feat: Add new gcloud commands, API clients, and third-party libraries across various services.

gcloud auth application-default login/google-cloud-sdk/lib/surface/pam/settings/__init__.py

@@ -0,0 +1,107 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+"""The command group for the PAM Settings CLI."""
+
+from __future__ import absolute_import
+from __future__ import division
+from __future__ import unicode_literals
+
+from googlecloudsdk.calliope import base
+
+
+@base.UniverseCompatible
+@base.ReleaseTracks(base.ReleaseTrack.ALPHA, base.ReleaseTrack.BETA)
+class Settings(base.Group):
+  r"""Manage Privileged Access Manager (PAM) Settings.
+
+  The `gcloud pam settings` command group lets you manage Privileged
+  Access Manager (PAM) settings.
+
+  ## EXAMPLES
+
+  To describe the PAM Settings on a project named `sample-project` and
+  in location `global`, run:
+
+      $ {command} describe --project=sample-project --location=global
+
+  To describe the PAM Settings on a folder with ID ``FOLDER_ID'' and in
+  location `global`, run:
+
+      $ {command} describe --folder=FOLDER_ID --location=global
+
+  To describe the PAM Settings on an organization with ID ``ORGANIZATION_ID''
+  and in location `global`, run:
+
+      $ {command} describe --organization=ORGANIZATION_ID --location=global
+
+  To describe the effective PAM Settings on a project named `sample-project` and
+  in location `global`, run:
+
+      $ {command} describe-effective --project=sample-project --location=global
+
+  To describe the effective PAM Settings on a folder with ID ``FOLDER_ID'' and
+  in location `global`, run:
+
+      $ {command} describe-effective --folder=FOLDER_ID --location=global
+
+  To describe the effective PAM Settings on an organization with ID
+  ``ORGANIZATION_ID'' and in location `global`, run:
+
+      $ {command} describe-effective --organization=ORGANIZATION_ID
+      --location=global
+
+  To export the PAM Settings configured on a project named `sample-project`,
+  and in location `global` to a local YAML file named
+  `pam-settings.yaml`, run:
+
+      $ {command} export --project=sample-project --location=global
+      --destination=pam-settings.yaml
+
+  To export the PAM Settings configured on a folder with ID ``FOLDER_ID'', and
+  in location `global` to a local YAML file named
+  `pam-settings.yaml`, run:
+
+      $ {command} export --folder=FOLDER_ID --location=global
+      --destination=pam-settings.yaml
+
+  To export the PAM settings configured for an organization with ID
+  `ORGANIZATION_ID` in location `global` to a local YAML file named
+  `pam-settings.yaml`, run:
+
+      $ {command} export --organization=ORGANIZATION_ID --location=global
+        --destination=pam-settings.yaml
+
+  To update the PAM Settings on a project named `sample-project` and in
+  location `global`, and the new updated settings configuration stored in a file
+  named `pam-settings.yaml`, run:
+
+      $ {command} update --project=sample-project --location=global
+      --settings-file=pam-settings.yaml
+
+  To update the PAM Settings on a folder with ID ``FOLDER_ID'' and in location
+  `global`, and the new updated settings configuration stored in a file named
+  `pam-settings.yaml`, run:
+
+      $ {command} update --folder=FOLDER_ID --location=global
+      --settings-file=pam-settings.yaml
+
+  To update the PAM Settings on an organization with ID ``ORGANIZATION_ID'' and
+  in location `global`, and the new updated settings configuration stored in a
+  file named `pam-settings.yaml`, run:
+
+      $ {command} update --organization=ORGANIZATION_ID --location=global
+      --settings-file=pam-settings.yaml
+  """

gcloud auth application-default login/google-cloud-sdk/lib/surface/pam/settings/describe.yaml

@@ -0,0 +1,39 @@
+- release_tracks: [ALPHA, BETA]
+  help_text:
+    brief: Show details of Privileged Access Manager (PAM) settings on a resource.
+    description: Show details of Privileged Access Manager (PAM) settings on a resource.
+    examples: |
+      The following command describes settings on a project named `sample-project`, and in location
+      `global`:
+
+      $ {command} --project=sample-project --location=global
+
+      The following command describes settings on a folder with ID ``FOLDER_ID'', and in location
+      `global`:
+
+      $ {command} --folder=FOLDER_ID --location=global
+
+      The following command describes settings on an organization with ID ``ORGANIZATION_ID'', and
+      in location `global`:
+
+      $ {command} --organization=ORGANIZATION_ID --location=global
+
+  request:
+    ALPHA:
+      api_version: v1alpha
+    BETA:
+      api_version: v1beta
+    method: getSettings
+    collection:
+    - privilegedaccessmanager.projects.locations
+    - privilegedaccessmanager.folders.locations
+    - privilegedaccessmanager.organizations.locations
+    modify_request_hooks:
+    - googlecloudsdk.command_lib.pam.util:UpdateSettingsResource
+  arguments:
+    resource:
+      arg_name: location
+      spec: !REF googlecloudsdk.command_lib.pam.resources:location
+      is_positional: false
+      help_text: |
+        The project/organization/folder location for which the settings are to be described.

gcloud auth application-default login/google-cloud-sdk/lib/surface/pam/settings/describe_effective.yaml

