feat: Add compliant_but_disallowed_services field to the v1beta1 Workload proto (#201)

* feat: Add compliant_but_disallowed_services field to the v1beta1 Workload proto Committer: @samhutton PiperOrigin-RevId: 471822190 Source-Link: googleapis/googleapis@61f75b4 Source-Link: https://github.com/googleapis/googleapis-gen/commit/9abf7bc271570f7073c89c0d4beb3b86a66678cb Copy-Tag: eyJwIjoiLmdpdGh1Yi8uT3dsQm90LnlhbWwiLCJoIjoiOWFiZjdiYzI3MTU3MGY3MDczYzg5YzBkNGJlYjNiODZhNjY2NzhjYiJ9 * 🦉 Updates from OwlBot post-processor See https://github.com/googleapis/repo-automation-bots/blob/main/packages/owl-bot/README.md Co-authored-by: Owl Bot <gcf-owl-bot[bot]@users.noreply.github.com>

Author: gcf-owl-bot[bot]

google/cloud/assuredworkloads_v1beta1/services/assured_workloads_service/async_client.py

@@ -736,9 +736,8 @@ async def analyze_workload_move(
  timeout: float = None,
  metadata: Sequence[Tuple[str, str]] = (),
  ) -> assuredworkloads.AnalyzeWorkloadMoveResponse:
- r"""A request to analyze a hypothetical move of a source
- project or project-based workload to a target
- (destination) folder-based workload.
+ r"""Analyze if the source Assured Workloads can be moved
+ to the target Assured Workload
 
  .. code-block:: python
 

google/cloud/assuredworkloads_v1beta1/services/assured_workloads_service/client.py

@@ -939,9 +939,8 @@ def analyze_workload_move(
  timeout: float = None,
  metadata: Sequence[Tuple[str, str]] = (),
  ) -> assuredworkloads.AnalyzeWorkloadMoveResponse:
- r"""A request to analyze a hypothetical move of a source
- project or project-based workload to a target
- (destination) folder-based workload.
+ r"""Analyze if the source Assured Workloads can be moved
+ to the target Assured Workload
 
  .. code-block:: python
 

google/cloud/assuredworkloads_v1beta1/services/assured_workloads_service/transports/grpc.py

@@ -405,9 +405,8 @@ def analyze_workload_move(
  ]:
  r"""Return a callable for the analyze workload move method over gRPC.
 
- A request to analyze a hypothetical move of a source
- project or project-based workload to a target
- (destination) folder-based workload.
+ Analyze if the source Assured Workloads can be moved
+ to the target Assured Workload
 
  Returns:
  Callable[[~.AnalyzeWorkloadMoveRequest],

google/cloud/assuredworkloads_v1beta1/services/assured_workloads_service/transports/grpc_asyncio.py

@@ -416,9 +416,8 @@ def analyze_workload_move(
  ]:
  r"""Return a callable for the analyze workload move method over gRPC.
 
- A request to analyze a hypothetical move of a source
- project or project-based workload to a target
- (destination) folder-based workload.
+ Analyze if the source Assured Workloads can be moved
+ to the target Assured Workload
 
  Returns:
  Callable[[~.AnalyzeWorkloadMoveRequest],

google/cloud/assuredworkloads_v1beta1/types/assuredworkloads.py

@@ -419,6 +419,14 @@ class Workload(proto.Message):
  response is queried during GetWorkload call. In
  failure cases, user friendly error message is
  shown in SAA details page.
+ compliant_but_disallowed_services (Sequence[str]):
+ Output only. Urls for services which are
+ compliant for this Assured Workload, but which
+ are currently disallowed by the
+ ResourceUsageRestriction org policy. Invoke
+ RestrictAllowedResources endpoint to allow your
+ project developers to use these services in
+ their environment.".
  """
 
  class ComplianceRegime(proto.Enum):
@@ -722,6 +730,10 @@ class SetupError(proto.Enum):
  number=20,
  message=SaaEnrollmentResponse,
  )
+ compliant_but_disallowed_services = proto.RepeatedField(
+ proto.STRING,
+ number=24,
+ )
 
