{ "kind": "discovery#restDescription", "auth": { "oauth2": { "scopes": { "https://www.googleapis.com/auth/cloud-platform": { "description": "See, edit, configure, and delete your Google Cloud data and see the email address for your Google Account." } } } }, "baseUrl": "https://osconfig.googleapis.com/", "icons": { "x16": "http://www.google.com/images/icons/product/search-16.gif", "x32": "http://www.google.com/images/icons/product/search-32.gif" }, "version": "v1", "canonicalName": "OS Config", "servicePath": "", "ownerDomain": "google.com", "ownerName": "Google", "revision": "20260820", "protocol": "rest", "basePath": "", "mtlsRootUrl": "https://osconfig.mtls.googleapis.com/", "schemas": { "InventoryItem": { "description": "A single piece of inventory on a VM.", "id": "InventoryItem", "properties": { "availablePackage": { "$ref": "InventorySoftwarePackage", "description": "Software package available to be installed on the VM instance." }, "updateTime": { "description": "When this inventory item was last modified.", "type": "string", "format": "google-datetime" }, "installedPackage": { "description": "Software package present on the VM instance.", "$ref": "InventorySoftwarePackage" }, "type": { "enumDescriptions": [ "Invalid. A type must be specified.", "This represents a package that is installed on the VM.", "This represents an update that is available for a package." ], "description": "The specific type of inventory, correlating to its specific details.", "type": "string", "enum": [ "TYPE_UNSPECIFIED", "INSTALLED_PACKAGE", "AVAILABLE_PACKAGE" ] }, "createTime": { "type": "string", "description": "When this inventory item was first detected.", "format": "google-datetime" }, "originType": { "description": "The origin of this inventory item.", "enum": [ "ORIGIN_TYPE_UNSPECIFIED", "INVENTORY_REPORT" ], "enumDescriptions": [ "Invalid. An origin type must be specified.", "This inventory item was discovered as the result of the agent reporting inventory via the reporting API." ], "type": "string" }, "id": { "type": "string", "description": "Identifier for this item, unique across items for this VM." } }, "type": "object" }, "OSPolicyAssignmentReportOSPolicyComplianceOSPolicyResourceCompliance": { "type": "object", "description": "Compliance data for an OS policy resource.", "id": "OSPolicyAssignmentReportOSPolicyComplianceOSPolicyResourceCompliance", "properties": { "complianceStateReason": { "type": "string", "description": "A reason for the resource to be in the given compliance state. This field is always populated when `compliance_state` is `UNKNOWN`. The following values are supported when `compliance_state == UNKNOWN` * `execution-errors`: Errors were encountered by the agent while executing the resource and the compliance state couldn't be determined. * `execution-skipped-by-agent`: Resource execution was skipped by the agent because errors were encountered while executing prior resources in the OS policy. * `os-policy-execution-attempt-failed`: The execution of the OS policy containing this resource failed and the compliance state couldn't be determined. * `os-policy-execution-pending`: OS policy that owns this resource was assigned to the given VM, but was not executed yet." }, "osPolicyResourceId": { "type": "string", "description": "The ID of the OS policy resource." }, "configSteps": { "type": "array", "items": { "$ref": "OSPolicyAssignmentReportOSPolicyComplianceOSPolicyResourceComplianceOSPolicyResourceConfigStep" }, "description": "Ordered list of configuration completed by the agent for the OS policy resource." }, "execResourceOutput": { "$ref": "OSPolicyAssignmentReportOSPolicyComplianceOSPolicyResourceComplianceExecResourceOutput", "description": "ExecResource specific output." }, "complianceState": { "type": "string", "enumDescriptions": [ "The resource is in an unknown compliance state. To get more details about why the policy is in this state, review the output of the `compliance_state_reason` field.", "Resource is compliant.", "Resource is non-compliant." ], "enum": [ "UNKNOWN", "COMPLIANT", "NON_COMPLIANT" ], "description": "The compliance state of the resource." } } }, "MessageSet": { "type": "object", "id": "MessageSet", "description": "This is proto2's version of MessageSet. DEPRECATED: DO NOT USE FOR NEW FIELDS. If you are using editions or proto2, please make your own extendable messages for your use case. If you are using proto3, please use `Any` instead. MessageSet was the implementation of extensions for proto1. When proto2 was introduced, extensions were implemented as a first-class feature. This schema for MessageSet was meant to be a \"bridge\" solution to migrate MessageSet-bearing messages from proto1 to proto2. This schema has been open-sourced only to facilitate the migration of Google products with MessageSet-bearing messages to open-source environments.", "deprecated": true, "properties": {} }, "GoogleCloudOsconfigV2beta__OperationMetadata": { "id": "GoogleCloudOsconfigV2beta__OperationMetadata", "properties": { "statusMessage": { "type": "string", "readOnly": true, "description": "Output only. Human-readable status of the operation, if any." }, "verb": { "readOnly": true, "type": "string", "description": "Output only. Name of the verb executed by the operation." }, "createTime": { "format": "google-datetime", "description": "Output only. The time the operation was created.", "readOnly": true, "type": "string" }, "requestedCancellation": { "type": "boolean", "description": "Output only. Identifies whether the user has requested cancellation of the operation. Operations that have been cancelled successfully have Operation.error value with a google.rpc.Status.code of 1, corresponding to `Code.CANCELLED`.", "readOnly": true }, "target": { "description": "Output only. Server-defined resource path for the target of the operation.", "type": "string", "readOnly": true }, "endTime": { "readOnly": true, "description": "Output only. The time the operation finished running.", "type": "string", "format": "google-datetime" }, "apiVersion": { "description": "Output only. API version used to start the operation.", "readOnly": true, "type": "string" } }, "type": "object", "description": "Represents the metadata of the long-running operation." }, "OSPolicyResourceRepositoryResourceZypperRepository": { "id": "OSPolicyResourceRepositoryResourceZypperRepository", "type": "object", "properties": { "gpgKeys": { "description": "URIs of GPG keys.", "items": { "type": "string" }, "type": "array" }, "displayName": { "description": "The display name of the repository.", "type": "string" }, "id": { "description": "Required. A one word, unique name for this repository. This is the `repo id` in the zypper config file and also the `display_name` if `display_name` is omitted. This id is also used as the unique identifier when checking for GuestPolicy conflicts.", "type": "string" }, "baseUrl": { "description": "Required. The location of the repository directory.", "type": "string" } }, "description": "Represents a single zypper package repository. These are added to a repo file that is managed at `/etc/zypp/repos.d/google_osconfig.repo`." }, "ListPatchJobInstanceDetailsResponse": { "id": "ListPatchJobInstanceDetailsResponse", "properties": { "nextPageToken": { "description": "A pagination token that can be used to get the next page of results.", "type": "string" }, "patchJobInstanceDetails": { "items": { "$ref": "PatchJobInstanceDetails" }, "type": "array", "description": "A list of instance status." } }, "description": "A response message for listing the instances details for a patch job.", "type": "object" }, "WeeklySchedule": { "id": "WeeklySchedule", "type": "object", "properties": { "dayOfWeek": { "description": "Required. Day of the week.", "type": "string", "enumDescriptions": [ "The day of the week is unspecified.", "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday", "Sunday" ], "enum": [ "DAY_OF_WEEK_UNSPECIFIED", "MONDAY", "TUESDAY", "WEDNESDAY", "THURSDAY", "FRIDAY", "SATURDAY", "SUNDAY" ] } }, "description": "Represents a weekly schedule." }, "CVSSv3": { "properties": { "scope": { "description": "The Scope metric captures whether a vulnerability in one vulnerable component impacts resources in components beyond its security scope.", "type": "string", "enum": [ "SCOPE_UNSPECIFIED", "SCOPE_UNCHANGED", "SCOPE_CHANGED" ], "enumDescriptions": [ "Invalid value.", "An exploited vulnerability can only affect resources managed by the same security authority.", "An exploited vulnerability can affect resources beyond the security scope managed by the security authority of the vulnerable component." ] }, "attackVector": { "enum": [ "ATTACK_VECTOR_UNSPECIFIED", "ATTACK_VECTOR_NETWORK", "ATTACK_VECTOR_ADJACENT", "ATTACK_VECTOR_LOCAL", "ATTACK_VECTOR_PHYSICAL" ], "description": "This metric reflects the context by which vulnerability exploitation is possible.", "type": "string", "enumDescriptions": [ "Invalid value.", "The vulnerable component is bound to the network stack and the set of possible attackers extends beyond the other options listed below, up to and including the entire Internet.", "The vulnerable component is bound to the network stack, but the attack is limited at the protocol level to a logically adjacent topology.", "The vulnerable component is not bound to the network stack and the attacker's path is via read/write/execute capabilities.", "The attack requires the attacker to physically touch or manipulate the vulnerable component." ] }, "exploitabilityScore": { "type": "number", "format": "float", "description": "The Exploitability sub-score equation is derived from the Base Exploitability metrics. https://www.first.org/cvss/specification-document#2-1-Exploitability-Metrics" }, "impactScore": { "type": "number", "description": "The Impact sub-score equation is derived from the Base Impact metrics.", "format": "float" }, "userInteraction": { "description": "This metric captures the requirement for a human user, other than the attacker, to participate in the successful compromise of the vulnerable component.", "enumDescriptions": [ "Invalid value.", "The vulnerable system can be exploited without interaction from any user.", "Successful exploitation of this vulnerability requires a user to take some action before the vulnerability can be exploited." ], "enum": [ "USER_INTERACTION_UNSPECIFIED", "USER_INTERACTION_NONE", "USER_INTERACTION_REQUIRED" ], "type": "string" }, "integrityImpact": { "enum": [ "IMPACT_UNSPECIFIED", "IMPACT_HIGH", "IMPACT_LOW", "IMPACT_NONE" ], "type": "string", "enumDescriptions": [ "Invalid value.", "High impact.", "Low impact.", "No impact." ], "description": "This metric measures the impact to integrity of a successfully exploited vulnerability." }, "confidentialityImpact": { "description": "This metric measures the impact to the confidentiality of the information resources managed by a software component due to a successfully exploited vulnerability.", "enum": [ "IMPACT_UNSPECIFIED", "IMPACT_HIGH", "IMPACT_LOW", "IMPACT_NONE" ], "enumDescriptions": [ "Invalid value.", "High impact.", "Low impact.", "No impact." ], "type": "string" }, "baseScore": { "type": "number", "description": "The base score is a function of the base metric scores. https://www.first.org/cvss/specification-document#Base-Metrics", "format": "float" }, "availabilityImpact": { "description": "This metric measures the impact to the availability of the impacted component resulting from a successfully exploited vulnerability.", "type": "string", "enum": [ "IMPACT_UNSPECIFIED", "IMPACT_HIGH", "IMPACT_LOW", "IMPACT_NONE" ], "enumDescriptions": [ "Invalid value.", "High impact.", "Low impact.", "No impact." ] }, "privilegesRequired": { "type": "string", "enum": [ "PRIVILEGES_REQUIRED_UNSPECIFIED", "PRIVILEGES_REQUIRED_NONE", "PRIVILEGES_REQUIRED_LOW", "PRIVILEGES_REQUIRED_HIGH" ], "enumDescriptions": [ "Invalid value.", "The attacker is unauthorized prior to attack, and therefore does not require any access to settings or files of the vulnerable system to carry out an attack.", "The attacker requires privileges that provide basic user capabilities that could normally affect only settings and files owned by a user. Alternatively, an attacker with Low privileges has the ability to access only non-sensitive resources.", "The attacker requires privileges that provide significant (e.g., administrative) control over the vulnerable component allowing access to component-wide settings and files." ], "description": "This metric describes the level of privileges an attacker must possess before successfully exploiting the vulnerability." }, "attackComplexity": { "enum": [ "ATTACK_COMPLEXITY_UNSPECIFIED", "ATTACK_COMPLEXITY_LOW", "ATTACK_COMPLEXITY_HIGH" ], "enumDescriptions": [ "Invalid value.", "Specialized access conditions or extenuating circumstances do not exist. An attacker can expect repeatable success when attacking the vulnerable component.", "A successful attack depends on conditions beyond the attacker's control. That is, a successful attack cannot be accomplished at will, but requires the attacker to invest in some measurable amount of effort in preparation or execution against the vulnerable component before a successful attack can be expected." ], "type": "string", "description": "This metric describes the conditions beyond the attacker's control that must exist in order to exploit the vulnerability." } }, "id": "CVSSv3", "description": "Common Vulnerability Scoring System version 3. For details, see https://www.first.org/cvss/specification-document", "type": "object" }, "PausePatchDeploymentRequest": { "description": "A request message for pausing a patch deployment.", "id": "PausePatchDeploymentRequest", "properties": {}, "type": "object" }, "OSPolicyResourceRepositoryResource": { "description": "A resource that manages a package repository.", "type": "object", "properties": { "apt": { "$ref": "OSPolicyResourceRepositoryResourceAptRepository", "description": "An Apt Repository." }, "yum": { "description": "A Yum Repository.", "$ref": "OSPolicyResourceRepositoryResourceYumRepository" }, "goo": { "description": "A Goo Repository.", "$ref": "OSPolicyResourceRepositoryResourceGooRepository" }, "zypper": { "$ref": "OSPolicyResourceRepositoryResourceZypperRepository", "description": "A Zypper Repository." } }, "id": "OSPolicyResourceRepositoryResource" }, "PatchDeployment": { "properties": { "createTime": { "format": "google-datetime", "description": "Output only. Time the patch deployment was created. Timestamp is in [RFC3339](https://www.ietf.org/rfc/rfc3339.txt) text format.", "type": "string", "readOnly": true }, "name": { "description": "Unique name for the patch deployment resource in a project. The patch deployment name is in the form: `projects/{project_id}/patchDeployments/{patch_deployment_id}`. This field is ignored when you create a new patch deployment.", "type": "string" }, "oneTimeSchedule": { "$ref": "OneTimeSchedule", "description": "Required. Schedule a one-time execution." }, "duration": { "description": "Optional. Duration of the patch. After the duration ends, the patch times out.", "format": "google-duration", "type": "string" }, "updateTime": { "format": "google-datetime", "description": "Output only. Time the patch deployment was last updated. Timestamp is in [RFC3339](https://www.ietf.org/rfc/rfc3339.txt) text format.", "type": "string", "readOnly": true }, "description": { "description": "Optional. Description of the patch deployment. Length of the description is limited to 1024 characters.", "type": "string" }, "rollout": { "description": "Optional. Rollout strategy of the patch job.", "$ref": "PatchRollout" }, "state": { "readOnly": true, "enumDescriptions": [ "The default value. This value is used if the state is omitted.", "Active value means that patch deployment generates Patch Jobs.", "Paused value means that patch deployment does not generate Patch jobs. Requires user action to move in and out from this state." ], "type": "string", "enum": [ "STATE_UNSPECIFIED", "ACTIVE", "PAUSED" ], "description": "Output only. Current state of the patch deployment." }, "recurringSchedule": { "description": "Required. Schedule recurring executions.", "$ref": "RecurringSchedule" }, "instanceFilter": { "$ref": "PatchInstanceFilter", "description": "Required. VM instances to patch." }, "lastExecuteTime": { "type": "string", "description": "Output only. The last time a patch job was started by this deployment. Timestamp is in [RFC3339](https://www.ietf.org/rfc/rfc3339.txt) text format.", "readOnly": true, "format": "google-datetime" }, "patchConfig": { "$ref": "PatchConfig", "description": "Optional. Patch configuration that is applied." } }, "type": "object", "id": "PatchDeployment", "description": "Patch deployments are configurations that individual patch jobs use to complete a patch. These configurations include instance filter, package repository settings, and a schedule. For more information about creating and managing patch deployments, see [Scheduling patch jobs](https://cloud.google.com/compute/docs/os-patch-management/schedule-patch-jobs)." }, "OSPolicyAssignmentOperationMetadata": { "properties": { "osPolicyAssignment": { "type": "string", "description": "Reference to the `OSPolicyAssignment` API resource. Format: `projects/{project_number}/locations/{location}/osPolicyAssignments/{os_policy_assignment_id@revision_id}`" }, "apiMethod": { "description": "The OS policy assignment API method.", "enum": [ "API_METHOD_UNSPECIFIED", "CREATE", "UPDATE", "DELETE" ], "type": "string", "enumDescriptions": [ "Invalid value", "Create OS policy assignment API method", "Update OS policy assignment API method", "Delete OS policy assignment API method" ] }, "rolloutState": { "type": "string", "enumDescriptions": [ "Invalid value", "The rollout is in progress.", "The rollout is being cancelled.", "The rollout is cancelled.", "The rollout has completed successfully." ], "description": "State of the rollout", "enum": [ "ROLLOUT_STATE_UNSPECIFIED", "IN_PROGRESS", "CANCELLING", "CANCELLED", "SUCCEEDED" ] }, "rolloutUpdateTime": { "type": "string", "format": "google-datetime", "description": "Rollout update time" }, "rolloutStartTime": { "description": "Rollout start time", "type": "string", "format": "google-datetime" } }, "id": "OSPolicyAssignmentOperationMetadata", "description": "OS policy assignment operation metadata provided by OS policy assignment API methods that return long running