Class: Google::Cloud::AppEngine::V1::Firewall::Rest::Client
- Inherits:
-
Object
- Object
- Google::Cloud::AppEngine::V1::Firewall::Rest::Client
- Defined in:
- lib/google/cloud/app_engine/v1/firewall/rest/client.rb
Overview
REST client for the Firewall service.
Firewall resources are used to define a collection of access control rules for an Application. Each rule is defined with a position which specifies the rule's order in the sequence of rules, an IP range to be matched against requests, and an action to take upon matching requests.
Every request is evaluated against the Firewall rules in priority order. Processesing stops at the first rule which matches the request's IP address. A final rule always specifies an action that applies to all remaining IP addresses. The default final rule for a newly-created application will be set to "allow" if not otherwise specified by the user.
Defined Under Namespace
Classes: Configuration
Class Method Summary collapse
-
.configure {|config| ... } ⇒ Client::Configuration
Configure the Firewall Client class.
Instance Method Summary collapse
-
#batch_update_ingress_rules(request, options = nil) {|result, operation| ... } ⇒ ::Google::Cloud::AppEngine::V1::BatchUpdateIngressRulesResponse
Replaces the entire firewall ruleset in one bulk operation.
-
#configure {|config| ... } ⇒ Client::Configuration
Configure the Firewall Client instance.
-
#create_ingress_rule(request, options = nil) {|result, operation| ... } ⇒ ::Google::Cloud::AppEngine::V1::FirewallRule
Creates a firewall rule for the application.
-
#delete_ingress_rule(request, options = nil) {|result, operation| ... } ⇒ ::Google::Protobuf::Empty
Deletes the specified firewall rule.
-
#get_ingress_rule(request, options = nil) {|result, operation| ... } ⇒ ::Google::Cloud::AppEngine::V1::FirewallRule
Gets the specified firewall rule.
-
#initialize {|config| ... } ⇒ Client
constructor
Create a new Firewall REST client object.
-
#list_ingress_rules(request, options = nil) {|result, operation| ... } ⇒ ::Gapic::Rest::PagedEnumerable<::Google::Cloud::AppEngine::V1::FirewallRule>
Lists the firewall rules of an application.
-
#universe_domain ⇒ String
The effective universe domain.
-
#update_ingress_rule(request, options = nil) {|result, operation| ... } ⇒ ::Google::Cloud::AppEngine::V1::FirewallRule
Updates the specified firewall rule.
Constructor Details
#initialize {|config| ... } ⇒ Client
Create a new Firewall REST client object.
130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 |
# File 'lib/google/cloud/app_engine/v1/firewall/rest/client.rb', line 130 def initialize # Create the configuration object @config = Configuration.new Client.configure # Yield the configuration if needed yield @config if block_given? # Create credentials credentials = @config.credentials # Use self-signed JWT if the endpoint is unchanged from default, # but only if the default endpoint does not have a region prefix. enable_self_signed_jwt = @config.endpoint.nil? || (@config.endpoint == Configuration::DEFAULT_ENDPOINT && !@config.endpoint.split(".").first.include?("-")) credentials ||= Credentials.default scope: @config.scope, enable_self_signed_jwt: enable_self_signed_jwt if credentials.is_a?(::String) || credentials.is_a?(::Hash) credentials = Credentials.new credentials, scope: @config.scope end @quota_project_id = @config.quota_project @quota_project_id ||= credentials.quota_project_id if credentials.respond_to? :quota_project_id @firewall_stub = ::Google::Cloud::AppEngine::V1::Firewall::Rest::ServiceStub.new( endpoint: @config.endpoint, endpoint_template: DEFAULT_ENDPOINT_TEMPLATE, universe_domain: @config.universe_domain, credentials: credentials ) end |
Class Method Details
.configure {|config| ... } ⇒ Client::Configuration
Configure the Firewall Client class.
See Configuration for a description of the configuration fields.