 
 class CreateWorkloadOperationMetadata(proto.Message):

tests/unit/gapic/assuredworkloads_v1beta1/test_assured_workloads_service.py

@@ -986,6 +986,9 @@ def test_update_workload(request_type, transport: str = "grpc"):
  provisioned_resources_parent="provisioned_resources_parent_value",
  kaj_enrollment_state=assuredworkloads.Workload.KajEnrollmentState.KAJ_ENROLLMENT_STATE_PENDING,
  enable_sovereign_controls=True,
+ compliant_but_disallowed_services=[
+ "compliant_but_disallowed_services_value"
+ ],
  il4_settings=assuredworkloads.Workload.IL4Settings(
  kms_settings=assuredworkloads.Workload.KMSSettings(
  next_rotation_time=timestamp_pb2.Timestamp(seconds=751)
@@ -1012,6 +1015,9 @@ def test_update_workload(request_type, transport: str = "grpc"):
  == assuredworkloads.Workload.KajEnrollmentState.KAJ_ENROLLMENT_STATE_PENDING
  )
  assert response.enable_sovereign_controls is True
+ assert response.compliant_but_disallowed_services == [
+ "compliant_but_disallowed_services_value"
+ ]
 
 
 def test_update_workload_empty_call():
@@ -1056,6 +1062,9 @@ async def test_update_workload_async(
  provisioned_resources_parent="provisioned_resources_parent_value",
  kaj_enrollment_state=assuredworkloads.Workload.KajEnrollmentState.KAJ_ENROLLMENT_STATE_PENDING,
  enable_sovereign_controls=True,
+ compliant_but_disallowed_services=[
+ "compliant_but_disallowed_services_value"
+ ],
  )
  )
  response = await client.update_workload(request)
@@ -1078,6 +1087,9 @@ async def test_update_workload_async(
  == assuredworkloads.Workload.KajEnrollmentState.KAJ_ENROLLMENT_STATE_PENDING
  )
  assert response.enable_sovereign_controls is True
+ assert response.compliant_but_disallowed_services == [
+ "compliant_but_disallowed_services_value"
+ ]
 
 
 @pytest.mark.asyncio
@@ -1581,6 +1593,9 @@ def test_get_workload(request_type, transport: str = "grpc"):
  provisioned_resources_parent="provisioned_resources_parent_value",
  kaj_enrollment_state=assuredworkloads.Workload.KajEnrollmentState.KAJ_ENROLLMENT_STATE_PENDING,
  enable_sovereign_controls=True,
+ compliant_but_disallowed_services=[
+ "compliant_but_disallowed_services_value"
+ ],
  il4_settings=assuredworkloads.Workload.IL4Settings(
  kms_settings=assuredworkloads.Workload.KMSSettings(
  next_rotation_time=timestamp_pb2.Timestamp(seconds=751)
@@ -1607,6 +1622,9 @@ def test_get_workload(request_type, transport: str = "grpc"):
  == assuredworkloads.Workload.KajEnrollmentState.KAJ_ENROLLMENT_STATE_PENDING
  )
  assert response.enable_sovereign_controls is True
+ assert response.compliant_but_disallowed_services == [
+ "compliant_but_disallowed_services_value"
+ ]
 
 
 def test_get_workload_empty_call():
@@ -1651,6 +1669,9 @@ async def test_get_workload_async(
  provisioned_resources_parent="provisioned_resources_parent_value",
  kaj_enrollment_state=assuredworkloads.Workload.KajEnrollmentState.KAJ_ENROLLMENT_STATE_PENDING,
  enable_sovereign_controls=True,
+ compliant_but_disallowed_services=[
+ "compliant_but_disallowed_services_value"
+ ],
  )
  )
  response = await client.get_workload(request)
@@ -1673,6 +1694,9 @@ async def test_get_workload_async(
  == assuredworkloads.Workload.KajEnrollmentState.KAJ_ENROLLMENT_STATE_PENDING
  )
  assert response.enable_sovereign_controls is True
+ assert response.compliant_but_disallowed_services == [
+ "compliant_but_disallowed_services_value"
+ ]
 
 
 @pytest.mark.asyncio