operations.", "type": "object" }, "OSPolicyAssignmentReportOSPolicyCompliance": { "id": "OSPolicyAssignmentReportOSPolicyCompliance", "properties": { "osPolicyId": { "type": "string", "description": "The OS policy id" }, "complianceStateReason": { "type": "string", "description": "The reason for the OS policy to be in an unknown compliance state. This field is always populated when `compliance_state` is `UNKNOWN`. If populated, the field can contain one of the following values: * `vm-not-running`: The VM was not running. * `os-policies-not-supported-by-agent`: The version of the OS Config agent running on the VM does not support running OS policies. * `no-agent-detected`: The OS Config agent is not detected for the VM. * `resource-execution-errors`: The OS Config agent encountered errors while executing one or more resources in the policy. See `os_policy_resource_compliances` for details. * `task-timeout`: The task sent to the agent to apply the policy timed out. * `unexpected-agent-state`: The OS Config agent did not report the final status of the task that attempted to apply the policy. Instead, the agent unexpectedly started working on a different task. This mostly happens when the agent or VM unexpectedly restarts while applying OS policies. * `internal-service-errors`: Internal service errors were encountered while attempting to apply the policy. * `os-policy-execution-pending`: OS policy was assigned to the given VM, but was not executed yet. Typically this is a transient condition that will go away after the next policy execution cycle." }, "osPolicyResourceCompliances": { "type": "array", "description": "Compliance data for each resource within the policy that is applied to the VM.", "items": { "$ref": "OSPolicyAssignmentReportOSPolicyComplianceOSPolicyResourceCompliance" } }, "complianceState": { "enum": [ "UNKNOWN", "COMPLIANT", "NON_COMPLIANT" ], "enumDescriptions": [ "The policy is in an unknown compliance state. Refer to the field `compliance_state_reason` to learn the exact reason for the policy to be in this compliance state.", "Policy is compliant. The policy is compliant if all the underlying resources are also compliant.", "Policy is non-compliant. The policy is non-compliant if one or more underlying resources are non-compliant." ], "description": "The compliance state of the OS policy.", "type": "string" } }, "type": "object", "description": "Compliance data for an OS policy" }, "Operation": { "id": "Operation", "type": "object", "properties": { "metadata": { "type": "object", "description": "Service-specific metadata associated with the operation. It typically contains progress information and common metadata such as create time. Some services might not provide such metadata. Any method that returns a long-running operation should document the metadata type, if any.", "additionalProperties": { "type": "any", "description": "Properties of the object. Contains field @type with type URL." } }, "name": { "type": "string", "description": "The server-assigned name, which is only unique within the same service that originally returns it. If you use the default HTTP mapping, the `name` should be a resource name ending with `operations/{unique_id}`." }, "error": { "description": "The error result of the operation in case of failure or cancellation.", "$ref": "Status" }, "done": { "type": "boolean", "description": "If the value is `false`, it means the operation is still in progress. If `true`, the operation is completed, and either `error` or `response` is available." }, "response": { "additionalProperties": { "type": "any", "description": "Properties of the object. Contains field @type with type URL." }, "description": "The normal, successful response of the operation. If the original method returns no data on success, such as `Delete`, the response is `google.protobuf.Empty`. If the original method is standard `Get`/`Create`/`Update`, the response should be the resource. For other methods, the response should have the type `XxxResponse`, where `Xxx` is the original method name. For example, if the original method name is `TakeSnapshot()`, the inferred response type is `TakeSnapshotResponse`.", "type": "object" } }, "description": "This resource represents a long-running operation that is the result of a network API call." }, "VulnerabilityReport": { "id": "VulnerabilityReport", "description": "This API resource represents the vulnerability report for a specified Compute Engine virtual machine (VM) instance at a given point in time. For more information, see [Vulnerability reports](https://cloud.google.com/compute/docs/instances/os-inventory-management#vulnerability-reports).", "type": "object", "properties": { "highestUpgradableCveSeverity": { "type": "string", "readOnly": true, "enumDescriptions": [ "Default SeverityLevel. This value is unused.", "Vulnerability has no severity level.", "Vulnerability severity level is minimal. This is level below the low severity level.", "Vulnerability severity level is low. This is level below the medium severity level.", "Vulnerability severity level is medium. This is level below the high severity level.", "Vulnerability severity level is high. This is level below the critical severity level.", "Vulnerability severity level is critical. This is the highest severity level." ], "enum": [ "VULNERABILITY_SEVERITY_LEVEL_UNSPECIFIED", "NONE", "MINIMAL", "LOW", "MEDIUM", "HIGH", "CRITICAL" ], "description": "Output only. Highest level of severity among all the upgradable vulnerabilities with CVEs attached." }, "name": { "type": "string", "readOnly": true, "description": "Output only. The `vulnerabilityReport` API resource name. Format: `projects/{project_number}/locations/{location}/instances/{instance_id}/vulnerabilityReport`" }, "vulnerabilities": { "readOnly": true, "type": "array", "description": "Output only. List of vulnerabilities affecting the VM.", "items": { "$ref": "VulnerabilityReportVulnerability" } }, "updateTime": { "format": "google-datetime", "type": "string", "description": "Output only. The timestamp for when the last vulnerability report was generated for the VM.", "readOnly": true } } }, "OSPolicyAssignmentReport": { "description": "A report of the OS policy assignment status for a given instance.", "properties": { "name": { "description": "The `OSPolicyAssignmentReport` API resource name. Format: `projects/{project_number}/locations/{location}/instances/{instance_id}/osPolicyAssignments/{os_policy_assignment_id}/report`", "type": "string" }, "updateTime": { "type": "string", "format": "google-datetime", "description": "Timestamp for when the report was last generated." }, "instance": { "description": "The Compute Engine VM instance name.", "type": "string" }, "lastRunId": { "description": "Unique identifier of the last attempted run to apply the OS policies associated with this assignment on the VM. This ID is logged by the OS Config agent while applying the OS policies associated with this assignment on the VM. NOTE: If the service is unable to successfully connect to the agent for this run, then this id will not be available in the agent logs.", "type": "string" }, "osPolicyAssignment": { "description": "Reference to the `OSPolicyAssignment` API resource that the `OSPolicy` belongs to. Format: `projects/{project_number}/locations/{location}/osPolicyAssignments/{os_policy_assignment_id@revision_id}`", "type": "string" }, "osPolicyCompliances": { "type": "array", "items": { "$ref": "OSPolicyAssignmentReportOSPolicyCompliance" }, "description": "Compliance data for each `OSPolicy` that is applied to the VM." } }, "id": "OSPolicyAssignmentReport", "type": "object" }, "OSPolicyAssignmentRollout": { "id": "OSPolicyAssignmentRollout", "description": "Message to configure the rollout at the zonal level for the OS policy assignment.", "type": "object", "properties": { "minWaitDuration": { "description": "Required. This determines the minimum duration of time to wait after the configuration changes are applied through the current rollout. A VM continues to count towards the `disruption_budget` at least until this duration of time has passed after configuration changes are applied.", "type": "string", "format": "google-duration" }, "disruptionBudget": { "$ref": "FixedOrPercent", "description": "Required. The maximum number (or percentage) of VMs per zone to disrupt at any given moment." } } }, "OSPolicyResourcePackageResourceZypper": { "id": "OSPolicyResourcePackageResourceZypper", "type": "object", "description": "A package managed by Zypper. - install: `zypper -y install package` - remove: `zypper -y rm package`", "properties": { "name": { "type": "string", "description": "Required. Package name." } } }, "ListOSPolicyAssignmentsResponse": { "properties": { "osPolicyAssignments": { "description": "The list of assignments", "items": { "$ref": "OSPolicyAssignment" }, "type": "array" }, "nextPageToken": { "description": "The pagination token to retrieve the next page of OS policy assignments.", "type": "string" } }, "id": "ListOSPolicyAssignmentsResponse", "type": "object", "description": "A response message for listing all assignments under given parent." }, "AptSettings": { "id": "AptSettings", "properties": { "type": { "enum": [ "TYPE_UNSPECIFIED", "DIST", "UPGRADE" ], "description": "By changing the type to DIST, the patching is performed using `apt-get dist-upgrade` instead.", "enumDescriptions": [ "By default, upgrade will be performed.", "Runs `apt-get dist-upgrade`.", "Runs `apt-get upgrade`." ], "type": "string" }, "excludes": { "type": "array", "description": "List of packages to exclude from update. These packages will be excluded", "items": { "type": "string" } }, "exclusivePackages": { "items": { "type": "string" }, "type": "array", "description": "An exclusive list of packages to be updated. These are the only packages that will be updated. If these packages are not installed, they will be ignored. This field cannot be specified with any other patch configuration fields." } }, "description": "Apt patching is completed by executing `apt-get update && apt-get upgrade`. Additional options can be set to control how this is executed.", "type": "object" }, "InventoryWindowsUpdatePackage": { "id": "InventoryWindowsUpdatePackage", "properties": { "kbArticleIds": { "items": { "type": "string" }, "description": "A collection of Microsoft Knowledge Base article IDs that are associated with the update package.", "type": "array" }, "categories": { "items": { "$ref": "InventoryWindowsUpdatePackageWindowsUpdateCategory" }, "description": "The categories that are associated with this update package.", "type": "array" }, "updateId": { "type": "string", "description": "Gets the identifier of an update package. Stays the same across revisions." }, "lastDeploymentChangeTime": { "format": "google-datetime", "type": "string", "description": "The last published date of the update, in (UTC) date and time." }, "description": { "description": "The localized description of the update package.", "type": "string" }, "moreInfoUrls": { "type": "array", "description": "A collection of URLs that provide more information about the update package.", "items": { "type": "string" } }, "supportUrl": { "type": "string", "description": "A hyperlink to the language-specific support information for the update." }, "revisionNumber": { "type": "integer", "format": "int32", "description": "The revision number of this update package." }, "title": { "description": "The localized title of the update package.", "type": "string" } }, "description": "Details related to a Windows Update package. Field data and names are taken from Windows Update API IUpdate Interface: https://docs.microsoft.com/en-us/windows/win32/api/_wua/ Descriptive fields like title, and description are localized based on the locale of the VM being updated.", "type": "object" }, "OSPolicyResourceFileRemote": { "type": "object", "description": "Specifies a file available via some URI.", "id": "OSPolicyResourceFileRemote", "properties": { "sha256Checksum": { "type": "string", "description": "SHA256 checksum of the remote file." }, "uri": { "description": "Required. URI from which to fetch the object. It should contain both the protocol and path following the format `{protocol}://{location}`.", "type": "string" } } }, "OSPolicyAssignmentInstanceFilterInventory": { "id": "OSPolicyAssignmentInstanceFilterInventory", "type": "object", "properties": { "osShortName": { "description": "Required. The OS short name", "type": "string" }, "osVersion": { "type": "string", "description": "The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of `7`, specify the following value for this field `7.*` An empty string matches all OS versions." } }, "description": "VM inventory details." }, "PatchInstanceFilter": { "type": "object", "properties": { "instances": { "type": "array", "items": { "type": "string" }, "description": "Targets any of the VM instances specified. Instances are specified by their URI in the form `zones/[ZONE]/instances/[INSTANCE_NAME]`, `projects/[PROJECT_ID]/zones/[ZONE]/instances/[INSTANCE_NAME]`, or `https://www.googleapis.com/compute/v1/projects/[PROJECT_ID]/zones/[ZONE]/instances/[INSTANCE_NAME]`" }, "groupLabels": { "description": "Targets VM instances matching ANY of these GroupLabels. This allows targeting of disparate groups of VM instances.", "items": { "$ref": "PatchInstanceFilterGroupLabel" }, "type": "array" }, "zones": { "items": { "type": "string" }, "type": "array", "description": "Targets VM instances in ANY of these zones. Leave empty to target VM instances in any zone." }, "instanceNamePrefixes": { "items": { "type": "string" }, "type": "array", "description": "Targets VMs whose name starts with one of these prefixes. Similar to labels, this is another way to group VMs when targeting configs, for example prefix=\"prod-\"." }, "all": { "type": "boolean", "description": "Target all VM instances in the project. If true, no other criteria is permitted." } }, "id": "PatchInstanceFilter", "description": "A filter to target VM instances for patching. The targeted VMs must meet all criteria specified. So if both labels and zones are specified, the patch job targets only VMs with those labels and in those zones." }, "OSPolicyResourceGroup": { "type": "object", "properties": { "resources": { "type": "array", "items": { "$ref": "OSPolicyResource" }, "description": "Required. List of resources configured for this resource group. The resources are executed in the exact order specified here." }, "inventoryFilters": { "description": "List of inventory filters for the resource group. The resources in this resource group are applied to the target VM if it satisfies at least one of the following inventory filters. For example, to apply this resource group to VMs running either `RHEL` or `CentOS` operating systems, specify 2 items for the list with following values: inventory_filters[0].os_short_name='rhel' and inventory_filters[1].os_short_name='centos' If the list is empty, this resource group will be applied to the target VM unconditionally.", "items": { "$ref": "OSPolicyInventoryFilter" }, "type": "array" } }, "id": "OSPolicyResourceGroup", "description": "Resource groups provide a mechanism to group OS policy resources. Resource groups enable OS policy authors to create a single OS policy to be applied to VMs running different operating Systems. When the OS policy is applied to a target VM, the appropriate resource group within the OS policy is selected based on the `OSFilter` specified within the resource group." }, "OSPolicyResourcePackageResourceYUM": { "id": "OSPolicyResourcePackageResourceYUM", "description": "A package managed by YUM. - install: `yum -y install package` - remove: `yum -y remove package`", "type": "object", "properties": { "name": { "description": "Required. Package name.", "type": "string" } } }, "OSPolicyResourceFile": { "type": "object", "description": "A remote or local file.", "properties": { "localPath": { "description": "A local path within the VM to use.", "type": "string" }, "remote": { "$ref": "OSPolicyResourceFileRemote", "description": "A generic remote file." }, "allowInsecure": { "description": "Defaults to false. When false, files are subject to validations based on the file type: Remote: A checksum must be specified. Cloud Storage: An object generation number must be specified.", "type": "boolean" }, "gcs": { "$ref": "OSPolicyResourceFileGcs", "description": "A Cloud Storage object." } }, "id": "OSPolicyResourceFile" }, "PatchJobInstanceDetailsSummary": { "type": "object", "properties": { "failedInstanceCount": { "type": "string", "format": "int64", "description": "Number of instances that failed." }, "downloadingPatchesInstanceCount": { "type": "string", "description": "Number of instances that are downloading patches.", "format": "int64" }, "noAgentDetectedInstanceCount": { "description": "Number of instances that do not appear to be running the agent. Check to ensure that the agent is installed, running, and able to communicate with the service.", "type": "string", "format": "int64" }, "timedOutInstanceCount": { "format": "int64", "type": "string", "description": "Number of instances that exceeded the time out while applying the patch." }, "skippedInstanceCount": { "description": "Number of instances that were skipped during patching.", "format": "int64", "type": "string" }, "inactiveInstanceCount": { "type": "string", "format": "int64", "description": "Number of instances that are inactive." }, "succeededInstanceCount": { "type": "string", "format": "int64", "description": "Number of instances that have completed successfully." }, "pendingInstanceCount": { "description": "Number of instances pending patch job.", "type": "string", "format": "int64" }, "ackedInstanceCount": { "type": "string", "format": "int64", "description": "Number of instances that have acked and will start shortly." }, "startedInstanceCount": { "description": "Number of instances that have started.", "format": "int64", "type": "string" }, "prePatchStepInstanceCount": { "type": "string", "format": "int64", "description": "Number of instances that are running the pre-patch step." }, "applyingPatchesInstanceCount": { "format": "int64", "type": "string", "description": "Number of instances that are applying patches." }, "rebootingInstanceCount": { "format": "int64", "type": "string", "description": "Number of instances rebooting." }, "notifiedInstanceCount": { "format": "int64", "type": "string", "description": "Number of instances notified about patch job." }, "succeededRebootRequiredInstanceCount": { "type": "string", "format": "int64", "description": "Number of instances that