@@ -0,0 +1,44 @@
+- release_tracks: [ALPHA, BETA]
+  help_text:
+    brief: Show effective Privileged Access Manager (PAM) settings on a resource.
+    description: |
+      Show effective Privileged Access Manager (PAM) settings on a resource. The "effective value"
+      of a setting on a given resource refers to the final or active value of a setting
+      configuration that is applied to a resource.  For each configuration type field in settings
+      resource, a hierarchy evaluation will happen to calculate effective value on the resource
+      node.
+    examples: |
+      The following command describes effective settings on a project named `sample-project`, and
+      in location `global`:
+
+      $ {command} --project=sample-project --location=global
+
+      The following command describes effective settings on a folder with ID ``FOLDER_ID'', and in
+      location `global`:
+
+      $ {command} --folder=FOLDER_ID --location=global
+
+      The following command describes effective settings on an organization with ID
+      ``ORGANIZATION_ID'', and in location `global`:
+
+      $ {command} --organization=ORGANIZATION_ID --location=global
+
+  request:
+    ALPHA:
+      api_version: v1alpha
+    BETA:
+      api_version: v1beta
+    method: fetchEffectiveSettings
+    collection:
+    - privilegedaccessmanager.projects.locations
+    - privilegedaccessmanager.folders.locations
+    - privilegedaccessmanager.organizations.locations
+
+  arguments:
+    resource:
+      arg_name: location
+      spec: !REF googlecloudsdk.command_lib.pam.resources:location
+      is_positional: false
+      help_text: |
+        The project/organization/folder location for which the effective settings are to be
+        described.

gcloud auth application-default login/google-cloud-sdk/lib/surface/pam/settings/export.yaml

@@ -0,0 +1,44 @@
+- release_tracks: [ALPHA, BETA]
+  help_text:
+    brief: |
+      Export Privileged Access Manager (PAM) settings configured on a project, folder, or
+      organization to a local YAML file.
+    description: |
+      Export the Privileged Access Manager (PAM) settings configured for a specified project,
+      folder, or organization to a local YAML file.
+    examples: |
+      The following command exports PAM settings for the project named `sample-project` in location
+      `global` to a local YAML file named `pam-settings.yaml`:
+
+      $ {command} --project=sample-project --location=global --destination=pam-settings.yaml
+
+      The following command exports PAM settings for the folder with ID `FOLDER_ID` in location
+      `global` to a local YAML file named `pam-settings.yaml`:
+
+      $ {command} --folder=FOLDER_ID --location=global --destination=pam-settings.yaml
+
+      The following command exports PAM settings for the organization with ID `ORGANIZATION_ID` in
+      location `global` to a local YAML file named `pam-settings.yaml`:
+
+      $ {command} --organization=ORGANIZATION_ID --location=global --destination=pam-settings.yaml
+
+  request:
+    ALPHA:
+      api_version: v1alpha
+    BETA:
+      api_version: v1beta
+    method: getSettings
+    collection:
+    - privilegedaccessmanager.projects.locations
+    - privilegedaccessmanager.folders.locations
+    - privilegedaccessmanager.organizations.locations
+    modify_request_hooks:
+    - googlecloudsdk.command_lib.pam.util:UpdateSettingsResource
+
+  arguments:
+    resource:
+      arg_name: location
+      spec: !REF googlecloudsdk.command_lib.pam.resources:location
+      is_positional: false
+      help_text: |
+        The project/organization/folder location for which the settings needs to be exported.

gcloud auth application-default login/google-cloud-sdk/lib/surface/pam/settings/update.yaml

@@ -0,0 +1,65 @@
+- release_tracks: [ALPHA, BETA]
+  help_text:
+    brief: Update Privileged Access Manager (PAM) settings configured on a project, folder, or organization.
+    description: |
+      Update the Privileged Access Manager (PAM) settings configured for a specified project,
+      folder, or organization. This command allows you to modify the settings using a YAML file.
+    examples: |
+      The following command updates PAM settings for the project named `sample-project` in location
+      `global`, using the settings defined in a file named `pam_settings.yaml`:
+
+      $ {command} --project=sample-project --location=global --settings-file=pam_settings.yaml
+
+      The following command updates PAM settings for the folder with ID `FOLDER_ID` in location
+      `global`, using the settings defined in a file named `pam_settings.yaml`:
+
+      $ {command} --folder=FOLDER_ID --location=global --settings-file=pam_settings.yaml
+
+      The following command updates PAM settings for the organization with ID `ORGANIZATION_ID`
+      in location `global`, using the settings defined in a file named `pam_settings.yaml`:
+
+      $ {command} --organization=ORGANIZATION_ID --location=global --settings-file=pam_settings.yaml
+
+  request:
+    ALPHA:
+      api_version: v1alpha
+    BETA:
+      api_version: v1beta
+    method: updateSettings
+    collection:
+    - privilegedaccessmanager.projects.locations
+    - privilegedaccessmanager.folders.locations
+    - privilegedaccessmanager.organizations.locations
+    modify_request_hooks:
+    - googlecloudsdk.command_lib.pam.util:SetUpdateMaskInUpdateSettingsRequest
+    - googlecloudsdk.command_lib.pam.util:UpdateSettingsResource
+
+  arguments:
+    resource:
+      arg_name: location
+      is_positional: false
+      spec: !REF googlecloudsdk.command_lib.pam.resources:location
+      help_text: |
+        The project/organization/folder location for which the settings are to be updated.
+
+    params:
+    - arg_name: settings-file
+      api_field: settings
+      required: true
+      type: "googlecloudsdk.calliope.arg_parsers:FileContents:"
+      processor: googlecloudsdk.core.yaml:load
+      help_text: |
+        YAML file containing the new configuration of the PAM settings.
+
+  async:
+    ALPHA:
+      api_version: v1alpha
+    collection:
+    - privilegedaccessmanager.projects.locations.operations
+    - privilegedaccessmanager.folders.locations.operations
+    - privilegedaccessmanager.organizations.locations.operations
+    extract_resource_result: false
+    result_attribute: response
+
+  output:
+    format: yaml