Synchronize new proto changes.
diff --git a/google/cloud/oslogin/common.proto b/google/cloud/oslogin/common.proto
new file mode 100644
index 0000000..aec538c
--- /dev/null
+++ b/google/cloud/oslogin/common.proto
@@ -0,0 +1,69 @@
+// Copyright 2017 Google Inc.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+syntax = "proto3";
+
+package google.cloud.oslogin.common;
+
+import "google/api/annotations.proto";
+
+option go_package = "google.golang.org/genproto/googleapis/cloud/oslogin/common;common";
+option java_outer_classname = "OsLoginProto";
+option java_package = "com.google.cloud.oslogin.common";
+
+
+// The POSIX account information associated with a Google account.
+message PosixAccount {
+ // Only one POSIX account can be marked as primary.
+ bool primary = 1;
+
+ // The username of the POSIX account.
+ string username = 2;
+
+ // The user ID.
+ int64 uid = 3;
+
+ // The default group ID.
+ int64 gid = 4;
+
+ // The path to the home directory for this account.
+ string home_directory = 5;
+
+ // The path to the logic shell for this account.
+ string shell = 6;
+
+ // The GECOS (user information) entry for this account.
+ string gecos = 7;
+
+ // System identifier for which account the username or uid applies to.
+ // By default, the empty value is used.
+ string system_id = 8;
+
+ // Output only. A POSIX account identifier.
+ string account_id = 9;
+}
+
+// The SSH public key information associated with a Google account.
+message SshPublicKey {
+ // Public key text in SSH format, defined by
+ // <a href="https://www.ietf.org/rfc/rfc4253.txt" target="_blank">RFC4253</a>
+ // section 6.6.
+ string key = 1;
+
+ // An expiration time in microseconds since epoch.
+ int64 expiration_time_usec = 2;
+
+ // Output only. The SHA-256 fingerprint of the SSH public key.
+ string fingerprint = 3;
+}
diff --git a/google/cloud/oslogin/oslogin.yaml b/google/cloud/oslogin/oslogin.yaml
new file mode 100644
index 0000000..67af7a3
--- /dev/null
+++ b/google/cloud/oslogin/oslogin.yaml
@@ -0,0 +1,60 @@
+type: google.api.Service
+config_version: 3
+name: oslogin.googleapis.com
+title: Google Cloud OS Login API
+
+apis:
+- name: google.cloud.oslogin.v1alpha.OsLoginService
+- name: google.cloud.oslogin.v1beta.OsLoginService
+
+documentation:
+ summary: Manages OS login configuration for Google account users.
+
+backend:
+ rules:
+ - selector: google.cloud.oslogin.v1alpha.OsLoginService.DeletePosixAccount
+ deadline: 10.0
+ - selector: google.cloud.oslogin.v1alpha.OsLoginService.DeleteSshPublicKey
+ deadline: 10.0
+ - selector: google.cloud.oslogin.v1alpha.OsLoginService.GetLoginProfile
+ deadline: 10.0
+ - selector: google.cloud.oslogin.v1alpha.OsLoginService.GetSshPublicKey
+ deadline: 10.0
+ - selector: google.cloud.oslogin.v1alpha.OsLoginService.ImportSshPublicKey
+ deadline: 10.0
+ - selector: google.cloud.oslogin.v1alpha.OsLoginService.UpdateSshPublicKey
+ deadline: 10.0
+ - selector: google.cloud.oslogin.v1beta.OsLoginService.DeletePosixAccount
+ deadline: 10.0
+ - selector: google.cloud.oslogin.v1beta.OsLoginService.DeleteSshPublicKey
+ deadline: 10.0
+ - selector: google.cloud.oslogin.v1beta.OsLoginService.GetLoginProfile
+ deadline: 10.0
+ - selector: google.cloud.oslogin.v1beta.OsLoginService.GetSshPublicKey
+ deadline: 10.0
+ - selector: google.cloud.oslogin.v1beta.OsLoginService.ImportSshPublicKey
+ deadline: 10.0
+ - selector: google.cloud.oslogin.v1beta.OsLoginService.UpdateSshPublicKey
+ deadline: 10.0
+
+authentication:
+ rules:
+ - selector: '*'
+ oauth:
+ canonical_scopes: |-
+ https://www.googleapis.com/auth/cloud-platform,
+ https://www.googleapis.com/auth/compute