require reboot." }, "postPatchStepInstanceCount": { "description": "Number of instances that are running the post-patch step.", "type": "string", "format": "int64" } }, "id": "PatchJobInstanceDetailsSummary", "description": "A summary of the current patch state across all instances that this patch job affects. Contains counts of instances in different states. These states map to `InstancePatchState`. List patch job instance details to see the specific states of each instance." }, "ZypperSettings": { "description": "Zypper patching is performed by running `zypper patch`. See also https://en.opensuse.org/SDB:Zypper_manual.", "properties": { "categories": { "description": "Install only patches with these categories. Common categories include security, recommended, and feature.", "items": { "type": "string" }, "type": "array" }, "withOptional": { "type": "boolean", "description": "Adds the `--with-optional` flag to `zypper patch`." }, "withUpdate": { "description": "Adds the `--with-update` flag, to `zypper patch`.", "type": "boolean" }, "severities": { "type": "array", "items": { "type": "string" }, "description": "Install only patches with these severities. Common severities include critical, important, moderate, and low." }, "exclusivePatches": { "type": "array", "description": "An exclusive list of patches to be updated. These are the only patches that will be installed using 'zypper patch patch:' command. This field must not be used with any other patch configuration fields.", "items": { "type": "string" } }, "excludes": { "items": { "type": "string" }, "type": "array", "description": "List of patches to exclude from update." } }, "id": "ZypperSettings", "type": "object" }, "OSPolicyResourceFileGcs": { "id": "OSPolicyResourceFileGcs", "properties": { "object": { "description": "Required. Name of the Cloud Storage object.", "type": "string" }, "generation": { "description": "Generation number of the Cloud Storage object.", "type": "string", "format": "int64" }, "bucket": { "description": "Required. Bucket of the Cloud Storage object.", "type": "string" } }, "type": "object", "description": "Specifies a file available as a Cloud Storage Object." }, "OneTimeSchedule": { "properties": { "executeTime": { "format": "google-datetime", "description": "Required. The desired patch job execution time.", "type": "string" } }, "type": "object", "description": "Sets the time for a one time patch deployment. Timestamp is in [RFC3339](https://www.ietf.org/rfc/rfc3339.txt) text format.", "id": "OneTimeSchedule" }, "CancelOperationRequest": { "description": "The request message for Operations.CancelOperation.", "id": "CancelOperationRequest", "properties": {}, "type": "object" }, "OSPolicyResourcePackageResourceMSI": { "id": "OSPolicyResourcePackageResourceMSI", "properties": { "properties": { "description": "Additional properties to use during installation. This should be in the format of Property=Setting. Appended to the defaults of `ACTION=INSTALL REBOOT=ReallySuppress`.", "type": "array", "items": { "type": "string" } }, "source": { "description": "Required. The MSI package.", "$ref": "OSPolicyResourceFile" } }, "description": "An MSI package. MSI packages only support INSTALLED state.", "type": "object" }, "GooSettings": { "description": "Googet patching is performed by running `googet update`.", "id": "GooSettings", "type": "object", "properties": {} }, "OSPolicyResourcePackageResource": { "properties": { "deb": { "$ref": "OSPolicyResourcePackageResourceDeb", "description": "A deb package file." }, "desiredState": { "enumDescriptions": [ "Unspecified is invalid.", "Ensure that the package is installed.", "The agent ensures that the package is not installed and uninstalls it if detected." ], "type": "string", "enum": [ "DESIRED_STATE_UNSPECIFIED", "INSTALLED", "REMOVED" ], "description": "Required. The desired state the agent should maintain for this package." }, "apt": { "description": "A package managed by Apt.", "$ref": "OSPolicyResourcePackageResourceAPT" }, "rpm": { "description": "An rpm package file.", "$ref": "OSPolicyResourcePackageResourceRPM" }, "googet": { "description": "A package managed by GooGet.", "$ref": "OSPolicyResourcePackageResourceGooGet" }, "msi": { "$ref": "OSPolicyResourcePackageResourceMSI", "description": "An MSI package." }, "zypper": { "description": "A package managed by Zypper.", "$ref": "OSPolicyResourcePackageResourceZypper" }, "yum": { "$ref": "OSPolicyResourcePackageResourceYUM", "description": "A package managed by YUM." } }, "type": "object", "id": "OSPolicyResourcePackageResource", "description": "A resource that manages a system package." }, "TimeZone": { "description": "Represents a time zone from the [IANA Time Zone Database](https://www.iana.org/time-zones).", "id": "TimeZone", "type": "object", "properties": { "id": { "description": "IANA Time Zone Database time zone. For example \"America/New_York\".", "type": "string" }, "version": { "description": "Optional. IANA Time Zone Database version number. For example \"2019a\".", "type": "string" } } }, "ListPatchDeploymentsResponse": { "description": "A response message for listing patch deployments.", "type": "object", "id": "ListPatchDeploymentsResponse", "properties": { "patchDeployments": { "items": { "$ref": "PatchDeployment" }, "description": "The list of patch deployments.", "type": "array" }, "nextPageToken": { "description": "A pagination token that can be used to get the next page of patch deployments.", "type": "string" } } }, "ListInventoriesResponse": { "description": "A response message for listing inventory data for all VMs in a specified location.", "id": "ListInventoriesResponse", "type": "object", "properties": { "inventories": { "description": "List of inventory objects.", "items": { "$ref": "Inventory" }, "type": "array" }, "nextPageToken": { "description": "The pagination token to retrieve the next page of inventory objects.", "type": "string" } } }, "InventoryVersionedPackage": { "id": "InventoryVersionedPackage", "description": "Information related to the a standard versioned package. This includes package info for APT, Yum, Zypper, and Googet package managers.", "properties": { "version": { "description": "The version of the package.", "type": "string" }, "packageName": { "description": "The name of the package.", "type": "string" }, "architecture": { "type": "string", "description": "The system architecture this package is intended for." } }, "type": "object" }, "VulnerabilityReportVulnerabilityItem": { "type": "object", "properties": { "availableInventoryItemId": { "description": "Corresponds to the `AVAILABLE_PACKAGE` inventory item on the VM. If the vulnerability report was not updated after the VM inventory update, these values might not display in VM inventory. If there is no available fix, the field is empty. The `inventory_item` value specifies the latest `SoftwarePackage` available to the VM that fixes the vulnerability.", "type": "string" }, "fixedCpeUri": { "description": "The recommended [CPE URI](https://cpe.mitre.org/specification/) update that contains a fix for this vulnerability.", "type": "string" }, "installedInventoryItemId": { "type": "string", "description": "Corresponds to the `INSTALLED_PACKAGE` inventory item on the VM. This field displays the inventory items affected by this vulnerability. If the vulnerability report was not updated after the VM inventory update, these values might not display in VM inventory. For some operating systems, this field might be empty." }, "upstreamFix": { "description": "The upstream OS patch, packages or KB that fixes the vulnerability.", "type": "string" } }, "description": "OS inventory item that is affected by a vulnerability or fixed as a result of a vulnerability.", "id": "VulnerabilityReportVulnerabilityItem" }, "OSPolicy": { "description": "An OS policy defines the desired state configuration for a VM.", "type": "object", "properties": { "resourceGroups": { "type": "array", "description": "Required. List of resource groups for the policy. For a particular VM, resource groups are evaluated in the order specified and the first resource group that is applicable is selected and the rest are ignored. If none of the resource groups are applicable for a VM, the VM is considered to be non-compliant w.r.t this policy. This behavior can be toggled by the flag `allow_no_resource_group_match`", "items": { "$ref": "OSPolicyResourceGroup" } }, "id": { "description": "Required. The id of the OS policy with the following restrictions: * Must contain only lowercase letters, numbers, and hyphens. * Must start with a letter. * Must be between 1-63 characters. * Must end with a number or a letter. * Must be unique within the assignment.", "type": "string" }, "description": { "type": "string", "description": "Policy description. Length of the description is limited to 1024 characters." }, "allowNoResourceGroupMatch": { "type": "boolean", "description": "This flag determines the OS policy compliance status when none of the resource groups within the policy are applicable for a VM. Set this value to `true` if the policy needs to be reported as compliant even if the policy has nothing to validate or enforce." }, "mode": { "type": "string", "description": "Required. Policy mode", "enum": [ "MODE_UNSPECIFIED", "VALIDATION", "ENFORCEMENT" ], "enumDescriptions": [ "Invalid mode", "This mode checks if the configuration resources in the policy are in their desired state. No actions are performed if they are not in the desired state. This mode is used for reporting purposes.", "This mode checks if the configuration resources in the policy are in their desired state, and if not, enforces the desired state." ] } }, "id": "OSPolicy" }, "InventoryOsInfo": { "properties": { "shortName": { "type": "string", "description": "The operating system short name. For example, 'windows' or 'debian'." }, "osconfigAgentVersion": { "type": "string", "description": "The current version of the OS Config agent running on the VM." }, "hostname": { "description": "The VM hostname.", "type": "string" }, "kernelRelease": { "type": "string", "description": "The kernel release of the operating system." }, "kernelVersion": { "description": "The kernel version of the operating system.", "type": "string" }, "architecture": { "description": "The system architecture of the operating system.", "type": "string" }, "longName": { "description": "The operating system long name. For example 'Debian GNU/Linux 9' or 'Microsoft Window Server 2019 Datacenter'.", "type": "string" }, "version": { "description": "The version of the operating system.", "type": "string" } }, "id": "InventoryOsInfo", "description": "Operating system information for the VM.", "type": "object" }, "GcsObject": { "id": "GcsObject", "properties": { "generationNumber": { "type": "string", "description": "Required. Generation number of the Cloud Storage object. This is used to ensure that the ExecStep specified by this PatchJob does not change.", "format": "int64" }, "bucket": { "type": "string", "description": "Required. Bucket of the Cloud Storage object." }, "object": { "type": "string", "description": "Required. Name of the Cloud Storage object." } }, "description": "Cloud Storage object representation.", "type": "object" }, "OSPolicyResourcePackageResourceGooGet": { "properties": { "name": { "type": "string", "description": "Required. Package name." } }, "description": "A package managed by GooGet. - install: `googet -noconfirm install package` - remove: `googet -noconfirm remove package`", "id": "OSPolicyResourcePackageResourceGooGet", "type": "object" }, "FixedOrPercent": { "properties": { "fixed": { "description": "Specifies a fixed value.", "format": "int32", "type": "integer" }, "percent": { "type": "integer", "description": "Specifies the relative value defined as a percentage, which will be multiplied by a reference value.", "format": "int32" } }, "description": "Message encapsulating a value that can be either absolute (\"fixed\") or relative (\"percent\") to a value.", "id": "FixedOrPercent", "type": "object" }, "GoogleCloudOsconfigV2__OperationMetadata": { "type": "object", "description": "Represents the metadata of the long-running operation.", "properties": { "target": { "type": "string", "description": "Output only. Server-defined resource path for the target of the operation.", "readOnly": true }, "endTime": { "type": "string", "description": "Output only. The time the operation finished running.", "format": "google-datetime", "readOnly": true }, "requestedCancellation": { "description": "Output only. Identifies whether the user has requested cancellation of the operation. Operations that have been cancelled successfully have Operation.error value with a google.rpc.Status.code of 1, corresponding to `Code.CANCELLED`.", "type": "boolean", "readOnly": true }, "verb": { "description": "Output only. Name of the verb executed by the operation.", "readOnly": true, "type": "string" }, "createTime": { "description": "Output only. The time the operation was created.", "format": "google-datetime", "readOnly": true, "type": "string" }, "statusMessage": { "description": "Output only. Human-readable status of the operation, if any.", "readOnly": true, "type": "string" }, "apiVersion": { "description": "Output only. API version used to start the operation.", "readOnly": true, "type": "string" } }, "id": "GoogleCloudOsconfigV2__OperationMetadata" }, "InventorySoftwarePackage": { "id": "InventorySoftwarePackage", "properties": { "aptPackage": { "description": "Details of an APT package. For details about the apt package manager, see https://wiki.debian.org/Apt.", "$ref": "InventoryVersionedPackage" }, "windowsApplication": { "description": "Details of Windows Application.", "$ref": "InventoryWindowsApplication" }, "cosPackage": { "description": "Details of a COS package.", "$ref": "InventoryVersionedPackage" }, "zypperPackage": { "description": "Details of a Zypper package. For details about the Zypper package manager, see https://en.opensuse.org/SDB:Zypper_manual.", "$ref": "InventoryVersionedPackage" }, "googetPackage": { "description": "Details of a Googet package. For details about the googet package manager, see https://github.com/google/googet.", "$ref": "InventoryVersionedPackage" }, "zypperPatch": { "description": "Details of a Zypper patch. For details about the Zypper package manager, see https://en.opensuse.org/SDB:Zypper_manual.", "$ref": "InventoryZypperPatch" }, "wuaPackage": { "description": "Details of a Windows Update package. See https://docs.microsoft.com/en-us/windows/win32/api/_wua/ for information about Windows Update.", "$ref": "InventoryWindowsUpdatePackage" }, "yumPackage": { "description": "Yum package info. For details about the yum package manager, see https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/deployment_guide/ch-yum.", "$ref": "InventoryVersionedPackage" }, "qfePackage": { "description": "Details of a Windows Quick Fix engineering package. See https://docs.microsoft.com/en-us/windows/win32/cimwin32prov/win32-quickfixengineering for info in Windows Quick Fix Engineering.", "$ref": "InventoryWindowsQuickFixEngineeringPackage" } }, "description": "Software package information of the operating system.", "type": "object" }, "PatchConfig": { "description": "Patch configuration specifications. Contains details on how to apply the patch(es) to a VM instance.", "id": "PatchConfig", "properties": { "yum": { "$ref": "YumSettings", "description": "Yum update settings. Use this setting to override the default `yum` patch rules." }, "goo": { "$ref": "GooSettings", "description": "Goo update settings. Use this setting to override the default `goo` patch rules." }, "migInstancesAllowed": { "description": "Allows the patch job to run on Managed instance groups (MIGs).", "type": "boolean" }, "windowsUpdate": { "description": "Windows update settings. Use this override the default windows patch rules.", "$ref": "WindowsUpdateSettings" }, "preStep": { "$ref": "ExecStep", "description": "The `ExecStep` to run before the patch update." }, "zypper": { "description": "Zypper update settings. Use this setting to override the default `zypper` patch rules.", "$ref": "ZypperSettings" }, "skipUnpatchableVms": { "description": "Optional. Enables enhanced reporting for the patch job: 1. The patch job skips instances that cannot be patched and reports them as `SKIPPED`. An instance cannot be patched for two reasons: 1. The instance runs Container-Optimized OS (COS), which cannot be patched. 2. The instance is part of a managed instance group (MIG), and patching MIG instances is disabled in the patch job's configuration (PatchConfig.migInstancesAllowed is `false`). 2. The patch job is reported as `SUCCEEDED` if it completes without errors, even if some instances are `SKIPPED`. 