",// "us-west1"]). For multi-regional resources specify the name of each GCP// region in the resource's multi-region. NOTE: Only GCP cloud region names are// supported - go/cloud-region-names.Locations []string `json:"locations,omitempty"`// Name: The **relative** name of the resource, which is the URI path of the// resource without the leading "/". See//https://cloud.google.com/iam/docs/conditions-resource-attributes#resource-name// for examples used by other GCP Services. This field is **required** for// services integrated with resource-attribute-based IAM conditions and/or// CustomOrgPolicy. This field requires special handling for parents-only// permissions such as `create` and `list`. See the document linked below for// further details. See go/iam-conditions-sig-g3#populate-resource-attributes// for specific details on populating this field.Namestring `json:"name,omitempty"`// NextStateOfTags: Used for calculating the next state of tags on the resource// being passed for Custom Org Policy enforcement. NOTE: Only one of the tags// representations (i.e. numeric or namespaced) should be populated. The input// tags will be converted to the same representation before the calculation.// This behavior intentionally may differ from other tags related fields in// CheckPolicy request, which may require both formats to be passed in.// IMPORTANT: If tags are unchanged, this field should not be set.NextStateOfTags *NextStateOfTags `json:"nextStateOfTags,omitempty"`// Service: The name of the service this resource belongs to. It is configured// using the official_service_name of the Service as defined in service// configurations under //configs/cloud/resourcetypes. For example, the// official_service_name of cloud resource manager service is set as// 'cloudresourcemanager.googleapis.com' according to// //configs/cloud/resourcetypes/google/cloud/resourcemanager/prod.yaml This// field is **required** for services integrated with resource-attribute-based// IAM conditions and/or CustomOrgPolicy. This field requires special handling// for parents-only permissions such as `create` and `list`. See the document// linked below for further details. See// go/iam-conditions-sig-g3#populate-resource-attributes for specific details// on populating this field.Servicestring `json:"service,omitempty"`// Type: The public resource type name of the resource. It is configured using// the official_name of the ResourceType as defined in service configurations// under //configs/cloud/resourcetypes. For example, the official_name for GCP// projects is set as 'cloudresourcemanager.googleapis.com/Project' according// to //configs/cloud/resourcetypes/google/cloud/resourcemanager/prod.yaml This// field is **required** for services integrated with resource-attribute-based// IAM conditions and/or CustomOrgPolicy. This field requires special handling// for parents-only permissions such as `create` and `list`. See the document// linked below for further details. See// go/iam-conditions-sig-g3#populate-resource-attributes for specific details// on populating this field.Typestring `json:"type,omitempty"`// ForceSendFields is a list of field names (e.g. "ExpectedNextState") to// unconditionally include in API requests. By default, fields with empty or// default values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "ExpectedNextState") to include in// API requests with the JSON null value. By default, fields with empty values// are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (Resource)MarshalJSON¶added inv0.22.0

func (sResource) MarshalJSON() ([]byte,error)

type Service struct {BasePathstring// API endpoint base URLUserAgentstring// optional additional User-Agent fragmentProjects *ProjectsServiceV1 *V1Service// contains filtered or unexported fields}

funcNewService¶added inv0.3.0

func NewService(ctxcontext.Context, opts ...option.ClientOption) (*Service,error)

NewService creates a new Service.

type SetIamPolicyRequest struct {// Policy: REQUIRED: The complete policy to be applied to the `resource`. The// size of the policy is limited to a few 10s of KB. An empty policy is a valid// policy but certain Google Cloud services (such as Projects) might reject// them.Policy *Policy `json:"policy,omitempty"`// ForceSendFields is a list of field names (e.g. "Policy") to unconditionally// include in API requests. By default, fields with empty or default values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "Policy") to include in API// requests with the JSON null value. By default, fields with empty values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (SetIamPolicyRequest)MarshalJSON¶

func (sSetIamPolicyRequest) MarshalJSON() ([]byte,error)

type TagsFullState struct {// Tags: If TagsFullState is initialized, the values in this field fully// represent all the tags in the next state (the current tag values are not// used). If tags.size() == 0, the next state of tags would be no tags for// evaluation purposes. Only one type of tags reference (numeric or namespace)// is required to be passed.Tags map[string]string `json:"tags,omitempty"`// ForceSendFields is a list of field names (e.g. "Tags") to unconditionally// include in API requests. By default, fields with empty or default values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "Tags") to include in API requests// with the JSON null value. By default, fields with empty values are omitted// from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (TagsFullState)MarshalJSON¶added inv0.186.0

