feat: Create the public IAM Deny v2 API

.github/sync-repo-settings.yaml

@@ -0,0 +1,36 @@
+# https://github.com/googleapis/repo-automation-bots/tree/main/packages/sync-repo-settings
+# Rules for main branch protection
+branchProtectionRules:
+# Identifies the protection rule pattern. Name of the branch to be protected.
+# Defaults to `main`
+- pattern: main
+  requiresCodeOwnerReviews: true
+  requiresStrictStatusChecks: true
+  requiredStatusCheckContexts:
+    - 'cla/google'
+    - 'OwlBot Post Processor'
+    - 'docs'
+    - 'docfx'
+    - 'lint'
+    - 'unit (3.6)'
+    - 'unit (3.7)'
+    - 'unit (3.8)'
+    - 'unit (3.9)'
+    - 'unit (3.10)'
+    - 'cover'
+    - 'Samples - Lint'
+    - 'Samples - Python 3.7'
+    - 'Samples - Python 3.8'
+    - 'Samples - Python 3.9'
+    - 'Samples - Python 3.10'
+permissionRules:
+  - team: actools-python
+    permission: admin
+  - team: actools
+    permission: admin
+  - team: yoshi-python
+    permission: push
+  - team: python-samples-owners
+    permission: push
+  - team: python-samples-reviewers
+    permission: push

docs/iam_v2/policies.rst

@@ -0,0 +1,10 @@
+Policies
+--------------------------
+
+.. automodule:: google.cloud.iam_v2.services.policies
+    :members:
+    :inherited-members:
+
+.. automodule:: google.cloud.iam_v2.services.policies.pagers
+    :members:
+    :inherited-members:

docs/iam_v2/services.rst

@@ -0,0 +1,6 @@
+Services for Google Cloud Iam v2 API
+====================================
+.. toctree::
+    :maxdepth: 2
+
+    policies

docs/iam_v2/types.rst

@@ -0,0 +1,7 @@
+Types for Google Cloud Iam v2 API
+=================================
+
+.. automodule:: google.cloud.iam_v2.types
+    :members:
+    :undoc-members:
+    :show-inheritance:

docs/index.rst

@@ -2,9 +2,14 @@
 
 .. include:: multiprocessing.rst
 
-This package includes clients for multiple versions of Cloud Identity and Access Management.
-By default, you will get version ``iam_credentials_v1``.
 
+API Reference
+-------------
+.. toctree::
+    :maxdepth: 2
+
+    iam_v2/services
+    iam_v2/types
 
 API Reference
 -------------
@@ -22,7 +27,6 @@ API Reference
     iam_v2beta/services
     iam_v2beta/types
 
-
 Migration Guide
 ---------------
 

google/cloud/iam_credentials_v1/services/iam_credentials/async_client.py

@@ -234,6 +234,13 @@ async def generate_access_token(
 
         .. code-block:: python
 
+            # This snippet has been automatically generated and should be regarded as a
+            # code template only.
+            # It will require modifications to work:
+            # - It may require correct/in-range values for request initialization.
+            # - It may require specifying regional endpoints when creating the service
+            #   client as shown in:
+            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
             from google.cloud import iam_credentials_v1
 
             async def sample_generate_access_token():
@@ -243,7 +250,7 @@ async def sample_generate_access_token():
                 # Initialize request argument(s)
                 request = iam_credentials_v1.GenerateAccessTokenRequest(
                     name="name_value",
-                    scope=['scope_value_1', 'scope_value_2'],
+                    scope=['scope_value1', 'scope_value2'],
                 )
 
                 # Make the request
@@ -391,6 +398,13 @@ async def generate_id_token(
 
         .. code-block:: python
 
+            # This snippet has been automatically generated and should be regarded as a
+            # code template only.
+            # It will require modifications to work:
+            # - It may require correct/in-range values for request initialization.
+            # - It may require specifying regional endpoints when creating the service
+            #   client as shown in:
+            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
             from google.cloud import iam_credentials_v1
 
             async def sample_generate_id_token():
@@ -541,6 +555,13 @@ async def sign_blob(
 
         .. code-block:: python
 
+            # This snippet has been automatically generated and should be regarded as a
+            # code template only.
+            # It will require modifications to work:
+            # - It may require correct/in-range values for request initialization.
+            # - It may require specifying regional endpoints when creating the service
+            #   client as shown in:
+            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
             from google.cloud import iam_credentials_v1
 
             async def sample_sign_blob():
@@ -678,6 +699,13 @@ async def sign_jwt(
 
         .. code-block:: python
 
+            # This snippet has been automatically generated and should be regarded as a
+            # code template only.
+            # It will require modifications to work:
+            # - It may require correct/in-range values for request initialization.
+            # - It may require specifying regional endpoints when creating the service
+            #   client as shown in:
+            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
             from google.cloud import iam_credentials_v1
 
             async def sample_sign_jwt():

google/cloud/iam_credentials_v1/services/iam_credentials/client.py

@@ -455,6 +455,13 @@ def generate_access_token(
 
         .. code-block:: python
 
+            # This snippet has been automatically generated and should be regarded as a
+            # code template only.
+            # It will require modifications to work:
+            # - It may require correct/in-range values for request initialization.
+            # - It may require specifying regional endpoints when creating the service
+            #   client as shown in:
+            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
             from google.cloud import iam_credentials_v1
 
             def sample_generate_access_token():
@@ -464,7 +471,7 @@ def sample_generate_access_token():
                 # Initialize request argument(s)
                 request = iam_credentials_v1.GenerateAccessTokenRequest(
                     name="name_value",
-                    scope=['scope_value_1', 'scope_value_2'],
+                    scope=['scope_value1', 'scope_value2'],
                 )
 