3. The patch job is reported as `COMPLETED_WITH_INACTIVE_VMS` if it completes without errors, but does not patch instances that are `INACTIVE`.", "type": "boolean" }, "postStep": { "description": "The `ExecStep` to run after the patch update.", "$ref": "ExecStep" }, "apt": { "$ref": "AptSettings", "description": "Apt update settings. Use this setting to override the default `apt` patch rules." }, "rebootConfig": { "enum": [ "REBOOT_CONFIG_UNSPECIFIED", "DEFAULT", "ALWAYS", "NEVER" ], "type": "string", "description": "Post-patch reboot settings.", "enumDescriptions": [ "The default behavior is DEFAULT.", "The agent decides if a reboot is necessary by checking signals such as registry keys on Windows or `/var/run/reboot-required` on APT based systems. On RPM based systems, a set of core system package install times are compared with system boot time.", "Always reboot the machine after the update completes.", "Never reboot the machine after the update completes." ] } }, "type": "object" }, "StatusProto": { "description": "Wire-format for a Status object", "type": "object", "properties": { "canonicalCode": { "description": "copybara:strip_begin(b/383363683) copybara:strip_end_and_replace optional int32 canonical_code = 6;", "type": "integer", "format": "int32" }, "messageSet": { "description": "message_set associates an arbitrary proto message with the status. copybara:strip_begin(b/383363683) copybara:strip_end_and_replace optional proto2.bridge.MessageSet message_set = 5;", "$ref": "MessageSet" }, "code": { "description": "Numeric code drawn from the space specified below. Often, this is the canonical error space, and code is drawn from google3/util/task/codes.proto copybara:strip_begin(b/383363683) copybara:strip_end_and_replace optional int32 code = 1;", "format": "int32", "type": "integer" }, "space": { "description": "copybara:strip_begin(b/383363683) Space to which this status belongs copybara:strip_end_and_replace optional string space = 2; // Space to which this status belongs", "type": "string" }, "message": { "type": "string", "description": "Detail message copybara:strip_begin(b/383363683) copybara:strip_end_and_replace optional string message = 3;" } }, "id": "StatusProto" }, "ListOSPolicyAssignmentRevisionsResponse": { "properties": { "osPolicyAssignments": { "items": { "$ref": "OSPolicyAssignment" }, "description": "The OS policy assignment revisions", "type": "array" }, "nextPageToken": { "type": "string", "description": "The pagination token to retrieve the next page of OS policy assignment revisions." } }, "id": "ListOSPolicyAssignmentRevisionsResponse", "type": "object", "description": "A response message for listing all revisions for a OS policy assignment." }, "ResumePatchDeploymentRequest": { "type": "object", "properties": {}, "description": "A request message for resuming a patch deployment.", "id": "ResumePatchDeploymentRequest" }, "VulnerabilityReportVulnerabilityDetails": { "type": "object", "id": "VulnerabilityReportVulnerabilityDetails", "properties": { "cve": { "description": "The CVE of the vulnerability. CVE cannot be empty and the combination of should be unique across vulnerabilities for a VM.", "type": "string" }, "references": { "type": "array", "items": { "$ref": "VulnerabilityReportVulnerabilityDetailsReference" }, "description": "Corresponds to the references attached to the `VulnerabilityDetails`." }, "description": { "description": "The note or description describing the vulnerability from the distro.", "type": "string" }, "severity": { "description": "Assigned severity/impact ranking from the distro.", "type": "string" }, "cvssV2Score": { "description": "The CVSS V2 score of this vulnerability. CVSS V2 score is on a scale of 0 - 10 where 0 indicates low severity and 10 indicates high severity.", "format": "float", "type": "number" }, "cvssV3": { "description": "The full description of the CVSSv3 for this vulnerability from NVD.", "$ref": "CVSSv3" } }, "description": "Contains metadata information for the vulnerability. This information is collected from the upstream feed of the operating system." }, "OSPolicyResourcePackageResourceAPT": { "properties": { "name": { "type": "string", "description": "Required. Package name." } }, "id": "OSPolicyResourcePackageResourceAPT", "type": "object", "description": "A package managed by APT. - install: `apt-get update && apt-get -y install [name]` - remove: `apt-get -y remove [name]`" }, "OSPolicyResourcePackageResourceRPM": { "type": "object", "properties": { "pullDeps": { "type": "boolean", "description": "Whether dependencies should also be installed. - install when false: `rpm --upgrade --replacepkgs package.rpm` - install when true: `yum -y install package.rpm` or `zypper -y install package.rpm`" }, "source": { "description": "Required. An rpm package.", "$ref": "OSPolicyResourceFile" } }, "id": "OSPolicyResourcePackageResourceRPM", "description": "An RPM package file. RPM packages only support INSTALLED state." }, "OSPolicyResourceRepositoryResourceAptRepository": { "properties": { "components": { "items": { "type": "string" }, "description": "Required. List of components for this repository. Must contain at least one item.", "type": "array" }, "distribution": { "description": "Required. Distribution of this repository.", "type": "string" }, "archiveType": { "description": "Required. Type of archive files in this repository.", "enum": [ "ARCHIVE_TYPE_UNSPECIFIED", "DEB", "DEB_SRC" ], "enumDescriptions": [ "Unspecified is invalid.", "Deb indicates that the archive contains binary files.", "Deb-src indicates that the archive contains source files." ], "type": "string" }, "gpgKey": { "description": "URI of the key file for this repository. The agent maintains a keyring at `/etc/apt/trusted.gpg.d/osconfig_agent_managed.gpg`.", "type": "string" }, "uri": { "type": "string", "description": "Required. URI for this repository." } }, "id": "OSPolicyResourceRepositoryResourceAptRepository", "description": "Represents a single apt package repository. These will be added to a repo file that will be managed at `/etc/apt/sources.list.d/google_osconfig.list`.", "type": "object" }, "ExecutePatchJobRequest": { "type": "object", "description": "A request message to initiate patching across Compute Engine instances.", "properties": { "displayName": { "description": "Display name for this patch job. This does not have to be unique.", "type": "string" }, "rollout": { "description": "Rollout strategy of the patch job.", "$ref": "PatchRollout" }, "patchConfig": { "$ref": "PatchConfig", "description": "Patch configuration being applied. If omitted, instances are patched using the default configurations." }, "instanceFilter": { "description": "Required. Instances to patch, either explicitly or filtered by some criteria such as zone or labels.", "$ref": "PatchInstanceFilter" }, "dryRun": { "type": "boolean", "description": "If this patch is a dry-run only, instances are contacted but will do nothing." }, "description": { "type": "string", "description": "Description of the patch job. Length of the description is limited to 1024 characters." }, "duration": { "format": "google-duration", "description": "Duration of the patch job. After the duration ends, the patch job times out.", "type": "string" } }, "id": "ExecutePatchJobRequest" }, "Inventory": { "description": "This API resource represents the available inventory data for a Compute Engine virtual machine (VM) instance at a given point in time. You can use this API resource to determine the inventory data of your VM. For more information, see [Information provided by OS inventory management](https://cloud.google.com/compute/docs/instances/os-inventory-management#data-collected).", "properties": { "osInfo": { "description": "Base level operating system information for the VM.", "$ref": "InventoryOsInfo" }, "updateTime": { "format": "google-datetime", "type": "string", "readOnly": true, "description": "Output only. Timestamp of the last reported inventory for the VM." }, "items": { "additionalProperties": { "$ref": "InventoryItem" }, "description": "Inventory items related to the VM keyed by an opaque unique identifier for each inventory item. The identifier is unique to each distinct and addressable inventory item and will change, when there is a new package version.", "type": "object" }, "name": { "readOnly": true, "description": "Output only. The `Inventory` API resource name. Format: `projects/{project_number}/locations/{location}/instances/{instance_id}/inventory`", "type": "string" } }, "id": "Inventory", "type": "object" }, "InventoryWindowsUpdatePackageWindowsUpdateCategory": { "properties": { "name": { "description": "The name of the windows update category.", "type": "string" }, "id": { "description": "The identifier of the windows update category.", "type": "string" } }, "id": "InventoryWindowsUpdatePackageWindowsUpdateCategory", "description": "Categories specified by the Windows Update.", "type": "object" }, "PatchJobInstanceDetails": { "description": "Patch details for a VM instance. For more information about reviewing VM instance details, see [Listing all VM instance details for a specific patch job](https://cloud.google.com/compute/docs/os-patch-management/manage-patch-jobs#list-instance-details).", "properties": { "attemptCount": { "format": "int64", "type": "string", "description": "The number of times the agent that the agent attempts to apply the patch." }, "instanceSystemId": { "description": "The unique identifier for the instance. This identifier is defined by the server.", "type": "string" }, "failureReason": { "description": "If the patch fails, this field provides the reason.", "type": "string" }, "state": { "enumDescriptions": [ "Unspecified.", "The instance is not yet notified.", "Instance is inactive and cannot be patched.", "The instance is notified that it should be patched.", "The instance has started the patching process.", "The instance is downloading patches.", "The instance is applying patches.", "The instance is rebooting.", "The instance has completed applying patches.", "The instance has completed applying patches but a reboot is required.", "The instance has failed to apply the patch.", "The instance acked the notification and will start shortly.", "The instance exceeded the time out while applying the patch.", "The instance is running the pre-patch step.", "The instance is running the post-patch step.", "The service could not detect the presence of the agent. Check to ensure that the agent is installed, running, and able to communicate with the service.", "The instance was skipped during patching due to one of two reasons: 1. The instance runs Container-Optimized OS (COS), which cannot be patched. 2. The patch job's configuration prohibits patching on Managed Instance Groups (MIGs), and the instance is part of one." ], "type": "string", "description": "Current state of instance patch.", "enum": [ "PATCH_STATE_UNSPECIFIED", "PENDING", "INACTIVE", "NOTIFIED", "STARTED", "DOWNLOADING_PATCHES", "APPLYING_PATCHES", "REBOOTING", "SUCCEEDED", "SUCCEEDED_REBOOT_REQUIRED", "FAILED", "ACKED", "TIMED_OUT", "RUNNING_PRE_PATCH_STEP", "RUNNING_POST_PATCH_STEP", "NO_AGENT_DETECTED", "SKIPPED" ] }, "name": { "description": "The instance name in the form `projects/*/zones/*/instances/*`", "type": "string" } }, "type": "object", "id": "PatchJobInstanceDetails" }, "WeekDayOfMonth": { "id": "WeekDayOfMonth", "type": "object", "properties": { "dayOfWeek": { "enum": [ "DAY_OF_WEEK_UNSPECIFIED", "MONDAY", "TUESDAY", "WEDNESDAY", "THURSDAY", "FRIDAY", "SATURDAY", "SUNDAY" ], "type": "string", "enumDescriptions": [ "The day of the week is unspecified.", "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday", "Sunday" ], "description": "Required. A day of the week." }, "dayOffset": { "type": "integer", "description": "Optional. Represents the number of days before or after the given week day of month that the patch deployment is scheduled for. For example if `week_ordinal` and `day_of_week` values point to the second Tuesday of the month and the `day_offset` value is set to `3`, patch deployment takes place three days after the second Tuesday of the month. If this value is negative, for example -5, patches are deployed five days before the second Tuesday of the month. Allowed values are in range [-30, 30].", "format": "int32" }, "weekOrdinal": { "description": "Required. Week number in a month. 1-4 indicates the 1st to 4th week of the month. -1 indicates the last week of the month.", "format": "int32", "type": "integer" } }, "description": "Represents one week day in a month. An example is \"the 4th Sunday\"." }, "ExecStepConfig": { "type": "object", "description": "Common configurations for an ExecStep.", "properties": { "allowedSuccessCodes": { "description": "Defaults to [0]. A list of possible return values that the execution can return to indicate a success.", "type": "array", "items": { "format": "int32", "type": "integer" } }, "interpreter": { "enum": [ "INTERPRETER_UNSPECIFIED", "NONE", "SHELL", "POWERSHELL" ], "enumDescriptions": [ "If the interpreter is not specified, the value defaults to `NONE`.", "Indicates that the file is run as follows on each operating system: + For Linux VMs, the file is ran as an executable and the interpreter might be parsed from the [shebang line](https://wikipedia.org/wiki/Shebang_(Unix)) of the file. + For Windows VM, this value is not supported.", "Indicates that the file is run with `/bin/sh` on Linux and `cmd` on Windows.", "Indicates that the file is run with PowerShell." ], "type": "string", "description": "The script interpreter to use to run the script. If no interpreter is specified the script will be executed directly, which will likely only succeed for scripts with [shebang lines] (https://en.wikipedia.org/wiki/Shebang_\\(Unix\\))." }, "localPath": { "type": "string", "description": "An absolute path to the executable on the VM." }, "gcsObject": { "$ref": "GcsObject", "description": "A Cloud Storage object containing the executable." } }, "id": "ExecStepConfig" }, "OSPolicyResourcePackageResourceDeb": { "id": "OSPolicyResourcePackageResourceDeb", "properties": { "pullDeps": { "type": "boolean", "description": "Whether dependencies should also be installed. - install when false: `dpkg -i package` - install when true: `apt-get update && apt-get -y install package.deb`" }, "source": { "$ref": "OSPolicyResourceFile", "description": "Required. A deb package." } }, "type": "object", "description": "A deb package file. dpkg packages only support INSTALLED state." }, "OSPolicyAssignmentLabelSet": { "description": "Message representing label set. * A label is a key value pair set for a VM. * A LabelSet is a set of labels. * Labels within a LabelSet are ANDed. In other words, a LabelSet is applicable for a VM only if it matches all the labels in the LabelSet. * Example: A LabelSet with 2 labels: `env=prod` and `type=webserver` will only be applicable for those VMs with both labels present.", "properties": { "labels": { "type": "object", "additionalProperties": { "type": "string" }, "description": "Labels are identified by key/value pairs in this map. A VM should contain all the key/value pairs specified in this map to be selected." } }, "type": "object", "id": "OSPolicyAssignmentLabelSet" }, "InventoryWindowsApplication": { "description": "Contains information about a Windows application that is retrieved from the Windows Registry. For more information about these fields, see: https://docs.microsoft.com/en-us/windows/win32/msi/uninstall-registry-key", "properties": { "publisher": { "description": "The name of the manufacturer for the product or application.", "type": "string" }, "displayVersion": { "description": "The version of the product or application in string format.", "type": "string" }, "helpLink": { "description": "The internet address for technical support.", "type": "string" }, "displayName": { "type": "string", "description": "The name of the application or product." }, "installDate": { "$ref": "Date", "description": "The last time this product received service. The value of this property is replaced each time a patch is applied or removed from the product or the command-line option is used to repair the product." } }, "type": "object", "id": "InventoryWindowsApplication" }, "VulnerabilityReportVulnerabilityDetailsReference": { "id": "VulnerabilityReportVulnerabilityDetailsReference", "type": "object", "properties": { "source": { "type": "string", "description": "The source of the reference e.g. NVD." }, "url": { "type": "string", "description": "The url of the reference." } }, "description": "A reference for this vulnerability." }, "PatchJob": { "id": "PatchJob", "type": "object", "properties": { "percentComplete": { "format": "double", "type": "number", "description": "Reflects the overall progress of the patch job in the range of 0.0 being no progress to 100.0 being complete." }, "description": { "description": "Description of the patch job. Length of the description is limited to 1024 characters.", "type": "string" }, "name": { "description": "Unique identifier for this patch job in the form `projects/*/patchJobs/*`", "type": "string" }, "updateTime": { "format": "google-datetime", "type": "string", "description": "Last time this patch job was updated." }, "duration": { "type": "string", "description": "Duration of the patch job. After the duration ends, the patch job times out.", "format": "google-duration" }, "instanceFilter": { "$ref": "PatchInstanceFilter", "description": "Instances to patch." }, "dryRun": { "description": "If this patch job is a dry run, the agent reports that it has finished without running any updates on the VM instance.", "type": "boolean" }, "createTime": { "type": "string", "format": "google-datetime", "description": "Time this patch job was created." }, "instanceDetailsSummary": { "description": "Summary of instance details.", "$ref": "PatchJobInstanceDetailsSummary" }, "displayName": { "description": "Display name for this patch job. This is not a unique identifier.", "type": "string" }, "patchConfig": { "description": "Patch configuration being applied.", "$ref": "PatchConfig" }, "errorMessage": { "description": "If this patch job failed, this message provides information about the failure.", "type": "string" }, "state": { "description": "The current state of the PatchJob.", "enum": [ "STATE_UNSPECIFIED", "STARTED", "INSTANCE_LOOKUP", "PATCHING", "SUCCEEDED", "COMPLETED_WITH_INACTIVE_VMS", "COMPLETED_WITH_ERRORS", "CANCELED", "TIMED_OUT" ], "enumDescriptions": [ "State must be specified.", "The patch job was successfully initiated.", "The patch job is looking up instances to run the patch on.", "Instances are being patched.", "Patch job completed successfully.", "The patch job completed without errors, but some instances were inactive and therefore not patched.", "Patch job completed but there were errors.", "The patch job was canceled.", "The patch job timed out." ], "type": "string" }, "patchDeployment": { "type": "string", "description": "Output only. Name of the patch deployment that created this patch job.", "readOnly": true }, "rollout": { "description": "Rollout strategy being applied.", "$ref": "PatchRollout" } }, "description": "A high level representation of a patch job that is either in progress or has completed. Instance details are not included in the job. To paginate through instance details, use `ListPatchJobInstanceDetails`. For more information about patch jobs, see [Creating patch jobs](https://cloud.google.com/compute/docs/os-patch-management/create-patch-job)." }, "PatchInstanceFilterGroupLabel": { "description": "Targets a group of VM instances by using their [assigned labels](https://cloud.google.com/compute/docs/labeling-resources). Labels are key-value pairs. A `GroupLabel` is a combination of labels that is used to target VMs for a patch job. For example, a patch job can target VMs that have the following `GroupLabel`: `{\"env\":\"test\", \"app\":\"web\"}`. This means that the patch job is applied to VMs that have both the labels `env=test` and `app=web`.", "properties": { "labels": { "type": "object", "additionalProperties": { "type": "string" }, "description": "Compute Engine instance labels that must be present for a VM instance to be targeted by this