+ - selector: google.cloud.oslogin.v1alpha.OsLoginService.GetLoginProfile
+ oauth:
+ canonical_scopes: |-
+ https://www.googleapis.com/auth/cloud-platform,
+ https://www.googleapis.com/auth/cloud-platform.read-only,
+ https://www.googleapis.com/auth/compute,
+ https://www.googleapis.com/auth/compute.readonly
+ - selector: google.cloud.oslogin.v1beta.OsLoginService.GetLoginProfile
+ oauth:
+ canonical_scopes: |-
+ https://www.googleapis.com/auth/cloud-platform,
+ https://www.googleapis.com/auth/cloud-platform.read-only,
+ https://www.googleapis.com/auth/compute,
+ https://www.googleapis.com/auth/compute.readonly
diff --git a/google/cloud/oslogin/v1alpha/oslogin.proto b/google/cloud/oslogin/v1alpha/oslogin.proto
new file mode 100644
index 0000000..806864a
--- /dev/null
+++ b/google/cloud/oslogin/v1alpha/oslogin.proto
@@ -0,0 +1,146 @@
+// Copyright 2017 Google Inc.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+syntax = "proto3";
+
+package google.cloud.oslogin.v1alpha;
+
+import "google/api/annotations.proto";
+import "google/cloud/oslogin/common.proto";
+import "google/protobuf/empty.proto";
+import "google/protobuf/field_mask.proto";
+
+option go_package = "google.golang.org/genproto/googleapis/cloud/oslogin/v1alpha;oslogin";
+option java_multiple_files = true;
+option java_outer_classname = "OsLoginProto";
+option java_package = "com.google.cloud.oslogin.v1alpha";
+
+
+// Cloud OS Login API
+//
+// The Cloud OS Login API allows you to manage users and their associated SSH
+// public keys for logging into virtual machines on Google Cloud Platform.
+service OsLoginService {
+ // Deletes a POSIX account.
+ rpc DeletePosixAccount(DeletePosixAccountRequest) returns (google.protobuf.Empty) {
+ option (google.api.http) = { delete: "/v1alpha/{name=users/*/projects/*}" };
+ }
+
+ // Deletes an SSH public key.
+ rpc DeleteSshPublicKey(DeleteSshPublicKeyRequest) returns (google.protobuf.Empty) {
+ option (google.api.http) = { delete: "/v1alpha/{name=users/*/sshPublicKeys/*}" };
+ }
+
+ // Retrieves the profile information used for logging in to a virtual machine
+ // on Google Compute Engine.
+ rpc GetLoginProfile(GetLoginProfileRequest) returns (LoginProfile) {
+ option (google.api.http) = { get: "/v1alpha/{name=users/*}/loginProfile" };
+ }
+
+ // Retrieves an SSH public key.
+ rpc GetSshPublicKey(GetSshPublicKeyRequest) returns (google.cloud.oslogin.common.SshPublicKey) {
+ option (google.api.http) = { get: "/v1alpha/{name=users/*/sshPublicKeys/*}" };
+ }
+
+ // Adds an SSH public key and returns the profile information. Default POSIX
+ // account information is set when no username and UID exist as part of the
+ // login profile.
+ rpc ImportSshPublicKey(ImportSshPublicKeyRequest) returns (ImportSshPublicKeyResponse) {
+ option (google.api.http) = { post: "/v1alpha/{parent=users/*}:importSshPublicKey" body: "ssh_public_key" };
+ }
+
+ // Updates an SSH public key and returns the profile information. This method
+ // supports patch semantics.
+ rpc UpdateSshPublicKey(UpdateSshPublicKeyRequest) returns (google.cloud.oslogin.common.SshPublicKey) {
+ option (google.api.http) = { patch: "/v1alpha/{name=users/*/sshPublicKeys/*}" body: "ssh_public_key" };
+ }
+}
+
+// The user profile information used for logging in to a virtual machine on
+// Google Compute Engine.
+message LoginProfile {
+ // A unique user ID for identifying the user.
+ string name = 1;
+
+ // The list of POSIX accounts associated with the Directory API user.
+ repeated google.cloud.oslogin.common.PosixAccount posix_accounts = 2;
+
+ // A map from SSH public key fingerprint to the associated key object.