                 # Make the request
@@ -602,6 +609,13 @@ def generate_id_token(
 
         .. code-block:: python
 
+            # This snippet has been automatically generated and should be regarded as a
+            # code template only.
+            # It will require modifications to work:
+            # - It may require correct/in-range values for request initialization.
+            # - It may require specifying regional endpoints when creating the service
+            #   client as shown in:
+            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
             from google.cloud import iam_credentials_v1
 
             def sample_generate_id_token():
@@ -742,6 +756,13 @@ def sign_blob(
 
         .. code-block:: python
 
+            # This snippet has been automatically generated and should be regarded as a
+            # code template only.
+            # It will require modifications to work:
+            # - It may require correct/in-range values for request initialization.
+            # - It may require specifying regional endpoints when creating the service
+            #   client as shown in:
+            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
             from google.cloud import iam_credentials_v1
 
             def sample_sign_blob():
@@ -869,6 +890,13 @@ def sign_jwt(
 
         .. code-block:: python
 
+            # This snippet has been automatically generated and should be regarded as a
+            # code template only.
+            # It will require modifications to work:
+            # - It may require correct/in-range values for request initialization.
+            # - It may require specifying regional endpoints when creating the service
+            #   client as shown in:
+            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
             from google.cloud import iam_credentials_v1
 
             def sample_sign_jwt():

google/cloud/iam_v2/__init__.py

@@ -0,0 +1,44 @@
+# -*- coding: utf-8 -*-
+# Copyright 2022 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+from .services.policies import PoliciesAsyncClient, PoliciesClient
+from .types.deny import DenyRule
+from .types.policy import (
+    CreatePolicyRequest,
+    DeletePolicyRequest,
+    GetPolicyRequest,
+    ListPoliciesRequest,
+    ListPoliciesResponse,
+    Policy,
+    PolicyOperationMetadata,
+    PolicyRule,
+    UpdatePolicyRequest,
+)
+
+__all__ = (
+    "PoliciesAsyncClient",
+    "CreatePolicyRequest",
+    "DeletePolicyRequest",
+    "DenyRule",
+    "GetPolicyRequest",
+    "ListPoliciesRequest",
+    "ListPoliciesResponse",
+    "PoliciesClient",
+    "Policy",
+    "PolicyOperationMetadata",
+    "PolicyRule",
+    "UpdatePolicyRequest",
+)

google/cloud/iam_v2/gapic_metadata.json

@@ -0,0 +1,73 @@
+ {
+  "comment": "This file maps proto services/RPCs to the corresponding library clients/methods",
+  "language": "python",
+  "libraryPackage": "google.cloud.iam_v2",
+  "protoPackage": "google.iam.v2",
+  "schema": "1.0",
+  "services": {
+    "Policies": {
+      "clients": {
+        "grpc": {
+          "libraryClient": "PoliciesClient",
+          "rpcs": {
+            "CreatePolicy": {
+              "methods": [
+                "create_policy"
+              ]
+            },
+            "DeletePolicy": {
+              "methods": [
+                "delete_policy"
+              ]
+            },
+            "GetPolicy": {
+              "methods": [
+                "get_policy"
+              ]
+            },
+            "ListPolicies": {
+              "methods": [
+                "list_policies"
+              ]
+            },
+            "UpdatePolicy": {
+              "methods": [
+                "update_policy"
+              ]
+            }
+          }
+        },
+        "grpc-async": {
+          "libraryClient": "PoliciesAsyncClient",
+          "rpcs": {
+            "CreatePolicy": {
+              "methods": [
+                "create_policy"
+              ]
+            },
+            "DeletePolicy": {
+              "methods": [
+                "delete_policy"
+              ]
+            },
+            "GetPolicy": {
+              "methods": [
+                "get_policy"
+              ]
+            },
+            "ListPolicies": {
+              "methods": [
+                "list_policies"
+              ]
+            },
+            "UpdatePolicy": {
+              "methods": [
+                "update_policy"
+              ]
+            }
+          }
+        }
+      }
+    }
+  }
+}

google/cloud/iam_v2/py.typed

@@ -0,0 +1,2 @@
+# Marker file for PEP 561.
+# The google-cloud-iam package uses inline types.

google/cloud/iam_v2/services/__init__.py

@@ -0,0 +1,15 @@
+# -*- coding: utf-8 -*-
+# Copyright 2022 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#

google/cloud/iam_v2/services/policies/__init__.py

@@ -0,0 +1,22 @@
+# -*- coding: utf-8 -*-
+# Copyright 2022 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+from .async_client import PoliciesAsyncClient
+from .client import PoliciesClient
+
+__all__ = (
+    "PoliciesClient",
+    "PoliciesAsyncClient",
+)