📄 Source: Binding.php
<?php
/*
* Copyright 2014 Google Inc.
*
* Licensed under the Apache License, Version 2.0 (the "License"); you may not
* use this file except in compliance with the License. You may obtain a copy of
* the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
* WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
* License for the specific language governing permissions and limitations under
* the License.
*/
namespace Google\Service\Compute;
class Binding extends \Google\Collection
{
protected $collection_key = 'members';
protected $conditionType = Expr::class;
protected $conditionDataType = '';
/**
* Specifies the principals requesting access for a Google Cloud resource.
* `members` can have the following values:
*
* * `allUsers`: A special identifier that represents anyone who is on the
* internet; with or without a Google account.
*
* * `allAuthenticatedUsers`: A special identifier that represents anyone
* who is authenticated with a Google account or a service account. Does
* not include identities that come from external identity providers (IdPs)
* through identity federation.
*
* * `user:{emailid}`: An email address that represents a specific Google
* account. For example, `alice@example.com` .
*
* * `serviceAccount:{emailid}`: An email address that represents a Google
* service account. For example, `my-other-
* app@appspot.gserviceaccount.com`.
*
* * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An
* identifier for a [Kubernetes service
* account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-
* service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-
* kubernetes-sa]`.
*
* * `group:{emailid}`: An email address that represents a Google group.
* For example, `admins@example.com`.
*
* * `domain:{domain}`: The G Suite domain (primary) that represents all the
* users of that domain. For example, `google.com` or `example.com`.
*
* * `principal://iam.googleapis.com/locations/global/workforcePools/{pool_id}
* /subject/{subject_attribute_value}`: A single identity in a workforce
* identity pool.
*
* * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_
* id}/group/{group_id}`: All workforce identities in a group.
*
* * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_
* id}/attribute.{attribute_name}/{attribute_value}`: All workforce
* identities with a specific attribute value.
*
* * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_
* id}`: All identities in a workforce identity pool.
*
* * `principal://iam.googleapis.com/projects/{project_number}/locations/globa
* l/workloadIdentityPools/{pool_id}/subject/{subject_attribute_value}`: A
* single identity in a workload identity pool.
*
* * `principalSet://iam.googleapis.com/projects/{project_number}/locations/gl
* obal/workloadIdentityPools/{pool_id}/group/{group_id}`: A workload
* identity pool group.
*
* * `principalSet://iam.googleapis.com/projects/{project_number}/locations/gl
* obal/workloadIdentityPools/{pool_id}/attribute.{attribute_name}/{attribute_
* value}`: All identities in a workload identity pool with a certain
* attribute.
*
* * `principalSet://iam.googleapis.com/projects/{project_number}/locations/gl
* obal/workloadIdentityPools/{pool_id}`: All identities in a workload
* identity pool.
*
* * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
* identifier) representing a user that has been recently deleted. For
* example, `alice@example.com?uid=123456789012345678901`. If the user is
* recovered, this value reverts to `user:{emailid}` and the recovered user
* retains the role in the binding.
*
* * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
* unique identifier) representing a service account that has been recently
* deleted. For example, `my-other-
* app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the
* service account is undeleted, this value reverts to
* `serviceAccount:{emailid}` and the undeleted service account retains the
* role in the binding.
*
* * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
* identifier) representing a Google group that has been recently deleted.
* For example, `admins@example.com?uid=123456789012345678901`. If the
* group is recovered, this value reverts to `group:{emailid}` and the
* recovered group retains the role in the binding.
*
* * `deleted:principal://iam.googleapis.com/locations/global/workforcePools/{
* pool_id}/subject/{subject_attribute_value}`: Deleted single identity in a
* workforce identity pool. For example,
* `deleted:principal://iam.googleapis.com/locations/global/workforcePools/my-
* pool-id/subject/my-subject-attribute-value`.
*
* @var string[]
*/
public $members;
/**
* Role that is assigned to the list of `members`, or principals. For example,
* `roles/viewer`, `roles/editor`, or `roles/owner`.
*
* For an overview of the IAM roles and permissions, see the [IAM
* documentation](https://cloud.google.com/iam/docs/roles-overview). For a
* list of the available pre-defined roles, see
* [here](https://cloud.google.com/iam/docs/understanding-roles).
*
* @var string
*/
public $role;
/**
* The condition that is associated with this binding.
*
* If the condition evaluates to `true`, then this binding applies to the
* current request.
*
* If the condition evaluates to `false`, then this binding does not apply to
* the current request. However, a different role binding might grant the same
* role to one or more of the principals in this binding.