func (sTagsFullState) MarshalJSON() ([]byte,error)

type TagsFullStateForChildResource struct {// Tags: If TagsFullStateForChildResource is initialized, the values in this// field represent all the tags in the next state for the child resource. Only// one type of tags reference (numeric or namespace) is required to be passed.// IMPORTANT: This field should only be used when the target resource IAM// policy name is UNKNOWN and the resource's parent IAM policy name is being// passed in the request.Tags map[string]string `json:"tags,omitempty"`// ForceSendFields is a list of field names (e.g. "Tags") to unconditionally// include in API requests. By default, fields with empty or default values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "Tags") to include in API requests// with the JSON null value. By default, fields with empty values are omitted// from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (TagsFullStateForChildResource)MarshalJSON¶added inv0.186.0

func (sTagsFullStateForChildResource) MarshalJSON() ([]byte,error)

type TagsPartialState struct {// TagKeysToRemove: Keys of the tags that should be removed for evaluation// purposes. IMPORTANT: Currently only numeric references are supported. Once// support for namespace references is added, both the tag references (numeric// and namespace) will be removed.TagKeysToRemove []string `json:"tagKeysToRemove,omitempty"`// TagsToUpsert: Tags that’ll be updated or added to the current state of// tags for evaluation purposes. If a key exists in both "tags_to_upsert" and// "tag_keys_to_remove", the one in "tag_keys_to_remove" is ignored. Only one// type of tags reference (numeric or namespace) is required to be passed.TagsToUpsert map[string]string `json:"tagsToUpsert,omitempty"`// ForceSendFields is a list of field names (e.g. "TagKeysToRemove") to// unconditionally include in API requests. By default, fields with empty or// default values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "TagKeysToRemove") to include in// API requests with the JSON null value. By default, fields with empty values// are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (TagsPartialState)MarshalJSON¶added inv0.186.0

func (sTagsPartialState) MarshalJSON() ([]byte,error)

type TestIamPermissionsRequest struct {// Permissions: The set of permissions to check for the `resource`. Permissions// with wildcards (such as `*` or `storage.*`) are not allowed. For more// information see IAM Overview// (https://cloud.google.com/iam/docs/overview#permissions).Permissions []string `json:"permissions,omitempty"`// ForceSendFields is a list of field names (e.g. "Permissions") to// unconditionally include in API requests. By default, fields with empty or// default values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "Permissions") to include in API// requests with the JSON null value. By default, fields with empty values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (TestIamPermissionsRequest)MarshalJSON¶

func (sTestIamPermissionsRequest) MarshalJSON() ([]byte,error)

type TestIamPermissionsResponse struct {// Permissions: A subset of `TestPermissionsRequest.permissions` that the// caller is allowed.Permissions []string `json:"permissions,omitempty"`// ServerResponse contains the HTTP response code and headers from the server.googleapi.ServerResponse `json:"-"`// ForceSendFields is a list of field names (e.g. "Permissions") to// unconditionally include in API requests. By default, fields with empty or// default values are omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "Permissions") to include in API// requests with the JSON null value. By default, fields with empty values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (TestIamPermissionsResponse)MarshalJSON¶

func (sTestIamPermissionsResponse) MarshalJSON() ([]byte,error)

type TunnelDestGroup struct {// Cidrs: Optional. Unordered list. List of CIDRs that this group applies to.Cidrs []string `json:"cidrs,omitempty"`// Fqdns: Optional. Unordered list. List of FQDNs that this group applies to.Fqdns []string `json:"fqdns,omitempty"`// Name: Identifier. Identifier for the TunnelDestGroup. Must be unique within// the project and contain only lower case letters (a-z) and dashes (-).Namestring `json:"name,omitempty"`// ServerResponse contains the HTTP response code and headers from the server.googleapi.ServerResponse `json:"-"`// ForceSendFields is a list of field names (e.g. "Cidrs") to unconditionally// include in API requests. By default, fields with empty or default values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "Cidrs") to include in API// requests with the JSON null value. By default, fields with empty values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (TunnelDestGroup)MarshalJSON¶added inv0.74.0

func (sTunnelDestGroup) MarshalJSON() ([]byte,error)

type V1GetIamPolicyCall struct {// contains filtered or unexported fields}

func (*V1GetIamPolicyCall)Context¶added inv0.2.0

func (c *V1GetIamPolicyCall) Context(ctxcontext.Context) *V1GetIamPolicyCall

Context sets the context to be used in this call's Do method.