68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 |
# File 'lib/google/cloud/app_engine/v1/firewall/rest/client.rb', line 68 def self.configure @configure ||= begin namespace = ["Google", "Cloud", "AppEngine", "V1"] parent_config = while namespace.any? parent_name = namespace.join "::" parent_const = const_get parent_name break parent_const.configure if parent_const.respond_to? :configure namespace.pop end default_config = Client::Configuration.new parent_config default_config end yield @configure if block_given? @configure end |
Instance Method Details
#batch_update_ingress_rules(request, options = nil) ⇒ ::Google::Cloud::AppEngine::V1::BatchUpdateIngressRulesResponse #batch_update_ingress_rules(name: nil, ingress_rules: nil) ⇒ ::Google::Cloud::AppEngine::V1::BatchUpdateIngressRulesResponse
Replaces the entire firewall ruleset in one bulk operation. This overrides and replaces the rules of an existing firewall with the new rules.
If the final rule does not match traffic with the '*' wildcard IP range, then an "allow all" rule is explicitly added to the end of the list.
305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 |
# File 'lib/google/cloud/app_engine/v1/firewall/rest/client.rb', line 305 def batch_update_ingress_rules request, = nil raise ::ArgumentError, "request must be provided" if request.nil? request = ::Gapic::Protobuf.coerce request, to: ::Google::Cloud::AppEngine::V1::BatchUpdateIngressRulesRequest # Converts hash and nil to an options object = ::Gapic::CallOptions.new(**.to_h) if .respond_to? :to_h # Customize the options with defaults = @config.rpcs.batch_update_ingress_rules..to_h # Set x-goog-api-client and x-goog-user-project headers [:"x-goog-api-client"] ||= ::Gapic::Headers.x_goog_api_client \ lib_name: @config.lib_name, lib_version: @config.lib_version, gapic_version: ::Google::Cloud::AppEngine::V1::VERSION, transports_version_send: [:rest] [:"x-goog-user-project"] = @quota_project_id if @quota_project_id .apply_defaults timeout: @config.rpcs.batch_update_ingress_rules.timeout, metadata: , retry_policy: @config.rpcs.batch_update_ingress_rules.retry_policy .apply_defaults timeout: @config.timeout, metadata: @config., retry_policy: @config.retry_policy @firewall_stub.batch_update_ingress_rules request, do |result, operation| yield result, operation if block_given? return result end rescue ::Gapic::Rest::Error => e raise ::Google::Cloud::Error.from_error(e) end |
#configure {|config| ... } ⇒ Client::Configuration
Configure the Firewall Client instance.
The configuration is set to the derived mode, meaning that values can be changed, but structural changes (adding new fields, etc.) are not allowed. Structural changes should be made on configure.
See Configuration for a description of the configuration fields.
100 101 102 103 |
# File 'lib/google/cloud/app_engine/v1/firewall/rest/client.rb', line 100 def configure yield @config if block_given? @config end |
#create_ingress_rule(request, options = nil) ⇒ ::Google::Cloud::AppEngine::V1::FirewallRule #create_ingress_rule(parent: nil, rule: nil) ⇒ ::Google::Cloud::AppEngine::V1::FirewallRule
Creates a firewall rule for the application.
395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 |
# File 'lib/google/cloud/app_engine/v1/firewall/rest/client.rb', line 395 def create_ingress_rule request, = nil raise ::ArgumentError, "request must be provided" if request.nil? request = ::Gapic::Protobuf.coerce request, to: ::Google::Cloud::AppEngine::V1::CreateIngressRuleRequest # Converts hash and nil to an options object = ::Gapic::CallOptions.new(**.to_h) if .respond_to? :to_h # Customize the options with defaults = @config.rpcs.create_ingress_rule..to_h # Set x-goog-api-client and x-goog-user-project headers [:"x-goog-api-client"] ||= ::Gapic::Headers.x_goog_api_client \ lib_name: @config.lib_name, lib_version: @config.lib_version, gapic_version: ::Google::Cloud::AppEngine::V1::VERSION, transports_version_send: [:rest] [:"x-goog-user-project"] = @quota_project_id if @quota_project_id .apply_defaults timeout: @config.rpcs.create_ingress_rule.timeout, metadata: , retry_policy: @config.rpcs.create_ingress_rule.retry_policy .apply_defaults timeout: @config.timeout, metadata: @config., retry_policy: @config.retry_policy @firewall_stub.create_ingress_rule request, do |result, operation| yield result, operation if block_given? return result end rescue ::Gapic::Rest::Error => e raise ::Google::Cloud::Error.from_error(e) end |
#delete_ingress_rule(request, options = nil) ⇒ ::Google::Protobuf::Empty #delete_ingress_rule(name: nil) ⇒ ::Google::Protobuf::Empty
Deletes the specified firewall rule.
