@@ -61,21 +61,43 @@ class Binding
6161 # project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:`emailid``: An
6262 # email address that represents a Google group. For example, `admins@example.com`
6363 # . * `domain:`domain``: The G Suite domain (primary) that represents all the
64- # users of that domain. For example, `google.com` or `example.com`. * `deleted:
65- # user:`emailid`?uid=`uniqueid``: An email address (plus unique identifier)
66- # representing a user that has been recently deleted. For example, `alice@
67- # example.com?uid=123456789012345678901`. If the user is recovered, this value
68- # reverts to `user:`emailid`` and the recovered user retains the role in the
69- # binding. * `deleted:serviceAccount:`emailid`?uid=`uniqueid``: An email address
70- # (plus unique identifier) representing a service account that has been recently
71- # deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=
64+ # users of that domain. For example, `google.com` or `example.com`. * `principal:
65+ # //iam.googleapis.com/locations/global/workforcePools/`pool_id`/subject/`
66+ # subject_attribute_value``: A single identity in a workforce identity pool. * `
67+ # principalSet://iam.googleapis.com/locations/global/workforcePools/`pool_id`/
68+ # group/`group_id``: All workforce identities in a group. * `principalSet://iam.
69+ # googleapis.com/locations/global/workforcePools/`pool_id`/attribute.`
70+ # attribute_name`/`attribute_value``: All workforce identities with a specific
71+ # attribute value. * `principalSet://iam.googleapis.com/locations/global/
72+ # workforcePools/`pool_id`/*`: All identities in a workforce identity pool. * `
73+ # principal://iam.googleapis.com/projects/`project_number`/locations/global/
74+ # workloadIdentityPools/`pool_id`/subject/`subject_attribute_value``: A single
75+ # identity in a workload identity pool. * `principalSet://iam.googleapis.com/
76+ # projects/`project_number`/locations/global/workloadIdentityPools/`pool_id`/
77+ # group/`group_id``: A workload identity pool group. * `principalSet://iam.
78+ # googleapis.com/projects/`project_number`/locations/global/
79+ # workloadIdentityPools/`pool_id`/attribute.`attribute_name`/`attribute_value``:
80+ # All identities in a workload identity pool with a certain attribute. * `
81+ # principalSet://iam.googleapis.com/projects/`project_number`/locations/global/
82+ # workloadIdentityPools/`pool_id`/*`: All identities in a workload identity pool.
83+ # * `deleted:user:`emailid`?uid=`uniqueid``: An email address (plus unique
84+ # identifier) representing a user that has been recently deleted. For example, `
85+ # alice@example.com?uid=123456789012345678901`. If the user is recovered, this
86+ # value reverts to `user:`emailid`` and the recovered user retains the role in
87+ # the binding. * `deleted:serviceAccount:`emailid`?uid=`uniqueid``: An email
88+ # address (plus unique identifier) representing a service account that has been
89+ # recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=
7290 # 123456789012345678901`. If the service account is undeleted, this value
7391 # reverts to `serviceAccount:`emailid`` and the undeleted service account
7492 # retains the role in the binding. * `deleted:group:`emailid`?uid=`uniqueid``:
7593 # An email address (plus unique identifier) representing a Google group that has
7694 # been recently deleted. For example, `admins@example.com?uid=
7795 # 123456789012345678901`. If the group is recovered, this value reverts to `
78- # group:`emailid`` and the recovered group retains the role in the binding.
96+ # group:`emailid`` and the recovered group retains the role in the binding. * `
97+ # deleted:principal://iam.googleapis.com/locations/global/workforcePools/`
98+ # pool_id`/subject/`subject_attribute_value``: Deleted single identity in a
99+ # workforce identity pool. For example, `deleted:principal://iam.googleapis.com/
100+ # locations/global/workforcePools/my-pool-id/subject/my-subject-attribute-value`.
79101 # Corresponds to the JSON property `members`
80102 # @return [Array<String>]
81103 attr_accessor :members
0 commit comments