feat: Add new gcloud commands, API clients, and third-party libraries across various services.

gcloud auth application-default login/google-cloud-sdk/lib/surface/iap/oauth_clients/__init__.py

@@ -0,0 +1,47 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2020 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""The super-group for the IAP CLI."""
+
+from __future__ import absolute_import
+from __future__ import division
+from __future__ import unicode_literals
+
+from googlecloudsdk.calliope import base
+
+
+@base.Deprecate(
+    is_removed=False,
+    warning=(
+        'This command is deprecated and will be non-functional after the IAP'
+        ' OAuth Admin APIs are turned down. Jan 19, 2026: Google will'
+        ' discontinue support for the IAP OAuth Admin APIs. New projects will'
+        ' not be able to use these APIs. March 19, 2026: The IAP OAuth Admin'
+        ' APIs will be permanently shut down. Access to this feature will no'
+        ' longer be available.'
+    ),
+)
+@base.DefaultUniverseOnly
+@base.ReleaseTracks(
+    base.ReleaseTrack.ALPHA, base.ReleaseTrack.BETA, base.ReleaseTrack.GA
+)
+class Iap(base.Group):
+  """Manage IAP OAuth clients.
+
+  Manage OAuth clients that are used by Cloud Identity-Aware Proxy. Note this
+  API cannot be used as a generic management API for all OAuth clients in your
+  project.
+  """
+
+  category = 'Identity and Security'

gcloud auth application-default login/google-cloud-sdk/lib/surface/iap/oauth_clients/create.yaml

@@ -0,0 +1,36 @@
+release_tracks: [ALPHA, BETA, GA]
+help_text:
+  brief: |
+    Create a Cloud IAP OAuth client in the project.
+  description: |
+    *{command}* is used to create an OAuth client in the project to be used by Cloud IAP. To call
+    this command, the Cloud OAuth brand for the project must exist and be set for 'internal only'.
+    The new client is owned by Cloud IAP.
+  examples: |
+    To create a Cloud IAP OAuth client for the current project, run:
+
+        $ {command} BRAND --display_name=DISPLAY_NAME
+
+    To create a Cloud IAP OAuth client for the project PROJECT_ID, run:
+
+        $ {command} BRAND --display_name=DISPLAY_NAME --project=PROJECT_ID
+
+request:
+  collection: iap.projects.brands.identityAwareProxyClients
+  api_version: v1
+
+arguments:
+  resource:
+    spec: !REF googlecloudsdk.command_lib.iap.resources:brand
+    is_parent_resource: true
+    arg_name: brand
+    help_text: |
+      Name of the Cloud OAuth brand to create a Cloud IAP OAuth client under.
+  params:
+  - arg_name: display_name
+    api_field: identityAwareProxyClient.displayName
+    required: true
+    help_text: |
+      User friendly name for the Cloud IAP OAuth client.
+output:
+  format: yaml

gcloud auth application-default login/google-cloud-sdk/lib/surface/iap/oauth_clients/delete.yaml

@@ -0,0 +1,28 @@
+release_tracks: [ALPHA, BETA, GA]
+help_text:
+  brief: |
+    Delete a Cloud IAP OAuth client.
+  description: |
+    *{command}* is used to delete a Cloud IAP OAuth client.  Note this command cannot be used to
+    delete any other type of OAuth client in your project.
+  examples: |
+    To delete a Cloud IAP OAuth client named CLIENT for the current project and brand BRAND, run:
+
+        $ {command} CLIENT --brand=BRAND
+
+    To delete a Cloud IAP OAuth client named CLIENT for a specific project PROJECT_ID and brand
+    BRAND, run:
+
+        $ {command} CLIENT --brand=BRAND --project=PROJECT_ID
+
+request:
+  collection: iap.projects.brands.identityAwareProxyClients
+  api_version: v1
+
+arguments:
+  resource:
+    spec: !REF googlecloudsdk.command_lib.iap.resources:client
+    arg_name: name
+    is_positional: true
+    help_text: |
+      Name of the Cloud IAP OAuth client to delete.

gcloud auth application-default login/google-cloud-sdk/lib/surface/iap/oauth_clients/describe.yaml

@@ -0,0 +1,27 @@
+release_tracks: [ALPHA, BETA, GA]
+help_text:
+  brief: |
+    Describe a Cloud IAP OAuth client.
+  description: |
+    *{command}* is used to describe a Cloud IAP OAuth client. Note this command cannot be used to
+    describe any other type of OAuth client in your project.
+  examples: |
+    To describe a Cloud IAP OAuth client for the current project, run:
+
+        $ {command} NAME
+
+    To describe a Cloud IAP OAuth client for a specific brand, run:
+
+        $ {command} NAME --brand=BRAND
+
+request:
+  collection: iap.projects.brands.identityAwareProxyClients
+  api_version: v1
+
+arguments:
+  resource:
+    spec: !REF googlecloudsdk.command_lib.iap.resources:client
+    arg_name: name
+    is_positional: true
+    help_text: |
+      Name of the Cloud IAP OAuth client to describe.

gcloud auth application-default login/google-cloud-sdk/lib/surface/iap/oauth_clients/list.yaml

@@ -0,0 +1,23 @@
+- release_tracks: [ALPHA, BETA, GA]
+  help_text:
+    brief: |
+      List Cloud IAP OAuth clients in the Cloud OAuth brand.
+    description: |
+      *{command}* is used to list Cloud IAP OAuth clients in a Cloud OAuth brand. Note this command
+      will not list any other type of OAuth client in your project.
+    examples: |
+      To list the Cloud IAP OAuth clients for the current project, run:
+
+        $ {command} BRAND
+
+  request:
+    collection: iap.projects.brands.identityAwareProxyClients
+    api_version: v1
+
+  arguments:
+    resource:
+      spec: !REF googlecloudsdk.command_lib.iap.resources:brand
+      arg_name: name
+      is_positional: true
+      help_text: |
+        Name of the Cloud OAuth brand to list Cloud IAP OAuth clients under.

gcloud auth application-default login/google-cloud-sdk/lib/surface/iap/oauth_clients/reset_secret.yaml

@@ -0,0 +1,29 @@
+release_tracks: [ALPHA, BETA, GA]
+command_type: GENERIC
+help_text:
+  brief: |
+    Reset a Cloud IAP OAuth client secret.
+  description: |
+    *{command}* is used to reset a Cloud IAP OAuth client secret. Note this command cannot be used
+    to reset the secret for any other type of OAuth client in your project.
+  examples: |
+    To reset a Cloud IAP OAuth client secret, run:
+
+        $ {command} NAME
+
+    To reset a Cloud IAP OAuth client secret for a specific brand, run:
+
+        $ {command} NAME --brand=BRAND
+
+request:
+  collection: iap.projects.brands.identityAwareProxyClients
+  api_version: v1
+  method: resetSecret
+
+arguments:
+  resource:
+    spec: !REF googlecloudsdk.command_lib.iap.resources:client
+    arg_name: name
+    is_positional: true
+    help_text: |
+      Name of the Cloud IAP OAuth client whose secret will be reset.