filter." } }, "id": "PatchInstanceFilterGroupLabel", "type": "object" }, "OSPolicyResourceExecResource": { "id": "OSPolicyResourceExecResource", "description": "A resource that allows executing scripts on the VM. The `ExecResource` has 2 stages: `validate` and `enforce` and both stages accept a script as an argument to execute. When the `ExecResource` is applied by the agent, it first executes the script in the `validate` stage. The `validate` stage can signal that the `ExecResource` is already in the desired state by returning an exit code of `100`. If the `ExecResource` is not in the desired state, it should return an exit code of `101`. Any other exit code returned by this stage is considered an error. If the `ExecResource` is not in the desired state based on the exit code from the `validate` stage, the agent proceeds to execute the script from the `enforce` stage. If the `ExecResource` is already in the desired state, the `enforce` stage will not be run. Similar to `validate` stage, the `enforce` stage should return an exit code of `100` to indicate that the resource in now in its desired state. Any other exit code is considered an error. NOTE: An exit code of `100` was chosen over `0` (and `101` vs `1`) to have an explicit indicator of `in desired state`, `not in desired state` and errors. Because, for example, Powershell will always return an exit code of `0` unless an `exit` statement is provided in the script. So, for reasons of consistency and being explicit, exit codes `100` and `101` were chosen.", "properties": { "validate": { "description": "Required. What to run to validate this resource is in the desired state. An exit code of 100 indicates \"in desired state\", and exit code of 101 indicates \"not in desired state\". Any other exit code indicates a failure running validate.", "$ref": "OSPolicyResourceExecResourceExec" }, "enforce": { "description": "What to run to bring this resource into the desired state. An exit code of 100 indicates \"success\", any other exit code indicates a failure running enforce.", "$ref": "OSPolicyResourceExecResourceExec" } }, "type": "object" }, "OSPolicyResourceExecResourceExec": { "properties": { "file": { "description": "A remote or local file.", "$ref": "OSPolicyResourceFile" }, "interpreter": { "description": "Required. The script interpreter to use.", "enumDescriptions": [ "Invalid value, the request will return validation error.", "If an interpreter is not specified, the source is executed directly. This execution, without an interpreter, only succeeds for executables and scripts that have shebang lines.", "Indicates that the script runs with `/bin/sh` on Linux and `cmd.exe` on Windows.", "Indicates that the script runs with PowerShell." ], "enum": [ "INTERPRETER_UNSPECIFIED", "NONE", "SHELL", "POWERSHELL" ], "type": "string" }, "args": { "description": "Optional arguments to pass to the source during execution.", "items": { "type": "string" }, "type": "array" }, "script": { "description": "An inline script. The size of the script is limited to 32KiB.", "type": "string" }, "outputFilePath": { "description": "Only recorded for enforce Exec. Path to an output file (that is created by this Exec) whose content will be recorded in OSPolicyResourceCompliance after a successful run. Absence or failure to read this file will result in this ExecResource being non-compliant. Output file size is limited to 500K bytes.", "type": "string" } }, "id": "OSPolicyResourceExecResourceExec", "description": "A file or script to execute.", "type": "object" }, "OSPolicyInventoryFilter": { "description": "Filtering criteria to select VMs based on inventory details.", "id": "OSPolicyInventoryFilter", "properties": { "osVersion": { "type": "string", "description": "The OS version Prefix matches are supported if asterisk(*) is provided as the last character. For example, to match all versions with a major version of `7`, specify the following value for this field `7.*` An empty string matches all OS versions." }, "osShortName": { "type": "string", "description": "Required. The OS short name" } }, "type": "object" }, "PatchRollout": { "description": "Patch rollout configuration specifications. Contains details on the concurrency control when applying patch(es) to all targeted VMs.", "properties": { "mode": { "enum": [ "MODE_UNSPECIFIED", "ZONE_BY_ZONE", "CONCURRENT_ZONES" ], "enumDescriptions": [ "Mode must be specified.", "Patches are applied one zone at a time. The patch job begins in the region with the lowest number of targeted VMs. Within the region, patching begins in the zone with the lowest number of targeted VMs. If multiple regions (or zones within a region) have the same number of targeted VMs, a tie-breaker is achieved by sorting the regions or zones in alphabetical order.", "Patches are applied to VMs in all zones at the same time." ], "description": "Mode of the patch rollout.", "type": "string" }, "disruptionBudget": { "$ref": "FixedOrPercent", "description": "The maximum number (or percentage) of VMs per zone to disrupt at any given moment. The number of VMs calculated from multiplying the percentage by the total number of VMs in a zone is rounded up. During patching, a VM is considered disrupted from the time the agent is notified to begin until patching has completed. This disruption time includes the time to complete reboot and any post-patch steps. A VM contributes to the disruption budget if its patching operation fails either when applying the patches, running pre or post patch steps, or if it fails to respond with a success notification before timing out. VMs that are not running or do not have an active agent do not count toward this disruption budget. For zone-by-zone rollouts, if the disruption budget in a zone is exceeded, the patch job stops, because continuing to the next zone requires completion of the patch process in the previous zone. For example, if the disruption budget has a fixed value of `10`, and 8 VMs fail to patch in the current zone, the patch job continues to patch 2 VMs at a time until the zone is completed. When that zone is completed successfully, patching begins with 10 VMs at a time in the next zone. If 10 VMs in the next zone fail to patch, the patch job stops." } }, "id": "PatchRollout", "type": "object" }, "RecurringSchedule": { "type": "object", "properties": { "nextExecuteTime": { "description": "Output only. The time the next patch job is scheduled to run.", "format": "google-datetime", "type": "string", "readOnly": true }, "endTime": { "description": "Optional. The end time at which a recurring patch deployment schedule is no longer active.", "format": "google-datetime", "type": "string" }, "monthly": { "description": "Required. Schedule with monthly executions.", "$ref": "MonthlySchedule" }, "timeZone": { "description": "Required. Defines the time zone that `time_of_day` is relative to. The rules for daylight saving time are determined by the chosen time zone.", "$ref": "TimeZone" }, "weekly": { "description": "Required. Schedule with weekly executions.", "$ref": "WeeklySchedule" }, "startTime": { "type": "string", "format": "google-datetime", "description": "Optional. The time that the recurring schedule becomes effective. Defaults to `create_time` of the patch deployment." }, "lastExecuteTime": { "type": "string", "readOnly": true, "format": "google-datetime", "description": "Output only. The time the last patch job ran successfully." }, "frequency": { "description": "Required. The frequency unit of this recurring schedule.", "enum": [ "FREQUENCY_UNSPECIFIED", "WEEKLY", "MONTHLY", "DAILY" ], "enumDescriptions": [ "Invalid. A frequency must be specified.", "Indicates that the frequency of recurrence should be expressed in terms of weeks.", "Indicates that the frequency of recurrence should be expressed in terms of months.", "Indicates that the frequency of recurrence should be expressed in terms of days." ], "type": "string" }, "timeOfDay": { "$ref": "TimeOfDay", "description": "Required. Time of the day to run a recurring deployment." } }, "description": "Sets the time for recurring patch deployments.", "id": "RecurringSchedule" }, "YumSettings": { "description": "Yum patching is performed by executing `yum update`. Additional options can be set to control how this is executed. Note that not all settings are supported on all platforms.", "properties": { "excludes": { "items": { "type": "string" }, "type": "array", "description": "List of packages to exclude from update. These packages are excluded by using the yum `--exclude` flag." }, "minimal": { "description": "Will cause patch to run `yum update-minimal` instead.", "type": "boolean" }, "security": { "description": "Adds the `--security` flag to `yum update`. Not supported on all platforms.", "type": "boolean" }, "exclusivePackages": { "description": "An exclusive list of packages to be updated. These are the only packages that will be updated. If these packages are not installed, they will be ignored. This field must not be specified with any other patch configuration fields.", "items": { "type": "string" }, "type": "array" } }, "type": "object", "id": "YumSettings" }, "OSPolicyAssignmentReportOSPolicyComplianceOSPolicyResourceComplianceExecResourceOutput": { "properties": { "enforcementOutput": { "type": "string", "format": "byte", "description": "Output from enforcement phase output file (if run). Output size is limited to 100K bytes." } }, "description": "ExecResource specific output.", "id": "OSPolicyAssignmentReportOSPolicyComplianceOSPolicyResourceComplianceExecResourceOutput", "type": "object" }, "VulnerabilityReportVulnerability": { "id": "VulnerabilityReportVulnerability", "properties": { "updateTime": { "description": "The timestamp for when the vulnerability was last modified.", "type": "string", "format": "google-datetime" }, "availableInventoryItemIds": { "type": "array", "description": "Corresponds to the `AVAILABLE_PACKAGE` inventory item on the VM. If the vulnerability report was not updated after the VM inventory update, these values might not display in VM inventory. If there is no available fix, the field is empty. The `inventory_item` value specifies the latest `SoftwarePackage` available to the VM that fixes the vulnerability.", "deprecated": true, "items": { "type": "string" } }, "createTime": { "format": "google-datetime", "description": "The timestamp for when the vulnerability was first detected.", "type": "string" }, "installedInventoryItemIds": { "items": { "type": "string" }, "description": "Corresponds to the `INSTALLED_PACKAGE` inventory item on the VM. This field displays the inventory items affected by this vulnerability. If the vulnerability report was not updated after the VM inventory update, these values might not display in VM inventory. For some distros, this field may be empty.", "deprecated": true, "type": "array" }, "items": { "type": "array", "items": { "$ref": "VulnerabilityReportVulnerabilityItem" }, "description": "List of items affected by the vulnerability." }, "details": { "description": "Contains metadata as per the upstream feed of the operating system and NVD.", "$ref": "VulnerabilityReportVulnerabilityDetails" } }, "description": "A vulnerability affecting the VM instance.", "type": "object" }, "ListOSPolicyAssignmentReportsResponse": { "properties": { "osPolicyAssignmentReports": { "description": "List of OS policy assignment reports.", "type": "array", "items": { "$ref": "OSPolicyAssignmentReport" } }, "nextPageToken": { "description": "The pagination token to retrieve the next page of OS policy assignment report objects.", "type": "string" } }, "type": "object", "id": "ListOSPolicyAssignmentReportsResponse", "description": "A response message for listing OS Policy assignment reports including the page of results and page token." }, "CancelPatchJobRequest": { "id": "CancelPatchJobRequest", "description": "Message for canceling a patch job.", "type": "object", "properties": {} }, "ListVulnerabilityReportsResponse": { "properties": { "vulnerabilityReports": { "type": "array", "description": "List of vulnerabilityReport objects.", "items": { "$ref": "VulnerabilityReport" } }, "nextPageToken": { "description": "The pagination token to retrieve the next page of vulnerabilityReports object.", "type": "string" } }, "description": "A response message for listing vulnerability reports for all VM instances in the specified location.", "type": "object", "id": "ListVulnerabilityReportsResponse" }, "ListPatchJobsResponse": { "type": "object", "properties": { "patchJobs": { "type": "array", "items": { "$ref": "PatchJob" }, "description": "The list of patch jobs." }, "nextPageToken": { "description": "A pagination token that can be used to get the next page of results.", "type": "string" } }, "description": "A response message for listing patch jobs.", "id": "ListPatchJobsResponse" }, "WindowsUpdateSettings": { "type": "object", "id": "WindowsUpdateSettings", "properties": { "exclusivePatches": { "items": { "type": "string" }, "type": "array", "description": "An exclusive list of kbs to be updated. These are the only patches that will be updated. This field must not be used with other patch configurations." }, "classifications": { "description": "Only apply updates of these windows update classifications. If empty, all updates are applied.", "type": "array", "items": { "type": "string", "enumDescriptions": [ "Invalid. If classifications are included, they must be specified.", "\"A widely released fix for a specific problem that addresses a critical, non-security-related bug.\" [1]", "\"A widely released fix for a product-specific, security-related vulnerability. Security vulnerabilities are rated by their severity. The severity rating is indicated in the Microsoft security bulletin as critical, important, moderate, or low.\" [1]", "\"A widely released and frequent software update that contains additions to a product's definition database. Definition databases are often used to detect objects that have specific attributes, such as malicious code, phishing websites, or junk mail.\" [1]", "\"Software that controls the input and output of a device.\" [1]", "\"New product functionality that is first distributed outside the context of a product release and that is typically included in the next full product release.\" [1]", "\"A tested, cumulative set of all hotfixes, security updates, critical updates, and updates. Additionally, service packs may contain additional fixes for problems that are found internally since the release of the product. Service packs my also contain a limited number of customer-requested design changes or features.\" [1]", "\"A utility or feature that helps complete a task or set of tasks.\" [1]", "\"A tested, cumulative set of hotfixes, security updates, critical updates, and updates that are packaged together for easy deployment. A rollup generally targets a specific area, such as security, or a component of a product, such as Internet Information Services (IIS).\" [1]", "\"A widely released fix for a specific problem. An update addresses a noncritical, non-security-related bug.\" [1]" ], "enum": [ "CLASSIFICATION_UNSPECIFIED", "CRITICAL", "SECURITY", "DEFINITION", "DRIVER", "FEATURE_PACK", "SERVICE_PACK", "TOOL", "UPDATE_ROLLUP", "UPDATE" ] } }, "excludes": { "type": "array", "description": "List of KBs to exclude from update.", "items": { "type": "string" } } }, "description": "Windows patching is performed using the Windows Update Agent." }, "InventoryZypperPatch": { "properties": { "summary": { "description": "Any summary information provided about this patch.", "type": "string" }, "patchName": { "type": "string", "description": "The name of the patch." }, "severity": { "description": "The severity specified for this patch", "type": "string" }, "category": { "type": "string", "description": "The category of the patch." } }, "description": "Details related to a Zypper Patch.", "type": "object", "id": "InventoryZypperPatch" }, "InventoryWindowsQuickFixEngineeringPackage": { "id": "InventoryWindowsQuickFixEngineeringPackage", "properties": { "hotFixId": { "type": "string", "description": "Unique identifier associated with a particular QFE update." }, "description": { "description": "A textual description of the QFE update.", "type": "string" }, "installTime": { "format": "google-datetime", "type": "string", "description": "Date that the QFE update was installed. Mapped from installed_on field." }, "caption": { "type": "string", "description": "A short textual description of the QFE update." } }, "description": "Information related to a Quick Fix Engineering package. Fields are taken from Windows QuickFixEngineering Interface and match the source names: https://docs.microsoft.com/en-us/windows/win32/cimwin32prov/win32-quickfixengineering", "type": "object" }, "Empty": { "type": "object", "id": "Empty", "properties": {}, "description": "A generic empty message that you can re-use to avoid defining duplicated empty messages in your APIs. A typical example is to use it as the request or the response type of an API method. For instance: service Foo { rpc Bar(google.protobuf.Empty) returns (google.protobuf.Empty); }" }, "OSPolicyResourceRepositoryResourceGooRepository": { "properties": { "name": { "type": "string", "description": "Required. The name of the repository." }, "url": { "description": "Required. The url of the repository.", "type": "string" } }, "id": "OSPolicyResourceRepositoryResourceGooRepository", "description": "Represents a Goo package repository. These are added to a repo file that is managed at `C:/ProgramData/GooGet/repos/google_osconfig.repo`.", "type": "object" }, "OSPolicyAssignmentReportOSPolicyComplianceOSPolicyResourceComplianceOSPolicyResourceConfigStep": { "type": "object", "id": "OSPolicyAssignmentReportOSPolicyComplianceOSPolicyResourceComplianceOSPolicyResourceConfigStep", "description": "Step performed by the OS Config agent for configuring an `OSPolicy` resource to its desired state.", "properties": { "type": { "type": "string", "enumDescriptions": [ "Default value. This value is unused.", "Checks for resource conflicts such as schema errors.", "Checks the current status of the desired state for a resource.", "Enforces the desired state for a resource that is not in desired state.", "Re-checks the status of the desired state. This check is done for a resource after the enforcement of all OS policies. This step is used to determine the final desired state status for the resource. It accounts for any resources that might have drifted from their desired state due to side effects from executing other resources." ], "description": "Configuration