func (*V1GetIamPolicyCall)Do¶added inv0.2.0

func (c *V1GetIamPolicyCall) Do(opts ...googleapi.CallOption) (*Policy,error)

Do executes the "iap.getIamPolicy" call.Any non-2xx status code is an error. Response headers are in either*Policy.ServerResponse.Header or (if a response was returned at all) inerror.(*googleapi.Error).Header. Use googleapi.IsNotModified to checkwhether the returned error was because http.StatusNotModified was returned.

func (*V1GetIamPolicyCall)Fields¶added inv0.2.0

func (c *V1GetIamPolicyCall) Fields(s ...googleapi.Field) *V1GetIamPolicyCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*V1GetIamPolicyCall)Header¶added inv0.2.0

func (c *V1GetIamPolicyCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

type V1GetIapSettingsCall struct {// contains filtered or unexported fields}

func (*V1GetIapSettingsCall)Context¶added inv0.12.0

func (c *V1GetIapSettingsCall) Context(ctxcontext.Context) *V1GetIapSettingsCall

Context sets the context to be used in this call's Do method.

func (*V1GetIapSettingsCall)Do¶added inv0.12.0

func (c *V1GetIapSettingsCall) Do(opts ...googleapi.CallOption) (*IapSettings,error)

Do executes the "iap.getIapSettings" call.Any non-2xx status code is an error. Response headers are in either*IapSettings.ServerResponse.Header or (if a response was returned at all) inerror.(*googleapi.Error).Header. Use googleapi.IsNotModified to checkwhether the returned error was because http.StatusNotModified was returned.

func (*V1GetIapSettingsCall)Fields¶added inv0.12.0

func (c *V1GetIapSettingsCall) Fields(s ...googleapi.Field) *V1GetIapSettingsCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*V1GetIapSettingsCall)Header¶added inv0.12.0

func (c *V1GetIapSettingsCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

func (*V1GetIapSettingsCall)IfNoneMatch¶added inv0.12.0

func (c *V1GetIapSettingsCall) IfNoneMatch(entityTagstring) *V1GetIapSettingsCall

IfNoneMatch sets an optional parameter which makes the operation fail if theobject's ETag matches the given value. This is useful for getting updatesonly after the object has changed since the last request.

type V1Service struct {// contains filtered or unexported fields}

funcNewV1Service¶added inv0.2.0

func NewV1Service(s *Service) *V1Service

func (*V1Service)GetIamPolicy¶added inv0.2.0

func (r *V1Service) GetIamPolicy(resourcestring, getiampolicyrequest *GetIamPolicyRequest) *V1GetIamPolicyCall

GetIamPolicy: Gets the access control policy for an Identity-Aware Proxyprotected resource. More information about managing access via IAP can befound at:https://cloud.google.com/iap/docs/managing-access#managing_access_via_the_api

• resource: REQUIRED: The resource for which the policy is being requested.See Resource names (https://cloud.google.com/apis/design/resource_names)for the appropriate value for this field.

func (*V1Service)GetIapSettings¶added inv0.12.0

func (r *V1Service) GetIapSettings(namestring) *V1GetIapSettingsCall

GetIapSettings: Gets the IAP settings on a particular IAP protectedresource.