*
* To learn which resources support conditions in their IAM policies, see the
* [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-
* policies).
*
* @param Expr $condition
*/
public function setCondition(Expr $condition)
{
$this->condition = $condition;
}
/**
* @return Expr
*/
public function getCondition()
{
return $this->condition;
}
/**
* Specifies the principals requesting access for a Google Cloud resource.
* `members` can have the following values:
*
* * `allUsers`: A special identifier that represents anyone who is on the
* internet; with or without a Google account.
*
* * `allAuthenticatedUsers`: A special identifier that represents anyone
* who is authenticated with a Google account or a service account. Does
* not include identities that come from external identity providers (IdPs)
* through identity federation.
*
* * `user:{emailid}`: An email address that represents a specific Google
* account. For example, `alice@example.com` .
*
* * `serviceAccount:{emailid}`: An email address that represents a Google
* service account. For example, `my-other-
* app@appspot.gserviceaccount.com`.
*
* * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An
* identifier for a [Kubernetes service
* account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-
* service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-
* kubernetes-sa]`.
*
* * `group:{emailid}`: An email address that represents a Google group.
* For example, `admins@example.com`.
*
* * `domain:{domain}`: The G Suite domain (primary) that represents all the
* users of that domain. For example, `google.com` or `example.com`.
*
* * `principal://iam.googleapis.com/locations/global/workforcePools/{pool_id}
* /subject/{subject_attribute_value}`: A single identity in a workforce
* identity pool.
*
* * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_
* id}/group/{group_id}`: All workforce identities in a group.
*
* * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_
* id}/attribute.{attribute_name}/{attribute_value}`: All workforce
* identities with a specific attribute value.
*
* * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_
* id}`: All identities in a workforce identity pool.
*
* * `principal://iam.googleapis.com/projects/{project_number}/locations/globa
* l/workloadIdentityPools/{pool_id}/subject/{subject_attribute_value}`: A
* single identity in a workload identity pool.
*
* * `principalSet://iam.googleapis.com/projects/{project_number}/locations/gl
* obal/workloadIdentityPools/{pool_id}/group/{group_id}`: A workload
* identity pool group.
*
* * `principalSet://iam.googleapis.com/projects/{project_number}/locations/gl
* obal/workloadIdentityPools/{pool_id}/attribute.{attribute_name}/{attribute_
* value}`: All identities in a workload identity pool with a certain
* attribute.
*
* * `principalSet://iam.googleapis.com/projects/{project_number}/locations/gl
* obal/workloadIdentityPools/{pool_id}`: All identities in a workload
* identity pool.
*
* * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
* identifier) representing a user that has been recently deleted. For
* example, `alice@example.com?uid=123456789012345678901`. If the user is
* recovered, this value reverts to `user:{emailid}` and the recovered user
* retains the role in the binding.
*
* * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
* unique identifier) representing a service account that has been recently
* deleted. For example, `my-other-
* app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the
* service account is undeleted, this value reverts to
* `serviceAccount:{emailid}` and the undeleted service account retains the
* role in the binding.
*
* * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
* identifier) representing a Google group that has been recently deleted.
* For example, `admins@example.com?uid=123456789012345678901`. If the
* group is recovered, this value reverts to `group:{emailid}` and the
* recovered group retains the role in the binding.
*
* * `deleted:principal://iam.googleapis.com/locations/global/workforcePools/{
* pool_id}/subject/{subject_attribute_value}`: Deleted single identity in a
* workforce identity pool. For example,
* `deleted:principal://iam.googleapis.com/locations/global/workforcePools/my-
* pool-id/subject/my-subject-attribute-value`.
*
* @param string[] $members
*/
public function setMembers($members)
{
$this->members = $members;
}
/**
* @return string[]
*/
public function getMembers()
{
return $this->members;
}
/**
* Role that is assigned to the list of `members`, or principals. For example,
* `roles/viewer`, `roles/editor`, or `roles/owner`.
*
* For an overview of the IAM roles and permissions, see the [IAM
* documentation](https://cloud.google.com/iam/docs/roles-overview). For a
* list of the available pre-defined roles, see
* [here](https://cloud.google.com/iam/docs/understanding-roles).
*
* @param string $role
*/
public function setRole($role)
{
$this->role = $role;
}
/**
* @return string
*/
public function getRole()
{
return $this->role;
}
}
// Adding a class alias for backwards compatibility with the previous class name.
class_alias(Binding::class, 'Google_Service_Compute_Binding');
← Back