636 637 638 639 640 641 642 643 644 645 646 647 648 649 650 651 652 653 654 655 656 657 658 659 660 661 662 663 664 665 666 667 668 669 |
# File 'lib/google/cloud/app_engine/v1/firewall/rest/client.rb', line 636 def delete_ingress_rule request, = nil raise ::ArgumentError, "request must be provided" if request.nil? request = ::Gapic::Protobuf.coerce request, to: ::Google::Cloud::AppEngine::V1::DeleteIngressRuleRequest # Converts hash and nil to an options object = ::Gapic::CallOptions.new(**.to_h) if .respond_to? :to_h # Customize the options with defaults = @config.rpcs.delete_ingress_rule..to_h # Set x-goog-api-client and x-goog-user-project headers [:"x-goog-api-client"] ||= ::Gapic::Headers.x_goog_api_client \ lib_name: @config.lib_name, lib_version: @config.lib_version, gapic_version: ::Google::Cloud::AppEngine::V1::VERSION, transports_version_send: [:rest] [:"x-goog-user-project"] = @quota_project_id if @quota_project_id .apply_defaults timeout: @config.rpcs.delete_ingress_rule.timeout, metadata: , retry_policy: @config.rpcs.delete_ingress_rule.retry_policy .apply_defaults timeout: @config.timeout, metadata: @config., retry_policy: @config.retry_policy @firewall_stub.delete_ingress_rule request, do |result, operation| yield result, operation if block_given? return result end rescue ::Gapic::Rest::Error => e raise ::Google::Cloud::Error.from_error(e) end |
#get_ingress_rule(request, options = nil) ⇒ ::Google::Cloud::AppEngine::V1::FirewallRule #get_ingress_rule(name: nil) ⇒ ::Google::Cloud::AppEngine::V1::FirewallRule
Gets the specified firewall rule.
474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 500 501 502 503 504 505 506 507 |
# File 'lib/google/cloud/app_engine/v1/firewall/rest/client.rb', line 474 def get_ingress_rule request, = nil raise ::ArgumentError, "request must be provided" if request.nil? request = ::Gapic::Protobuf.coerce request, to: ::Google::Cloud::AppEngine::V1::GetIngressRuleRequest # Converts hash and nil to an options object = ::Gapic::CallOptions.new(**.to_h) if .respond_to? :to_h # Customize the options with defaults = @config.rpcs.get_ingress_rule..to_h # Set x-goog-api-client and x-goog-user-project headers [:"x-goog-api-client"] ||= ::Gapic::Headers.x_goog_api_client \ lib_name: @config.lib_name, lib_version: @config.lib_version, gapic_version: ::Google::Cloud::AppEngine::V1::VERSION, transports_version_send: [:rest] [:"x-goog-user-project"] = @quota_project_id if @quota_project_id .apply_defaults timeout: @config.rpcs.get_ingress_rule.timeout, metadata: , retry_policy: @config.rpcs.get_ingress_rule.retry_policy .apply_defaults timeout: @config.timeout, metadata: @config., retry_policy: @config.retry_policy @firewall_stub.get_ingress_rule request, do |result, operation| yield result, operation if block_given? return result end rescue ::Gapic::Rest::Error => e raise ::Google::Cloud::Error.from_error(e) end |
#list_ingress_rules(request, options = nil) ⇒ ::Gapic::Rest::PagedEnumerable<::Google::Cloud::AppEngine::V1::FirewallRule> #list_ingress_rules(parent: nil, page_size: nil, page_token: nil, matching_address: nil) ⇒ ::Gapic::Rest::PagedEnumerable<::Google::Cloud::AppEngine::V1::FirewallRule>
Lists the firewall rules of an application.