• name: The resource name for which to retrieve the settings. Authorization:Requires the `getSettings` permission for the associated resource.

func (*V1Service)SetIamPolicy¶added inv0.2.0

func (r *V1Service) SetIamPolicy(resourcestring, setiampolicyrequest *SetIamPolicyRequest) *V1SetIamPolicyCall

SetIamPolicy: Sets the access control policy for an Identity-Aware Proxyprotected resource. Replaces any existing policy. More information aboutmanaging access via IAP can be found at:https://cloud.google.com/iap/docs/managing-access#managing_access_via_the_api

• resource: REQUIRED: The resource for which the policy is being specified.See Resource names (https://cloud.google.com/apis/design/resource_names)for the appropriate value for this field.

func (*V1Service)TestIamPermissions¶added inv0.2.0

func (r *V1Service) TestIamPermissions(resourcestring, testiampermissionsrequest *TestIamPermissionsRequest) *V1TestIamPermissionsCall

TestIamPermissions: Returns permissions that a caller has on theIdentity-Aware Proxy protected resource. More information about managingaccess via IAP can be found at:https://cloud.google.com/iap/docs/managing-access#managing_access_via_the_api

• resource: REQUIRED: The resource for which the policy detail is beingrequested. See Resource names(https://cloud.google.com/apis/design/resource_names) for the appropriatevalue for this field.

func (*V1Service)UpdateIapSettings¶added inv0.12.0

func (r *V1Service) UpdateIapSettings(namestring, iapsettings *IapSettings) *V1UpdateIapSettingsCall

UpdateIapSettings: Updates the IAP settings on a particular IAP protectedresource. It replaces all fields unless the `update_mask` is set.

- name: The resource name of the IAP protected resource.

func (*V1Service)ValidateAttributeExpression¶added inv0.126.0

func (r *V1Service) ValidateAttributeExpression(namestring) *V1ValidateAttributeExpressionCall

ValidateAttributeExpression: Validates that a given CEL expression conformsto IAP restrictions.

- name: The resource name of the IAP protected resource.

type V1SetIamPolicyCall struct {// contains filtered or unexported fields}

func (*V1SetIamPolicyCall)Context¶added inv0.2.0

func (c *V1SetIamPolicyCall) Context(ctxcontext.Context) *V1SetIamPolicyCall

Context sets the context to be used in this call's Do method.

func (*V1SetIamPolicyCall)Do¶added inv0.2.0

func (c *V1SetIamPolicyCall) Do(opts ...googleapi.CallOption) (*Policy,error)

Do executes the "iap.setIamPolicy" call.Any non-2xx status code is an error. Response headers are in either*Policy.ServerResponse.Header or (if a response was returned at all) inerror.(*googleapi.Error).Header. Use googleapi.IsNotModified to checkwhether the returned error was because http.StatusNotModified was returned.

func (*V1SetIamPolicyCall)Fields¶added inv0.2.0

func (c *V1SetIamPolicyCall) Fields(s ...googleapi.Field) *V1SetIamPolicyCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*V1SetIamPolicyCall)Header¶added inv0.2.0

func (c *V1SetIamPolicyCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

type V1TestIamPermissionsCall struct {// contains filtered or unexported fields}

func (*V1TestIamPermissionsCall)Context¶added inv0.2.0

func (c *V1TestIamPermissionsCall) Context(ctxcontext.Context) *V1TestIamPermissionsCall

Context sets the context to be used in this call's Do method.

func (*V1TestIamPermissionsCall)Do¶added inv0.2.0

func (c *V1TestIamPermissionsCall) Do(opts ...googleapi.CallOption) (*TestIamPermissionsResponse,error)

Do executes the "iap.testIamPermissions" call.Any non-2xx status code is an error. Response headers are in either*TestIamPermissionsResponse.ServerResponse.Header or (if a response wasreturned at all) in error.(*googleapi.Error).Header. Usegoogleapi.IsNotModified to check whether the returned error was becausehttp.StatusNotModified was returned.

func (*V1TestIamPermissionsCall)Fields¶added inv0.2.0

func (c *V1TestIamPermissionsCall) Fields(s ...googleapi.Field) *V1TestIamPermissionsCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*V1TestIamPermissionsCall)Header¶added inv0.2.0

func (c *V1TestIamPermissionsCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

type V1UpdateIapSettingsCall struct {// contains filtered or unexported fields}

func (*V1UpdateIapSettingsCall)Context¶added inv0.12.0

func (c *V1UpdateIapSettingsCall) Context(ctxcontext.Context) *V1UpdateIapSettingsCall

Context sets the context to be used in this call's Do method.

func (*V1UpdateIapSettingsCall)Do¶added inv0.12.0

func (c *V1UpdateIapSettingsCall) Do(opts ...googleapi.CallOption) (*IapSettings,error)