step type.", "enum": [ "TYPE_UNSPECIFIED", "VALIDATION", "DESIRED_STATE_CHECK", "DESIRED_STATE_ENFORCEMENT", "DESIRED_STATE_CHECK_POST_ENFORCEMENT" ] }, "errorMessage": { "description": "An error message recorded during the execution of this step. Only populated if errors were encountered during this step execution.", "type": "string" } } }, "ProjectFeatureSettings": { "description": "ProjectFeatureSettings represents the VM Manager feature settings in a project. For more information, see Enable full VM Manager functionality.", "type": "object", "properties": { "patchAndConfigFeatureSet": { "type": "string", "description": "Set PatchAndConfigFeatureSet for the project.", "enum": [ "PATCH_AND_CONFIG_FEATURE_SET_UNSPECIFIED", "OSCONFIG_B", "OSCONFIG_C" ], "enumDescriptions": [ "Not specified placeholder", "Enables only the basic set of VM Manager features in the project.", "Enables all VM Manager features in the project." ] }, "name": { "description": "Required. Immutable. Name specifies the URL for the ProjectFeatureSettings resource: projects/project_id/locations/global/projectFeatureSettings.", "type": "string" } }, "id": "ProjectFeatureSettings" }, "Date": { "type": "object", "description": "Represents a whole or partial calendar date, such as a birthday. The time of day and time zone are either specified elsewhere or are insignificant. The date is relative to the Gregorian Calendar. This can represent one of the following: * A full date, with non-zero year, month, and day values. * A month and day, with a zero year (for example, an anniversary). * A year on its own, with a zero month and a zero day. * A year and month, with a zero day (for example, a credit card expiration date). Related types: * google.type.TimeOfDay * google.type.DateTime * google.protobuf.Timestamp", "id": "Date", "properties": { "day": { "type": "integer", "format": "int32", "description": "Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant." }, "month": { "format": "int32", "type": "integer", "description": "Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day." }, "year": { "type": "integer", "format": "int32", "description": "Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year." } } }, "OSPolicyResourceFileResource": { "properties": { "path": { "type": "string", "description": "Required. The absolute path of the file within the VM." }, "permissions": { "description": "Consists of three octal digits which represent, in order, the permissions of the owner, group, and other users for the file (similarly to the numeric mode used in the linux chmod utility). Each digit represents a three bit number with the 4 bit corresponding to the read permissions, the 2 bit corresponds to the write bit, and the one bit corresponds to the execute permission. Default behavior is 755. Below are some examples of permissions and their associated values: read, write, and execute: 7 read and execute: 5 read and write: 6 read only: 4", "type": "string" }, "file": { "description": "A remote or local source.", "$ref": "OSPolicyResourceFile" }, "state": { "type": "string", "enumDescriptions": [ "Unspecified is invalid.", "Ensure file at path is present.", "Ensure file at path is absent.", "Ensure the contents of the file at path matches. If the file does not exist it will be created." ], "description": "Required. Desired state of the file.", "enum": [ "DESIRED_STATE_UNSPECIFIED", "PRESENT", "ABSENT", "CONTENTS_MATCH" ] }, "content": { "description": "A file with this content. The size of the content is limited to 32KiB.", "type": "string" } }, "id": "OSPolicyResourceFileResource", "description": "A resource that manages the state of a file.", "type": "object" }, "OSPolicyAssignmentInstanceFilter": { "id": "OSPolicyAssignmentInstanceFilter", "description": "Filters to select target VMs for an assignment. If more than one filter criteria is specified below, a VM will be selected if and only if it satisfies all of them.", "type": "object", "properties": { "exclusionLabels": { "type": "array", "description": "List of label sets used for VM exclusion. If the list has more than one label set, the VM is excluded if any of the label sets are applicable for the VM.", "items": { "$ref": "OSPolicyAssignmentLabelSet" } }, "inventories": { "items": { "$ref": "OSPolicyAssignmentInstanceFilterInventory" }, "description": "List of inventories to select VMs. A VM is selected if its inventory data matches at least one of the following inventories.", "type": "array" }, "all": { "description": "Target all VMs in the project. If true, no other criteria is permitted.", "type": "boolean" }, "inclusionLabels": { "type": "array", "items": { "$ref": "OSPolicyAssignmentLabelSet" }, "description": "List of label sets used for VM inclusion. If the list has more than one `LabelSet`, the VM is included if any of the label sets are applicable for the VM." } } }, "TimeOfDay": { "properties": { "nanos": { "type": "integer", "format": "int32", "description": "Fractions of seconds, in nanoseconds. Must be greater than or equal to 0 and less than or equal to 999,999,999." }, "minutes": { "format": "int32", "type": "integer", "description": "Minutes of an hour. Must be greater than or equal to 0 and less than or equal to 59." }, "seconds": { "format": "int32", "description": "Seconds of a minute. Must be greater than or equal to 0 and typically must be less than or equal to 59. An API may allow the value 60 if it allows leap-seconds.", "type": "integer" }, "hours": { "format": "int32", "type": "integer", "description": "Hours of a day in 24 hour format. Must be greater than or equal to 0 and typically must be less than or equal to 23. An API may choose to allow the value \"24:00:00\" for scenarios like business closing time." } }, "id": "TimeOfDay", "type": "object", "description": "Represents a time of day. The date and time zone are either not significant or are specified elsewhere. An API may choose to allow leap seconds. Related types are google.type.Date and `google.protobuf.Timestamp`." }, "MonthlySchedule": { "properties": { "monthDay": { "description": "Required. One day of the month. 1-31 indicates the 1st to the 31st day. -1 indicates the last day of the month. Months without the target day will be skipped. For example, a schedule to run \"every month on the 31st\" will not run in February, April, June, etc.", "format": "int32", "type": "integer" }, "weekDayOfMonth": { "$ref": "WeekDayOfMonth", "description": "Required. Week day in a month." } }, "description": "Represents a monthly schedule. An example of a valid monthly schedule is \"on the third Tuesday of the month\" or \"on the 15th of the month\".", "id": "MonthlySchedule", "type": "object" }, "OSPolicyResource": { "properties": { "repository": { "description": "Package repository resource", "$ref": "OSPolicyResourceRepositoryResource" }, "file": { "$ref": "OSPolicyResourceFileResource", "description": "File resource" }, "pkg": { "description": "Package resource", "$ref": "OSPolicyResourcePackageResource" }, "exec": { "description": "Exec resource", "$ref": "OSPolicyResourceExecResource" }, "id": { "description": "Required. The id of the resource with the following restrictions: * Must contain only lowercase letters, numbers, and hyphens. * Must start with a letter. * Must be between 1-63 characters. * Must end with a number or a letter. * Must be unique within the OS policy.", "type": "string" } }, "type": "object", "description": "An OS policy resource is used to define the desired state configuration and provides a specific functionality like installing/removing packages, executing a script etc. The system ensures that resources are always in their desired state by taking necessary actions if they have drifted from their desired state.", "id": "OSPolicyResource" }, "ExecStep": { "type": "object", "id": "ExecStep", "description": "A step that runs an executable for a PatchJob.", "properties": { "windowsExecStepConfig": { "description": "The ExecStepConfig for all Windows VMs targeted by the PatchJob.", "$ref": "ExecStepConfig" }, "linuxExecStepConfig": { "$ref": "ExecStepConfig", "description": "The ExecStepConfig for all Linux VMs targeted by the PatchJob." } } }, "OSPolicyResourceRepositoryResourceYumRepository": { "type": "object", "id": "OSPolicyResourceRepositoryResourceYumRepository", "properties": { "baseUrl": { "type": "string", "description": "Required. The location of the repository directory." }, "id": { "description": "Required. A one word, unique name for this repository. This is the `repo id` in the yum config file and also the `display_name` if `display_name` is omitted. This id is also used as the unique identifier when checking for resource conflicts.", "type": "string" }, "displayName": { "type": "string", "description": "The display name of the repository." }, "gpgKeys": { "type": "array", "items": { "type": "string" }, "description": "URIs of GPG keys." } }, "description": "Represents a single yum package repository. These are added to a repo file that is managed at `/etc/yum.repos.d/google_osconfig.repo`." }, "GoogleCloudOsconfigV1__OSPolicyAssignmentOperationMetadata": { "id": "GoogleCloudOsconfigV1__OSPolicyAssignmentOperationMetadata", "properties": { "rolloutUpdateTime": { "description": "Rollout update time", "type": "string", "format": "google-datetime" }, "rolloutStartTime": { "description": "Rollout start time", "format": "google-datetime", "type": "string" }, "rolloutState": { "enum": [ "ROLLOUT_STATE_UNSPECIFIED", "IN_PROGRESS", "CANCELLING", "CANCELLED", "SUCCEEDED" ], "enumDescriptions": [ "Invalid value", "The rollout is in progress.", "The rollout is being cancelled.", "The rollout is cancelled.", "The rollout has completed successfully." ], "type": "string", "description": "State of the rollout" }, "osPolicyAssignment": { "type": "string", "description": "Reference to the `OSPolicyAssignment` API resource. Format: `projects/{project_number}/locations/{location}/osPolicyAssignments/{os_policy_assignment_id@revision_id}`" }, "apiMethod": { "enum": [ "API_METHOD_UNSPECIFIED", "CREATE", "UPDATE", "DELETE" ], "description": "The OS policy assignment API method.", "enumDescriptions": [ "Invalid value", "Create OS policy assignment API method", "Update OS policy assignment API method", "Delete OS policy assignment API method" ], "type": "string" } }, "description": "OS policy assignment operation metadata provided by OS policy assignment API methods that return long running operations.", "type": "object" }, "Status": { "properties": { "code": { "type": "integer", "format": "int32", "description": "The status code, which should be an enum value of google.rpc.Code." }, "details": { "type": "array", "description": "A list of messages that carry the error details. There is a common set of message types for APIs to use.", "items": { "type": "object", "additionalProperties": { "type": "any", "description": "Properties of the object. Contains field @type with type URL." } } }, "message": { "type": "string", "description": "A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client." } }, "id": "Status", "description": "The `Status` type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by [gRPC](https://github.com/grpc). Each `Status` message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the [API Design Guide](https://cloud.google.com/apis/design/errors).", "type": "object" }, "OSPolicyAssignment": { "properties": { "rollout": { "$ref": "OSPolicyAssignmentRollout", "description": "Required. Rollout to deploy the OS policy assignment. A rollout is triggered in the following situations: 1) OSPolicyAssignment is created. 2) OSPolicyAssignment is updated and the update contains changes to one of the following fields: - instance_filter - os_policies 3) OSPolicyAssignment is deleted." }, "revisionId": { "description": "Output only. The assignment revision ID A new revision is committed whenever a rollout is triggered for a OS policy assignment", "type": "string", "readOnly": true }, "deleted": { "description": "Output only. Indicates that this revision deletes the OS policy assignment.", "type": "boolean", "readOnly": true }, "uid": { "type": "string", "readOnly": true, "description": "Output only. Server generated unique id for the OS policy assignment resource." }, "instanceFilter": { "$ref": "OSPolicyAssignmentInstanceFilter", "description": "Required. Filter to select VMs." }, "osPolicies": { "description": "Required. List of OS policies to be applied to the VMs.", "items": { "$ref": "OSPolicy" }, "type": "array" }, "name": { "type": "string", "description": "Resource name. Format: `projects/{project_number}/locations/{location}/osPolicyAssignments/{os_policy_assignment_id}` This field is ignored when you create an OS policy assignment." }, "rolloutState": { "type": "string", "readOnly": true, "description": "Output only. OS policy assignment rollout state", "enumDescriptions": [ "Invalid value", "The rollout is in progress.", "The rollout is being cancelled.", "The rollout is cancelled.", "The rollout has completed successfully." ], "enum": [ "ROLLOUT_STATE_UNSPECIFIED", "IN_PROGRESS", "CANCELLING", "CANCELLED", "SUCCEEDED" ] }, "baseline": { "type": "boolean", "readOnly": true, "description": "Output only. Indicates that this revision has been successfully rolled out in this zone and new VMs will be assigned OS policies from this revision. For a given OS policy assignment, there is only one revision with a value of `true` for this field." }, "etag": { "type": "string", "description": "The etag for this OS policy assignment. If this is provided on update, it must match the server's etag." }, "revisionCreateTime": { "readOnly": true, "description": "Output only. The timestamp that the revision was created.", "format": "google-datetime", "type": "string" }, "description": { "type": "string", "description": "OS policy assignment description. Length of the description is limited to 1024 characters." }, "reconciling": { "type": "boolean", "readOnly": true, "description": "Output only. Indicates that reconciliation is in progress for the revision. This value is `true` when the `rollout_state` is one of: * IN_PROGRESS * CANCELLING" } }, "type": "object", "id": "OSPolicyAssignment", "description": "OS policy assignment is an API resource that is used to apply a set of OS policies to a dynamically targeted group of Compute Engine VM instances. An OS policy is used to define the desired state configuration for a Compute Engine VM instance through a set of configuration resources that provide capabilities such as installing or removing software packages, or executing a script. For more information about the OS policy resource definitions and examples, see [OS policy and OS policy assignment](https://cloud.google.com/compute/docs/os-configuration-management/working-with-os-policies)." } }, "description": "OS management tools that can be used for patch management, patch compliance, and configuration management on VM instances.", "parameters": { "fields": { "location": "query", "description": "Selector specifying which fields to include in a partial response.", "type": "string" }, "alt": { "description": "Data format for response.", "enum": [ "json", "media", "proto" ], "location": "query", "default": "json", "type": "string", "enumDescriptions": [ "Responses with Content-Type of application/json", "Media download with context-dependent Content-Type", "Responses with Content-Type of application/x-protobuf" ] }, "callback": { "location": "query", "description": "JSONP", "type": "string" }, "key": { "description": "API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token.", "location": "query", "type": "string" }, "oauth_token": { "type": "string", "location": "query", "description": "OAuth 2.0 token for the current user." }, "upload_protocol": { "description": "Upload protocol for media (e.g. \"raw\", \"multipart\").", "type": "string", "location": "query" }, "uploadType": { "type": "string", "description": "Legacy upload protocol for media (e.g. \"media\", \"multipart\").", "location": "query" }, "quotaUser": { "location": "query", "description": "Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters.", "type": "string" }, "prettyPrint": { "location": "query", "description": "Returns response with indentations and line breaks.", "default": "true", "type": "boolean" }, "access_token": { "type": "string", "location": "query", "description": "OAuth access token." }, "$.xgafv": { "description": "V1 error format.", "type": "string", "enumDescriptions": [ "v1 error format", "v2 error format" ], "enum": [ "1", "2" ], "location": "query" } }, "documentationLink": "https://cloud.google.com/compute/docs/osconfig/rest", "fullyEncodeReservedExpansion": true, "endpoints": [ { "description": "Regional Endpoint", "endpointUrl": "https://osconfig.africa-south1.rep.googleapis.com/", "location": "africa-south1" }, { "location": "asia-east1", "description": "Regional Endpoint", "endpointUrl": "https://osconfig.asia-east1.rep.googleapis.com/" }, { "location": "asia-east2", "endpointUrl": "https://osconfig.asia-east2.rep.googleapis.com/", "description": "Regional Endpoint" }, { "location": "asia-northeast1", "description": "Regional Endpoint", "endpointUrl": "https://osconfig.asia-northeast1.rep.googleapis.com/" }, { "location": "asia-northeast2", "endpointUrl": "https://osconfig.asia-northeast2.rep.googleapis.com/", "description": "Regional Endpoint" }, { "endpointUrl": "https://osconfig.asia-northeast3.rep.googleapis.com/", "description": "Regional Endpoint", "location": "asia-northeast3" }, { "endpointUrl": "https://osconfig.asia-south1.rep.googleapis.com/", "location": "asia-south1", "description": "Regional Endpoint" }, { "endpointUrl": "https://osconfig.asia-south2.rep.googleapis.com/", "location": "asia-south2", "description": "Regional Endpoint" }, { "description": "Regional Endpoint", "endpointUrl": "https://osconfig.asia-southeast1.rep.googleapis.com/", "location": "asia-southeast1" }, { "description": "Regional Endpoint", "location": "asia-southeast2", "endpointUrl": "https://osconfig.asia-southeast2.rep.googleapis.com/" }, { "endpointUrl": "https://osconfig.asia-southeast3.rep.googleapis.com/", "description": "Regional Endpoint", "location": "asia-southeast3" }, { "endpointUrl": "https://osconfig.australia-southeast1.rep.googleapis.com/", "location": "australia-southeast1", "description": "Regional Endpoint" }, { "location": "australia-southeast2", "endpointUrl": "https://osconfig.australia-southeast2.rep.googleapis.com/", "description": "Regional