feat!: Update the public IAM Deny v2beta API

Google APIs · copybara-github · commit fb22ccd6ce5b · 2022-08-18T10:39:21.000-07:00
BREAKING CHANGE: remove google.api.resource_reference annotations

PiperOrigin-RevId: 468493946
diff --git a/google/iam/v2beta/BUILD.bazel b/google/iam/v2beta/BUILD.bazel
@@ -28,7 +28,6 @@ proto_library(
         "//google/api:annotations_proto",
         "//google/api:client_proto",
         "//google/api:field_behavior_proto",
-        "//google/api:resource_proto",
         "//google/longrunning:operations_proto",
         "//google/type:expr_proto",
         "@com_google_protobuf//:timestamp_proto",
@@ -75,6 +74,7 @@ java_gapic_library(
     test_deps = [
         ":iam_java_grpc",
     ],
+    transport = "grpc+rest",
     deps = [
         ":iam_java_proto",
         "//google/api:api_java_proto",
@@ -84,6 +84,7 @@ java_gapic_library(
 java_gapic_test(
     name = "iam_java_gapic_test_suite",
     test_classes = [
+        "com.google.iam.v2beta.PoliciesClientHttpJsonTest",
         "com.google.iam.v2beta.PoliciesClientTest",
     ],
     runtime_deps = [":iam_java_gapic_test"],
@@ -92,6 +93,8 @@ java_gapic_test(
 # Open Source Packages
 java_gapic_assembly_gradle_pkg(
     name = "google-cloud-iam-v2beta-java",
+    include_samples = True,
+    transport = "grpc+rest",
     deps = [
         ":iam_java_gapic",
         ":iam_java_grpc",
@@ -130,6 +133,7 @@ go_gapic_library(
     importpath = "cloud.google.com/go/iam/apiv2beta;iam",
     metadata = True,
     service_yaml = "iam_v2beta.yaml",
+    transport = "grpc+rest",
     deps = [
         ":iam_go_proto",
         "//google/longrunning:longrunning_go_proto",
@@ -171,11 +175,13 @@ py_gapic_library(
     srcs = [":iam_proto"],
     grpc_service_config = "iam_grpc_service_config.json",
     opt_args = [
-        "warehouse-package-name=google-cloud-iam",
-        "python-gapic-namespace=google.cloud",
         "python-gapic-name=iam",
+        "python-gapic-namespace=google.cloud",
+        "warehouse-package-name=google-cloud-iam",
     ],
     service_yaml = "iam_v2beta.yaml",
+    deps = [
+    ],
 )
 
 py_test(
@@ -292,10 +298,9 @@ ruby_grpc_library(
 ruby_cloud_gapic_library(
     name = "iam_ruby_gapic",
     srcs = [":iam_proto_with_info"],
-    extra_protoc_parameters = [
-        "ruby-cloud-gem-name=google-cloud-iam-v2beta",
-    ],
+    extra_protoc_parameters = ["ruby-cloud-gem-name=google-cloud-iam-v2beta"],
     grpc_service_config = "iam_grpc_service_config.json",
+    service_yaml = "iam_v2beta.yaml",
     deps = [
         ":iam_ruby_grpc",
         ":iam_ruby_proto",
diff --git a/google/iam/v2beta/deny.proto b/google/iam/v2beta/deny.proto
@@ -18,18 +18,20 @@ package google.iam.v2beta;
 
 import "google/type/expr.proto";
 
+option csharp_namespace = "Google.Cloud.Iam.V2Beta";
 option go_package = "google.golang.org/genproto/googleapis/iam/v2beta;iam";
 option java_multiple_files = true;
 option java_outer_classname = "DenyRuleProto";
 option java_package = "com.google.iam.v2beta";
+option php_namespace = "Google\\Cloud\\Iam\\V2beta";
 
 // A deny rule in an IAM deny policy.
 message DenyRule {
   // The identities that are prevented from using one or more permissions on
   // Google Cloud resources. This field can contain the following values:
   //
   // * `principalSet://goog/public:all`: A special identifier that represents
-  //   any user who is on the internet, even if they do not have a Google
+  //   any principal that is on the internet, even if they do not have a Google
   //   Account or are not logged in.
   //
   // * `principal://goog/subject/{email_id}`: A specific Google Account.
diff --git a/google/iam/v2beta/iam_v2beta.yaml b/google/iam/v2beta/iam_v2beta.yaml
@@ -5,6 +5,7 @@ title: Identity and Access Management (IAM) API
 
 apis:
 - name: google.iam.v2beta.Policies
+- name: google.longrunning.Operations
 
 types:
 - name: google.iam.v2beta.PolicyOperationMetadata
diff --git a/google/iam/v2beta/policy.proto b/google/iam/v2beta/policy.proto
@@ -19,15 +19,16 @@ package google.iam.v2beta;
 import "google/api/annotations.proto";
 import "google/api/client.proto";
 import "google/api/field_behavior.proto";
-import "google/api/resource.proto";
 import "google/iam/v2beta/deny.proto";
 import "google/longrunning/operations.proto";
 import "google/protobuf/timestamp.proto";
 
+option csharp_namespace = "Google.Cloud.Iam.V2Beta";
 option go_package = "google.golang.org/genproto/googleapis/iam/v2beta;iam";
 option java_multiple_files = true;
 option java_outer_classname = "PolicyProto";
 option java_package = "com.google.iam.v2beta";
+option php_namespace = "Google\\Cloud\\Iam\\V2beta";
 
 // An interface for managing Identity and Access Management (IAM) policies.
 service Policies {
@@ -104,11 +105,6 @@ service Policies {
 
 // Data for an IAM policy.
 message Policy {
-  option (google.api.resource) = {
-    type: "iam.googleapis.com/Policy"
-    pattern: "policies/{policy}"
-  };
-
   // Immutable. The resource name of the `Policy`, which must be unique. Format:
   // `policies/{attachment_point}/denypolicies/{policy_id}`
   //
@@ -219,12 +215,7 @@ message GetPolicyRequest {
   //
   // For organizations and folders, use the numeric ID in the full resource
   // name. For projects, you can use the alphanumeric or the numeric ID.
-  string name = 1 [
-    (google.api.field_behavior) = REQUIRED,
-    (google.api.resource_reference) = {
-      type: "iam.googleapis.com/Policy"
-    }
-  ];
+  string name = 1 [(google.api.field_behavior) = REQUIRED];
 }
 
 // Request message for `CreatePolicy`.
@@ -274,12 +265,7 @@ message DeletePolicyRequest {
   //
   // For organizations and folders, use the numeric ID in the full resource
   // name. For projects, you can use the alphanumeric or the numeric ID.
-  string name = 1 [
-    (google.api.field_behavior) = REQUIRED,
-    (google.api.resource_reference) = {
-      type: "iam.googleapis.com/Policy"
-    }
-  ];
+  string name = 1 [(google.api.field_behavior) = REQUIRED];
 
   // Optional. The expected `etag` of the policy to delete. If the value does not match
   // the value that is stored in IAM, the request fails with a `409` error code