Do executes the "iap.updateIapSettings" call.Any non-2xx status code is an error. Response headers are in either*IapSettings.ServerResponse.Header or (if a response was returned at all) inerror.(*googleapi.Error).Header. Use googleapi.IsNotModified to checkwhether the returned error was because http.StatusNotModified was returned.

func (*V1UpdateIapSettingsCall)Fields¶added inv0.12.0

func (c *V1UpdateIapSettingsCall) Fields(s ...googleapi.Field) *V1UpdateIapSettingsCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*V1UpdateIapSettingsCall)Header¶added inv0.12.0

func (c *V1UpdateIapSettingsCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

func (*V1UpdateIapSettingsCall)UpdateMask¶added inv0.12.0

func (c *V1UpdateIapSettingsCall) UpdateMask(updateMaskstring) *V1UpdateIapSettingsCall

UpdateMask sets the optional parameter "updateMask": The field maskspecifying which IAP settings should be updated. If omitted, then all of thesettings are updated. Seehttps://developers.google.com/protocol-buffers/docs/reference/google.protobuf#fieldmask.Note: All IAP reauth settings must always be set together, using the fieldmask: `iapSettings.accessSettings.reauthSettings`.

type V1ValidateAttributeExpressionCall struct {// contains filtered or unexported fields}

func (*V1ValidateAttributeExpressionCall)Context¶added inv0.126.0

func (c *V1ValidateAttributeExpressionCall) Context(ctxcontext.Context) *V1ValidateAttributeExpressionCall

Context sets the context to be used in this call's Do method.

func (*V1ValidateAttributeExpressionCall)Do¶added inv0.126.0

func (c *V1ValidateAttributeExpressionCall) Do(opts ...googleapi.CallOption) (*ValidateIapAttributeExpressionResponse,error)

Do executes the "iap.validateAttributeExpression" call.Any non-2xx status code is an error. Response headers are in either*ValidateIapAttributeExpressionResponse.ServerResponse.Header or (if aresponse was returned at all) in error.(*googleapi.Error).Header. Usegoogleapi.IsNotModified to check whether the returned error was becausehttp.StatusNotModified was returned.

func (*V1ValidateAttributeExpressionCall)Expression¶added inv0.126.0

func (c *V1ValidateAttributeExpressionCall) Expression(expressionstring) *V1ValidateAttributeExpressionCall

Expression sets the optional parameter "expression": Required. User inputstring expression. Should be of the form`attributes.saml_attributes.filter(attribute, attribute.name in['{attribute_name}', '{attribute_name}'])`

func (*V1ValidateAttributeExpressionCall)Fields¶added inv0.126.0

func (c *V1ValidateAttributeExpressionCall) Fields(s ...googleapi.Field) *V1ValidateAttributeExpressionCall

Fields allows partial responses to be retrieved. Seehttps://developers.google.com/gdata/docs/2.0/basics#PartialResponse for moredetails.

func (*V1ValidateAttributeExpressionCall)Header¶added inv0.126.0

func (c *V1ValidateAttributeExpressionCall) Header()http.Header

Header returns a http.Header that can be modified by the caller to addheaders to the request.

type ValidateIapAttributeExpressionResponse struct {// ServerResponse contains the HTTP response code and headers from the server.googleapi.ServerResponse `json:"-"`}

type WorkforceIdentitySettings struct {// Oauth2: OAuth 2.0 settings for IAP to perform OIDC flow with workforce// identity federation services.Oauth2 *OAuth2 `json:"oauth2,omitempty"`// WorkforcePools: The workforce pool resources. Only one workforce pool is// accepted.WorkforcePools []string `json:"workforcePools,omitempty"`// ForceSendFields is a list of field names (e.g. "Oauth2") to unconditionally// include in API requests. By default, fields with empty or default values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more// details.ForceSendFields []string `json:"-"`// NullFields is a list of field names (e.g. "Oauth2") to include in API// requests with the JSON null value. By default, fields with empty values are// omitted from API requests. See//https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details.NullFields []string `json:"-"`}

func (WorkforceIdentitySettings)MarshalJSON¶added inv0.178.0

func (sWorkforceIdentitySettings) MarshalJSON() ([]byte,error)