@@ -179,21 +179,43 @@ class Binding
179179 # project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:`emailid``: An
180180 # email address that represents a Google group. For example, `admins@example.com`
181181 # . * `domain:`domain``: The G Suite domain (primary) that represents all the
182- # users of that domain. For example, `google.com` or `example.com`. * `deleted:
183- # user:`emailid`?uid=`uniqueid``: An email address (plus unique identifier)
184- # representing a user that has been recently deleted. For example, `alice@
185- # example.com?uid=123456789012345678901`. If the user is recovered, this value
186- # reverts to `user:`emailid`` and the recovered user retains the role in the
187- # binding. * `deleted:serviceAccount:`emailid`?uid=`uniqueid``: An email address
188- # (plus unique identifier) representing a service account that has been recently
189- # deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=
182+ # users of that domain. For example, `google.com` or `example.com`. * `principal:
183+ # //iam.googleapis.com/locations/global/workforcePools/`pool_id`/subject/`
184+ # subject_attribute_value``: A single identity in a workforce identity pool. * `
185+ # principalSet://iam.googleapis.com/locations/global/workforcePools/`pool_id`/
186+ # group/`group_id``: All workforce identities in a group. * `principalSet://iam.
187+ # googleapis.com/locations/global/workforcePools/`pool_id`/attribute.`
188+ # attribute_name`/`attribute_value``: All workforce identities with a specific
189+ # attribute value. * `principalSet://iam.googleapis.com/locations/global/
190+ # workforcePools/`pool_id`/*`: All identities in a workforce identity pool. * `
191+ # principal://iam.googleapis.com/projects/`project_number`/locations/global/
192+ # workloadIdentityPools/`pool_id`/subject/`subject_attribute_value``: A single
193+ # identity in a workload identity pool. * `principalSet://iam.googleapis.com/
194+ # projects/`project_number`/locations/global/workloadIdentityPools/`pool_id`/
195+ # group/`group_id``: A workload identity pool group. * `principalSet://iam.
196+ # googleapis.com/projects/`project_number`/locations/global/
197+ # workloadIdentityPools/`pool_id`/attribute.`attribute_name`/`attribute_value``:
198+ # All identities in a workload identity pool with a certain attribute. * `
199+ # principalSet://iam.googleapis.com/projects/`project_number`/locations/global/
200+ # workloadIdentityPools/`pool_id`/*`: All identities in a workload identity pool.
201+ # * `deleted:user:`emailid`?uid=`uniqueid``: An email address (plus unique
202+ # identifier) representing a user that has been recently deleted. For example, `
203+ # alice@example.com?uid=123456789012345678901`. If the user is recovered, this
204+ # value reverts to `user:`emailid`` and the recovered user retains the role in
205+ # the binding. * `deleted:serviceAccount:`emailid`?uid=`uniqueid``: An email
206+ # address (plus unique identifier) representing a service account that has been
207+ # recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=
190208 # 123456789012345678901`. If the service account is undeleted, this value
191209 # reverts to `serviceAccount:`emailid`` and the undeleted service account
192210 # retains the role in the binding. * `deleted:group:`emailid`?uid=`uniqueid``:
193211 # An email address (plus unique identifier) representing a Google group that has
194212 # been recently deleted. For example, `admins@example.com?uid=
195213 # 123456789012345678901`. If the group is recovered, this value reverts to `
196- # group:`emailid`` and the recovered group retains the role in the binding.
214+ # group:`emailid`` and the recovered group retains the role in the binding. * `
215+ # deleted:principal://iam.googleapis.com/locations/global/workforcePools/`
216+ # pool_id`/subject/`subject_attribute_value``: Deleted single identity in a
217+ # workforce identity pool. For example, `deleted:principal://iam.googleapis.com/
218+ # locations/global/workforcePools/my-pool-id/subject/my-subject-attribute-value`.
197219 # Corresponds to the JSON property `members`
198220 # @return [Array<String>]
199221 attr_accessor :members
0 commit comments