219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 |
# File 'lib/google/cloud/app_engine/v1/firewall/rest/client.rb', line 219 def list_ingress_rules request, = nil raise ::ArgumentError, "request must be provided" if request.nil? request = ::Gapic::Protobuf.coerce request, to: ::Google::Cloud::AppEngine::V1::ListIngressRulesRequest # Converts hash and nil to an options object = ::Gapic::CallOptions.new(**.to_h) if .respond_to? :to_h # Customize the options with defaults = @config.rpcs.list_ingress_rules..to_h # Set x-goog-api-client and x-goog-user-project headers [:"x-goog-api-client"] ||= ::Gapic::Headers.x_goog_api_client \ lib_name: @config.lib_name, lib_version: @config.lib_version, gapic_version: ::Google::Cloud::AppEngine::V1::VERSION, transports_version_send: [:rest] [:"x-goog-user-project"] = @quota_project_id if @quota_project_id .apply_defaults timeout: @config.rpcs.list_ingress_rules.timeout, metadata: , retry_policy: @config.rpcs.list_ingress_rules.retry_policy .apply_defaults timeout: @config.timeout, metadata: @config., retry_policy: @config.retry_policy @firewall_stub.list_ingress_rules request, do |result, operation| result = ::Gapic::Rest::PagedEnumerable.new @firewall_stub, :list_ingress_rules, "ingress_rules", request, result, yield result, operation if block_given? return result end rescue ::Gapic::Rest::Error => e raise ::Google::Cloud::Error.from_error(e) end |
#universe_domain ⇒ String
The effective universe domain
110 111 112 |
# File 'lib/google/cloud/app_engine/v1/firewall/rest/client.rb', line 110 def universe_domain @firewall_stub.universe_domain end |
#update_ingress_rule(request, options = nil) ⇒ ::Google::Cloud::AppEngine::V1::FirewallRule #update_ingress_rule(name: nil, rule: nil, update_mask: nil) ⇒ ::Google::Cloud::AppEngine::V1::FirewallRule
Updates the specified firewall rule.
557 558 559 560 561 562 563 564 565 566 567 568 569 570 571 572 573 574 575 576 577 578 579 580 581 582 583 584 585 586 587 588 589 590 |
# File 'lib/google/cloud/app_engine/v1/firewall/rest/client.rb', line 557 def update_ingress_rule request, = nil raise ::ArgumentError, "request must be provided" if request.nil? request = ::Gapic::Protobuf.coerce request, to: ::Google::Cloud::AppEngine::V1::UpdateIngressRuleRequest # Converts hash and nil to an options object = ::Gapic::CallOptions.new(**.to_h) if .respond_to? :to_h # Customize the options with defaults = @config.rpcs.update_ingress_rule..to_h # Set x-goog-api-client and x-goog-user-project headers [:"x-goog-api-client"] ||= ::Gapic::Headers.x_goog_api_client \ lib_name: @config.lib_name, lib_version: @config.lib_version, gapic_version: ::Google::Cloud::AppEngine::V1::VERSION, transports_version_send: [:rest] [:"x-goog-user-project"] = @quota_project_id if @quota_project_id .apply_defaults timeout: @config.rpcs.update_ingress_rule.timeout, metadata: , retry_policy: @config.rpcs.update_ingress_rule.retry_policy .apply_defaults timeout: @config.timeout, metadata: @config., retry_policy: @config.retry_policy @firewall_stub.update_ingress_rule request, do |result, operation| yield result, operation if block_given? return result end rescue ::Gapic::Rest::Error => e raise ::Google::Cloud::Error.from_error(e) end |