+ map<string, google.cloud.oslogin.common.SshPublicKey> ssh_public_keys = 3;
+
+ // Indicates if the user is suspended.
+ bool suspended = 4;
+}
+
+// A request message for deleting a POSIX account entry.
+message DeletePosixAccountRequest {
+ // A reference to the POSIX account to update. POSIX accounts are identified
+ // by the project ID they are associated with. A reference to the POSIX
+ // account is in format `users/{user}/projects/{project}`.
+ string name = 1;
+}
+
+// A request message for deleting an SSH public key.
+message DeleteSshPublicKeyRequest {
+ // The fingerprint of the public key to update. Public keys are identified by
+ // their SHA-256 fingerprint. The fingerprint of the public key is in format
+ // `users/{user}/sshPublicKeys/{fingerprint}`.
+ string name = 1;
+}
+
+// A request message for retrieving the login profile information for a user.
+message GetLoginProfileRequest {
+ // The unique ID for the user in format `users/{user}`.
+ string name = 1;
+}
+
+// A request message for retrieving an SSH public key.
+message GetSshPublicKeyRequest {
+ // The fingerprint of the public key to retrieve. Public keys are identified
+ // by their SHA-256 fingerprint. The fingerprint of the public key is in
+ // format `users/{user}/sshPublicKeys/{fingerprint}`.
+ string name = 1;
+}
+
+// A request message for importing an SSH public key.
+message ImportSshPublicKeyRequest {
+ // The unique ID for the user in format `users/{user}`.
+ string parent = 1;
+
+ // The SSH public key and expiration time.
+ google.cloud.oslogin.common.SshPublicKey ssh_public_key = 2;
+
+ // The project ID of the Google Cloud Platform project.
+ string project_id = 3;
+}
+
+// A response message for importing an SSH public key.
+message ImportSshPublicKeyResponse {
+ // The login profile information for the user.
+ LoginProfile login_profile = 1;
+}
+
+// A request message for updating an SSH public key.
+message UpdateSshPublicKeyRequest {
+ // The fingerprint of the public key to update. Public keys are identified by
+ // their SHA-256 fingerprint. The fingerprint of the public key is in format
+ // `users/{user}/sshPublicKeys/{fingerprint}`.
+ string name = 1;
+
+ // The SSH public key and expiration time.
+ google.cloud.oslogin.common.SshPublicKey ssh_public_key = 2;
+
+ // Mask to control which fields get updated. Updates all if not present.
+ google.protobuf.FieldMask update_mask = 3;
+}
diff --git a/google/cloud/oslogin/v1beta/oslogin.proto b/google/cloud/oslogin/v1beta/oslogin.proto
new file mode 100644
index 0000000..19cb5ee
--- /dev/null
+++ b/google/cloud/oslogin/v1beta/oslogin.proto
@@ -0,0 +1,147 @@
+// Copyright 2017 Google Inc.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+syntax = "proto3";
+
+package google.cloud.oslogin.v1beta;
+
+import "google/api/annotations.proto";
+import "google/cloud/oslogin/common.proto";
+import "google/protobuf/empty.proto";
+import "google/protobuf/field_mask.proto";
+
+option go_package = "google.golang.org/genproto/googleapis/cloud/oslogin/v1beta;oslogin";
+option java_multiple_files = true;
+option java_outer_classname = "OsLoginProto";
+option java_package = "com.google.cloud.oslogin.v1beta";
+
+
+// Cloud OS Login API
+//
+// The Cloud OS Login API allows you to manage users and their associated SSH
+// public keys for logging into virtual machines on Google Cloud Platform.
+service OsLoginService {
+ // Deletes a POSIX account.
+ rpc DeletePosixAccount(DeletePosixAccountRequest) returns (google.protobuf.Empty) {
+ option (google.api.http) = { delete: "/v1beta/{name=users/*/projects/*}" };
+ }
+
+ // Deletes an SSH public key.
+ rpc DeleteSshPublicKey(DeleteSshPublicKeyRequest) returns (google.protobuf.Empty) {
+ option (google.api.http) = { delete: "/v1beta/{name=users/*/sshPublicKeys/*}" };
+ }
+
+ // Retrieves the profile information used for logging in to a virtual machine
+ // on Google Compute Engine.
