./lib/svc.rb in strongdm-8.1.0 vs ./lib/svc.rb in strongdm-9.1.0

- old
+ new

@@ -2105,10 +2105,546 @@ resp.valid = (plumbing_response.valid) resp end end + # IdentityAliases assign an alias to an account within an IdentitySet. + # The alias is used as the username when connecting to a identity supported resource. + # + # See {IdentityAlias}. + class IdentityAliases + extend Gem::Deprecate + + def initialize(channel, parent) + begin + @stub = V1::IdentityAliases::Stub.new(nil, nil, channel_override: channel) + rescue => exception + raise Plumbing::convert_error_to_porcelain(exception) + end + @parent = parent + end + + # Create registers a new IdentityAlias. + def create( + identity_alias, + deadline: nil + ) + req = V1::IdentityAliasCreateRequest.new() + + req.identity_alias = Plumbing::convert_identity_alias_to_plumbing(identity_alias) + tries = 0 + plumbing_response = nil + loop do + begin + plumbing_response = @stub.create(req, metadata: @parent.get_metadata("IdentityAliases.Create", req), deadline: deadline) + rescue => exception + if (@parent.shouldRetry(tries, exception)) + tries + +@parent.jitterSleep(tries) + next + end + raise Plumbing::convert_error_to_porcelain(exception) + end + break + end + + resp = IdentityAliasCreateResponse.new() + resp.identity_alias = Plumbing::convert_identity_alias_to_porcelain(plumbing_response.identity_alias) + resp.meta = Plumbing::convert_create_response_metadata_to_porcelain(plumbing_response.meta) + resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit) + resp + end + + # Get reads one IdentityAlias by ID. + def get( + id, + deadline: nil + ) + req = V1::IdentityAliasGetRequest.new() + if not @parent.snapshot_time.nil? + req.meta = V1::GetRequestMetadata.new() + req.meta.snapshot_at = @parent.snapshot_time + end + + req.id = (id) + tries = 0 + plumbing_response = nil + loop do + begin + plumbing_response = @stub.get(req, metadata: @parent.get_metadata("IdentityAliases.Get", req), deadline: deadline) + rescue => exception + if (@parent.shouldRetry(tries, exception)) + tries + +@parent.jitterSleep(tries) + next + end + raise Plumbing::convert_error_to_porcelain(exception) + end + break + end + + resp = IdentityAliasGetResponse.new() + resp.identity_alias = Plumbing::convert_identity_alias_to_porcelain(plumbing_response.identity_alias) + resp.meta = Plumbing::convert_get_response_metadata_to_porcelain(plumbing_response.meta) + resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit) + resp + end + + # Update replaces all the fields of a IdentityAlias by ID. + def update( + identity_alias, + deadline: nil + ) + req = V1::IdentityAliasUpdateRequest.new() + + req.identity_alias = Plumbing::convert_identity_alias_to_plumbing(identity_alias) + tries = 0 + plumbing_response = nil + loop do + begin + plumbing_response = @stub.update(req, metadata: @parent.get_metadata("IdentityAliases.Update", req), deadline: deadline) + rescue => exception + if (@parent.shouldRetry(tries, exception)) + tries + +@parent.jitterSleep(tries) + next + end + raise Plumbing::convert_error_to_porcelain(exception) + end + break + end + + resp = IdentityAliasUpdateResponse.new() + resp.identity_alias = Plumbing::convert_identity_alias_to_porcelain(plumbing_response.identity_alias) + resp.meta = Plumbing::convert_update_response_metadata_to_porcelain(plumbing_response.meta) + resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit) + resp + end + + # Delete removes a IdentityAlias by ID. + def delete( + id, + deadline: nil + ) + req = V1::IdentityAliasDeleteRequest.new() + + req.id = (id) + tries = 0 + plumbing_response = nil + loop do + begin + plumbing_response = @stub.delete(req, metadata: @parent.get_metadata("IdentityAliases.Delete", req), deadline: deadline) + rescue => exception + if (@parent.shouldRetry(tries, exception)) + tries + +@parent.jitterSleep(tries) + next + end + raise Plumbing::convert_error_to_porcelain(exception) + end + break + end + + resp = IdentityAliasDeleteResponse.new() + resp.meta = Plumbing::convert_delete_response_metadata_to_porcelain(plumbing_response.meta) + resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit) + resp + end + + # List gets a list of IdentityAliases matching a given set of criteria. + def list( + filter, + *args, + deadline: nil + ) + req = V1::IdentityAliasListRequest.new() + req.meta = V1::ListRequestMetadata.new() + if @parent.page_limit > 0 + req.meta.limit = @parent.page_limit + end + if not @parent.snapshot_time.nil? + req.meta.snapshot_at = @parent.snapshot_time + end + + req.filter = Plumbing::quote_filter_args(filter, *args) + resp = Enumerator::Generator.new { |g| + tries = 0 + loop do + begin + plumbing_response = @stub.list(req, metadata: @parent.get_metadata("IdentityAliases.List", req), deadline: deadline) + rescue => exception + if (@parent.shouldRetry(tries, exception)) + tries + +@parent.jitterSleep(tries) + next + end + raise Plumbing::convert_error_to_porcelain(exception) + end + tries = 0 + plumbing_response.identity_aliases.each do |plumbing_item| + g.yield Plumbing::convert_identity_alias_to_porcelain(plumbing_item) + end + break if plumbing_response.meta.next_cursor == "" + req.meta.cursor = plumbing_response.meta.next_cursor + end + } + resp + end + end + + # SnapshotIdentityAliases exposes the read only methods of the IdentityAliases + # service for historical queries. + class SnapshotIdentityAliases + extend Gem::Deprecate + + def initialize(identity_aliases) + @identity_aliases = identity_aliases + end + + # Get reads one IdentityAlias by ID. + def get( + id, + deadline: nil + ) + return @identity_aliases.get( + id, + deadline: deadline, + ) + end + + # List gets a list of IdentityAliases matching a given set of criteria. + def list( + filter, + *args, + deadline: nil + ) + return @identity_aliases.list( + filter, + *args, + deadline: deadline, + ) + end + end + + # IdentityAliasesHistory records all changes to the state of a IdentityAlias. + # + # See {IdentityAliasHistory}. + class IdentityAliasesHistory + extend Gem::Deprecate + + def initialize(channel, parent) + begin + @stub = V1::IdentityAliasesHistory::Stub.new(nil, nil, channel_override: channel) + rescue => exception + raise Plumbing::convert_error_to_porcelain(exception) + end + @parent = parent + end + + # List gets a list of IdentityAliasHistory records matching a given set of criteria. + def list( + filter, + *args, + deadline: nil + ) + req = V1::IdentityAliasHistoryListRequest.new() + req.meta = V1::ListRequestMetadata.new() + if @parent.page_limit > 0 + req.meta.limit = @parent.page_limit + end + if not @parent.snapshot_time.nil? + req.meta.snapshot_at = @parent.snapshot_time + end + + req.filter = Plumbing::quote_filter_args(filter, *args) + resp = Enumerator::Generator.new { |g| + tries = 0 + loop do + begin + plumbing_response = @stub.list(req, metadata: @parent.get_metadata("IdentityAliasesHistory.List", req), deadline: deadline) + rescue => exception + if (@parent.shouldRetry(tries, exception)) + tries + +@parent.jitterSleep(tries) + next + end + raise Plumbing::convert_error_to_porcelain(exception) + end + tries = 0 + plumbing_response.history.each do |plumbing_item| + g.yield Plumbing::convert_identity_alias_history_to_porcelain(plumbing_item) + end + break if plumbing_response.meta.next_cursor == "" + req.meta.cursor = plumbing_response.meta.next_cursor + end + } + resp + end + end + + # A IdentitySet is a named grouping of Identity Aliases for Accounts. + # An Account's relationship to a IdentitySet is defined via IdentityAlias objects. + # + # See {IdentitySet}. + class IdentitySets + extend Gem::Deprecate + + def initialize(channel, parent) + begin + @stub = V1::IdentitySets::Stub.new(nil, nil, channel_override: channel) + rescue => exception + raise Plumbing::convert_error_to_porcelain(exception) + end + @parent = parent + end + + # Create registers a new IdentitySet. + def create( + identity_set, + deadline: nil + ) + req = V1::IdentitySetCreateRequest.new() + + req.identity_set = Plumbing::convert_identity_set_to_plumbing(identity_set) + tries = 0 + plumbing_response = nil + loop do + begin + plumbing_response = @stub.create(req, metadata: @parent.get_metadata("IdentitySets.Create", req), deadline: deadline) + rescue => exception + if (@parent.shouldRetry(tries, exception)) + tries + +@parent.jitterSleep(tries) + next + end + raise Plumbing::convert_error_to_porcelain(exception) + end + break + end + + resp = IdentitySetCreateResponse.new() + resp.identity_set = Plumbing::convert_identity_set_to_porcelain(plumbing_response.identity_set) + resp.meta = Plumbing::convert_create_response_metadata_to_porcelain(plumbing_response.meta) + resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit) + resp + end + + # Get reads one IdentitySet by ID. + def get( + id, + deadline: nil + ) + req = V1::IdentitySetGetRequest.new() + if not @parent.snapshot_time.nil? + req.meta = V1::GetRequestMetadata.new() + req.meta.snapshot_at = @parent.snapshot_time + end + + req.id = (id) + tries = 0 + plumbing_response = nil + loop do + begin + plumbing_response = @stub.get(req, metadata: @parent.get_metadata("IdentitySets.Get", req), deadline: deadline) + rescue => exception + if (@parent.shouldRetry(tries, exception)) + tries + +@parent.jitterSleep(tries) + next + end + raise Plumbing::convert_error_to_porcelain(exception) + end + break + end + + resp = IdentitySetGetResponse.new() + resp.identity_set = Plumbing::convert_identity_set_to_porcelain(plumbing_response.identity_set) + resp.meta = Plumbing::convert_get_response_metadata_to_porcelain(plumbing_response.meta) + resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit) + resp + end + + # Update replaces all the fields of a IdentitySet by ID. + def update( + identity_set, + deadline: nil + ) + req = V1::IdentitySetUpdateRequest.new() + + req.identity_set = Plumbing::convert_identity_set_to_plumbing(identity_set) + tries = 0 + plumbing_response = nil + loop do + begin + plumbing_response = @stub.update(req, metadata: @parent.get_metadata("IdentitySets.Update", req), deadline: deadline) + rescue => exception + if (@parent.shouldRetry(tries, exception)) + tries + +@parent.jitterSleep(tries) + next + end + raise Plumbing::convert_error_to_porcelain(exception) + end + break + end + + resp = IdentitySetUpdateResponse.new() + resp.identity_set = Plumbing::convert_identity_set_to_porcelain(plumbing_response.identity_set) + resp.meta = Plumbing::convert_update_response_metadata_to_porcelain(plumbing_response.meta) + resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit) + resp + end + + # Delete removes a IdentitySet by ID. + def delete( + id, + deadline: nil + ) + req = V1::IdentitySetDeleteRequest.new() + + req.id = (id) + tries = 0 + plumbing_response = nil + loop do + begin + plumbing_response = @stub.delete(req, metadata: @parent.get_metadata("IdentitySets.Delete", req), deadline: deadline) + rescue => exception + if (@parent.shouldRetry(tries, exception)) + tries + +@parent.jitterSleep(tries) + next + end + raise Plumbing::convert_error_to_porcelain(exception) + end + break + end + + resp = IdentitySetDeleteResponse.new() + resp.meta = Plumbing::convert_delete_response_metadata_to_porcelain(plumbing_response.meta) + resp.rate_limit = Plumbing::convert_rate_limit_metadata_to_porcelain(plumbing_response.rate_limit) + resp + end + + # List gets a list of IdentitySets matching a given set of criteria. + def list( + filter, + *args, + deadline: nil + ) + req = V1::IdentitySetListRequest.new() + req.meta = V1::ListRequestMetadata.new() + if @parent.page_limit > 0 + req.meta.limit = @parent.page_limit + end + if not @parent.snapshot_time.nil? + req.meta.snapshot_at = @parent.snapshot_time + end + + req.filter = Plumbing::quote_filter_args(filter, *args) + resp = Enumerator::Generator.new { |g| + tries = 0 + loop do + begin + plumbing_response = @stub.list(req, metadata: @parent.get_metadata("IdentitySets.List", req), deadline: deadline) + rescue => exception + if (@parent.shouldRetry(tries, exception)) + tries + +@parent.jitterSleep(tries) + next + end + raise Plumbing::convert_error_to_porcelain(exception) + end + tries = 0 + plumbing_response.identity_sets.each do |plumbing_item| + g.yield Plumbing::convert_identity_set_to_porcelain(plumbing_item) + end + break if plumbing_response.meta.next_cursor == "" + req.meta.cursor = plumbing_response.meta.next_cursor + end + } + resp + end + end + + # SnapshotIdentitySets exposes the read only methods of the IdentitySets + # service for historical queries. + class SnapshotIdentitySets + extend Gem::Deprecate + + def initialize(identity_sets) + @identity_sets = identity_sets + end + + # Get reads one IdentitySet by ID. + def get( + id, + deadline: nil + ) + return @identity_sets.get( + id, + deadline: deadline, + ) + end + + # List gets a list of IdentitySets matching a given set of criteria. + def list( + filter, + *args, + deadline: nil + ) + return @identity_sets.list( + filter, + *args, + deadline: deadline, + ) + end + end + + # IdentitySetsHistory records all changes to the state of a IdentitySet. + # + # See {IdentitySetHistory}. + class IdentitySetsHistory + extend Gem::Deprecate + + def initialize(channel, parent) + begin + @stub = V1::IdentitySetsHistory::Stub.new(nil, nil, channel_override: channel) + rescue => exception + raise Plumbing::convert_error_to_porcelain(exception) + end + @parent = parent + end + + # List gets a list of IdentitySetHistory records matching a given set of criteria. + def list( + filter, + *args, + deadline: nil + ) + req = V1::IdentitySetHistoryListRequest.new() + req.meta = V1::ListRequestMetadata.new() + if @parent.page_limit > 0 + req.meta.limit = @parent.page_limit + end + if not @parent.snapshot_time.nil? + req.meta.snapshot_at = @parent.snapshot_time + end + + req.filter = Plumbing::quote_filter_args(filter, *args) + resp = Enumerator::Generator.new { |g| + tries = 0 + loop do + begin + plumbing_response = @stub.list(req, metadata: @parent.get_metadata("IdentitySetsHistory.List", req), deadline: deadline) + rescue => exception + if (@parent.shouldRetry(tries, exception)) + tries + +@parent.jitterSleep(tries) + next + end + raise Plumbing::convert_error_to_porcelain(exception) + end + tries = 0 + plumbing_response.history.each do |plumbing_item| + g.yield Plumbing::convert_identity_set_history_to_porcelain(plumbing_item) + end + break if plumbing_response.meta.next_cursor == "" + req.meta.cursor = plumbing_response.meta.next_cursor + end + } + resp + end + end + # Nodes make up the strongDM network, and allow your users to connect securely to your resources. There are two types of nodes: # - **Gateways** are the entry points into network. They listen for connection from the strongDM client, and provide access to databases and servers. # - **Relays** are used to extend the strongDM network into segmented subnets. They provide access to databases and servers but do not listen for incoming connections. # # See: @@ -4506,13 +5042,16 @@ # {CyberarkPAMStore} # {CyberarkPAMExperimentalStore} # {DelineaStore} # {GCPStore} # {GCPCertX509Store} + # {KeyfactorSSHStore} # {KeyfactorX509Store} # {VaultAppRoleStore} # {VaultAppRoleCertSSHStore} # {VaultAppRoleCertX509Store} + # {VaultAWSEC2Store} + # {VaultAWSIAMStore} # {VaultTLSStore} # {VaultTLSCertSSHStore} # {VaultTLSCertX509Store} # {VaultTokenStore} # {VaultTokenCertSSHStore}