@@ -45,10 +45,11 @@ public final class Binding extends com.google.api.client.json.GenericJson {
4545 * Specifies the principals requesting access for a Google Cloud resource. `members` can have the
4646 * following values: * `allUsers`: A special identifier that represents anyone who is on the
4747 * internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier
48- * that represents anyone who is authenticated with a Google account or a service account. *
49- * `user:{emailid}`: An email address that represents a specific Google account. For example,
50- * `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google
51- * service account. For example, `my-other-app@appspot.gserviceaccount.com`. *
48+ * that represents anyone who is authenticated with a Google account or a service account. Does
49+ * not include identities that come from external identity providers (IdPs) through identity
50+ * federation. * `user:{emailid}`: An email address that represents a specific Google account. For
51+ * example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a
52+ * Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. *
5253 * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a
5354 * [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-
5455 * service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. *
@@ -111,10 +112,11 @@ public Binding setCondition(Expr condition) {
111112 * Specifies the principals requesting access for a Google Cloud resource. `members` can have the
112113 * following values: * `allUsers`: A special identifier that represents anyone who is on the
113114 * internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier
114- * that represents anyone who is authenticated with a Google account or a service account. *
115- * `user:{emailid}`: An email address that represents a specific Google account. For example,
116- * `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google
117- * service account. For example, `my-other-app@appspot.gserviceaccount.com`. *
115+ * that represents anyone who is authenticated with a Google account or a service account. Does
116+ * not include identities that come from external identity providers (IdPs) through identity
117+ * federation. * `user:{emailid}`: An email address that represents a specific Google account. For
118+ * example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a
119+ * Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. *
118120 * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a
119121 * [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-
120122 * service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. *
@@ -143,10 +145,11 @@ public java.util.List<java.lang.String> getMembers() {
143145 * Specifies the principals requesting access for a Google Cloud resource. `members` can have the
144146 * following values: * `allUsers`: A special identifier that represents anyone who is on the
145147 * internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier
146- * that represents anyone who is authenticated with a Google account or a service account. *
147- * `user:{emailid}`: An email address that represents a specific Google account. For example,
148- * `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google
149- * service account. For example, `my-other-app@appspot.gserviceaccount.com`. *
148+ * that represents anyone who is authenticated with a Google account or a service account. Does
149+ * not include identities that come from external identity providers (IdPs) through identity
150+ * federation. * `user:{emailid}`: An email address that represents a specific Google account. For
151+ * example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a
152+ * Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. *
150153 * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a
151154 * [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-
152155 * service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. *
0 commit comments