+ rpc GetLoginProfile(GetLoginProfileRequest) returns (LoginProfile) {
+ option (google.api.http) = { get: "/v1beta/{name=users/*}/loginProfile" };
+ }
+
+ // Retrieves an SSH public key.
+ rpc GetSshPublicKey(GetSshPublicKeyRequest) returns (google.cloud.oslogin.common.SshPublicKey) {
+ option (google.api.http) = { get: "/v1beta/{name=users/*/sshPublicKeys/*}" };
+ }
+
+ // Adds an SSH public key and returns the profile information. Default POSIX
+ // account information is set when no username and UID exist as part of the
+ // login profile.
+ rpc ImportSshPublicKey(ImportSshPublicKeyRequest) returns (ImportSshPublicKeyResponse) {
+ option (google.api.http) = { post: "/v1beta/{parent=users/*}:importSshPublicKey" body: "ssh_public_key" };
+ }
+
+ // Updates an SSH public key and returns the profile information. This method
+ // supports patch semantics.
+ rpc UpdateSshPublicKey(UpdateSshPublicKeyRequest) returns (google.cloud.oslogin.common.SshPublicKey) {
+ option (google.api.http) = { patch: "/v1beta/{name=users/*/sshPublicKeys/*}" body: "ssh_public_key" };
+ }
+}
+
+// The user profile information used for logging in to a virtual machine on
+// Google Compute Engine.
+message LoginProfile {
+ // The primary email address that uniquely identifies the user.
+ string name = 1;
+
+ // The list of POSIX accounts associated with the user.
+ repeated google.cloud.oslogin.common.PosixAccount posix_accounts = 2;
+
+ // A map from SSH public key fingerprint to the associated key object.
+ map<string, google.cloud.oslogin.common.SshPublicKey> ssh_public_keys = 3;
+
+ // Indicates if the user is suspended. A suspended user cannot log in but
+ // their profile information is retained.
+ bool suspended = 4;
+}
+
+// A request message for deleting a POSIX account entry.
+message DeletePosixAccountRequest {
+ // A reference to the POSIX account to update. POSIX accounts are identified
+ // by the project ID they are associated with. A reference to the POSIX
+ // account is in format `users/{user}/projects/{project}`.
+ string name = 1;
+}
+
+// A request message for deleting an SSH public key.
+message DeleteSshPublicKeyRequest {
+ // The fingerprint of the public key to update. Public keys are identified by
+ // their SHA-256 fingerprint. The fingerprint of the public key is in format
+ // `users/{user}/sshPublicKeys/{fingerprint}`.
+ string name = 1;
+}
+
+// A request message for retrieving the login profile information for a user.
+message GetLoginProfileRequest {
+ // The unique ID for the user in format `users/{user}`.
+ string name = 1;
+}
+
+// A request message for retrieving an SSH public key.
+message GetSshPublicKeyRequest {
+ // The fingerprint of the public key to retrieve. Public keys are identified
+ // by their SHA-256 fingerprint. The fingerprint of the public key is in
+ // format `users/{user}/sshPublicKeys/{fingerprint}`.
+ string name = 1;
+}
+
+// A request message for importing an SSH public key.
+message ImportSshPublicKeyRequest {
+ // The unique ID for the user in format `users/{user}`.
+ string parent = 1;
+
+ // The SSH public key and expiration time.
+ google.cloud.oslogin.common.SshPublicKey ssh_public_key = 2;
+
+ // The project ID of the Google Cloud Platform project.
+ string project_id = 3;
+}
+
+// A response message for importing an SSH public key.
+message ImportSshPublicKeyResponse {
+ // The login profile information for the user.
+ LoginProfile login_profile = 1;
+}
+
+// A request message for updating an SSH public key.
+message UpdateSshPublicKeyRequest {
+ // The fingerprint of the public key to update. Public keys are identified by
+ // their SHA-256 fingerprint. The fingerprint of the public key is in format
+ // `users/{user}/sshPublicKeys/{fingerprint}`.
+ string name = 1;
+
+ // The SSH public key and expiration time.
+ google.cloud.oslogin.common.SshPublicKey ssh_public_key = 2;
+
+ // Mask to control which fields get updated. Updates all if not present.
+ google.protobuf.FieldMask update_mask = 3;
+}