Endpoint" }, { "endpointUrl": "https://osconfig.europe-central2.rep.googleapis.com/", "description": "Regional Endpoint", "location": "europe-central2" }, { "description": "Regional Endpoint", "location": "europe-north1", "endpointUrl": "https://osconfig.europe-north1.rep.googleapis.com/" }, { "endpointUrl": "https://osconfig.europe-north2.rep.googleapis.com/", "description": "Regional Endpoint", "location": "europe-north2" }, { "endpointUrl": "https://osconfig.europe-southwest1.rep.googleapis.com/", "location": "europe-southwest1", "description": "Regional Endpoint" }, { "endpointUrl": "https://osconfig.europe-west1.rep.googleapis.com/", "description": "Regional Endpoint", "location": "europe-west1" }, { "endpointUrl": "https://osconfig.europe-west10.rep.googleapis.com/", "location": "europe-west10", "description": "Regional Endpoint" }, { "endpointUrl": "https://osconfig.europe-west12.rep.googleapis.com/", "location": "europe-west12", "description": "Regional Endpoint" }, { "description": "Regional Endpoint", "location": "europe-west15", "endpointUrl": "https://osconfig.europe-west15.rep.googleapis.com/" }, { "endpointUrl": "https://osconfig.europe-west2.rep.googleapis.com/", "location": "europe-west2", "description": "Regional Endpoint" }, { "description": "Regional Endpoint", "location": "europe-west3", "endpointUrl": "https://osconfig.europe-west3.rep.googleapis.com/" }, { "location": "europe-west4", "description": "Regional Endpoint", "endpointUrl": "https://osconfig.europe-west4.rep.googleapis.com/" }, { "endpointUrl": "https://osconfig.europe-west6.rep.googleapis.com/", "location": "europe-west6", "description": "Regional Endpoint" }, { "location": "europe-west8", "endpointUrl": "https://osconfig.europe-west8.rep.googleapis.com/", "description": "Regional Endpoint" }, { "description": "Regional Endpoint", "location": "europe-west9", "endpointUrl": "https://osconfig.europe-west9.rep.googleapis.com/" }, { "description": "Regional Endpoint", "location": "me-central1", "endpointUrl": "https://osconfig.me-central1.rep.googleapis.com/" }, { "endpointUrl": "https://osconfig.me-central2.rep.googleapis.com/", "location": "me-central2", "description": "Regional Endpoint" }, { "endpointUrl": "https://osconfig.me-west1.rep.googleapis.com/", "description": "Regional Endpoint", "location": "me-west1" }, { "endpointUrl": "https://osconfig.northamerica-northeast1.rep.googleapis.com/", "description": "Regional Endpoint", "location": "northamerica-northeast1" }, { "endpointUrl": "https://osconfig.northamerica-northeast2.rep.googleapis.com/", "description": "Regional Endpoint", "location": "northamerica-northeast2" }, { "endpointUrl": "https://osconfig.northamerica-south1.rep.googleapis.com/", "location": "northamerica-south1", "description": "Regional Endpoint" }, { "endpointUrl": "https://osconfig.southamerica-east1.rep.googleapis.com/", "location": "southamerica-east1", "description": "Regional Endpoint" }, { "description": "Regional Endpoint", "endpointUrl": "https://osconfig.southamerica-west1.rep.googleapis.com/", "location": "southamerica-west1" }, { "description": "Regional Endpoint", "location": "us-central1", "endpointUrl": "https://osconfig.us-central1.rep.googleapis.com/" }, { "endpointUrl": "https://osconfig.us-central2.rep.googleapis.com/", "location": "us-central2", "description": "Regional Endpoint" }, { "description": "Regional Endpoint", "location": "us-central6", "endpointUrl": "https://osconfig.us-central6.rep.googleapis.com/" }, { "endpointUrl": "https://osconfig.us-east1.rep.googleapis.com/", "location": "us-east1", "description": "Regional Endpoint" }, { "endpointUrl": "https://osconfig.us-east4.rep.googleapis.com/", "location": "us-east4", "description": "Regional Endpoint" }, { "endpointUrl": "https://osconfig.us-east5.rep.googleapis.com/", "location": "us-east5", "description": "Regional Endpoint" }, { "endpointUrl": "https://osconfig.us-east7.rep.googleapis.com/", "location": "us-east7", "description": "Regional Endpoint" }, { "endpointUrl": "https://osconfig.us-south1.rep.googleapis.com/", "description": "Regional Endpoint", "location": "us-south1" }, { "location": "us-west1", "endpointUrl": "https://osconfig.us-west1.rep.googleapis.com/", "description": "Regional Endpoint" }, { "endpointUrl": "https://osconfig.us-west2.rep.googleapis.com/", "location": "us-west2", "description": "Regional Endpoint" }, { "description": "Regional Endpoint", "location": "us-west3", "endpointUrl": "https://osconfig.us-west3.rep.googleapis.com/" }, { "location": "us-west4", "description": "Regional Endpoint", "endpointUrl": "https://osconfig.us-west4.rep.googleapis.com/" }, { "location": "us-west8", "endpointUrl": "https://osconfig.us-west8.rep.googleapis.com/", "description": "Regional Endpoint" } ], "resources": { "projects": { "resources": { "patchJobs": { "resources": { "instanceDetails": { "methods": { "list": { "description": "Get a list of instance details for a given patch job.", "parameterOrder": [ "parent" ], "parameters": { "pageSize": { "format": "int32", "location": "query", "type": "integer", "description": "The maximum number of instance details records to return. Default is 100." }, "pageToken": { "type": "string", "location": "query", "description": "A pagination token returned from a previous call that indicates where this listing should continue from." }, "parent": { "description": "Required. The parent for the instances are in the form of `projects/*/patchJobs/*`.", "pattern": "^projects/[^/]+/patchJobs/[^/]+$", "required": true, "type": "string", "location": "path" }, "filter": { "type": "string", "location": "query", "description": "A filter expression that filters results listed in the response. This field supports filtering results by instance zone, name, state, or `failure_reason`." } }, "id": "osconfig.projects.patchJobs.instanceDetails.list", "flatPath": "v1/projects/{projectsId}/patchJobs/{patchJobsId}/instanceDetails", "path": "v1/{+parent}/instanceDetails", "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "httpMethod": "GET", "response": { "$ref": "ListPatchJobInstanceDetailsResponse" } } } } }, "methods": { "cancel": { "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "response": { "$ref": "PatchJob" }, "parameterOrder": [ "name" ], "httpMethod": "POST", "id": "osconfig.projects.patchJobs.cancel", "request": { "$ref": "CancelPatchJobRequest" }, "flatPath": "v1/projects/{projectsId}/patchJobs/{patchJobsId}:cancel", "parameters": { "name": { "location": "path", "required": true, "description": "Required. Name of the patch in the form `projects/*/patchJobs/*`", "type": "string", "pattern": "^projects/[^/]+/patchJobs/[^/]+$" } }, "description": "Cancel a patch job. The patch job must be active. Canceled patch jobs cannot be restarted.", "path": "v1/{+name}:cancel" }, "get": { "id": "osconfig.projects.patchJobs.get", "parameterOrder": [ "name" ], "flatPath": "v1/projects/{projectsId}/patchJobs/{patchJobsId}", "httpMethod": "GET", "description": "Get the patch job. This can be used to track the progress of an ongoing patch job or review the details of completed jobs.", "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "response": { "$ref": "PatchJob" }, "parameters": { "name": { "description": "Required. Name of the patch in the form `projects/*/patchJobs/*`", "pattern": "^projects/[^/]+/patchJobs/[^/]+$", "type": "string", "required": true, "location": "path" } }, "path": "v1/{+name}" }, "execute": { "flatPath": "v1/projects/{projectsId}/patchJobs:execute", "description": "Patch VM instances by creating and running a patch job.", "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "httpMethod": "POST", "request": { "$ref": "ExecutePatchJobRequest" }, "parameterOrder": [ "parent" ], "id": "osconfig.projects.patchJobs.execute", "response": { "$ref": "PatchJob" }, "path": "v1/{+parent}/patchJobs:execute", "parameters": { "parent": { "required": true, "location": "path", "type": "string", "pattern": "^projects/[^/]+$", "description": "Required. The project in which to run this patch in the form `projects/*`" } } }, "list": { "parameterOrder": [ "parent" ], "httpMethod": "GET", "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "path": "v1/{+parent}/patchJobs", "flatPath": "v1/projects/{projectsId}/patchJobs", "description": "Get a list of patch jobs.", "parameters": { "filter": { "type": "string", "location": "query", "description": "If provided, this field specifies the criteria that must be met by patch jobs to be included in the response. Currently, filtering is only available on the patch_deployment field." }, "pageToken": { "description": "A pagination token returned from a previous call that indicates where this listing should continue from.", "location": "query", "type": "string" }, "pageSize": { "type": "integer", "format": "int32", "location": "query", "description": "The maximum number of instance status to return." }, "parent": { "location": "path", "required": true, "description": "Required. In the form of `projects/*`", "type": "string", "pattern": "^projects/[^/]+$" } }, "id": "osconfig.projects.patchJobs.list", "response": { "$ref": "ListPatchJobsResponse" } } } }, "patchDeployments": { "methods": { "list": { "parameterOrder": [ "parent" ], "response": { "$ref": "ListPatchDeploymentsResponse" }, "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "parameters": { "pageToken": { "location": "query", "type": "string", "description": "Optional. A pagination token returned from a previous call to ListPatchDeployments that indicates where this listing should continue from." }, "parent": { "location": "path", "required": true, "type": "string", "description": "Required. The resource name of the parent in the form `projects/*`.", "pattern": "^projects/[^/]+$" }, "pageSize": { "location": "query", "format": "int32", "type": "integer", "description": "Optional. The maximum number of patch deployments to return. Default is 100." } }, "id": "osconfig.projects.patchDeployments.list", "path": "v1/{+parent}/patchDeployments", "description": "Get a page of OS Config patch deployments.", "flatPath": "v1/projects/{projectsId}/patchDeployments", "httpMethod": "GET" }, "delete": { "flatPath": "v1/projects/{projectsId}/patchDeployments/{patchDeploymentsId}", "parameters": { "name": { "description": "Required. The resource name of the patch deployment in the form `projects/*/patchDeployments/*`.", "pattern": "^projects/[^/]+/patchDeployments/[^/]+$", "type": "string", "location": "path", "required": true } }, "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "id": "osconfig.projects.patchDeployments.delete", "httpMethod": "DELETE", "response": { "$ref": "Empty" }, "description": "Delete an OS Config patch deployment.", "path": "v1/{+name}", "parameterOrder": [ "name" ] }, "patch": { "parameters": { "name": { "description": "Unique name for the patch deployment resource in a project. The patch deployment name is in the form: `projects/{project_id}/patchDeployments/{patch_deployment_id}`. This field is ignored when you create a new patch deployment.", "type": "string", "location": "path", "pattern": "^projects/[^/]+/patchDeployments/[^/]+$", "required": true }, "updateMask": { "format": "google-fieldmask", "description": "Optional. Field mask that controls which fields of the patch deployment should be updated.", "location": "query", "type": "string" } }, "flatPath": "v1/projects/{projectsId}/patchDeployments/{patchDeploymentsId}", "parameterOrder": [ "name" ], "id": "osconfig.projects.patchDeployments.patch", "description": "Update an OS Config patch deployment.", "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "httpMethod": "PATCH", "response": { "$ref": "PatchDeployment" }, "path": "v1/{+name}", "request": { "$ref": "PatchDeployment" } }, "resume": { "request": { "$ref": "ResumePatchDeploymentRequest" }, "flatPath": "v1/projects/{projectsId}/patchDeployments/{patchDeploymentsId}:resume", "parameters": { "name": { "description": "Required. The resource name of the patch deployment in the form `projects/*/patchDeployments/*`.", "required": true, "location": "path", "type": "string", "pattern": "^projects/[^/]+/patchDeployments/[^/]+$" } }, "response": { "$ref": "PatchDeployment" }, "parameterOrder": [ "name" ], "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "path": "v1/{+name}:resume", "description": "Change state of patch deployment back to \"ACTIVE\". Patch deployment in active state continues to generate patch jobs.", "httpMethod": "POST", "id": "osconfig.projects.patchDeployments.resume" }, "pause": { "request": { "$ref": "PausePatchDeploymentRequest" }, "id": "osconfig.projects.patchDeployments.pause", "response": { "$ref": "PatchDeployment" }, "parameterOrder": [ "name" ], "parameters": { "name": { "location": "path", "required": true, "type": "string", "description": "Required. The resource name of the patch deployment in the form `projects/*/patchDeployments/*`.", "pattern": "^projects/[^/]+/patchDeployments/[^/]+$" } }, "description": "Change state of patch deployment to \"PAUSED\". Patch deployment in paused state doesn't generate patch jobs.", "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "path": "v1/{+name}:pause", "flatPath": "v1/projects/{projectsId}/patchDeployments/{patchDeploymentsId}:pause", "httpMethod": "POST" }, "create": { "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "id": "osconfig.projects.patchDeployments.create", "parameters": { "patchDeploymentId": { "location": "query", "description": "Required. A name for the patch deployment in the project. When creating a name the following rules apply: * Must contain only lowercase letters, numbers, and hyphens. * Must start with a letter. * Must be between 1-63 characters. * Must end with a number or a letter. * Must be unique within the project.", "type": "string" }, "parent": { "location": "path", "required": true, "description": "Required. The project to apply this patch deployment to in the form `projects/*`.", "type": "string", "pattern": "^projects/[^/]+$" } }, "flatPath": "v1/projects/{projectsId}/patchDeployments", "httpMethod": "POST", "path": "v1/{+parent}/patchDeployments", "response": { "$ref": "PatchDeployment" }, "request": { "$ref": "PatchDeployment" }, "parameterOrder": [ "parent" ], "description": "Create an OS Config patch deployment." }, "get": { "flatPath": "v1/projects/{projectsId}/patchDeployments/{patchDeploymentsId}", "parameterOrder": [ "name" ], "parameters": { "name": { "description": "Required. The resource name of the patch deployment in the form `projects/*/patchDeployments/*`.", "pattern": "^projects/[^/]+/patchDeployments/[^/]+$", "type": "string", "required": true, "location": "path" } }, "path": "v1/{+name}", "response": { "$ref": "PatchDeployment" }, "description": "Get an OS Config patch deployment.", "id": "osconfig.projects.patchDeployments.get", "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "httpMethod": "GET" } } }, "locations": { "resources": { "osPolicyAssignments": { "resources": { "operations": { "methods": { "get": { "description": "Gets the latest state of a long-running operation. Clients can use this method to poll the operation result at intervals as recommended by the API service.", "httpMethod": "GET", "flatPath": "v1/projects/{projectsId}/locations/{locationsId}/osPolicyAssignments/{osPolicyAssignmentsId}/operations/{operationsId}", "id": "osconfig.projects.locations.osPolicyAssignments.operations.get", "path": "v1/{+name}", "parameters": { "name": { "pattern": "^projects/[^/]+/locations/[^/]+/osPolicyAssignments/[^/]+/operations/[^/]+$", "location": "path", "required": true, "type": "string", "description": "The name of the operation resource." } }, "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "response": { "$ref": "Operation" }, "parameterOrder": [ "name" ] }, "cancel": { "id": "osconfig.projects.locations.osPolicyAssignments.operations.cancel", "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "response": { "$ref": "Empty" }, "description": "Starts asynchronous cancellation on a long-running operation. The server makes a best effort to cancel the operation, but success is not guaranteed. If the server doesn't support this method, it returns `google.rpc.Code.UNIMPLEMENTED`. Clients can use Operations.GetOperation or other methods to check whether the cancellation succeeded or whether the operation completed despite cancellation. On successful cancellation, the operation is not deleted; instead, it becomes an operation with an Operation.error value with a google.rpc.Status.code of `1`, corresponding to `Code.CANCELLED`.", "httpMethod": "POST", "parameters": { "name": { "description": "The name of the operation resource to be cancelled.", "required": true, "location": "path", "pattern": "^projects/[^/]+/locations/[^/]+/osPolicyAssignments/[^/]+/operations/[^/]+$", "type": "string" } }, "request": { "$ref": "CancelOperationRequest" }, "flatPath": "v1/projects/{projectsId}/locations/{locationsId}/osPolicyAssignments/{osPolicyAssignmentsId}/operations/{operationsId}:cancel", "path": "v1/{+name}:cancel", "parameterOrder": [ "name" ] } } } }, "methods": { "listRevisions": { "path": "v1/{+name}:listRevisions", "httpMethod": "GET", "description": "List the OS policy assignment revisions for a given OS policy assignment.", "response": { "$ref": "ListOSPolicyAssignmentRevisionsResponse" }, "parameterOrder": [ "name" ], "flatPath": "v1/projects/{projectsId}/locations/{locationsId}/osPolicyAssignments/{osPolicyAssignmentsId}:listRevisions", "parameters": { "pageSize": { "location": "query", "type": "integer", "description": "The maximum number of revisions to return.", "format": "int32" }, "pageToken": { "type": "string", "description": "A pagination token returned from a previous call to `ListOSPolicyAssignmentRevisions` that indicates where this listing should continue from.", "location": "query" }, "name": { "description": "Required. The name of the OS policy assignment to list revisions for.", "pattern": "^projects/[^/]+/locations/[^/]+/osPolicyAssignments/[^/]+$", "type": "string", "required": true, "location": "path" } }, "id": "osconfig.projects.locations.osPolicyAssignments.listRevisions", "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ] }, "create": { "request": { "$ref": "OSPolicyAssignment" }, "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "parameters": { "parent": { "location": "path", "required": true, "type": "string", "description": "Required. The parent resource name in the form: projects/{project}/locations/{location}. Note: Specify the zone of your VMs as the location.", "pattern": "^projects/[^/]+/locations/[^/]+$" }, "osPolicyAssignmentId": { "location": "query", "description": "Required. The logical name of the OS policy assignment in the project with the following restrictions: * Must contain only lowercase letters, numbers, and hyphens. * Must start with a letter. * Must be between 1-63 characters. * Must end with a number or a letter. * Must be unique within the project.", "type": "string" }, "requestId": { "location": "query", "type": "string", "description": "Optional. A unique identifier for this request. Restricted to 36 ASCII characters. A random UUID is recommended. This request is only idempotent if a `request_id` is provided." } }, "parameterOrder": [ "parent" ], "response": { "$ref": "Operation" }, "id": "osconfig.projects.locations.osPolicyAssignments.create", "httpMethod": "POST", "description": "Create an OS policy assignment. This method also creates the first revision of the OS policy assignment. This method returns a long running operation (LRO) that contains the rollout details. The rollout can be cancelled by cancelling the LRO. For more information, see [Method: projects.locations.osPolicyAssignments.operations.cancel](https://cloud.google.com/compute/docs/osconfig/rest/v1/projects.locations.osPolicyAssignments.operations/cancel).", "flatPath": "v1/projects/{projectsId}/locations/{locationsId}/osPolicyAssignments", "path": "v1/{+parent}/osPolicyAssignments" }, "patch": { "parameters": { "updateMask": { "description": "Optional. Field mask that controls which fields of the assignment should be updated.", "location": "query", "type": "string", "format": "google-fieldmask" }, "allowMissing": { "type": "boolean", "location": "query", "description": "Optional. If set to true, and the OS policy assignment is not found, a new OS policy assignment will be created. In this situation, `update_mask` is ignored." }, "name": { "description": "Resource name. Format: `projects/{project_number}/locations/{location}/osPolicyAssignments/{os_policy_assignment_id}` This field is ignored when you create an OS policy assignment.", "required": true, "location": "path", "type": "string", "pattern": "^projects/[^/]+/locations/[^/]+/osPolicyAssignments/[^/]+$" }, "requestId": { "location": "query", "type": "string", "description": "Optional. A unique identifier for this request. Restricted to 36 ASCII characters. A random UUID is recommended. This request is only idempotent if a `request_id` is provided." } }, "id": "osconfig.projects.locations.osPolicyAssignments.patch", "flatPath": "v1/projects/{projectsId}/locations/{locationsId}/osPolicyAssignments/{osPolicyAssignmentsId}", "request": { "$ref": "OSPolicyAssignment" }, "path": "v1/{+name}", "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "parameterOrder": [ "name" ], "description": "Update an existing OS policy assignment. This method creates a new revision of the OS policy assignment. This method returns a long running operation (LRO) that contains the rollout details. The rollout can be cancelled by cancelling the LRO. For more information, see [Method: projects.locations.osPolicyAssignments.operations.cancel](https://cloud.google.com/compute/docs/osconfig/rest/v1/projects.locations.osPolicyAssignments.operations/cancel).", "httpMethod": "PATCH", "response": { "$ref": "Operation" } }, "get": { "parameters": { "name": { "type": "string", "description": "Required. The resource name of OS policy assignment. Format: `projects/{project}/locations/{location}/osPolicyAssignments/{os_policy_assignment}@{revisionId}`", "required": true, "pattern": "^projects/[^/]+/locations/[^/]+/osPolicyAssignments/[^/]+$", "location": "path" } }, "parameterOrder": [ "name" ], "path": "v1/{+name}", "description": "Retrieve an existing OS policy assignment. This method always returns the latest revision. In order to retrieve a previous revision of the assignment, also provide the revision ID in the `name` parameter.", "flatPath": "v1/projects/{projectsId}/locations/{locationsId}/osPolicyAssignments/{osPolicyAssignmentsId}", "httpMethod": "GET", "id": "osconfig.projects.locations.osPolicyAssignments.get", "response": { "$ref": "OSPolicyAssignment" }, "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ] }, "delete": { "httpMethod": "DELETE", "parameterOrder": [ "name" ], "response": { "$ref": "Operation" }, "description": "Delete the OS policy assignment. This method creates a new revision of the OS policy assignment. This method returns a long running operation (LRO) that contains the rollout details. The rollout can be cancelled by cancelling the LRO. If the LRO completes and is not cancelled, all revisions associated with the OS policy assignment are deleted. For more information, see [Method: projects.locations.osPolicyAssignments.operations.cancel](https://cloud.google.com/compute/docs/osconfig/rest/v1/projects.locations.osPolicyAssignments.operations/cancel).", "path": "v1/{+name}", "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "parameters": { "name": { "type": "string", "location": "path", "description": "Required. The name of the OS policy assignment to be deleted", "required": true, "pattern": "^projects/[^/]+/locations/[^/]+/osPolicyAssignments/[^/]+$" }, "requestId": { "type": "string", "location": "query", "description": "Optional. A unique identifier for this request. Restricted to 36 ASCII characters. A random UUID is recommended. This request is only idempotent if a `request_id` is provided." } }, "id": "osconfig.projects.locations.osPolicyAssignments.delete", "flatPath": "v1/projects/{projectsId}/locations/{locationsId}/osPolicyAssignments/{osPolicyAssignmentsId}" }, "list": { "path": "v1/{+parent}/osPolicyAssignments", "parameters": { "parent": { "pattern": "^projects/[^/]+/locations/[^/]+$", "type": "string", "description": "Required. The parent resource name.", "required": true, "location": "path" }, "pageToken": { "description": "A pagination token returned from a previous call to `ListOSPolicyAssignments` that indicates where this listing should continue from.", "location": "query", "type": "string" }, "pageSize": { "description": "The maximum number of assignments to return.", "location": "query", "format": "int32", "type": "integer" } }, "description": "List the OS policy assignments under the parent resource. For each OS policy assignment, the latest revision is returned.", "flatPath": "v1/projects/{projectsId}/locations/{locationsId}/osPolicyAssignments", "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "parameterOrder": [ "parent" ], "httpMethod": "GET", "response": { "$ref": "ListOSPolicyAssignmentsResponse" }, "id": "osconfig.projects.locations.osPolicyAssignments.list" } } }, "instances": { "resources": { "inventories": { "methods": { "get": { "parameters": { "name": { "pattern": "^projects/[^/]+/locations/[^/]+/instances/[^/]+/inventory$", "type": "string", "required": true, "description": "Required. API resource name for inventory resource. Format: `projects/{project}/locations/{location}/instances/{instance}/inventory` For `{project}`, either `project-number` or `project-id` can be provided. For `{instance}`, either Compute Engine `instance-id` or `instance-name` can be provided.", "location": "path" }, "view": { "type": "string", "enumDescriptions": [ "The default value. The API defaults to the BASIC view.", "Returns the basic inventory information that includes `os_info`.", "Returns all fields." ], "description": "Inventory view indicating what information should be included in the inventory resource. If unspecified, the default view is BASIC.", "location": "query", "enum": [ "INVENTORY_VIEW_UNSPECIFIED", "BASIC", "FULL" ] } }, "id": "osconfig.projects.locations.instances.inventories.get", "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "flatPath": "v1/projects/{projectsId}/locations/{locationsId}/instances/{instancesId}/inventory", "description": "Get inventory data for the specified VM instance. If the VM has no associated inventory, the message `NOT_FOUND` is returned.", "httpMethod": "GET", "path": "v1/{+name}", "parameterOrder": [ "name" ], "response": { "$ref": "Inventory" } }, "list": { "path": "v1/{+parent}/inventories", "flatPath": "v1/projects/{projectsId}/locations/{locationsId}/instances/{instancesId}/inventories", "parameters": { "filter": { "type": "string", "description": "If provided, this field specifies the criteria that must be met by a `Inventory` API resource to be included in the response.", "location": "query" }, "view": { "enum": [ "INVENTORY_VIEW_UNSPECIFIED", "BASIC", "FULL" ], "enumDescriptions": [ "The default value. The API defaults to the BASIC view.", "Returns the basic inventory information that includes `os_info`.", "Returns all fields." ], "description": "Inventory view indicating what information should be included in the inventory resource. If unspecified, the default view is BASIC.", "location": "query", "type": "string" }, "pageToken": { "location": "query", "description": "A pagination token returned from a previous call to `ListInventories` that indicates where this listing should continue from.", "type": "string" }, "parent": { "pattern": "^projects/[^/]+/locations/[^/]+/instances/[^/]+$", "location": "path", "type": "string", "required": true, "description": "Required. The parent resource name. Format: `projects/{project}/locations/{location}/instances/-` For `{project}`, either `project-number` or `project-id` can be provided." }, "pageSize": { "format": "int32", "type": "integer", "location": "query", "description": "The maximum number of results to return." } }, "parameterOrder": [ "parent" ], "id": "osconfig.projects.locations.instances.inventories.list", "httpMethod": "GET", "description": "List inventory data for all VM instances in the specified zone.", "response": { "$ref": "ListInventoriesResponse" }, "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ] } } }, "osPolicyAssignments": { "resources": { "reports": { "methods": { "get": { "flatPath": "v1/projects/{projectsId}/locations/{locationsId}/instances/{instancesId}/osPolicyAssignments/{osPolicyAssignmentsId}/report", "path": "v1/{+name}", "id": "osconfig.projects.locations.instances.osPolicyAssignments.reports.get", "parameters": { "name": { "pattern": "^projects/[^/]+/locations/[^/]+/instances/[^/]+/osPolicyAssignments/[^/]+/report$", "description": "Required. API resource name for OS policy assignment report. Format: `/projects/{project}/locations/{location}/instances/{instance}/osPolicyAssignments/{assignment}/report` For `{project}`, either `project-number` or `project-id` can be provided. For `{instance_id}`, either Compute Engine `instance-id` or `instance-name` can be provided. For `{assignment_id}`, the OSPolicyAssignment id must be provided.", "type": "string", "location": "path", "required": true } }, "parameterOrder": [ "name" ], "response": { "$ref": "OSPolicyAssignmentReport" }, "description": "Get the OS policy assignment report for the specified Compute Engine VM instance.", "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "httpMethod": "GET" }, "list": { "httpMethod": "GET", "flatPath": "v1/projects/{projectsId}/locations/{locationsId}/instances/{instancesId}/osPolicyAssignments/{osPolicyAssignmentsId}/reports", "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "path": "v1/{+parent}/reports", "parameters": { "parent": { "type": "string", "pattern": "^projects/[^/]+/locations/[^/]+/instances/[^/]+/osPolicyAssignments/[^/]+$", "location": "path", "required": true, "description": "Required. The parent resource name. Format: `projects/{project}/locations/{location}/instances/{instance}/osPolicyAssignments/{assignment}/reports` For `{project}`, either `project-number` or `project-id` can be provided. For `{instance}`, either `instance-name`, `instance-id`, or `-` can be provided. If '-' is provided, the response will include OSPolicyAssignmentReports for all instances in the project/location. For `{assignment}`, either `assignment-id` or `-` can be provided. If '-' is provided, the response will include OSPolicyAssignmentReports for all OSPolicyAssignments in the project/location. Either {instance} or {assignment} must be `-`. For example: `projects/{project}/locations/{location}/instances/{instance}/osPolicyAssignments/-/reports` returns all reports for the instance `projects/{project}/locations/{location}/instances/-/osPolicyAssignments/{assignment-id}/reports` returns all the reports for the given assignment across all instances. `projects/{project}/locations/{location}/instances/-/osPolicyAssignments/-/reports` returns all the reports for all assignments across all instances." }, "pageToken": { "type": "string", "location": "query", "description": "A pagination token returned from a previous call to the `ListOSPolicyAssignmentReports` method that indicates where this listing should continue from." }, "filter": { "type": "string", "location": "query", "description": "If provided, this field specifies the criteria that must be met by the `OSPolicyAssignmentReport` API resource that is included in the response." }, "pageSize": { "type": "integer", "location": "query", "format": "int32", "description": "The maximum number of results to return." } }, "response": { "$ref": "ListOSPolicyAssignmentReportsResponse" }, "id": "osconfig.projects.locations.instances.osPolicyAssignments.reports.list", "description": "List OS policy assignment reports for all Compute Engine VM instances in the specified zone.", "parameterOrder": [ "parent" ] } } } } }, "vulnerabilityReports": { "methods": { "get": { "httpMethod": "GET", "parameterOrder": [ "name" ], "description": "Gets the vulnerability report for the specified VM instance. Only VMs with inventory data have vulnerability reports associated with them.", "response": { "$ref": "VulnerabilityReport" }, "id": "osconfig.projects.locations.instances.vulnerabilityReports.get", "parameters": { "name": { "description": "Required. API resource name for vulnerability resource. Format: `projects/{project}/locations/{location}/instances/{instance}/vulnerabilityReport` For `{project}`, either `project-number` or `project-id` can be provided. For `{instance}`, either Compute Engine `instance-id` or `instance-name` can be provided.", "required": true, "type": "string", "pattern": "^projects/[^/]+/locations/[^/]+/instances/[^/]+/vulnerabilityReport$", "location": "path" } }, "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "path": "v1/{+name}", "flatPath": "v1/projects/{projectsId}/locations/{locationsId}/instances/{instancesId}/vulnerabilityReport" }, "list": { "description": "List vulnerability reports for all VM instances in the specified zone.", "response": { "$ref": "ListVulnerabilityReportsResponse" }, "httpMethod": "GET", "id": "osconfig.projects.locations.instances.vulnerabilityReports.list", "parameterOrder": [ "parent" ], "path": "v1/{+parent}/vulnerabilityReports", "parameters": { "parent": { "description": "Required. The parent resource name. Format: `projects/{project}/locations/{location}/instances/-` For `{project}`, either `project-number` or `project-id` can be provided.", "pattern": "^projects/[^/]+/locations/[^/]+/instances/[^/]+$", "location": "path", "type": "string", "required": true }, "pageSize": { "location": "query", "format": "int32", "description": "The maximum number of results to return.", "type": "integer" }, "filter": { "location": "query", "description": "This field supports filtering by the severity level for the vulnerability. For a list of severity levels, see [Severity levels for vulnerabilities](https://cloud.google.com/container-analysis/docs/container-scanning-overview#severity_levels_for_vulnerabilities). The filter field follows the rules described in the [AIP-160](https://google.aip.dev/160) guidelines as follows: + **Filter for a specific severity type**: you can list reports that contain vulnerabilities that are classified as medium by specifying `vulnerabilities.details.severity:MEDIUM`. + **Filter for a range of severities** : you can list reports that have vulnerabilities that are classified as critical or high by specifying `vulnerabilities.details.severity:HIGH OR vulnerabilities.details.severity:CRITICAL`", "type": "string" }, "pageToken": { "description": "A pagination token returned from a previous call to `ListVulnerabilityReports` that indicates where this listing should continue from.", "type": "string", "location": "query" } }, "flatPath": "v1/projects/{projectsId}/locations/{locationsId}/instances/{instancesId}/vulnerabilityReports", "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ] } } } } }, "global": { "methods": { "updateProjectFeatureSettings": { "parameters": { "updateMask": { "type": "string", "description": "Optional. Field mask that controls which fields of the ProjectFeatureSettings should be updated.", "location": "query", "format": "google-fieldmask" }, "name": { "pattern": "^projects/[^/]+/locations/global/projectFeatureSettings$", "type": "string", "description": "Required. Immutable. Name specifies the URL for the ProjectFeatureSettings resource: projects/project_id/locations/global/projectFeatureSettings.", "required": true, "location": "path" } }, "path": "v1/{+name}", "parameterOrder": [ "name" ], "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "id": "osconfig.projects.locations.global.updateProjectFeatureSettings", "response": { "$ref": "ProjectFeatureSettings" }, "httpMethod": "PATCH", "request": { "$ref": "ProjectFeatureSettings" }, "description": "UpdateProjectFeatureSettings sets the VM Manager features for a project.", "flatPath": "v1/projects/{projectsId}/locations/global/projectFeatureSettings" }, "getProjectFeatureSettings": { "id": "osconfig.projects.locations.global.getProjectFeatureSettings", "parameterOrder": [ "name" ], "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "flatPath": "v1/projects/{projectsId}/locations/global/projectFeatureSettings", "parameters": { "name": { "pattern": "^projects/[^/]+/locations/global/projectFeatureSettings$", "required": true, "type": "string", "location": "path", "description": "Required. Name specifies the URL for the ProjectFeatureSettings resource: projects/project_id/locations/global/projectFeatureSettings." } }, "response": { "$ref": "ProjectFeatureSettings" }, "path": "v1/{+name}", "description": "GetProjectFeatureSettings returns the VM Manager feature settings for a project.", "httpMethod": "GET" } } } } } } } }, "name": "osconfig", "id": "osconfig:v1", "discoveryVersion": "v1", "version_module": true, "batchPath": "batch", "rootUrl": "https://osconfig.googleapis.com/", "title": "OS Config API" }